[ 57.355141] audit: type=1800 audit(1539125084.391:27): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 58.838969] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 62.801078] random: sshd: uninitialized urandom read (32 bytes read) [ 63.272473] random: sshd: uninitialized urandom read (32 bytes read) [ 65.836310] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. [ 72.014477] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/09 22:45:01 fuzzer started [ 76.737722] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/09 22:45:06 dialing manager at 10.128.0.26:44001 2018/10/09 22:45:06 syscalls: 1 2018/10/09 22:45:06 code coverage: enabled 2018/10/09 22:45:06 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/09 22:45:06 setuid sandbox: enabled 2018/10/09 22:45:06 namespace sandbox: enabled 2018/10/09 22:45:06 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/09 22:45:06 fault injection: enabled 2018/10/09 22:45:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/09 22:45:06 net packed injection: enabled 2018/10/09 22:45:06 net device setup: enabled [ 81.945228] random: crng init done 22:47:06 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clone(0x2102001fec, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r0 = getpid() exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x3, 0x0, {0x2, 0x6, 0x0, 'nodev!'}}, 0x27) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) [ 200.708176] IPVS: ftp: loaded support on port[0] = 21 [ 202.879632] ip (6268) used greatest stack depth: 53056 bytes left [ 203.187027] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.193607] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.202495] device bridge_slave_0 entered promiscuous mode [ 203.349711] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.356342] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.364976] device bridge_slave_1 entered promiscuous mode [ 203.509906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.654961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 22:47:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x2011, r0, 0x0) [ 204.125618] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.397506] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.693065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 204.700128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.909326] IPVS: ftp: loaded support on port[0] = 21 [ 204.924706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.931846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.526153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 205.534472] team0: Port device team_slave_0 added [ 205.678265] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 205.686492] team0: Port device team_slave_1 added [ 205.938150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 205.945749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.954863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.203589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 206.210631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.219745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.436596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.444365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.453586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.726318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.734193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.743393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.786000] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.792575] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.801043] device bridge_slave_0 entered promiscuous mode [ 209.008494] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.015122] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.023663] device bridge_slave_1 entered promiscuous mode [ 209.255438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.417341] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.423952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.430936] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.437596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.446588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 209.545824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 209.623334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 22:47:16 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0xe3, 0x0) [ 210.400423] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.680874] IPVS: ftp: loaded support on port[0] = 21 [ 210.780429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.105944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 211.113200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.428055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.435268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.220413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.228798] team0: Port device team_slave_0 added [ 212.529756] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.537991] team0: Port device team_slave_1 added [ 212.863258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.870320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.879260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.248406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.255717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.264761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.538322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.546418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.555768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.883708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 213.891366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.900785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.190453] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.197188] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.206024] device bridge_slave_0 entered promiscuous mode [ 215.575169] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.582161] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.590686] device bridge_slave_1 entered promiscuous mode [ 215.866238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.132162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.963109] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.969621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.976729] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.983313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.992472] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.113343] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.416077] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.691801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.699117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.822330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.017176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.024672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.885161] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.893640] team0: