[....] Starting OpenBSD Secure Shell server: sshd[ 46.905367] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 47.225520] audit: type=1800 audit(1538995191.273:29): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 47.245083] audit: type=1800 audit(1538995191.283:30): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 49.558621] random: sshd: uninitialized urandom read (32 bytes read) [ 49.971531] random: sshd: uninitialized urandom read (32 bytes read) [ 51.726054] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. [ 57.585113] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 10:40:03 fuzzer started [ 61.636936] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 10:40:07 dialing manager at 10.128.0.26:43781 2018/10/08 10:40:07 syscalls: 1 2018/10/08 10:40:07 code coverage: enabled 2018/10/08 10:40:07 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 10:40:07 setuid sandbox: enabled 2018/10/08 10:40:07 namespace sandbox: enabled 2018/10/08 10:40:07 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 10:40:07 fault injection: enabled 2018/10/08 10:40:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 10:40:07 net packed injection: enabled 2018/10/08 10:40:07 net device setup: enabled [ 65.980681] random: crng init done 10:41:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x409}, 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000200)={0x1c, 0x3d, 0x100, 0x70bd27, 0x25dfdbfc, {0x16}, [@typed={0x8, 0x72, @str='gre\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) [ 154.135505] IPVS: ftp: loaded support on port[0] = 21 [ 156.261264] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.268026] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.276432] device bridge_slave_0 entered promiscuous mode [ 156.402398] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.408890] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.417294] device bridge_slave_1 entered promiscuous mode [ 156.546362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.672590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 10:41:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000040000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000140)='u', 0x1}], 0x1, &(0x7f00000002c0)}}], 0x1, 0x0) shutdown(r1, 0x1) [ 157.061675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.248248] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.706444] IPVS: ftp: loaded support on port[0] = 21 [ 158.197696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.205872] team0: Port device team_slave_0 added [ 158.428853] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.436945] team0: Port device team_slave_1 added [ 158.632794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.853318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.860452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.869181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.039206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.046881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.055882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.252371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.259976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.269105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.970367] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.976952] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.985265] device bridge_slave_0 entered promiscuous mode [ 161.109435] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.116046] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.124442] device bridge_slave_1 entered promiscuous mode [ 161.292076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.513310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.558204] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.564754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.571647] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.578210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.586836] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 162.022757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:41:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local={0xffffff1f}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70028, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0xf0, "071ccd"}}}}}}, &(0x7f0000000000)) [ 162.286886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.567277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.860013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.867297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.897921] IPVS: ftp: loaded support on port[0] = 21 [ 163.234579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 163.241682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.747586] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 163.755860] team0: Port device team_slave_0 added [ 164.023088] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 164.031035] team0: Port device team_slave_1 added [ 164.217019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 164.224297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.233222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.508089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 