[ 59.606444] audit: type=1800 audit(1539244352.651:27): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 61.120913] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 62.166017] random: sshd: uninitialized urandom read (32 bytes read) [ 62.574509] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 64.257714] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. [ 70.152233] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 07:52:45 fuzzer started [ 74.877857] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 07:52:50 dialing manager at 10.128.0.26:39089 2018/10/11 07:52:50 syscalls: 1 2018/10/11 07:52:50 code coverage: enabled 2018/10/11 07:52:50 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 07:52:50 setuid sandbox: enabled 2018/10/11 07:52:50 namespace sandbox: enabled 2018/10/11 07:52:50 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 07:52:50 fault injection: enabled 2018/10/11 07:52:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 07:52:50 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 07:52:50 net device setup: enabled [ 81.264724] random: crng init done 07:54:53 executing program 0: add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000002740)="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", 0x4c9, 0xfffffffffffffffd) [ 201.246939] IPVS: ftp: loaded support on port[0] = 21 [ 202.712238] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.718744] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.727689] device bridge_slave_0 entered promiscuous mode [ 202.898332] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.904958] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.913826] device bridge_slave_1 entered promiscuous mode [ 203.067557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.227455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.692087] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.848698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.004110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 204.011289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.165869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.173331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:54:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) [ 204.683332] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.691990] team0: Port device team_slave_0 added [ 204.918354] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.926819] team0: Port device team_slave_1 added [ 205.112255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 205.119339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.128707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.331796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 205.338981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.348430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.536872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 205.544658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.550585] IPVS: ftp: loaded support on port[0] = 21 [ 205.554014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.837036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 205.844758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.854178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.827975] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.834725] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.843463] device bridge_slave_0 entered promiscuous mode [ 208.187781] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.194703] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.203606] device bridge_slave_1 entered promiscuous mode [ 208.435095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 208.477400] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.484079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.491198] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.497958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.507604] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.699006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 209.102817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.503031] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.707772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.904252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 209.932388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.196094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 210.203379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:55:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, &(0x7f0000000000)={0x280}) [ 211.010025] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.018708] team0: Port device team_slave_0 added [ 211.436598] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.445098] team0: Port device team_slave_1 added [ 211.696125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 211.703444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.712567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.962943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.970146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.979681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.134375] IPVS: ftp: loaded support on port[0] = 21 [ 212.296459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.304380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.313837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.617004] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 212.624794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.634049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.021321] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.028033] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.036999] device bridge_slave_0 entered promiscuous mode [ 215.318234] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.324912] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.333659] device bridge_slave_1 entered promiscuous mode [ 215.694102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.966476] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.973119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.980186] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.986899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.995900] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.009280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.542253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.972909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.295764] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.551208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.564031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.788686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 217.796075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.725616] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.734136] team0: Port device team_slave_0 added [ 218.927662] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.936214] team0: Port device team_slave_1 added [ 219.205925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.213717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.223042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.439098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 219.446350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.455722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 07:55:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000000)) [ 