g+0xdaf/0x2300 [ 2134.622151][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2134.622151][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2134.622151][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2134.622151][T15678] __do_fast_syscall_32+0x102/0x160 [ 2134.622151][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2134.622151][T15678] do_SYSENTER_32+0x73/0x90 [ 2134.622151][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2134.622151][T15678] [ 2134.622151][T15678] Uninit was stored to memory at: [ 2134.622151][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2134.622151][T15678] __msan_chain_origin+0x57/0xa0 [ 2134.622151][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2134.622151][T15678] get_compat_msghdr+0x108/0x2b0 [ 2134.622151][T15678] do_recvmmsg+0xdaf/0x2300 [ 2134.622151][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2134.622151][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2134.622151][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2134.622151][T15678] __do_fast_syscall_32+0x102/0x160 [ 2134.622151][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2134.622151][T15678] do_SYSENTER_32+0x73/0x90 [ 2134.622151][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2134.622151][T15678] [ 2134.622151][T15678] Uninit was stored to memory at: [ 2134.622151][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2134.622151][T15678] __msan_chain_origin+0x57/0xa0 [ 2134.622151][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2134.622151][T15678] get_compat_msghdr+0x108/0x2b0 [ 2134.622151][T15678] do_recvmmsg+0xdaf/0x2300 [ 2134.622151][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2134.622151][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2134.622151][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2134.622151][T15678] __do_fast_syscall_32+0x102/0x160 [ 2134.622151][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2134.622151][T15678] do_SYSENTER_32+0x73/0x90 [ 2134.622151][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2134.622151][T15678] [ 2134.622151][T15678] Uninit was stored to memory at: [ 2134.622151][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2134.622151][T15678] __msan_chain_origin+0x57/0xa0 [ 2134.622151][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2134.622151][T15678] get_compat_msghdr+0x108/0x2b0 [ 2134.622151][T15678] do_recvmmsg+0xdaf/0x2300 [ 2134.622151][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2134.622151][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2134.622151][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2134.622151][T15678] __do_fast_syscall_32+0x102/0x160 [ 2134.622151][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2134.622151][T15678] do_SYSENTER_32+0x73/0x90 [ 2134.622151][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2134.622151][T15678] [ 2134.622151][T15678] Uninit was stored to memory at: [ 2134.622151][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2134.622151][T15678] __msan_chain_origin+0x57/0xa0 [ 2134.622151][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2134.622151][T15678] get_compat_msghdr+0x108/0x2b0 [ 2134.622151][T15678] do_recvmmsg+0xdaf/0x2300 [ 2134.622151][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2134.622151][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2134.622151][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2134.622151][T15678] __do_fast_syscall_32+0x102/0x160 [ 2134.622151][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2134.622151][T15678] do_SYSENTER_32+0x73/0x90 [ 2134.622151][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2134.622151][T15678] [ 2134.622151][T15678] Uninit was stored to memory at: [ 2134.622151][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2134.622151][T15678] __msan_chain_origin+0x57/0xa0 [ 2134.622151][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2134.622151][T15678] get_compat_msghdr+0x108/0x2b0 [ 2134.622151][T15678] do_recvmmsg+0xdaf/0x2300 [ 2134.622151][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2134.622151][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2134.622151][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2134.622151][T15678] __do_fast_syscall_32+0x102/0x160 [ 2134.622151][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2134.622151][T15678] do_SYSENTER_32+0x73/0x90 [ 2134.622151][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2134.622151][T15678] [ 2134.622151][T15678] Uninit was stored to memory at: [ 2134.622151][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2134.622151][T15678] __msan_chain_origin+0x57/0xa0 [ 2134.622151][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2134.622151][T15678] get_compat_msghdr+0x108/0x2b0 [ 2134.622151][T15678] do_recvmmsg+0xdaf/0x2300 [ 2134.622151][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2134.622151][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2134.622151][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2134.622151][T15678] __do_fast_syscall_32+0x102/0x160 [ 2134.622151][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2134.622151][T15678] do_SYSENTER_32+0x73/0x90 [ 2134.622151][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2134.622151][T15678] [ 2134.622151][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2134.622151][T15678] do_recvmmsg+0xbc/0x2300 [ 2134.622151][T15678] do_recvmmsg+0xbc/0x2300 [ 2135.531129][T15690] not chained 1080000 origins [ 2135.531960][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2135.531960][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2135.531960][T15690] Call Trace: [ 2135.531960][T15690] dump_stack+0x21c/0x280 [ 2135.531960][T15690] ? __msan_get_context_state+0x9/0x20 [ 2135.531960][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2135.531960][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2135.531960][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2135.531960][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2135.531960][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2135.531960][T15690] ? release_sock+0x26a/0x2d0 [ 2135.531960][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2135.531960][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2135.531960][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2135.531960][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2135.531960][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2135.531960][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2135.531960][T15690] __msan_chain_origin+0x57/0xa0 [ 2135.531960][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2135.531960][T15690] get_compat_msghdr+0x108/0x2b0 [ 2135.531960][T15690] do_recvmmsg+0xdaf/0x2300 [ 2135.531960][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2135.531960][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2135.531960][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2135.531960][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2135.531960][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2135.531960][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2135.531960][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2135.531960][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2135.531960][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2135.531960][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2135.531960][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2135.531960][T15690] __do_fast_syscall_32+0x102/0x160 [ 2135.531960][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2135.531960][T15690] do_SYSENTER_32+0x73/0x90 [ 2135.531960][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2135.531960][T15690] RIP: 0023:0xf7f1a549 [ 2135.531960][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2135.531960][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2135.531960][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2135.531960][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2135.531960][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2135.531960][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2135.531960][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2135.531960][T15690] Uninit was stored to memory at: [ 2135.531960][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2135.531960][T15690] __msan_chain_origin+0x57/0xa0 [ 2135.531960][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2135.531960][T15690] get_compat_msghdr+0x108/0x2b0 [ 2135.531960][T15690] do_recvmmsg+0xdaf/0x2300 [ 2135.531960][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2135.531960][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2135.531960][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2135.531960][T15690] __do_fast_syscall_32+0x102/0x160 [ 2135.531960][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2135.531960][T15690] do_SYSENTER_32+0x73/0x90 [ 2135.531960][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2135.531960][T15690] [ 2135.531960][T15690] Uninit was stored to memory at: [ 2135.531960][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2135.531960][T15690] __msan_chain_origin+0x57/0xa0 [ 2135.531960][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2135.531960][T15690] get_compat_msghdr+0x108/0x2b0 [ 2135.531960][T15690] do_recvmmsg+0xdaf/0x2300 [ 2135.531960][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2135.531960][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2135.531960][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2135.531960][T15690] __do_fast_syscall_32+0x102/0x160 [ 2135.531960][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2135.531960][T15690] do_SYSENTER_32+0x73/0x90 [ 2135.531960][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2135.531960][T15690] [ 2135.531960][T15690] Uninit was stored to memory at: [ 2135.531960][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2135.531960][T15690] __msan_chain_origin+0x57/0xa0 [ 2135.531960][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2135.531960][T15690] get_compat_msghdr+0x108/0x2b0 [ 2135.531960][T15690] do_recvmmsg+0xdaf/0x2300 [ 2135.531960][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2135.531960][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2135.531960][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2135.531960][T15690] __do_fast_syscall_32+0x102/0x160 [ 2135.531960][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2135.531960][T15690] do_SYSENTER_32+0x73/0x90 [ 2135.531960][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2135.531960][T15690] [ 2135.531960][T15690] Uninit was stored to memory at: [ 2135.531960][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2135.531960][T15690] __msan_chain_origin+0x57/0xa0 [ 2135.531960][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2135.531960][T15690] get_compat_msghdr+0x108/0x2b0 [ 2135.531960][T15690] do_recvmmsg+0xdaf/0x2300 [ 2135.531960][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2135.531960][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2135.531960][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2135.531960][T15690] __do_fast_syscall_32+0x102/0x160 [ 2135.531960][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2135.531960][T15690] do_SYSENTER_32+0x73/0x90 [ 2135.531960][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2135.531960][T15690] [ 2135.531960][T15690] Uninit was stored to memory at: [ 2135.531960][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2135.531960][T15690] __msan_chain_origin+0x57/0xa0 [ 2135.531960][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2135.531960][T15690] get_compat_msghdr+0x108/0x2b0 [ 2135.531960][T15690] do_recvmmsg+0xdaf/0x2300 [ 2135.531960][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2135.531960][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2135.531960][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2135.531960][T15690] __do_fast_syscall_32+0x102/0x160 [ 2135.531960][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2135.531960][T15690] do_SYSENTER_32+0x73/0x90 [ 2135.531960][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2135.531960][T15690] [ 2135.531960][T15690] Uninit was stored to memory at: [ 2135.531960][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2135.531960][T15690] __msan_chain_origin+0x57/0xa0 [ 2135.531960][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2135.531960][T15690] get_compat_msghdr+0x108/0x2b0 [ 2135.531960][T15690] do_recvmmsg+0xdaf/0x2300 [ 2135.531960][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2135.531960][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2135.531960][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2135.531960][T15690] __do_fast_syscall_32+0x102/0x160 [ 2135.531960][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2135.531960][T15690] do_SYSENTER_32+0x73/0x90 [ 2135.531960][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2135.531960][T15690] [ 2135.531960][T15690] Uninit was stored to memory at: [ 2135.531960][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2135.531960][T15690] __msan_chain_origin+0x57/0xa0 [ 2135.531960][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2135.531960][T15690] get_compat_msghdr+0x108/0x2b0 [ 2135.531960][T15690] do_recvmmsg+0xdaf/0x2300 [ 2135.531960][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2135.531960][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2135.531960][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2135.531960][T15690] __do_fast_syscall_32+0x102/0x160 [ 2135.531960][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2135.531960][T15690] do_SYSENTER_32+0x73/0x90 [ 2135.531960][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2135.531960][T15690] [ 2135.531960][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2135.531960][T15690] do_recvmmsg+0xbc/0x2300 [ 2135.531960][T15690] do_recvmmsg+0xbc/0x2300 [ 2136.470473][T15678] not chained 1090000 origins [ 2136.471519][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2136.471519][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2136.471519][T15678] Call Trace: [ 2136.497282][T15678] dump_stack+0x21c/0x280 [ 2136.497282][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2136.497282][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2136.497282][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2136.497282][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2136.497282][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2136.497282][T15678] ? release_sock+0x26a/0x2d0 [ 2136.497282][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2136.497282][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2136.497282][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2136.497282][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2136.497282][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2136.497282][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2136.497282][T15678] __msan_chain_origin+0x57/0xa0 [ 2136.497282][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2136.497282][T15678] get_compat_msghdr+0x108/0x2b0 [ 2136.497282][T15678] do_recvmmsg+0xdaf/0x2300 [ 2136.497282][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2136.497282][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2136.497282][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2136.497282][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2136.497282][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2136.497282][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2136.497282][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2136.497282][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2136.497282][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2136.497282][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2136.497282][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2136.497282][T15678] __do_fast_syscall_32+0x102/0x160 [ 2136.497282][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2136.497282][T15678] do_SYSENTER_32+0x73/0x90 [ 2136.497282][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2136.497282][T15678] RIP: 0023:0xf7f1a549 [ 2136.497282][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2136.497282][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2136.497282][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2136.497282][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2136.497282][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2136.497282][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2136.497282][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2136.497282][T15678] Uninit was stored to memory at: [ 2136.497282][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2136.497282][T15678] __msan_chain_origin+0x57/0xa0 [ 2136.497282][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2136.497282][T15678] get_compat_msghdr+0x108/0x2b0 [ 2136.497282][T15678] do_recvmmsg+0xdaf/0x2300 [ 2136.497282][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2136.497282][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2136.497282][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2136.497282][T15678] __do_fast_syscall_32+0x102/0x160 [ 2136.497282][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2136.497282][T15678] do_SYSENTER_32+0x73/0x90 [ 2136.497282][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2136.497282][T15678] [ 2136.497282][T15678] Uninit was stored to memory at: [ 2136.497282][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2136.497282][T15678] __msan_chain_origin+0x57/0xa0 [ 2136.497282][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2136.497282][T15678] get_compat_msghdr+0x108/0x2b0 [ 2136.497282][T15678] do_recvmmsg+0xdaf/0x2300 [ 2136.497282][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2136.497282][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2136.497282][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2136.497282][T15678] __do_fast_syscall_32+0x102/0x160 [ 2136.497282][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2136.497282][T15678] do_SYSENTER_32+0x73/0x90 [ 2136.497282][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2136.497282][T15678] [ 2136.497282][T15678] Uninit was stored to memory at: [ 2136.497282][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2136.497282][T15678] __msan_chain_origin+0x57/0xa0 [ 2136.497282][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2136.497282][T15678] get_compat_msghdr+0x108/0x2b0 [ 2136.497282][T15678] do_recvmmsg+0xdaf/0x2300 [ 2136.497282][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2136.497282][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2136.497282][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2136.497282][T15678] __do_fast_syscall_32+0x102/0x160 [ 2136.497282][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2136.497282][T15678] do_SYSENTER_32+0x73/0x90 [ 2136.497282][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2136.497282][T15678] [ 2136.497282][T15678] Uninit was stored to memory at: [ 2136.497282][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2136.497282][T15678] __msan_chain_origin+0x57/0xa0 [ 2136.497282][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2136.497282][T15678] get_compat_msghdr+0x108/0x2b0 [ 2136.497282][T15678] do_recvmmsg+0xdaf/0x2300 [ 2136.497282][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2136.497282][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2136.497282][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2136.497282][T15678] __do_fast_syscall_32+0x102/0x160 [ 2136.497282][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2136.497282][T15678] do_SYSENTER_32+0x73/0x90 [ 2136.497282][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2136.497282][T15678] [ 2136.497282][T15678] Uninit was stored to memory at: [ 2136.497282][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2136.497282][T15678] __msan_chain_origin+0x57/0xa0 [ 2136.497282][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2136.497282][T15678] get_compat_msghdr+0x108/0x2b0 [ 2136.497282][T15678] do_recvmmsg+0xdaf/0x2300 [ 2136.497282][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2136.497282][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2136.497282][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2136.497282][T15678] __do_fast_syscall_32+0x102/0x160 [ 2136.497282][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2136.497282][T15678] do_SYSENTER_32+0x73/0x90 [ 2136.497282][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2136.497282][T15678] [ 2136.497282][T15678] Uninit was stored to memory at: [ 2136.497282][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2136.497282][T15678] __msan_chain_origin+0x57/0xa0 [ 2136.497282][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2136.497282][T15678] get_compat_msghdr+0x108/0x2b0 [ 2136.497282][T15678] do_recvmmsg+0xdaf/0x2300 [ 2136.497282][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2136.497282][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2136.497282][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2136.497282][T15678] __do_fast_syscall_32+0x102/0x160 [ 2136.497282][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2136.497282][T15678] do_SYSENTER_32+0x73/0x90 [ 2136.497282][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2136.497282][T15678] [ 2136.497282][T15678] Uninit was stored to memory at: [ 2136.497282][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2136.497282][T15678] __msan_chain_origin+0x57/0xa0 [ 2136.497282][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2136.497282][T15678] get_compat_msghdr+0x108/0x2b0 [ 2136.497282][T15678] do_recvmmsg+0xdaf/0x2300 [ 2136.497282][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2136.497282][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2136.497282][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2136.497282][T15678] __do_fast_syscall_32+0x102/0x160 [ 2136.497282][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2136.497282][T15678] do_SYSENTER_32+0x73/0x90 [ 2136.497282][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2136.497282][T15678] [ 2136.497282][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2136.497282][T15678] do_recvmmsg+0xbc/0x2300 [ 2136.497282][T15678] do_recvmmsg+0xbc/0x2300 [ 2137.404161][T15678] not chained 1100000 origins [ 2137.408898][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2137.411564][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2137.411564][T15678] Call Trace: [ 2137.411564][T15678] dump_stack+0x21c/0x280 [ 2137.411564][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2137.436741][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2137.436741][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2137.436741][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2137.436741][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2137.436741][T15678] ? release_sock+0x26a/0x2d0 [ 2137.436741][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2137.436741][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2137.436741][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2137.436741][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2137.436741][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2137.436741][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2137.436741][T15678] __msan_chain_origin+0x57/0xa0 [ 2137.436741][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2137.436741][T15678] get_compat_msghdr+0x108/0x2b0 [ 2137.436741][T15678] do_recvmmsg+0xdaf/0x2300 [ 2137.436741][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2137.436741][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2137.436741][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2137.436741][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2137.436741][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2137.436741][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2137.436741][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2137.436741][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2137.436741][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2137.436741][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2137.436741][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2137.436741][T15678] __do_fast_syscall_32+0x102/0x160 [ 2137.436741][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2137.436741][T15678] do_SYSENTER_32+0x73/0x90 [ 2137.436741][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2137.436741][T15678] RIP: 0023:0xf7f1a549 [ 2137.436741][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2137.436741][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2137.436741][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2137.436741][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2137.436741][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2137.436741][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2137.436741][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2137.436741][T15678] Uninit was stored to memory at: [ 2137.436741][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2137.436741][T15678] __msan_chain_origin+0x57/0xa0 [ 2137.436741][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2137.436741][T15678] get_compat_msghdr+0x108/0x2b0 [ 2137.436741][T15678] do_recvmmsg+0xdaf/0x2300 [ 2137.436741][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2137.436741][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2137.436741][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2137.436741][T15678] __do_fast_syscall_32+0x102/0x160 [ 2137.436741][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2137.436741][T15678] do_SYSENTER_32+0x73/0x90 [ 2137.436741][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2137.436741][T15678] [ 2137.436741][T15678] Uninit was stored to memory at: [ 2137.436741][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2137.436741][T15678] __msan_chain_origin+0x57/0xa0 [ 2137.436741][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2137.436741][T15678] get_compat_msghdr+0x108/0x2b0 [ 2137.436741][T15678] do_recvmmsg+0xdaf/0x2300 [ 2137.436741][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2137.436741][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2137.436741][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2137.436741][T15678] __do_fast_syscall_32+0x102/0x160 [ 2137.436741][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2137.436741][T15678] do_SYSENTER_32+0x73/0x90 [ 2137.436741][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2137.436741][T15678] [ 2137.436741][T15678] Uninit was stored to memory at: [ 2137.436741][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2137.436741][T15678] __msan_chain_origin+0x57/0xa0 [ 2137.436741][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2137.436741][T15678] get_compat_msghdr+0x108/0x2b0 [ 2137.436741][T15678] do_recvmmsg+0xdaf/0x2300 [ 2137.436741][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2137.436741][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2137.436741][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2137.436741][T15678] __do_fast_syscall_32+0x102/0x160 [ 2137.436741][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2137.436741][T15678] do_SYSENTER_32+0x73/0x90 [ 2137.436741][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2137.436741][T15678] [ 2137.436741][T15678] Uninit was stored to memory at: [ 2137.436741][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2137.436741][T15678] __msan_chain_origin+0x57/0xa0 [ 2137.436741][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2137.436741][T15678] get_compat_msghdr+0x108/0x2b0 [ 2137.436741][T15678] do_recvmmsg+0xdaf/0x2300 [ 2137.436741][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2137.436741][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2137.436741][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2137.436741][T15678] __do_fast_syscall_32+0x102/0x160 [ 2137.436741][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2137.436741][T15678] do_SYSENTER_32+0x73/0x90 [ 2137.436741][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2137.436741][T15678] [ 2137.436741][T15678] Uninit was stored to memory at: [ 2137.436741][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2137.436741][T15678] __msan_chain_origin+0x57/0xa0 [ 2137.436741][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2137.436741][T15678] get_compat_msghdr+0x108/0x2b0 [ 2137.436741][T15678] do_recvmmsg+0xdaf/0x2300 [ 2137.436741][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2137.436741][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2137.436741][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2137.436741][T15678] __do_fast_syscall_32+0x102/0x160 [ 2137.436741][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2137.436741][T15678] do_SYSENTER_32+0x73/0x90 [ 2137.436741][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2137.436741][T15678] [ 2137.436741][T15678] Uninit was stored to memory at: [ 2137.436741][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2137.436741][T15678] __msan_chain_origin+0x57/0xa0 [ 2137.436741][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2137.436741][T15678] get_compat_msghdr+0x108/0x2b0 [ 2137.436741][T15678] do_recvmmsg+0xdaf/0x2300 [ 2137.436741][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2137.436741][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2137.436741][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2137.436741][T15678] __do_fast_syscall_32+0x102/0x160 [ 2137.436741][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2137.436741][T15678] do_SYSENTER_32+0x73/0x90 [ 2137.436741][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2137.436741][T15678] [ 2137.436741][T15678] Uninit was stored to memory at: [ 2137.436741][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2137.436741][T15678] __msan_chain_origin+0x57/0xa0 [ 2137.436741][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2137.436741][T15678] get_compat_msghdr+0x108/0x2b0 [ 2137.436741][T15678] do_recvmmsg+0xdaf/0x2300 [ 2137.436741][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2137.436741][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2137.436741][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2137.436741][T15678] __do_fast_syscall_32+0x102/0x160 [ 2137.436741][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2137.436741][T15678] do_SYSENTER_32+0x73/0x90 [ 2137.436741][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2137.436741][T15678] [ 2137.436741][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2137.436741][T15678] do_recvmmsg+0xbc/0x2300 [ 2137.436741][T15678] do_recvmmsg+0xbc/0x2300 [ 2138.327511][T15690] not chained 1110000 origins [ 2138.331507][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2138.340527][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2138.340527][T15690] Call Trace: [ 2138.340527][T15690] dump_stack+0x21c/0x280 [ 2138.340527][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2138.340527][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2138.340527][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2138.340527][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2138.340527][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2138.340527][T15690] ? release_sock+0x26a/0x2d0 [ 2138.340527][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2138.340527][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2138.340527][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2138.340527][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2138.340527][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2138.340527][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2138.340527][T15690] __msan_chain_origin+0x57/0xa0 [ 2138.340527][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2138.340527][T15690] get_compat_msghdr+0x108/0x2b0 [ 2138.340527][T15690] do_recvmmsg+0xdaf/0x2300 [ 2138.340527][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2138.340527][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2138.340527][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2138.340527][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2138.340527][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2138.340527][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2138.340527][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2138.340527][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2138.340527][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2138.340527][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2138.340527][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2138.340527][T15690] __do_fast_syscall_32+0x102/0x160 [ 2138.340527][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2138.340527][T15690] do_SYSENTER_32+0x73/0x90 [ 2138.340527][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2138.340527][T15690] RIP: 0023:0xf7f1a549 [ 2138.340527][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2138.340527][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2138.340527][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2138.340527][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2138.340527][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2138.340527][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2138.340527][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2138.340527][T15690] Uninit was stored to memory at: [ 2138.340527][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2138.340527][T15690] __msan_chain_origin+0x57/0xa0 [ 2138.340527][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2138.340527][T15690] get_compat_msghdr+0x108/0x2b0 [ 2138.340527][T15690] do_recvmmsg+0xdaf/0x2300 [ 2138.340527][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2138.340527][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2138.631866][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2138.631866][T15690] __do_fast_syscall_32+0x102/0x160 [ 2138.631866][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2138.631866][T15690] do_SYSENTER_32+0x73/0x90 [ 2138.631866][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2138.631866][T15690] [ 2138.631866][T15690] Uninit was stored to memory at: [ 2138.631866][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2138.631866][T15690] __msan_chain_origin+0x57/0xa0 [ 2138.631866][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2138.631866][T15690] get_compat_msghdr+0x108/0x2b0 [ 2138.631866][T15690] do_recvmmsg+0xdaf/0x2300 [ 2138.631866][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2138.631866][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2138.631866][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2138.631866][T15690] __do_fast_syscall_32+0x102/0x160 [ 2138.631866][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2138.631866][T15690] do_SYSENTER_32+0x73/0x90 [ 2138.631866][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2138.631866][T15690] [ 2138.631866][T15690] Uninit was stored to memory at: [ 2138.631866][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2138.631866][T15690] __msan_chain_origin+0x57/0xa0 [ 2138.631866][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2138.631866][T15690] get_compat_msghdr+0x108/0x2b0 [ 2138.631866][T15690] do_recvmmsg+0xdaf/0x2300 [ 2138.631866][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2138.631866][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2138.631866][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2138.631866][T15690] __do_fast_syscall_32+0x102/0x160 [ 2138.631866][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2138.631866][T15690] do_SYSENTER_32+0x73/0x90 [ 2138.631866][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2138.631866][T15690] [ 2138.631866][T15690] Uninit was stored to memory at: [ 2138.631866][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2138.631866][T15690] __msan_chain_origin+0x57/0xa0 [ 2138.631866][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2138.631866][T15690] get_compat_msghdr+0x108/0x2b0 [ 2138.631866][T15690] do_recvmmsg+0xdaf/0x2300 [ 2138.631866][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2138.631866][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2138.631866][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2138.631866][T15690] __do_fast_syscall_32+0x102/0x160 [ 2138.631866][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2138.631866][T15690] do_SYSENTER_32+0x73/0x90 [ 2138.631866][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2138.631866][T15690] [ 2138.631866][T15690] Uninit was stored to memory at: [ 2138.631866][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2138.631866][T15690] __msan_chain_origin+0x57/0xa0 [ 2138.631866][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2138.631866][T15690] get_compat_msghdr+0x108/0x2b0 [ 2138.631866][T15690] do_recvmmsg+0xdaf/0x2300 [ 2138.631866][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2138.631866][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2138.631866][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2138.631866][T15690] __do_fast_syscall_32+0x102/0x160 [ 2138.631866][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2138.631866][T15690] do_SYSENTER_32+0x73/0x90 [ 2138.631866][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2138.631866][T15690] [ 2138.631866][T15690] Uninit was stored to memory at: [ 2138.631866][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2138.631866][T15690] __msan_chain_origin+0x57/0xa0 [ 2138.631866][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2138.631866][T15690] get_compat_msghdr+0x108/0x2b0 [ 2138.631866][T15690] do_recvmmsg+0xdaf/0x2300 [ 2138.631866][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2138.631866][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2138.631866][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2138.631866][T15690] __do_fast_syscall_32+0x102/0x160 [ 2138.631866][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2138.631866][T15690] do_SYSENTER_32+0x73/0x90 [ 2138.631866][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2138.631866][T15690] [ 2138.631866][T15690] Uninit was stored to memory at: [ 2138.631866][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2138.631866][T15690] __msan_chain_origin+0x57/0xa0 [ 2138.631866][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2138.631866][T15690] get_compat_msghdr+0x108/0x2b0 [ 2138.631866][T15690] do_recvmmsg+0xdaf/0x2300 [ 2138.631866][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2138.631866][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2138.631866][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2138.631866][T15690] __do_fast_syscall_32+0x102/0x160 [ 2138.631866][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2138.631866][T15690] do_SYSENTER_32+0x73/0x90 [ 2138.631866][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2138.631866][T15690] [ 2138.631866][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2138.631866][T15690] do_recvmmsg+0xbc/0x2300 [ 2138.631866][T15690] do_recvmmsg+0xbc/0x2300 [ 2139.250304][T15678] not chained 1120000 origins [ 2139.251512][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2139.262312][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2139.262312][T15678] Call Trace: [ 2139.262312][T15678] dump_stack+0x21c/0x280 [ 2139.262312][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2139.262312][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2139.262312][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2139.262312][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2139.262312][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2139.262312][T15678] ? release_sock+0x26a/0x2d0 [ 2139.262312][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2139.262312][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2139.262312][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2139.262312][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2139.262312][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2139.262312][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2139.262312][T15678] __msan_chain_origin+0x57/0xa0 [ 2139.262312][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2139.262312][T15678] get_compat_msghdr+0x108/0x2b0 [ 2139.262312][T15678] do_recvmmsg+0xdaf/0x2300 [ 2139.262312][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2139.262312][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2139.262312][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2139.262312][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2139.262312][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2139.262312][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2139.262312][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2139.262312][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2139.262312][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2139.262312][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2139.262312][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2139.262312][T15678] __do_fast_syscall_32+0x102/0x160 [ 2139.262312][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2139.262312][T15678] do_SYSENTER_32+0x73/0x90 [ 2139.262312][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2139.262312][T15678] RIP: 0023:0xf7f1a549 [ 2139.262312][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2139.262312][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2139.262312][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2139.483867][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2139.483867][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2139.483867][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2139.483867][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2139.483867][T15678] Uninit was stored to memory at: [ 2139.483867][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2139.483867][T15678] __msan_chain_origin+0x57/0xa0 [ 2139.483867][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2139.483867][T15678] get_compat_msghdr+0x108/0x2b0 [ 2139.483867][T15678] do_recvmmsg+0xdaf/0x2300 [ 2139.483867][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2139.483867][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2139.483867][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2139.483867][T15678] __do_fast_syscall_32+0x102/0x160 [ 2139.483867][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2139.483867][T15678] do_SYSENTER_32+0x73/0x90 [ 2139.483867][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2139.483867][T15678] [ 2139.483867][T15678] Uninit was stored to memory at: [ 2139.483867][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2139.483867][T15678] __msan_chain_origin+0x57/0xa0 [ 2139.483867][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2139.483867][T15678] get_compat_msghdr+0x108/0x2b0 [ 2139.483867][T15678] do_recvmmsg+0xdaf/0x2300 [ 2139.483867][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2139.483867][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2139.483867][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2139.483867][T15678] __do_fast_syscall_32+0x102/0x160 [ 2139.483867][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2139.483867][T15678] do_SYSENTER_32+0x73/0x90 [ 2139.483867][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2139.483867][T15678] [ 2139.483867][T15678] Uninit was stored to memory at: [ 2139.483867][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2139.483867][T15678] __msan_chain_origin+0x57/0xa0 [ 2139.483867][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2139.483867][T15678] get_compat_msghdr+0x108/0x2b0 [ 2139.483867][T15678] do_recvmmsg+0xdaf/0x2300 [ 2139.483867][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2139.483867][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2139.483867][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2139.483867][T15678] __do_fast_syscall_32+0x102/0x160 [ 2139.483867][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2139.483867][T15678] do_SYSENTER_32+0x73/0x90 [ 2139.483867][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2139.483867][T15678] [ 2139.483867][T15678] Uninit was stored to memory at: [ 2139.483867][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2139.483867][T15678] __msan_chain_origin+0x57/0xa0 [ 2139.483867][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2139.483867][T15678] get_compat_msghdr+0x108/0x2b0 [ 2139.483867][T15678] do_recvmmsg+0xdaf/0x2300 [ 2139.483867][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2139.483867][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2139.483867][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2139.483867][T15678] __do_fast_syscall_32+0x102/0x160 [ 2139.483867][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2139.483867][T15678] do_SYSENTER_32+0x73/0x90 [ 2139.483867][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2139.483867][T15678] [ 2139.483867][T15678] Uninit was stored to memory at: [ 2139.483867][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2139.483867][T15678] __msan_chain_origin+0x57/0xa0 [ 2139.483867][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2139.483867][T15678] get_compat_msghdr+0x108/0x2b0 [ 2139.483867][T15678] do_recvmmsg+0xdaf/0x2300 [ 2139.483867][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2139.483867][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2139.483867][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2139.483867][T15678] __do_fast_syscall_32+0x102/0x160 [ 2139.483867][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2139.483867][T15678] do_SYSENTER_32+0x73/0x90 [ 2139.483867][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2139.483867][T15678] [ 2139.483867][T15678] Uninit was stored to memory at: [ 2139.483867][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2139.483867][T15678] __msan_chain_origin+0x57/0xa0 [ 2139.483867][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2139.483867][T15678] get_compat_msghdr+0x108/0x2b0 [ 2139.483867][T15678] do_recvmmsg+0xdaf/0x2300 [ 2139.483867][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2139.483867][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2139.483867][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2139.483867][T15678] __do_fast_syscall_32+0x102/0x160 [ 2139.483867][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2139.483867][T15678] do_SYSENTER_32+0x73/0x90 [ 2139.483867][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2139.483867][T15678] [ 2139.483867][T15678] Uninit was stored to memory at: [ 2139.483867][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2139.483867][T15678] __msan_chain_origin+0x57/0xa0 [ 2139.483867][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2139.483867][T15678] get_compat_msghdr+0x108/0x2b0 [ 2139.483867][T15678] do_recvmmsg+0xdaf/0x2300 [ 2139.483867][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2139.483867][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2139.483867][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2139.483867][T15678] __do_fast_syscall_32+0x102/0x160 [ 2139.483867][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2139.483867][T15678] do_SYSENTER_32+0x73/0x90 [ 2139.483867][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2139.483867][T15678] [ 2139.483867][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2139.483867][T15678] do_recvmmsg+0xbc/0x2300 [ 2139.483867][T15678] do_recvmmsg+0xbc/0x2300 [ 2140.187604][T15690] not chained 1130000 origins [ 2140.191495][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2140.191495][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2140.201643][T15690] Call Trace: [ 2140.201643][T15690] dump_stack+0x21c/0x280 [ 2140.201643][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2140.201643][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2140.201643][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2140.231703][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2140.231703][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2140.231703][T15690] ? release_sock+0x26a/0x2d0 [ 2140.231703][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2140.231703][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2140.261658][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2140.261676][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2140.261676][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2140.261676][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2140.261676][T15690] __msan_chain_origin+0x57/0xa0 [ 2140.261676][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2140.261676][T15690] get_compat_msghdr+0x108/0x2b0 [ 2140.261676][T15690] do_recvmmsg+0xdaf/0x2300 [ 2140.261676][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2140.261676][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2140.261676][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2140.261676][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2140.261676][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2140.261676][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2140.261676][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2140.261676][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2140.261676][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2140.261676][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2140.261676][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2140.261676][T15690] __do_fast_syscall_32+0x102/0x160 [ 2140.261676][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2140.261676][T15690] do_SYSENTER_32+0x73/0x90 [ 2140.261676][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2140.261676][T15690] RIP: 0023:0xf7f1a549 [ 2140.261676][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2140.261676][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2140.261676][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2140.261676][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2140.261676][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2140.261676][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2140.261676][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2140.261676][T15690] Uninit was stored to memory at: [ 2140.261676][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2140.261676][T15690] __msan_chain_origin+0x57/0xa0 [ 2140.261676][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2140.261676][T15690] get_compat_msghdr+0x108/0x2b0 [ 2140.261676][T15690] do_recvmmsg+0xdaf/0x2300 [ 2140.261676][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2140.261676][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2140.261676][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2140.261676][T15690] __do_fast_syscall_32+0x102/0x160 [ 2140.261676][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2140.261676][T15690] do_SYSENTER_32+0x73/0x90 [ 2140.261676][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2140.261676][T15690] [ 2140.261676][T15690] Uninit was stored to memory at: [ 2140.261676][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2140.261676][T15690] __msan_chain_origin+0x57/0xa0 [ 2140.261676][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2140.261676][T15690] get_compat_msghdr+0x108/0x2b0 [ 2140.261676][T15690] do_recvmmsg+0xdaf/0x2300 [ 2140.261676][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2140.261676][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2140.261676][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2140.261676][T15690] __do_fast_syscall_32+0x102/0x160 [ 2140.261676][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2140.261676][T15690] do_SYSENTER_32+0x73/0x90 [ 2140.261676][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2140.594481][T15690] [ 2140.594481][T15690] Uninit was stored to memory at: [ 2140.594481][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2140.594481][T15690] __msan_chain_origin+0x57/0xa0 [ 2140.594481][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2140.594481][T15690] get_compat_msghdr+0x108/0x2b0 [ 2140.594481][T15690] do_recvmmsg+0xdaf/0x2300 [ 2140.594481][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2140.594481][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2140.594481][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2140.594481][T15690] __do_fast_syscall_32+0x102/0x160 [ 2140.594481][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2140.594481][T15690] do_SYSENTER_32+0x73/0x90 [ 2140.594481][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2140.594481][T15690] [ 2140.594481][T15690] Uninit was stored to memory at: [ 2140.594481][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2140.594481][T15690] __msan_chain_origin+0x57/0xa0 [ 2140.594481][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2140.594481][T15690] get_compat_msghdr+0x108/0x2b0 [ 2140.594481][T15690] do_recvmmsg+0xdaf/0x2300 [ 2140.594481][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2140.594481][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2140.594481][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2140.594481][T15690] __do_fast_syscall_32+0x102/0x160 [ 2140.594481][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2140.721702][T15690] do_SYSENTER_32+0x73/0x90 [ 2140.721702][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2140.721702][T15690] [ 2140.721702][T15690] Uninit was stored to memory at: [ 2140.721702][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2140.721702][T15690] __msan_chain_origin+0x57/0xa0 [ 2140.721702][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2140.721702][T15690] get_compat_msghdr+0x108/0x2b0 [ 2140.721702][T15690] do_recvmmsg+0xdaf/0x2300 [ 2140.721702][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2140.721702][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2140.721702][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2140.721702][T15690] __do_fast_syscall_32+0x102/0x160 [ 2140.721702][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2140.721702][T15690] do_SYSENTER_32+0x73/0x90 [ 2140.721702][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2140.721702][T15690] [ 2140.721702][T15690] Uninit was stored to memory at: [ 2140.721702][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2140.721702][T15690] __msan_chain_origin+0x57/0xa0 [ 2140.721702][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2140.721702][T15690] get_compat_msghdr+0x108/0x2b0 [ 2140.721702][T15690] do_recvmmsg+0xdaf/0x2300 [ 2140.721702][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2140.721702][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2140.721702][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2140.721702][T15690] __do_fast_syscall_32+0x102/0x160 [ 2140.721702][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2140.721702][T15690] do_SYSENTER_32+0x73/0x90 [ 2140.721702][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2140.721702][T15690] [ 2140.721702][T15690] Uninit was stored to memory at: [ 2140.721702][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2140.721702][T15690] __msan_chain_origin+0x57/0xa0 [ 2140.721702][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2140.721702][T15690] get_compat_msghdr+0x108/0x2b0 [ 2140.721702][T15690] do_recvmmsg+0xdaf/0x2300 [ 2140.721702][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2140.721702][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2140.721702][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2140.721702][T15690] __do_fast_syscall_32+0x102/0x160 [ 2140.721702][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2140.721702][T15690] do_SYSENTER_32+0x73/0x90 [ 2140.721702][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2140.721702][T15690] [ 2140.721702][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2140.721702][T15690] do_recvmmsg+0xbc/0x2300 [ 2140.721702][T15690] do_recvmmsg+0xbc/0x2300 [ 2141.036573][T15678] not chained 1140000 origins [ 2141.041302][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2141.041487][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.041487][T15678] Call Trace: [ 2141.041487][T15678] dump_stack+0x21c/0x280 [ 2141.041487][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2141.071613][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2141.071613][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2141.071613][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2141.071613][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2141.071613][T15678] ? release_sock+0x26a/0x2d0 [ 2141.071613][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2141.071613][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2141.106754][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2141.106754][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2141.106754][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2141.106754][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2141.106754][T15678] __msan_chain_origin+0x57/0xa0 [ 2141.106754][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2141.106754][T15678] get_compat_msghdr+0x108/0x2b0 [ 2141.106754][T15678] do_recvmmsg+0xdaf/0x2300 [ 2141.106754][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2141.106754][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2141.106754][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2141.106754][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2141.106754][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2141.106754][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2141.106754][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2141.106754][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2141.106754][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2141.106754][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2141.106754][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2141.106754][T15678] __do_fast_syscall_32+0x102/0x160 [ 2141.106754][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2141.217871][T15678] do_SYSENTER_32+0x73/0x90 [ 2141.217871][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2141.217871][T15678] RIP: 0023:0xf7f1a549 [ 2141.217871][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2141.217871][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2141.217871][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2141.217871][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2141.217871][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2141.217871][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2141.217871][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2141.217871][T15678] Uninit was stored to memory at: [ 2141.217871][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2141.217871][T15678] __msan_chain_origin+0x57/0xa0 [ 2141.217871][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2141.217871][T15678] get_compat_msghdr+0x108/0x2b0 [ 2141.217871][T15678] do_recvmmsg+0xdaf/0x2300 [ 2141.217871][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2141.217871][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2141.217871][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2141.217871][T15678] __do_fast_syscall_32+0x102/0x160 [ 2141.217871][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2141.217871][T15678] do_SYSENTER_32+0x73/0x90 [ 2141.217871][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2141.217871][T15678] [ 2141.217871][T15678] Uninit was stored to memory at: [ 2141.217871][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2141.217871][T15678] __msan_chain_origin+0x57/0xa0 [ 2141.217871][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2141.217871][T15678] get_compat_msghdr+0x108/0x2b0 [ 2141.217871][T15678] do_recvmmsg+0xdaf/0x2300 [ 2141.217871][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2141.217871][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2141.217871][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2141.217871][T15678] __do_fast_syscall_32+0x102/0x160 [ 2141.217871][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2141.217871][T15678] do_SYSENTER_32+0x73/0x90 [ 2141.217871][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2141.217871][T15678] [ 2141.217871][T15678] Uninit was stored to memory at: [ 2141.217871][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2141.217871][T15678] __msan_chain_origin+0x57/0xa0 [ 2141.217871][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2141.217871][T15678] get_compat_msghdr+0x108/0x2b0 [ 2141.217871][T15678] do_recvmmsg+0xdaf/0x2300 [ 2141.217871][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2141.217871][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2141.217871][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2141.217871][T15678] __do_fast_syscall_32+0x102/0x160 [ 2141.217871][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2141.217871][T15678] do_SYSENTER_32+0x73/0x90 [ 2141.217871][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2141.217871][T15678] [ 2141.217871][T15678] Uninit was stored to memory at: [ 2141.217871][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2141.217871][T15678] __msan_chain_origin+0x57/0xa0 [ 2141.217871][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2141.217871][T15678] get_compat_msghdr+0x108/0x2b0 [ 2141.217871][T15678] do_recvmmsg+0xdaf/0x2300 [ 2141.217871][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2141.217871][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2141.217871][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2141.217871][T15678] __do_fast_syscall_32+0x102/0x160 [ 2141.217871][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2141.217871][T15678] do_SYSENTER_32+0x73/0x90 [ 2141.217871][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2141.217871][T15678] [ 2141.217871][T15678] Uninit was stored to memory at: [ 2141.217871][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2141.217871][T15678] __msan_chain_origin+0x57/0xa0 [ 2141.217871][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2141.217871][T15678] get_compat_msghdr+0x108/0x2b0 [ 2141.217871][T15678] do_recvmmsg+0xdaf/0x2300 [ 2141.217871][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2141.217871][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2141.217871][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2141.217871][T15678] __do_fast_syscall_32+0x102/0x160 [ 2141.217871][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2141.217871][T15678] do_SYSENTER_32+0x73/0x90 [ 2141.217871][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2141.217871][T15678] [ 2141.217871][T15678] Uninit was stored to memory at: [ 2141.217871][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2141.217871][T15678] __msan_chain_origin+0x57/0xa0 [ 2141.217871][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2141.217871][T15678] get_compat_msghdr+0x108/0x2b0 [ 2141.217871][T15678] do_recvmmsg+0xdaf/0x2300 [ 2141.217871][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2141.217871][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2141.217871][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2141.217871][T15678] __do_fast_syscall_32+0x102/0x160 [ 2141.217871][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2141.217871][T15678] do_SYSENTER_32+0x73/0x90 [ 2141.217871][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2141.217871][T15678] [ 2141.217871][T15678] Uninit was stored to memory at: [ 2141.217871][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2141.217871][T15678] __msan_chain_origin+0x57/0xa0 [ 2141.217871][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2141.217871][T15678] get_compat_msghdr+0x108/0x2b0 [ 2141.217871][T15678] do_recvmmsg+0xdaf/0x2300 [ 2141.217871][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2141.217871][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2141.217871][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2141.217871][T15678] __do_fast_syscall_32+0x102/0x160 [ 2141.217871][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2141.217871][T15678] do_SYSENTER_32+0x73/0x90 [ 2141.217871][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2141.217871][T15678] [ 2141.217871][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2141.217871][T15678] do_recvmmsg+0xbc/0x2300 [ 2141.217871][T15678] do_recvmmsg+0xbc/0x2300 [ 2141.958287][T15678] not chained 1150000 origins [ 2141.961498][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2141.961498][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2141.961498][T15678] Call Trace: [ 2141.961498][T15678] dump_stack+0x21c/0x280 [ 2141.961498][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2141.961498][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2141.961498][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2141.961498][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2141.961498][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2141.961498][T15678] ? release_sock+0x26a/0x2d0 [ 2141.961498][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2141.961498][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2142.027932][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2142.027932][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2142.027932][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2142.027932][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2142.027932][T15678] __msan_chain_origin+0x57/0xa0 [ 2142.027932][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2142.027932][T15678] get_compat_msghdr+0x108/0x2b0 [ 2142.027932][T15678] do_recvmmsg+0xdaf/0x2300 [ 2142.027932][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2142.027932][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2142.027932][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2142.027932][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2142.027932][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2142.027932][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2142.027932][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2142.027932][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2142.027932][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2142.027932][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.027932][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.027932][T15678] __do_fast_syscall_32+0x102/0x160 [ 2142.027932][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2142.027932][T15678] do_SYSENTER_32+0x73/0x90 [ 2142.027932][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.027932][T15678] RIP: 0023:0xf7f1a549 [ 2142.027932][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2142.027932][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2142.027932][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2142.027932][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2142.027932][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2142.027932][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2142.027932][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2142.027932][T15678] Uninit was stored to memory at: [ 2142.027932][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2142.027932][T15678] __msan_chain_origin+0x57/0xa0 [ 2142.241650][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2142.241650][T15678] get_compat_msghdr+0x108/0x2b0 [ 2142.241650][T15678] do_recvmmsg+0xdaf/0x2300 [ 2142.241650][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2142.241650][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.241650][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.241650][T15678] __do_fast_syscall_32+0x102/0x160 [ 2142.241650][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2142.241650][T15678] do_SYSENTER_32+0x73/0x90 [ 2142.241650][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.241650][T15678] [ 2142.241650][T15678] Uninit was stored to memory at: [ 2142.241650][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2142.241650][T15678] __msan_chain_origin+0x57/0xa0 [ 2142.241650][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2142.241650][T15678] get_compat_msghdr+0x108/0x2b0 [ 2142.241650][T15678] do_recvmmsg+0xdaf/0x2300 [ 2142.241650][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2142.241650][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.241650][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.241650][T15678] __do_fast_syscall_32+0x102/0x160 [ 2142.241650][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2142.351756][T15678] do_SYSENTER_32+0x73/0x90 [ 2142.351756][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.351756][T15678] [ 2142.351756][T15678] Uninit was stored to memory at: [ 2142.351756][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2142.351756][T15678] __msan_chain_origin+0x57/0xa0 [ 2142.351756][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2142.351756][T15678] get_compat_msghdr+0x108/0x2b0 [ 2142.351756][T15678] do_recvmmsg+0xdaf/0x2300 [ 2142.351756][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2142.351756][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.351756][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.351756][T15678] __do_fast_syscall_32+0x102/0x160 [ 2142.351756][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2142.351756][T15678] do_SYSENTER_32+0x73/0x90 [ 2142.351756][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.351756][T15678] [ 2142.351756][T15678] Uninit was stored to memory at: [ 2142.441664][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2142.441664][T15678] __msan_chain_origin+0x57/0xa0 [ 2142.441664][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2142.441664][T15678] get_compat_msghdr+0x108/0x2b0 [ 2142.441664][T15678] do_recvmmsg+0xdaf/0x2300 [ 2142.441664][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2142.441664][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.441664][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.441664][T15678] __do_fast_syscall_32+0x102/0x160 [ 2142.441664][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2142.441664][T15678] do_SYSENTER_32+0x73/0x90 [ 2142.441664][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.441664][T15678] [ 2142.441664][T15678] Uninit was stored to memory at: [ 2142.441664][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2142.441664][T15678] __msan_chain_origin+0x57/0xa0 [ 2142.441664][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2142.441664][T15678] get_compat_msghdr+0x108/0x2b0 [ 2142.441664][T15678] do_recvmmsg+0xdaf/0x2300 [ 2142.441664][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2142.441664][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.441664][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.441664][T15678] __do_fast_syscall_32+0x102/0x160 [ 2142.441664][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2142.441664][T15678] do_SYSENTER_32+0x73/0x90 [ 2142.441664][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.441664][T15678] [ 2142.441664][T15678] Uninit was stored to memory at: [ 2142.441664][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2142.441664][T15678] __msan_chain_origin+0x57/0xa0 [ 2142.441664][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2142.441664][T15678] get_compat_msghdr+0x108/0x2b0 [ 2142.441664][T15678] do_recvmmsg+0xdaf/0x2300 [ 2142.441664][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2142.441664][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.441664][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.441664][T15678] __do_fast_syscall_32+0x102/0x160 [ 2142.441664][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2142.441664][T15678] do_SYSENTER_32+0x73/0x90 [ 2142.441664][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.441664][T15678] [ 2142.441664][T15678] Uninit was stored to memory at: [ 2142.441664][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2142.441664][T15678] __msan_chain_origin+0x57/0xa0 [ 2142.441664][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2142.441664][T15678] get_compat_msghdr+0x108/0x2b0 [ 2142.441664][T15678] do_recvmmsg+0xdaf/0x2300 [ 2142.441664][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2142.441664][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.441664][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.441664][T15678] __do_fast_syscall_32+0x102/0x160 [ 2142.441664][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2142.441664][T15678] do_SYSENTER_32+0x73/0x90 [ 2142.441664][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.441664][T15678] [ 2142.441664][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2142.441664][T15678] do_recvmmsg+0xbc/0x2300 [ 2142.441664][T15678] do_recvmmsg+0xbc/0x2300 [ 2142.803823][T15690] not chained 1160000 origins [ 2142.808596][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2142.811592][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2142.811592][T15690] Call Trace: [ 2142.811592][T15690] dump_stack+0x21c/0x280 [ 2142.811592][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2142.811592][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2142.811592][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2142.851761][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2142.851761][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2142.851761][T15690] ? release_sock+0x26a/0x2d0 [ 2142.851761][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2142.851761][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2142.851761][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2142.851761][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2142.851761][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2142.851761][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2142.851761][T15690] __msan_chain_origin+0x57/0xa0 [ 2142.851761][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2142.851761][T15690] get_compat_msghdr+0x108/0x2b0 [ 2142.851761][T15690] do_recvmmsg+0xdaf/0x2300 [ 2142.851761][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2142.851761][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2142.851761][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2142.851761][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2142.851761][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2142.941620][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2142.941620][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2142.941620][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2142.941620][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2142.941620][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.971761][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.971761][T15690] __do_fast_syscall_32+0x102/0x160 [ 2142.971761][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2142.971761][T15690] do_SYSENTER_32+0x73/0x90 [ 2142.971761][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.971761][T15690] RIP: 0023:0xf7f1a549 [ 2142.971761][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2142.971761][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2142.971761][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2142.971761][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2142.971761][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2142.971761][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2142.971761][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2142.971761][T15690] Uninit was stored to memory at: [ 2142.971761][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2142.971761][T15690] __msan_chain_origin+0x57/0xa0 [ 2142.971761][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2142.971761][T15690] get_compat_msghdr+0x108/0x2b0 [ 2142.971761][T15690] do_recvmmsg+0xdaf/0x2300 [ 2142.971761][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2142.971761][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.971761][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.971761][T15690] __do_fast_syscall_32+0x102/0x160 [ 2142.971761][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2142.971761][T15690] do_SYSENTER_32+0x73/0x90 [ 2142.971761][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.971761][T15690] [ 2142.971761][T15690] Uninit was stored to memory at: [ 2142.971761][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2142.971761][T15690] __msan_chain_origin+0x57/0xa0 [ 2142.971761][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2142.971761][T15690] get_compat_msghdr+0x108/0x2b0 [ 2142.971761][T15690] do_recvmmsg+0xdaf/0x2300 [ 2142.971761][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2142.971761][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.971761][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.971761][T15690] __do_fast_syscall_32+0x102/0x160 [ 2142.971761][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2142.971761][T15690] do_SYSENTER_32+0x73/0x90 [ 2142.971761][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.971761][T15690] [ 2142.971761][T15690] Uninit was stored to memory at: [ 2142.971761][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2142.971761][T15690] __msan_chain_origin+0x57/0xa0 [ 2142.971761][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2142.971761][T15690] get_compat_msghdr+0x108/0x2b0 [ 2142.971761][T15690] do_recvmmsg+0xdaf/0x2300 [ 2142.971761][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2142.971761][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.971761][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.971761][T15690] __do_fast_syscall_32+0x102/0x160 [ 2142.971761][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2142.971761][T15690] do_SYSENTER_32+0x73/0x90 [ 2142.971761][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.971761][T15690] [ 2142.971761][T15690] Uninit was stored to memory at: [ 2142.971761][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2142.971761][T15690] __msan_chain_origin+0x57/0xa0 [ 2142.971761][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2142.971761][T15690] get_compat_msghdr+0x108/0x2b0 [ 2142.971761][T15690] do_recvmmsg+0xdaf/0x2300 [ 2142.971761][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2142.971761][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.971761][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.971761][T15690] __do_fast_syscall_32+0x102/0x160 [ 2142.971761][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2142.971761][T15690] do_SYSENTER_32+0x73/0x90 [ 2142.971761][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.971761][T15690] [ 2142.971761][T15690] Uninit was stored to memory at: [ 2142.971761][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2142.971761][T15690] __msan_chain_origin+0x57/0xa0 [ 2142.971761][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2142.971761][T15690] get_compat_msghdr+0x108/0x2b0 [ 2142.971761][T15690] do_recvmmsg+0xdaf/0x2300 [ 2142.971761][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2142.971761][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.971761][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.971761][T15690] __do_fast_syscall_32+0x102/0x160 [ 2142.971761][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2142.971761][T15690] do_SYSENTER_32+0x73/0x90 [ 2142.971761][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.971761][T15690] [ 2142.971761][T15690] Uninit was stored to memory at: [ 2142.971761][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2142.971761][T15690] __msan_chain_origin+0x57/0xa0 [ 2142.971761][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2142.971761][T15690] get_compat_msghdr+0x108/0x2b0 [ 2142.971761][T15690] do_recvmmsg+0xdaf/0x2300 [ 2142.971761][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2142.971761][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.971761][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.971761][T15690] __do_fast_syscall_32+0x102/0x160 [ 2142.971761][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2142.971761][T15690] do_SYSENTER_32+0x73/0x90 [ 2142.971761][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.971761][T15690] [ 2142.971761][T15690] Uninit was stored to memory at: [ 2142.971761][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2142.971761][T15690] __msan_chain_origin+0x57/0xa0 [ 2142.971761][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2142.971761][T15690] get_compat_msghdr+0x108/0x2b0 [ 2142.971761][T15690] do_recvmmsg+0xdaf/0x2300 [ 2142.971761][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2142.971761][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2142.971761][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2142.971761][T15690] __do_fast_syscall_32+0x102/0x160 [ 2142.971761][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2142.971761][T15690] do_SYSENTER_32+0x73/0x90 [ 2142.971761][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2142.971761][T15690] [ 2142.971761][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2142.971761][T15690] do_recvmmsg+0xbc/0x2300 [ 2142.971761][T15690] do_recvmmsg+0xbc/0x2300 [ 2143.737027][T15690] not chained 1170000 origins [ 2143.741506][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2143.741506][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2143.741506][T15690] Call Trace: [ 2143.741506][T15690] dump_stack+0x21c/0x280 [ 2143.741506][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2143.741506][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2143.741506][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2143.741506][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2143.741506][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2143.741506][T15690] ? release_sock+0x26a/0x2d0 [ 2143.741506][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2143.741506][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2143.806022][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2143.806022][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2143.806022][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2143.806022][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2143.806022][T15690] __msan_chain_origin+0x57/0xa0 [ 2143.806022][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2143.806022][T15690] get_compat_msghdr+0x108/0x2b0 [ 2143.806022][T15690] do_recvmmsg+0xdaf/0x2300 [ 2143.806022][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2143.806022][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2143.806022][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2143.806022][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2143.806022][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2143.806022][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2143.806022][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2143.806022][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2143.806022][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2143.806022][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2143.806022][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2143.806022][T15690] __do_fast_syscall_32+0x102/0x160 [ 2143.806022][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2143.806022][T15690] do_SYSENTER_32+0x73/0x90 [ 2143.806022][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2143.806022][T15690] RIP: 0023:0xf7f1a549 [ 2143.806022][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2143.806022][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2143.806022][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2143.806022][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2143.806022][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2143.806022][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2143.806022][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2143.806022][T15690] Uninit was stored to memory at: [ 2143.806022][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2143.806022][T15690] __msan_chain_origin+0x57/0xa0 [ 2143.806022][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2143.806022][T15690] get_compat_msghdr+0x108/0x2b0 [ 2143.806022][T15690] do_recvmmsg+0xdaf/0x2300 [ 2143.806022][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2143.806022][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2143.806022][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2143.806022][T15690] __do_fast_syscall_32+0x102/0x160 [ 2143.806022][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2143.806022][T15690] do_SYSENTER_32+0x73/0x90 [ 2143.806022][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2143.806022][T15690] [ 2143.806022][T15690] Uninit was stored to memory at: [ 2143.806022][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2143.806022][T15690] __msan_chain_origin+0x57/0xa0 [ 2143.806022][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2143.806022][T15690] get_compat_msghdr+0x108/0x2b0 [ 2143.806022][T15690] do_recvmmsg+0xdaf/0x2300 [ 2143.806022][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2143.806022][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2143.806022][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2143.806022][T15690] __do_fast_syscall_32+0x102/0x160 [ 2143.806022][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2143.806022][T15690] do_SYSENTER_32+0x73/0x90 [ 2143.806022][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2143.806022][T15690] [ 2143.806022][T15690] Uninit was stored to memory at: [ 2143.806022][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2143.806022][T15690] __msan_chain_origin+0x57/0xa0 [ 2143.806022][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2143.806022][T15690] get_compat_msghdr+0x108/0x2b0 [ 2143.806022][T15690] do_recvmmsg+0xdaf/0x2300 [ 2143.806022][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2143.806022][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2143.806022][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2143.806022][T15690] __do_fast_syscall_32+0x102/0x160 [ 2143.806022][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2143.806022][T15690] do_SYSENTER_32+0x73/0x90 [ 2143.806022][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2143.806022][T15690] [ 2143.806022][T15690] Uninit was stored to memory at: [ 2143.806022][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2143.806022][T15690] __msan_chain_origin+0x57/0xa0 [ 2143.806022][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2143.806022][T15690] get_compat_msghdr+0x108/0x2b0 [ 2143.806022][T15690] do_recvmmsg+0xdaf/0x2300 [ 2143.806022][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2143.806022][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2143.806022][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2143.806022][T15690] __do_fast_syscall_32+0x102/0x160 [ 2143.806022][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2143.806022][T15690] do_SYSENTER_32+0x73/0x90 [ 2143.806022][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2143.806022][T15690] [ 2143.806022][T15690] Uninit was stored to memory at: [ 2143.806022][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2143.806022][T15690] __msan_chain_origin+0x57/0xa0 [ 2143.806022][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2143.806022][T15690] get_compat_msghdr+0x108/0x2b0 [ 2143.806022][T15690] do_recvmmsg+0xdaf/0x2300 [ 2143.806022][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2143.806022][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2143.806022][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2143.806022][T15690] __do_fast_syscall_32+0x102/0x160 [ 2143.806022][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2143.806022][T15690] do_SYSENTER_32+0x73/0x90 [ 2143.806022][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2143.806022][T15690] [ 2143.806022][T15690] Uninit was stored to memory at: [ 2143.806022][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2143.806022][T15690] __msan_chain_origin+0x57/0xa0 [ 2143.806022][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2143.806022][T15690] get_compat_msghdr+0x108/0x2b0 [ 2143.806022][T15690] do_recvmmsg+0xdaf/0x2300 [ 2143.806022][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2143.806022][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2143.806022][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2143.806022][T15690] __do_fast_syscall_32+0x102/0x160 [ 2143.806022][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2143.806022][T15690] do_SYSENTER_32+0x73/0x90 [ 2143.806022][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2143.806022][T15690] [ 2143.806022][T15690] Uninit was stored to memory at: [ 2143.806022][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2143.806022][T15690] __msan_chain_origin+0x57/0xa0 [ 2143.806022][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2143.806022][T15690] get_compat_msghdr+0x108/0x2b0 [ 2143.806022][T15690] do_recvmmsg+0xdaf/0x2300 [ 2143.806022][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2143.806022][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2143.806022][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2143.806022][T15690] __do_fast_syscall_32+0x102/0x160 [ 2143.806022][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2143.806022][T15690] do_SYSENTER_32+0x73/0x90 [ 2143.806022][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2143.806022][T15690] [ 2143.806022][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2143.806022][T15690] do_recvmmsg+0xbc/0x2300 [ 2143.806022][T15690] do_recvmmsg+0xbc/0x2300 [ 2144.575442][T15678] not chained 1180000 origins [ 2144.580145][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2144.587786][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2144.587786][T15678] Call Trace: [ 2144.587786][T15678] dump_stack+0x21c/0x280 [ 2144.587786][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2144.587786][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2144.587786][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2144.587786][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2144.587786][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2144.587786][T15678] ? release_sock+0x26a/0x2d0 [ 2144.587786][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2144.587786][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2144.587786][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2144.587786][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2144.587786][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2144.587786][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2144.587786][T15678] __msan_chain_origin+0x57/0xa0 [ 2144.587786][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2144.587786][T15678] get_compat_msghdr+0x108/0x2b0 [ 2144.681625][T15678] do_recvmmsg+0xdaf/0x2300 [ 2144.681625][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2144.681625][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2144.681625][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2144.681625][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2144.681625][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2144.681625][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2144.721796][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2144.721796][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2144.721796][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2144.721796][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2144.721796][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2144.721796][T15678] __do_fast_syscall_32+0x102/0x160 [ 2144.721796][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2144.721796][T15678] do_SYSENTER_32+0x73/0x90 [ 2144.721796][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2144.721796][T15678] RIP: 0023:0xf7f1a549 [ 2144.721796][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2144.721796][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2144.721796][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2144.721796][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2144.721796][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2144.721796][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2144.721796][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2144.721796][T15678] Uninit was stored to memory at: [ 2144.721796][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2144.721796][T15678] __msan_chain_origin+0x57/0xa0 [ 2144.721796][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2144.721796][T15678] get_compat_msghdr+0x108/0x2b0 [ 2144.721796][T15678] do_recvmmsg+0xdaf/0x2300 [ 2144.721796][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2144.721796][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2144.721796][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2144.721796][T15678] __do_fast_syscall_32+0x102/0x160 [ 2144.721796][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2144.721796][T15678] do_SYSENTER_32+0x73/0x90 [ 2144.721796][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2144.721796][T15678] [ 2144.721796][T15678] Uninit was stored to memory at: [ 2144.721796][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2144.721796][T15678] __msan_chain_origin+0x57/0xa0 [ 2144.721796][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2144.721796][T15678] get_compat_msghdr+0x108/0x2b0 [ 2144.721796][T15678] do_recvmmsg+0xdaf/0x2300 [ 2144.721796][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2144.721796][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2144.721796][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2144.721796][T15678] __do_fast_syscall_32+0x102/0x160 [ 2144.721796][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2144.721796][T15678] do_SYSENTER_32+0x73/0x90 [ 2144.721796][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2144.721796][T15678] [ 2144.721796][T15678] Uninit was stored to memory at: [ 2144.721796][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2144.721796][T15678] __msan_chain_origin+0x57/0xa0 [ 2144.721796][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2144.721796][T15678] get_compat_msghdr+0x108/0x2b0 [ 2144.721796][T15678] do_recvmmsg+0xdaf/0x2300 [ 2144.721796][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2144.721796][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2144.721796][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2144.721796][T15678] __do_fast_syscall_32+0x102/0x160 [ 2144.721796][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2144.721796][T15678] do_SYSENTER_32+0x73/0x90 [ 2144.721796][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2144.721796][T15678] [ 2144.721796][T15678] Uninit was stored to memory at: [ 2144.721796][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2144.721796][T15678] __msan_chain_origin+0x57/0xa0 [ 2144.721796][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2144.721796][T15678] get_compat_msghdr+0x108/0x2b0 [ 2144.721796][T15678] do_recvmmsg+0xdaf/0x2300 [ 2144.721796][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2144.721796][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2144.721796][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2144.721796][T15678] __do_fast_syscall_32+0x102/0x160 [ 2144.721796][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2144.721796][T15678] do_SYSENTER_32+0x73/0x90 [ 2144.721796][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2144.721796][T15678] [ 2144.721796][T15678] Uninit was stored to memory at: [ 2145.131607][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.131607][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.131607][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.131607][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.131607][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.131607][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.131607][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.131607][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.131607][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.131607][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.131607][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.131607][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.131607][T15678] [ 2145.131607][T15678] Uninit was stored to memory at: [ 2145.131607][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.131607][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.131607][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.131607][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.131607][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.131607][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.131607][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.131607][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.131607][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.131607][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.131607][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.131607][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.131607][T15678] [ 2145.131607][T15678] Uninit was stored to memory at: [ 2145.131607][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.131607][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.131607][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.131607][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.131607][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.131607][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.131607][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.131607][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.131607][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.131607][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.131607][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.131607][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.131607][T15678] [ 2145.131607][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2145.131607][T15678] do_recvmmsg+0xbc/0x2300 [ 2145.131607][T15678] do_recvmmsg+0xbc/0x2300 [ 2145.476118][T15678] not chained 1190000 origins [ 2145.480918][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2145.481506][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2145.481506][T15678] Call Trace: [ 2145.481506][T15678] dump_stack+0x21c/0x280 [ 2145.481506][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2145.511586][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2145.511586][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2145.511586][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2145.511586][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2145.511586][T15678] ? release_sock+0x26a/0x2d0 [ 2145.511586][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2145.511586][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2145.511586][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2145.511586][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2145.511586][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2145.511586][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2145.511586][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.511586][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.511586][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.511586][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.511586][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2145.511586][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2145.511586][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2145.511586][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2145.511586][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2145.511586][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2145.511586][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.511586][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2145.511586][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2145.511586][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.511586][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.511586][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.511586][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.511586][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.511586][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.511586][T15678] RIP: 0023:0xf7f1a549 [ 2145.511586][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2145.511586][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2145.511586][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2145.511586][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2145.511586][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2145.511586][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2145.511586][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2145.511586][T15678] Uninit was stored to memory at: [ 2145.511586][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.511586][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.511586][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.511586][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.511586][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.511586][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.511586][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.511586][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.511586][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.511586][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.511586][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.511586][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.511586][T15678] [ 2145.511586][T15678] Uninit was stored to memory at: [ 2145.511586][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.511586][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.511586][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.511586][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.511586][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.511586][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.511586][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.511586][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.511586][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.511586][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.511586][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.511586][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.511586][T15678] [ 2145.511586][T15678] Uninit was stored to memory at: [ 2145.511586][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.511586][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.511586][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.511586][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.511586][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.511586][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.511586][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.511586][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.511586][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.511586][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.511586][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.511586][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.511586][T15678] [ 2145.511586][T15678] Uninit was stored to memory at: [ 2145.511586][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.511586][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.511586][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.511586][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.511586][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.511586][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.511586][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.511586][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.511586][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.511586][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.511586][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.511586][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.511586][T15678] [ 2145.511586][T15678] Uninit was stored to memory at: [ 2145.511586][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.511586][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.511586][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.511586][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.511586][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.511586][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.511586][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.511586][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.511586][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.511586][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.511586][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.511586][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.511586][T15678] [ 2145.511586][T15678] Uninit was stored to memory at: [ 2145.511586][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.511586][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.511586][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.511586][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.511586][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.511586][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.511586][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.511586][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.511586][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.511586][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.511586][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.511586][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.511586][T15678] [ 2145.511586][T15678] Uninit was stored to memory at: [ 2145.511586][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2145.511586][T15678] __msan_chain_origin+0x57/0xa0 [ 2145.511586][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2145.511586][T15678] get_compat_msghdr+0x108/0x2b0 [ 2145.511586][T15678] do_recvmmsg+0xdaf/0x2300 [ 2145.511586][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2145.511586][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2145.511586][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2145.511586][T15678] __do_fast_syscall_32+0x102/0x160 [ 2145.511586][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2145.511586][T15678] do_SYSENTER_32+0x73/0x90 [ 2145.511586][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2145.511586][T15678] [ 2145.511586][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2145.511586][T15678] do_recvmmsg+0xbc/0x2300 [ 2145.511586][T15678] do_recvmmsg+0xbc/0x2300 [ 2146.438755][T15678] not chained 1200000 origins [ 2146.441506][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2146.441506][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2146.441506][T15678] Call Trace: [ 2146.441506][T15678] dump_stack+0x21c/0x280 [ 2146.441506][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2146.441506][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2146.441506][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2146.441506][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2146.441506][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2146.441506][T15678] ? release_sock+0x26a/0x2d0 [ 2146.441506][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2146.441506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2146.441506][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2146.441506][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2146.441506][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2146.441506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2146.441506][T15678] __msan_chain_origin+0x57/0xa0 [ 2146.441506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2146.441506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2146.441506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2146.441506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2146.441506][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2146.441506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2146.441506][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2146.441506][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2146.441506][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2146.441506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2146.441506][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2146.441506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2146.441506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2146.441506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2146.441506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2146.441506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2146.441506][T15678] do_SYSENTER_32+0x73/0x90 [ 2146.441506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2146.441506][T15678] RIP: 0023:0xf7f1a549 [ 2146.441506][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2146.441506][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2146.441506][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2146.441506][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2146.441506][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2146.441506][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2146.441506][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2146.441506][T15678] Uninit was stored to memory at: [ 2146.441506][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2146.441506][T15678] __msan_chain_origin+0x57/0xa0 [ 2146.441506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2146.441506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2146.441506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2146.441506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2146.441506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2146.441506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2146.441506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2146.441506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2146.441506][T15678] do_SYSENTER_32+0x73/0x90 [ 2146.441506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2146.441506][T15678] [ 2146.441506][T15678] Uninit was stored to memory at: [ 2146.441506][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2146.441506][T15678] __msan_chain_origin+0x57/0xa0 [ 2146.441506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2146.441506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2146.441506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2146.441506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2146.441506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2146.441506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2146.441506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2146.441506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2146.441506][T15678] do_SYSENTER_32+0x73/0x90 [ 2146.441506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2146.441506][T15678] [ 2146.441506][T15678] Uninit was stored to memory at: [ 2146.441506][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2146.441506][T15678] __msan_chain_origin+0x57/0xa0 [ 2146.441506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2146.441506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2146.441506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2146.441506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2146.441506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2146.441506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2146.441506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2146.441506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2146.441506][T15678] do_SYSENTER_32+0x73/0x90 [ 2146.441506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2146.441506][T15678] [ 2146.441506][T15678] Uninit was stored to memory at: [ 2146.441506][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2146.441506][T15678] __msan_chain_origin+0x57/0xa0 [ 2146.441506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2146.441506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2146.441506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2146.441506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2146.952961][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2146.952961][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2146.952961][T15678] __do_fast_syscall_32+0x102/0x160 [ 2146.952961][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2146.952961][T15678] do_SYSENTER_32+0x73/0x90 [ 2146.952961][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2146.952961][T15678] [ 2146.952961][T15678] Uninit was stored to memory at: [ 2146.952961][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2146.952961][T15678] __msan_chain_origin+0x57/0xa0 [ 2146.952961][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2146.952961][T15678] get_compat_msghdr+0x108/0x2b0 [ 2146.952961][T15678] do_recvmmsg+0xdaf/0x2300 [ 2146.952961][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2146.952961][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2146.952961][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2146.952961][T15678] __do_fast_syscall_32+0x102/0x160 [ 2146.952961][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2146.952961][T15678] do_SYSENTER_32+0x73/0x90 [ 2146.952961][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2146.952961][T15678] [ 2146.952961][T15678] Uninit was stored to memory at: [ 2146.952961][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2146.952961][T15678] __msan_chain_origin+0x57/0xa0 [ 2146.952961][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2146.952961][T15678] get_compat_msghdr+0x108/0x2b0 [ 2146.952961][T15678] do_recvmmsg+0xdaf/0x2300 [ 2146.952961][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2146.952961][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2146.952961][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2146.952961][T15678] __do_fast_syscall_32+0x102/0x160 [ 2146.952961][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2146.952961][T15678] do_SYSENTER_32+0x73/0x90 [ 2146.952961][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2146.952961][T15678] [ 2146.952961][T15678] Uninit was stored to memory at: [ 2146.952961][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2146.952961][T15678] __msan_chain_origin+0x57/0xa0 [ 2146.952961][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2146.952961][T15678] get_compat_msghdr+0x108/0x2b0 [ 2146.952961][T15678] do_recvmmsg+0xdaf/0x2300 [ 2146.952961][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2146.952961][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2146.952961][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2146.952961][T15678] __do_fast_syscall_32+0x102/0x160 [ 2146.952961][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2146.952961][T15678] do_SYSENTER_32+0x73/0x90 [ 2146.952961][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2146.952961][T15678] [ 2146.952961][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2146.952961][T15678] do_recvmmsg+0xbc/0x2300 [ 2146.952961][T15678] do_recvmmsg+0xbc/0x2300 [ 2147.409993][T15678] not chained 1210000 origins [ 2147.411551][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2147.411551][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2147.411551][T15678] Call Trace: [ 2147.411551][T15678] dump_stack+0x21c/0x280 [ 2147.411551][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2147.411551][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2147.411551][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2147.454181][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2147.454181][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2147.454181][T15678] ? release_sock+0x26a/0x2d0 [ 2147.454181][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2147.454181][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2147.454181][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2147.454181][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2147.454181][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2147.454181][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2147.454181][T15678] __msan_chain_origin+0x57/0xa0 [ 2147.454181][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2147.454181][T15678] get_compat_msghdr+0x108/0x2b0 [ 2147.454181][T15678] do_recvmmsg+0xdaf/0x2300 [ 2147.454181][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2147.454181][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2147.454181][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2147.454181][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2147.454181][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2147.454181][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2147.454181][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2147.454181][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2147.454181][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2147.454181][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2147.454181][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2147.454181][T15678] __do_fast_syscall_32+0x102/0x160 [ 2147.454181][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2147.454181][T15678] do_SYSENTER_32+0x73/0x90 [ 2147.454181][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2147.454181][T15678] RIP: 0023:0xf7f1a549 [ 2147.454181][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2147.454181][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2147.454181][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2147.454181][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2147.454181][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2147.454181][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2147.454181][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2147.454181][T15678] Uninit was stored to memory at: [ 2147.454181][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2147.454181][T15678] __msan_chain_origin+0x57/0xa0 [ 2147.454181][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2147.454181][T15678] get_compat_msghdr+0x108/0x2b0 [ 2147.454181][T15678] do_recvmmsg+0xdaf/0x2300 [ 2147.454181][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2147.454181][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2147.454181][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2147.454181][T15678] __do_fast_syscall_32+0x102/0x160 [ 2147.454181][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2147.454181][T15678] do_SYSENTER_32+0x73/0x90 [ 2147.454181][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2147.454181][T15678] [ 2147.454181][T15678] Uninit was stored to memory at: [ 2147.454181][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2147.454181][T15678] __msan_chain_origin+0x57/0xa0 [ 2147.454181][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2147.454181][T15678] get_compat_msghdr+0x108/0x2b0 [ 2147.454181][T15678] do_recvmmsg+0xdaf/0x2300 [ 2147.454181][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2147.454181][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2147.454181][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2147.454181][T15678] __do_fast_syscall_32+0x102/0x160 [ 2147.454181][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2147.454181][T15678] do_SYSENTER_32+0x73/0x90 [ 2147.454181][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2147.454181][T15678] [ 2147.454181][T15678] Uninit was stored to memory at: [ 2147.454181][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2147.454181][T15678] __msan_chain_origin+0x57/0xa0 [ 2147.454181][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2147.454181][T15678] get_compat_msghdr+0x108/0x2b0 [ 2147.454181][T15678] do_recvmmsg+0xdaf/0x2300 [ 2147.454181][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2147.454181][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2147.454181][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2147.454181][T15678] __do_fast_syscall_32+0x102/0x160 [ 2147.454181][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2147.454181][T15678] do_SYSENTER_32+0x73/0x90 [ 2147.454181][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2147.454181][T15678] [ 2147.454181][T15678] Uninit was stored to memory at: [ 2147.454181][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2147.454181][T15678] __msan_chain_origin+0x57/0xa0 [ 2147.454181][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2147.454181][T15678] get_compat_msghdr+0x108/0x2b0 [ 2147.454181][T15678] do_recvmmsg+0xdaf/0x2300 [ 2147.454181][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2147.454181][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2147.454181][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2147.454181][T15678] __do_fast_syscall_32+0x102/0x160 [ 2147.454181][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2147.454181][T15678] do_SYSENTER_32+0x73/0x90 [ 2147.454181][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2147.454181][T15678] [ 2147.454181][T15678] Uninit was stored to memory at: [ 2147.454181][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2147.454181][T15678] __msan_chain_origin+0x57/0xa0 [ 2147.454181][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2147.454181][T15678] get_compat_msghdr+0x108/0x2b0 [ 2147.454181][T15678] do_recvmmsg+0xdaf/0x2300 [ 2147.454181][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2147.454181][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2147.454181][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2147.454181][T15678] __do_fast_syscall_32+0x102/0x160 [ 2147.454181][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2147.454181][T15678] do_SYSENTER_32+0x73/0x90 [ 2147.454181][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2147.454181][T15678] [ 2147.454181][T15678] Uninit was stored to memory at: [ 2147.454181][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2147.454181][T15678] __msan_chain_origin+0x57/0xa0 [ 2147.454181][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2147.454181][T15678] get_compat_msghdr+0x108/0x2b0 [ 2147.454181][T15678] do_recvmmsg+0xdaf/0x2300 [ 2147.454181][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2147.454181][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2147.454181][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2147.454181][T15678] __do_fast_syscall_32+0x102/0x160 [ 2147.454181][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2147.454181][T15678] do_SYSENTER_32+0x73/0x90 [ 2147.454181][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2147.454181][T15678] [ 2147.454181][T15678] Uninit was stored to memory at: [ 2147.454181][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2147.454181][T15678] __msan_chain_origin+0x57/0xa0 [ 2147.454181][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2147.454181][T15678] get_compat_msghdr+0x108/0x2b0 [ 2147.454181][T15678] do_recvmmsg+0xdaf/0x2300 [ 2147.454181][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2147.454181][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2147.454181][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2147.454181][T15678] __do_fast_syscall_32+0x102/0x160 [ 2147.454181][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2147.454181][T15678] do_SYSENTER_32+0x73/0x90 [ 2147.454181][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2147.454181][T15678] [ 2147.454181][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2147.454181][T15678] do_recvmmsg+0xbc/0x2300 [ 2147.454181][T15678] do_recvmmsg+0xbc/0x2300 [ 2148.285333][T15690] not chained 1220000 origins [ 2148.290039][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2148.291495][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2148.291495][T15690] Call Trace: [ 2148.311678][T15690] dump_stack+0x21c/0x280 [ 2148.311678][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2148.311678][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2148.311678][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2148.311678][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2148.311678][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2148.311678][T15690] ? release_sock+0x26a/0x2d0 [ 2148.311678][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2148.311678][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2148.311678][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2148.311678][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2148.311678][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2148.311678][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2148.377209][T15690] __msan_chain_origin+0x57/0xa0 [ 2148.377209][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2148.377209][T15690] get_compat_msghdr+0x108/0x2b0 [ 2148.377209][T15690] do_recvmmsg+0xdaf/0x2300 [ 2148.377209][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2148.401764][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2148.401764][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2148.401764][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2148.401764][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2148.401764][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2148.401764][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2148.401764][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2148.401764][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2148.401764][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2148.401764][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2148.401764][T15690] __do_fast_syscall_32+0x102/0x160 [ 2148.401764][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2148.401764][T15690] do_SYSENTER_32+0x73/0x90 [ 2148.401764][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2148.401764][T15690] RIP: 0023:0xf7f1a549 [ 2148.401764][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2148.401764][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2148.401764][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2148.401764][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2148.401764][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2148.401764][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2148.401764][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2148.401764][T15690] Uninit was stored to memory at: [ 2148.401764][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2148.401764][T15690] __msan_chain_origin+0x57/0xa0 [ 2148.401764][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2148.401764][T15690] get_compat_msghdr+0x108/0x2b0 [ 2148.401764][T15690] do_recvmmsg+0xdaf/0x2300 [ 2148.401764][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2148.401764][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2148.401764][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2148.401764][T15690] __do_fast_syscall_32+0x102/0x160 [ 2148.401764][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2148.401764][T15690] do_SYSENTER_32+0x73/0x90 [ 2148.401764][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2148.401764][T15690] [ 2148.401764][T15690] Uninit was stored to memory at: [ 2148.401764][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2148.401764][T15690] __msan_chain_origin+0x57/0xa0 [ 2148.401764][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2148.401764][T15690] get_compat_msghdr+0x108/0x2b0 [ 2148.401764][T15690] do_recvmmsg+0xdaf/0x2300 [ 2148.401764][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2148.401764][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2148.401764][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2148.401764][T15690] __do_fast_syscall_32+0x102/0x160 [ 2148.401764][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2148.401764][T15690] do_SYSENTER_32+0x73/0x90 [ 2148.401764][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2148.401764][T15690] [ 2148.401764][T15690] Uninit was stored to memory at: [ 2148.401764][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2148.401764][T15690] __msan_chain_origin+0x57/0xa0 [ 2148.401764][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2148.401764][T15690] get_compat_msghdr+0x108/0x2b0 [ 2148.401764][T15690] do_recvmmsg+0xdaf/0x2300 [ 2148.401764][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2148.401764][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2148.401764][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2148.401764][T15690] __do_fast_syscall_32+0x102/0x160 [ 2148.401764][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2148.401764][T15690] do_SYSENTER_32+0x73/0x90 [ 2148.401764][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2148.401764][T15690] [ 2148.401764][T15690] Uninit was stored to memory at: [ 2148.401764][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2148.401764][T15690] __msan_chain_origin+0x57/0xa0 [ 2148.401764][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2148.401764][T15690] get_compat_msghdr+0x108/0x2b0 [ 2148.401764][T15690] do_recvmmsg+0xdaf/0x2300 [ 2148.401764][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2148.401764][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2148.401764][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2148.401764][T15690] __do_fast_syscall_32+0x102/0x160 [ 2148.401764][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2148.401764][T15690] do_SYSENTER_32+0x73/0x90 [ 2148.401764][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2148.401764][T15690] [ 2148.401764][T15690] Uninit was stored to memory at: [ 2148.401764][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2148.401764][T15690] __msan_chain_origin+0x57/0xa0 [ 2148.401764][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2148.401764][T15690] get_compat_msghdr+0x108/0x2b0 [ 2148.401764][T15690] do_recvmmsg+0xdaf/0x2300 [ 2148.401764][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2148.401764][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2148.401764][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2148.401764][T15690] __do_fast_syscall_32+0x102/0x160 [ 2148.401764][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2148.401764][T15690] do_SYSENTER_32+0x73/0x90 [ 2148.401764][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2148.401764][T15690] [ 2148.401764][T15690] Uninit was stored to memory at: [ 2148.401764][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2148.401764][T15690] __msan_chain_origin+0x57/0xa0 [ 2148.401764][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2148.401764][T15690] get_compat_msghdr+0x108/0x2b0 [ 2148.401764][T15690] do_recvmmsg+0xdaf/0x2300 [ 2148.401764][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2148.401764][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2148.401764][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2148.401764][T15690] __do_fast_syscall_32+0x102/0x160 [ 2148.401764][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2148.401764][T15690] do_SYSENTER_32+0x73/0x90 [ 2148.401764][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2148.401764][T15690] [ 2148.401764][T15690] Uninit was stored to memory at: [ 2148.401764][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2148.401764][T15690] __msan_chain_origin+0x57/0xa0 [ 2148.401764][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2148.401764][T15690] get_compat_msghdr+0x108/0x2b0 [ 2148.401764][T15690] do_recvmmsg+0xdaf/0x2300 [ 2148.401764][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2148.401764][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2148.401764][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2148.401764][T15690] __do_fast_syscall_32+0x102/0x160 [ 2148.401764][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2148.401764][T15690] do_SYSENTER_32+0x73/0x90 [ 2148.401764][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2148.401764][T15690] [ 2148.401764][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2148.401764][T15690] do_recvmmsg+0xbc/0x2300 [ 2148.401764][T15690] do_recvmmsg+0xbc/0x2300 [ 2149.206808][T15690] not chained 1230000 origins [ 2149.211504][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2149.211504][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2149.211504][T15690] Call Trace: [ 2149.211504][T15690] dump_stack+0x21c/0x280 [ 2149.211504][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2149.211504][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2149.211504][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2149.211504][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2149.211504][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2149.211504][T15690] ? release_sock+0x26a/0x2d0 [ 2149.211504][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2149.211504][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2149.211504][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2149.211504][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2149.211504][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2149.211504][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2149.211504][T15690] __msan_chain_origin+0x57/0xa0 [ 2149.211504][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2149.211504][T15690] get_compat_msghdr+0x108/0x2b0 [ 2149.211504][T15690] do_recvmmsg+0xdaf/0x2300 [ 2149.211504][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2149.211504][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2149.211504][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2149.211504][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2149.211504][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2149.211504][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2149.211504][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2149.211504][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2149.211504][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2149.211504][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2149.211504][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2149.211504][T15690] __do_fast_syscall_32+0x102/0x160 [ 2149.211504][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2149.211504][T15690] do_SYSENTER_32+0x73/0x90 [ 2149.211504][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2149.211504][T15690] RIP: 0023:0xf7f1a549 [ 2149.211504][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2149.211504][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2149.211504][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2149.211504][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2149.211504][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2149.211504][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2149.211504][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2149.211504][T15690] Uninit was stored to memory at: [ 2149.211504][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2149.211504][T15690] __msan_chain_origin+0x57/0xa0 [ 2149.211504][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2149.211504][T15690] get_compat_msghdr+0x108/0x2b0 [ 2149.211504][T15690] do_recvmmsg+0xdaf/0x2300 [ 2149.211504][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2149.211504][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2149.211504][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2149.211504][T15690] __do_fast_syscall_32+0x102/0x160 [ 2149.211504][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2149.211504][T15690] do_SYSENTER_32+0x73/0x90 [ 2149.211504][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2149.211504][T15690] [ 2149.211504][T15690] Uninit was stored to memory at: [ 2149.211504][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2149.211504][T15690] __msan_chain_origin+0x57/0xa0 [ 2149.211504][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2149.211504][T15690] get_compat_msghdr+0x108/0x2b0 [ 2149.211504][T15690] do_recvmmsg+0xdaf/0x2300 [ 2149.211504][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2149.211504][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2149.211504][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2149.211504][T15690] __do_fast_syscall_32+0x102/0x160 [ 2149.211504][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2149.211504][T15690] do_SYSENTER_32+0x73/0x90 [ 2149.211504][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2149.211504][T15690] [ 2149.211504][T15690] Uninit was stored to memory at: [ 2149.211504][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2149.211504][T15690] __msan_chain_origin+0x57/0xa0 [ 2149.211504][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2149.211504][T15690] get_compat_msghdr+0x108/0x2b0 [ 2149.211504][T15690] do_recvmmsg+0xdaf/0x2300 [ 2149.211504][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2149.211504][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2149.211504][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2149.211504][T15690] __do_fast_syscall_32+0x102/0x160 [ 2149.211504][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2149.211504][T15690] do_SYSENTER_32+0x73/0x90 [ 2149.211504][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2149.211504][T15690] [ 2149.211504][T15690] Uninit was stored to memory at: [ 2149.211504][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2149.211504][T15690] __msan_chain_origin+0x57/0xa0 [ 2149.211504][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2149.211504][T15690] get_compat_msghdr+0x108/0x2b0 [ 2149.211504][T15690] do_recvmmsg+0xdaf/0x2300 [ 2149.211504][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2149.211504][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2149.211504][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2149.211504][T15690] __do_fast_syscall_32+0x102/0x160 [ 2149.211504][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2149.211504][T15690] do_SYSENTER_32+0x73/0x90 [ 2149.211504][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2149.211504][T15690] [ 2149.211504][T15690] Uninit was stored to memory at: [ 2149.211504][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2149.211504][T15690] __msan_chain_origin+0x57/0xa0 [ 2149.211504][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2149.211504][T15690] get_compat_msghdr+0x108/0x2b0 [ 2149.211504][T15690] do_recvmmsg+0xdaf/0x2300 [ 2149.211504][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2149.211504][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2149.211504][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2149.211504][T15690] __do_fast_syscall_32+0x102/0x160 [ 2149.211504][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2149.211504][T15690] do_SYSENTER_32+0x73/0x90 [ 2149.211504][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2149.211504][T15690] [ 2149.211504][T15690] Uninit was stored to memory at: [ 2149.211504][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2149.211504][T15690] __msan_chain_origin+0x57/0xa0 [ 2149.211504][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2149.211504][T15690] get_compat_msghdr+0x108/0x2b0 [ 2149.211504][T15690] do_recvmmsg+0xdaf/0x2300 [ 2149.211504][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2149.211504][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2149.211504][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2149.211504][T15690] __do_fast_syscall_32+0x102/0x160 [ 2149.211504][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2149.211504][T15690] do_SYSENTER_32+0x73/0x90 [ 2149.211504][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2149.211504][T15690] [ 2149.211504][T15690] Uninit was stored to memory at: [ 2149.211504][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2149.211504][T15690] __msan_chain_origin+0x57/0xa0 [ 2149.211504][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2149.211504][T15690] get_compat_msghdr+0x108/0x2b0 [ 2149.211504][T15690] do_recvmmsg+0xdaf/0x2300 [ 2149.211504][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2149.211504][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2149.211504][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2149.211504][T15690] __do_fast_syscall_32+0x102/0x160 [ 2149.211504][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2149.211504][T15690] do_SYSENTER_32+0x73/0x90 [ 2149.211504][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2149.211504][T15690] [ 2149.211504][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2149.211504][T15690] do_recvmmsg+0xbc/0x2300 [ 2149.211504][T15690] do_recvmmsg+0xbc/0x2300 [ 2150.061446][T15678] not chained 1240000 origins [ 2150.061509][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2150.061509][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2150.061509][T15678] Call Trace: [ 2150.061509][T15678] dump_stack+0x21c/0x280 [ 2150.061509][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2150.061509][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2150.061509][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2150.061509][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2150.061509][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2150.116473][T15678] ? release_sock+0x26a/0x2d0 [ 2150.116473][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2150.116473][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2150.116473][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2150.116473][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2150.116473][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2150.116473][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2150.116473][T15678] __msan_chain_origin+0x57/0xa0 [ 2150.116473][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2150.116473][T15678] get_compat_msghdr+0x108/0x2b0 [ 2150.116473][T15678] do_recvmmsg+0xdaf/0x2300 [ 2150.116473][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2150.116473][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2150.116473][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2150.116473][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2150.116473][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2150.116473][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2150.116473][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2150.116473][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2150.116473][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2150.116473][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2150.116473][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2150.116473][T15678] __do_fast_syscall_32+0x102/0x160 [ 2150.116473][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2150.116473][T15678] do_SYSENTER_32+0x73/0x90 [ 2150.116473][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.116473][T15678] RIP: 0023:0xf7f1a549 [ 2150.116473][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2150.116473][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2150.116473][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2150.116473][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2150.301386][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2150.301386][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2150.301386][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2150.301386][T15678] Uninit was stored to memory at: [ 2150.301386][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2150.301386][T15678] __msan_chain_origin+0x57/0xa0 [ 2150.301386][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2150.301386][T15678] get_compat_msghdr+0x108/0x2b0 [ 2150.301386][T15678] do_recvmmsg+0xdaf/0x2300 [ 2150.301386][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2150.301386][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2150.301386][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2150.301386][T15678] __do_fast_syscall_32+0x102/0x160 [ 2150.301386][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2150.301386][T15678] do_SYSENTER_32+0x73/0x90 [ 2150.301386][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.301386][T15678] [ 2150.301386][T15678] Uninit was stored to memory at: [ 2150.301386][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2150.301386][T15678] __msan_chain_origin+0x57/0xa0 [ 2150.301386][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2150.301386][T15678] get_compat_msghdr+0x108/0x2b0 [ 2150.301386][T15678] do_recvmmsg+0xdaf/0x2300 [ 2150.301386][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2150.301386][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2150.301386][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2150.301386][T15678] __do_fast_syscall_32+0x102/0x160 [ 2150.301386][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2150.301386][T15678] do_SYSENTER_32+0x73/0x90 [ 2150.301386][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.301386][T15678] [ 2150.301386][T15678] Uninit was stored to memory at: [ 2150.301386][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2150.301386][T15678] __msan_chain_origin+0x57/0xa0 [ 2150.301386][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2150.301386][T15678] get_compat_msghdr+0x108/0x2b0 [ 2150.301386][T15678] do_recvmmsg+0xdaf/0x2300 [ 2150.301386][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2150.301386][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2150.301386][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2150.301386][T15678] __do_fast_syscall_32+0x102/0x160 [ 2150.301386][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2150.301386][T15678] do_SYSENTER_32+0x73/0x90 [ 2150.301386][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.301386][T15678] [ 2150.301386][T15678] Uninit was stored to memory at: [ 2150.301386][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2150.301386][T15678] __msan_chain_origin+0x57/0xa0 [ 2150.301386][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2150.301386][T15678] get_compat_msghdr+0x108/0x2b0 [ 2150.301386][T15678] do_recvmmsg+0xdaf/0x2300 [ 2150.301386][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2150.301386][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2150.301386][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2150.301386][T15678] __do_fast_syscall_32+0x102/0x160 [ 2150.301386][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2150.301386][T15678] do_SYSENTER_32+0x73/0x90 [ 2150.301386][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.301386][T15678] [ 2150.301386][T15678] Uninit was stored to memory at: [ 2150.301386][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2150.301386][T15678] __msan_chain_origin+0x57/0xa0 [ 2150.301386][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2150.301386][T15678] get_compat_msghdr+0x108/0x2b0 [ 2150.301386][T15678] do_recvmmsg+0xdaf/0x2300 [ 2150.301386][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2150.301386][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2150.301386][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2150.301386][T15678] __do_fast_syscall_32+0x102/0x160 [ 2150.301386][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2150.301386][T15678] do_SYSENTER_32+0x73/0x90 [ 2150.301386][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.301386][T15678] [ 2150.301386][T15678] Uninit was stored to memory at: [ 2150.301386][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2150.301386][T15678] __msan_chain_origin+0x57/0xa0 [ 2150.301386][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2150.301386][T15678] get_compat_msghdr+0x108/0x2b0 [ 2150.301386][T15678] do_recvmmsg+0xdaf/0x2300 [ 2150.301386][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2150.301386][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2150.301386][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2150.301386][T15678] __do_fast_syscall_32+0x102/0x160 [ 2150.301386][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2150.301386][T15678] do_SYSENTER_32+0x73/0x90 [ 2150.301386][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.301386][T15678] [ 2150.301386][T15678] Uninit was stored to memory at: [ 2150.301386][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2150.301386][T15678] __msan_chain_origin+0x57/0xa0 [ 2150.301386][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2150.301386][T15678] get_compat_msghdr+0x108/0x2b0 [ 2150.301386][T15678] do_recvmmsg+0xdaf/0x2300 [ 2150.301386][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2150.301386][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2150.301386][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2150.301386][T15678] __do_fast_syscall_32+0x102/0x160 [ 2150.301386][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2150.301386][T15678] do_SYSENTER_32+0x73/0x90 [ 2150.301386][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2150.301386][T15678] [ 2150.301386][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2150.301386][T15678] do_recvmmsg+0xbc/0x2300 [ 2150.301386][T15678] do_recvmmsg+0xbc/0x2300 [ 2150.979166][T15678] not chained 1250000 origins [ 2150.981494][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2150.981494][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2150.981494][T15678] Call Trace: [ 2150.981494][T15678] dump_stack+0x21c/0x280 [ 2150.981494][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2150.981494][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2150.981494][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2150.981494][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2150.981494][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2150.981494][T15678] ? release_sock+0x26a/0x2d0 [ 2151.039205][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2151.039205][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2151.039205][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2151.039205][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2151.039205][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2151.039205][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2151.039205][T15678] __msan_chain_origin+0x57/0xa0 [ 2151.039205][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2151.039205][T15678] get_compat_msghdr+0x108/0x2b0 [ 2151.039205][T15678] do_recvmmsg+0xdaf/0x2300 [ 2151.039205][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2151.039205][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2151.039205][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2151.039205][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2151.039205][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2151.039205][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2151.039205][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2151.039205][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2151.039205][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2151.039205][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.039205][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.039205][T15678] __do_fast_syscall_32+0x102/0x160 [ 2151.039205][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2151.039205][T15678] do_SYSENTER_32+0x73/0x90 [ 2151.039205][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.039205][T15678] RIP: 0023:0xf7f1a549 [ 2151.039205][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2151.039205][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2151.039205][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2151.039205][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2151.039205][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2151.039205][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2151.039205][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2151.039205][T15678] Uninit was stored to memory at: [ 2151.039205][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2151.039205][T15678] __msan_chain_origin+0x57/0xa0 [ 2151.039205][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2151.039205][T15678] get_compat_msghdr+0x108/0x2b0 [ 2151.039205][T15678] do_recvmmsg+0xdaf/0x2300 [ 2151.039205][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2151.039205][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.039205][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.039205][T15678] __do_fast_syscall_32+0x102/0x160 [ 2151.039205][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2151.039205][T15678] do_SYSENTER_32+0x73/0x90 [ 2151.039205][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.039205][T15678] [ 2151.039205][T15678] Uninit was stored to memory at: [ 2151.039205][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2151.039205][T15678] __msan_chain_origin+0x57/0xa0 [ 2151.039205][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2151.039205][T15678] get_compat_msghdr+0x108/0x2b0 [ 2151.039205][T15678] do_recvmmsg+0xdaf/0x2300 [ 2151.039205][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2151.039205][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.039205][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.039205][T15678] __do_fast_syscall_32+0x102/0x160 [ 2151.039205][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2151.039205][T15678] do_SYSENTER_32+0x73/0x90 [ 2151.039205][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.039205][T15678] [ 2151.039205][T15678] Uninit was stored to memory at: [ 2151.039205][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2151.039205][T15678] __msan_chain_origin+0x57/0xa0 [ 2151.039205][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2151.039205][T15678] get_compat_msghdr+0x108/0x2b0 [ 2151.039205][T15678] do_recvmmsg+0xdaf/0x2300 [ 2151.039205][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2151.039205][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.039205][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.039205][T15678] __do_fast_syscall_32+0x102/0x160 [ 2151.039205][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2151.039205][T15678] do_SYSENTER_32+0x73/0x90 [ 2151.039205][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.039205][T15678] [ 2151.039205][T15678] Uninit was stored to memory at: [ 2151.039205][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2151.039205][T15678] __msan_chain_origin+0x57/0xa0 [ 2151.039205][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2151.039205][T15678] get_compat_msghdr+0x108/0x2b0 [ 2151.039205][T15678] do_recvmmsg+0xdaf/0x2300 [ 2151.039205][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2151.039205][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.039205][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.039205][T15678] __do_fast_syscall_32+0x102/0x160 [ 2151.039205][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2151.039205][T15678] do_SYSENTER_32+0x73/0x90 [ 2151.039205][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.039205][T15678] [ 2151.039205][T15678] Uninit was stored to memory at: [ 2151.039205][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2151.039205][T15678] __msan_chain_origin+0x57/0xa0 [ 2151.039205][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2151.039205][T15678] get_compat_msghdr+0x108/0x2b0 [ 2151.039205][T15678] do_recvmmsg+0xdaf/0x2300 [ 2151.039205][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2151.039205][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.039205][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.039205][T15678] __do_fast_syscall_32+0x102/0x160 [ 2151.039205][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2151.039205][T15678] do_SYSENTER_32+0x73/0x90 [ 2151.039205][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.039205][T15678] [ 2151.039205][T15678] Uninit was stored to memory at: [ 2151.039205][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2151.039205][T15678] __msan_chain_origin+0x57/0xa0 [ 2151.039205][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2151.039205][T15678] get_compat_msghdr+0x108/0x2b0 [ 2151.039205][T15678] do_recvmmsg+0xdaf/0x2300 [ 2151.039205][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2151.039205][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.039205][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.039205][T15678] __do_fast_syscall_32+0x102/0x160 [ 2151.039205][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2151.039205][T15678] do_SYSENTER_32+0x73/0x90 [ 2151.039205][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.039205][T15678] [ 2151.039205][T15678] Uninit was stored to memory at: [ 2151.039205][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2151.039205][T15678] __msan_chain_origin+0x57/0xa0 [ 2151.039205][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2151.039205][T15678] get_compat_msghdr+0x108/0x2b0 [ 2151.039205][T15678] do_recvmmsg+0xdaf/0x2300 [ 2151.039205][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2151.039205][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.039205][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.039205][T15678] __do_fast_syscall_32+0x102/0x160 [ 2151.039205][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2151.039205][T15678] do_SYSENTER_32+0x73/0x90 [ 2151.039205][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.039205][T15678] [ 2151.039205][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2151.039205][T15678] do_recvmmsg+0xbc/0x2300 [ 2151.039205][T15678] do_recvmmsg+0xbc/0x2300 [ 2151.850806][T15690] not chained 1260000 origins [ 2151.851561][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2151.851561][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2151.851561][T15690] Call Trace: [ 2151.851561][T15690] dump_stack+0x21c/0x280 [ 2151.851561][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2151.851561][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2151.851561][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2151.851561][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2151.851561][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2151.851561][T15690] ? release_sock+0x26a/0x2d0 [ 2151.851561][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2151.851561][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2151.851561][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2151.851561][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2151.851561][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2151.851561][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2151.851561][T15690] __msan_chain_origin+0x57/0xa0 [ 2151.851561][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2151.851561][T15690] get_compat_msghdr+0x108/0x2b0 [ 2151.851561][T15690] do_recvmmsg+0xdaf/0x2300 [ 2151.851561][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2151.851561][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2151.851561][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2151.851561][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2151.851561][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2151.851561][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2151.851561][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2151.851561][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2151.851561][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2151.851561][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.851561][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.851561][T15690] __do_fast_syscall_32+0x102/0x160 [ 2151.851561][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2151.851561][T15690] do_SYSENTER_32+0x73/0x90 [ 2151.851561][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.851561][T15690] RIP: 0023:0xf7f1a549 [ 2151.851561][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2151.851561][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2151.851561][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2151.851561][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2151.851561][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2151.851561][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2151.851561][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2151.851561][T15690] Uninit was stored to memory at: [ 2151.851561][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2151.851561][T15690] __msan_chain_origin+0x57/0xa0 [ 2151.851561][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2151.851561][T15690] get_compat_msghdr+0x108/0x2b0 [ 2151.851561][T15690] do_recvmmsg+0xdaf/0x2300 [ 2151.851561][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2151.851561][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.851561][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.851561][T15690] __do_fast_syscall_32+0x102/0x160 [ 2151.851561][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2151.851561][T15690] do_SYSENTER_32+0x73/0x90 [ 2151.851561][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.851561][T15690] [ 2151.851561][T15690] Uninit was stored to memory at: [ 2151.851561][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2151.851561][T15690] __msan_chain_origin+0x57/0xa0 [ 2151.851561][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2151.851561][T15690] get_compat_msghdr+0x108/0x2b0 [ 2151.851561][T15690] do_recvmmsg+0xdaf/0x2300 [ 2151.851561][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2151.851561][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.851561][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.851561][T15690] __do_fast_syscall_32+0x102/0x160 [ 2151.851561][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2151.851561][T15690] do_SYSENTER_32+0x73/0x90 [ 2151.851561][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.851561][T15690] [ 2151.851561][T15690] Uninit was stored to memory at: [ 2151.851561][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2151.851561][T15690] __msan_chain_origin+0x57/0xa0 [ 2151.851561][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2151.851561][T15690] get_compat_msghdr+0x108/0x2b0 [ 2151.851561][T15690] do_recvmmsg+0xdaf/0x2300 [ 2151.851561][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2151.851561][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.851561][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.851561][T15690] __do_fast_syscall_32+0x102/0x160 [ 2151.851561][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2151.851561][T15690] do_SYSENTER_32+0x73/0x90 [ 2151.851561][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.851561][T15690] [ 2151.851561][T15690] Uninit was stored to memory at: [ 2151.851561][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2151.851561][T15690] __msan_chain_origin+0x57/0xa0 [ 2151.851561][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2151.851561][T15690] get_compat_msghdr+0x108/0x2b0 [ 2151.851561][T15690] do_recvmmsg+0xdaf/0x2300 [ 2151.851561][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2151.851561][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.851561][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.851561][T15690] __do_fast_syscall_32+0x102/0x160 [ 2151.851561][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2151.851561][T15690] do_SYSENTER_32+0x73/0x90 [ 2151.851561][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.851561][T15690] [ 2151.851561][T15690] Uninit was stored to memory at: [ 2151.851561][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2151.851561][T15690] __msan_chain_origin+0x57/0xa0 [ 2151.851561][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2151.851561][T15690] get_compat_msghdr+0x108/0x2b0 [ 2151.851561][T15690] do_recvmmsg+0xdaf/0x2300 [ 2151.851561][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2151.851561][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.851561][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.851561][T15690] __do_fast_syscall_32+0x102/0x160 [ 2151.851561][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2151.851561][T15690] do_SYSENTER_32+0x73/0x90 [ 2151.851561][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.851561][T15690] [ 2151.851561][T15690] Uninit was stored to memory at: [ 2151.851561][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2151.851561][T15690] __msan_chain_origin+0x57/0xa0 [ 2151.851561][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2151.851561][T15690] get_compat_msghdr+0x108/0x2b0 [ 2151.851561][T15690] do_recvmmsg+0xdaf/0x2300 [ 2151.851561][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2151.851561][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.851561][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.851561][T15690] __do_fast_syscall_32+0x102/0x160 [ 2151.851561][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2151.851561][T15690] do_SYSENTER_32+0x73/0x90 [ 2151.851561][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.851561][T15690] [ 2151.851561][T15690] Uninit was stored to memory at: [ 2151.851561][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2151.851561][T15690] __msan_chain_origin+0x57/0xa0 [ 2151.851561][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2151.851561][T15690] get_compat_msghdr+0x108/0x2b0 [ 2151.851561][T15690] do_recvmmsg+0xdaf/0x2300 [ 2151.851561][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2151.851561][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2151.851561][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2151.851561][T15690] __do_fast_syscall_32+0x102/0x160 [ 2151.851561][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2151.851561][T15690] do_SYSENTER_32+0x73/0x90 [ 2151.851561][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2151.851561][T15690] [ 2151.851561][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2151.851561][T15690] do_recvmmsg+0xbc/0x2300 [ 2151.851561][T15690] do_recvmmsg+0xbc/0x2300 [ 2152.786263][T15690] not chained 1270000 origins [ 2152.790967][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2152.791509][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2152.791509][T15690] Call Trace: [ 2152.791509][T15690] dump_stack+0x21c/0x280 [ 2152.791509][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2152.791509][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2152.791509][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2152.791509][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2152.791509][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2152.791509][T15690] ? release_sock+0x26a/0x2d0 [ 2152.791509][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2152.791509][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2152.791509][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2152.791509][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2152.791509][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2152.791509][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2152.791509][T15690] __msan_chain_origin+0x57/0xa0 [ 2152.791509][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2152.791509][T15690] get_compat_msghdr+0x108/0x2b0 [ 2152.791509][T15690] do_recvmmsg+0xdaf/0x2300 [ 2152.791509][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2152.791509][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2152.791509][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2152.791509][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2152.791509][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2152.791509][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2152.791509][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2152.791509][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2152.791509][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2152.791509][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2152.791509][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2152.791509][T15690] __do_fast_syscall_32+0x102/0x160 [ 2152.791509][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2152.791509][T15690] do_SYSENTER_32+0x73/0x90 [ 2152.791509][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.791509][T15690] RIP: 0023:0xf7f1a549 [ 2152.791509][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2152.791509][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2152.791509][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2152.791509][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2152.791509][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2152.791509][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2152.791509][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2152.791509][T15690] Uninit was stored to memory at: [ 2152.791509][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2152.791509][T15690] __msan_chain_origin+0x57/0xa0 [ 2152.791509][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2152.791509][T15690] get_compat_msghdr+0x108/0x2b0 [ 2152.791509][T15690] do_recvmmsg+0xdaf/0x2300 [ 2152.791509][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2152.791509][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2152.791509][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2152.791509][T15690] __do_fast_syscall_32+0x102/0x160 [ 2152.791509][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2152.791509][T15690] do_SYSENTER_32+0x73/0x90 [ 2152.791509][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.791509][T15690] [ 2152.791509][T15690] Uninit was stored to memory at: [ 2152.791509][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2152.791509][T15690] __msan_chain_origin+0x57/0xa0 [ 2152.791509][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2152.791509][T15690] get_compat_msghdr+0x108/0x2b0 [ 2152.791509][T15690] do_recvmmsg+0xdaf/0x2300 [ 2152.791509][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2152.791509][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2152.791509][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2152.791509][T15690] __do_fast_syscall_32+0x102/0x160 [ 2152.791509][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2152.791509][T15690] do_SYSENTER_32+0x73/0x90 [ 2152.791509][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.791509][T15690] [ 2152.791509][T15690] Uninit was stored to memory at: [ 2152.791509][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2152.791509][T15690] __msan_chain_origin+0x57/0xa0 [ 2152.791509][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2152.791509][T15690] get_compat_msghdr+0x108/0x2b0 [ 2152.791509][T15690] do_recvmmsg+0xdaf/0x2300 [ 2152.791509][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2152.791509][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2152.791509][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2152.791509][T15690] __do_fast_syscall_32+0x102/0x160 [ 2152.791509][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2152.791509][T15690] do_SYSENTER_32+0x73/0x90 [ 2152.791509][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.791509][T15690] [ 2152.791509][T15690] Uninit was stored to memory at: [ 2152.791509][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2152.791509][T15690] __msan_chain_origin+0x57/0xa0 [ 2152.791509][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2152.791509][T15690] get_compat_msghdr+0x108/0x2b0 [ 2152.791509][T15690] do_recvmmsg+0xdaf/0x2300 [ 2152.791509][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2152.791509][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2152.791509][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2152.791509][T15690] __do_fast_syscall_32+0x102/0x160 [ 2152.791509][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2152.791509][T15690] do_SYSENTER_32+0x73/0x90 [ 2152.791509][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.791509][T15690] [ 2152.791509][T15690] Uninit was stored to memory at: [ 2152.791509][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2152.791509][T15690] __msan_chain_origin+0x57/0xa0 [ 2152.791509][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2152.791509][T15690] get_compat_msghdr+0x108/0x2b0 [ 2152.791509][T15690] do_recvmmsg+0xdaf/0x2300 [ 2152.791509][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2152.791509][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2152.791509][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2152.791509][T15690] __do_fast_syscall_32+0x102/0x160 [ 2152.791509][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2152.791509][T15690] do_SYSENTER_32+0x73/0x90 [ 2152.791509][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.791509][T15690] [ 2152.791509][T15690] Uninit was stored to memory at: [ 2152.791509][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2152.791509][T15690] __msan_chain_origin+0x57/0xa0 [ 2152.791509][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2152.791509][T15690] get_compat_msghdr+0x108/0x2b0 [ 2152.791509][T15690] do_recvmmsg+0xdaf/0x2300 [ 2152.791509][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2152.791509][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2152.791509][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2152.791509][T15690] __do_fast_syscall_32+0x102/0x160 [ 2152.791509][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2152.791509][T15690] do_SYSENTER_32+0x73/0x90 [ 2152.791509][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.791509][T15690] [ 2152.791509][T15690] Uninit was stored to memory at: [ 2152.791509][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2152.791509][T15690] __msan_chain_origin+0x57/0xa0 [ 2152.791509][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2152.791509][T15690] get_compat_msghdr+0x108/0x2b0 [ 2152.791509][T15690] do_recvmmsg+0xdaf/0x2300 [ 2152.791509][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2152.791509][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2152.791509][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2152.791509][T15690] __do_fast_syscall_32+0x102/0x160 [ 2152.791509][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2152.791509][T15690] do_SYSENTER_32+0x73/0x90 [ 2152.791509][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2152.791509][T15690] [ 2152.791509][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2152.791509][T15690] do_recvmmsg+0xbc/0x2300 [ 2152.791509][T15690] do_recvmmsg+0xbc/0x2300 [ 2153.645148][T15678] not chained 1280000 origins [ 2153.649853][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2153.651495][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2153.651495][T15678] Call Trace: [ 2153.651495][T15678] dump_stack+0x21c/0x280 [ 2153.651495][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2153.681663][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2153.681663][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2153.681663][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2153.681663][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2153.681663][T15678] ? release_sock+0x26a/0x2d0 [ 2153.681663][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2153.711636][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2153.711636][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2153.711636][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2153.711636][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2153.711636][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2153.711636][T15678] __msan_chain_origin+0x57/0xa0 [ 2153.711636][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2153.711636][T15678] get_compat_msghdr+0x108/0x2b0 [ 2153.711636][T15678] do_recvmmsg+0xdaf/0x2300 [ 2153.711636][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2153.711636][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2153.711636][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2153.711636][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2153.711636][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2153.711636][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2153.711636][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2153.711636][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2153.711636][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2153.711636][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2153.711636][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2153.711636][T15678] __do_fast_syscall_32+0x102/0x160 [ 2153.711636][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2153.711636][T15678] do_SYSENTER_32+0x73/0x90 [ 2153.711636][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.711636][T15678] RIP: 0023:0xf7f1a549 [ 2153.711636][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2153.711636][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2153.711636][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2153.711636][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2153.711636][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2153.711636][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2153.711636][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2153.711636][T15678] Uninit was stored to memory at: [ 2153.711636][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2153.711636][T15678] __msan_chain_origin+0x57/0xa0 [ 2153.711636][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2153.711636][T15678] get_compat_msghdr+0x108/0x2b0 [ 2153.711636][T15678] do_recvmmsg+0xdaf/0x2300 [ 2153.711636][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2153.711636][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2153.711636][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2153.711636][T15678] __do_fast_syscall_32+0x102/0x160 [ 2153.711636][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2153.711636][T15678] do_SYSENTER_32+0x73/0x90 [ 2153.711636][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.711636][T15678] [ 2153.711636][T15678] Uninit was stored to memory at: [ 2153.711636][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2153.711636][T15678] __msan_chain_origin+0x57/0xa0 [ 2153.711636][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2153.711636][T15678] get_compat_msghdr+0x108/0x2b0 [ 2153.711636][T15678] do_recvmmsg+0xdaf/0x2300 [ 2153.711636][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2153.711636][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2153.711636][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2153.711636][T15678] __do_fast_syscall_32+0x102/0x160 [ 2153.711636][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2153.711636][T15678] do_SYSENTER_32+0x73/0x90 [ 2153.711636][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.711636][T15678] [ 2153.711636][T15678] Uninit was stored to memory at: [ 2153.711636][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2153.711636][T15678] __msan_chain_origin+0x57/0xa0 [ 2153.711636][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2153.711636][T15678] get_compat_msghdr+0x108/0x2b0 [ 2153.711636][T15678] do_recvmmsg+0xdaf/0x2300 [ 2153.711636][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2153.711636][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2153.711636][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2153.711636][T15678] __do_fast_syscall_32+0x102/0x160 [ 2153.711636][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2153.711636][T15678] do_SYSENTER_32+0x73/0x90 [ 2153.711636][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.711636][T15678] [ 2153.711636][T15678] Uninit was stored to memory at: [ 2153.711636][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2153.711636][T15678] __msan_chain_origin+0x57/0xa0 [ 2153.711636][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2153.711636][T15678] get_compat_msghdr+0x108/0x2b0 [ 2153.711636][T15678] do_recvmmsg+0xdaf/0x2300 [ 2153.711636][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2153.711636][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2153.711636][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2153.711636][T15678] __do_fast_syscall_32+0x102/0x160 [ 2153.711636][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2153.711636][T15678] do_SYSENTER_32+0x73/0x90 [ 2153.711636][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.711636][T15678] [ 2153.711636][T15678] Uninit was stored to memory at: [ 2153.711636][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2153.711636][T15678] __msan_chain_origin+0x57/0xa0 [ 2153.711636][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2153.711636][T15678] get_compat_msghdr+0x108/0x2b0 [ 2153.711636][T15678] do_recvmmsg+0xdaf/0x2300 [ 2153.711636][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2153.711636][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2153.711636][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2153.711636][T15678] __do_fast_syscall_32+0x102/0x160 [ 2153.711636][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2153.711636][T15678] do_SYSENTER_32+0x73/0x90 [ 2153.711636][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.711636][T15678] [ 2153.711636][T15678] Uninit was stored to memory at: [ 2153.711636][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2153.711636][T15678] __msan_chain_origin+0x57/0xa0 [ 2153.711636][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2153.711636][T15678] get_compat_msghdr+0x108/0x2b0 [ 2153.711636][T15678] do_recvmmsg+0xdaf/0x2300 [ 2153.711636][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2153.711636][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2153.711636][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2153.711636][T15678] __do_fast_syscall_32+0x102/0x160 [ 2153.711636][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2153.711636][T15678] do_SYSENTER_32+0x73/0x90 [ 2153.711636][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.711636][T15678] [ 2153.711636][T15678] Uninit was stored to memory at: [ 2153.711636][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2153.711636][T15678] __msan_chain_origin+0x57/0xa0 [ 2153.711636][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2153.711636][T15678] get_compat_msghdr+0x108/0x2b0 [ 2153.711636][T15678] do_recvmmsg+0xdaf/0x2300 [ 2153.711636][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2153.711636][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2153.711636][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2153.711636][T15678] __do_fast_syscall_32+0x102/0x160 [ 2153.711636][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2153.711636][T15678] do_SYSENTER_32+0x73/0x90 [ 2153.711636][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2153.711636][T15678] [ 2153.711636][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2153.711636][T15678] do_recvmmsg+0xbc/0x2300 [ 2153.711636][T15678] do_recvmmsg+0xbc/0x2300 [ 2154.688991][T15690] not chained 1290000 origins [ 2154.691496][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2154.691496][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2154.691496][T15690] Call Trace: [ 2154.691496][T15690] dump_stack+0x21c/0x280 [ 2154.691496][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2154.691496][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2154.691496][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2154.731637][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2154.731637][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2154.731637][T15690] ? release_sock+0x26a/0x2d0 [ 2154.731637][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2154.731637][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2154.731637][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2154.731637][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2154.731637][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2154.731637][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2154.731637][T15690] __msan_chain_origin+0x57/0xa0 [ 2154.731637][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2154.731637][T15690] get_compat_msghdr+0x108/0x2b0 [ 2154.731637][T15690] do_recvmmsg+0xdaf/0x2300 [ 2154.731637][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2154.731637][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2154.731637][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2154.731637][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2154.731637][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2154.731637][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2154.731637][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2154.731637][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2154.731637][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2154.731637][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2154.731637][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2154.731637][T15690] __do_fast_syscall_32+0x102/0x160 [ 2154.731637][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2154.731637][T15690] do_SYSENTER_32+0x73/0x90 [ 2154.731637][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.731637][T15690] RIP: 0023:0xf7f1a549 [ 2154.731637][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2154.731637][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2154.731637][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2154.731637][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2154.731637][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2154.731637][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2154.731637][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2154.731637][T15690] Uninit was stored to memory at: [ 2154.731637][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2154.731637][T15690] __msan_chain_origin+0x57/0xa0 [ 2154.731637][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2154.731637][T15690] get_compat_msghdr+0x108/0x2b0 [ 2154.731637][T15690] do_recvmmsg+0xdaf/0x2300 [ 2154.731637][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2154.731637][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2154.731637][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2154.731637][T15690] __do_fast_syscall_32+0x102/0x160 [ 2154.731637][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2154.731637][T15690] do_SYSENTER_32+0x73/0x90 [ 2154.731637][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.731637][T15690] [ 2154.731637][T15690] Uninit was stored to memory at: [ 2154.731637][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2154.731637][T15690] __msan_chain_origin+0x57/0xa0 [ 2154.731637][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2154.731637][T15690] get_compat_msghdr+0x108/0x2b0 [ 2154.731637][T15690] do_recvmmsg+0xdaf/0x2300 [ 2154.731637][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2154.731637][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2154.731637][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2154.731637][T15690] __do_fast_syscall_32+0x102/0x160 [ 2154.731637][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2154.731637][T15690] do_SYSENTER_32+0x73/0x90 [ 2154.731637][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.731637][T15690] [ 2154.731637][T15690] Uninit was stored to memory at: [ 2154.731637][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2154.731637][T15690] __msan_chain_origin+0x57/0xa0 [ 2154.731637][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2154.731637][T15690] get_compat_msghdr+0x108/0x2b0 [ 2154.731637][T15690] do_recvmmsg+0xdaf/0x2300 [ 2154.731637][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2154.731637][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2154.731637][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2154.731637][T15690] __do_fast_syscall_32+0x102/0x160 [ 2154.731637][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2154.731637][T15690] do_SYSENTER_32+0x73/0x90 [ 2154.731637][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.731637][T15690] [ 2154.731637][T15690] Uninit was stored to memory at: [ 2154.731637][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2154.731637][T15690] __msan_chain_origin+0x57/0xa0 [ 2154.731637][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2154.731637][T15690] get_compat_msghdr+0x108/0x2b0 [ 2154.731637][T15690] do_recvmmsg+0xdaf/0x2300 [ 2154.731637][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2154.731637][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2154.731637][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2154.731637][T15690] __do_fast_syscall_32+0x102/0x160 [ 2154.731637][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2154.731637][T15690] do_SYSENTER_32+0x73/0x90 [ 2154.731637][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.731637][T15690] [ 2154.731637][T15690] Uninit was stored to memory at: [ 2154.731637][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2154.731637][T15690] __msan_chain_origin+0x57/0xa0 [ 2154.731637][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2154.731637][T15690] get_compat_msghdr+0x108/0x2b0 [ 2154.731637][T15690] do_recvmmsg+0xdaf/0x2300 [ 2154.731637][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2154.731637][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2154.731637][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2154.731637][T15690] __do_fast_syscall_32+0x102/0x160 [ 2154.731637][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2154.731637][T15690] do_SYSENTER_32+0x73/0x90 [ 2154.731637][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.731637][T15690] [ 2154.731637][T15690] Uninit was stored to memory at: [ 2154.731637][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2154.731637][T15690] __msan_chain_origin+0x57/0xa0 [ 2154.731637][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2154.731637][T15690] get_compat_msghdr+0x108/0x2b0 [ 2154.731637][T15690] do_recvmmsg+0xdaf/0x2300 [ 2154.731637][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2154.731637][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2154.731637][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2154.731637][T15690] __do_fast_syscall_32+0x102/0x160 [ 2154.731637][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2154.731637][T15690] do_SYSENTER_32+0x73/0x90 [ 2154.731637][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.731637][T15690] [ 2154.731637][T15690] Uninit was stored to memory at: [ 2154.731637][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2154.731637][T15690] __msan_chain_origin+0x57/0xa0 [ 2154.731637][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2154.731637][T15690] get_compat_msghdr+0x108/0x2b0 [ 2154.731637][T15690] do_recvmmsg+0xdaf/0x2300 [ 2154.731637][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2154.731637][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2154.731637][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2154.731637][T15690] __do_fast_syscall_32+0x102/0x160 [ 2154.731637][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2154.731637][T15690] do_SYSENTER_32+0x73/0x90 [ 2154.731637][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2154.731637][T15690] [ 2154.731637][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2154.731637][T15690] do_recvmmsg+0xbc/0x2300 [ 2154.731637][T15690] do_recvmmsg+0xbc/0x2300 [ 2155.614672][T15690] not chained 1300000 origins [ 2155.619379][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2155.621493][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2155.621493][T15690] Call Trace: [ 2155.621493][T15690] dump_stack+0x21c/0x280 [ 2155.641697][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2155.647691][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2155.647691][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2155.647691][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2155.647691][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2155.647691][T15690] ? release_sock+0x26a/0x2d0 [ 2155.647691][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2155.647691][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2155.647691][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2155.647691][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2155.647691][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2155.647691][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2155.647691][T15690] __msan_chain_origin+0x57/0xa0 [ 2155.647691][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2155.647691][T15690] get_compat_msghdr+0x108/0x2b0 [ 2155.647691][T15690] do_recvmmsg+0xdaf/0x2300 [ 2155.647691][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2155.647691][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2155.647691][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2155.647691][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2155.647691][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2155.647691][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2155.647691][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2155.647691][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2155.647691][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2155.647691][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2155.647691][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2155.647691][T15690] __do_fast_syscall_32+0x102/0x160 [ 2155.647691][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2155.647691][T15690] do_SYSENTER_32+0x73/0x90 [ 2155.647691][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.647691][T15690] RIP: 0023:0xf7f1a549 [ 2155.647691][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2155.647691][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2155.647691][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2155.647691][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2155.647691][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2155.647691][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2155.647691][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2155.647691][T15690] Uninit was stored to memory at: [ 2155.647691][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2155.647691][T15690] __msan_chain_origin+0x57/0xa0 [ 2155.647691][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2155.647691][T15690] get_compat_msghdr+0x108/0x2b0 [ 2155.647691][T15690] do_recvmmsg+0xdaf/0x2300 [ 2155.647691][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2155.647691][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2155.647691][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2155.647691][T15690] __do_fast_syscall_32+0x102/0x160 [ 2155.647691][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2155.647691][T15690] do_SYSENTER_32+0x73/0x90 [ 2155.647691][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.647691][T15690] [ 2155.647691][T15690] Uninit was stored to memory at: [ 2155.647691][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2155.647691][T15690] __msan_chain_origin+0x57/0xa0 [ 2155.647691][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2155.647691][T15690] get_compat_msghdr+0x108/0x2b0 [ 2155.647691][T15690] do_recvmmsg+0xdaf/0x2300 [ 2155.647691][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2155.647691][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2155.647691][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2155.647691][T15690] __do_fast_syscall_32+0x102/0x160 [ 2155.647691][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2155.647691][T15690] do_SYSENTER_32+0x73/0x90 [ 2155.647691][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.647691][T15690] [ 2155.647691][T15690] Uninit was stored to memory at: [ 2155.647691][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2155.647691][T15690] __msan_chain_origin+0x57/0xa0 [ 2155.647691][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2155.647691][T15690] get_compat_msghdr+0x108/0x2b0 [ 2155.647691][T15690] do_recvmmsg+0xdaf/0x2300 [ 2155.647691][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2155.647691][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2155.647691][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2155.647691][T15690] __do_fast_syscall_32+0x102/0x160 [ 2155.647691][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2155.647691][T15690] do_SYSENTER_32+0x73/0x90 [ 2155.647691][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.647691][T15690] [ 2155.647691][T15690] Uninit was stored to memory at: [ 2155.647691][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2155.647691][T15690] __msan_chain_origin+0x57/0xa0 [ 2155.647691][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2155.647691][T15690] get_compat_msghdr+0x108/0x2b0 [ 2155.647691][T15690] do_recvmmsg+0xdaf/0x2300 [ 2155.647691][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2155.647691][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2155.647691][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2155.647691][T15690] __do_fast_syscall_32+0x102/0x160 [ 2155.647691][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2155.647691][T15690] do_SYSENTER_32+0x73/0x90 [ 2155.647691][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.647691][T15690] [ 2155.647691][T15690] Uninit was stored to memory at: [ 2155.647691][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2155.647691][T15690] __msan_chain_origin+0x57/0xa0 [ 2155.647691][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2155.647691][T15690] get_compat_msghdr+0x108/0x2b0 [ 2155.647691][T15690] do_recvmmsg+0xdaf/0x2300 [ 2155.647691][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2155.647691][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2155.647691][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2155.647691][T15690] __do_fast_syscall_32+0x102/0x160 [ 2155.647691][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2155.647691][T15690] do_SYSENTER_32+0x73/0x90 [ 2155.647691][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.647691][T15690] [ 2155.647691][T15690] Uninit was stored to memory at: [ 2155.647691][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2155.647691][T15690] __msan_chain_origin+0x57/0xa0 [ 2155.647691][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2155.647691][T15690] get_compat_msghdr+0x108/0x2b0 [ 2155.647691][T15690] do_recvmmsg+0xdaf/0x2300 [ 2155.647691][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2155.647691][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2155.647691][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2155.647691][T15690] __do_fast_syscall_32+0x102/0x160 [ 2155.647691][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2155.647691][T15690] do_SYSENTER_32+0x73/0x90 [ 2155.647691][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.647691][T15690] [ 2155.647691][T15690] Uninit was stored to memory at: [ 2155.647691][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2155.647691][T15690] __msan_chain_origin+0x57/0xa0 [ 2155.647691][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2155.647691][T15690] get_compat_msghdr+0x108/0x2b0 [ 2155.647691][T15690] do_recvmmsg+0xdaf/0x2300 [ 2155.647691][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2155.647691][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2155.647691][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2155.647691][T15690] __do_fast_syscall_32+0x102/0x160 [ 2155.647691][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2155.647691][T15690] do_SYSENTER_32+0x73/0x90 [ 2155.647691][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2155.647691][T15690] [ 2155.647691][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2155.647691][T15690] do_recvmmsg+0xbc/0x2300 [ 2155.647691][T15690] do_recvmmsg+0xbc/0x2300 [ 2156.533486][T15690] not chained 1310000 origins [ 2156.538187][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2156.541594][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.541594][T15690] Call Trace: [ 2156.541594][T15690] dump_stack+0x21c/0x280 [ 2156.562023][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2156.562023][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2156.562023][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2156.562023][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2156.562023][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2156.562023][T15690] ? release_sock+0x26a/0x2d0 [ 2156.562023][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2156.562023][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2156.562023][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2156.562023][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2156.562023][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] __msan_chain_origin+0x57/0xa0 [ 2156.562023][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2156.562023][T15690] get_compat_msghdr+0x108/0x2b0 [ 2156.562023][T15690] do_recvmmsg+0xdaf/0x2300 [ 2156.562023][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2156.562023][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2156.562023][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2156.562023][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2156.562023][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2156.562023][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2156.562023][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.562023][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.562023][T15690] __do_fast_syscall_32+0x102/0x160 [ 2156.562023][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2156.562023][T15690] do_SYSENTER_32+0x73/0x90 [ 2156.562023][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.562023][T15690] RIP: 0023:0xf7f1a549 [ 2156.562023][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2156.743758][T15678] not chained 1320000 origins [ 2156.562023][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2156.562023][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2156.562023][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2156.562023][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2156.562023][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2156.562023][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2156.562023][T15690] Uninit was stored to memory at: [ 2156.751506][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2156.751506][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2156.562023][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2156.751506][T15678] Call Trace: [ 2156.562023][T15690] __msan_chain_origin+0x57/0xa0 [ 2156.751506][T15678] dump_stack+0x21c/0x280 [ 2156.562023][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2156.751506][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2156.562023][T15690] get_compat_msghdr+0x108/0x2b0 [ 2156.751506][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2156.562023][T15690] do_recvmmsg+0xdaf/0x2300 [ 2156.751506][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2156.562023][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2156.751506][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2156.562023][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.751506][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2156.562023][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.751506][T15678] ? release_sock+0x26a/0x2d0 [ 2156.562023][T15690] __do_fast_syscall_32+0x102/0x160 [ 2156.751506][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2156.562023][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2156.751506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] do_SYSENTER_32+0x73/0x90 [ 2156.751506][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2156.562023][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.751506][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2156.562023][T15690] [ 2156.751506][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2156.562023][T15690] Uninit was stored to memory at: [ 2156.751506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2156.751506][T15678] __msan_chain_origin+0x57/0xa0 [ 2156.562023][T15690] __msan_chain_origin+0x57/0xa0 [ 2156.751506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2156.562023][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2156.751506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2156.562023][T15690] get_compat_msghdr+0x108/0x2b0 [ 2156.751506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2156.562023][T15690] do_recvmmsg+0xdaf/0x2300 [ 2156.751506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2156.751506][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2156.562023][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.751506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.751506][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2156.562023][T15690] __do_fast_syscall_32+0x102/0x160 [ 2156.751506][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2156.562023][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2156.751506][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2156.562023][T15690] do_SYSENTER_32+0x73/0x90 [ 2156.751506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2156.562023][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.751506][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2156.562023][T15690] [ 2156.751506][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2156.562023][T15690] Uninit was stored to memory at: [ 2156.751506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.562023][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2156.751506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.562023][T15690] __msan_chain_origin+0x57/0xa0 [ 2156.751506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2156.562023][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2156.562023][T15690] get_compat_msghdr+0x108/0x2b0 [ 2156.751506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2156.562023][T15690] do_recvmmsg+0xdaf/0x2300 [ 2156.751506][T15678] do_SYSENTER_32+0x73/0x90 [ 2156.562023][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2156.751506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.562023][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.751506][T15678] RIP: 0023:0xf7f1a549 [ 2156.562023][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.751506][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2156.562023][T15690] __do_fast_syscall_32+0x102/0x160 [ 2156.751506][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 [ 2156.562023][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2156.751506][T15678] ORIG_RAX: 0000000000000151 [ 2156.562023][T15690] do_SYSENTER_32+0x73/0x90 [ 2156.751506][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2156.562023][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.751506][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2156.562023][T15690] [ 2156.751506][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2156.562023][T15690] Uninit was stored to memory at: [ 2156.751506][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2156.562023][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2156.751506][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2156.562023][T15690] __msan_chain_origin+0x57/0xa0 [ 2156.751506][T15678] Uninit was stored to memory at: [ 2156.562023][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2156.751506][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2156.562023][T15690] get_compat_msghdr+0x108/0x2b0 [ 2156.751506][T15678] __msan_chain_origin+0x57/0xa0 [ 2156.562023][T15690] do_recvmmsg+0xdaf/0x2300 [ 2156.751506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2156.562023][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2156.751506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2156.562023][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.751506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2156.562023][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.751506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2156.562023][T15690] __do_fast_syscall_32+0x102/0x160 [ 2156.751506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.562023][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2156.751506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.562023][T15690] do_SYSENTER_32+0x73/0x90 [ 2156.751506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2156.562023][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.751506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2156.562023][T15690] [ 2156.751506][T15678] do_SYSENTER_32+0x73/0x90 [ 2156.562023][T15690] Uninit was stored to memory at: [ 2156.751506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.562023][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2156.751506][T15678] [ 2156.562023][T15690] __msan_chain_origin+0x57/0xa0 [ 2156.751506][T15678] Uninit was stored to memory at: [ 2156.562023][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2156.751506][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2156.562023][T15690] get_compat_msghdr+0x108/0x2b0 [ 2156.751506][T15678] __msan_chain_origin+0x57/0xa0 [ 2156.562023][T15690] do_recvmmsg+0xdaf/0x2300 [ 2156.751506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2156.562023][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2156.751506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2156.562023][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.751506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2156.562023][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.751506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2156.562023][T15690] __do_fast_syscall_32+0x102/0x160 [ 2156.751506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.562023][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2156.751506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.562023][T15690] do_SYSENTER_32+0x73/0x90 [ 2156.751506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2156.562023][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.751506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2156.562023][T15690] [ 2156.751506][T15678] do_SYSENTER_32+0x73/0x90 [ 2156.562023][T15690] Uninit was stored to memory at: [ 2156.751506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.562023][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2156.751506][T15678] [ 2156.562023][T15690] __msan_chain_origin+0x57/0xa0 [ 2156.751506][T15678] Uninit was stored to memory at: [ 2156.562023][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2156.751506][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2156.562023][T15690] get_compat_msghdr+0x108/0x2b0 [ 2156.751506][T15678] __msan_chain_origin+0x57/0xa0 [ 2156.562023][T15690] do_recvmmsg+0xdaf/0x2300 [ 2156.751506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2156.562023][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2156.751506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2156.562023][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.751506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2156.562023][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.751506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2156.562023][T15690] __do_fast_syscall_32+0x102/0x160 [ 2156.751506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.562023][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2156.751506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.562023][T15690] do_SYSENTER_32+0x73/0x90 [ 2156.751506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2156.562023][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.562023][T15690] [ 2156.751506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2156.562023][T15690] Uninit was stored to memory at: [ 2156.751506][T15678] do_SYSENTER_32+0x73/0x90 [ 2156.562023][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2156.751506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.562023][T15690] __msan_chain_origin+0x57/0xa0 [ 2156.751506][T15678] [ 2156.562023][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2156.751506][T15678] Uninit was stored to memory at: [ 2156.562023][T15690] get_compat_msghdr+0x108/0x2b0 [ 2156.751506][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2156.562023][T15690] do_recvmmsg+0xdaf/0x2300 [ 2156.751506][T15678] __msan_chain_origin+0x57/0xa0 [ 2156.562023][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2156.751506][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2156.562023][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.751506][T15678] get_compat_msghdr+0x108/0x2b0 [ 2156.562023][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.751506][T15678] do_recvmmsg+0xdaf/0x2300 [ 2156.562023][T15690] __do_fast_syscall_32+0x102/0x160 [ 2156.751506][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2156.562023][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2156.751506][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2156.562023][T15690] do_SYSENTER_32+0x73/0x90 [ 2156.751506][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2156.562023][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.751506][T15678] __do_fast_syscall_32+0x102/0x160 [ 2156.562023][T15690] [ 2156.751506][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2156.562023][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2156.751506][T15678] do_SYSENTER_32+0x73/0x90 [ 2156.562023][T15690] do_recvmmsg+0xbc/0x2300 [ 2156.751506][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2156.562023][T15690] do_recvmmsg+0xbc/0x2300 [ 2156.751506][T15678] [ 2157.855396][T15678] Uninit was stored to memory at: [ 2157.855396][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2157.855396][T15678] __msan_chain_origin+0x57/0xa0 [ 2157.855396][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2157.855396][T15678] get_compat_msghdr+0x108/0x2b0 [ 2157.855396][T15678] do_recvmmsg+0xdaf/0x2300 [ 2157.855396][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2157.855396][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2157.855396][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2157.855396][T15678] __do_fast_syscall_32+0x102/0x160 [ 2157.855396][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2157.855396][T15678] do_SYSENTER_32+0x73/0x90 [ 2157.855396][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2157.855396][T15678] [ 2157.855396][T15678] Uninit was stored to memory at: [ 2157.855396][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2157.855396][T15678] __msan_chain_origin+0x57/0xa0 [ 2157.855396][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2157.855396][T15678] get_compat_msghdr+0x108/0x2b0 [ 2157.855396][T15678] do_recvmmsg+0xdaf/0x2300 [ 2157.855396][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2157.855396][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2157.855396][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2157.855396][T15678] __do_fast_syscall_32+0x102/0x160 [ 2157.855396][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2157.855396][T15678] do_SYSENTER_32+0x73/0x90 [ 2157.855396][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2157.855396][T15678] [ 2157.855396][T15678] Uninit was stored to memory at: [ 2157.855396][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2157.855396][T15678] __msan_chain_origin+0x57/0xa0 [ 2157.855396][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2157.855396][T15678] get_compat_msghdr+0x108/0x2b0 [ 2157.855396][T15678] do_recvmmsg+0xdaf/0x2300 [ 2157.855396][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2157.855396][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2157.855396][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2157.855396][T15678] __do_fast_syscall_32+0x102/0x160 [ 2157.855396][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2157.855396][T15678] do_SYSENTER_32+0x73/0x90 [ 2157.855396][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2157.855396][T15678] [ 2157.855396][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2157.855396][T15678] do_recvmmsg+0xbc/0x2300 [ 2157.855396][T15678] do_recvmmsg+0xbc/0x2300 [ 2158.248380][T15690] not chained 1330000 origins [ 2158.251497][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2158.261654][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2158.261654][T15690] Call Trace: [ 2158.261654][T15690] dump_stack+0x21c/0x280 [ 2158.261654][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2158.261654][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2158.261654][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2158.261654][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2158.261654][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2158.261654][T15690] ? release_sock+0x26a/0x2d0 [ 2158.309505][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2158.309505][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2158.309505][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2158.309505][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2158.309505][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2158.309505][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2158.309505][T15690] __msan_chain_origin+0x57/0xa0 [ 2158.309505][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2158.309505][T15690] get_compat_msghdr+0x108/0x2b0 [ 2158.309505][T15690] do_recvmmsg+0xdaf/0x2300 [ 2158.309505][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2158.309505][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2158.309505][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2158.309505][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2158.309505][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2158.309505][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2158.309505][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2158.309505][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2158.309505][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2158.309505][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2158.309505][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2158.309505][T15690] __do_fast_syscall_32+0x102/0x160 [ 2158.309505][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2158.309505][T15690] do_SYSENTER_32+0x73/0x90 [ 2158.309505][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2158.309505][T15690] RIP: 0023:0xf7f1a549 [ 2158.309505][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2158.309505][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2158.309505][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2158.309505][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2158.309505][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2158.309505][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2158.309505][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2158.309505][T15690] Uninit was stored to memory at: [ 2158.309505][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2158.309505][T15690] __msan_chain_origin+0x57/0xa0 [ 2158.309505][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2158.309505][T15690] get_compat_msghdr+0x108/0x2b0 [ 2158.309505][T15690] do_recvmmsg+0xdaf/0x2300 [ 2158.309505][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2158.309505][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2158.309505][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2158.309505][T15690] __do_fast_syscall_32+0x102/0x160 [ 2158.309505][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2158.309505][T15690] do_SYSENTER_32+0x73/0x90 [ 2158.309505][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2158.309505][T15690] [ 2158.309505][T15690] Uninit was stored to memory at: [ 2158.309505][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2158.309505][T15690] __msan_chain_origin+0x57/0xa0 [ 2158.309505][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2158.309505][T15690] get_compat_msghdr+0x108/0x2b0 [ 2158.309505][T15690] do_recvmmsg+0xdaf/0x2300 [ 2158.309505][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2158.309505][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2158.309505][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2158.309505][T15690] __do_fast_syscall_32+0x102/0x160 [ 2158.309505][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2158.309505][T15690] do_SYSENTER_32+0x73/0x90 [ 2158.309505][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2158.309505][T15690] [ 2158.309505][T15690] Uninit was stored to memory at: [ 2158.309505][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2158.309505][T15690] __msan_chain_origin+0x57/0xa0 [ 2158.309505][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2158.309505][T15690] get_compat_msghdr+0x108/0x2b0 [ 2158.309505][T15690] do_recvmmsg+0xdaf/0x2300 [ 2158.309505][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2158.309505][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2158.309505][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2158.309505][T15690] __do_fast_syscall_32+0x102/0x160 [ 2158.309505][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2158.309505][T15690] do_SYSENTER_32+0x73/0x90 [ 2158.309505][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2158.309505][T15690] [ 2158.309505][T15690] Uninit was stored to memory at: [ 2158.309505][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2158.309505][T15690] __msan_chain_origin+0x57/0xa0 [ 2158.309505][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2158.309505][T15690] get_compat_msghdr+0x108/0x2b0 [ 2158.309505][T15690] do_recvmmsg+0xdaf/0x2300 [ 2158.309505][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2158.309505][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2158.309505][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2158.309505][T15690] __do_fast_syscall_32+0x102/0x160 [ 2158.309505][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2158.309505][T15690] do_SYSENTER_32+0x73/0x90 [ 2158.309505][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2158.309505][T15690] [ 2158.309505][T15690] Uninit was stored to memory at: [ 2158.309505][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2158.309505][T15690] __msan_chain_origin+0x57/0xa0 [ 2158.309505][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2158.309505][T15690] get_compat_msghdr+0x108/0x2b0 [ 2158.309505][T15690] do_recvmmsg+0xdaf/0x2300 [ 2158.309505][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2158.309505][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2158.309505][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2158.309505][T15690] __do_fast_syscall_32+0x102/0x160 [ 2158.309505][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2158.309505][T15690] do_SYSENTER_32+0x73/0x90 [ 2158.309505][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2158.309505][T15690] [ 2158.309505][T15690] Uninit was stored to memory at: [ 2158.309505][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2158.309505][T15690] __msan_chain_origin+0x57/0xa0 [ 2158.309505][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2158.309505][T15690] get_compat_msghdr+0x108/0x2b0 [ 2158.309505][T15690] do_recvmmsg+0xdaf/0x2300 [ 2158.309505][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2158.309505][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2158.309505][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2158.309505][T15690] __do_fast_syscall_32+0x102/0x160 [ 2158.309505][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2158.309505][T15690] do_SYSENTER_32+0x73/0x90 [ 2158.309505][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2158.309505][T15690] [ 2158.309505][T15690] Uninit was stored to memory at: [ 2158.309505][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2158.309505][T15690] __msan_chain_origin+0x57/0xa0 [ 2158.309505][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2158.309505][T15690] get_compat_msghdr+0x108/0x2b0 [ 2158.309505][T15690] do_recvmmsg+0xdaf/0x2300 [ 2158.309505][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2158.309505][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2158.309505][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2158.309505][T15690] __do_fast_syscall_32+0x102/0x160 [ 2158.309505][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2158.309505][T15690] do_SYSENTER_32+0x73/0x90 [ 2158.309505][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2158.309505][T15690] [ 2158.309505][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2158.309505][T15690] do_recvmmsg+0xbc/0x2300 [ 2158.309505][T15690] do_recvmmsg+0xbc/0x2300 [ 2159.150481][T15678] not chained 1340000 origins [ 2159.151582][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2159.151582][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2159.151582][T15678] Call Trace: [ 2159.151582][T15678] dump_stack+0x21c/0x280 [ 2159.151582][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2159.151582][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2159.151582][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2159.151582][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2159.201680][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2159.201680][T15678] ? release_sock+0x26a/0x2d0 [ 2159.201680][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2159.201680][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2159.201680][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2159.201680][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2159.201680][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2159.201680][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2159.201680][T15678] __msan_chain_origin+0x57/0xa0 [ 2159.201680][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2159.201680][T15678] get_compat_msghdr+0x108/0x2b0 [ 2159.201680][T15678] do_recvmmsg+0xdaf/0x2300 [ 2159.201680][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2159.201680][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2159.201680][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2159.201680][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2159.201680][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2159.201680][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2159.201680][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2159.201680][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2159.201680][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2159.201680][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2159.201680][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2159.201680][T15678] __do_fast_syscall_32+0x102/0x160 [ 2159.201680][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2159.201680][T15678] do_SYSENTER_32+0x73/0x90 [ 2159.201680][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2159.201680][T15678] RIP: 0023:0xf7f1a549 [ 2159.201680][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2159.201680][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2159.201680][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2159.201680][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2159.201680][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2159.201680][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2159.201680][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2159.201680][T15678] Uninit was stored to memory at: [ 2159.201680][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2159.201680][T15678] __msan_chain_origin+0x57/0xa0 [ 2159.201680][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2159.201680][T15678] get_compat_msghdr+0x108/0x2b0 [ 2159.201680][T15678] do_recvmmsg+0xdaf/0x2300 [ 2159.201680][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2159.201680][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2159.201680][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2159.201680][T15678] __do_fast_syscall_32+0x102/0x160 [ 2159.201680][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2159.471678][T15678] do_SYSENTER_32+0x73/0x90 [ 2159.471678][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2159.471678][T15678] [ 2159.471678][T15678] Uninit was stored to memory at: [ 2159.471678][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2159.471678][T15678] __msan_chain_origin+0x57/0xa0 [ 2159.471678][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2159.471678][T15678] get_compat_msghdr+0x108/0x2b0 [ 2159.471678][T15678] do_recvmmsg+0xdaf/0x2300 [ 2159.471678][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2159.471678][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2159.471678][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2159.471678][T15678] __do_fast_syscall_32+0x102/0x160 [ 2159.471678][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2159.471678][T15678] do_SYSENTER_32+0x73/0x90 [ 2159.471678][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2159.471678][T15678] [ 2159.471678][T15678] Uninit was stored to memory at: [ 2159.561707][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2159.561707][T15678] __msan_chain_origin+0x57/0xa0 [ 2159.561707][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2159.561707][T15678] get_compat_msghdr+0x108/0x2b0 [ 2159.561707][T15678] do_recvmmsg+0xdaf/0x2300 [ 2159.561707][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2159.591688][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2159.591688][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2159.591688][T15678] __do_fast_syscall_32+0x102/0x160 [ 2159.591688][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2159.591688][T15678] do_SYSENTER_32+0x73/0x90 [ 2159.621697][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2159.621697][T15678] [ 2159.621697][T15678] Uninit was stored to memory at: [ 2159.621697][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2159.621697][T15678] __msan_chain_origin+0x57/0xa0 [ 2159.621697][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2159.621697][T15678] get_compat_msghdr+0x108/0x2b0 [ 2159.621697][T15678] do_recvmmsg+0xdaf/0x2300 [ 2159.621697][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2159.621697][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2159.621697][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2159.621697][T15678] __do_fast_syscall_32+0x102/0x160 [ 2159.621697][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2159.621697][T15678] do_SYSENTER_32+0x73/0x90 [ 2159.621697][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2159.621697][T15678] [ 2159.621697][T15678] Uninit was stored to memory at: [ 2159.621697][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2159.621697][T15678] __msan_chain_origin+0x57/0xa0 [ 2159.621697][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2159.621697][T15678] get_compat_msghdr+0x108/0x2b0 [ 2159.621697][T15678] do_recvmmsg+0xdaf/0x2300 [ 2159.621697][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2159.621697][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2159.621697][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2159.621697][T15678] __do_fast_syscall_32+0x102/0x160 [ 2159.621697][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2159.621697][T15678] do_SYSENTER_32+0x73/0x90 [ 2159.621697][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2159.621697][T15678] [ 2159.621697][T15678] Uninit was stored to memory at: [ 2159.621697][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2159.621697][T15678] __msan_chain_origin+0x57/0xa0 [ 2159.621697][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2159.621697][T15678] get_compat_msghdr+0x108/0x2b0 [ 2159.621697][T15678] do_recvmmsg+0xdaf/0x2300 [ 2159.621697][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2159.621697][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2159.621697][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2159.621697][T15678] __do_fast_syscall_32+0x102/0x160 [ 2159.621697][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2159.621697][T15678] do_SYSENTER_32+0x73/0x90 [ 2159.621697][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2159.621697][T15678] [ 2159.621697][T15678] Uninit was stored to memory at: [ 2159.621697][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2159.621697][T15678] __msan_chain_origin+0x57/0xa0 [ 2159.621697][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2159.621697][T15678] get_compat_msghdr+0x108/0x2b0 [ 2159.621697][T15678] do_recvmmsg+0xdaf/0x2300 [ 2159.621697][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2159.621697][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2159.621697][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2159.621697][T15678] __do_fast_syscall_32+0x102/0x160 [ 2159.621697][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2159.621697][T15678] do_SYSENTER_32+0x73/0x90 [ 2159.621697][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2159.621697][T15678] [ 2159.621697][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2159.621697][T15678] do_recvmmsg+0xbc/0x2300 [ 2159.621697][T15678] do_recvmmsg+0xbc/0x2300 [ 2160.096293][T15678] not chained 1350000 origins [ 2160.101001][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2160.101497][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.101497][T15678] Call Trace: [ 2160.101497][T15678] dump_stack+0x21c/0x280 [ 2160.101497][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2160.101497][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2160.101497][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2160.101497][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2160.101497][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2160.153422][T15678] ? release_sock+0x26a/0x2d0 [ 2160.153422][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2160.153422][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.153422][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2160.153422][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2160.153422][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2160.153422][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.153422][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.153422][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.153422][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.153422][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.153422][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.153422][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2160.153422][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.153422][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2160.153422][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2160.153422][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2160.153422][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.153422][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2160.153422][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.153422][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.153422][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.153422][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.153422][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.153422][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.153422][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.153422][T15678] RIP: 0023:0xf7f1a549 [ 2160.153422][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2160.153422][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2160.153422][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2160.153422][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2160.153422][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2160.153422][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2160.153422][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2160.153422][T15678] Uninit was stored to memory at: [ 2160.153422][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.153422][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.153422][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.153422][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.153422][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.153422][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.153422][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.153422][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.153422][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.153422][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.153422][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.153422][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.153422][T15678] [ 2160.153422][T15678] Uninit was stored to memory at: [ 2160.153422][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.153422][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.153422][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.153422][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.153422][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.153422][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.153422][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.153422][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.153422][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.153422][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.153422][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.153422][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.153422][T15678] [ 2160.153422][T15678] Uninit was stored to memory at: [ 2160.153422][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.153422][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.153422][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.153422][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.153422][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.153422][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.153422][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.153422][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.153422][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.153422][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.153422][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.153422][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.153422][T15678] [ 2160.153422][T15678] Uninit was stored to memory at: [ 2160.153422][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.153422][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.153422][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.153422][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.153422][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.153422][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.153422][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.153422][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.153422][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.153422][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.153422][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.153422][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.153422][T15678] [ 2160.153422][T15678] Uninit was stored to memory at: [ 2160.153422][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.153422][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.153422][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.153422][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.153422][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.153422][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.153422][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.153422][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.153422][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.153422][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.153422][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.153422][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.153422][T15678] [ 2160.153422][T15678] Uninit was stored to memory at: [ 2160.153422][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.153422][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.153422][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.153422][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.153422][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.153422][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.153422][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.153422][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.153422][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.153422][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.153422][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.153422][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.153422][T15678] [ 2160.153422][T15678] Uninit was stored to memory at: [ 2160.153422][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.153422][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.153422][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.153422][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.153422][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.153422][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.153422][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.153422][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.153422][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.153422][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.153422][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.153422][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.153422][T15678] [ 2160.153422][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2160.153422][T15678] do_recvmmsg+0xbc/0x2300 [ 2160.153422][T15678] do_recvmmsg+0xbc/0x2300 [ 2160.959492][T15678] not chained 1360000 origins [ 2160.961507][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2160.961507][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2160.961507][T15678] Call Trace: [ 2160.961507][T15678] dump_stack+0x21c/0x280 [ 2160.961507][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2160.961507][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2160.961507][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2160.961507][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2160.961507][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2160.961507][T15678] ? release_sock+0x26a/0x2d0 [ 2160.961507][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2160.961507][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.961507][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2160.961507][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2160.961507][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2160.961507][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.961507][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.961507][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.961507][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.961507][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.961507][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.961507][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2160.961507][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.961507][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2160.961507][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2160.961507][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2160.961507][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.961507][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2160.961507][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2160.961507][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.961507][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.961507][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.961507][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.961507][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.961507][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.961507][T15678] RIP: 0023:0xf7f1a549 [ 2160.961507][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2160.961507][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2160.961507][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2160.961507][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2160.961507][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2160.961507][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2160.961507][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2160.961507][T15678] Uninit was stored to memory at: [ 2160.961507][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.961507][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.961507][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.961507][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.961507][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.961507][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.961507][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.961507][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.961507][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.961507][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.961507][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.961507][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.961507][T15678] [ 2160.961507][T15678] Uninit was stored to memory at: [ 2160.961507][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.961507][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.961507][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.961507][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.961507][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.961507][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.961507][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.961507][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.961507][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.961507][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.961507][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.961507][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.961507][T15678] [ 2160.961507][T15678] Uninit was stored to memory at: [ 2160.961507][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.961507][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.961507][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.961507][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.961507][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.961507][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.961507][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.961507][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.961507][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.961507][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.961507][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.961507][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.961507][T15678] [ 2160.961507][T15678] Uninit was stored to memory at: [ 2160.961507][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.961507][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.961507][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.961507][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.961507][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.961507][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.961507][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.961507][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.961507][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.961507][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.961507][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.961507][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.961507][T15678] [ 2160.961507][T15678] Uninit was stored to memory at: [ 2160.961507][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.961507][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.961507][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.961507][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.961507][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.961507][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.961507][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.961507][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.961507][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.961507][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.961507][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.961507][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.961507][T15678] [ 2160.961507][T15678] Uninit was stored to memory at: [ 2160.961507][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.961507][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.961507][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.961507][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.961507][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.961507][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.961507][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.961507][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.961507][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.961507][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.961507][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.961507][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.961507][T15678] [ 2160.961507][T15678] Uninit was stored to memory at: [ 2160.961507][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2160.961507][T15678] __msan_chain_origin+0x57/0xa0 [ 2160.961507][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2160.961507][T15678] get_compat_msghdr+0x108/0x2b0 [ 2160.961507][T15678] do_recvmmsg+0xdaf/0x2300 [ 2160.961507][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2160.961507][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2160.961507][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2160.961507][T15678] __do_fast_syscall_32+0x102/0x160 [ 2160.961507][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2160.961507][T15678] do_SYSENTER_32+0x73/0x90 [ 2160.961507][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2160.961507][T15678] [ 2160.961507][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2160.961507][T15678] do_recvmmsg+0xbc/0x2300 [ 2160.961507][T15678] do_recvmmsg+0xbc/0x2300 [ 2161.853853][T15678] not chained 1370000 origins [ 2161.858616][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2161.861509][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2161.861509][T15678] Call Trace: [ 2161.861509][T15678] dump_stack+0x21c/0x280 [ 2161.861509][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2161.861509][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2161.861509][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2161.861509][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2161.861509][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2161.861509][T15678] ? release_sock+0x26a/0x2d0 [ 2161.861509][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2161.861509][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2161.861509][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2161.861509][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2161.861509][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2161.861509][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2161.861509][T15678] __msan_chain_origin+0x57/0xa0 [ 2161.861509][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2161.861509][T15678] get_compat_msghdr+0x108/0x2b0 [ 2161.861509][T15678] do_recvmmsg+0xdaf/0x2300 [ 2161.861509][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2161.861509][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2161.861509][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2161.861509][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2161.861509][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2161.861509][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2161.861509][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2161.861509][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2161.861509][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2161.861509][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2161.861509][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2161.861509][T15678] __do_fast_syscall_32+0x102/0x160 [ 2161.861509][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2161.861509][T15678] do_SYSENTER_32+0x73/0x90 [ 2161.861509][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2161.861509][T15678] RIP: 0023:0xf7f1a549 [ 2161.861509][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2161.861509][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2161.861509][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2161.861509][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2161.861509][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2161.861509][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2161.861509][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2161.861509][T15678] Uninit was stored to memory at: [ 2161.861509][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2161.861509][T15678] __msan_chain_origin+0x57/0xa0 [ 2161.861509][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2161.861509][T15678] get_compat_msghdr+0x108/0x2b0 [ 2161.861509][T15678] do_recvmmsg+0xdaf/0x2300 [ 2161.861509][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2161.861509][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2161.861509][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2161.861509][T15678] __do_fast_syscall_32+0x102/0x160 [ 2161.861509][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2161.861509][T15678] do_SYSENTER_32+0x73/0x90 [ 2161.861509][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2161.861509][T15678] [ 2161.861509][T15678] Uninit was stored to memory at: [ 2161.861509][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2161.861509][T15678] __msan_chain_origin+0x57/0xa0 [ 2161.861509][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2161.861509][T15678] get_compat_msghdr+0x108/0x2b0 [ 2161.861509][T15678] do_recvmmsg+0xdaf/0x2300 [ 2161.861509][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2161.861509][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2161.861509][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2161.861509][T15678] __do_fast_syscall_32+0x102/0x160 [ 2161.861509][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2161.861509][T15678] do_SYSENTER_32+0x73/0x90 [ 2161.861509][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2161.861509][T15678] [ 2161.861509][T15678] Uninit was stored to memory at: [ 2161.861509][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2161.861509][T15678] __msan_chain_origin+0x57/0xa0 [ 2161.861509][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2161.861509][T15678] get_compat_msghdr+0x108/0x2b0 [ 2161.861509][T15678] do_recvmmsg+0xdaf/0x2300 [ 2161.861509][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2161.861509][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2161.861509][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2161.861509][T15678] __do_fast_syscall_32+0x102/0x160 [ 2161.861509][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2161.861509][T15678] do_SYSENTER_32+0x73/0x90 [ 2161.861509][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2161.861509][T15678] [ 2161.861509][T15678] Uninit was stored to memory at: [ 2161.861509][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2161.861509][T15678] __msan_chain_origin+0x57/0xa0 [ 2161.861509][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2161.861509][T15678] get_compat_msghdr+0x108/0x2b0 [ 2161.861509][T15678] do_recvmmsg+0xdaf/0x2300 [ 2161.861509][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2161.861509][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2161.861509][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2161.861509][T15678] __do_fast_syscall_32+0x102/0x160 [ 2161.861509][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2161.861509][T15678] do_SYSENTER_32+0x73/0x90 [ 2161.861509][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2161.861509][T15678] [ 2161.861509][T15678] Uninit was stored to memory at: [ 2161.861509][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2161.861509][T15678] __msan_chain_origin+0x57/0xa0 [ 2161.861509][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2161.861509][T15678] get_compat_msghdr+0x108/0x2b0 [ 2161.861509][T15678] do_recvmmsg+0xdaf/0x2300 [ 2161.861509][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2161.861509][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2161.861509][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2161.861509][T15678] __do_fast_syscall_32+0x102/0x160 [ 2161.861509][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2161.861509][T15678] do_SYSENTER_32+0x73/0x90 [ 2161.861509][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2161.861509][T15678] [ 2161.861509][T15678] Uninit was stored to memory at: [ 2161.861509][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2161.861509][T15678] __msan_chain_origin+0x57/0xa0 [ 2161.861509][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2161.861509][T15678] get_compat_msghdr+0x108/0x2b0 [ 2161.861509][T15678] do_recvmmsg+0xdaf/0x2300 [ 2161.861509][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2161.861509][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2161.861509][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2161.861509][T15678] __do_fast_syscall_32+0x102/0x160 [ 2161.861509][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2161.861509][T15678] do_SYSENTER_32+0x73/0x90 [ 2161.861509][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2161.861509][T15678] [ 2161.861509][T15678] Uninit was stored to memory at: [ 2161.861509][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2161.861509][T15678] __msan_chain_origin+0x57/0xa0 [ 2161.861509][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2161.861509][T15678] get_compat_msghdr+0x108/0x2b0 [ 2161.861509][T15678] do_recvmmsg+0xdaf/0x2300 [ 2161.861509][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2161.861509][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2161.861509][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2161.861509][T15678] __do_fast_syscall_32+0x102/0x160 [ 2161.861509][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2161.861509][T15678] do_SYSENTER_32+0x73/0x90 [ 2161.861509][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2161.861509][T15678] [ 2161.861509][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2161.861509][T15678] do_recvmmsg+0xbc/0x2300 [ 2161.861509][T15678] do_recvmmsg+0xbc/0x2300 [ 2162.707817][T15690] not chained 1380000 origins [ 2162.711498][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2162.713479][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.713479][T15690] Call Trace: [ 2162.713479][T15690] dump_stack+0x21c/0x280 [ 2162.713479][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2162.713479][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2162.713479][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2162.713479][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2162.713479][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2162.713479][T15690] ? release_sock+0x26a/0x2d0 [ 2162.713479][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2162.713479][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2162.713479][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2162.713479][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2162.713479][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2162.713479][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2162.802929][T15690] __msan_chain_origin+0x57/0xa0 [ 2162.802929][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2162.802929][T15690] get_compat_msghdr+0x108/0x2b0 [ 2162.802929][T15690] do_recvmmsg+0xdaf/0x2300 [ 2162.802929][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2162.802929][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2162.802929][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2162.802929][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2162.802929][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2162.802929][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2162.802929][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2162.802929][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2162.802929][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2162.802929][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2162.802929][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2162.802929][T15690] __do_fast_syscall_32+0x102/0x160 [ 2162.802929][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2162.802929][T15690] do_SYSENTER_32+0x73/0x90 [ 2162.802929][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2162.802929][T15690] RIP: 0023:0xf7f1a549 [ 2162.802929][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2162.802929][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2162.802929][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2162.802929][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2162.802929][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2162.802929][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2162.802929][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2162.802929][T15690] Uninit was stored to memory at: [ 2162.802929][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2162.802929][T15690] __msan_chain_origin+0x57/0xa0 [ 2162.802929][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2162.802929][T15690] get_compat_msghdr+0x108/0x2b0 [ 2162.802929][T15690] do_recvmmsg+0xdaf/0x2300 [ 2162.802929][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2162.802929][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2162.802929][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2162.802929][T15690] __do_fast_syscall_32+0x102/0x160 [ 2162.802929][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2162.802929][T15690] do_SYSENTER_32+0x73/0x90 [ 2162.802929][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2162.802929][T15690] [ 2162.802929][T15690] Uninit was stored to memory at: [ 2162.802929][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2162.802929][T15690] __msan_chain_origin+0x57/0xa0 [ 2162.802929][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2162.802929][T15690] get_compat_msghdr+0x108/0x2b0 [ 2162.802929][T15690] do_recvmmsg+0xdaf/0x2300 [ 2162.802929][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2162.802929][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2162.802929][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2162.802929][T15690] __do_fast_syscall_32+0x102/0x160 [ 2162.802929][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2162.802929][T15690] do_SYSENTER_32+0x73/0x90 [ 2162.802929][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2162.802929][T15690] [ 2162.802929][T15690] Uninit was stored to memory at: [ 2162.802929][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2162.802929][T15690] __msan_chain_origin+0x57/0xa0 [ 2162.802929][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2162.802929][T15690] get_compat_msghdr+0x108/0x2b0 [ 2162.802929][T15690] do_recvmmsg+0xdaf/0x2300 [ 2162.802929][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2162.802929][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2162.802929][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2162.802929][T15690] __do_fast_syscall_32+0x102/0x160 [ 2162.802929][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2162.802929][T15690] do_SYSENTER_32+0x73/0x90 [ 2162.802929][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2162.802929][T15690] [ 2162.802929][T15690] Uninit was stored to memory at: [ 2162.802929][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2162.802929][T15690] __msan_chain_origin+0x57/0xa0 [ 2162.802929][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2162.802929][T15690] get_compat_msghdr+0x108/0x2b0 [ 2162.802929][T15690] do_recvmmsg+0xdaf/0x2300 [ 2162.802929][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2162.802929][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2162.802929][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2162.802929][T15690] __do_fast_syscall_32+0x102/0x160 [ 2162.802929][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2162.802929][T15690] do_SYSENTER_32+0x73/0x90 [ 2162.802929][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2162.802929][T15690] [ 2162.802929][T15690] Uninit was stored to memory at: [ 2162.802929][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2162.802929][T15690] __msan_chain_origin+0x57/0xa0 [ 2162.802929][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2162.802929][T15690] get_compat_msghdr+0x108/0x2b0 [ 2162.802929][T15690] do_recvmmsg+0xdaf/0x2300 [ 2162.802929][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2162.802929][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2162.802929][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2162.802929][T15690] __do_fast_syscall_32+0x102/0x160 [ 2162.802929][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2162.802929][T15690] do_SYSENTER_32+0x73/0x90 [ 2162.802929][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2162.802929][T15690] [ 2162.802929][T15690] Uninit was stored to memory at: [ 2162.802929][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2162.802929][T15690] __msan_chain_origin+0x57/0xa0 [ 2162.802929][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2162.802929][T15690] get_compat_msghdr+0x108/0x2b0 [ 2162.802929][T15690] do_recvmmsg+0xdaf/0x2300 [ 2162.802929][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2162.802929][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2162.802929][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2162.802929][T15690] __do_fast_syscall_32+0x102/0x160 [ 2162.802929][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2162.802929][T15690] do_SYSENTER_32+0x73/0x90 [ 2162.802929][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2162.802929][T15690] [ 2162.802929][T15690] Uninit was stored to memory at: [ 2162.802929][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2162.802929][T15690] __msan_chain_origin+0x57/0xa0 [ 2162.802929][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2162.802929][T15690] get_compat_msghdr+0x108/0x2b0 [ 2162.802929][T15690] do_recvmmsg+0xdaf/0x2300 [ 2162.802929][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2162.802929][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2162.802929][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2162.802929][T15690] __do_fast_syscall_32+0x102/0x160 [ 2162.802929][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2162.802929][T15690] do_SYSENTER_32+0x73/0x90 [ 2162.802929][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2162.802929][T15690] [ 2162.802929][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2162.802929][T15690] do_recvmmsg+0xbc/0x2300 [ 2162.802929][T15690] do_recvmmsg+0xbc/0x2300 [ 2163.652803][T15678] not chained 1390000 origins [ 2163.657511][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2163.661497][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.661497][T15678] Call Trace: [ 2163.661497][T15678] dump_stack+0x21c/0x280 [ 2163.661497][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2163.661497][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2163.661497][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2163.661497][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2163.661497][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2163.661497][T15678] ? release_sock+0x26a/0x2d0 [ 2163.661497][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2163.661497][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2163.661497][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2163.661497][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2163.661497][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2163.661497][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2163.661497][T15678] __msan_chain_origin+0x57/0xa0 [ 2163.661497][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2163.661497][T15678] get_compat_msghdr+0x108/0x2b0 [ 2163.661497][T15678] do_recvmmsg+0xdaf/0x2300 [ 2163.661497][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2163.661497][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2163.661497][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2163.661497][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2163.661497][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2163.661497][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2163.661497][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2163.661497][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2163.661497][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2163.661497][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2163.661497][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2163.661497][T15678] __do_fast_syscall_32+0x102/0x160 [ 2163.661497][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2163.661497][T15678] do_SYSENTER_32+0x73/0x90 [ 2163.841617][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2163.841617][T15678] RIP: 0023:0xf7f1a549 [ 2163.841617][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2163.841617][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2163.841617][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2163.841617][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2163.841617][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2163.841617][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2163.841617][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2163.841617][T15678] Uninit was stored to memory at: [ 2163.841617][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2163.841617][T15678] __msan_chain_origin+0x57/0xa0 [ 2163.841617][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2163.841617][T15678] get_compat_msghdr+0x108/0x2b0 [ 2163.841617][T15678] do_recvmmsg+0xdaf/0x2300 [ 2163.841617][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2163.841617][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2163.841617][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2163.841617][T15678] __do_fast_syscall_32+0x102/0x160 [ 2163.841617][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2163.841617][T15678] do_SYSENTER_32+0x73/0x90 [ 2163.841617][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2163.841617][T15678] [ 2163.841617][T15678] Uninit was stored to memory at: [ 2163.841617][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2163.841617][T15678] __msan_chain_origin+0x57/0xa0 [ 2163.841617][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2163.841617][T15678] get_compat_msghdr+0x108/0x2b0 [ 2163.841617][T15678] do_recvmmsg+0xdaf/0x2300 [ 2163.841617][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2163.841617][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2163.841617][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2163.841617][T15678] __do_fast_syscall_32+0x102/0x160 [ 2163.841617][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2163.841617][T15678] do_SYSENTER_32+0x73/0x90 [ 2163.841617][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2163.841617][T15678] [ 2163.841617][T15678] Uninit was stored to memory at: [ 2163.841617][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2163.841617][T15678] __msan_chain_origin+0x57/0xa0 [ 2163.841617][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2163.841617][T15678] get_compat_msghdr+0x108/0x2b0 [ 2163.841617][T15678] do_recvmmsg+0xdaf/0x2300 [ 2163.841617][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2163.841617][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2163.841617][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2163.841617][T15678] __do_fast_syscall_32+0x102/0x160 [ 2163.841617][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2163.841617][T15678] do_SYSENTER_32+0x73/0x90 [ 2163.841617][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2163.841617][T15678] [ 2163.841617][T15678] Uninit was stored to memory at: [ 2163.841617][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2163.841617][T15678] __msan_chain_origin+0x57/0xa0 [ 2163.841617][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2163.841617][T15678] get_compat_msghdr+0x108/0x2b0 [ 2163.841617][T15678] do_recvmmsg+0xdaf/0x2300 [ 2163.841617][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2163.841617][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2163.841617][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2163.841617][T15678] __do_fast_syscall_32+0x102/0x160 [ 2163.841617][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2163.841617][T15678] do_SYSENTER_32+0x73/0x90 [ 2163.841617][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2163.841617][T15678] [ 2163.841617][T15678] Uninit was stored to memory at: [ 2163.841617][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2163.841617][T15678] __msan_chain_origin+0x57/0xa0 [ 2163.841617][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2163.841617][T15678] get_compat_msghdr+0x108/0x2b0 [ 2163.841617][T15678] do_recvmmsg+0xdaf/0x2300 [ 2163.841617][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2163.841617][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2163.841617][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2163.841617][T15678] __do_fast_syscall_32+0x102/0x160 [ 2163.841617][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2164.258273][T15678] do_SYSENTER_32+0x73/0x90 [ 2164.258273][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.258273][T15678] [ 2164.258273][T15678] Uninit was stored to memory at: [ 2164.258273][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2164.258273][T15678] __msan_chain_origin+0x57/0xa0 [ 2164.258273][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2164.258273][T15678] get_compat_msghdr+0x108/0x2b0 [ 2164.258273][T15678] do_recvmmsg+0xdaf/0x2300 [ 2164.258273][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2164.258273][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.258273][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.258273][T15678] __do_fast_syscall_32+0x102/0x160 [ 2164.258273][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2164.258273][T15678] do_SYSENTER_32+0x73/0x90 [ 2164.258273][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.258273][T15678] [ 2164.258273][T15678] Uninit was stored to memory at: [ 2164.258273][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2164.258273][T15678] __msan_chain_origin+0x57/0xa0 [ 2164.258273][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2164.258273][T15678] get_compat_msghdr+0x108/0x2b0 [ 2164.258273][T15678] do_recvmmsg+0xdaf/0x2300 [ 2164.371730][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2164.371730][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.371730][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.371730][T15678] __do_fast_syscall_32+0x102/0x160 [ 2164.371730][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2164.371730][T15678] do_SYSENTER_32+0x73/0x90 [ 2164.371730][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.371730][T15678] [ 2164.371730][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2164.371730][T15678] do_recvmmsg+0xbc/0x2300 [ 2164.371730][T15678] do_recvmmsg+0xbc/0x2300 [ 2164.589462][T15690] not chained 1400000 origins [ 2164.591582][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2164.591582][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.591582][T15690] Call Trace: [ 2164.591582][T15690] dump_stack+0x21c/0x280 [ 2164.591582][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2164.591582][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2164.591582][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2164.591582][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2164.591582][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2164.591582][T15690] ? release_sock+0x26a/0x2d0 [ 2164.591582][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2164.591582][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2164.658819][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2164.658819][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2164.658819][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2164.658819][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2164.658819][T15690] __msan_chain_origin+0x57/0xa0 [ 2164.658819][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2164.658819][T15690] get_compat_msghdr+0x108/0x2b0 [ 2164.658819][T15690] do_recvmmsg+0xdaf/0x2300 [ 2164.658819][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2164.658819][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2164.658819][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2164.658819][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2164.658819][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2164.658819][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2164.658819][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2164.658819][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2164.658819][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2164.658819][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.658819][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.658819][T15690] __do_fast_syscall_32+0x102/0x160 [ 2164.658819][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2164.658819][T15690] do_SYSENTER_32+0x73/0x90 [ 2164.658819][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.658819][T15690] RIP: 0023:0xf7f1a549 [ 2164.658819][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2164.658819][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2164.658819][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2164.658819][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2164.658819][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2164.658819][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2164.658819][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2164.658819][T15690] Uninit was stored to memory at: [ 2164.658819][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2164.658819][T15690] __msan_chain_origin+0x57/0xa0 [ 2164.658819][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2164.658819][T15690] get_compat_msghdr+0x108/0x2b0 [ 2164.658819][T15690] do_recvmmsg+0xdaf/0x2300 [ 2164.658819][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2164.658819][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.658819][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.658819][T15690] __do_fast_syscall_32+0x102/0x160 [ 2164.658819][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2164.658819][T15690] do_SYSENTER_32+0x73/0x90 [ 2164.658819][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.658819][T15690] [ 2164.658819][T15690] Uninit was stored to memory at: [ 2164.658819][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2164.658819][T15690] __msan_chain_origin+0x57/0xa0 [ 2164.658819][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2164.658819][T15690] get_compat_msghdr+0x108/0x2b0 [ 2164.658819][T15690] do_recvmmsg+0xdaf/0x2300 [ 2164.658819][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2164.658819][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.658819][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.658819][T15690] __do_fast_syscall_32+0x102/0x160 [ 2164.658819][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2164.658819][T15690] do_SYSENTER_32+0x73/0x90 [ 2164.658819][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.658819][T15690] [ 2164.658819][T15690] Uninit was stored to memory at: [ 2164.658819][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2164.658819][T15690] __msan_chain_origin+0x57/0xa0 [ 2164.658819][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2164.658819][T15690] get_compat_msghdr+0x108/0x2b0 [ 2164.658819][T15690] do_recvmmsg+0xdaf/0x2300 [ 2164.658819][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2164.658819][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.658819][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.658819][T15690] __do_fast_syscall_32+0x102/0x160 [ 2164.658819][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2164.658819][T15690] do_SYSENTER_32+0x73/0x90 [ 2164.658819][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.658819][T15690] [ 2164.658819][T15690] Uninit was stored to memory at: [ 2164.658819][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2164.658819][T15690] __msan_chain_origin+0x57/0xa0 [ 2164.658819][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2164.658819][T15690] get_compat_msghdr+0x108/0x2b0 [ 2164.658819][T15690] do_recvmmsg+0xdaf/0x2300 [ 2164.658819][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2164.658819][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.658819][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.658819][T15690] __do_fast_syscall_32+0x102/0x160 [ 2164.658819][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2164.658819][T15690] do_SYSENTER_32+0x73/0x90 [ 2164.658819][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.658819][T15690] [ 2164.658819][T15690] Uninit was stored to memory at: [ 2164.658819][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2164.658819][T15690] __msan_chain_origin+0x57/0xa0 [ 2164.658819][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2164.658819][T15690] get_compat_msghdr+0x108/0x2b0 [ 2164.658819][T15690] do_recvmmsg+0xdaf/0x2300 [ 2164.658819][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2164.658819][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.658819][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.658819][T15690] __do_fast_syscall_32+0x102/0x160 [ 2164.658819][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2164.658819][T15690] do_SYSENTER_32+0x73/0x90 [ 2164.658819][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.658819][T15690] [ 2164.658819][T15690] Uninit was stored to memory at: [ 2164.658819][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2164.658819][T15690] __msan_chain_origin+0x57/0xa0 [ 2164.658819][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2164.658819][T15690] get_compat_msghdr+0x108/0x2b0 [ 2164.658819][T15690] do_recvmmsg+0xdaf/0x2300 [ 2164.658819][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2164.658819][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.658819][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.658819][T15690] __do_fast_syscall_32+0x102/0x160 [ 2164.658819][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2164.658819][T15690] do_SYSENTER_32+0x73/0x90 [ 2164.658819][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.658819][T15690] [ 2164.658819][T15690] Uninit was stored to memory at: [ 2164.658819][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2164.658819][T15690] __msan_chain_origin+0x57/0xa0 [ 2164.658819][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2164.658819][T15690] get_compat_msghdr+0x108/0x2b0 [ 2164.658819][T15690] do_recvmmsg+0xdaf/0x2300 [ 2164.658819][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2164.658819][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2164.658819][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2164.658819][T15690] __do_fast_syscall_32+0x102/0x160 [ 2164.658819][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2164.658819][T15690] do_SYSENTER_32+0x73/0x90 [ 2164.658819][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2164.658819][T15690] [ 2164.658819][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2164.658819][T15690] do_recvmmsg+0xbc/0x2300 [ 2164.658819][T15690] do_recvmmsg+0xbc/0x2300 [ 2165.517408][T15678] not chained 1410000 origins [ 2165.521511][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2165.521511][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.531555][T15678] Call Trace: [ 2165.531555][T15678] dump_stack+0x21c/0x280 [ 2165.531555][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2165.531555][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2165.531555][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2165.531555][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2165.531555][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2165.531555][T15678] ? release_sock+0x26a/0x2d0 [ 2165.578968][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2165.578968][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2165.578968][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2165.578968][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2165.578968][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2165.578968][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2165.578968][T15678] __msan_chain_origin+0x57/0xa0 [ 2165.578968][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2165.578968][T15678] get_compat_msghdr+0x108/0x2b0 [ 2165.578968][T15678] do_recvmmsg+0xdaf/0x2300 [ 2165.578968][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2165.578968][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2165.578968][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2165.578968][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2165.578968][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2165.578968][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2165.578968][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2165.578968][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2165.578968][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2165.578968][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2165.578968][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2165.578968][T15678] __do_fast_syscall_32+0x102/0x160 [ 2165.578968][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2165.578968][T15678] do_SYSENTER_32+0x73/0x90 [ 2165.578968][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.578968][T15678] RIP: 0023:0xf7f1a549 [ 2165.578968][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2165.578968][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2165.578968][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2165.578968][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2165.578968][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2165.578968][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2165.578968][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2165.578968][T15678] Uninit was stored to memory at: [ 2165.578968][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2165.578968][T15678] __msan_chain_origin+0x57/0xa0 [ 2165.578968][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2165.578968][T15678] get_compat_msghdr+0x108/0x2b0 [ 2165.578968][T15678] do_recvmmsg+0xdaf/0x2300 [ 2165.578968][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2165.578968][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2165.578968][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2165.578968][T15678] __do_fast_syscall_32+0x102/0x160 [ 2165.578968][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2165.578968][T15678] do_SYSENTER_32+0x73/0x90 [ 2165.578968][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.578968][T15678] [ 2165.578968][T15678] Uninit was stored to memory at: [ 2165.578968][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2165.578968][T15678] __msan_chain_origin+0x57/0xa0 [ 2165.578968][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2165.578968][T15678] get_compat_msghdr+0x108/0x2b0 [ 2165.578968][T15678] do_recvmmsg+0xdaf/0x2300 [ 2165.578968][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2165.578968][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2165.578968][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2165.578968][T15678] __do_fast_syscall_32+0x102/0x160 [ 2165.578968][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2165.578968][T15678] do_SYSENTER_32+0x73/0x90 [ 2165.578968][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.578968][T15678] [ 2165.578968][T15678] Uninit was stored to memory at: [ 2165.578968][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2165.578968][T15678] __msan_chain_origin+0x57/0xa0 [ 2165.578968][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2165.578968][T15678] get_compat_msghdr+0x108/0x2b0 [ 2165.578968][T15678] do_recvmmsg+0xdaf/0x2300 [ 2165.578968][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2165.578968][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2165.578968][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2165.578968][T15678] __do_fast_syscall_32+0x102/0x160 [ 2165.578968][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2165.578968][T15678] do_SYSENTER_32+0x73/0x90 [ 2165.578968][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.578968][T15678] [ 2165.578968][T15678] Uninit was stored to memory at: [ 2165.578968][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2165.578968][T15678] __msan_chain_origin+0x57/0xa0 [ 2165.578968][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2165.578968][T15678] get_compat_msghdr+0x108/0x2b0 [ 2165.578968][T15678] do_recvmmsg+0xdaf/0x2300 [ 2165.578968][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2165.578968][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2165.578968][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2165.578968][T15678] __do_fast_syscall_32+0x102/0x160 [ 2165.578968][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2165.578968][T15678] do_SYSENTER_32+0x73/0x90 [ 2165.578968][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.578968][T15678] [ 2165.578968][T15678] Uninit was stored to memory at: [ 2165.578968][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2165.578968][T15678] __msan_chain_origin+0x57/0xa0 [ 2165.578968][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2165.578968][T15678] get_compat_msghdr+0x108/0x2b0 [ 2165.578968][T15678] do_recvmmsg+0xdaf/0x2300 [ 2165.578968][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2165.578968][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2165.578968][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2165.578968][T15678] __do_fast_syscall_32+0x102/0x160 [ 2165.578968][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2165.578968][T15678] do_SYSENTER_32+0x73/0x90 [ 2165.578968][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.578968][T15678] [ 2165.578968][T15678] Uninit was stored to memory at: [ 2165.578968][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2165.578968][T15678] __msan_chain_origin+0x57/0xa0 [ 2165.578968][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2165.578968][T15678] get_compat_msghdr+0x108/0x2b0 [ 2165.578968][T15678] do_recvmmsg+0xdaf/0x2300 [ 2165.578968][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2165.578968][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2165.578968][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2165.578968][T15678] __do_fast_syscall_32+0x102/0x160 [ 2165.578968][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2165.578968][T15678] do_SYSENTER_32+0x73/0x90 [ 2165.578968][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.578968][T15678] [ 2165.578968][T15678] Uninit was stored to memory at: [ 2165.578968][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2165.578968][T15678] __msan_chain_origin+0x57/0xa0 [ 2165.578968][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2165.578968][T15678] get_compat_msghdr+0x108/0x2b0 [ 2165.578968][T15678] do_recvmmsg+0xdaf/0x2300 [ 2165.578968][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2165.578968][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2165.578968][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2165.578968][T15678] __do_fast_syscall_32+0x102/0x160 [ 2165.578968][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2165.578968][T15678] do_SYSENTER_32+0x73/0x90 [ 2165.578968][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2165.578968][T15678] [ 2165.578968][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2165.578968][T15678] do_recvmmsg+0xbc/0x2300 [ 2165.578968][T15678] do_recvmmsg+0xbc/0x2300 [ 2166.418129][T15690] not chained 1420000 origins [ 2166.421501][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2166.421501][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.436127][T15690] Call Trace: [ 2166.436127][T15690] dump_stack+0x21c/0x280 [ 2166.436127][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2166.436127][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2166.436127][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2166.436127][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2166.436127][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2166.436127][T15690] ? release_sock+0x26a/0x2d0 [ 2166.436127][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2166.436127][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2166.436127][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2166.436127][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2166.436127][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2166.436127][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2166.436127][T15690] __msan_chain_origin+0x57/0xa0 [ 2166.436127][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2166.436127][T15690] get_compat_msghdr+0x108/0x2b0 [ 2166.436127][T15690] do_recvmmsg+0xdaf/0x2300 [ 2166.436127][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2166.436127][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2166.436127][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2166.436127][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2166.436127][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2166.436127][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2166.436127][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2166.436127][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2166.436127][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2166.436127][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2166.436127][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2166.436127][T15690] __do_fast_syscall_32+0x102/0x160 [ 2166.436127][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2166.436127][T15690] do_SYSENTER_32+0x73/0x90 [ 2166.436127][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2166.436127][T15690] RIP: 0023:0xf7f1a549 [ 2166.436127][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2166.436127][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2166.436127][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2166.436127][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2166.436127][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2166.436127][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2166.436127][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2166.436127][T15690] Uninit was stored to memory at: [ 2166.436127][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2166.436127][T15690] __msan_chain_origin+0x57/0xa0 [ 2166.436127][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2166.436127][T15690] get_compat_msghdr+0x108/0x2b0 [ 2166.436127][T15690] do_recvmmsg+0xdaf/0x2300 [ 2166.436127][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2166.436127][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2166.436127][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2166.436127][T15690] __do_fast_syscall_32+0x102/0x160 [ 2166.737501][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2166.737501][T15690] do_SYSENTER_32+0x73/0x90 [ 2166.737501][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2166.737501][T15690] [ 2166.737501][T15690] Uninit was stored to memory at: [ 2166.737501][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2166.737501][T15690] __msan_chain_origin+0x57/0xa0 [ 2166.737501][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2166.737501][T15690] get_compat_msghdr+0x108/0x2b0 [ 2166.737501][T15690] do_recvmmsg+0xdaf/0x2300 [ 2166.737501][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2166.737501][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2166.737501][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2166.737501][T15690] __do_fast_syscall_32+0x102/0x160 [ 2166.737501][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2166.737501][T15690] do_SYSENTER_32+0x73/0x90 [ 2166.737501][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2166.737501][T15690] [ 2166.737501][T15690] Uninit was stored to memory at: [ 2166.737501][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2166.737501][T15690] __msan_chain_origin+0x57/0xa0 [ 2166.737501][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2166.737501][T15690] get_compat_msghdr+0x108/0x2b0 [ 2166.737501][T15690] do_recvmmsg+0xdaf/0x2300 [ 2166.737501][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2166.737501][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2166.737501][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2166.737501][T15690] __do_fast_syscall_32+0x102/0x160 [ 2166.737501][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2166.737501][T15690] do_SYSENTER_32+0x73/0x90 [ 2166.737501][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2166.737501][T15690] [ 2166.737501][T15690] Uninit was stored to memory at: [ 2166.737501][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2166.737501][T15690] __msan_chain_origin+0x57/0xa0 [ 2166.737501][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2166.737501][T15690] get_compat_msghdr+0x108/0x2b0 [ 2166.737501][T15690] do_recvmmsg+0xdaf/0x2300 [ 2166.737501][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2166.737501][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2166.737501][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2166.737501][T15690] __do_fast_syscall_32+0x102/0x160 [ 2166.737501][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2166.737501][T15690] do_SYSENTER_32+0x73/0x90 [ 2166.737501][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2166.737501][T15690] [ 2166.737501][T15690] Uninit was stored to memory at: [ 2166.737501][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2166.737501][T15690] __msan_chain_origin+0x57/0xa0 [ 2166.737501][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2166.737501][T15690] get_compat_msghdr+0x108/0x2b0 [ 2166.737501][T15690] do_recvmmsg+0xdaf/0x2300 [ 2166.737501][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2166.737501][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2166.737501][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2166.737501][T15690] __do_fast_syscall_32+0x102/0x160 [ 2166.737501][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2166.737501][T15690] do_SYSENTER_32+0x73/0x90 [ 2166.737501][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2166.737501][T15690] [ 2166.737501][T15690] Uninit was stored to memory at: [ 2166.737501][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2166.737501][T15690] __msan_chain_origin+0x57/0xa0 [ 2166.737501][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2166.737501][T15690] get_compat_msghdr+0x108/0x2b0 [ 2166.737501][T15690] do_recvmmsg+0xdaf/0x2300 [ 2166.737501][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2166.737501][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2166.737501][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2166.737501][T15690] __do_fast_syscall_32+0x102/0x160 [ 2166.737501][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2166.737501][T15690] do_SYSENTER_32+0x73/0x90 [ 2166.737501][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2166.737501][T15690] [ 2166.737501][T15690] Uninit was stored to memory at: [ 2166.737501][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2166.737501][T15690] __msan_chain_origin+0x57/0xa0 [ 2166.737501][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2166.737501][T15690] get_compat_msghdr+0x108/0x2b0 [ 2166.737501][T15690] do_recvmmsg+0xdaf/0x2300 [ 2166.737501][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2166.737501][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2166.737501][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2166.737501][T15690] __do_fast_syscall_32+0x102/0x160 [ 2166.737501][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2166.737501][T15690] do_SYSENTER_32+0x73/0x90 [ 2166.737501][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2166.737501][T15690] [ 2166.737501][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2166.737501][T15690] do_recvmmsg+0xbc/0x2300 [ 2166.737501][T15690] do_recvmmsg+0xbc/0x2300 [ 2167.318136][T15678] not chained 1430000 origins [ 2167.321512][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2167.321512][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.321512][T15678] Call Trace: [ 2167.321512][T15678] dump_stack+0x21c/0x280 [ 2167.321512][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2167.321512][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2167.321512][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2167.321512][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2167.321512][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2167.321512][T15678] ? release_sock+0x26a/0x2d0 [ 2167.321512][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2167.321512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2167.321512][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2167.321512][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2167.321512][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2167.321512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2167.321512][T15678] __msan_chain_origin+0x57/0xa0 [ 2167.321512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2167.321512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2167.321512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2167.321512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2167.321512][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2167.321512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2167.321512][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2167.321512][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2167.321512][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2167.321512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2167.321512][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2167.321512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2167.321512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2167.321512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2167.321512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2167.321512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2167.321512][T15678] do_SYSENTER_32+0x73/0x90 [ 2167.321512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2167.321512][T15678] RIP: 0023:0xf7f1a549 [ 2167.321512][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2167.321512][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2167.321512][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2167.321512][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2167.321512][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2167.568659][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2167.568659][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2167.568659][T15678] Uninit was stored to memory at: [ 2167.568659][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2167.568659][T15678] __msan_chain_origin+0x57/0xa0 [ 2167.568659][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2167.568659][T15678] get_compat_msghdr+0x108/0x2b0 [ 2167.568659][T15678] do_recvmmsg+0xdaf/0x2300 [ 2167.568659][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2167.568659][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2167.568659][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2167.568659][T15678] __do_fast_syscall_32+0x102/0x160 [ 2167.568659][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2167.568659][T15678] do_SYSENTER_32+0x73/0x90 [ 2167.568659][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2167.568659][T15678] [ 2167.568659][T15678] Uninit was stored to memory at: [ 2167.568659][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2167.568659][T15678] __msan_chain_origin+0x57/0xa0 [ 2167.568659][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2167.568659][T15678] get_compat_msghdr+0x108/0x2b0 [ 2167.568659][T15678] do_recvmmsg+0xdaf/0x2300 [ 2167.568659][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2167.568659][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2167.568659][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2167.568659][T15678] __do_fast_syscall_32+0x102/0x160 [ 2167.568659][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2167.568659][T15678] do_SYSENTER_32+0x73/0x90 [ 2167.568659][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2167.568659][T15678] [ 2167.568659][T15678] Uninit was stored to memory at: [ 2167.568659][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2167.568659][T15678] __msan_chain_origin+0x57/0xa0 [ 2167.568659][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2167.568659][T15678] get_compat_msghdr+0x108/0x2b0 [ 2167.568659][T15678] do_recvmmsg+0xdaf/0x2300 [ 2167.568659][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2167.568659][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2167.568659][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2167.568659][T15678] __do_fast_syscall_32+0x102/0x160 [ 2167.568659][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2167.568659][T15678] do_SYSENTER_32+0x73/0x90 [ 2167.568659][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2167.568659][T15678] [ 2167.568659][T15678] Uninit was stored to memory at: [ 2167.568659][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2167.568659][T15678] __msan_chain_origin+0x57/0xa0 [ 2167.568659][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2167.568659][T15678] get_compat_msghdr+0x108/0x2b0 [ 2167.568659][T15678] do_recvmmsg+0xdaf/0x2300 [ 2167.568659][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2167.568659][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2167.568659][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2167.568659][T15678] __do_fast_syscall_32+0x102/0x160 [ 2167.568659][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2167.568659][T15678] do_SYSENTER_32+0x73/0x90 [ 2167.568659][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2167.568659][T15678] [ 2167.568659][T15678] Uninit was stored to memory at: [ 2167.568659][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2167.568659][T15678] __msan_chain_origin+0x57/0xa0 [ 2167.568659][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2167.568659][T15678] get_compat_msghdr+0x108/0x2b0 [ 2167.568659][T15678] do_recvmmsg+0xdaf/0x2300 [ 2167.568659][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2167.568659][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2167.568659][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2167.568659][T15678] __do_fast_syscall_32+0x102/0x160 [ 2167.568659][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2167.568659][T15678] do_SYSENTER_32+0x73/0x90 [ 2167.568659][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2167.568659][T15678] [ 2167.568659][T15678] Uninit was stored to memory at: [ 2167.568659][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2167.568659][T15678] __msan_chain_origin+0x57/0xa0 [ 2167.568659][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2167.568659][T15678] get_compat_msghdr+0x108/0x2b0 [ 2167.568659][T15678] do_recvmmsg+0xdaf/0x2300 [ 2167.568659][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2167.568659][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2167.568659][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2167.568659][T15678] __do_fast_syscall_32+0x102/0x160 [ 2167.568659][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2167.568659][T15678] do_SYSENTER_32+0x73/0x90 [ 2167.568659][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2167.568659][T15678] [ 2167.568659][T15678] Uninit was stored to memory at: [ 2167.568659][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2167.568659][T15678] __msan_chain_origin+0x57/0xa0 [ 2167.568659][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2167.568659][T15678] get_compat_msghdr+0x108/0x2b0 [ 2167.568659][T15678] do_recvmmsg+0xdaf/0x2300 [ 2167.568659][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2167.568659][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2167.568659][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2167.568659][T15678] __do_fast_syscall_32+0x102/0x160 [ 2167.568659][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2167.568659][T15678] do_SYSENTER_32+0x73/0x90 [ 2167.568659][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2167.568659][T15678] [ 2167.568659][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2167.568659][T15678] do_recvmmsg+0xbc/0x2300 [ 2167.568659][T15678] do_recvmmsg+0xbc/0x2300 [ 2168.179515][T15690] not chained 1440000 origins [ 2168.181498][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2168.191596][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.191596][T15690] Call Trace: [ 2168.191596][T15690] dump_stack+0x21c/0x280 [ 2168.191596][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2168.191596][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2168.191596][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2168.191596][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2168.191596][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2168.191596][T15690] ? release_sock+0x26a/0x2d0 [ 2168.191596][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2168.191596][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2168.252165][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2168.252165][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2168.252165][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2168.252165][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2168.252165][T15690] __msan_chain_origin+0x57/0xa0 [ 2168.252165][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2168.252165][T15690] get_compat_msghdr+0x108/0x2b0 [ 2168.252165][T15690] do_recvmmsg+0xdaf/0x2300 [ 2168.252165][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2168.252165][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2168.252165][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2168.252165][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2168.252165][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2168.252165][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2168.252165][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2168.252165][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2168.252165][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2168.252165][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2168.252165][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2168.252165][T15690] __do_fast_syscall_32+0x102/0x160 [ 2168.252165][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2168.252165][T15690] do_SYSENTER_32+0x73/0x90 [ 2168.252165][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2168.252165][T15690] RIP: 0023:0xf7f1a549 [ 2168.252165][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2168.252165][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2168.252165][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2168.252165][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2168.252165][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2168.252165][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2168.252165][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2168.252165][T15690] Uninit was stored to memory at: [ 2168.252165][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2168.252165][T15690] __msan_chain_origin+0x57/0xa0 [ 2168.252165][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2168.252165][T15690] get_compat_msghdr+0x108/0x2b0 [ 2168.252165][T15690] do_recvmmsg+0xdaf/0x2300 [ 2168.252165][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2168.252165][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2168.252165][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2168.252165][T15690] __do_fast_syscall_32+0x102/0x160 [ 2168.252165][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2168.252165][T15690] do_SYSENTER_32+0x73/0x90 [ 2168.252165][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2168.252165][T15690] [ 2168.252165][T15690] Uninit was stored to memory at: [ 2168.252165][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2168.252165][T15690] __msan_chain_origin+0x57/0xa0 [ 2168.252165][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2168.252165][T15690] get_compat_msghdr+0x108/0x2b0 [ 2168.252165][T15690] do_recvmmsg+0xdaf/0x2300 [ 2168.252165][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2168.252165][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2168.252165][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2168.252165][T15690] __do_fast_syscall_32+0x102/0x160 [ 2168.252165][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2168.252165][T15690] do_SYSENTER_32+0x73/0x90 [ 2168.252165][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2168.252165][T15690] [ 2168.252165][T15690] Uninit was stored to memory at: [ 2168.252165][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2168.252165][T15690] __msan_chain_origin+0x57/0xa0 [ 2168.252165][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2168.252165][T15690] get_compat_msghdr+0x108/0x2b0 [ 2168.252165][T15690] do_recvmmsg+0xdaf/0x2300 [ 2168.252165][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2168.252165][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2168.252165][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2168.252165][T15690] __do_fast_syscall_32+0x102/0x160 [ 2168.252165][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2168.252165][T15690] do_SYSENTER_32+0x73/0x90 [ 2168.252165][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2168.252165][T15690] [ 2168.252165][T15690] Uninit was stored to memory at: [ 2168.252165][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2168.252165][T15690] __msan_chain_origin+0x57/0xa0 [ 2168.252165][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2168.252165][T15690] get_compat_msghdr+0x108/0x2b0 [ 2168.252165][T15690] do_recvmmsg+0xdaf/0x2300 [ 2168.252165][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2168.252165][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2168.252165][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2168.252165][T15690] __do_fast_syscall_32+0x102/0x160 [ 2168.252165][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2168.252165][T15690] do_SYSENTER_32+0x73/0x90 [ 2168.252165][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2168.252165][T15690] [ 2168.252165][T15690] Uninit was stored to memory at: [ 2168.252165][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2168.252165][T15690] __msan_chain_origin+0x57/0xa0 [ 2168.252165][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2168.252165][T15690] get_compat_msghdr+0x108/0x2b0 [ 2168.252165][T15690] do_recvmmsg+0xdaf/0x2300 [ 2168.252165][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2168.252165][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2168.252165][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2168.252165][T15690] __do_fast_syscall_32+0x102/0x160 [ 2168.252165][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2168.252165][T15690] do_SYSENTER_32+0x73/0x90 [ 2168.252165][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2168.252165][T15690] [ 2168.252165][T15690] Uninit was stored to memory at: [ 2168.252165][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2168.252165][T15690] __msan_chain_origin+0x57/0xa0 [ 2168.252165][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2168.252165][T15690] get_compat_msghdr+0x108/0x2b0 [ 2168.252165][T15690] do_recvmmsg+0xdaf/0x2300 [ 2168.252165][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2168.252165][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2168.252165][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2168.252165][T15690] __do_fast_syscall_32+0x102/0x160 [ 2168.252165][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2168.252165][T15690] do_SYSENTER_32+0x73/0x90 [ 2168.252165][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2168.252165][T15690] [ 2168.252165][T15690] Uninit was stored to memory at: [ 2168.252165][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2168.252165][T15690] __msan_chain_origin+0x57/0xa0 [ 2168.252165][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2168.252165][T15690] get_compat_msghdr+0x108/0x2b0 [ 2168.252165][T15690] do_recvmmsg+0xdaf/0x2300 [ 2168.252165][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2168.252165][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2168.252165][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2168.252165][T15690] __do_fast_syscall_32+0x102/0x160 [ 2168.252165][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2168.252165][T15690] do_SYSENTER_32+0x73/0x90 [ 2168.252165][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2168.252165][T15690] [ 2168.252165][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2168.252165][T15690] do_recvmmsg+0xbc/0x2300 [ 2168.252165][T15690] do_recvmmsg+0xbc/0x2300 [ 2169.114673][T15678] not chained 1450000 origins [ 2169.119464][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2169.121512][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.121512][T15678] Call Trace: [ 2169.121512][T15678] dump_stack+0x21c/0x280 [ 2169.121512][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2169.121512][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2169.121512][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2169.121512][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2169.121512][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2169.121512][T15678] ? release_sock+0x26a/0x2d0 [ 2169.121512][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2169.121512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2169.121512][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2169.121512][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2169.121512][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2169.121512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2169.121512][T15678] __msan_chain_origin+0x57/0xa0 [ 2169.121512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2169.121512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2169.121512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2169.121512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2169.121512][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2169.121512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2169.121512][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2169.121512][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2169.121512][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2169.121512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2169.121512][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2169.121512][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2169.121512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2169.121512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2169.121512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2169.121512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2169.121512][T15678] do_SYSENTER_32+0x73/0x90 [ 2169.121512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2169.121512][T15678] RIP: 0023:0xf7f1a549 [ 2169.121512][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2169.121512][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2169.121512][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2169.121512][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2169.121512][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2169.121512][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2169.121512][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2169.121512][T15678] Uninit was stored to memory at: [ 2169.121512][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2169.121512][T15678] __msan_chain_origin+0x57/0xa0 [ 2169.121512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2169.121512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2169.121512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2169.121512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2169.121512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2169.121512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2169.121512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2169.121512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2169.121512][T15678] do_SYSENTER_32+0x73/0x90 [ 2169.121512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2169.121512][T15678] [ 2169.121512][T15678] Uninit was stored to memory at: [ 2169.121512][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2169.121512][T15678] __msan_chain_origin+0x57/0xa0 [ 2169.121512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2169.121512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2169.121512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2169.121512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2169.121512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2169.121512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2169.121512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2169.121512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2169.121512][T15678] do_SYSENTER_32+0x73/0x90 [ 2169.121512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2169.121512][T15678] [ 2169.121512][T15678] Uninit was stored to memory at: [ 2169.121512][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2169.121512][T15678] __msan_chain_origin+0x57/0xa0 [ 2169.121512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2169.121512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2169.121512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2169.121512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2169.121512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2169.121512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2169.121512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2169.121512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2169.121512][T15678] do_SYSENTER_32+0x73/0x90 [ 2169.121512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2169.121512][T15678] [ 2169.121512][T15678] Uninit was stored to memory at: [ 2169.121512][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2169.121512][T15678] __msan_chain_origin+0x57/0xa0 [ 2169.121512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2169.121512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2169.121512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2169.121512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2169.121512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2169.121512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2169.121512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2169.121512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2169.121512][T15678] do_SYSENTER_32+0x73/0x90 [ 2169.121512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2169.121512][T15678] [ 2169.121512][T15678] Uninit was stored to memory at: [ 2169.121512][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2169.121512][T15678] __msan_chain_origin+0x57/0xa0 [ 2169.121512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2169.121512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2169.121512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2169.121512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2169.121512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2169.121512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2169.121512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2169.121512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2169.121512][T15678] do_SYSENTER_32+0x73/0x90 [ 2169.121512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2169.121512][T15678] [ 2169.121512][T15678] Uninit was stored to memory at: [ 2169.121512][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2169.121512][T15678] __msan_chain_origin+0x57/0xa0 [ 2169.121512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2169.121512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2169.121512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2169.121512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2169.121512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2169.121512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2169.121512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2169.121512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2169.121512][T15678] do_SYSENTER_32+0x73/0x90 [ 2169.121512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2169.121512][T15678] [ 2169.121512][T15678] Uninit was stored to memory at: [ 2169.121512][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2169.121512][T15678] __msan_chain_origin+0x57/0xa0 [ 2169.121512][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2169.121512][T15678] get_compat_msghdr+0x108/0x2b0 [ 2169.121512][T15678] do_recvmmsg+0xdaf/0x2300 [ 2169.121512][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2169.121512][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2169.121512][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2169.121512][T15678] __do_fast_syscall_32+0x102/0x160 [ 2169.121512][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2169.121512][T15678] do_SYSENTER_32+0x73/0x90 [ 2169.121512][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2169.121512][T15678] [ 2169.121512][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2169.121512][T15678] do_recvmmsg+0xbc/0x2300 [ 2169.121512][T15678] do_recvmmsg+0xbc/0x2300 [ 2170.048867][T15678] not chained 1460000 origins [ 2170.051497][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2170.051497][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.051497][T15678] Call Trace: [ 2170.051497][T15678] dump_stack+0x21c/0x280 [ 2170.051497][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2170.082139][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2170.082139][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2170.082139][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2170.082139][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2170.082139][T15678] ? release_sock+0x26a/0x2d0 [ 2170.082139][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2170.082139][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2170.121596][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2170.121596][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2170.121596][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2170.121596][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2170.121596][T15678] __msan_chain_origin+0x57/0xa0 [ 2170.121596][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2170.121596][T15678] get_compat_msghdr+0x108/0x2b0 [ 2170.121596][T15678] do_recvmmsg+0xdaf/0x2300 [ 2170.161672][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2170.161672][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2170.161672][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2170.161672][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2170.161672][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2170.161672][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2170.161672][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2170.161672][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2170.161672][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2170.161672][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.161672][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.161672][T15678] __do_fast_syscall_32+0x102/0x160 [ 2170.161672][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2170.161672][T15678] do_SYSENTER_32+0x73/0x90 [ 2170.161672][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.161672][T15678] RIP: 0023:0xf7f1a549 [ 2170.161672][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2170.161672][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2170.161672][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2170.161672][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2170.161672][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2170.161672][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2170.161672][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2170.161672][T15678] Uninit was stored to memory at: [ 2170.161672][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2170.161672][T15678] __msan_chain_origin+0x57/0xa0 [ 2170.161672][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2170.161672][T15678] get_compat_msghdr+0x108/0x2b0 [ 2170.161672][T15678] do_recvmmsg+0xdaf/0x2300 [ 2170.161672][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2170.161672][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.161672][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.161672][T15678] __do_fast_syscall_32+0x102/0x160 [ 2170.161672][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2170.161672][T15678] do_SYSENTER_32+0x73/0x90 [ 2170.161672][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.161672][T15678] [ 2170.161672][T15678] Uninit was stored to memory at: [ 2170.161672][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2170.161672][T15678] __msan_chain_origin+0x57/0xa0 [ 2170.161672][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2170.161672][T15678] get_compat_msghdr+0x108/0x2b0 [ 2170.161672][T15678] do_recvmmsg+0xdaf/0x2300 [ 2170.161672][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2170.161672][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.161672][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.161672][T15678] __do_fast_syscall_32+0x102/0x160 [ 2170.161672][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2170.161672][T15678] do_SYSENTER_32+0x73/0x90 [ 2170.161672][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.161672][T15678] [ 2170.161672][T15678] Uninit was stored to memory at: [ 2170.161672][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2170.161672][T15678] __msan_chain_origin+0x57/0xa0 [ 2170.161672][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2170.161672][T15678] get_compat_msghdr+0x108/0x2b0 [ 2170.161672][T15678] do_recvmmsg+0xdaf/0x2300 [ 2170.161672][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2170.161672][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.161672][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.161672][T15678] __do_fast_syscall_32+0x102/0x160 [ 2170.161672][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2170.161672][T15678] do_SYSENTER_32+0x73/0x90 [ 2170.161672][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.161672][T15678] [ 2170.161672][T15678] Uninit was stored to memory at: [ 2170.161672][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2170.161672][T15678] __msan_chain_origin+0x57/0xa0 [ 2170.161672][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2170.161672][T15678] get_compat_msghdr+0x108/0x2b0 [ 2170.161672][T15678] do_recvmmsg+0xdaf/0x2300 [ 2170.161672][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2170.161672][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.161672][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.161672][T15678] __do_fast_syscall_32+0x102/0x160 [ 2170.161672][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2170.161672][T15678] do_SYSENTER_32+0x73/0x90 [ 2170.161672][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.161672][T15678] [ 2170.161672][T15678] Uninit was stored to memory at: [ 2170.161672][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2170.161672][T15678] __msan_chain_origin+0x57/0xa0 [ 2170.161672][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2170.161672][T15678] get_compat_msghdr+0x108/0x2b0 [ 2170.161672][T15678] do_recvmmsg+0xdaf/0x2300 [ 2170.161672][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2170.161672][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.161672][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.161672][T15678] __do_fast_syscall_32+0x102/0x160 [ 2170.161672][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2170.161672][T15678] do_SYSENTER_32+0x73/0x90 [ 2170.161672][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.161672][T15678] [ 2170.161672][T15678] Uninit was stored to memory at: [ 2170.161672][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2170.161672][T15678] __msan_chain_origin+0x57/0xa0 [ 2170.161672][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2170.161672][T15678] get_compat_msghdr+0x108/0x2b0 [ 2170.161672][T15678] do_recvmmsg+0xdaf/0x2300 [ 2170.161672][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2170.161672][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.161672][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.161672][T15678] __do_fast_syscall_32+0x102/0x160 [ 2170.161672][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2170.161672][T15678] do_SYSENTER_32+0x73/0x90 [ 2170.161672][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.161672][T15678] [ 2170.161672][T15678] Uninit was stored to memory at: [ 2170.161672][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2170.161672][T15678] __msan_chain_origin+0x57/0xa0 [ 2170.161672][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2170.161672][T15678] get_compat_msghdr+0x108/0x2b0 [ 2170.161672][T15678] do_recvmmsg+0xdaf/0x2300 [ 2170.161672][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2170.161672][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.161672][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.161672][T15678] __do_fast_syscall_32+0x102/0x160 [ 2170.161672][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2170.161672][T15678] do_SYSENTER_32+0x73/0x90 [ 2170.161672][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.161672][T15678] [ 2170.161672][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2170.161672][T15678] do_recvmmsg+0xbc/0x2300 [ 2170.161672][T15678] do_recvmmsg+0xbc/0x2300 [ 2170.886868][T15690] not chained 1470000 origins [ 2170.891494][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2170.891494][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.904593][T15690] Call Trace: [ 2170.904593][T15690] dump_stack+0x21c/0x280 [ 2170.904593][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2170.904593][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2170.904593][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2170.904593][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2170.904593][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2170.941679][T15690] ? release_sock+0x26a/0x2d0 [ 2170.941679][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2170.941679][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2170.941679][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2170.961794][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2170.961794][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2170.961794][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2170.961794][T15690] __msan_chain_origin+0x57/0xa0 [ 2170.961794][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2170.961794][T15690] get_compat_msghdr+0x108/0x2b0 [ 2170.961794][T15690] do_recvmmsg+0xdaf/0x2300 [ 2170.961794][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2170.961794][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2170.961794][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2170.961794][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2170.961794][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2170.961794][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2170.961794][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2170.961794][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2170.961794][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2170.961794][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.961794][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.961794][T15690] __do_fast_syscall_32+0x102/0x160 [ 2170.961794][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2170.961794][T15690] do_SYSENTER_32+0x73/0x90 [ 2170.961794][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.961794][T15690] RIP: 0023:0xf7f1a549 [ 2170.961794][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2170.961794][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2170.961794][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2170.961794][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2170.961794][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2170.961794][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2170.961794][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2170.961794][T15690] Uninit was stored to memory at: [ 2170.961794][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2170.961794][T15690] __msan_chain_origin+0x57/0xa0 [ 2170.961794][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2170.961794][T15690] get_compat_msghdr+0x108/0x2b0 [ 2170.961794][T15690] do_recvmmsg+0xdaf/0x2300 [ 2170.961794][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2170.961794][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.961794][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.961794][T15690] __do_fast_syscall_32+0x102/0x160 [ 2170.961794][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2170.961794][T15690] do_SYSENTER_32+0x73/0x90 [ 2170.961794][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.961794][T15690] [ 2170.961794][T15690] Uninit was stored to memory at: [ 2170.961794][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2170.961794][T15690] __msan_chain_origin+0x57/0xa0 [ 2170.961794][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2170.961794][T15690] get_compat_msghdr+0x108/0x2b0 [ 2170.961794][T15690] do_recvmmsg+0xdaf/0x2300 [ 2170.961794][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2170.961794][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.961794][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.961794][T15690] __do_fast_syscall_32+0x102/0x160 [ 2170.961794][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2170.961794][T15690] do_SYSENTER_32+0x73/0x90 [ 2170.961794][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.961794][T15690] [ 2170.961794][T15690] Uninit was stored to memory at: [ 2170.961794][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2170.961794][T15690] __msan_chain_origin+0x57/0xa0 [ 2170.961794][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2170.961794][T15690] get_compat_msghdr+0x108/0x2b0 [ 2170.961794][T15690] do_recvmmsg+0xdaf/0x2300 [ 2170.961794][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2170.961794][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2170.961794][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2170.961794][T15690] __do_fast_syscall_32+0x102/0x160 [ 2170.961794][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2170.961794][T15690] do_SYSENTER_32+0x73/0x90 [ 2170.961794][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2170.961794][T15690] [ 2170.961794][T15690] Uninit was stored to memory at: [ 2170.961794][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2170.961794][T15690] __msan_chain_origin+0x57/0xa0 [ 2170.961794][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2170.961794][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.391748][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.391748][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.391748][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.391748][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.391748][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.391748][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.421753][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.421753][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.421753][T15690] [ 2171.421753][T15690] Uninit was stored to memory at: [ 2171.421753][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.421753][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.421753][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.421753][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.421753][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.421753][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.421753][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.421753][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.421753][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.421753][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.421753][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.421753][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.421753][T15690] [ 2171.421753][T15690] Uninit was stored to memory at: [ 2171.511698][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.511698][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.511698][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.511698][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.511698][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.511698][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.541705][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.541705][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.541705][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.541705][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.541705][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.541705][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.571706][T15690] [ 2171.571706][T15690] Uninit was stored to memory at: [ 2171.571706][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.571706][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.571706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.571706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.571706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.571706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.571706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.571706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.571706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.571706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.571706][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.571706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.571706][T15690] [ 2171.571706][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2171.571706][T15690] do_recvmmsg+0xbc/0x2300 [ 2171.571706][T15690] do_recvmmsg+0xbc/0x2300 [ 2171.837570][T15690] not chained 1480000 origins [ 2171.841497][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2171.841497][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.841497][T15690] Call Trace: [ 2171.841497][T15690] dump_stack+0x21c/0x280 [ 2171.841497][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2171.841497][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2171.841497][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2171.841497][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2171.841497][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2171.841497][T15690] ? release_sock+0x26a/0x2d0 [ 2171.841497][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2171.841497][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2171.841497][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2171.841497][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2171.841497][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2171.841497][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2171.841497][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.841497][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.841497][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.841497][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.841497][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2171.841497][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2171.841497][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2171.841497][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2171.841497][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2171.841497][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2171.841497][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.841497][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2171.841497][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2171.841497][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.841497][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.841497][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.841497][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.841497][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.841497][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.841497][T15690] RIP: 0023:0xf7f1a549 [ 2171.841497][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2171.841497][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2171.841497][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2171.841497][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2171.841497][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2171.841497][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2171.841497][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2171.841497][T15690] Uninit was stored to memory at: [ 2171.841497][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.841497][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.841497][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.841497][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.841497][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.841497][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.841497][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.841497][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.841497][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.841497][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.841497][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.841497][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.841497][T15690] [ 2171.841497][T15690] Uninit was stored to memory at: [ 2171.841497][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.841497][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.841497][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.841497][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.841497][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.841497][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.841497][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.841497][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.841497][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.841497][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.841497][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.841497][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.841497][T15690] [ 2171.841497][T15690] Uninit was stored to memory at: [ 2171.841497][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.841497][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.841497][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.841497][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.841497][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.841497][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.841497][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.841497][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.841497][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.841497][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.841497][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.841497][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.841497][T15690] [ 2171.841497][T15690] Uninit was stored to memory at: [ 2171.841497][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.841497][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.841497][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.841497][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.841497][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.841497][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.841497][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.841497][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.841497][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.841497][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.841497][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.841497][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.841497][T15690] [ 2171.841497][T15690] Uninit was stored to memory at: [ 2171.841497][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.841497][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.841497][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.841497][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.841497][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.841497][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.841497][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.841497][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.841497][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.841497][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.841497][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.841497][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.841497][T15690] [ 2171.841497][T15690] Uninit was stored to memory at: [ 2171.841497][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.841497][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.841497][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.841497][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.841497][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.841497][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.841497][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.841497][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.841497][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.841497][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.841497][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.841497][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.841497][T15690] [ 2171.841497][T15690] Uninit was stored to memory at: [ 2171.841497][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2171.841497][T15690] __msan_chain_origin+0x57/0xa0 [ 2171.841497][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2171.841497][T15690] get_compat_msghdr+0x108/0x2b0 [ 2171.841497][T15690] do_recvmmsg+0xdaf/0x2300 [ 2171.841497][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2171.841497][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2171.841497][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2171.841497][T15690] __do_fast_syscall_32+0x102/0x160 [ 2171.841497][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2171.841497][T15690] do_SYSENTER_32+0x73/0x90 [ 2171.841497][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2171.841497][T15690] [ 2171.841497][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2171.841497][T15690] do_recvmmsg+0xbc/0x2300 [ 2171.841497][T15690] do_recvmmsg+0xbc/0x2300 [ 2172.676869][T15678] not chained 1490000 origins [ 2172.681491][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2172.681491][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.681491][T15678] Call Trace: [ 2172.681491][T15678] dump_stack+0x21c/0x280 [ 2172.681491][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2172.681491][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2172.681491][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2172.681491][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2172.725907][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2172.731635][T15678] ? release_sock+0x26a/0x2d0 [ 2172.731635][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2172.731635][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2172.731635][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2172.731635][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2172.761615][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2172.761615][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2172.761615][T15678] __msan_chain_origin+0x57/0xa0 [ 2172.761615][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2172.761615][T15678] get_compat_msghdr+0x108/0x2b0 [ 2172.761615][T15678] do_recvmmsg+0xdaf/0x2300 [ 2172.791640][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2172.791640][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2172.791640][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2172.791640][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2172.791640][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2172.791640][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2172.821616][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2172.821616][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2172.821616][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2172.821616][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2172.821616][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2172.851955][T15678] __do_fast_syscall_32+0x102/0x160 [ 2172.851955][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2172.851955][T15678] do_SYSENTER_32+0x73/0x90 [ 2172.851955][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2172.851955][T15678] RIP: 0023:0xf7f1a549 [ 2172.851955][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2172.851955][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2172.851955][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2172.851955][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2172.851955][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2172.851955][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2172.851955][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2172.851955][T15678] Uninit was stored to memory at: [ 2172.851955][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2172.851955][T15678] __msan_chain_origin+0x57/0xa0 [ 2172.851955][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2172.851955][T15678] get_compat_msghdr+0x108/0x2b0 [ 2172.851955][T15678] do_recvmmsg+0xdaf/0x2300 [ 2172.851955][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2172.851955][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2172.851955][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2172.851955][T15678] __do_fast_syscall_32+0x102/0x160 [ 2172.851955][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2172.851955][T15678] do_SYSENTER_32+0x73/0x90 [ 2172.851955][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2172.851955][T15678] [ 2172.851955][T15678] Uninit was stored to memory at: [ 2172.851955][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2172.851955][T15678] __msan_chain_origin+0x57/0xa0 [ 2172.851955][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2172.851955][T15678] get_compat_msghdr+0x108/0x2b0 [ 2172.851955][T15678] do_recvmmsg+0xdaf/0x2300 [ 2172.851955][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2172.851955][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2172.851955][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2172.851955][T15678] __do_fast_syscall_32+0x102/0x160 [ 2172.851955][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2172.851955][T15678] do_SYSENTER_32+0x73/0x90 [ 2172.851955][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2172.851955][T15678] [ 2172.851955][T15678] Uninit was stored to memory at: [ 2172.851955][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2172.851955][T15678] __msan_chain_origin+0x57/0xa0 [ 2172.851955][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2172.851955][T15678] get_compat_msghdr+0x108/0x2b0 [ 2172.851955][T15678] do_recvmmsg+0xdaf/0x2300 [ 2172.851955][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2172.851955][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2172.851955][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2172.851955][T15678] __do_fast_syscall_32+0x102/0x160 [ 2172.851955][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2172.851955][T15678] do_SYSENTER_32+0x73/0x90 [ 2172.851955][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2172.851955][T15678] [ 2172.851955][T15678] Uninit was stored to memory at: [ 2172.851955][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2172.851955][T15678] __msan_chain_origin+0x57/0xa0 [ 2172.851955][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2172.851955][T15678] get_compat_msghdr+0x108/0x2b0 [ 2172.851955][T15678] do_recvmmsg+0xdaf/0x2300 [ 2172.851955][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2172.851955][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2172.851955][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2172.851955][T15678] __do_fast_syscall_32+0x102/0x160 [ 2172.851955][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2172.851955][T15678] do_SYSENTER_32+0x73/0x90 [ 2172.851955][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2172.851955][T15678] [ 2172.851955][T15678] Uninit was stored to memory at: [ 2172.851955][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2172.851955][T15678] __msan_chain_origin+0x57/0xa0 [ 2172.851955][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2172.851955][T15678] get_compat_msghdr+0x108/0x2b0 [ 2172.851955][T15678] do_recvmmsg+0xdaf/0x2300 [ 2172.851955][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2172.851955][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2172.851955][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2172.851955][T15678] __do_fast_syscall_32+0x102/0x160 [ 2172.851955][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2172.851955][T15678] do_SYSENTER_32+0x73/0x90 [ 2172.851955][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2172.851955][T15678] [ 2172.851955][T15678] Uninit was stored to memory at: [ 2172.851955][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2172.851955][T15678] __msan_chain_origin+0x57/0xa0 [ 2172.851955][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2172.851955][T15678] get_compat_msghdr+0x108/0x2b0 [ 2172.851955][T15678] do_recvmmsg+0xdaf/0x2300 [ 2172.851955][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2172.851955][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2172.851955][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2172.851955][T15678] __do_fast_syscall_32+0x102/0x160 [ 2172.851955][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2172.851955][T15678] do_SYSENTER_32+0x73/0x90 [ 2172.851955][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2172.851955][T15678] [ 2172.851955][T15678] Uninit was stored to memory at: [ 2172.851955][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2172.851955][T15678] __msan_chain_origin+0x57/0xa0 [ 2172.851955][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2172.851955][T15678] get_compat_msghdr+0x108/0x2b0 [ 2172.851955][T15678] do_recvmmsg+0xdaf/0x2300 [ 2172.851955][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2172.851955][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2172.851955][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2172.851955][T15678] __do_fast_syscall_32+0x102/0x160 [ 2172.851955][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2172.851955][T15678] do_SYSENTER_32+0x73/0x90 [ 2172.851955][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2172.851955][T15678] [ 2172.851955][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2172.851955][T15678] do_recvmmsg+0xbc/0x2300 [ 2172.851955][T15678] do_recvmmsg+0xbc/0x2300 [ 2173.597372][T15690] not chained 1500000 origins [ 2173.601510][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2173.601510][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.601510][T15690] Call Trace: [ 2173.601510][T15690] dump_stack+0x21c/0x280 [ 2173.601510][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2173.601510][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2173.601510][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2173.601510][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2173.601510][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2173.601510][T15690] ? release_sock+0x26a/0x2d0 [ 2173.601510][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2173.601510][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2173.601510][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2173.601510][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2173.601510][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2173.601510][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2173.601510][T15690] __msan_chain_origin+0x57/0xa0 [ 2173.601510][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2173.601510][T15690] get_compat_msghdr+0x108/0x2b0 [ 2173.601510][T15690] do_recvmmsg+0xdaf/0x2300 [ 2173.601510][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2173.601510][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2173.601510][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2173.601510][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2173.601510][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2173.601510][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2173.601510][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2173.601510][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2173.601510][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2173.601510][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2173.601510][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2173.601510][T15690] __do_fast_syscall_32+0x102/0x160 [ 2173.601510][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2173.601510][T15690] do_SYSENTER_32+0x73/0x90 [ 2173.601510][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2173.601510][T15690] RIP: 0023:0xf7f1a549 [ 2173.601510][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2173.601510][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2173.601510][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2173.601510][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2173.601510][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2173.601510][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2173.601510][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2173.601510][T15690] Uninit was stored to memory at: [ 2173.601510][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2173.601510][T15690] __msan_chain_origin+0x57/0xa0 [ 2173.601510][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2173.601510][T15690] get_compat_msghdr+0x108/0x2b0 [ 2173.601510][T15690] do_recvmmsg+0xdaf/0x2300 [ 2173.601510][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2173.601510][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2173.601510][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2173.601510][T15690] __do_fast_syscall_32+0x102/0x160 [ 2173.601510][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2173.601510][T15690] do_SYSENTER_32+0x73/0x90 [ 2173.601510][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2173.601510][T15690] [ 2173.601510][T15690] Uninit was stored to memory at: [ 2173.601510][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2173.601510][T15690] __msan_chain_origin+0x57/0xa0 [ 2173.601510][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2173.601510][T15690] get_compat_msghdr+0x108/0x2b0 [ 2173.601510][T15690] do_recvmmsg+0xdaf/0x2300 [ 2173.601510][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2173.601510][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2173.601510][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2173.601510][T15690] __do_fast_syscall_32+0x102/0x160 [ 2173.601510][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2173.601510][T15690] do_SYSENTER_32+0x73/0x90 [ 2173.601510][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2173.601510][T15690] [ 2173.601510][T15690] Uninit was stored to memory at: [ 2173.601510][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2173.601510][T15690] __msan_chain_origin+0x57/0xa0 [ 2173.601510][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2173.601510][T15690] get_compat_msghdr+0x108/0x2b0 [ 2173.601510][T15690] do_recvmmsg+0xdaf/0x2300 [ 2173.601510][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2173.601510][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2173.601510][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2173.601510][T15690] __do_fast_syscall_32+0x102/0x160 [ 2173.601510][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2173.601510][T15690] do_SYSENTER_32+0x73/0x90 [ 2173.601510][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2173.601510][T15690] [ 2173.601510][T15690] Uninit was stored to memory at: [ 2173.601510][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2173.601510][T15690] __msan_chain_origin+0x57/0xa0 [ 2173.601510][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2173.601510][T15690] get_compat_msghdr+0x108/0x2b0 [ 2173.601510][T15690] do_recvmmsg+0xdaf/0x2300 [ 2173.601510][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2173.601510][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2173.601510][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2173.601510][T15690] __do_fast_syscall_32+0x102/0x160 [ 2173.601510][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2173.601510][T15690] do_SYSENTER_32+0x73/0x90 [ 2173.601510][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2173.601510][T15690] [ 2173.601510][T15690] Uninit was stored to memory at: [ 2173.601510][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2173.601510][T15690] __msan_chain_origin+0x57/0xa0 [ 2173.601510][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2173.601510][T15690] get_compat_msghdr+0x108/0x2b0 [ 2173.601510][T15690] do_recvmmsg+0xdaf/0x2300 [ 2173.601510][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2173.601510][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2173.601510][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2173.601510][T15690] __do_fast_syscall_32+0x102/0x160 [ 2173.601510][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2173.601510][T15690] do_SYSENTER_32+0x73/0x90 [ 2173.601510][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2173.601510][T15690] [ 2173.601510][T15690] Uninit was stored to memory at: [ 2173.601510][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2173.601510][T15690] __msan_chain_origin+0x57/0xa0 [ 2173.601510][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2173.601510][T15690] get_compat_msghdr+0x108/0x2b0 [ 2173.601510][T15690] do_recvmmsg+0xdaf/0x2300 [ 2173.601510][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2173.601510][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2173.601510][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2173.601510][T15690] __do_fast_syscall_32+0x102/0x160 [ 2173.601510][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2174.275590][T15690] do_SYSENTER_32+0x73/0x90 [ 2174.275590][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.275590][T15690] [ 2174.275590][T15690] Uninit was stored to memory at: [ 2174.275590][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2174.275590][T15690] __msan_chain_origin+0x57/0xa0 [ 2174.275590][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2174.275590][T15690] get_compat_msghdr+0x108/0x2b0 [ 2174.275590][T15690] do_recvmmsg+0xdaf/0x2300 [ 2174.275590][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2174.275590][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.275590][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.275590][T15690] __do_fast_syscall_32+0x102/0x160 [ 2174.275590][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2174.275590][T15690] do_SYSENTER_32+0x73/0x90 [ 2174.275590][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.275590][T15690] [ 2174.275590][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2174.275590][T15690] do_recvmmsg+0xbc/0x2300 [ 2174.275590][T15690] do_recvmmsg+0xbc/0x2300 [ 2174.456452][T15678] not chained 1510000 origins [ 2174.461162][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2174.461520][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.472657][T15678] Call Trace: [ 2174.472657][T15678] dump_stack+0x21c/0x280 [ 2174.472657][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2174.472657][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2174.472657][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2174.472657][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2174.472657][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2174.472657][T15678] ? release_sock+0x26a/0x2d0 [ 2174.472657][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2174.472657][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2174.472657][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2174.472657][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2174.472657][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2174.472657][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2174.472657][T15678] __msan_chain_origin+0x57/0xa0 [ 2174.472657][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2174.472657][T15678] get_compat_msghdr+0x108/0x2b0 [ 2174.472657][T15678] do_recvmmsg+0xdaf/0x2300 [ 2174.472657][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2174.472657][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2174.472657][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2174.472657][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2174.472657][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2174.472657][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2174.472657][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2174.472657][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2174.472657][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2174.472657][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.472657][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.472657][T15678] __do_fast_syscall_32+0x102/0x160 [ 2174.472657][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2174.472657][T15678] do_SYSENTER_32+0x73/0x90 [ 2174.472657][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.472657][T15678] RIP: 0023:0xf7f1a549 [ 2174.472657][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2174.472657][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2174.472657][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2174.472657][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2174.472657][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2174.472657][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2174.472657][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2174.472657][T15678] Uninit was stored to memory at: [ 2174.472657][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2174.472657][T15678] __msan_chain_origin+0x57/0xa0 [ 2174.472657][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2174.472657][T15678] get_compat_msghdr+0x108/0x2b0 [ 2174.472657][T15678] do_recvmmsg+0xdaf/0x2300 [ 2174.472657][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2174.472657][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.472657][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.472657][T15678] __do_fast_syscall_32+0x102/0x160 [ 2174.472657][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2174.472657][T15678] do_SYSENTER_32+0x73/0x90 [ 2174.472657][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.472657][T15678] [ 2174.472657][T15678] Uninit was stored to memory at: [ 2174.472657][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2174.472657][T15678] __msan_chain_origin+0x57/0xa0 [ 2174.472657][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2174.472657][T15678] get_compat_msghdr+0x108/0x2b0 [ 2174.472657][T15678] do_recvmmsg+0xdaf/0x2300 [ 2174.472657][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2174.472657][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.472657][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.472657][T15678] __do_fast_syscall_32+0x102/0x160 [ 2174.472657][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2174.472657][T15678] do_SYSENTER_32+0x73/0x90 [ 2174.472657][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.472657][T15678] [ 2174.472657][T15678] Uninit was stored to memory at: [ 2174.472657][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2174.472657][T15678] __msan_chain_origin+0x57/0xa0 [ 2174.472657][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2174.472657][T15678] get_compat_msghdr+0x108/0x2b0 [ 2174.472657][T15678] do_recvmmsg+0xdaf/0x2300 [ 2174.472657][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2174.472657][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.472657][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.472657][T15678] __do_fast_syscall_32+0x102/0x160 [ 2174.472657][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2174.472657][T15678] do_SYSENTER_32+0x73/0x90 [ 2174.472657][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.472657][T15678] [ 2174.472657][T15678] Uninit was stored to memory at: [ 2174.472657][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2174.472657][T15678] __msan_chain_origin+0x57/0xa0 [ 2174.472657][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2174.472657][T15678] get_compat_msghdr+0x108/0x2b0 [ 2174.472657][T15678] do_recvmmsg+0xdaf/0x2300 [ 2174.472657][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2174.472657][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.472657][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.472657][T15678] __do_fast_syscall_32+0x102/0x160 [ 2174.472657][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2174.472657][T15678] do_SYSENTER_32+0x73/0x90 [ 2174.472657][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.472657][T15678] [ 2174.472657][T15678] Uninit was stored to memory at: [ 2174.472657][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2174.472657][T15678] __msan_chain_origin+0x57/0xa0 [ 2174.472657][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2174.472657][T15678] get_compat_msghdr+0x108/0x2b0 [ 2174.472657][T15678] do_recvmmsg+0xdaf/0x2300 [ 2174.472657][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2174.472657][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.472657][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.472657][T15678] __do_fast_syscall_32+0x102/0x160 [ 2174.472657][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2174.472657][T15678] do_SYSENTER_32+0x73/0x90 [ 2174.472657][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.472657][T15678] [ 2174.472657][T15678] Uninit was stored to memory at: [ 2174.472657][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2174.472657][T15678] __msan_chain_origin+0x57/0xa0 [ 2174.472657][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2174.472657][T15678] get_compat_msghdr+0x108/0x2b0 [ 2174.472657][T15678] do_recvmmsg+0xdaf/0x2300 [ 2174.472657][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2174.472657][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.472657][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.472657][T15678] __do_fast_syscall_32+0x102/0x160 [ 2174.472657][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2174.472657][T15678] do_SYSENTER_32+0x73/0x90 [ 2174.472657][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.472657][T15678] [ 2174.472657][T15678] Uninit was stored to memory at: [ 2174.472657][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2174.472657][T15678] __msan_chain_origin+0x57/0xa0 [ 2174.472657][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2174.472657][T15678] get_compat_msghdr+0x108/0x2b0 [ 2174.472657][T15678] do_recvmmsg+0xdaf/0x2300 [ 2174.472657][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2174.472657][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2174.472657][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2174.472657][T15678] __do_fast_syscall_32+0x102/0x160 [ 2174.472657][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2174.472657][T15678] do_SYSENTER_32+0x73/0x90 [ 2174.472657][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2174.472657][T15678] [ 2174.472657][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2174.472657][T15678] do_recvmmsg+0xbc/0x2300 [ 2174.472657][T15678] do_recvmmsg+0xbc/0x2300 [ 2175.425185][T15678] not chained 1520000 origins [ 2175.430015][T15678] CPU: 0 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2175.431575][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2175.441922][T15678] Call Trace: [ 2175.441922][T15678] dump_stack+0x21c/0x280 [ 2175.441922][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2175.441922][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2175.441922][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2175.441922][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2175.441922][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2175.441922][T15678] ? release_sock+0x26a/0x2d0 [ 2175.441922][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2175.441922][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2175.441922][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2175.441922][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2175.441922][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2175.441922][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2175.441922][T15678] __msan_chain_origin+0x57/0xa0 [ 2175.441922][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2175.441922][T15678] get_compat_msghdr+0x108/0x2b0 [ 2175.441922][T15678] do_recvmmsg+0xdaf/0x2300 [ 2175.441922][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2175.441922][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2175.441922][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2175.441922][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2175.441922][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2175.441922][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2175.441922][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2175.441922][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2175.441922][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2175.441922][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2175.441922][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2175.441922][T15678] __do_fast_syscall_32+0x102/0x160 [ 2175.441922][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2175.441922][T15678] do_SYSENTER_32+0x73/0x90 [ 2175.441922][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2175.441922][T15678] RIP: 0023:0xf7f1a549 [ 2175.441922][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2175.441922][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2175.441922][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2175.441922][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2175.441922][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2175.441922][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2175.441922][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2175.441922][T15678] Uninit was stored to memory at: [ 2175.441922][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2175.441922][T15678] __msan_chain_origin+0x57/0xa0 [ 2175.441922][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2175.441922][T15678] get_compat_msghdr+0x108/0x2b0 [ 2175.441922][T15678] do_recvmmsg+0xdaf/0x2300 [ 2175.441922][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2175.441922][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2175.441922][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2175.737754][T15678] __do_fast_syscall_32+0x102/0x160 [ 2175.737754][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2175.737754][T15678] do_SYSENTER_32+0x73/0x90 [ 2175.737754][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2175.737754][T15678] [ 2175.737754][T15678] Uninit was stored to memory at: [ 2175.737754][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2175.772304][T15678] __msan_chain_origin+0x57/0xa0 [ 2175.772304][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2175.772304][T15678] get_compat_msghdr+0x108/0x2b0 [ 2175.772304][T15678] do_recvmmsg+0xdaf/0x2300 [ 2175.772304][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2175.772304][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2175.772304][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2175.772304][T15678] __do_fast_syscall_32+0x102/0x160 [ 2175.772304][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2175.772304][T15678] do_SYSENTER_32+0x73/0x90 [ 