164.515407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.524171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.771304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.779027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.788055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.042400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.050249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.059301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.505781] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.512295] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.520533] device bridge_slave_0 entered promiscuous mode [ 167.759545] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.766084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.773058] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.779494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.787970] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.814289] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.820808] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.829069] device bridge_slave_1 entered promiscuous mode [ 168.055989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 168.252654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.286471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 10:41:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 169.034101] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.366545] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.575931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 169.583124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.945376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 169.952971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.301440] IPVS: ftp: loaded support on port[0] = 21 [ 170.842952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.850886] team0: Port device team_slave_0 added [ 171.123469] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.131289] team0: Port device team_slave_1 added [ 171.502371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.509594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.518196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.763818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.771004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.779831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.050768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.058363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.067100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.241279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.357811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.365586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.374377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.370704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.565893] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.572597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.580467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.475203] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.481653] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.489870] device bridge_slave_0 entered promiscuous mode [ 175.661532] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.668264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.675166] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.681559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.690049] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.785302] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.802947] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.809499] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.817734] device bridge_slave_1 entered promiscuous mode [ 176.012226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.079282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.344540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.140431] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.434182] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.741087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.748494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 10:42:01 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b000400000000000000cf", 0x1f) [ 177.985003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.992362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.327183] ip (6524) used greatest stack depth: 53040 bytes left [ 178.907639] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.915816] team0: Port device team_slave_0 added [ 179.055349] IPVS: ftp: loaded support on port[0] = 21 [ 179.267767] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.275911] team0: Port device team_slave_1 added [ 