Port device team_slave_0 added 22:47:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x200096e, 0x4) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000280)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000c40)=""/160, 0xa0}, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 219.167523] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.175885] team0: Port device team_slave_1 added [ 219.546861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.554244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.563349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.913089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 219.920326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.929623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.296950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.304863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.314167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.368802] IPVS: ftp: loaded support on port[0] = 21 [ 220.516839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.524647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.533886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.847097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.322165] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.732676] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.739463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.746535] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.753113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.761925] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.782672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.823337] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 225.829774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.839168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.615144] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.621919] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.630542] device bridge_slave_0 entered promiscuous mode [ 226.996350] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.002959] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.011897] device bridge_slave_1 entered promiscuous mode [ 227.243555] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.405177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.868540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.074288] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.476616] bond0: Enslaving bond_slave_1 as an active interface with an up link 22:47:36 executing program 4: [ 229.973331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 229.980477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.358134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 230.365515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.133688] IPVS: ftp: loaded support on port[0] = 21 [ 231.677113] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.685463] team0: Port device team_slave_0 added [ 231.791336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.114778] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.122964] team0: Port device team_slave_1 added [ 232.517503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 232.524667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.533591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.012378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.019444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.028679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.334844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.506191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.513930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.523129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.949334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.957242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.966563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.018874] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.025644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.034045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.508323] 8021q: adding VLAN 0 to HW filter on device team0 22:47:44 executing program 0: 22:47:44 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$apparmor_current(r1, &(0x7f0000000080)=@profile={'stack ', 'net/ip_mr_vif\x00'}, 0x14) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0xfffffffffffffffa}) 22:47:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000d09fe9)='smaps\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000040)=""/8, 0xff5c, 0x100003) r1 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) getgroups(0x4, &(0x7f00000003c0)=[0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x1, r1}, {0x2, 0x4, r2}, {0x2, 0x3, r3}, {0x2, 0x6, r4}], {0x4, 0x4}, [{0x8, 0x0, r5}, {0x8, 0x7, r6}], {}, {0x20, 0x1}}, 0x54, 0x3) [ 238.656784] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.663506] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.672096] device bridge_slave_0 entered promiscuous mode 22:47:46 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x200000000000, &(0x7f0000001080)={{r2, r3+30000000}}, &(0x7f00000010c0)) tkill(r1, 0x1000000000016) [ 239.148569] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.155617] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.164240] device bridge_slave_1 entered promiscuous mode [ 239.255071] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.261570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.268626] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.275216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.283739] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.463163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.574758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.924849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 241.162607] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.617740] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.033476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 242.040659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.076063] 8021q: adding VLAN 0 to HW filter on device bond0 22:47:49 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x100}, 0x10) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x200000000000, &(0x7f0000001080)={{r2, r3+30000000}}, &(0x7f00000010c0)) tkill(r1, 