2175.772304][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2175.772304][T15678] [ 2175.772304][T15678] Uninit was stored to memory at: [ 2175.772304][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2175.772304][T15678] __msan_chain_origin+0x57/0xa0 [ 2175.772304][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2175.772304][T15678] get_compat_msghdr+0x108/0x2b0 [ 2175.772304][T15678] do_recvmmsg+0xdaf/0x2300 [ 2175.772304][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2175.772304][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2175.772304][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2175.772304][T15678] __do_fast_syscall_32+0x102/0x160 [ 2175.772304][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2175.772304][T15678] do_SYSENTER_32+0x73/0x90 [ 2175.772304][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2175.772304][T15678] [ 2175.772304][T15678] Uninit was stored to memory at: [ 2175.772304][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2175.772304][T15678] __msan_chain_origin+0x57/0xa0 [ 2175.772304][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2175.772304][T15678] get_compat_msghdr+0x108/0x2b0 [ 2175.772304][T15678] do_recvmmsg+0xdaf/0x2300 [ 2175.772304][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2175.772304][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2175.772304][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2175.772304][T15678] __do_fast_syscall_32+0x102/0x160 [ 2175.772304][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2175.772304][T15678] do_SYSENTER_32+0x73/0x90 [ 2175.772304][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2175.772304][T15678] [ 2175.772304][T15678] Uninit was stored to memory at: [ 2175.772304][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2175.772304][T15678] __msan_chain_origin+0x57/0xa0 [ 2175.772304][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2175.772304][T15678] get_compat_msghdr+0x108/0x2b0 [ 2175.772304][T15678] do_recvmmsg+0xdaf/0x2300 [ 2175.772304][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2175.772304][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2175.772304][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2175.772304][T15678] __do_fast_syscall_32+0x102/0x160 [ 2175.772304][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2175.772304][T15678] do_SYSENTER_32+0x73/0x90 [ 2175.772304][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2175.772304][T15678] [ 2175.772304][T15678] Uninit was stored to memory at: [ 2175.772304][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2175.772304][T15678] __msan_chain_origin+0x57/0xa0 [ 2175.772304][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2175.772304][T15678] get_compat_msghdr+0x108/0x2b0 [ 2175.772304][T15678] do_recvmmsg+0xdaf/0x2300 [ 2175.772304][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2175.772304][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2175.772304][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2175.772304][T15678] __do_fast_syscall_32+0x102/0x160 [ 2175.772304][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2175.772304][T15678] do_SYSENTER_32+0x73/0x90 [ 2175.772304][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2175.772304][T15678] [ 2175.772304][T15678] Uninit was stored to memory at: [ 2175.772304][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2175.772304][T15678] __msan_chain_origin+0x57/0xa0 [ 2175.772304][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2175.772304][T15678] get_compat_msghdr+0x108/0x2b0 [ 2175.772304][T15678] do_recvmmsg+0xdaf/0x2300 [ 2175.772304][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2175.772304][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2175.772304][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2175.772304][T15678] __do_fast_syscall_32+0x102/0x160 [ 2175.772304][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2175.772304][T15678] do_SYSENTER_32+0x73/0x90 [ 2175.772304][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2175.772304][T15678] [ 2175.772304][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2175.772304][T15678] do_recvmmsg+0xbc/0x2300 [ 2175.772304][T15678] do_recvmmsg+0xbc/0x2300 [ 2176.256794][T15690] not chained 1530000 origins [ 2176.261493][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2176.261493][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2176.275369][T15690] Call Trace: [ 2176.275369][T15690] dump_stack+0x21c/0x280 [ 2176.275369][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2176.275369][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2176.275369][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2176.275369][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2176.275369][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2176.275369][T15690] ? release_sock+0x26a/0x2d0 [ 2176.275369][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2176.275369][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2176.275369][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2176.275369][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2176.275369][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2176.275369][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2176.275369][T15690] __msan_chain_origin+0x57/0xa0 [ 2176.275369][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2176.275369][T15690] get_compat_msghdr+0x108/0x2b0 [ 2176.275369][T15690] do_recvmmsg+0xdaf/0x2300 [ 2176.275369][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2176.275369][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2176.275369][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2176.275369][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2176.275369][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2176.275369][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2176.275369][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2176.275369][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2176.275369][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2176.275369][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2176.275369][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2176.275369][T15690] __do_fast_syscall_32+0x102/0x160 [ 2176.275369][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2176.275369][T15690] do_SYSENTER_32+0x73/0x90 [ 2176.275369][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2176.275369][T15690] RIP: 0023:0xf7f1a549 [ 2176.275369][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2176.275369][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2176.275369][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2176.275369][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2176.275369][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2176.275369][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2176.275369][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2176.275369][T15690] Uninit was stored to memory at: [ 2176.275369][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2176.275369][T15690] __msan_chain_origin+0x57/0xa0 [ 2176.275369][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2176.275369][T15690] get_compat_msghdr+0x108/0x2b0 [ 2176.275369][T15690] do_recvmmsg+0xdaf/0x2300 [ 2176.275369][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2176.275369][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2176.275369][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2176.275369][T15690] __do_fast_syscall_32+0x102/0x160 [ 2176.275369][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2176.275369][T15690] do_SYSENTER_32+0x73/0x90 [ 2176.275369][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2176.275369][T15690] [ 2176.275369][T15690] Uninit was stored to memory at: [ 2176.275369][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2176.275369][T15690] __msan_chain_origin+0x57/0xa0 [ 2176.275369][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2176.275369][T15690] get_compat_msghdr+0x108/0x2b0 [ 2176.275369][T15690] do_recvmmsg+0xdaf/0x2300 [ 2176.275369][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2176.275369][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2176.275369][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2176.275369][T15690] __do_fast_syscall_32+0x102/0x160 [ 2176.275369][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2176.275369][T15690] do_SYSENTER_32+0x73/0x90 [ 2176.275369][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2176.275369][T15690] [ 2176.275369][T15690] Uninit was stored to memory at: [ 2176.275369][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2176.275369][T15690] __msan_chain_origin+0x57/0xa0 [ 2176.275369][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2176.275369][T15690] get_compat_msghdr+0x108/0x2b0 [ 2176.275369][T15690] do_recvmmsg+0xdaf/0x2300 [ 2176.275369][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2176.275369][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2176.275369][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2176.275369][T15690] __do_fast_syscall_32+0x102/0x160 [ 2176.275369][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2176.275369][T15690] do_SYSENTER_32+0x73/0x90 [ 2176.275369][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2176.275369][T15690] [ 2176.275369][T15690] Uninit was stored to memory at: [ 2176.275369][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2176.275369][T15690] __msan_chain_origin+0x57/0xa0 [ 2176.275369][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2176.275369][T15690] get_compat_msghdr+0x108/0x2b0 [ 2176.275369][T15690] do_recvmmsg+0xdaf/0x2300 [ 2176.275369][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2176.275369][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2176.275369][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2176.275369][T15690] __do_fast_syscall_32+0x102/0x160 [ 2176.275369][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2176.275369][T15690] do_SYSENTER_32+0x73/0x90 [ 2176.275369][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2176.275369][T15690] [ 2176.275369][T15690] Uninit was stored to memory at: [ 2176.275369][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2176.275369][T15690] __msan_chain_origin+0x57/0xa0 [ 2176.275369][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2176.275369][T15690] get_compat_msghdr+0x108/0x2b0 [ 2176.275369][T15690] do_recvmmsg+0xdaf/0x2300 [ 2176.275369][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2176.275369][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2176.275369][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2176.275369][T15690] __do_fast_syscall_32+0x102/0x160 [ 2176.275369][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2176.275369][T15690] do_SYSENTER_32+0x73/0x90 [ 2176.275369][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2176.275369][T15690] [ 2176.275369][T15690] Uninit was stored to memory at: [ 2176.275369][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2176.275369][T15690] __msan_chain_origin+0x57/0xa0 [ 2176.275369][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2176.275369][T15690] get_compat_msghdr+0x108/0x2b0 [ 2176.275369][T15690] do_recvmmsg+0xdaf/0x2300 [ 2176.275369][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2176.275369][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2176.275369][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2176.275369][T15690] __do_fast_syscall_32+0x102/0x160 [ 2176.275369][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2176.275369][T15690] do_SYSENTER_32+0x73/0x90 [ 2176.275369][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2176.275369][T15690] [ 2176.275369][T15690] Uninit was stored to memory at: [ 2176.275369][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2176.275369][T15690] __msan_chain_origin+0x57/0xa0 [ 2176.275369][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2176.275369][T15690] get_compat_msghdr+0x108/0x2b0 [ 2176.275369][T15690] do_recvmmsg+0xdaf/0x2300 [ 2176.275369][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2176.275369][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2176.275369][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2176.275369][T15690] __do_fast_syscall_32+0x102/0x160 [ 2176.275369][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2176.275369][T15690] do_SYSENTER_32+0x73/0x90 [ 2176.275369][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2176.275369][T15690] [ 2176.275369][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2176.275369][T15690] do_recvmmsg+0xbc/0x2300 [ 2176.275369][T15690] do_recvmmsg+0xbc/0x2300 [ 2177.193591][T15690] not chained 1540000 origins [ 2177.198298][T15690] CPU: 0 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2177.201496][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.211686][T15690] Call Trace: [ 2177.211686][T15690] dump_stack+0x21c/0x280 [ 2177.211686][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2177.211686][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2177.211686][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2177.241706][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2177.241706][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2177.241706][T15690] ? release_sock+0x26a/0x2d0 [ 2177.241706][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2177.241706][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2177.241706][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2177.241706][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2177.241706][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2177.241706][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2177.241706][T15690] __msan_chain_origin+0x57/0xa0 [ 2177.241706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2177.241706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2177.241706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2177.241706][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2177.241706][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2177.241706][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2177.241706][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2177.241706][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2177.241706][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2177.241706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2177.241706][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2177.241706][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2177.241706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2177.241706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2177.241706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2177.241706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2177.241706][T15690] do_SYSENTER_32+0x73/0x90 [ 2177.241706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2177.241706][T15690] RIP: 0023:0xf7f1a549 [ 2177.241706][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2177.241706][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2177.241706][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2177.241706][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2177.241706][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2177.241706][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2177.241706][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2177.241706][T15690] Uninit was stored to memory at: [ 2177.241706][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2177.241706][T15690] __msan_chain_origin+0x57/0xa0 [ 2177.241706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2177.241706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2177.241706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2177.241706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2177.241706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2177.241706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2177.241706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2177.241706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2177.241706][T15690] do_SYSENTER_32+0x73/0x90 [ 2177.241706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2177.241706][T15690] [ 2177.241706][T15690] Uninit was stored to memory at: [ 2177.241706][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2177.241706][T15690] __msan_chain_origin+0x57/0xa0 [ 2177.241706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2177.241706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2177.241706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2177.241706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2177.241706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2177.241706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2177.241706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2177.241706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2177.241706][T15690] do_SYSENTER_32+0x73/0x90 [ 2177.241706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2177.241706][T15690] [ 2177.241706][T15690] Uninit was stored to memory at: [ 2177.241706][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2177.241706][T15690] __msan_chain_origin+0x57/0xa0 [ 2177.241706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2177.241706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2177.241706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2177.241706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2177.241706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2177.241706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2177.241706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2177.241706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2177.241706][T15690] do_SYSENTER_32+0x73/0x90 [ 2177.241706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2177.241706][T15690] [ 2177.241706][T15690] Uninit was stored to memory at: [ 2177.241706][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2177.241706][T15690] __msan_chain_origin+0x57/0xa0 [ 2177.241706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2177.241706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2177.241706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2177.241706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2177.241706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2177.241706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2177.241706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2177.241706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2177.241706][T15690] do_SYSENTER_32+0x73/0x90 [ 2177.241706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2177.241706][T15690] [ 2177.241706][T15690] Uninit was stored to memory at: [ 2177.241706][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2177.241706][T15690] __msan_chain_origin+0x57/0xa0 [ 2177.241706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2177.241706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2177.241706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2177.241706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2177.241706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2177.241706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2177.241706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2177.241706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2177.241706][T15690] do_SYSENTER_32+0x73/0x90 [ 2177.241706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2177.241706][T15690] [ 2177.241706][T15690] Uninit was stored to memory at: [ 2177.241706][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2177.241706][T15690] __msan_chain_origin+0x57/0xa0 [ 2177.241706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2177.241706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2177.241706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2177.241706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2177.241706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2177.241706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2177.241706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2177.241706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2177.241706][T15690] do_SYSENTER_32+0x73/0x90 [ 2177.241706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2177.241706][T15690] [ 2177.241706][T15690] Uninit was stored to memory at: [ 2177.241706][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2177.241706][T15690] __msan_chain_origin+0x57/0xa0 [ 2177.241706][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2177.241706][T15690] get_compat_msghdr+0x108/0x2b0 [ 2177.241706][T15690] do_recvmmsg+0xdaf/0x2300 [ 2177.241706][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2177.241706][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2177.241706][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2177.241706][T15690] __do_fast_syscall_32+0x102/0x160 [ 2177.241706][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2177.241706][T15690] do_SYSENTER_32+0x73/0x90 [ 2177.241706][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2177.241706][T15690] [ 2177.241706][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2177.241706][T15690] do_recvmmsg+0xbc/0x2300 [ 2177.241706][T15690] do_recvmmsg+0xbc/0x2300 [ 2178.115283][T15678] not chained 1550000 origins [ 2178.119990][T15678] CPU: 1 PID: 15678 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2178.121515][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2178.121515][T15678] Call Trace: [ 2178.121515][T15678] dump_stack+0x21c/0x280 [ 2178.121515][T15678] kmsan_internal_chain_origin+0x6f/0x130 [ 2178.121515][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2178.152276][T15678] ? __msan_instrument_asm_store+0x25/0x130 [ 2178.152276][T15678] ? __local_bh_enable_ip+0x97/0x1d0 [ 2178.152276][T15678] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2178.152276][T15678] ? release_sock+0x26a/0x2d0 [ 2178.152276][T15678] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2178.152276][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2178.152276][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2178.152276][T15678] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2178.152276][T15678] ? _copy_from_user+0x1cd/0x2d0 [ 2178.152276][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2178.152276][T15678] __msan_chain_origin+0x57/0xa0 [ 2178.152276][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2178.152276][T15678] get_compat_msghdr+0x108/0x2b0 [ 2178.152276][T15678] do_recvmmsg+0xdaf/0x2300 [ 2178.152276][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2178.152276][T15678] ? kmsan_internal_check_memory+0xb1/0x520 [ 2178.152276][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2178.152276][T15678] ? kmsan_internal_set_origin+0x85/0xc0 [ 2178.152276][T15678] ? __msan_poison_alloca+0xe9/0x110 [ 2178.152276][T15678] ? __sys_recvmmsg+0xb5/0x5f0 [ 2178.152276][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2178.152276][T15678] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2178.152276][T15678] ? kmsan_get_metadata+0x116/0x180 [ 2178.152276][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2178.152276][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2178.152276][T15678] __do_fast_syscall_32+0x102/0x160 [ 2178.152276][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2178.152276][T15678] do_SYSENTER_32+0x73/0x90 [ 2178.152276][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2178.152276][T15678] RIP: 0023:0xf7f1a549 [ 2178.152276][T15678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2178.152276][T15678] RSP: 002b:00000000f54f30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2178.152276][T15678] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2178.152276][T15678] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2178.152276][T15678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2178.152276][T15678] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2178.152276][T15678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2178.152276][T15678] Uninit was stored to memory at: [ 2178.152276][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2178.152276][T15678] __msan_chain_origin+0x57/0xa0 [ 2178.152276][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2178.152276][T15678] get_compat_msghdr+0x108/0x2b0 [ 2178.152276][T15678] do_recvmmsg+0xdaf/0x2300 [ 2178.152276][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2178.152276][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2178.152276][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2178.152276][T15678] __do_fast_syscall_32+0x102/0x160 [ 2178.152276][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2178.152276][T15678] do_SYSENTER_32+0x73/0x90 [ 2178.152276][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2178.152276][T15678] [ 2178.152276][T15678] Uninit was stored to memory at: [ 2178.152276][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2178.152276][T15678] __msan_chain_origin+0x57/0xa0 [ 2178.152276][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2178.152276][T15678] get_compat_msghdr+0x108/0x2b0 [ 2178.152276][T15678] do_recvmmsg+0xdaf/0x2300 [ 2178.152276][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2178.152276][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2178.152276][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2178.152276][T15678] __do_fast_syscall_32+0x102/0x160 [ 2178.152276][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2178.152276][T15678] do_SYSENTER_32+0x73/0x90 [ 2178.152276][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2178.152276][T15678] [ 2178.152276][T15678] Uninit was stored to memory at: [ 2178.152276][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2178.152276][T15678] __msan_chain_origin+0x57/0xa0 [ 2178.152276][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2178.152276][T15678] get_compat_msghdr+0x108/0x2b0 [ 2178.152276][T15678] do_recvmmsg+0xdaf/0x2300 [ 2178.152276][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2178.152276][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2178.152276][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2178.152276][T15678] __do_fast_syscall_32+0x102/0x160 [ 2178.152276][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2178.152276][T15678] do_SYSENTER_32+0x73/0x90 [ 2178.152276][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2178.152276][T15678] [ 2178.152276][T15678] Uninit was stored to memory at: [ 2178.152276][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2178.152276][T15678] __msan_chain_origin+0x57/0xa0 [ 2178.152276][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2178.152276][T15678] get_compat_msghdr+0x108/0x2b0 [ 2178.152276][T15678] do_recvmmsg+0xdaf/0x2300 [ 2178.152276][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2178.152276][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2178.152276][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2178.152276][T15678] __do_fast_syscall_32+0x102/0x160 [ 2178.152276][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2178.152276][T15678] do_SYSENTER_32+0x73/0x90 [ 2178.152276][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2178.152276][T15678] [ 2178.152276][T15678] Uninit was stored to memory at: [ 2178.152276][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2178.152276][T15678] __msan_chain_origin+0x57/0xa0 [ 2178.152276][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2178.152276][T15678] get_compat_msghdr+0x108/0x2b0 [ 2178.152276][T15678] do_recvmmsg+0xdaf/0x2300 [ 2178.152276][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2178.152276][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2178.152276][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2178.152276][T15678] __do_fast_syscall_32+0x102/0x160 [ 2178.152276][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2178.152276][T15678] do_SYSENTER_32+0x73/0x90 [ 2178.152276][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2178.152276][T15678] [ 2178.152276][T15678] Uninit was stored to memory at: [ 2178.152276][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2178.152276][T15678] __msan_chain_origin+0x57/0xa0 [ 2178.152276][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2178.152276][T15678] get_compat_msghdr+0x108/0x2b0 [ 2178.152276][T15678] do_recvmmsg+0xdaf/0x2300 [ 2178.152276][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2178.152276][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2178.152276][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2178.152276][T15678] __do_fast_syscall_32+0x102/0x160 [ 2178.152276][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2178.152276][T15678] do_SYSENTER_32+0x73/0x90 [ 2178.152276][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2178.152276][T15678] [ 2178.152276][T15678] Uninit was stored to memory at: [ 2178.152276][T15678] kmsan_internal_chain_origin+0xad/0x130 [ 2178.152276][T15678] __msan_chain_origin+0x57/0xa0 [ 2178.152276][T15678] __get_compat_msghdr+0x6db/0x9d0 [ 2178.152276][T15678] get_compat_msghdr+0x108/0x2b0 [ 2178.152276][T15678] do_recvmmsg+0xdaf/0x2300 [ 2178.152276][T15678] __sys_recvmmsg+0x340/0x5f0 [ 2178.152276][T15678] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2178.152276][T15678] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2178.152276][T15678] __do_fast_syscall_32+0x102/0x160 [ 2178.152276][T15678] do_fast_syscall_32+0x6a/0xc0 [ 2178.152276][T15678] do_SYSENTER_32+0x73/0x90 [ 2178.152276][T15678] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2178.152276][T15678] [ 2178.152276][T15678] Local variable ----msg_sys@do_recvmmsg created at: [ 2178.152276][T15678] do_recvmmsg+0xbc/0x2300 [ 2178.152276][T15678] do_recvmmsg+0xbc/0x2300 [ 2179.035727][T15690] not chained 1560000 origins [ 2179.040431][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2179.041510][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.041510][T15690] Call Trace: [ 2179.041510][T15690] dump_stack+0x21c/0x280 [ 2179.041510][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2179.041510][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2179.041510][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2179.041510][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2179.041510][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2179.041510][T15690] ? release_sock+0x26a/0x2d0 [ 2179.096011][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2179.096011][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2179.096011][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2179.096011][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2179.096011][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2179.096011][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2179.096011][T15690] __msan_chain_origin+0x57/0xa0 [ 2179.096011][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2179.096011][T15690] get_compat_msghdr+0x108/0x2b0 [ 2179.096011][T15690] do_recvmmsg+0xdaf/0x2300 [ 2179.096011][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2179.152348][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2179.152348][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2179.152348][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2179.152348][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2179.152348][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2179.152348][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2179.152348][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2179.152348][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2179.152348][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2179.152348][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2179.152348][T15690] __do_fast_syscall_32+0x102/0x160 [ 2179.152348][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2179.152348][T15690] do_SYSENTER_32+0x73/0x90 [ 2179.152348][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2179.152348][T15690] RIP: 0023:0xf7f1a549 [ 2179.152348][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2179.152348][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2179.152348][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2179.152348][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2179.152348][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2179.152348][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2179.152348][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2179.152348][T15690] Uninit was stored to memory at: [ 2179.152348][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2179.310574][T15690] __msan_chain_origin+0x57/0xa0 [ 2179.310574][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2179.310574][T15690] get_compat_msghdr+0x108/0x2b0 [ 2179.310574][T15690] do_recvmmsg+0xdaf/0x2300 [ 2179.310574][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2179.310574][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2179.310574][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2179.310574][T15690] __do_fast_syscall_32+0x102/0x160 [ 2179.310574][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2179.310574][T15690] do_SYSENTER_32+0x73/0x90 [ 2179.310574][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2179.310574][T15690] [ 2179.310574][T15690] Uninit was stored to memory at: [ 2179.310574][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2179.310574][T15690] __msan_chain_origin+0x57/0xa0 [ 2179.310574][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2179.310574][T15690] get_compat_msghdr+0x108/0x2b0 [ 2179.310574][T15690] do_recvmmsg+0xdaf/0x2300 [ 2179.310574][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2179.310574][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2179.310574][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2179.310574][T15690] __do_fast_syscall_32+0x102/0x160 [ 2179.310574][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2179.310574][T15690] do_SYSENTER_32+0x73/0x90 [ 2179.310574][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2179.310574][T15690] [ 2179.310574][T15690] Uninit was stored to memory at: [ 2179.310574][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2179.310574][T15690] __msan_chain_origin+0x57/0xa0 [ 2179.310574][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2179.310574][T15690] get_compat_msghdr+0x108/0x2b0 [ 2179.310574][T15690] do_recvmmsg+0xdaf/0x2300 [ 2179.310574][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2179.310574][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2179.310574][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2179.310574][T15690] __do_fast_syscall_32+0x102/0x160 [ 2179.310574][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2179.310574][T15690] do_SYSENTER_32+0x73/0x90 [ 2179.310574][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2179.310574][T15690] [ 2179.310574][T15690] Uninit was stored to memory at: [ 2179.310574][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2179.310574][T15690] __msan_chain_origin+0x57/0xa0 [ 2179.310574][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2179.310574][T15690] get_compat_msghdr+0x108/0x2b0 [ 2179.310574][T15690] do_recvmmsg+0xdaf/0x2300 [ 2179.310574][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2179.310574][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2179.310574][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2179.310574][T15690] __do_fast_syscall_32+0x102/0x160 [ 2179.310574][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2179.310574][T15690] do_SYSENTER_32+0x73/0x90 [ 2179.310574][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2179.310574][T15690] [ 2179.310574][T15690] Uninit was stored to memory at: [ 2179.310574][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2179.310574][T15690] __msan_chain_origin+0x57/0xa0 [ 2179.310574][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2179.310574][T15690] get_compat_msghdr+0x108/0x2b0 [ 2179.310574][T15690] do_recvmmsg+0xdaf/0x2300 [ 2179.310574][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2179.310574][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2179.310574][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2179.310574][T15690] __do_fast_syscall_32+0x102/0x160 [ 2179.310574][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2179.310574][T15690] do_SYSENTER_32+0x73/0x90 [ 2179.310574][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2179.310574][T15690] [ 2179.310574][T15690] Uninit was stored to memory at: [ 2179.310574][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2179.310574][T15690] __msan_chain_origin+0x57/0xa0 [ 2179.310574][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2179.310574][T15690] get_compat_msghdr+0x108/0x2b0 [ 2179.310574][T15690] do_recvmmsg+0xdaf/0x2300 [ 2179.310574][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2179.310574][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2179.310574][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2179.310574][T15690] __do_fast_syscall_32+0x102/0x160 [ 2179.310574][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2179.310574][T15690] do_SYSENTER_32+0x73/0x90 [ 2179.310574][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2179.310574][T15690] [ 2179.310574][T15690] Uninit was stored to memory at: [ 2179.310574][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2179.310574][T15690] __msan_chain_origin+0x57/0xa0 [ 2179.310574][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2179.310574][T15690] get_compat_msghdr+0x108/0x2b0 [ 2179.310574][T15690] do_recvmmsg+0xdaf/0x2300 [ 2179.310574][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2179.310574][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2179.310574][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2179.310574][T15690] __do_fast_syscall_32+0x102/0x160 [ 2179.310574][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2179.310574][T15690] do_SYSENTER_32+0x73/0x90 [ 2179.310574][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2179.310574][T15690] [ 2179.310574][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2179.310574][T15690] do_recvmmsg+0xbc/0x2300 [ 2179.310574][T15690] do_recvmmsg+0xbc/0x2300 [ 2179.973567][T15690] not chained 1570000 origins [ 2179.978267][T15690] CPU: 1 PID: 15690 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 2179.981512][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.981512][T15690] Call Trace: [ 2179.981512][T15690] dump_stack+0x21c/0x280 [ 2179.981512][T15690] kmsan_internal_chain_origin+0x6f/0x130 [ 2179.981512][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2179.981512][T15690] ? __msan_instrument_asm_store+0x25/0x130 [ 2180.017364][T15690] ? __local_bh_enable_ip+0x97/0x1d0 [ 2180.017364][T15690] ? _raw_spin_unlock_bh+0x4b/0x60 [ 2180.017364][T15690] ? release_sock+0x26a/0x2d0 [ 2180.017364][T15690] ? skcipher_recvmsg+0x1a70/0x1ab0 [ 2180.017364][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2180.017364][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2180.017364][T15690] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 2180.017364][T15690] ? _copy_from_user+0x1cd/0x2d0 [ 2180.017364][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2180.017364][T15690] __msan_chain_origin+0x57/0xa0 [ 2180.017364][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2180.017364][T15690] get_compat_msghdr+0x108/0x2b0 [ 2180.017364][T15690] do_recvmmsg+0xdaf/0x2300 [ 2180.017364][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2180.017364][T15690] ? kmsan_internal_check_memory+0xb1/0x520 [ 2180.017364][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2180.017364][T15690] ? kmsan_internal_set_origin+0x85/0xc0 [ 2180.017364][T15690] ? __msan_poison_alloca+0xe9/0x110 [ 2180.017364][T15690] ? __sys_recvmmsg+0xb5/0x5f0 [ 2180.017364][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2180.017364][T15690] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 2180.017364][T15690] ? kmsan_get_metadata+0x116/0x180 [ 2180.017364][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2180.017364][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2180.017364][T15690] __do_fast_syscall_32+0x102/0x160 [ 2180.017364][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2180.017364][T15690] do_SYSENTER_32+0x73/0x90 [ 2180.017364][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.017364][T15690] RIP: 0023:0xf7f1a549 [ 2180.017364][T15690] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2180.193380][T15690] RSP: 002b:00000000f54b10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2180.194742][T15690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200005c0 [ 2180.194742][T15690] RDX: 00000000ffffff62 RSI: 0000000000000000 RDI: 0000000000000000 [ 2180.194742][T15690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2180.194742][T15690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2180.194742][T15690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2180.194742][T15690] Uninit was stored to memory at: [ 2180.194742][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2180.194742][T15690] __msan_chain_origin+0x57/0xa0 [ 2180.194742][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2180.194742][T15690] get_compat_msghdr+0x108/0x2b0 [ 2180.194742][T15690] do_recvmmsg+0xdaf/0x2300 [ 2180.194742][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2180.194742][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2180.194742][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2180.194742][T15690] __do_fast_syscall_32+0x102/0x160 [ 2180.194742][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2180.194742][T15690] do_SYSENTER_32+0x73/0x90 [ 2180.194742][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.194742][T15690] [ 2180.194742][T15690] Uninit was stored to memory at: [ 2180.194742][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2180.194742][T15690] __msan_chain_origin+0x57/0xa0 [ 2180.194742][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2180.194742][T15690] get_compat_msghdr+0x108/0x2b0 [ 2180.194742][T15690] do_recvmmsg+0xdaf/0x2300 [ 2180.194742][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2180.194742][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2180.194742][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2180.194742][T15690] __do_fast_syscall_32+0x102/0x160 [ 2180.194742][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2180.194742][T15690] do_SYSENTER_32+0x73/0x90 [ 2180.194742][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.194742][T15690] [ 2180.194742][T15690] Uninit was stored to memory at: [ 2180.194742][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2180.194742][T15690] __msan_chain_origin+0x57/0xa0 [ 2180.194742][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2180.194742][T15690] get_compat_msghdr+0x108/0x2b0 [ 2180.194742][T15690] do_recvmmsg+0xdaf/0x2300 [ 2180.194742][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2180.194742][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2180.194742][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2180.194742][T15690] __do_fast_syscall_32+0x102/0x160 [ 2180.194742][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2180.194742][T15690] do_SYSENTER_32+0x73/0x90 [ 2180.194742][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.194742][T15690] [ 2180.194742][T15690] Uninit was stored to memory at: [ 2180.194742][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2180.194742][T15690] __msan_chain_origin+0x57/0xa0 [ 2180.194742][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2180.194742][T15690] get_compat_msghdr+0x108/0x2b0 [ 2180.194742][T15690] do_recvmmsg+0xdaf/0x2300 [ 2180.194742][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2180.194742][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2180.194742][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2180.194742][T15690] __do_fast_syscall_32+0x102/0x160 [ 2180.194742][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2180.194742][T15690] do_SYSENTER_32+0x73/0x90 [ 2180.194742][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.194742][T15690] [ 2180.194742][T15690] Uninit was stored to memory at: [ 2180.194742][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2180.194742][T15690] __msan_chain_origin+0x57/0xa0 [ 2180.194742][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2180.194742][T15690] get_compat_msghdr+0x108/0x2b0 [ 2180.194742][T15690] do_recvmmsg+0xdaf/0x2300 [ 2180.194742][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2180.194742][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2180.194742][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2180.194742][T15690] __do_fast_syscall_32+0x102/0x160 [ 2180.194742][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2180.194742][T15690] do_SYSENTER_32+0x73/0x90 [ 2180.194742][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.194742][T15690] [ 2180.194742][T15690] Uninit was stored to memory at: [ 2180.194742][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2180.194742][T15690] __msan_chain_origin+0x57/0xa0 [ 2180.194742][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2180.194742][T15690] get_compat_msghdr+0x108/0x2b0 [ 2180.194742][T15690] do_recvmmsg+0xdaf/0x2300 [ 2180.194742][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2180.194742][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2180.194742][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2180.194742][T15690] __do_fast_syscall_32+0x102/0x160 [ 2180.194742][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2180.194742][T15690] do_SYSENTER_32+0x73/0x90 [ 2180.194742][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.194742][T15690] [ 2180.194742][T15690] Uninit was stored to memory at: [ 2180.194742][T15690] kmsan_internal_chain_origin+0xad/0x130 [ 2180.194742][T15690] __msan_chain_origin+0x57/0xa0 [ 2180.194742][T15690] __get_compat_msghdr+0x6db/0x9d0 [ 2180.194742][T15690] get_compat_msghdr+0x108/0x2b0 [ 2180.194742][T15690] do_recvmmsg+0xdaf/0x2300 [ 2180.194742][T15690] __sys_recvmmsg+0x340/0x5f0 [ 2180.194742][T15690] __se_compat_sys_recvmmsg_time32+0xfb/0x120 [ 2180.194742][T15690] __ia32_compat_sys_recvmmsg_time32+0x62/0x80 [ 2180.194742][T15690] __do_fast_syscall_32+0x102/0x160 [ 2180.194742][T15690] do_fast_syscall_32+0x6a/0xc0 [ 2180.194742][T15690] do_SYSENTER_32+0x73/0x90 [ 2180.194742][T15690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2180.194742][T15690] [ 2180.194742][T15690] Local variable ----msg_sys@do_recvmmsg created at: [ 2180.194742][T15690] do_recvmmsg+0xbc/0x2300 [ 2180.194742][T15690] do_recvmmsg+0xbc/0x2300 02:27:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) 02:27:49 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) getresuid(&(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)) 02:27:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000007a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x40086602, 0x0) 02:27:49 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:27:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) [ 2181.470366][ T9660] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 02:27:49 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002900)='/dev/vcsu\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='rootmode', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) [ 2182.109196][ T9660] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 02:27:50 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @bcast, 0xee01}) 02:27:50 executing program 3: syz_init_net_socket$ax25(0x3, 0xa40db076824dffb8, 0x0) 02:27:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000010c0)="8688ad77cd7c9775571fe85c14e488a0a9984ccf4628de8c3b41df8a4922e39b1683c2e22c3a1091e819e3ebadebc5017fc3fcc3b6d1d0886663b16313e5f24e1088cc589567caa3bd573b9b47615a053fdaecc69de42757a966b3feee1633fc74977431a317cbf0c2228e199162407ff4a56ae2cb566316432ebb3c2fd9bf8e4e800b5c8d0c", 0x86}, {&(0x7f0000001180)="e5c4263da6e68ed3f36022c766b920501f5a42e13a2b0c8765776c18203796ea0db2b017004181d2ce3f08ed3dae252060869d343c4f88cd997ae36a3906e296477b87352481b898b13ab2819c73730b975a3bc6ae17a5094e1e6c58dc6da36d2c7fd2c09915a1bfbe363f8d2acf9a864e8e0d5584149981afe9e31e7d384412ec199c42b452fcb7767ac86df852ab97466e7cafab21cdedd08ecbd4b4f7043e27989d37b060539676f1bb8989ab092f9234af190f5a052cc4", 0xb9}, {&(0x7f0000001240)="65bdb16d5f85743f730fd400ed1c2f0c09337b83161161eff8cd7e84b2c8eb5f14a29e9b755b5228e344efefbe5a73561dd658cbac2d2516ea489cc08b419c6cae24007b9cc01e2c04ebff40b5b80b03487d83de0f61d21cc0116f85910490c0de75756f62a3b847d2", 0x69}, {&(0x7f00000012c0)="9c977a067daebd782ef2f6cd6b1e3d0aaffe8df7f6741a42249dc674783d3f941657925aa5b8b1298dcccfb4d583be5d1895019dc320880b1a84d4d157f4b0a2477c426279fe552945261d7e892efedf4fffcb1e6af5683bd3c9582e06dc92e967be7e614491", 0x66}, {&(0x7f00000013c0)="143ea1dde07bffa4750c7e5a73b2a1", 0xf}, {&(0x7f0000001400)="afbe72af97da11dcecc75fbd4ef76e3c378a632d00d4041f52fc880c0d4e73ceeb3ada19aaa83476c551497158a274e8361edb236192ce7bcf247bdacd3a91d26e71df064883590deb12e37591cae35b0cb749fe61cc9f33078bbfa072e49f37f57197eeb40a", 0x66}, {&(0x7f0000001480)="56b2bd3a5d6857e370a7665d650ffc647b1519b395639a10e962dcf63e1dc00b00cd1e57ec08cd9015c8c271fd957d8eaa2c644b28b7672628d09bded747aa277eabd5412e17dfa43f4c64bfb09a6d97cab0a22c8d3f3b3a386f4e2475536649d10ddaf9", 0x64}, {&(0x7f0000001500)="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", 0xd1a}], 0x8}, 0x0) 02:27:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) [ 2183.001002][ T9660] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 02:27:51 executing program 3: bpf$PROG_LOAD(0x12, 0x0, 0x0) 02:27:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, r1, 0x409, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) [ 2183.096048][T15977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2183.157969][T15986] kvm_hv_set_msr: 191 callbacks suppressed [ 2183.158039][T15986] kvm [15962]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000007 data 0x3d [ 2183.294992][T15986] kvm [15962]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xf2 [ 2183.365417][T15986] kvm [15962]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xff [ 2183.454509][T15986] kvm [15962]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xfc [ 2183.531136][T15986] kvm [15962]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xdd [ 2183.671464][ T9660] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.050421][ T9660] device hsr_slave_0 left promiscuous mode [ 2188.063661][ T9660] device hsr_slave_1 left promiscuous mode [ 2188.076896][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2188.084794][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2188.141305][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2188.149133][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2188.219544][ T9660] device bridge_slave_1 left promiscuous mode [ 2188.226482][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 2188.246419][ T9660] device bridge_slave_0 left promiscuous mode [ 2188.253557][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 2188.276207][ T9660] device veth1_macvtap left promiscuous mode [ 2188.282587][ T9660] device veth0_macvtap left promiscuous mode [ 2188.288729][ T9660] device veth1_vlan left promiscuous mode [ 2188.294798][ T9660] device veth0_vlan left promiscuous mode [ 2190.580817][ T9660] team0 (unregistering): Port device team_slave_1 removed [ 2190.605104][ T9660] team0 (unregistering): Port device team_slave_0 removed [ 2190.620709][ T9660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2190.643054][ T9660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2190.720799][ T9660] bond0 (unregistering): Released all slaves [ 2190.830433][T16084] IPVS: ftp: loaded support on port[0] = 21 [ 2191.619394][T16084] chnl_net:caif_netlink_parms(): no params data found [ 2191.682174][T24120] Bluetooth: hci5: command 0x0409 tx timeout [ 2192.181477][T16084] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.189498][T16084] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.199384][T16084] device bridge_slave_0 entered promiscuous mode [ 2192.217317][T16084] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.225509][T16084] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.235414][T16084] device bridge_slave_1 entered promiscuous mode [ 2192.295446][T16084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2192.315326][T16084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2192.370084][T16084] team0: Port device team_slave_0 added [ 2192.385196][T16084] team0: Port device team_slave_1 added [ 2192.457338][T16084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2192.464975][T16084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2192.491198][T16084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2192.507666][T16084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2192.516080][T16084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2192.542999][T16084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2192.593388][T16084] device hsr_slave_0 entered promiscuous mode [ 2192.601013][T16084] device hsr_slave_1 entered promiscuous mode [ 2192.609530][T16084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2192.619005][T16084] Cannot create hsr debugfs directory [ 2192.917283][T16084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2192.945220][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2192.954605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2192.972723][T16084] 8021q: adding VLAN 0 to HW filter on device team0 [ 2192.987615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2192.998191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2193.008073][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.015544][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.030579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2193.046242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2193.057477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2193.068284][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.075797][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2193.102104][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2193.113650][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2193.141015][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2193.152016][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2193.164757][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2193.184281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2193.194898][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2193.218840][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2193.231231][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2193.258721][T16084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2193.270919][T16084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2193.281103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2193.291188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2193.328003][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2193.338282][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2193.365832][T16084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2193.466570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2193.477719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2193.519291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2193.529551][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2193.550735][T16084] device veth0_vlan entered promiscuous mode [ 2193.558752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2193.568381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2193.590544][T16084] device veth1_vlan entered promiscuous mode [ 2193.650430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2193.660256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2193.670156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2193.680405][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2193.703204][T16084] device veth0_macvtap entered promiscuous mode [ 2193.722115][T16084] device veth1_macvtap entered promiscuous mode [ 2193.765683][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 2193.802077][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2193.812753][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.822927][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2193.835027][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.847575][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2193.858797][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.868891][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2193.879562][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.889690][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2193.900354][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.914190][T16084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2193.926800][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2193.936617][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2193.947281][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2193.957275][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2193.973978][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2193.984709][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.994861][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2194.006189][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2194.016289][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2194.026995][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2194.037263][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2194.047910][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2194.058083][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2194.068781][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2194.081888][T16084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2194.089573][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2194.099671][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2194.402996][T12719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.410915][T12719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.428012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2194.503301][T15862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.511217][T15862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.519364][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:28:02 executing program 5: clock_gettime(0x64743779ded4de60, 0x0) 02:28:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:02 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 02:28:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890c, 0x0) 02:28:02 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 2194.993275][T16336] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2195.038332][T16340] kvm [16330]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000007 data 0x3d [ 2195.112859][T16340] kvm [16330]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xf2 02:28:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x32}}, 0x0) [ 2195.214250][T16340] kvm [16330]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xff 02:28:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000010c0)="8688ad77cd7c9775571fe85c14e488a0a9984ccf4628de8c3b41df8a4922e39b1683c2e22c3a1091e819e3ebadebc5017fc3fcc3b6d1d0886663b16313e5f24e1088cc589567caa3bd573b9b47615a053fdaecc69de42757a966b3feee1633fc74977431a317cbf0c2228e199162407ff4a56ae2cb566316432ebb3c2fd9bf8e4e800b5c8d0c", 0x86}, {&(0x7f0000001180)="e5c4263da6e68ed3f36022c766b920501f5a42e13a2b0c8765776c18203796ea0db2b017004181d2ce3f08ed3dae252060869d343c4f88cd997ae36a3906e296477b87352481b898b13ab2819c73730b975a3bc6ae17a5094e1e6c58dc6da36d2c7fd2c09915a1bfbe363f8d2acf9a864e8e0d5584149981afe9e31e7d384412ec199c42b452fcb7767ac86df852ab97466e7cafab21cdedd08ecbd4b4f7043e27989d37b060539676f1bb8989ab092f9234af190f5a052cc4", 0xb9}, {&(0x7f0000001240)="65bdb16d5f85743f730fd400ed1c2f0c09337b83161161eff8cd7e84b2c8eb5f14a29e9b755b5228e344efefbe5a73561dd658cbac2d2516ea489cc08b419c6cae24007b9cc01e2c04ebff40b5b80b03487d83de0f61d21cc0116f85910490c0de75756f62a3b847d2", 0x69}, {&(0x7f00000012c0)="9c977a067daebd782ef2f6cd6b1e3d0aaffe8df7f6741a42249dc674783d3f941657925aa5b8b1298dcccfb4d583be5d1895019dc320880b1a84d4d157f4b0a2477c426279fe552945261d7e892efedf4fffcb1e6af5683bd3c9582e06dc92e967be7e614491", 0x66}, {&(0x7f0000001340)="a122296fe6fa9b8fad7b6c3033b50a83eaeb55f1c16184c03463cd96ca43ce51b5ba51a7114fa4b995a03ec30bea8d8bab9150e7df68bb9f6292e7cdaf1b88b5f84d26fffa955cad64e9aca37e8a9a6b73254678987717", 0x57}, {&(0x7f00000013c0)="143ea1dde07bffa4750c7e5a73b2a1", 0xf}, {&(0x7f0000001400)="afbe72af97da11dcecc75fbd4ef76e3c378a632d00d4041f52fc880c0d4e73ceeb3ada19aaa83476c551497158a274e8361edb236192ce7bcf247bdacd3a91d26e71df064883590deb12e37591cae35b0cb749fe61cc9f33078bbfa072e49f37f57197eeb40a", 0x66}, {&(0x7f0000001480)="56b2bd3a5d6857e370a7665d650ffc647b1519b395639a10e962dcf63e1dc00b00cd1e57ec08cd9015c8c271fd957d8eaa2c644b28b7672628d09bded747aa277eabd5412e17dfa43f4c64bfb09a6d97cab0a22c8d3f3b3a386f4e2475536649d10ddaf9", 0x64}, {&(0x7f0000001500)="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", 0xb83}], 0x9}, 0x0) [ 2195.310776][T16340] kvm [16330]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xfc 02:28:03 executing program 3: bpf$PROG_LOAD(0xd, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2195.424770][T16340] kvm [16330]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xdd [ 2195.525480][T16340] kvm [16330]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xde [ 2195.594712][T16340] kvm [16330]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xfb 02:28:03 executing program 5: getuid() syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') [ 2195.855617][ T9188] Bluetooth: hci5: command 0x040f tx timeout 02:28:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:03 executing program 4: socket(0x23, 0x0, 0x3) 02:28:04 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x19, 0x0, 0x0) 02:28:04 executing program 1: pipe(&(0x7f00000073c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r0, 0x0, 0x0) 02:28:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2196.694825][T16487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2196.735037][T16494] kvm [16475]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000007 data 0x3d [ 2196.772762][T16494] kvm [16475]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xf2 02:28:04 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 02:28:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000004c0)=0x3, 0x4) [ 2196.821393][T16494] kvm [16475]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xff 02:28:05 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, 0x0, 0x0) 02:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x2, &(0x7f0000000280)={'team0\x00'}) 02:28:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000001180)="e5", 0x1}, {&(0x7f0000001240)="65bdb16d5f85743f730fd400ed1c2f0c09337b83161161eff8cd7e84b2c8eb5f14a29e9b755b5228e344efefbe5a73561dd658cbac2d2516ea489cc08b419c6cae24007b9cc01e2c04ebff40b5b80b03487d83de0f61d21cc0116f85910490c0de75756f62a3b847d2", 0x69}, {&(0x7f00000012c0)="9c977a067daebd782ef2f6cd6b1e3d0aaffe8df7f6741a42249dc674783d3f941657925aa5b8b1298dcccfb4d583be5d1895019dc320880b1a84d4d157f4b0a2477c426279fe552945261d7e892efedf4fffcb1e6af5683bd3c9582e06dc92e967be7e614491", 0x66}, {&(0x7f0000001340)="a122296fe6fa9b8fad7b6c3033b50a83eaeb55f1c16184c03463cd96ca43ce51b5ba51a7114fa4b995a03ec30bea8d8bab9150e7df68bb9f6292e7cdaf1b88b5f84d26fffa955cad64e9aca37e8a9a6b73254678987717", 0x57}, {&(0x7f00000013c0)="143ea1dde07bffa4750c7e5a73b2a1", 0xf}, {&(0x7f0000001400)="afbe72af97da11dcecc75fbd4ef76e3c378a632d00d4041f52fc880c0d4e73ceeb3ada19aaa83476c551497158a274e8361edb236192ce7bcf247bdacd3a91d26e71df064883590deb12e37591cae35b0cb749fe61cc9f33078bbfa072e49f37f57197eeb40a", 0x66}, {&(0x7f0000001480)="56b2bd3a5d6857e370a7665d650ffc647b1519b395639a10e962dcf63e1dc00b00cd1e57ec08cd9015c8c271fd957d8eaa2c644b28b7672628d09bded747aa277eabd5412e17dfa43f4c64bfb09a6d97cab0a22c8d3f3b3a386f4e2475536649d10ddaf9", 0x64}, {&(0x7f0000001500)="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", 0xe02}], 0x9}, 0x0) 02:28:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000004c0), 0x4) 02:28:05 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x1e, 0x0, 0x0) [ 2197.738225][T16540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) 02:28:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x3, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) [ 2197.923977][ T9188] Bluetooth: hci5: command 0x0419 tx timeout 02:28:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x18, 0x0, &(0x7f00000001c0)) [ 2198.832064][T16645] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:07 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 02:28:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x40) 02:28:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 02:28:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xa5, &(0x7f00000000c0)=""/165, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x78) 02:28:07 executing program 5: bpf$PROG_LOAD(0x23, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000001180)="e5", 0x1}, {&(0x7f0000001240)='e', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 02:28:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8971, &(0x7f0000000280)={'team0\x00'}) 02:28:07 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x38, 0x0) [ 2199.856399][T16686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2200.053605][T16703] kvm_hv_set_msr: 544 callbacks suppressed [ 2200.053673][T16703] kvm [16677]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xff 02:28:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000240)=0x2, 0x4) [ 2200.241200][T16703] kvm [16677]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0x76 [ 2200.347800][T16703] kvm [16677]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xfe [ 2200.439738][T16703] kvm [16677]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000007 data 0xfc 02:28:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x60ad, 0x4) 02:28:08 executing program 4: bpf$PROG_LOAD(0x18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:09 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 02:28:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8932, &(0x7f0000000280)={'team0\x00'}) 02:28:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:09 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@framed={{}, [@alu={0x4}, @jmp, @call]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) 02:28:09 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000700), &(0x7f0000000740)=0x4) [ 2201.679549][T16840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2201.760494][T16847] kvm [16837]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:09 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 02:28:09 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8916, &(0x7f0000000280)={'team0\x00'}) 02:28:09 executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0x14, &(0x7f0000000240)={0x7fffffff}, 0x8) [ 2201.858305][T16847] kvm [16837]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000024 data 0xf1f 02:28:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5421, &(0x7f0000000280)={'team0\x00'}) 02:28:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) [ 2203.152539][T16963] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2203.180422][T16963] kvm [16953]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 2203.193190][T16963] kvm [16953]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000024 data 0xf1f 02:28:11 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:11 executing program 1: socket$inet(0x2, 0x0, 0x401) 02:28:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@loopback}, 0x14) 02:28:11 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 02:28:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) [ 2203.589777][T17001] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 02:28:11 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 02:28:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x20) 02:28:11 executing program 5: socket(0x2, 0xa, 0x5) 02:28:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) [ 2204.028921][T17014] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2204.105497][T17033] kvm [17008]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 2204.180945][T17033] kvm [17008]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000024 data 0xf1f 02:28:12 executing program 5: socket(0x22, 0x0, 0x1ff) 02:28:12 executing program 3: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x5}, &(0x7f0000000100), 0x0) 02:28:13 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:13 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) accept4$unix(r0, 0x0, 0x0, 0x40800) 02:28:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8982, &(0x7f0000000280)={'team0\x00'}) 02:28:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xd, 0x0, &(0x7f00000001c0)) 02:28:13 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffff33, 0x1401, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0xffffffffffffffe3}}, 0x0) [ 2205.808053][T17166] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) [ 2205.871926][T17170] kvm [17161]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x6 02:28:13 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x22, 0x0, 0x0) [ 2205.946156][T17170] kvm [17161]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000003b data 0x25 [ 2206.012652][T17170] kvm [17161]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000051 data 0xa8 02:28:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x2e}, 0x0) 02:28:14 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x1800) [ 2206.058878][T17170] kvm [17161]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000004 data 0x50 [ 2206.126717][T17170] kvm [17161]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000006e data 0x9a [ 2206.222445][T17170] kvm [17161]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000024 data 0xaf [ 2206.310197][T17170] kvm [17161]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001e data 0xec [ 2206.414543][T17170] kvm [17161]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000085 data 0xc2 [ 2206.475505][T17170] kvm [17161]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000004d data 0x9e 02:28:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x891e, &(0x7f0000000280)={'team0\x00'}) 02:28:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, &(0x7f00000001c0)) 02:28:15 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:15 executing program 3: pselect6(0xfffffffffffffcf1, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 02:28:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000004c0), 0x4) 02:28:15 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}], 0x10}, 0x0) [ 2207.867296][T17324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:15 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') 02:28:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, 0x0, &(0x7f00000001c0)) [ 2207.917483][T17327] kvm [17319]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0x6 02:28:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c"], 0x70}, 0x0) 02:28:16 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x1b, 0x0, 0x0) 02:28:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:16 executing program 3: pipe(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) [ 2209.020028][T17418] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:17 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8901, &(0x7f0000000280)={'team0\x00'}) 02:28:17 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000300)) 02:28:17 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 02:28:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x16, 0x0, &(0x7f00000001c0)) 02:28:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) [ 2209.875958][T17489] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3ff}]}, 0x38}}, 0x0) 02:28:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000010c0)="8688ad77cd7c9775571fe85c14e488a0a9984ccf4628de8c3b41df8a4922e39b1683c2e22c3a1091e819e3ebadebc5017fc3fcc3b6d1d0886663b16313e5f24e1088cc589567caa3bd573b9b47615a053fdaecc69de42757a966b3feee1633fc74977431a317cbf0c2228e199162407ff4a56ae2cb566316432ebb3c2fd9bf8e4e800b5c8d0c", 0x86}, {&(0x7f0000001180)="e5c4263da6e68ed3f36022c766b920501f5a42e13a2b0c8765776c18203796ea0db2b017004181d2ce3f08ed3dae252060869d343c4f88cd997ae36a3906e296477b87352481b898b13ab2819c73730b975a3bc6ae17a5094e1e6c58dc6da36d2c7fd2c09915a1bfbe363f8d2acf9a864e8e0d5584149981afe9e31e7d384412ec199c42b452fcb7767ac86df852ab97466e7cafab21cdedd08ecbd4b4f7043e27989d37b060539676f1bb8989ab092f9234af190f5a052cc4", 0xb9}, {&(0x7f0000001240)="65bdb16d5f85743f730fd400ed1c2f0c09337b83161161eff8cd7e84b2c8eb5f14a29e9b755b5228e344efefbe5a73561dd658cbac2d2516ea489cc08b419c6cae24007b9cc01e2c04ebff40b5b80b03487d83de0f61d21cc0116f85910490c0de75756f62a3", 0x66}, {&(0x7f00000012c0)="9c977a067daebd782ef2f6cd6b1e3d0aaffe8df7f6741a42249dc674783d3f941657925aa5b8b1298dcccfb4d583be5d1895019dc320880b1a84d4d157f4b0a2477c426279fe552945261d7e892efedf4fffcb1e6af5683bd3c9582e06dc92e967be7e614491", 0x66}, {&(0x7f0000001340)="a122296fe6fa9b8fad7b6c3033b50a83eaeb55f1c16184c03463cd96ca43ce51b5ba51a7114fa4b995a03ec30bea8d8bab9150e7df68bb9f6292e7cdaf1b88b5f84d26fffa955cad64e9aca37e8a9a6b73254678987717", 0x57}, {&(0x7f00000013c0)="143ea1dde07bffa4750c7e5a73b2a1", 0xf}, {&(0x7f0000001400)="afbe72af97da11dcecc75fbd4ef76e3c378a632d00d4041f52fc880c0d4e73ceeb3ada19aaa83476c551497158a274e8361edb236192ce7bcf247bdacd3a91d26e71df064883590deb12e37591cae35b0cb749fe61cc9f33078bbfa072e49f37f57197eeb40a", 0x66}, {&(0x7f0000001480)="56b2bd3a5d6857e370a7665d650ffc647b1519b395639a10e962dcf63e1dc00b00cd1e57ec08cd9015c8c271fd957d8eaa2c644b28b7672628d09bded747aa277eabd5412e17dfa43f4c64bfb09a6d97cab0a22c8d3f3b3a386f4e2475536649d10ddaf9", 