219.753438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.761095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.770311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.057372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.065206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.074994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.982407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.318733] IPVS: ftp: loaded support on port[0] = 21 [ 222.340040] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 223.770248] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 223.777663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.785883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.686815] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.693436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.700451] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.707140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.716532] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.981520] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.988230] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.997073] device bridge_slave_0 entered promiscuous mode [ 225.043424] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.060288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.392642] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.399194] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.408034] device bridge_slave_1 entered promiscuous mode [ 225.758859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.101850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.155367] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.538517] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.730388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.737947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.143399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 228.150591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.271360] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.279720] team0: Port device team_slave_0 added [ 229.623521] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.632648] team0: Port device team_slave_1 added [ 229.963263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.023376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.032737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.335472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.342714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.352036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.738455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.752229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.760116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.769459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 07:55:24 executing program 4: pipe2(&(0x7f0000000300), 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000003c0), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000480)='I') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 231.191282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.199266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.208696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.454930] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.220038] IPVS: ftp: loaded support on port[0] = 21 [ 234.299026] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.305689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.313979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.020640] ================================================================== [ 235.028073] BUG: KMSAN: uninit-value in vmap_page_range_noflush+0x975/0xed0 [ 235.035211] CPU: 1 PID: 6871 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #66 [ 235.042421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.051824] Call Trace: [ 235.054465] dump_stack+0x306/0x460 [ 235.058125] ? _raw_spin_lock_irqsave+0x227/0x340 [ 235.063003] ? vmap_page_range_noflush+0x975/0xed0 [ 235.067991] kmsan_report+0x1a2/0x2e0 [ 235.071835] __msan_warning+0x7c/0xe0 [ 235.075688] vmap_page_range_noflush+0x975/0xed0 [ 235.080538] map_vm_area+0x17d/0x1f0 [ 235.084329] kmsan_vmap+0xf2/0x180 [ 235.087945] vmap+0x3a1/0x510 [ 235.091091] ? big_key_alloc_buffer+0x6b6/0xa10 [ 235.095802] big_key_alloc_buffer+0x6b6/0xa10 [ 235.100352] big_key_preparse+0x219/0xec0 [ 235.104565] ? keyctl_dh_compute+0x2a0/0x2a0 [ 235.109008] key_create_or_update+0x802/0x1b80 [ 235.113664] __se_sys_add_key+0x730/0x980 [ 235.117886] __x64_sys_add_key+0x62/0x80 [ 235.121994] do_syscall_64+0xbe/0x100 [ 235.125840] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 235.131066] RIP: 0033:0x457519 [ 235.134284] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.153230] RSP: 002b:00007fc1d1ccac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 235.160993] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457519 [ 235.168309] RDX: 0000000020002740 RSI: 0000000020000200 RDI: 00000000200001c0 [ 235.175613] RBP: 000000000072bf00 R08: fffffffffffffffd R09: 0000000000000000 [ 235.182917] R10: 00000000000004c9 R11: 0000000000000246 R12: 00007fc1d1ccb6d4 [ 235.190239] R13: 00000000004bd60e R14: 00000000004cbe00 R15: 00000000ffffffff [ 235.197555] [ 235.199193] Uninit was created at: [ 235.202764] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 235.207900] kmsan_kmalloc+0xa4/0x120 [ 235.211736] __kmalloc+0x14b/0x440 [ 235.215314] kmsan_vmap+0x9b/0x180 [ 235.218895] vmap+0x3a1/0x510 [ 235.222029] big_key_alloc_buffer+0x6b6/0xa10 [ 235.226553] big_key_preparse+0x219/0xec0 [ 235.230727] key_create_or_update+0x802/0x1b80 [ 235.235338] __se_sys_add_key+0x730/0x980 [ 235.239515] __x64_sys_add_key+0x62/0x80 [ 235.243624] do_syscall_64+0xbe/0x100 [ 235.247467] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 235.252668] ================================================================== [ 235.260036] Disabling lock debugging due to kernel taint [ 235.265502] Kernel panic - not syncing: panic_on_warn set ... [ 235.265502] [ 235.272929] CPU: 1 PID: 6871 Comm: syz-executor0 Tainted: G B 4.19.0-rc4+ #66 [ 235.281552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.290937] Call Trace: [ 235.293566] dump_stack+0x306/0x460 [ 235.297250] panic+0x54c/0xafa [ 235.300533] kmsan_report+0x2d3/0x2e0 [ 235.304388] __msan_warning+0x7c/0xe0 [ 235.308246] vmap_page_range_noflush+0x975/0xed0 [ 235.313092] map_vm_area+0x17d/0x1f0 [ 235.316855] kmsan_vmap+0xf2/0x180 [ 235.320470] vmap+0x3a1/0x510 [ 235.323628] ? big_key_alloc_buffer+0x6b6/0xa10 [ 235.328356] big_key_alloc_buffer+0x6b6/0xa10 [ 235.332938] big_key_preparse+0x219/0xec0 [ 235.337140] ? keyctl_dh_compute+0x2a0/0x2a0 [ 235.341579] key_create_or_update+0x802/0x1b80 [ 235.346243] __se_sys_add_key+0x730/0x980 [ 235.350466] __x64_sys_add_key+0x62/0x80 [ 235.354558] do_syscall_64+0xbe/0x100 [ 235.358394] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 235.363609] RIP: 0033:0x457519 [ 235.366829] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.385781] RSP: 002b:00007fc1d1ccac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 235.393527] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457519 [ 235.400824] RDX: 0000000020002740 RSI: 0000000020000200 RDI: 00000000200001c0 [ 235.408124] RBP: 000000000072bf00 R08: fffffffffffffffd R09: 0000000000000000 [ 235.415422] R10: 00000000000004c9 R11: 0000000000000246 R12: 00007fc1d1ccb6d4 [ 235.422730] R13: 00000000004bd60e R14: 00000000004cbe00 R15: 00000000ffffffff [ 235.431072] Kernel Offset: disabled [ 235.434724] Rebooting in 86400 seconds..