0x1000000000016) [ 242.510850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.518287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 22:47:49 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x10200) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x400602) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x400, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @rand_addr=0x80000000}, {0x2, 0x4e22, @loopback}, 0x4, 0xd10d, 0x7, 0x100000001, 0x2, &(0x7f00000000c0)='team_slave_1\x00', 0x0, 0x2, 0x100000001}) write$eventfd(r0, &(0x7f0000000180)=0x8, 0x8) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x8001, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x48, 0x5, 0x4, 0xffff, 0x8, &(0x7f00000001c0)='bond_slave_0\x00', 0x101, 0x80, 0x6a9a}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000280)) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x6, 0x89a, 0x6df, 0x0, 0x3f, 0x3f, 0x389, 0x38, 0x6b, 0xb81, 0x6, 0x20, 0x1, 0x74, 0xffffffff, 0x3}, [{0x7, 0xfffffffffffffffe, 0x2, 0x5, 0x9, 0x5, 0x80000000, 0x30}, {0x6, 0xfffffffffffffff9, 0x80000001, 0x8, 0x7, 0x5, 0x3, 0x1}], "79be697b7783351ea59d3065ecb01347d186eecc45e723a9e62a28f97a30bfa5d21da67a9acc9d77abe5c92158fd8785bc6b5189912d1153914c61017119dcc9693e22555a22bd8c75ba3ef5554cbc17bea27d7250fe7bb59d0ab139f28bc1f33a50342a2adbbd32e2679edce3a58aaf41894420a8d7bc2d26a07736632ad13921ac56ab349f9249912a9b77bfe046bbd50f411afa6985c5007b47f8b8e936907f1f392ba78f47ba4d6a", [[], [], [], [], [], [], [], []]}, 0x922) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000c00)=r0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000c40)) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000d00)={0x0, 0xafe, &(0x7f0000000c80)="bb4bd4d655030d798ce3dee340e478622563947cb146afec12c737a1d1294601051768559c7031bb19e4619ad51907d8c4673b8fdb2680969199ed6e48d6", &(0x7f0000000cc0)="29bb0dbf2677228421e9b4836764c9f01aebfc108567c626ebf26e935184c575986f7cce84748eb6a79fd7", 0x3e, 0x2b}) r2 = syz_open_dev$vcsa(&(0x7f0000000d40)='/dev/vcsa#\x00', 0x80000001, 0x40000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000e00)={{{@in6=@ipv4, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000f00)=0xe8) fstat(r2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000fc0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f00000010c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001100)={{{@in=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000001200)=0xe8) lstat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='system.posix_acl_default\x00', &(0x7f0000001380)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r5}, {0x2, 0x6, r6}, {0x2, 0x4, r7}], {0x4, 0x2}, [{0x8, 0x7, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x54, 0x2) write$P9_RCLUNK(r2, &(0x7f0000001400)={0x7, 0x79, 0x2}, 0x7) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001440), &(0x7f0000001480)=0xb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000014c0)={0x0, 0x22, "0959c4e249bb6856b1b14fd4b46f659c19de4a9c8f51817b527bb23e854e4c65724c"}, &(0x7f0000001500)=0x2a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001540)={0x3, 0xdaa, 0x8, 0x3, 0x4, 0x1, 0x188, 0x7f, r9}, 0x20) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001580)={r9, 0x80000001}, &(0x7f00000015c0)=0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000001600)={0x7, 0x9}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x17c) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000001640)) r10 = semget(0x1, 0x4, 0x0) semctl$SEM_STAT(r10, 0x0, 0x12, &(0x7f0000001680)=""/134) [ 243.521622] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.671359] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.679763] team0: Port device team_slave_0 added [ 244.057750] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.066042] team0: Port device team_slave_1 added [ 244.366268] IPVS: ftp: loaded support on port[0] = 21 [ 244.471258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.478489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.487407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.895348] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.904385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.912278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.933539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.940619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.949993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.345434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.353320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.362465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 22:47:52 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 245.847593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.855503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.864558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 22:47:53 executing program 0: 22:47:53 executing program 1: [ 246.613654] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.625244] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.631809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.638740] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.645358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.654453] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.670953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.193910] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.200399] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.209162] device bridge_slave_0 entered promiscuous mode [ 250.605918] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.612660] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.621015] device bridge_slave_1 entered promiscuous mode [ 251.004851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.291574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.083285] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.407958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.718138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 252.727919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.012257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.019296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.490928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.858466] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.867400] team0: Port device team_slave_0 added 22:48:00 executing program 2: [ 254.167304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 254.175522] team0: Port device team_slave_1 added [ 254.410675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 