0x64}, {&(0x7f0000001500)="5e92381b99001565816117a48280101f12c108a1523a0179fbb10bd676d1e2fe4f16d108e822d168458547a59b56c40b42df0578183654d56015d1646e2a105870de51a65eb1ea6ce1188c9332b85c2ceda5eae9a23f4713f353e9a43c1957a6496f51eb7a9aa101f54903125db7b61687d29436768a76126abee2d64d2358672b391d0d2c5e6ea1aaab9e2412fd79085b88530a1c8dd08b33474178ac762c1cbad381f8c0d0ca8709e9e7b64dfa3cddcc53d34b1ea438bee0ca17ad93b9121258881754d2c4a93cfd16afcbac4fe27ce8d23a6688e576d2bc23c083f6a5ce701950b59d6a93adca69849641d7def13867af59d13990088e1e39112ce58f063e90637d956ba2ff816429200ca6188dc07699660174c706f2f86bc8d522e4c5a1a83118aac47ba9e8749640b851e20216b45a9abbf33e1492c9c9467b0969ec8e4e1130ba3269de662504cf6605acee1b42fd6afd38af98c9d49cb8ee2619850b47765ae237c83f42a94f004d8de9bdd631e3dac511c01239780c19842171f657f3674d93daeb96f56cde71845cfb8a08269de9b5e83d3b5a680968ed1b8039b192beb653de20ac2287bb544ec62044185795ed2ca1f54690d8525b4058c1e373fca87634ddec1f07e35ca5e4e7258c8083388e60d72cd2944ee18b409690aaef3431d19b3228197e5d7bc4336795ddc4e1b03e69a7e02d11201b42d19e3f35d5a80f15b737488d6c093353c4c148291627f34074d388630b82314878f9aee51ed63f5cd7ff0945959c24cf13feda4cebc979ccf7810b26d166206b82e769c2a75500bf596c8dabab5c7a6c730949a526c6be5f553086cf283832dec889d0bb4cae7b1903fe4d151a2aec403a6f363898cd4f17ac1d38423af4b526771f70e70ced02ecc2e7e22858bfc0b2b5dbe57d3936f9df66ca2fc1f60a3d43e0af6c53fbe777444766d2aa1d73f49d9ba578ac27567da858932634a076705f91681ec78e87a88168c642f63cd9db65b8f70ed76a4590dfedbf53fe8ac6c632f308408cb7baa145babf45cd7c40ed059d3e0f980678873ced2902b34cc69ef471a994b2989863a9ff3a726737fa08d18fccdb1d02287c5b345b70076e3720e1e77ed45b829f3f4713387dc5602132fdf5c8db2bcef110a5e5bc76dc01b95da7c5b9cd4a663b7f17378a2ed58f55fd614360d9a22a56afd2f8ea741bcae56ea751020f87368a4453caf730083452583f85e0179031e6147c8dcb053f0d85f3c2631f34d8e1c9e6f9db28c720b6d1356d785922869b6788bde001fc74f222063cbb1fc874cc4a67b412cfa996e6fbd9a4488d9d8896f951757cf6ff9c7fb92be3c3b42b83f49db060df21d369ddef76beed7a26f5f871626d9229d97b6e48f360862aee66cbd19224bad855486b69384a8fee9348b254a3562ef8faa03685a9da211d77c12bc52edb1a0ed5253a081bedba91eead092e858f4af58002408956482a51af4e19ab9fb038207b77eacadd05c80c0b55deba2d9f1f3f0a111441ac73948573ca5f00c2acd80dd5f4397d7d900f5b96912b167ae9bf17b840f6aa98cf008296af4a3a6c66094177e125fe3933699a2c26ae29cbb927535b3b8b669ad13833c635677142eb7c97109adc325407c13d6b1fa15b96de7be74e9887d63db755e21cc9db9c26e22a6daca7d16c8e794505c4ef3b8aa9bce4999fd2ce18d9a12d1848e93711135573ca0b19c76bfa6652faecc35143b55d7d17630d5d9216edde5d6233e3fa5e25557452313b2ffba93c6ba7279cc4b1f8efea994c53a9ac18f9fc428f302a99ebbd01a217132a22447f99ca9e17a96d866f4142759bab67ac56d8587c34b2afee558cebbcdc1bee0e4038291a93aa8a8d6f8c1f063eb0fcd00d0999c2107f00e85e650d8751014749b1a31e7942e73cafd5dbc022bbd871ef3aa40e2f298ec07a23327eef3bfe7b289bdba099d8c695a1c17948e51945df20b13df5aec5ee70def2a418bb5cbd648f99135f9426771727a8f273125439da1ac08e87d15b2172cd69a9bdddee853880182f8446208a6f1fcc9e89778d3f14e07b548cfa797fde73b415a2d42427585e8144a979d04b8da0207809199fba2d5d8586d2ce8d373d918545381adf92008e4700e3fd9a6bb83e2652e94553416bb7c804df73710378c4c8988080472c4df4a59684d888819f15e2bc9d21d13e0ee6f8aa1dbf3cc8094ca742aa1f65126955267ccd50ee962042172f085a05cf7c75392e9ef5eb26ce4565c5d58a6f77fb8cbfa1524b17b4d62ee05905430cfbdb686728644a3e70c357bdaa01fb2ad6c62c802951175daf1d0a6fa434be799147a5794a2ab9447777cec13df133b0f64aa82dbc93d468f38d8f1efdb62cfd0930f8150ddebe94e823ef347ee7ad90d2cae976571fb3e8d60a31e521eab38786543902afdecf818df079604480ae75c6727d7aa87b3b23443906c60f512d3abef89092477910eb12370a373113e64bf4c1ee9bf0a674292316b878d3dec0f11c4a567164c9bf9ac04de2acd3fabab2e2bbb0bc8cf31afe1ac05d5d686a4e9921ce7b0dee80bce99bd712dfeed6648dcca460e0e56d6e03f22587640a5007b17c0048b288afb04b4cbc76b76a6044890078b8e1e0563bb99d1fbd2fff1228331c90f48801308276b09f932f8370186e2f3f5b0232c77cf3abf7339800209da692821c04d8a585ca0d9d73975b6111da68a087dea264bd64cf04e75ae04330e4acc658b1c67fa35468dbecf52b84082d4553e19c348621a6d198f8caf5a0a28502c1048d84864942a8502d64631125b103aeef14a348b695162eb2f2a9299af454e724bb7056412994232baadecbaeea9e4e92a4f1dca0880239dffcaa436720260e827d22c201959cf17f6235b1cd45299c6285f5abea4909df1a81354a87f9c6c2360548876c9adc8d7473003c8f75f18050bfb7675007773cf88be907751fbb2929e7b3b3fba64083abcc9d24309ab20b484896864a1c038ae2c8a0afb485f4b741bdc054c73f3262e756af7f5a558010368b0cd9b90415c68150cda541567c1537051ff10444fcf89e76421f86af10e7a999d229941ceb4fb5a2a0b566e057ddd9b67d9750e432146aad2f6bb3a7df3885f9041297582a97bc45fa6e900309adbb0a007ec492692856a3cbf0cb794c2e412ddf9ce4f95fb3c0d198228ab6f9a9283a3e5c8c2e0de4f0efe4dcda903efc14e04e44bf34b6244128610ac9b71b96639f82b07189acf16e5ee458d43aea1084da9cd5aad79fced6a04ce9385399629f1164c42c773a82405e02e4bf4d6c433cdf8084abb1d4e35484c42d774d6e82139839c753633f8174299ecf5369e1aac51a8d27dc1fbcf9fc7faa5d154ce5087cac1255210a69e537b5c25b619640a474cdb0db53e2ff90c04fc1fe197c24fb1e240cc8c255db28a5702632320dfbddf61d738ef4f66a835ca9c74ad102b0589a32498274e0d861071f03e43f67590fbeba0cb851ee03f0436ac0589ecf37d4c18729868847f7bec63fb512dcc04264b0edd27d7170899cc056c468975efb69331ad36467f197d34a1c32aafcf3568087cb9ffcc15b33f43fd13314c0865797aeda60f2982810a3196cad69380e0bfd329826a4564222a5bb64ff87ddd6fbee9e0961e6175328cd323ab2719b3b028977425a1a5a42a6ed75e9889cd9143590fead35c1ad3fd4ff8e324f7317169c01260575da50559d1f7d1f6d06ef79786327e7dc8fbd78103b5b323077a23fe9478d7157fc9f2aea83676cff4a55275877aabc541d7630707404c08c50730afc74bbd58c5dd03991d3b38f779c51ee3725c4a9d06f3535791550facef7e5830df9a130b8939e786bba2aa8ceb86a341f9acd7f0fd3f88450ea46f3e91aae1fe06d5fce60e38b9e0e790e94e5f76958d67a6ad0dfd6c16d69281303764a18a845a5020544678152414c76ead1998b53d130360563f0e0f3709ea26f3ce6bca0bfdd90b2edf74bc3bfcde813da3d6d41bcc6073316eb36c06b78488755ca0029043d1c7da645df7706e99fca5d3c2894e42bc4b69fe649672696dc5ac5622c171049714df2f5f664641528ef3d182b33ad00a0a9b5e663fc470c7d62774140da89fd3ec4bd87675c46e7dca81b68cb3ca28959f1368374daad2ae26951bf98c16b95562a41ffcf4a13c4f8c9ed039de28c100df59ddfc010ba06fd525fcb063298fd4051d1ad8ef22e7695fb57e344ca8c89a6b386d99e085ea270ed032f4eabd893687d5b62b5f715103a08f10396d21bfe916b96223867c7b3ea35c617056536cc97de5fd4cc2cf1c6d1da4d474dc900e0d74c88b9485ab4486c7acf1100e4638fea43beb5dfe4e4b30862c7dbb6f4748164ba39753f4381860d9e26b7feb0a56cb4d9b1875bc05d2bcf0df0ec28fc933758f0e10d36764b5105d27559307f146cf663b360427c5c6667106f86e984aebf24d1408b1d07077d81d55875263630e098c64d0c2986a103707ce954173cc927069faad5da902a78228e1ab6a4cec51accb30c90c61ac723136a052ad3cd5269438cecee3fa34aa1f7473c05193ae3b31582cfed355e2f38256a594f457e96c0e41ce18e259f2e8aa9c573fa", 0xcc6}], 0x9}, 0x0) 02:28:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000004c0), 0x4) 02:28:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:18 executing program 5: pipe(&(0x7f0000001240)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) [ 2211.037035][T17589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2211.116919][T17602] kvm_hv_set_msr: 68 callbacks suppressed [ 2211.116988][T17602] kvm [17583]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 2211.211228][T17602] kvm [17583]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000051 data 0x49 [ 2211.302383][T17602] kvm [17583]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001b data 0xa3 [ 2211.361461][T17602] kvm [17583]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000016 data 0x37 [ 2211.415562][T17602] kvm [17583]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000066 data 0x2d [ 2211.427318][T17602] kvm [17583]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000009 data 0xed [ 2211.469702][T17602] kvm [17583]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000086 data 0x13 02:28:19 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32], 0x70}, 0x0) 02:28:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, 0x0, &(0x7f00000001c0)) 02:28:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) 02:28:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4, 0x6, 0x0, 0x0}]}, 0x18}}, 0x0) 02:28:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:20 executing program 4: syz_init_net_socket$ax25(0x3, 0x2, 0xcf) 02:28:20 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000004c0), 0x4) 02:28:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000010c0)="8688ad77cd7c9775571fe85c14e488a0a9984ccf4628de8c3b41df8a4922e39b1683c2e22c3a1091e819e3ebadebc5017fc3fcc3b6d1d0886663b16313e5f24e1088cc589567caa3bd573b9b47615a053fdaecc69de42757a966b3feee1633fc74977431a317cbf0c2228e199162407ff4a56ae2cb566316432ebb3c2fd9bf8e4e800b5c8d0c", 0x86}, {&(0x7f0000001180)="e5c4263da6e68ed3f36022c766b920501f5a42e13a2b0c8765776c18203796ea0db2b017004181d2ce3f08ed3dae252060869d343c4f88cd997ae36a3906e296477b87352481b898b13ab2819c73730b975a3bc6ae17a5094e1e6c58dc6da36d2c7fd2c09915a1bfbe363f8d2acf9a864e8e0d5584149981afe9e31e7d384412ec199c42b452fcb7767ac86df852ab97466e7cafab21cdedd08ecbd4b4f7043e27989d37b060539676f1bb8989ab092f9234af190f5a052cc4", 0xb9}, {&(0x7f0000001240)="65bdb16d5f85743f730fd400ed1c2f0c09337b83161161eff8cd7e84b2c8eb5f14a29e9b755b5228e344efefbe5a73561dd658cbac2d2516ea489cc08b419c6cae24007b9cc01e2c04ebff40b5b80b03487d83de0f61d21cc0116f85910490c0de75756f62a3b847d2", 0x69}, {&(0x7f00000012c0)="9c977a067daebd782ef2f6cd6b1e3d0aaffe8df7f6741a42249dc674783d3f941657925aa5b8b1298dcccfb4d583be5d1895019dc320880b1a84d4d157f4b0a2477c426279fe552945261d7e892efedf4fffcb1e6af5683bd3c9582e06dc92e967be7e614491", 0x66}, {&(0x7f00000013c0)="143ea1dde07bffa4750c7e5a73b2a1", 0xf}, {&(0x7f0000001400)="afbe72af97da11dcecc75fbd4ef76e3c378a632d00d4041f52fc880c0d4e73ceeb3ada19aaa83476c551497158a274e8361edb236192ce7bcf247bdacd3a91d26e71df064883590deb12e37591", 0x4d}, {&(0x7f0000001480)="56b2bd3a5d6857e370a7665d650ffc647b1519b395639a10e962dcf63e1dc00b00cd1e57ec08cd9015c8c271fd957d8eaa2c644b28b7672628d09bded747aa277eabd5412e17dfa43f4c64bfb09a6d97cab0a22c8d3f3b3a386f4e2475536649d10ddaf9", 0x64}, {&(0x7f0000001500)="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", 0xbf3}], 0x8}, 0x0) 02:28:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) [ 2213.146809][T17764] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2213.207301][T17776] kvm [17759]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 2213.235534][T17776] kvm [17759]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000051 data 0x49 [ 2213.268570][T17776] kvm [17759]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000001b data 0xa3 02:28:21 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:21 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000740)) 02:28:21 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000240)) 02:28:21 executing program 5: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x401, 0x6}, &(0x7f0000000040)=0x8) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x6c, 0x2, [], [@hao={0xc9, 0x10, @mcast1}]}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)=0x36) 02:28:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x12, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) [ 2213.830980][T17817] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:28:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1289}, 0x40) 02:28:21 executing program 1: socketpair$tipc(0x1e, 0xfbae1c21af72ccf2, 0x0, 0x0) 02:28:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8946, &(0x7f0000000280)={'team0\x00'}) 02:28:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) [ 2215.057375][T17912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:23 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:23 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 02:28:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) 02:28:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, 0x0, &(0x7f00000001c0)) 02:28:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x20) 02:28:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) [ 2215.902515][T17985] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:23 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 02:28:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r1, 0x409, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x34}}, 0x0) 02:28:23 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0x1c, 0x0, 0x0) 02:28:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x0) 02:28:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:24 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 2216.394711][T17998] tipc: MTU too low for tipc bearer [ 2216.431323][T18001] tipc: MTU too low for tipc bearer 02:28:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8970, &(0x7f0000000280)={'team0\x00'}) 02:28:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010101, @multicast1}}}}) 02:28:24 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x15, 0x0, 0x0) 02:28:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8982, 0x0) [ 2216.790750][T18005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49cc", 0x8a}], 0x1}}], 0x1, 0x0) 02:28:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:25 executing program 1: socket(0xa, 0x5, 0xff) 02:28:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:28:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8927, &(0x7f0000000280)={'team0\x00'}) [ 2217.669992][T18091] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:25 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00'}) 02:28:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2218.612750][T18154] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2218.670396][T18167] kvm_hv_set_msr: 18 callbacks suppressed [ 2218.670465][T18167] kvm [18149]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:26 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) 02:28:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 02:28:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:26 executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0x21, &(0x7f0000000240)={0x7fffffff}, 0x8) 02:28:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:28:27 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000540)={0x23, 0x0, 0x1}, 0x10) 02:28:27 executing program 1: bpf$PROG_LOAD(0x1c, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r1, 0x409, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x24}}, 0x0) 02:28:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7a, 0x0, &(0x7f00000001c0)) [ 2219.552530][T18212] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2219.598498][T18226] kvm [18203]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:27 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0x0) 02:28:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x21, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:28 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:28 executing program 1: bpf$PROG_LOAD(0x10, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:28:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000004c0), 0x4) 02:28:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x20}}, 0x0) 02:28:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8921, &(0x7f0000000280)={'team0\x00'}) [ 2221.014418][T18345] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 2221.076805][T18350] kvm [18341]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000004c0)=0x71b, 0x4) 02:28:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001240)="65bdb16d5f85743f730fd400ed1c2f0c09337b83161161eff8cd7e84b2c8eb5f14a29e9b755b5228e344efefbe5a73561dd658cbac2d2516ea489cc08b419c6cae24007b9cc01e2c04ebff40b5b80b03487d83de0f61d21cc0116f85910490c0de75756f62a3b847d2", 0x69}, {&(0x7f00000012c0)="9c977a067daebd782ef2f6cd6b1e3d0aaffe8df7f6741a42249dc674783d3f941657925aa5b8b1298dcccfb4d583be5d1895019dc320880b1a84d4d157f4b0a2477c426279fe552945261d7e892efedf4fffcb1e6af5683bd3c9582e06dc92e967be7e614491", 0x66}, {&(0x7f0000001340)="a122296fe6fa9b8fad7b6c3033b50a83eaeb55f1c16184c03463cd96ca43ce51b5ba51a7114fa4b995a03ec30bea8d8bab9150e7df68bb9f6292e7cdaf1b88b5f84d26fffa955cad64e9aca37e8a9a6b73254678987717", 0x57}, {&(0x7f00000013c0)="143ea1dde07bffa4750c7e5a73b2a1", 0xf}, {&(0x7f0000001400)="afbe72af97da11dcecc75fbd4ef76e3c378a632d00d4041f52fc880c0d4e73ceeb3ada19aaa83476c551497158a274e8361edb236192ce7bcf247bdacd3a91d26e71df064883590deb12e37591cae35b0cb749fe61cc9f33078bbfa072e49f37f57197eeb40a", 0x66}, {&(0x7f0000001480)="56b2bd3a5d6857e370a7665d650ffc647b1519b395639a10e962dcf63e1dc00b00cd1e57ec08cd9015c8c271fd957d8eaa2c644b28b7672628d09bded747aa277eabd5412e17dfa43f4c64bfb09a6d97cab0a22c8d3f3b3a386f4e2475536649d10ddaf9", 0x64}, {&(0x7f0000001500)="5e92381b99001565816117a48280101f12c108a1523a0179fbb10bd676d1e2fe4f16d108e822d168458547a59b56c40b42df0578183654d56015d1646e2a105870de51a65eb1ea6ce1188c9332b85c2ceda5eae9a23f4713f353e9a43c1957a6496f51eb7a9aa101f54903125db7b61687d29436768a76126abee2d64d2358672b391d0d2c5e6ea1aaab9e2412fd79085b88530a1c8dd08b33474178ac762c1cbad381f8c0d0ca8709e9e7b64dfa3cddcc53d34b1ea438bee0ca17ad93b9121258881754d2c4a93cfd16afcbac4fe27ce8d23a6688e576d2bc23c083f6a5ce701950b59d6a93adca69849641d7def13867af59d13990088e1e39112ce58f063e90637d956ba2ff816429200ca6188dc07699660174c706f2f86bc8d522e4c5a1a83118aac47ba9e8749640b851e20216b45a9abbf33e1492c9c9467b0969ec8e4e1130ba3269de662504cf6605acee1b42fd6afd38af98c9d49cb8ee2619850b47765ae237c83f42a94f004d8de9bdd631e3dac511c01239780c19842171f657f3674d93daeb96f56cde71845cfb8a08269de9b5e83d3b5a680968ed1b8039b192beb653de20ac2287bb544ec62044185795ed2ca1f54690d8525b4058c1e373fca87634ddec1f07e35ca5e4e7258c8083388e60d72cd2944ee18b409690aaef3431d19b3228197e5d7bc4336795ddc4e1b03e69a7e02d11201b42d19e3f35d5a80f15b737488d6c093353c4c148291627f34074d388630b82314878f9aee51ed63f5cd7ff0945959c24cf13feda4cebc979ccf7810b26d166206b82e769c2a75500bf596c8dabab5c7a6c730949a526c6be5f553086cf283832dec889d0bb4cae7b1903fe4d151a2aec403a6f363898cd4f17ac1d38423af4b526771f70e70ced02ecc2e7e22858bfc0b2b5dbe57d3936f9df66ca2fc1f60a3d43e0af6c53fbe777444766d2aa1d73f49d9ba578ac27567da858932634a076705f91681ec78e87a88168c642f63cd9db65b8f70ed76a4590dfedbf53fe8ac6c632f308408cb7baa145babf45cd7c40ed059d3e0f980678873ced2902b34cc69ef471a994b2989863a9ff3a726737fa08d18fccdb1d02287c5b345b70076e3720e1e77ed45b829f3f4713387dc5602132fdf5c8db2bcef110a5e5bc76dc01b95da7c5b9cd4a663b7f17378a2ed58f55fd614360d9a22a56afd2f8ea741bcae56ea751020f87368a4453caf730083452583f85e0179031e6147c8dcb053f0d85f3c2631f34d8e1c9e6f9db28c720b6d1356d785922869b6788bde001fc74f222063cbb1fc874cc4a67b412cfa996e6fbd9a4488d9d8896f951757cf6ff9c7fb92be3c3b42b83f49db060df21d369ddef76beed7a26f5f871626d9229d97b6e48f360862aee66cbd19224bad855486b69384a8fee9348b254a3562ef8faa03685a9da211d77c12bc52edb1a0ed5253a081bedba91eead092e858f4af58002408956482a51af4e19ab9fb038207b77eacadd05c80c0b55deba2d9f1f3f0a111441ac73948573ca5f00c2acd80dd5f4397d7d900f5b96912b167ae9bf17b840f6aa98cf008296af4a3a6c66094177e125fe3933699a2c26ae29cbb927535b3b8b669ad13833c635677142eb7c97109adc325407c13d6b1fa15b96de7be74e9887d63db755e21cc9db9c26e22a6daca7d16c8e794505c4ef3b8aa9bce4999fd2ce18d9a12d1848e93711135573ca0b19c76bfa6652faecc35143b55d7d17630d5d9216edde5d6233e3fa5e25557452313b2ffba93c6ba7279cc4b1f8efea994c53a9ac18f9fc428f302a99ebbd01a217132a22447f99ca9e17a96d866f4142759bab67ac56d8587c34b2afee558cebbcdc1bee0e4038291a93aa8a8d6f8c1f063eb0fcd00d0999c2107f00e85e650d8751014749b1a31e7942e73cafd5dbc022bbd871ef3aa40e2f298ec07a23327eef3bfe7b289bdba099d8c695a1c17948e51945df20b13df5aec5ee70def2a418bb5cbd648f99135f9426771727a8f273125439da1ac08e87d15b2172cd69a9bdddee853880182f8446208a6f1fcc9e89778d3f14e07b548cfa797fde73b415a2d42427585e8144a979d04b8da0207809199fba2d5d8586d2ce8d373d918545381adf92008e4700e3fd9a6bb83e2652e94553416bb7c804df73710378c4c8988080472c4df4a59684d888819f15e2bc9d21d13e0ee6f8aa1dbf3cc8094ca742aa1f65126955267ccd50ee962042172f085a05cf7c75392e9ef5eb26ce4565c5d58a6f77fb8cbfa1524b17b4d62ee05905430cfbdb686728644a3e70c357bdaa01fb2ad6c62c802951175daf1d0a6fa434be799147a5794a2ab9447777cec13df133b0f64aa82dbc93d468f38d8f1efdb62cfd0930f8150ddebe94e823ef347ee7ad90d2cae976571fb3e8d60a31e521eab38786543902afdecf818df079604480ae75c6727d7aa87b3b23443906c60f512d3abef89092477910eb12370a373113e64bf4c1ee9bf0a674292316b878d3dec0f11c4a567164c9bf9ac04de2acd3fabab2e2bbb0bc8cf31afe1ac05d5d686a4e9921ce7b0dee80bce99bd712dfeed6648dcca460e0e56d6e03f22587640a5007b17c0048b288afb04b4cbc76b76a6044890078b8e1e0563bb99d1fbd2fff1228331c90f48801308276b09f932f8370186e2f3f5b0232c77cf3abf7339800209da692821c04d8a585ca0d9d73975b6111da68a087dea264bd64cf04e75ae04330e4acc658b1c67fa35468dbecf52b84082d4553e19c348621a6d198f8caf5a0a28502c1048d84864942a8502d64631125b103aeef14a348b695162eb2f2a9299af454e724bb7056412994232baadecbaeea9e4e92a4f1dca0880239dffcaa436720260e827d22c201959cf17f6235b1cd45299c6285f5abea4909df1a81354a87f9c6c2360548876c9adc8d7473003c8f75f18050bfb7675007773cf88be907751fbb2929e7b3b3fba64083abcc9d24309ab20b484896864a1c038ae2c8a0afb485f4b741bdc054c73f3262e756af7f5a558010368b0cd9b90415c68150cda541567c1537051ff10444fcf89e76421f86af10e7a999d229941ceb4fb5a2a0b566e057ddd9b67d9750e432146aad2f6bb3a7df3885f9041297582a97bc45fa6e900309adbb0a007ec492692856a3cbf0cb794c2e412ddf9ce4f95fb3c0d198228ab6f9a9283a3e5c8c2e0de4f0efe4dcda903efc14e04e44bf34b6244128610ac9b71b96639f82b07189acf16e5ee458d43aea1084da9cd5aad79fced6a04ce9385399629f1164c42c773a82405e02e4bf4d6c433cdf8084abb1d4e35484c42d774d6e82139839c753633f8174299ecf5369e1aac51a8d27dc1fbcf9fc7faa5d154ce5087cac1255210a69e537b5c25b619640a474cdb0db53e2ff90c04fc1fe197c24fb1e240cc8c255db28a5702632320dfbddf61d738ef4f66a835ca9c74ad102b0589a32498274e0d861071f03e43f67590fbeba0cb851ee03f0436ac0589ecf37d4c18729868847f7bec63fb512dcc04264b0edd27d7170899cc056c468975efb69331ad36467f197d34a1c32aafcf3568087cb9ffcc15b33f43fd13314c0865797aeda60f2982810a3196cad69380e0bfd329826a4564222a5bb64ff87ddd6fbee9e0961e6175328cd323ab2719b3b028977425a1a5a42a6ed75e9889cd9143590fead35c1ad3fd4ff8e324f7317169c01260575da50559d1f7d1f6d06ef79786327e7dc8fbd78103b5b323077a23fe9478d7157fc9f2aea83676cff4a55275877aabc541d7630707404c08c50730afc74bbd58c5dd03991d3b38f779c51ee3725c4a9d06f3535791550facef7e5830df9a130b8939e786bba2aa8ceb86a341f9acd7f0fd3f88450ea46f3e91aae1fe06d5fce60e38b9e0e790e94e5f76958d67a6ad0dfd6c16d69281303764a18a845a5020544678152414c76ead1998b53d130360563f0e0f3709ea26f3ce6bca0bfdd90b2edf74bc3bfcde813da3d6d41bcc6073316eb36c06b78488755ca0029043d1c7da645df7706e99fca5d3c2894e42bc4b69fe649672696dc5ac5622c171049714df2f5f664641528ef3d182b33ad00a0a9b5e663fc470c7d62774140da89fd3ec4bd87675c46e7dca81b68cb3ca28959f1368374daad2ae26951bf98c16b95562a41ffcf4a13c4f8c9ed039de28c100df59ddfc010ba06fd525fcb063298fd4051d1ad8ef22e7695fb57e344ca8c89a6b386d99e085ea270ed032f4eabd893687d5b62b5f715103a08f10396d21bfe916b96223867c7b3ea35c617056536cc97de5fd4cc2cf1c6d1da4d474dc900e0d74c88b9485ab4486c7acf1100e4638fea43beb5dfe4e4b30862c7dbb6f4748164ba39753f4381860d9e26b7feb0a56cb4d9b1875bc05d2bcf0df0ec28fc933758f0e10d36764b5105d27559307f146cf663b360427c5c6667106f86e984aebf24d1408b1d07077d81d55875263630e098c64d0c2986a103707ce954173cc927069faad5da902a78228e1ab6a4cec51accb30c90c61ac723136a052ad3cd5269438cecee3fa34aa1f7473c05193ae3b31582cfed355e2f38256a594f457e96c0e41ce18e259f2e8aa9c573fa232d1219fbfdb02504888cc50f6f375857a7238350bd9bd192256b19d0c658650d9347d7d31dc9675cca3a7b4361d117063d8afa76684d940a464241c09fd133cb5ac2a11090e02731b315def03a3239451f7f300ffa17b6392fce2aa6f27c75fa9662d44fc49dc4144dbd901af2969010d42a0f3c94b073f4c5e8702f455708946ea1953d9c57635f77c3c23cd76b00ad01af4b725a549454b21afed5a4f72b27a9613f7111c98b4edcd4f0915c13c5b7e3fd3813aeb284cc94feea8ac547e97e1c7ae5a4ace58a4ce079c9437fcb424b89fa89d06c9a55f8edb1a37dd9cd3242e416c3b73581e253a3b9739035606738c63a845ccb6933e97c6aad9a9cab9a29ce7bd485a2a448eb6c870b32c42e3f36c6b76b0b328125ffb1b36e2f612ecf1ac23d7aad91bd6a1ca5ea64e2becaf6479aa354cc70fd897816d037", 0xe02}], 0x7}, 0x0) 02:28:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89b0, &(0x7f0000000280)={'team0\x00'}) 02:28:29 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40), 0x0, 0x0) 02:28:29 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 02:28:29 executing program 5: bpf$PROG_LOAD(0x1e, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f00000004c0), 0x4) 02:28:29 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) [ 2222.588201][T18376] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2222.655286][T18379] kvm [18370]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:30 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@framed={{}, [@alu={0x4}, @jmp, @call]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0}, 0x78) 02:28:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c0000000000000001"], 0x70}, 0x0) 02:28:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29040000000000000000100000000e0001006e657464657673696d0000000f0002006e657464657673696d30"], 0x54}}, 0x0) 02:28:30 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40), 0x0, 0x0) [ 2223.140890][T18390] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2223.217488][T18393] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 02:28:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) 02:28:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYRES32], 0x70}, 0x0) 02:28:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, 0x0, &(0x7f00000001c0)) 02:28:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7, 0x0, &(0x7f00000001c0)) 02:28:31 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40), 0x0, 0x0) 02:28:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 02:28:32 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$unix(r0, &(0x7f0000000180)=""/86, 0x56, 0x102, 0x0, 0x0) 02:28:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x244, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x40) 02:28:32 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0x1e, &(0x7f0000000240)={0x7fffffff}, 0x8) [ 2224.352696][T18413] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2224.397298][T18415] kvm [18411]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:32 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0x1a, 0x0, 0x0) 02:28:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xa5, &(0x7f00000000c0)=""/165, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0}, 0x78) 02:28:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:28:32 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 02:28:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:33 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, &(0x7f0000000280)={'team0\x00'}) [ 2225.382850][T18440] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x70, 0x0, &(0x7f00000001c0)) [ 2225.460338][T18445] kvm [18433]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000500)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:28:33 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x10, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 02:28:34 executing program 3: bpf$PROG_LOAD(0x22, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2226.341790][T18462] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2226.418903][T18468] kvm [18459]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x4, 0x4) 02:28:34 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) 02:28:34 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x4, 0x4) 02:28:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 02:28:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:28:35 executing program 1: pipe(&(0x7f0000001240)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 02:28:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6d, 0x0, &(0x7f00000001c0)) 02:28:35 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:35 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 2227.377041][T18486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:35 executing program 5: socket(0x18, 0x0, 0x200) [ 2227.436867][T18490] kvm [18485]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)}}], 0x1, 0x0) 02:28:35 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e) 02:28:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000001180)="e5", 0x1}], 0x2}, 0x0) 02:28:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x4, 0x0, &(0x7f00000001c0)) 02:28:36 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:36 executing program 5: pipe(&(0x7f00000073c0)) [ 2228.305599][T18509] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:36 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x14, 0x0, &(0x7f00000001c0)) [ 2228.372877][T18516] kvm [18507]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xc, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x9c) 02:28:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) 02:28:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:28:36 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)}}], 0x1, 0x0) 02:28:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null]}, 0x48) 02:28:37 executing program 1: socket(0x2, 0x2, 0x14) 02:28:37 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000002c0)={0x2}) 02:28:37 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800c1f8e900000000ed160000de1f75"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1009, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "722fb5cb25a1afb9241cfb8357d3947e"}, 0x11, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) open$dir(0x0, 0x16d900, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000240), 0x0, 0x4) 02:28:37 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 2229.306701][T18532] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2229.383293][T18537] kvm [18531]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:37 executing program 4: socket(0x2, 0xa, 0x6) 02:28:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)}}], 0x1, 0x0) 02:28:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r1, 0x409, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x34}}, 0x0) 02:28:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) 02:28:38 executing program 4: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x81, 0x40242) [ 2230.386311][T18559] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2230.455058][T18571] kvm [18557]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{0x0}], 0x1}}], 0x1, 0x0) 02:28:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') r1 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 02:28:38 executing program 1: prctl$PR_SET_NO_NEW_PRIVS(0x3a, 0x1) 02:28:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000000}) 02:28:39 executing program 3: r0 = syz_io_uring_setup(0x1404, &(0x7f0000000080)={0x0, 0xdb69}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$vcs(0xffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) clock_gettime(0x0, &(0x7f0000000200)) ppoll(&(0x7f00000001c0)=[{r0}, {r3, 0xc12d}], 0x2, 0x0, 0x0, 0x0) 02:28:39 executing program 1: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, r1}, 0x18) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, r1}, 0x18) 02:28:39 executing program 5: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1) 02:28:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{0x0}], 0x1}}], 0x1, 0x0) 02:28:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8927, &(0x7f0000000000)={'batadv0\x00'}) 02:28:40 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}, {{&(0x7f0000000640)=@rc, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/212}, {&(0x7f00000007c0)=""/156}, {&(0x7f0000000880)=""/174}, {&(0x7f0000000940)=""/4096}], 0x0, &(0x7f0000001940)=""/135}, 0x4}, {{&(0x7f0000001a00)=@l2tp={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/220}, {&(0x7f0000000280)=""/47}, {&(0x7f0000001b80)=""/251}, {&(0x7f0000001c80)=""/83}, {&(0x7f0000001d00)=""/206}]}, 0x6}, {{&(0x7f0000001e80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000002100)=""/163}]}, 0x7fffffff}], 0x4000000000000ad, 0x0, 0x0) openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x109ec0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) [ 2232.541207][T18733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2232.588032][T18741] kvm [18729]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:40 executing program 5: ioctl$CHAR_RAW_RRPART(0xffffffffffffffff, 0x125f, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800c1f8e900000000ed160000de1f75"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1009, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "722fb5cb25a1afb9241cfb8357d3947e"}, 0x11, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) open$dir(0x0, 0x16d900, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000240), 0x0, 0x4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="88010000201fc9c8ba46ce18064887b094df148665e796a87103f85845b58d89aff346e6f25bbadba3968e7a139d6f70b5dcd4656da75dff1c72625025bc7f8f4460f874966d624574eee39ce872a6a03aa0cbfb9cb1263f6a0de2781c5a7f66cb7c4e", @ANYRES16=0x0, @ANYBLOB="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"], 0x188}}, 0x80000) 02:28:40 executing program 3: r0 = openat$vcs(0xffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xe02, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) 02:28:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{0x0}], 0x1}}], 0x1, 0x0) 02:28:40 executing program 4: syz_io_uring_setup(0x277d, &(0x7f0000000400), &(0x7f0000dba000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000540)) [ 2233.482166][T18832] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:41 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x81, 0x40042) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) [ 2233.528911][T18838] kvm [18825]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f00000007c0), 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) 02:28:41 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)) 02:28:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)}], 0x1}}], 0x1, 0x0) 02:28:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:28:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x894a, 0x0) 02:28:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) exit_group(0x0) syz_emit_ethernet(0x10c, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x94) io_setup(0x4, &(0x7f0000000680)) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x5, 0x20) ftruncate(0xffffffffffffffff, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000001000010400"/19, @ANYBLOB, @ANYBLOB="08000400"], 0x98}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000300)) 02:28:42 executing program 4: openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x6000, 0x0) 02:28:43 executing program 5: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) 02:28:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)}], 0x1}}], 0x1, 0x0) 02:28:43 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) exit_group(0x0) syz_emit_ethernet(0x10c, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x94) io_setup(0x4, &(0x7f0000000680)) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x5, 0x20) ftruncate(0xffffffffffffffff, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000001000010400"/19, @ANYBLOB, @ANYBLOB="08000400"], 0x98}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000300)) 02:28:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000000000)={'batadv0\x00'}) 02:28:43 executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x1b, 0x1) 02:28:43 executing program 0: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 2235.648824][T18950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2235.719749][T18958] kvm [18945]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2}}) 02:28:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) epoll_create1(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xb000200d}) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:28:44 executing program 4: r0 = openat$rtc(0xffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, 0x0) 02:28:44 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) exit_group(0x0) syz_emit_ethernet(0x10c, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x94) io_setup(0x4, &(0x7f0000000680)) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x5, 0x20) ftruncate(0xffffffffffffffff, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000001000010400"/19, @ANYBLOB, @ANYBLOB="08000400"], 0x98}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000300)) 02:28:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)}], 0x1}}], 0x1, 0x0) 02:28:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8921, &(0x7f0000000000)={'batadv0\x00'}) [ 2236.718774][T19043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2236.789340][T19055] kvm [19027]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:44 executing program 4: ustat(0x3, &(0x7f0000000240)) 02:28:45 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) exit_group(0x0) syz_emit_ethernet(0x10c, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x94) io_setup(0x4, &(0x7f0000000680)) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x5, 0x20) ftruncate(0xffffffffffffffff, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000001000010400"/19, @ANYBLOB, @ANYBLOB="08000400"], 0x98}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000300)) 02:28:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd36", 0x45}], 0x1}}], 0x1, 0x0) 02:28:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}]}, 0x28}}, 0x0) 02:28:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x400}]}) [ 2237.949506][T19117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2238.015435][T19126] kvm [19104]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:46 executing program 0: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:46 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x30710100, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 02:28:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}, 0x19}, 0x0) 02:28:46 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) syz_genetlink_get_family_id$nl80211(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = gettid() r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x44147, 0x0, 0x0, 0x3, 0x5, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) recvfrom(r1, 0x0, 0x0, 0x700, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYBLOB="000825bd7000fbf801"], 0x70}}, 0x4001001) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24040054) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) epoll_create1(0x0) 02:28:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd36", 0x45}], 0x1}}], 0x1, 0x0) 02:28:46 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 02:28:46 executing program 4: chdir(0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63cca555fedbe9d8f3b423cdacfa7e32fe023136f9f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f76907dc6751dfb265a0ae669e173a649c1cf96574d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c33283ba58d31a20a2251258f8a97db00fab582658d496c01085c8e09aa8810000abe0d9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) rmdir(0x0) close(r1) [ 2238.817003][T19160] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:28:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xe, 0x6, 0x101}, 0x14}}, 0x0) 02:28:47 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006680)=ANY=[@ANYBLOB="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"], 0x59b0}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xbcc4, r0}, 0x38) [ 2239.021278][T19172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2239.123171][T19191] kvm [19158]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 2239.297383][ T33] audit: type=1804 audit(1607740127.210:45): pid=19222 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir100695643/syzkaller.pMiG10/264/bus" dev="sda1" ino=15789 res=1 errno=0 02:28:47 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) epoll_create1(0x0) 02:28:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd36", 0x45}], 0x1}}], 0x1, 0x0) 02:28:47 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) [ 2239.973879][ T33] audit: type=1804 audit(1607740127.890:46): pid=19222 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir100695643/syzkaller.pMiG10/264/bus" dev="sda1" ino=15789 res=1 errno=0 02:28:50 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800c1f8e900000000ed160000de1f75"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1009, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "722fb5cb25a1afb9241cfb8357d3947e"}, 0x11, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) open$dir(0x0, 0x16d900, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, 0x0, 0x0, 0x4) 02:28:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec2", 0x68}], 0x1}}], 0x1, 0x0) 02:28:50 executing program 1: r0 = openat$vcs(0xffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000002dc0)) 02:28:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) epoll_create1(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fcntl$dupfd(r0, 0x0, r0) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xb000200d}) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2242.715684][T19311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2242.775914][T19325] kvm [19309]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:50 executing program 1: mq_unlink(&(0x7f0000000280)='.@@\xae\'$!-\x00') 02:28:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec2", 0x68}], 0x1}}], 0x1, 0x0) 02:28:51 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x27831, 0xffffffffffffffff, 0xedeba000) munlockall() [ 2243.794880][T19420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2243.849020][T19420] kvm [19415]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:52 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006680)=ANY=[@ANYBLOB="b05900000d0a4f61000000000000000001000006080004400000000394590380f0180080a00001801800028008000180fffffffb0900020073797a3200000000810001001c866ee63d2a6afb5b8eb9b71391a998be1b724c9f325ae7a962826f873b3e930d15bc02c0b3c516e1b820731342a36679b5d4094c4b7148d12ad30e3bdce3fb6dd49cfba6b88b0696d8fc3d4efc2b5088be2c6367b1bcdb5216c2ec7da6a56621f956ecf2988f69e5710756d1ffe62e90b8998303bfa155c3eb685ee6000000e80001800c00028008000180fffffffdd400010042cf1ecece01f7f6a76d69c08c0ef979c0bf84a67de910c186ae68580a77869f828aed5fb1062c55e363b151ed295bd06ec8289c485020638e418982a44059004e7c49ea668fac87d3a3d346f6014f2f77564fff86c07061054b97a640f035bb138d8bfe00cddd508f3b334d5346f23188a59abf6daa22d86cf88e0ec385fe2e0f546f2776b25b59d95b55e713d15d0d0956100200bb2c70bb7631f94c1e139dc9f86bf710dc89cc86b1a96c0a6561c48771e00aa09f8c1bf4653209832281481b076faa61d0734be1198b6f2a2192a6040002800900090073797a3000000000ec0102803800028008000180ffffffff0900020073797a30000000000900020073797a300000000008000180fffffffe0900020073797a3100000000270001004b924ad9d7066013be384dd360a5f11f2037812a7a2d14b68ca6ac1b72fec2c3dab81400e900010036aa8271ece3c65354af7ada1eb82c643b320373e3cd7b8da911971aee3130b0ae0c823f8d8b9feb5f90c883bc28459e7c4d610b269f027d2dddc1ff036aa4f48671983afeaa7082d744954050b38b83a4e67a34dd5e7a4c713cdd81c504fd0ed329a87e3022f14825f4c8127e02eb89ae6a559a8cdbbbac04ef12e4637bb30d30b6f68c6eb081eb7d62536debcdedb4c3fbc3646605d27281b9786960abb21763fd6418e405f479d8a7e177c0c40119669f50a8ddf3da286bbe37012b7e5342aa5f25519af275c92b54490e9dd749b19d24075d351c393c06e5532082f397149434af232e000000640002800900020073797a31000000000900020073797a320000000008000180fffffffc08000180fffffffe0900020073797a310000000008000180fffffffc08000180ffffffff08000180fffffffe0900020073797a300000000008000180fffffffe380002800900020073797a320000000008000180fffffffb08000180fffffffd09"], 0x59b0}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xbcc4, r0}, 0x38) 02:28:52 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x22c3, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 02:28:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3c00000000000022ee000010071361e00000010000000000000000e00000014414380000000000000000000000000000000000860600000000000000"], 0x3c}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0xff67) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="9a00012bbd00fddbdf2504000000100008800c00078008000600f6000000"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8020000", @ANYRES16, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x1}, 0x4040805) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008000}, 0x40011) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup3(r5, r3, 0x0) dup3(r6, r1, 0x0) 02:28:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec2", 0x68}], 0x1}}], 0x1, 0x0) [ 2244.549763][T19472] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2244.625380][T19479] kvm [19467]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:52 executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x22, 0x1) 02:28:52 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:52 executing program 1: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) dup3(r1, r0, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) 02:28:52 executing program 5: ioctl$CHAR_RAW_RRPART(0xffffffffffffffff, 0x125f, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1009, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000200)=@md5={0x1, "722fb5cb25a1afb9241cfb8357d3947e"}, 0x11, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) r1 = open$dir(0x0, 0x16d900, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, 0xffffffffffffffff, 0x0) 02:28:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3e", 0x79}], 0x1}}], 0x1, 0x0) 02:28:53 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:53 executing program 1: socket(0x25, 0x3, 0x2) [ 2245.703314][T19492] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2245.746586][T19500] kvm [19490]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:28:53 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x15, 0x1) 02:28:56 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006680)=ANY=[@ANYBLOB="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"], 0x59b0}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xbcc4, r0}, 0x38) 02:28:56 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3e", 0x79}], 0x1}}], 0x1, 0x0) 02:28:56 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0xff010000, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) 02:28:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}) 02:28:56 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaa91aa00810000008100450081"], 0x0) [ 2248.496336][T19528] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:28:56 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:28:56 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0xf8, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x40}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xb64}, {0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8000}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x20000449) epoll_create1(0x0) 02:28:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b1, &(0x7f0000000000)={'batadv0\x00'}) 02:28:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3e", 0x79}], 0x1}}], 0x1, 0x0) 02:28:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b4060000004000007111e00000000000851000000200000085000000070000009500c200000000009500001200000000bc297473cabac8c499d8b904ae3b7ce6490900085cbf60021044bd70673d5627dcd599202b893ddf2088756eb7a1f5ece15cf40b3b2a609eaa733f352d5e55773248d6e910e1fe834598a32aedeed62ef4f8a6070a83a57dcc4dcdf4d975d50e6a2584ceb46a762d2bd082803b3098a8c2ced13525fbf9591305e184f8eb7e1aec8c1194ac64484a7d0c29"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) fcntl$getown(0xffffffffffffffff, 0x9) getdents64(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0xea60}}, &(0x7f0000000140)) openat$vsock(0xffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x185842, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 02:28:58 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 2250.819154][T19549] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2250.897172][T19553] kvm [19547]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:01 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006680)=ANY=[@ANYBLOB="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"], 0x59b0}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xbcc4, r0}, 0x38) 02:29:01 executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x1ff}, &(0x7f00000000c0)) 02:29:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f", 0x82}], 0x1}}], 0x1, 0x0) 02:29:01 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 2253.396823][T19574] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2253.469520][T19579] kvm [19572]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf [ 2255.868266][T15865] device hsr_slave_0 left promiscuous mode [ 2255.886264][T15865] device hsr_slave_1 left promiscuous mode [ 2255.899237][T15865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2255.907421][T15865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2255.957341][T15865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2255.965148][T15865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2255.994632][T15865] device bridge_slave_1 left promiscuous mode [ 2256.004194][T15865] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.058102][T15865] device bridge_slave_0 left promiscuous mode [ 2256.065060][T15865] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.124670][T15865] device veth1_macvtap left promiscuous mode [ 2256.130801][T15865] device veth0_macvtap left promiscuous mode [ 2256.137248][T15865] device veth1_vlan left promiscuous mode [ 2256.143368][T15865] device veth0_vlan left promiscuous mode [ 2258.881725][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 2259.521950][ T8504] Bluetooth: hci5: command 0x0409 tx timeout [ 2260.476670][T15865] team0 (unregistering): Port device team_slave_1 removed [ 2260.505749][T15865] team0 (unregistering): Port device team_slave_0 removed [ 2260.529923][T15865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2260.561301][T15865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2260.698343][T15865] bond0 (unregistering): Released all slaves [ 2260.829609][T19599] IPVS: ftp: loaded support on port[0] = 21 [ 2260.852392][T19593] IPVS: ftp: loaded support on port[0] = 21 [ 2260.962378][T24120] Bluetooth: hci4: command 0x041b tx timeout [ 2261.320909][T19593] chnl_net:caif_netlink_parms(): no params data found [ 2261.397971][T19599] chnl_net:caif_netlink_parms(): no params data found [ 2261.572454][T19599] bridge0: port 1(bridge_slave_0) entered blocking state [ 2261.579710][T19599] bridge0: port 1(bridge_slave_0) entered disabled state [ 2261.589931][T19599] device bridge_slave_0 entered promiscuous mode [ 2261.602792][ T8846] Bluetooth: hci5: command 0x041b tx timeout [ 2261.633209][T19599] bridge0: port 2(bridge_slave_1) entered blocking state [ 2261.640456][T19599] bridge0: port 2(bridge_slave_1) entered disabled state [ 2261.650257][T19599] device bridge_slave_1 entered promiscuous mode [ 2261.807144][T19593] bridge0: port 1(bridge_slave_0) entered blocking state [ 2261.815242][T19593] bridge0: port 1(bridge_slave_0) entered disabled state [ 2261.825166][T19593] device bridge_slave_0 entered promiscuous mode [ 2261.864102][T19599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2261.904017][T19599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2261.929753][T19593] bridge0: port 2(bridge_slave_1) entered blocking state [ 2261.938399][T19593] bridge0: port 2(bridge_slave_1) entered disabled state [ 2261.959460][T19593] device bridge_slave_1 entered promiscuous mode [ 2262.064866][T19593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2262.078396][T19599] team0: Port device team_slave_0 added [ 2262.102879][T19599] team0: Port device team_slave_1 added [ 2262.122100][T19593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2262.239754][T19593] team0: Port device team_slave_0 added [ 2262.249410][T19599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2262.256674][T19599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2262.283042][T19599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2262.318621][T19593] team0: Port device team_slave_1 added [ 2262.375788][T19599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2262.383126][T19599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2262.409712][T19599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2262.507630][T19593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2262.515174][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2262.541427][T19593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2262.572433][T19593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2262.579527][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2262.605923][T19593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2262.631318][T19599] device hsr_slave_0 entered promiscuous mode [ 2262.642571][T19599] device hsr_slave_1 entered promiscuous mode [ 2262.656677][T19599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2262.664903][T19599] Cannot create hsr debugfs directory [ 2262.752164][T19593] device hsr_slave_0 entered promiscuous mode [ 2262.765815][T19593] device hsr_slave_1 entered promiscuous mode [ 2262.776029][T19593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2262.784264][T19593] Cannot create hsr debugfs directory [ 2263.042420][ T8846] Bluetooth: hci4: command 0x040f tx timeout [ 2263.687364][ T8504] Bluetooth: hci5: command 0x040f tx timeout [ 2264.880410][T15865] device hsr_slave_0 left promiscuous mode [ 2264.888009][T15865] device hsr_slave_1 left promiscuous mode [ 2264.911369][T15865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2264.919660][T15865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2264.933635][T15865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2264.941236][T15865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2264.956909][T15865] device bridge_slave_1 left promiscuous mode [ 2264.963960][T15865] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.978997][T15865] device bridge_slave_0 left promiscuous mode [ 2264.985960][T15865] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.022278][T15865] device veth1_macvtap left promiscuous mode [ 2265.028408][T15865] device veth0_macvtap left promiscuous mode [ 2265.034993][T15865] device veth1_vlan left promiscuous mode [ 2265.040821][T15865] device veth0_vlan left promiscuous mode [ 2265.122665][T24120] Bluetooth: hci4: command 0x0419 tx timeout [ 2265.762502][T10450] Bluetooth: hci5: command 0x0419 tx timeout [ 2269.146693][T15865] team0 (unregistering): Port device team_slave_1 removed [ 2269.172246][T15865] team0 (unregistering): Port device team_slave_0 removed [ 2269.200509][T15865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2269.231887][T15865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2269.367759][T15865] bond0 (unregistering): Released all slaves [ 2269.527726][T19599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2269.549195][T19593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2269.594780][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2269.604311][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2269.635499][T19593] 8021q: adding VLAN 0 to HW filter on device team0 [ 2269.644720][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2269.653881][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2269.672005][T19599] 8021q: adding VLAN 0 to HW filter on device team0 [ 2269.705966][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2269.716371][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2269.725728][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.733125][ T8508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.794719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2269.804238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2269.814286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2269.823650][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.831010][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.840351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2269.850382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2269.859733][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.867452][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.876761][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2269.887759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2269.898845][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2269.908896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2269.918345][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.925759][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.935063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2269.945650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2270.020504][T19593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2270.032585][T19593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2270.104941][T19599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2270.115688][T19599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2270.154169][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2270.163712][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2270.173716][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2270.185295][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2270.195912][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2270.206565][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2270.216544][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2270.227240][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2270.238792][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2270.248994][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2270.259089][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2270.269938][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2270.280727][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2270.291738][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2270.302692][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2270.312741][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2270.323526][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2270.333567][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2270.343630][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2270.351451][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2270.419053][T19593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2270.427422][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2270.437689][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2270.447837][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2270.457128][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2270.465059][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2270.485294][T19599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2270.870611][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2270.881169][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2270.968972][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2270.979495][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2271.107315][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2271.117956][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2271.142134][T19593] device veth0_vlan entered promiscuous mode [ 2271.179352][T19599] device veth0_vlan entered promiscuous mode [ 2271.200980][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2271.211152][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2271.221160][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2271.231433][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2271.252488][T19593] device veth1_vlan entered promiscuous mode [ 2271.305557][T19599] device veth1_vlan entered promiscuous mode [ 2271.369963][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2271.380081][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2271.390335][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2271.400220][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2271.410358][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2271.420443][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2271.503151][T19593] device veth0_macvtap entered promiscuous mode [ 2271.530144][T19599] device veth0_macvtap entered promiscuous mode [ 2271.556931][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2271.568363][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2271.578928][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2271.589676][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2271.602293][T19593] device veth1_macvtap entered promiscuous mode [ 2271.620562][T19599] device veth1_macvtap entered promiscuous mode [ 2271.713114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2271.723578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2271.733725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2271.744418][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2271.761022][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.773924][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.784279][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.794906][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.804981][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.815584][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.825644][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.836286][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.851124][T19593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2271.860646][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.872213][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.882635][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.893335][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.903358][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.913934][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.924285][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.935165][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.945244][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2271.955843][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.970486][T19599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2271.982721][T24120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2271.993696][T24120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2272.004484][T24120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2272.015439][T24120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2272.058776][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.073603][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.083872][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.094518][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.104818][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.115682][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.125881][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.136540][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.151059][T19593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2272.166960][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2272.178512][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2272.218057][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.229031][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.240496][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.251322][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.261422][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.272300][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.282501][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.293499][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.303645][T19599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2272.314358][T19599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2272.328747][T19599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2272.339894][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2272.350331][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2272.915886][T27453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2272.924029][T27453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2272.934013][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2273.088313][T27453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.096782][T27453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.141969][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2273.161224][T15862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.169536][T15862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.170993][T27453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.179565][T24120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2273.185309][T27453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.205565][T24120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:29:21 executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x1e, 0x1) 02:29:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 02:29:21 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f", 0x82}], 0x1}}], 0x1, 0x0) 02:29:21 executing program 5: ioctl$CHAR_RAW_RRPART(0xffffffffffffffff, 0x125f, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800c1f8e900000000ed160000de1f75"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = open(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) open$dir(0x0, 0x16d900, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000240), 0x0, 0x4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="88010000201fc9c8ba46ce18064887b094df148665e796a87103f85845b58d89aff346e6f25bbadba3968e7a139d6f70b5dcd4656da75dff1c72625025bc7f8f4460f874966d624574eee39ce872a6a03aa0cbfb9cb1263f6a0de2781c5a7f66cb7c4e", @ANYRES16=0x0, @ANYBLOB="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"], 0x188}}, 0x80000) 02:29:21 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) 02:29:21 executing program 1: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) [ 2273.905081][T20144] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:29:21 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 2273.974280][T20150] kvm [20141]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb9ac0955dae950402d8b4ac000000a0", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="4fe922ccd3a02eef195ab7894283d14730617e770fd024a05945214f760e7480de088f0b1d9fe3d143a38ed47da2d2f855a05fbd81a1c1b239a13ac34640f94c56eed3ea1f50f5149d8baef125743fa36a91711a2ea9e77e677c78590169884007bc138739dea7b927a95f4e434678d0906dcd0009658235dbecb9473a", 0x7d}, {&(0x7f0000000140)="a7f62d54f5787965da810e89bdbeac10d2fbad2d297a513697738567c9b8867b43fb6b69dcc02db545733af4c644a0d1ee9d49b3258300758ed90ec61592598ea3a310dc5c36018dfdc31ceeb8d5539bf55c5bab56b68cc9210f35e332ef92536a4af5c0ccfb38ff4ca85476a57e64104c08f30fe7cd88f56da5236fa4e3a6d6ca10467b1a400fd5", 0x88}, {&(0x7f0000000200)="9657f6ce714bd3b6a36dc14a23bcaf60737ccb01ce0768f1b69a18c37393eaccbd34ac", 0x23}, {&(0x7f0000000240)="7779101dd2e65e3c53f06fa9ac730d8faec77fd4b81f4dd7744f6b52b04611a84aab8de8a1a54aea1d84502018ec031a1600638dc050a0d63fb86231c0c0560dc585d0ec64208a1a45b941c2a37b94008b4a0008e9f9ee3ffc44fff6449006f008ac6397fe7b8eb04f", 0x69}], 0x4}}], 0x1, 0x0) 02:29:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb9ac0955dae950402d8b4ac000000a0", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="4b2f4795b4c3bbc574b550c2f2a1a07f", 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)="ba1446063e606083109ef5f8ef4d7778", 0x10}], 0x1}}], 0x2, 0x0) 02:29:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f", 0x82}], 0x1}}], 0x1, 0x0) 02:29:22 executing program 1: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(0x0, 0x40, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 02:29:22 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 2274.924285][T20171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2275.006375][T20181] kvm [20169]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:23 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x59b00]}) epoll_create1(0x0) 02:29:23 executing program 4: openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x72743, 0x0) 02:29:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2", 0x86}], 0x1}}], 0x1, 0x0) [ 2276.021184][T20198] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2276.074866][T20201] kvm [20196]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:24 executing program 5: rt_sigaction(0xc, &(0x7f0000000380)={&(0x7f0000000300)="0f6a17c4c2e1aaf3c4e215bf47bec4c1c459ec81bcdbfba73901660b46b60f9abfce28361e3e99c4e295913411c4c13054b066d3a3400f0d56fe", 0x0, 0x0}, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000480)) 02:29:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) 02:29:24 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:29:24 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) 02:29:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2", 0x86}], 0x1}}], 0x1, 0x0) 02:29:24 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2400, 0x0) close(r0) 02:29:24 executing program 4: openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) 02:29:24 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 2276.793701][T20219] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2276.857813][T20223] kvm [20216]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x894a, &(0x7f0000000000)={'batadv0\x00'}) 02:29:24 executing program 5: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x6b, 0x100, 0x0) syz_io_uring_setup(0x99, &(0x7f0000000140)={0x0, 0x7f5f, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000200)) 02:29:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2", 0x86}], 0x1}}], 0x1, 0x0) 02:29:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x11, r0) 02:29:25 executing program 1: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x27831, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) 02:29:25 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:25 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 02:29:25 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) exit_group(0x0) syz_emit_ethernet(0x10c, 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x94) io_setup(0x4, &(0x7f0000000680)) io_submit(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98", @ANYBLOB="00000000000000006800128009000100766c616e000000005800028006000100000000004c0003800c000100ffffffff090000000c0001007b000000020000000c00010002000000000000000c00010000", @ANYRES32=0x0], 0x98}}, 0x0) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000300)) [ 2277.682086][T20241] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2277.729273][T20243] kvm [20240]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:25 executing program 1: mmap(&(0x7f0000ffd000/0x3000)=nil, 0xffffe000, 0x0, 0x27831, 0xffffffffffffffff, 0x0) 02:29:26 executing program 4: mq_open(&(0x7f0000000080)='-\x10\xae\xb3\xedg\xb3\xd5q&\xb5QyM\xa6`\xa6\x1d\xacu\x12 \xa5\xde\x82\xfbB#\xad\x80.\xe5\x10fyR$\xf4\xe0Shz\x1a\xee\xc3\xca\xa4\x8a\x17\xac\xb1G\xe3\xd6\xb4\xe2+\xea\xd58\xb4\xf4`o\xe4\xdbl\xf4\x05\xe3\xce\r\xe1\x00\xf9\x9b\xe4\x94\xb3\xe3\xc9)\aW\xcc\xbe{\x111\xc6\xda\r\x92\xb7\xa8\xf1\xd5\xad+y\xb3\xe8\xcaw\x98u\x96\xdcE<\x81r\xb4\xd6\xd9(\xc2\xc2Zl\n\x8b\x8eh\x98\x1b\"\'\xeaitkQ\xc0\xca-\xd1:a}\xd00\xfd\x9e2\x90b\x85\x1f~\x18\xbd\xe7T\xc4^\xe6\xb0\x1c\xcei\x9fh\xf7\x1ffV\x10\x14ds5\x19\xf4\x04\xe3vt\xf6\xa9\x82\xa0\x9f\x84\xbf\x9d\xd8\xfeU)\xba\xa6i>S\x99H\x89\fI\xc5\xbf', 0x40, 0x0, &(0x7f0000000040)) 02:29:26 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:29:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac", 0x88}], 0x1}}], 0x1, 0x0) 02:29:26 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040), 0x1c) 02:29:26 executing program 5: clock_gettime(0x9, &(0x7f0000000180)) 02:29:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8983, &(0x7f0000000000)={'batadv0\x00'}) 02:29:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0xc0189436, &(0x7f0000000000)={'batadv0\x00'}) [ 2278.625583][T20270] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2278.710745][T20275] kvm [20267]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:26 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0xd55f7690c19f06bc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 02:29:26 executing program 5: syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xb000200d}) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:29:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) close(r0) 02:29:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba900080000415cbacba7de89ca203a4bb4e1509f20db041424110214e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf161c3b634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b14deb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e6142fb23731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d77f4f07de17ece7304414ded690e20b1d092c30399b86f878f60294ac9bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc0b5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c81221b558f758136bd6ee4b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662d6089221d72fea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224565f9aedc5b676b15e7cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5d7f8feeae9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920197563912368037ad5e02ce52254437ac125eb1a39080f5b099a8bd85645e1fd0074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418f1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a7a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c1298f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf65832a56edf54c256564be934440629955910dc63f8d9f4d78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af821305e568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca75d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac", 0x88}], 0x1}}], 0x1, 0x0) 02:29:27 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:29:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x4, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:29:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 2279.506968][T20290] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2279.557036][T20294] kvm [20288]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:27 executing program 1: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 02:29:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac", 0x88}], 0x1}}], 0x1, 0x0) 02:29:28 executing program 5: r0 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x200000, 0x0) fcntl$setownex(r0, 0xf, 0x0) 02:29:28 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) [ 2280.399702][T20311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. 