254.418069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.426845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.537755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.652327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.659379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.668180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.841136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.848904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.857908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.054640] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 255.062618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.071443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.430281] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.439332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.447481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.281446] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.457750] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.464502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.471434] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.478172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.487527] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 257.494266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.125706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.863662] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 261.588895] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 261.595608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.603845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.868226] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:48:09 executing program 3: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2c2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000540)="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", 0xed4}], 0x1) [ 262.569699] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.349514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.927424] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 22:48:13 executing program 4: 22:48:13 executing program 1: 22:48:13 executing program 0: 22:48:13 executing program 2: 22:48:13 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x2000000000002) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20004810}, 0x40800) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000440)={0x0, 0x0, r2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x57c) [ 266.324837] hrtimer: interrupt took 45425 ns 22:48:13 executing program 2: [ 266.596431] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 267.164272] ================================================================== [ 267.171711] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 267.179375] CPU: 1 PID: 7781 Comm: syz-executor3 Not tainted 4.19.0-rc4+ #65 [ 267.186577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.195949] Call Trace: [ 267.198577] dump_stack+0x306/0x460 [ 267.202247] ? vmx_set_constant_host_state+0x1778/0x1830 [ 267.207754] kmsan_report+0x1a2/0x2e0 [ 267.211593] __msan_warning+0x7c/0xe0 [ 267.215430] vmx_set_constant_host_state+0x1778/0x1830 [ 267.220755] vmx_create_vcpu+0x3e6f/0x7870 [ 267.225104] ? kmsan_set_origin_inline+0x6b/0x120 [ 267.229979] ? __msan_poison_alloca+0x17a/0x210 [ 267.234691] ? vmx_vm_init+0x340/0x340 [ 267.238603] kvm_arch_vcpu_create+0x25d/0x2f0 [ 267.243131] kvm_vm_ioctl+0x13fd/0x33d0 [ 267.247143] ? __msan_poison_alloca+0x17a/0x210 [ 267.251849] ? do_vfs_ioctl+0x18a/0x2810 [ 267.255934] ? __se_sys_ioctl+0x1da/0x270 [ 267.260111] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 267.264983] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 267.269853] do_vfs_ioctl+0xcf3/0x2810 [ 267.273786] ? security_file_ioctl+0x92/0x200 [ 267.278318] __se_sys_ioctl+0x1da/0x270 [ 267.282334] __x64_sys_ioctl+0x4a/0x70 [ 267.286247] do_syscall_64+0xbe/0x100 [ 267.290079] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 267.295291] RIP: 0033:0x457579 [ 267.298506] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.317434] RSP: 002b:00007fcf8a8a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.325178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 267.332472] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 267.339756] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 267.347047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf8a8a36d4 [ 267.354334] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 267.361637] [ 267.363284] Local variable description: ----dt@vmx_set_constant_host_state [ 267.370307] Variable was created at: [ 267.374051] vmx_set_constant_host_state+0x2b0/0x1830 [ 267.379268] vmx_create_vcpu+0x3e6f/0x7870 [ 267.383508] ================================================================== [ 267.390876] Disabling lock debugging due to kernel taint [ 267.396338] Kernel panic - not syncing: panic_on_warn set ... [ 267.396338] [ 267.403731] CPU: 1 PID: 7781 Comm: syz-executor3 Tainted: G B 4.19.0-rc4+ #65 [ 267.412320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.421685] Call Trace: [ 267.424312] dump_stack+0x306/0x460 [ 267.427981] panic+0x54c/0xafa [ 267.431243] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 267.436728] kmsan_report+0x2d3/0x2e0 [ 267.440566] __msan_warning+0x7c/0xe0 [ 267.444406] vmx_set_constant_host_state+0x1778/0x1830 [ 267.449729] vmx_create_vcpu+0x3e6f/0x7870 [ 267.453994] ? kmsan_set_origin_inline+0x6b/0x120 [ 267.458860] ? __msan_poison_alloca+0x17a/0x210 [ 267.463575] ? vmx_vm_init+0x340/0x340 [ 267.467491] kvm_arch_vcpu_create+0x25d/0x2f0 [ 267.472023] kvm_vm_ioctl+0x13fd/0x33d0 [ 267.476041] ? __msan_poison_alloca+0x17a/0x210 [ 267.480743] ? do_vfs_ioctl+0x18a/0x2810 [ 267.484825] ? __se_sys_ioctl+0x1da/0x270 [ 267.489005] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 267.493872] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 267.498739] do_vfs_ioctl+0xcf3/0x2810 [ 267.502674] ? security_file_ioctl+0x92/0x200 [ 267.507208] __se_sys_ioctl+0x1da/0x270 [ 267.511219] __x64_sys_ioctl+0x4a/0x70 [ 267.515128] do_syscall_64+0xbe/0x100 [ 267.518962] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 267.524195] RIP: 0033:0x457579 [ 267.527405] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.546333] RSP: 002b:00007fcf8a8a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.554144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 267.561426] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 267.568713] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 267.576004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf8a8a36d4 [ 267.583292] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 267.591734] Kernel Offset: disabled [ 267.595374] Rebooting in 86400 seconds..