02:29:28 executing program 1: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r1, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 2280.464689][T20316] kvm [20309]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x4}) 02:29:28 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:29:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49", 0x89}], 0x1}}], 0x1, 0x0) 02:29:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) epoll_create1(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:29:29 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) [ 2281.325502][T20331] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2281.398644][T20337] kvm [20330]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b0, &(0x7f0000000000)={'batadv0\x00'}) 02:29:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x3, 0x3, &(0x7f0000001d00)=@framed, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 02:29:29 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:29 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) 02:29:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49", 0x89}], 0x1}}], 0x1, 0x0) 02:29:30 executing program 5: prlimit64(0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000800)) 02:29:30 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) fcntl$setownex(r0, 0x11, &(0x7f00000002c0)) [ 2282.335201][T20353] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2282.400586][T20358] kvm [20351]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8937, &(0x7f0000000000)={'batadv0\x00'}) 02:29:30 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 02:29:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000001540)="571c2c54177379c19e9cd4bebc252c8f5f21408ef2b06aac1e6441fc2b7e53fdd19b41e4c28cc25939bd9d18a1fd06b32364573015236a86d7d1a8ed96ee0bb519ca5ccd369ca3545469c1a90f0b7743e72551c3b7dc297da81a8f2d05e8fa2372fcaf23d8418ec22f1bb44ff7d72ef81021e3fd4bd5f57a3ef25bb477dc4f19291f1c18b8b2b4ac49", 0x89}], 0x1}}], 0x1, 0x0) 02:29:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000140)={'vxcan1\x00', @ifru_hwaddr=@remote}) 02:29:30 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) 02:29:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) close(r0) 02:29:31 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c3042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x800000000, 0x20000000, 0x0, 0x0, [0x0, 0x5a000]}) [ 2283.264190][T20375] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 2283.324142][T20381] kvm [20372]: vcpu0, guest rIP: 0x13c Hyper-V unhandled wrmsr: 0x40000024 data 0xf 02:29:31 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x94171c74}, 0x8) 02:29:31 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') ioctl$FS_IOC_RESVSP(r0, 0x4020940d, &(0x7f0000000200)) 02:29:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) 02:29:32 executing program 3: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000200)={@host}) 02:29:32 executing program 1: openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r0 = getgid() mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x28d800, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[{@allow_other='allow_other'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/cuse\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio='permit_directio'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfstransmute={'smackfstransmute'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type='appraise_type=imasig'}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x140, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 02:29:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f00000000c0)={'batadv0\x00'}) 02:29:32 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 02:29:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) close(0xffffffffffffffff) 02:29:32 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 02:29:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 02:29:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') ioctl$FS_IOC_RESVSP(r0, 0x4020940d, 0x0) [ 2285.199242][T20420] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.214805][T20420] bridge0: port 2(bridge_slave_1) entered disabled state 02:29:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) [ 2285.334928][T20419] tmpfs: Unknown parameter './bus' 02:29:33 executing program 5: rt_sigaction(0xc, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000480)) 02:29:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000200)) 02:29:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8970, 0x0) 02:29:33 executing program 4: ioctl$CHAR_RAW_RRPART(0xffffffffffffffff, 0x125f, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800c1f8e900000000ed160000de1f75"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1009, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = open(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "722fb5cb25a1afb9241cfb8357d3947e"}, 0x11, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) open$dir(0x0, 0x16d900, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x2010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000240), 0x0, 0x4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="88010000201fc9c8ba46ce18064887b094df148665e796a87103f85845b58d89aff346e6f25bbadba3968e7a139d6f70b5dcd4656da75dff1c72625025bc7f8f4460f874966d624574eee39ce872a6a03aa0cbfb9cb1263f6a0de2781c5a7f66cb7c4e", @ANYRES16=0x0, @ANYBLOB="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"], 0x188}}, 0x80000) 02:29:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='sched\x00') 02:29:34 executing program 2: rt_sigaction(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000480)) 02:29:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000a00)) 02:29:34 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 02:29:34 executing program 5: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x1fffff, 0x0, 0x27831, 0xffffffffffffffff, 0x0) 02:29:34 executing program 2: mremap(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000903000/0x3000)=nil) 02:29:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') read$FUSE(r0, 0x0, 0x0) 02:29:35 executing program 3: mq_open(&(0x7f0000000000)='-\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x800}) 02:29:35 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:35 executing program 2: mq_open(&(0x7f0000000000)='-\x00', 0x8c0, 0x0, 0x0) 02:29:36 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x81, 0x40042) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) 02:29:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) epoll_create1(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 02:29:36 executing program 2: socket(0x26, 0x5, 0x7ffffffe) 02:29:36 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x0) 02:29:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 02:29:36 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:29:36 executing program 2: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "81c3ba652f92d023", "b3341e9a6887b13fb26a7aef12168767", "0d050abd", "419772cf3191c5be"}, 0xfffffffffffffd22) 02:29:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) accept4(r0, &(0x7f00000002c0)=@isdn, 0x0, 0x0) 02:29:37 executing program 3: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000800)) 02:29:37 executing program 2: openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) getgid() mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x28d800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r1, {0x10001, 0x4, 0x0, {0x1, 0xf63, 0x9, 0x6, 0xe7, 0x53e140c3, 0x10001, 0x6, 0x1, 0x1000, 0x9bc1, 0xffffffffffffffff, 0xee00, 0x37}}}, 0x78) r2 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x140, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 02:29:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0) 02:29:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 02:29:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x541b, &(0x7f0000000200)) 02:29:38 executing program 3: openat$hwrng(0xffffff9c, 0x0, 0x410000, 0x0) 02:29:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000540)="580000001400add427323b472545b45602117fffffff81024e224e227f020001925aa8002056d5e7007b7a090080007f000001e809000000ff0000f069ccdcff748022510193639ee6c2f22a2f75f437e06c0dc202986aaa", 0x58}], 0x1) 02:29:38 executing program 2: r0 = openat$vcs(0xffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000000000)={'batadv0\x00'}) 02:29:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5e732255157598, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:29:38 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:29:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x705}, 0x14}}, 0x0) 02:29:38 executing program 5: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = openat$cuse(0xffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r0) 02:29:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f00000000c0)) 02:29:39 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) dup3(r1, r0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2, 0x14, 0x0) 02:29:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8912, &(0x7f0000000000)={'batadv0\x00'}) 02:29:39 executing program 4: r0 = openat$vcs(0xffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000000000)={'batadv0\x00'}) close(r0) 02:29:39 executing program 2: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) dup3(r0, r1, 0x0) 02:29:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x80000001, 0x1f}) 02:29:39 executing program 1: openat$nvram(0xffffff9c, 0x0, 0x4202, 0x0) 02:29:40 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 02:29:40 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000000)={'macvlan1\x00', @ifru_flags}) 02:29:41 executing program 5: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) close(r1) 02:29:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x705, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x0) 02:29:41 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x7b}]}) 02:29:41 executing program 2: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 02:29:41 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:29:42 executing program 1: syz_io_uring_setup(0x737e, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000000c0)) syz_io_uring_setup(0xaf6, &(0x7f0000000100)={0x0, 0x9469, 0xa}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 2295.785258][T28005] device hsr_slave_0 left promiscuous mode [ 2295.804067][T28005] device hsr_slave_1 left promiscuous mode [ 2295.816373][T28005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2295.824630][T28005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2295.843087][T28005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2295.850671][T28005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2295.867292][T28005] device bridge_slave_1 left promiscuous mode [ 2295.874358][T28005] bridge0: port 2(bridge_slave_1) entered disabled state [ 2295.896520][T28005] device bridge_slave_0 left promiscuous mode [ 2295.903682][T28005] bridge0: port 1(bridge_slave_0) entered disabled state [ 2295.939642][T28005] device veth1_macvtap left promiscuous mode [ 2295.945944][T28005] device veth0_macvtap left promiscuous mode [ 2295.952388][T28005] device veth1_vlan left promiscuous mode [ 2295.958222][T28005] device veth0_vlan left promiscuous mode [ 2300.722672][ T8846] Bluetooth: hci4: command 0x0409 tx timeout [ 2301.006484][T28005] team0 (unregistering): Port device team_slave_1 removed [ 2301.030945][T28005] team0 (unregistering): Port device team_slave_0 removed [ 2301.055928][T28005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2301.081189][T28005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2301.212175][T28005] bond0 (unregistering): Released all slaves [ 2301.314930][T20973] IPVS: ftp: loaded support on port[0] = 21 [ 2301.667387][T20973] chnl_net:caif_netlink_parms(): no params data found [ 2301.881169][T20973] bridge0: port 1(bridge_slave_0) entered blocking state [ 2301.888663][T20973] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.898701][T20973] device bridge_slave_0 entered promiscuous mode [ 2301.945498][T20973] bridge0: port 2(bridge_slave_1) entered blocking state [ 2301.953543][T20973] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.963668][T20973] device bridge_slave_1 entered promiscuous mode [ 2302.089796][T20973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2302.129802][T20973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2302.368534][T20973] team0: Port device team_slave_0 added [ 2302.393743][T20973] team0: Port device team_slave_1 added [ 2302.506034][T20973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2302.513263][T20973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2302.539514][T20973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2302.557786][T20973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2302.565168][T20973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2302.592521][T20973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2302.674914][T20973] device hsr_slave_0 entered promiscuous mode [ 2302.687469][T20973] device hsr_slave_1 entered promiscuous mode [ 2302.698700][T20973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2302.707306][T20973] Cannot create hsr debugfs directory [ 2302.802050][ T8504] Bluetooth: hci4: command 0x041b tx timeout [ 2303.217053][T20973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2303.261025][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2303.270247][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2303.290591][T20973] 8021q: adding VLAN 0 to HW filter on device team0 [ 2303.325230][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2303.336013][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2303.345459][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.352834][ T8508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2303.368326][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2303.385864][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2303.395952][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2303.407382][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.414756][ T8508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2303.466933][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2303.478176][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2303.489697][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2303.500229][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2303.551434][T20973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2303.562785][T20973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2303.579084][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2303.589480][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2303.600175][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2303.610747][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2303.620584][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2303.631234][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2303.641213][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2303.707780][T20973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2303.730410][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2303.740616][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2303.748684][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2303.976845][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2303.987019][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2304.088266][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2304.098333][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2304.127674][T20973] device veth0_vlan entered promiscuous mode [ 2304.137589][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2304.146984][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2304.188486][T20973] device veth1_vlan entered promiscuous mode [ 2304.268287][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2304.277867][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2304.287572][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2304.297790][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2304.321458][T20973] device veth0_macvtap entered promiscuous mode [ 2304.343332][T20973] device veth1_macvtap entered promiscuous mode [ 2304.379727][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2304.389551][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2304.447305][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2304.458043][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.469447][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2304.480099][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.490097][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2304.500680][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.510750][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2304.521329][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.531426][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2304.542088][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.556387][T20973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2304.568246][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2304.578465][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2304.605291][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2304.616512][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.626659][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2304.637298][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.647363][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2304.658008][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.668088][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2304.678764][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.688896][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2304.699535][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2304.713887][T20973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2304.725331][T20101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2304.735597][T20101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2304.881743][ T8846] Bluetooth: hci4: command 0x040f tx timeout [ 2305.025875][T28005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.034335][T28005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2305.069819][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2305.108761][T28005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.117217][T28005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2305.129489][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:29:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001540)='attr/sockcreate\x00') mq_getsetattr(r0, 0x0, 0x0) 02:29:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040), &(0x7f0000000080)=0x8) 02:29:53 executing program 2: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8}) 02:29:53 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 02:29:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8943, &(0x7f0000000000)={'batadv0\x00'}) 02:29:53 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8907, 0x0) 02:29:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) fchown(r0, 0xee01, 0x0) 02:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r0, r1) write$binfmt_script(r2, 0x0, 0x0) 02:29:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080), 0x4) 02:29:54 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) fchown(r0, 0xee01, 0xee00) [ 2306.349680][ T33] audit: type=1800 audit(1607740194.259:47): pid=21328 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16025 res=0 errno=0 [ 2306.369776][ T33] audit: type=1800 audit(1607740194.279:48): pid=21328 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16025 res=0 errno=0 02:29:54 executing program 3: setuid(0xee00) shmget(0x2, 0x2000, 0xc6, &(0x7f0000ffd000/0x2000)=nil) 02:29:54 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 02:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xfd) 02:29:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) write$tun(r0, 0x0, 0x0) 02:29:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x1, 0x40c5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) [ 2306.964278][ T9308] Bluetooth: hci4: command 0x0419 tx timeout 02:29:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x1d) 02:29:55 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:55 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x3) 02:29:55 executing program 2: r0 = timerfd_create(0x0, 0x0) fchmod(r0, 0x11) 02:29:55 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x3) 02:29:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 02:29:55 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) 02:29:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/112, &(0x7f0000000080)=0x70) 02:29:56 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) write$binfmt_misc(r0, 0x0, 0x0) 02:29:56 executing program 4: shmget(0x2, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) 02:29:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') flistxattr(r0, 0x0, 0x0) 02:29:56 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/223) 02:29:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:29:57 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x0, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:57 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$getown(r0, 0x9) 02:29:57 executing program 2: unshare(0xa020000) 02:29:57 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:29:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001400)='/dev/zero\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 02:29:57 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) r1 = epoll_create(0xb46) r2 = dup2(r0, r1) write$tun(r2, 0x0, 0x9d) 02:29:57 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = epoll_create(0xb46) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 02:29:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000020c0)) 02:29:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x54) 02:29:57 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) write$binfmt_script(r0, 0x0, 0x144) 02:29:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) 02:29:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x4) 02:29:59 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, 0x0) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:29:59 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x8) 02:29:59 executing program 4: r0 = inotify_init1(0x0) r1 = epoll_create(0xb46) dup2(r0, r1) 02:29:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000008bc0)={0x0, 0x0, 0x0}, 0x4000) 02:29:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setown(r0, 0x8, 0x0) 02:29:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000880)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 02:29:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 02:29:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000001580)) 02:29:59 executing program 4: semget$private(0x0, 0x7, 0x202) 02:29:59 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x1}) 02:29:59 executing program 1: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 02:30:00 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, &(0x7f00000013c0)=[{0x0}], 0x1, 0x0, 0x0, 0x10) 02:30:00 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, 0x0) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:30:00 executing program 4: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x1, 0x3) 02:30:00 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) write$binfmt_script(r0, 0x0, 0x0) 02:30:00 executing program 1: r0 = eventfd(0x0) write$binfmt_script(r0, 0x0, 0xa4) 02:30:00 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 02:30:00 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001280)='/dev/urandom\x00', 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) 02:30:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0xb46) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) 02:30:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) 02:30:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts, 0x8) 02:30:01 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = epoll_create(0xb46) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 02:30:01 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xc) 02:30:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)='I', 0x1) 02:30:02 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, 0x0) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 02:30:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x3) 02:30:02 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) r1 = epoll_create(0xb46) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 02:30:02 executing program 2: semget$private(0x0, 0x2, 0xa3) 02:30:02 executing program 1: semget$private(0x0, 0x3, 0x868) 02:30:02 executing program 5: semget$private(0x0, 0x1, 0x220) 02:30:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty}, 0x1c) 02:30:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 02:30:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) write$cgroup_type(r0, 0x0, 0x4) 02:30:03 executing program 4: semget$private(0x0, 0x2, 0x289) 02:30:03 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000400)={@local, @dev, @void, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x0, 0x6, "3a54a8", 0x30, 0x3a, 0x0, @ipv4={[], [], @broadcast}, @loopback, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "f81d36", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty}}}}}}}}, 0x0) 02:30:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, &(0x7f0000003800), 0x0, 0x0, 0x0, 0x4) 02:30:04 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:04 executing program 5: r0 = inotify_init1(0x0) fsetxattr$security_capability(r0, &(0x7f0000003ec0)='security.capability\x00', 0x0, 0x0, 0x0) 02:30:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f00000001c0), 0x0) 02:30:04 executing program 3: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x8) 02:30:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4001, 0x0) write$tun(r0, 0x0, 0x0) 02:30:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2b, 0x0, 0x0) 02:30:05 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0) 02:30:05 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_misc(r0, 0x0, 0x0) 02:30:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040848, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev}}, 0x1c) 02:30:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, 0xfffffffffffffef1) 02:30:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24004844, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:30:05 executing program 3: pipe(&(0x7f0000005400)={0xffffffffffffffff, 0xffffffffffffffff}) write$9p(r0, &(0x7f0000000000), 0x0) 02:30:06 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0xf) 02:30:06 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001180)='/dev/urandom\x00', 0xc4281, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 02:30:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100), 0x4) 02:30:06 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 02:30:06 executing program 3: pipe(&(0x7f0000005400)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0) 02:30:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000100), 0x4) 02:30:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0) 02:30:06 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1014c2, 0x0) 02:30:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x402, 0x0) pwritev2(r0, &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x10) 02:30:06 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) 02:30:07 executing program 5: open$dir(&(0x7f0000000100)='./file0\x00', 0xac4c1, 0x40) 02:30:08 executing program 3: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') r0 = geteuid() fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x100) 02:30:08 executing program 5: open$dir(&(0x7f0000000100)='./file0\x00', 0x6a4c2, 0x1f2) 02:30:08 executing program 4: r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000002140)=0x3) 02:30:08 executing program 1: open(&(0x7f0000000380)='./file0\x00', 0x10d040, 0x0) setresuid(0x0, 0xee01, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}) 02:30:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:08 executing program 2: creat(&(0x7f00000022c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8080, 0x0) [ 2320.582195][ T33] audit: type=1800 audit(1607740208.489:49): pid=22502 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16225 res=0 errno=0 [ 2320.676260][ T33] audit: type=1804 audit(1607740208.549:50): pid=22503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir935652240/syzkaller.E0Wp8Q/1920/file0" dev="sda1" ino=16241 res=1 errno=0 02:30:08 executing program 2: r0 = creat(&(0x7f00000022c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 02:30:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000500)) 02:30:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000002b40)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0, 0xfffffffffffffd6a}], 0x1, 0x0) 02:30:08 executing program 3: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x3b) 02:30:09 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = getuid() fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, 0x0, 0x0) 02:30:09 executing program 5: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 02:30:09 executing program 1: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') lremovexattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@known='user.incfs.size\x00') 02:30:10 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:10 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0xee00) mlockall(0x1) 02:30:10 executing program 2: r0 = socket(0x1, 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 02:30:10 executing program 3: open(&(0x7f0000001a80)='./file0\x00', 0xc040, 0x8) 02:30:10 executing program 5: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x9, &(0x7f0000ffd000/0x1000)=nil, 0x3) 02:30:10 executing program 1: r0 = socket(0x1, 0x3, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000180), 0x4) [ 2322.594929][ T33] audit: type=1800 audit(1607740210.509:51): pid=22655 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16372 res=0 errno=0 [ 2322.682956][ T33] audit: type=1800 audit(1607740210.539:52): pid=22655 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16372 res=0 errno=0 02:30:10 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x183540, 0x170) 02:30:10 executing program 3: r0 = memfd_create(&(0x7f0000000580)='}@{@]\x00', 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 02:30:11 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="fe", 0x1}], 0x1}, 0x0) 02:30:11 executing program 1: setresuid(0x0, 0xee01, 0x0) umount2(0x0, 0x0) 02:30:11 executing program 3: creat(&(0x7f0000000040)='./file1\x00', 0x0) open$dir(&(0x7f0000000080)='./file1\x00', 0x2e6203, 0x141) 02:30:11 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xee00, 0x1000) 02:30:12 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:12 executing program 5: r0 = creat(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x51) 02:30:12 executing program 1: open(&(0x7f0000000380)='./file0\x00', 0x10d040, 0x0) setresuid(0x0, 0xee01, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 02:30:12 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) 02:30:12 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) setresuid(0x0, 0xee01, 0x0) utime(&(0x7f0000001140)='./file0\x00', 0x0) 02:30:12 executing program 4: r0 = socket(0x1, 0x2, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) [ 2324.930920][ T33] audit: type=1800 audit(1607740212.839:53): pid=22813 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16186 res=0 errno=0 [ 2325.057209][ T33] audit: type=1804 audit(1607740212.969:54): pid=22820 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir577426361/syzkaller.TgK84C/1970/file0" dev="sda1" ino=16364 res=1 errno=0 02:30:13 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_LSEEK(r0, 0x0, 0xffffffffffffffdc) 02:30:13 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x100, 0xf0) 02:30:13 executing program 2: r0 = socket(0x1, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 02:30:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 02:30:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000000)) [ 2325.817477][ T33] audit: type=1804 audit(1607740213.729:55): pid=22895 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir908346336/syzkaller.ygfLRB/50/file0" dev="sda1" ino=16203 res=1 errno=0 02:30:14 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x0) 02:30:14 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:14 executing program 4: creat(&(0x7f00000022c0)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0xee00) lsetxattr$trusted_overlay_nlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 02:30:14 executing program 2: r0 = creat(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_LSEEK(r0, 0x0, 0xfffffc2d) 02:30:14 executing program 1: shmget(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) 02:30:14 executing program 5: creat(&(0x7f00000022c0)='./file0\x00', 0x0) open(&(0x7f0000000280)='./file0\x00', 0x22381, 0x15) 02:30:14 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_ATTR(r0, 0x0, 0xfffffffffffffe90) 02:30:14 executing program 3: get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000ff9000/0x1000)=nil, 0x4) 02:30:15 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000740), &(0x7f0000000780)=0x4) 02:30:15 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x30ddc0, 0x1e1) 02:30:15 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r0, 0x0, 0x8) 02:30:15 executing program 2: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00') 02:30:15 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x4f) 02:30:16 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:16 executing program 4: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:30:16 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x301, 0xdc) 02:30:16 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x2b, 0x3, 0x0, {0x0, 0xa, 0x0, '/dev/fuse\x00'}}, 0xffffffffffffffb3) 02:30:16 executing program 2: creat(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 02:30:16 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) setresuid(0x0, 0xee01, 0x0) utime(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)) [ 2328.809313][ T33] audit: type=1804 audit(1607740216.719:56): pid=23132 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir935652240/syzkaller.E0Wp8Q/1929/file0" dev="sda1" ino=16377 res=1 errno=0 [ 2328.960051][ T33] audit: type=1804 audit(1607740216.759:57): pid=23132 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir935652240/syzkaller.E0Wp8Q/1929/file0" dev="sda1" ino=16377 res=1 errno=0 [ 2328.985280][ T33] audit: type=1804 audit(1607740216.779:58): pid=23132 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir935652240/syzkaller.E0Wp8Q/1929/file0" dev="sda1" ino=16377 res=1 errno=0 02:30:16 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x8000) 02:30:17 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 02:30:17 executing program 1: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') llistxattr(&(0x7f0000002300)='./file0/file0\x00', 0x0, 0x0) 02:30:17 executing program 3: r0 = socket(0x1, 0x5, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) 02:30:17 executing program 2: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 02:30:17 executing program 4: symlinkat(&(0x7f00000002c0)='./file0/file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 02:30:18 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0), 0x4) 02:30:18 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000002b40), 0x0, 0x80) 02:30:18 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x8400, 0xf0) 02:30:18 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x201, 0x84) 02:30:18 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) [ 2330.739899][ T33] audit: type=1804 audit(1607740218.649:59): pid=23287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir577426361/syzkaller.TgK84C/1978/file0" dev="sda1" ino=16364 res=1 errno=0 02:30:18 executing program 1: get_mempolicy(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000ff9000/0x1000)=nil, 0x4) 02:30:18 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xee00, 0x0) 02:30:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0xfffffffffffffe58) 02:30:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) connect(r0, 0xfffffffffffffffe, 0x0) 02:30:19 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x201, 0x16d) 02:30:19 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000002140)=@file={0x1, './file0\x00'}, 0x6e) 02:30:20 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 02:30:20 executing program 5: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000100)='./file0/file0\x00', 0x0) 02:30:20 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40002, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x49) 02:30:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000000)=@isdn, 0x80, 0x0}, 0x0) 02:30:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @default, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x80, 0x0}, 0x0) 02:30:20 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010101}, 0x80) 02:30:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/zero\x00', 0x40002, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 02:30:20 executing program 3: creat(&(0x7f00000022c0)='./file0\x00', 0x0) setresuid(0x0, 0xee01, 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) 02:30:20 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) close(r0) syz_open_procfs(0x0, &(0x7f0000000340)='net/udp\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 02:30:20 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$FUSE_BMAP(r0, 0xfffffffffffffffe, 0x0) 02:30:20 executing program 5: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0/file0/file0\x00', 0x0) 02:30:21 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 02:30:22 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 02:30:22 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0xa2f03, 0x1c) 02:30:22 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x88) 02:30:22 executing program 4: io_setup(0x0, &(0x7f0000000040)=0x0) io_getevents(r0, 0x3, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) 02:30:22 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) 02:30:22 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x0) [ 2334.636850][ T33] audit: type=1804 audit(1607740222.548:60): pid=23599 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir577426361/syzkaller.TgK84C/1982/file0" dev="sda1" ino=16364 res=1 errno=0 02:30:22 executing program 5: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0/file0/file0\x00', 0x0) 02:30:22 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x6e4c2, 0x0) 02:30:22 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x88) 02:30:22 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000004a40), 0x0, 0x40) 02:30:22 executing program 3: r0 = socket(0x1, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) 02:30:23 executing program 5: open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000002b40)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="ee", 0x1}, {&(0x7f0000000280)="657c5d6c60eea34fb38045fdf3dd60ed6931d635d6e1459f2d1d33e793a06b0698a6f1bf9af1fce1d532f56a2b4c222a412a77224b410b80325b4523338327171f3302e987178e300c6ed8a410d0dd65e275bbd9c18c7aa04517b9c425297043daf583057568f49273f23efe4d8fdde1f7eb963a7200acc97832418a7d67e552610accbb211fbc9ea1d44f782c6f0b976047e145a5a23ed6d486464d4924740d7da2b79f67a243131fceca70ab841a79dad6944210e9f00404137d1cdf1713a49b2762db76de6bee997b5faa3f46bc9fe94ce2b21e55f7e44c27e46519e76a50b3fcf13740a2167d520298", 0xeb}, {&(0x7f0000000000)="8b69dbaa7102ba6aab139d598c3c6629bbb84ebf8a95468ab309246692d9b26c1597d85a55b53afa883887089df526e9b3fa1b65994b499710501ce9d58db34cc23ca2b2e9112e0a6c32a7fd0e1ff4e57663e5ca", 0x54}], 0x13}], 0x1, 0x0) 02:30:24 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 02:30:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x0, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:30:24 executing program 1: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1e, 0x1000, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0xf0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) pipe(&(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0)='l2tp\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000009c0)='fou\x00') 02:30:24 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x88) 02:30:24 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 02:30:24 executing program 5: accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001b00), 0x8) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 02:30:24 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x88) 02:30:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x17, &(0x7f0000000040)={0x0, 0x1006}, 0x4) 02:30:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0xc, 0xc, 0x5, [@typedef]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000580)=""/208, 0x29, 0xd0, 0x1}, 0x20) 02:30:25 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 02:30:25 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 02:30:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)='\"', 0x1}], 0x2}, 0x0) 02:30:26 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:26 executing program 2: socketpair(0x8, 0x0, 0x0, &(0x7f0000000900)) 02:30:26 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f0000000100)=0x2b) 02:30:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x5451, 0x0) 02:30:26 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000002cc0)) 02:30:26 executing program 4: r0 = socket(0x18, 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:30:26 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)) 02:30:26 executing program 5: r0 = socket(0x2, 0x3, 0xe6) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) 02:30:26 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0xc}, 0xc) 02:30:26 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x40047452, 0x0) 02:30:26 executing program 4: bpf$MAP_CREATE(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 02:30:27 executing program 3: setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) 02:30:28 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:28 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, &(0x7f0000000040)={0x0, 0x1006}, 0x4) 02:30:28 executing program 1: r0 = socket(0x2, 0x3, 0xe6) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) 02:30:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0) 02:30:28 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001b80)={'batadv0\x00'}) 02:30:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0xe}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000580)=""/208, 0x28, 0xd0, 0x1}, 0x20) 02:30:28 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffd3d) 02:30:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x2d, 0x0, &(0x7f0000000040)) 02:30:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f00000000c0)="06", 0x1}], 0x3}, 0x0) 02:30:28 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x119c0, 0x0) 02:30:28 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f00000032c0)) 02:30:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x3}, {}, {}]}]}}, &(0x7f0000000a40)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) [ 2341.288068][T24133] can: request_module (can-proto-0) failed. [ 2341.352976][T24133] can: request_module (can-proto-0) failed. 02:30:29 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:29 executing program 5: pipe(&(0x7f0000000840)={0xffffffffffffffff}) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 02:30:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$isdn_base(0x22, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1}, 0x0, &(0x7f0000000180)={0x80}, 0x0, 0x0) 02:30:29 executing program 3: r0 = socket(0x2c, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 02:30:29 executing program 4: socketpair(0x1, 0x0, 0x0, &(0x7f0000004440)) 02:30:29 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect(r0, &(0x7f0000000240)=@can, 0x80) 02:30:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x40) 02:30:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x2}]}}, &(0x7f0000000580)=""/208, 0x26, 0xd0, 0x1}, 0x20) 02:30:30 executing program 5: select(0x40, &(0x7f0000000200), 0x0, &(0x7f0000000280), &(0x7f00000002c0)) 02:30:30 executing program 1: socketpair(0x1, 0x0, 0x8, &(0x7f0000004440)) 02:30:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x40, 0x0, 0x0, 0x0, 0x400003}, 0x14) 02:30:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x5000000, 0x0, 0x0, 0x2}}, &(0x7f0000000580)=""/208, 0x1a, 0xd0, 0x1}, 0x20) 02:30:31 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:31 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) 02:30:31 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x7) 02:30:31 executing program 1: syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 02:30:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) 02:30:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000240)) 02:30:32 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) 02:30:32 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x12, 0x0, &(0x7f0000000040)) 02:30:32 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x10101, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 02:30:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) connect$netrom(r2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000006340)='team\x00') 02:30:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x1, &(0x7f0000000bc0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000c40)='syzkaller\x00', 0x1, 0xe1, &(0x7f0000000d80)=""/225, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:30:32 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f0000001680)) 02:30:33 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:33 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000500)) 02:30:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000005c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:30:33 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r0, 0x0, 0x0, 0x2731dbf9ade625fa, 0x0, 0x0) 02:30:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000ac0)='team\x00') 02:30:33 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') 02:30:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3e8, 0x3a0, 0x1c8, 0xffffffff, 0x2e8, 0x1c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'sit0\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syz_tun\x00', 'vcan0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'veth0_vlan\x00', 'vxcan1\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4=@multicast1, @icmp_id, @gre_key}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4=@multicast1, @port, @icmp_id}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 02:30:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000600)="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", 0xec1}], 0x3}, 0x0) 02:30:34 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000001400)={&(0x7f0000000180)=@id, 0x10, 0x0}, 0x0) 02:30:34 executing program 3: syz_genetlink_get_family_id$team(&(0x7f0000006340)='team\x00') 02:30:34 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2}, {0x3}, {0x8}, {}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000a40)=""/4096, 0x48, 0x1000, 0x1}, 0x20) 02:30:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x0, 0x0, 0xffffff80, 0x0, 0x1}, 0x40) 02:30:35 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) 02:30:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000580)=""/208, 0x1a, 0xd0, 0x1}, 0x20) 02:30:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 02:30:35 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000700)=@nat={'nat\x00', 0x19, 0x3, 0x31c, [0x20000200, 0x0, 0x0, 0x20000548, 0x2000069a], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x0, 0x0, 0x0, 'rose0\x00', 'veth1\x00', 'ip6erspan0\x00', '\x00', @remote, [], @broadcast, [], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10}}, {0x0, 0x0, 0x0, 'bridge0\x00', 'ip6gretap0\x00', '\x00', 'geneve1\x00', @empty, [], @local, [], 0x6e, 0x19e, 0x1e6, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, '/usr/sbin/cups-browsed\x00'}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x35c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000780)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) 02:30:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1}, 0x40) 02:30:35 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:35 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) 02:30:35 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, &(0x7f0000000040), 0x4) 02:30:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x5, 0x0, 0x11b}, 0x40) 02:30:35 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x80047437, 0x0) 02:30:36 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 02:30:36 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x600007bd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 02:30:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000140)={0x24, r1, 0x615, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 02:30:37 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:37 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) recvmsg$can_j1939(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 02:30:37 executing program 5: r0 = socket(0x25, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:30:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x2000000}, 0x40) 02:30:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)="220bc31b7806ef874f51d384232bd94bc8fe77658ea51e23", 0x18}], 0x2}, 0x0) 02:30:37 executing program 3: bpf$MAP_CREATE(0x14, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 02:30:37 executing program 5: socketpair(0x28, 0xa, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x30, 0x0, 0x8, 0x4, 0x80}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x10101, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000001c0)) 02:30:37 executing program 1: r0 = getpid() syz_open_procfs$namespace(r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) 02:30:38 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000140)=""/251, 0x32, 0xfb, 0x1}, 0x20) 02:30:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x8a8, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x40) 02:30:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 02:30:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000580)=""/208, 0x36, 0xd0, 0x1}, 0x20) 02:30:39 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:39 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:30:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 02:30:39 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x401, 0x0) 02:30:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000cc0), 0x8) 02:30:39 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x11}}, &(0x7f0000000580)=""/208, 0x1a, 0xd0, 0x1}, 0x20) 02:30:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000a40)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 02:30:39 executing program 1: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 02:30:39 executing program 3: socketpair(0x2, 0xa, 0x0, &(0x7f00000002c0)) 02:30:39 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb}]}]}}, &(0x7f0000000a40)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 02:30:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000010000000000544f4a346e"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc4, &(0x7f0000000340)=""/196, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:30:40 executing program 2: r0 = socket(0x2, 0x3, 0xe6) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x401}, 0x4) 02:30:41 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 02:30:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, &(0x7f0000000040), 0x4) 02:30:41 executing program 3: socketpair(0x11, 0x0, 0x0, &(0x7f0000000040)) 02:30:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x28}}, 0x0) 02:30:41 executing program 4: r0 = socket(0x25, 0x1, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 02:30:41 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 02:30:41 executing program 2: pipe(&(0x7f0000000240)) 02:30:41 executing program 3: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x680}, &(0x7f00000000c0)={0x77359400}) 02:30:41 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x14) 02:30:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8953, &(0x7f00000000c0)={0x0, 'caif0\x00'}) 02:30:41 executing program 4: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 02:30:42 executing program 3: r0 = socket(0x2, 0x3, 0xe6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00'}) 02:30:42 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 02:30:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:30:42 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 02:30:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1}, 0x40) 02:30:42 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 02:30:42 executing program 3: socketpair(0xf, 0x3, 0x0, &(0x7f0000000440)) 02:30:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x5421, &(0x7f00000000c0)={0x0, 'caif0\x00'}) 02:30:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a40)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 02:30:43 executing program 2: bpf$MAP_DELETE_BATCH(0x9, 0x0, 0x0) 02:30:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000a40)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 02:30:43 executing program 3: socketpair(0x0, 0x1000, 0x0, 0x0) 02:30:44 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e0, &(0x7f0000000000)) 02:30:44 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 02:30:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 02:30:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 02:30:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000180)) 02:30:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x541b, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0xff}) 02:30:44 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x220000, 0x0) 02:30:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000ac0)='team\x00') 02:30:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @local}, 0x1c) 02:30:45 executing program 2: getsockname$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge0\x00', {}, 0xdb0}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x35, 0x40000) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x81) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b00)='batadv\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) listen(r2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000016c0), 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000001800)={&(0x7f0000001700), 0xc, &(0x7f00000017c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x40080d4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001940)={r3, r3, 0x12}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = gettid() ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r6) write$cgroup_pid(r3, &(0x7f0000000280)=r6, 0x12) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f000000bbc0)={&(0x7f000000bb00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000bb80)={&(0x7f000000bb40)={0x1c, r1, 0x8, 0x200, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) 02:30:45 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000100)) 02:30:45 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000040)) 02:30:46 executing program 5: pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000880)='d', 0x1) 02:30:46 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 02:30:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000005c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 02:30:46 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x541b, &(0x7f00000000c0)={0x0, 'caif0\x00'}) 02:30:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0xa}]}]}}, &(0x7f0000000140)=""/251, 0x32, 0xfb, 0x1}, 0x20) 02:30:46 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) pipe(0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000006340)='team\x00') 02:30:46 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote={[], 0x3}, 0x0, 'veth1_vlan\x00'}) 02:30:47 executing program 5: pipe(&(0x7f00000009c0)={0xffffffffffffffff}) connect$netrom(r0, 0x0, 0x0) 02:30:47 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x25, 0x0, &(0x7f0000000100)) 02:30:47 executing program 3: bpf$MAP_CREATE(0x16, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 02:30:47 executing program 1: pipe(&(0x7f0000000700)={0xffffffffffffffff}) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x0) 02:30:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:30:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="9018de5e6267d0454654ec61", 0xc}, {&(0x7f0000000080)="220bc31b7806ef874f51d384232bd94bc8fe77658ea51e23011d5e", 0x1b}], 0x2}, 0x24004045) 02:30:48 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:30:48 executing program 3: r0 = socket(0x2, 0x3, 0xe6) connect$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 02:30:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, 0x0, 0x0, 0xb724495ba4aff2a9) 02:30:48 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000001c0)={0xec4, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "208c4303110e0940df536b75e83445ed66d5afc8da933d98bb87e7d59e70ff59cf853dc96bb6f421dc83941ed4d5244cbdc94aede764c42753c9f39da6db30e5f270ead932d8fc86601ef39b3a6c501f1a3be4d297c72a337891dcfa30ef4dcfc7180a32c315996ba8726d52ae9ca3ac4fcc7ce01d9cb2a210ab3907037ec6abdb5a21adf91e01fd3d45f9b60cfd92027a6b82ff81ddf0b23d08d16d75f2c97e73aedb031b204a4debe53b82e693320899d889194369a95bd9091474c93beaaec0d9cfea265293d925afee06b996b031c528cc766065acecf16c3ad0bd"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "5e2cf5f461d410a9876a07309ba78615f5d6fdd1dfa7b3c66079068d4195c78afe103679e310e53b3e15ac23bbf362e0cb209a94baa97092d5adeefca2"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "64957b6c6b5556ea02ee396a241990b7917bc4a807cead2a7a7384879de7efbc55957d8b6c8b09c804e988186db62a64b5d53256cbc6eff1edc9c0d34e7fedc7a83e017b8a6c24475f5f5ff1704890d4d23a753cbc4783cc5f6e0b731140d7bce487e5ce0141f1765932b501b65d1f70e238fa52304087919819c0fd24bab0ac7e26d1b254fe23a0accc09c3c1d79ea19dd56b4790ee0319a020596579f5d5acf449481a0627c5b38f3930e07ade0c54e283e767a5"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "b371d82750a6bdcba1c557174e74ca493458c300ec0bf2a558ade313f18a925d52a405e8e377a95443f6988f558e05a8aaa9d1f4a7da0e5156e74b437f06e9bb1e1ba2b7648ed02c47dc7ffbc714a60e13c95fcac1527403186c0f367b520dea09382855813168dadca61b8d1713b74493d6476b4f5facf9ce0dda12f3c8f8c0229f4de91b20bda175b8cb8007598ed567c366183e5a4b0faaedb2155481cdf3dcaea8a75ec2fa8592"}, @INET_DIAG_REQ_BYTECODE={0xbe1, 0x1, "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"}]}, 0xec4}}, 0x0) 02:30:48 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00') 02:30:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, &(0x7f0000000000)="e00ac3", 0x3, 0x0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @rand_addr=0x64010100}, 0x80) 02:30:49 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 02:30:49 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 02:30:49 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) 02:30:49 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000001100)={'ip6_vti0\x00', 0x0}) 02:30:49 executing program 5: pipe(&(0x7f0000000700)) 02:30:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:30:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:30:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x8001, 0xb4, &(0x7f00000000c0)=""/180, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:30:50 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x5d1400, 0x0) 02:30:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt(r0, 0x1, 0x6, &(0x7f00000000c0)="37c19c51", 0x4) 02:30:50 executing program 1: r0 = inotify_init() fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfffffffffffffebe, 0x0) 02:30:50 executing program 4: pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$FUSE_OPEN(r1, 0x0, 0x0) 02:30:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000002900)=ANY=[], 0x672) r2 = dup(r0) read$FUSE(r2, 0x0, 0x0) 02:30:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) write$FUSE_STATFS(r1, 0x0, 0x0) 02:30:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0xfffffffffffffeb0) 02:30:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x68) 02:30:51 executing program 5: pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) fcntl$dupfd(r0, 0x0, r1) 02:30:51 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$FUSE_BMAP(r2, 0x0, 0x0) 02:30:52 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0) 02:30:52 executing program 4: mprotect(&(0x7f0000b54000/0x1000)=nil, 0x1000, 0x8) 02:30:52 executing program 2: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) 02:30:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_LSEEK(r2, 0x0, 0xfd37) 02:30:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/psched\x00') write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 02:30:52 executing program 1: pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$FUSE_IOCTL(r1, 0x0, 0x0) 02:30:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x20, &(0x7f0000002c00)={0x0, 0x3938700}) 02:30:52 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) 02:30:53 executing program 5: pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfffffda4) 02:30:53 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x470682, 0x0) 02:30:53 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) 02:30:53 executing program 4: shmget(0x3, 0x4000, 0x200, &(0x7f0000b54000/0x4000)=nil) 02:30:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00') write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 02:30:54 executing program 1: mprotect(&(0x7f0000b54000/0x1000)=nil, 0x1000, 0x2000000) 02:30:54 executing program 3: semget$private(0x0, 0x8, 0x600) 02:30:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_LSEEK(r2, 0x0, 0x0) 02:30:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002c00)={0x0, 0x3938700}) 02:30:54 executing program 0: pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$cgroup_int(r1, 0x0, 0x0) 02:30:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) dup2(r1, r2) 02:30:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$dupfd(r1, 0x0, r0) 02:30:54 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 02:30:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) getpeername$netlink(r1, 0x0, 0x0) 02:30:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) 02:30:55 executing program 2: pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) 02:30:55 executing program 4: semget$private(0x0, 0x2, 0xc00) 02:30:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) dup2(r2, r1) 02:30:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(r1, 0x0, r0) 02:30:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@dev, @broadcast}, &(0x7f00000002c0)=0xc) 02:30:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$getownex(r0, 0x10, 0x0) 02:30:55 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000004300)='nl80211\x00') syz_open_dev$vcsu(&(0x7f0000005600)='/dev/vcsu#\x00', 0x3, 0x20080) 02:30:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) dup2(r0, r1) 02:30:56 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) write$FUSE_LSEEK(r1, 0x0, 0x0) 02:30:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)={0xffffffffffffffff}) dup2(r0, r1) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), 0x4) 02:30:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_OPEN(r2, 0x0, 0x41) 02:30:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)={0xffffffffffffffff}) dup2(r0, r1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) 02:30:56 executing program 5: semget$private(0x0, 0x1, 0x58) 02:30:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) 02:30:56 executing program 2: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r0) fcntl$dupfd(r2, 0x0, r1) 02:30:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000c00)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, 0x0}, 0x700) 02:30:56 executing program 0: mprotect(&(0x7f0000b54000/0x1000)=nil, 0x1000, 0x2000003) 02:30:57 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_STATFS(r0, 0x0, 0x0) 02:30:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0xfffffd76) 02:30:57 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) 02:30:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:30:57 executing program 0: r0 = inotify_init1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) 02:30:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) 02:30:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) 02:30:57 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = dup(r0) dup(r1) 02:30:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x2040, 0x0) 02:30:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r0, r1) 02:30:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) write$FUSE_LK(r1, 0x0, 0x0) 02:30:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) 02:30:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) 02:30:58 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) dup(r0) 02:30:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_POLL(r1, 0x0, 0x0) 02:30:58 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) 02:30:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = dup(r1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) 02:30:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = dup2(r2, r1) setsockopt$inet_udp_int(r3, 0x11, 0xa, 0x0, 0x0) 02:30:58 executing program 4: pipe(&(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(r0, 0x0, 0x0) 02:30:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) 02:30:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) write$cgroup_pid(r2, 0x0, 0x0) 02:30:59 executing program 5: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000020c0)={{0x0, 0xee01, 0xee01, 0xffffffffffffffff}}) 02:30:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)={{}, "2a6d871b3da9a89164b320dfa9a4b52c99687fd128a31f5c49624c3efcd9e735d38db6db29369d18b358afb07e5fa2bae5f8dfe15363aa0e14cc518bf43b1b151d47788d5929b56f4d7e8a07a30322127cd9b700fdcc352cffb6c940a7ac45e1b5dab41ddba8db8919825e37ded2ea1795c81d3cdefa5e728bef160deb5350a6bbdf11255db47554450ebc4413bdec3f6d496aafa32261e7180136f8eced257d3cdb1f4c01a99d2ccd2f1e21686c4563427af249fb1700a284c17c88fc259f1af8fec0985b13d788741a5c5e8baafaddc4ef0000", [[]]}, 0xfffffffffffffe4c) 02:30:59 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 02:30:59 executing program 4: semget$private(0x0, 0x4, 0x380) 02:30:59 executing program 1: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$FUSE_ENTRY(r2, 0x0, 0x0) 02:30:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000002600)=@broute={'broute\x00', 0x20, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001cc0], 0x0, 0x0, 0x0}, 0x996) 02:30:59 executing program 5: pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) 02:30:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup2(r1, r2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, 0x0, 0x0) 02:31:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040, 0x0) 02:31:00 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_int(r0, 0x0, 0xffffff81) 02:31:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f80)=@filter={'filter\x00', 0xe, 0x4, 0xee0, [0x0, 0x20000080, 0x200000b0, 0x200001fe], 0x0, 0x0, 0x0}, 0xf72) 02:31:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) 02:31:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x2040, &(0x7f00000000c0)={0x77359400}) 02:31:00 executing program 5: r0 = inotify_init1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) write$cgroup_int(r2, 0x0, 0x0) 02:31:00 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 02:31:00 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x0) 02:31:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) write$FUSE_GETXATTR(r1, 0x0, 0x0) 02:31:01 executing program 2: r0 = inotify_init1(0x0) r1 = inotify_init() fcntl$dupfd(r1, 0x0, r0) 02:31:01 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) 02:31:01 executing program 5: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) 02:31:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) read$FUSE(r1, 0xfffffffffffffffe, 0x0) 02:31:01 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000080)="05", 0x1) 02:31:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = dup2(r2, r3) setsockopt$inet_udp_int(r4, 0x11, 0x67, 0x0, 0x0) 02:31:02 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 02:31:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040, &(0x7f00000000c0)={0x77359400}) 02:31:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RREADLINK(r1, 0x0, 0x0) 02:31:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = dup2(r2, r1) setsockopt$inet_udp_int(r3, 0x11, 0xb, 0x0, 0x0) 02:31:02 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) 02:31:02 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_int(r1, 0x0, 0x0) 02:31:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, 0x0, 0x0) 02:31:02 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = dup2(r0, r0) fcntl$getownex(r1, 0x10, 0x0) 02:31:02 executing program 2: semget$private(0x0, 0x3, 0x21d) 02:31:02 executing program 3: pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ENTRY(r0, 0x0, 0x0) 02:31:02 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 02:31:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001300)=""/4099, 0x2e, 0x1003, 0x1}, 0x20) 02:31:03 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000080)='^', 0x1}, {0x0}, {0x0}], 0x3) 02:31:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000300)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 02:31:03 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 02:31:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) dup(r1) 02:31:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000000)=@proc, 0xc) 02:31:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006a40)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:31:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040), 0x4) 02:31:03 executing program 4: socketpair(0xa, 0x2, 0x3a, &(0x7f00000000c0)) 02:31:03 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0xe, 0x5}]}]}}, &(0x7f0000001300)=""/4099, 0x36, 0x1003, 0x1}, 0x20) 02:31:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 02:31:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f0000000500)={'gre0\x00', 0x0}) 02:31:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001580)={0x0, 0x1, 0x6, @remote}, 0x10) 02:31:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8913, &(0x7f0000000500)={'gre0\x00', 0x0}) 02:31:04 executing program 4: socket$inet(0x2, 0xa, 0x0) socket$inet(0x2, 0xa, 0x0) 02:31:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040054) 02:31:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) 02:31:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 02:31:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x66, &(0x7f0000000040), 0x4) 02:31:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x4020940d, &(0x7f0000000040)={0x7, 'vlan0\x00'}) 02:31:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}}, 0x0) 02:31:05 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5421, &(0x7f0000000040)) 02:31:05 executing program 5: socketpair(0xa, 0x0, 0x416d, &(0x7f0000000080)) 02:31:05 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) 02:31:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x4}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000240)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:31:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x3, 0x4) 02:31:05 executing program 1: socketpair(0x11, 0xa, 0x3, &(0x7f0000000000)) 02:31:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="69705f76749a3dd52eafc362f0001500", @ANYRES32, @ANYBLOB='x\x00x']}) 02:31:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f00000012c0)=[{{&(0x7f0000000000)=@hci, 0x80, 0x0}}], 0x1, 0x20040054) 02:31:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x5451, 0x0) 02:31:06 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, @l2tp={0x2, 0x0, @broadcast}, @nfc, @tipc=@id, 0xd4c}) 02:31:06 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000240)=""/160, 0x0, 0x0, [0x71], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:31:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f00000004c0)) 02:31:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "367825ffe91f3872a8309585"}, 0x10) 02:31:06 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000a40)={@link_local, @empty, @void, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@generic={0x0, 0x9, "e5bf96c72fa0cf"}, @cipso={0x86, 0x2d, 0x0, [{0x0, 0x12, "6ba1f668d8956b62698c8052455d61e7"}, {0x0, 0xc, "d1cad684b31622bcf5c8"}, {0x0, 0x7, "3bbc6f3541"}, {0x0, 0x2}]}, @lsrr={0x83, 0x7, 0x0, [@loopback]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 02:31:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}}}}) 02:31:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000140)) 02:31:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x88, 0xb, 0x0, 0x0) 02:31:06 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x29, 0xff, 0x0, 0x1270, 0x20, @dev={0xfe, 0x80, [], 0x43}, @remote, 0x20, 0x7800, 0x8}}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x40, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xcba}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x800) 02:31:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x5452, &(0x7f0000000040)={0x7, 'vlan0\x00'}) 02:31:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 02:31:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 02:31:07 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5452, &(0x7f0000000040)) 02:31:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x5}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000240)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:31:07 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8, 0xbc}, 0x1c) bpf$ITER_CREATE(0x21, 0x0, 0x0) 02:31:07 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/386], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000094100000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000004000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008071fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 02:31:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0x3, 0x4) 02:31:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000001c0)=@framed={{0x73}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000240)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:31:07 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_lsm={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:31:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000240)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:31:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40) 02:31:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0xc0189436, 0x0) [ 2380.557413][T26601] ===================================================== [ 2380.561883][T26601] BUG: KMSAN: uninit-value in __map_kernel_range_noflush+0xae4/0x11b0 [ 2380.561883][T26601] CPU: 0 PID: 26601 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 2380.561883][T26601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2380.561883][T26601] Call Trace: [ 2380.561883][T26601] dump_stack+0x21c/0x280 [ 2380.561883][T26601] kmsan_report+0xf7/0x1e0 [ 2380.561883][T26601] __msan_warning+0x5f/0xa0 [ 2380.561883][T26601] __map_kernel_range_noflush+0xae4/0x11b0 [ 2380.561883][T26601] ? kmalloc_order+0x193/0x390 [ 2380.561883][T26601] kmsan_map_kernel_range_noflush+0x1b4/0x210 [ 2380.561883][T26601] __vmalloc_node_range+0xcb7/0x12f0 [ 2380.561883][T26601] vzalloc+0xe0/0xf0 [ 2380.561883][T26601] ? packet_set_ring+0x10ac/0x45b0 [ 2380.561883][T26601] ? packet_set_ring+0x10ac/0x45b0 [ 2380.561883][T26601] packet_set_ring+0x10ac/0x45b0 [ 2380.561883][T26601] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2380.561883][T26601] ? kmsan_internal_set_origin+0x85/0xc0 [ 2380.561883][T26601] ? _copy_from_user+0x1cd/0x2d0 [ 2380.561883][T26601] packet_setsockopt+0x218f/0x75f0 [ 2380.561883][T26601] ? packet_ioctl+0x500/0x500 [ 2380.561883][T26601] __sys_setsockopt+0x951/0xda0 [ 2380.561883][T26601] __se_sys_setsockopt+0xdd/0x100 [ 2380.561883][T26601] __ia32_sys_setsockopt+0x62/0x80 [ 2380.561883][T26601] __do_fast_syscall_32+0x102/0x160 [ 2380.561883][T26601] do_fast_syscall_32+0x6a/0xc0 [ 2380.561883][T26601] do_SYSENTER_32+0x73/0x90 [ 2380.561883][T26601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2380.561883][T26601] RIP: 0023:0xf7f8c549 [ 2380.561883][T26601] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2380.561883][T26601] RSP: 002b:00000000f55860cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2380.561883][T26601] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000107 [ 2380.561883][T26601] RDX: 000000000000000d RSI: 0000000020000040 RDI: 000000000000001c [ 2380.561883][T26601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2380.561883][T26601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2380.561883][T26601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2380.561883][T26601] [ 2380.561883][T26601] Local variable ----regs@__bpf_prog_run32 created at: [ 2380.561883][T26601] __bpf_prog_run32+0x84/0x190 [ 2380.561883][T26601] __bpf_prog_run32+0x84/0x190 [ 2380.561883][T26601] ===================================================== [ 2380.561883][T26601] Disabling lock debugging due to kernel taint [ 2380.561883][T26601] Kernel panic - not syncing: panic_on_warn set ... [ 2380.561883][T26601] CPU: 0 PID: 26601 Comm: syz-executor.0 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 2380.561883][T26601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2380.561883][T26601] Call Trace: [ 2380.561883][T26601] dump_stack+0x21c/0x280 [ 2380.561883][T26601] panic+0x4c8/0xea7 [ 2380.561883][T26601] ? add_taint+0x17c/0x210 [ 2380.561883][T26601] kmsan_report+0x1da/0x1e0 [ 2380.561883][T26601] __msan_warning+0x5f/0xa0 [ 2380.561883][T26601] __map_kernel_range_noflush+0xae4/0x11b0 [ 2380.561883][T26601] ? kmalloc_order+0x193/0x390 [ 2380.561883][T26601] kmsan_map_kernel_range_noflush+0x1b4/0x210 [ 2380.561883][T26601] __vmalloc_node_range+0xcb7/0x12f0 [ 2380.561883][T26601] vzalloc+0xe0/0xf0 [ 2380.561883][T26601] ? packet_set_ring+0x10ac/0x45b0 [ 2380.561883][T26601] ? packet_set_ring+0x10ac/0x45b0 [ 2380.561883][T26601] packet_set_ring+0x10ac/0x45b0 [ 2380.561883][T26601] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 2380.561883][T26601] ? kmsan_internal_set_origin+0x85/0xc0 [ 2380.561883][T26601] ? _copy_from_user+0x1cd/0x2d0 [ 2380.561883][T26601] packet_setsockopt+0x218f/0x75f0 [ 2380.561883][T26601] ? packet_ioctl+0x500/0x500 [ 2380.561883][T26601] __sys_setsockopt+0x951/0xda0 [ 2380.561883][T26601] __se_sys_setsockopt+0xdd/0x100 [ 2380.561883][T26601] __ia32_sys_setsockopt+0x62/0x80 [ 2380.561883][T26601] __do_fast_syscall_32+0x102/0x160 [ 2380.561883][T26601] do_fast_syscall_32+0x6a/0xc0 [ 2380.561883][T26601] do_SYSENTER_32+0x73/0x90 [ 2380.561883][T26601] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2380.561883][T26601] RIP: 0023:0xf7f8c549 [ 2380.561883][T26601] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2380.561883][T26601] RSP: 002b:00000000f55860cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2380.561883][T26601] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000107 [ 2380.561883][T26601] RDX: 000000000000000d RSI: 0000000020000040 RDI: 000000000000001c [ 2380.561883][T26601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2380.561883][T26601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2380.561883][T26601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2380.561883][T26601] Kernel Offset: disabled [ 2380.561883][T26601] Rebooting in 86400 seconds..