179.588752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.595956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.604606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.901283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.908649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.917468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.193396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.200884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.209493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.505293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.566205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.573847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.582621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.781188] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.049103] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.055603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.063590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:42:08 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000003c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x13, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) socketpair$inet6(0xa, 0xe, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x1e) [ 184.392329] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.585524] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 184.644753] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.651207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.658162] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.664646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.672891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 184.781667] ================================================================== [ 184.789087] BUG: KMSAN: uninit-value in vmx_vcpu_put+0x77b/0xce0 [ 184.795243] CPU: 1 PID: 6706 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #64 [ 184.802450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.811820] Call Trace: [ 184.814417] dump_stack+0x306/0x460 [ 184.818056] ? vmx_vcpu_put+0x77b/0xce0 [ 184.822069] kmsan_report+0x1a2/0x2e0 [ 184.825890] __msan_warning+0x7c/0xe0 [ 184.829695] vmx_vcpu_put+0x77b/0xce0 [ 184.833494] ? vmx_vcpu_load+0x1d50/0x1d50 [ 184.837718] kvm_arch_vcpu_put+0x3b6/0x480 [ 184.841945] ? INIT_INT+0xc/0x30 [ 184.845307] kvm_sched_out+0x90/0xb0 [ 184.849012] __schedule+0x970/0x9b0 [ 184.852633] ? kvm_arch_vcpu_ioctl_run+0x1bba/0x10a20 [ 184.857859] _cond_resched+0x5e/0xf0 [ 184.861575] kvm_arch_vcpu_ioctl_run+0x1bba/0x10a20 [ 184.866649] ? futex_wait+0x745/0xa40 [ 184.870455] ? task_kmsan_context_state+0x6b/0x120 [ 184.875376] ? __msan_get_context_state+0x9/0x30 [ 184.880206] ? INIT_INT+0xc/0x30 [ 184.883562] ? task_kmsan_context_state+0x6b/0x120 [ 184.888753] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 184.894227] ? kmsan_set_origin_inline+0x6b/0x120 [ 184.899070] ? __msan_poison_alloca+0x17a/0x210 [ 184.903728] ? put_pid+0x71/0x410 [ 184.907169] ? kvm_vcpu_ioctl+0x20a4/0x20b0 [ 184.911480] ? put_pid+0x1a9/0x410 [ 184.915005] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 184.920469] ? get_task_pid+0x17b/0x270 [ 184.924435] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 184.929028] ? do_vfs_ioctl+0x18a/0x2810 [ 184.933087] ? __se_sys_ioctl+0x1da/0x270 [ 184.937229] ? kvm_vm_release+0x90/0x90 [ 184.941207] do_vfs_ioctl+0xcf3/0x2810 [ 184.945099] ? security_file_ioctl+0x92/0x200 [ 184.949592] __se_sys_ioctl+0x1da/0x270 [ 184.953560] __x64_sys_ioctl+0x4a/0x70 [ 184.957439] do_syscall_64+0xbe/0x100 [ 184.961258] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 184.966455] RIP: 0033:0x457579 [ 184.969737] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.988646] RSP: 002b:00007fe776c31c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.996351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 185.003609] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 185.010866] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 185.018164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe776c326d4 [ 185.025440] R13: 00000000004c003b R14: 00000000004d0108 R15: 00000000ffffffff [ 185.032736] [ 185.034356] Uninit was stored to memory at: [ 185.038671] kmsan_internal_chain_origin+0x136/0x240 [ 185.043761] __msan_chain_origin+0x75/0xd0 [ 185.047984] vmx_prepare_switch_to_guest+0x4f6/0x17a0 [ 185.053190] kvm_arch_vcpu_ioctl_run+0x82fa/0x10a20 [ 185.058308] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 185.062464] do_vfs_ioctl+0xcf3/0x2810 [ 185.066371] __se_sys_ioctl+0x1da/0x270 [ 185.070334] __x64_sys_ioctl+0x4a/0x70 [ 185.074217] do_syscall_64+0xbe/0x100 [ 185.078012] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 185.083184] [ 185.084794] Local variable description: ----error.i.i@vmx_prepare_switch_to_guest [ 185.092392] Variable was created at: [ 185.096094] vmx_prepare_switch_to_guest+0x188/0x17a0 [ 185.101275] kvm_arch_vcpu_ioctl_run+0x82fa/0x10a20 [ 185.106268] ================================================================== [ 185.113631] Disabling lock debugging due to kernel taint [ 185.119072] Kernel panic - not syncing: panic_on_warn set ... [ 185.119072] [ 185.126431] CPU: 1 PID: 6706 Comm: syz-executor0 Tainted: G B 4.19.0-rc4+ #64 [ 185.134993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.144349] Call Trace: [ 185.146931] dump_stack+0x306/0x460 [ 185.150563] panic+0x54c/0xafa [ 185.153771] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 185.159212] kmsan_report+0x2d3/0x2e0 [ 185.163015] __msan_warning+0x7c/0xe0 [ 185.166805] vmx_vcpu_put+0x77b/0xce0 [ 185.170603] ? vmx_vcpu_load+0x1d50/0x1d50 [ 185.174834] kvm_arch_vcpu_put+0x3b6/0x480 [ 185.179078] ? INIT_INT+0xc/0x30 [ 185.182470] kvm_sched_out+0x90/0xb0 [ 185.186177] __schedule+0x970/0x9b0 [ 185.189810] ? kvm_arch_vcpu_ioctl_run+0x1bba/0x10a20 [ 185.194991] _cond_resched+0x5e/0xf0 [ 185.198692] kvm_arch_vcpu_ioctl_run+0x1bba/0x10a20 [ 185.203774] ? futex_wait+0x745/0xa40 [ 185.207568] ? task_kmsan_context_state+0x6b/0x120 [ 185.212580] ? __msan_get_context_state+0x9/0x30 [ 185.217353] ? INIT_INT+0xc/0x30 [ 185.220704] ? task_kmsan_context_state+0x6b/0x120 [ 185.225628] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 185.231077] ? kmsan_set_origin_inline+0x6b/0x120 [ 185.235923] ? __msan_poison_alloca+0x17a/0x210 [ 185.240602] ? put_pid+0x71/0x410 [ 185.244047] ? kvm_vcpu_ioctl+0x20a4/0x20b0 [ 185.248362] ? put_pid+0x1a9/0x410 [ 185.251891] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 185.257258] ? get_task_pid+0x17b/0x270 [ 185.261225] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 185.265468] ? do_vfs_ioctl+0x18a/0x2810 [ 185.269516] ? __se_sys_ioctl+0x1da/0x270 [ 185.273657] ? kvm_vm_release+0x90/0x90 [ 185.277631] do_vfs_ioctl+0xcf3/0x2810 [ 185.281518] ? security_file_ioctl+0x92/0x200 [ 185.286007] __se_sys_ioctl+0x1da/0x270 [ 185.289977] __x64_sys_ioctl+0x4a/0x70 [ 185.293851] do_syscall_64+0xbe/0x100 [ 185.297640] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 185.302814] RIP: 0033:0x457579 [ 185.306002] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.324891] RSP: 002b:00007fe776c31c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.332586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 185.339841] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 185.347094] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 185.354350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe776c326d4 [ 185.361619] R13: 00000000004c003b R14: 00000000004d0108 R15: 00000000ffffffff [ 186.726675] Shutting down cpus with NMI [ 186.730788] ------------[ cut here ]------------ [ 186.735592] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 186.740764] invalid opcode: 0000 [#1] SMP [ 186.744963] CPU: 0 PID: 6714 Comm: syz-executor3 Tainted: G B 4.19.0-rc4+ #64 [ 186.745893] Kernel Offset: disabled [[ 1 18866.7.75757118822]] RReebboooottinign g inin 8866440000 sseeccoonnddss.... Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.770940] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 186.775659] Code: 00 74 27 65 8b 04 25 40 8f 03 00 ff c0 83 f8 08 7d 28 65 89 04 25 40 8f 03 00 65 c6 04 25 d5 6c 0b 00 ff c3 0f 0b 66 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 186.794592] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 186.800078] RAX: 0000000000000100 RBX: 0000000000000001 RCX: 00000000c0000101 [ 186.807370] RDX: 00000000ffff8802 RSI: ffffffff8ac011a8 RDI: ffffea000cbf2560 [ 186.814657] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 186.822030] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 186.829426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.836735] FS: 000000000276e940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 186.845088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.850990] CR2: 00000000004dac7b CR3: 000000014c1f8000 CR4: 00000000001426f0 [ 186.858384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.865671] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.872952] Call Trace: [ 186.875582] [ 186.877802] ? end_repeat_nmi+0x19/0x58 [ 186.881801] ? end_repeat_nmi+0x7/0x58 [ 186.885734] ? queued_spin_lock_slowpath+0xd52/0x14d0 [ 186.890956] ? queued_spin_lock_slowpath+0xd52/0x14d0 [ 186.896166] ? queued_spin_lock_slowpath+0xd52/0x14d0 [ 186.901373] [ 186.903617] [ 186.905859] ? _raw_spin_lock_irqsave+0x328/0x340 [ 186.910738] ? load_balance+0x502f/0x9780 [ 186.914951] ? __mod_timer+0x26a0/0x2cd0 [ 186.919112] ? rebalance_domains+0x774/0xe30 [ 186.923583] ? run_rebalance_domains+0x65e/0x6e0 [ 186.928410] ? task_change_group_fair+0xef0/0xef0 [ 186.933305] ? __do_softirq+0x601/0xa6d [ 186.937330] ? irq_exit+0x247/0x280 [ 186.940993] ? exiting_irq+0xe/0x10 [ 186.944653] ? smp_apic_timer_interrupt+0x64/0x90 [ 186.949514] ? apic_timer_interrupt+0xf/0x20 [ 186.953937] [ 186.956258] ? __msan_poison_alloca+0x16b/0x210 [ 186.960979] ? page_remove_rmap+0x1c0/0x1760 [ 186.965438] ? unmap_page_range+0x203d/0x3db0 [ 186.970095] ? page_remove_rmap+0x1c0/0x1760 [ 186.974569] ? unmap_page_range+0x203d/0x3db0 [ 186.979176] ? unmap_single_vma+0x445/0x5e0 [ 186.983564] ? unmap_vmas+0x251/0x380 [ 186.987395] ? exit_mmap+0x50e/0xa00 [ 186.991301] ? __mmput+0x16d/0x700 [ 186.994868] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 187.000276] ? mmput+0x178/0x1f0 [ 187.003684] ? flush_old_exec+0x174d/0x2930 [ 187.008042] ? kernel_read+0x13b/0x1a0 [ 187.011986] ? load_elf_binary+0x151b/0x9230 [ 187.016466] ? kmsan_set_origin+0x83/0x140 [ 187.020850] ? kmsan_set_origin_inline+0x6b/0x120 [ 187.025754] ? __msan_poison_alloca+0x17a/0x210 [ 187.030485] ? load_elf_binary+0x4f41/0x9230 [ 187.034961] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 187.040376] ? load_script+0xd30/0xd30 [ 187.044326] ? search_binary_handler+0x49e/0x1030 [ 187.049215] ? __do_execve_file+0x22c5/0x3340 [ 187.053807] ? __se_sys_execve+0xec/0x110 [ 187.058037] ? __x64_sys_execve+0x4a/0x70 [ 187.062210] ? do_syscall_64+0xbe/0x100 [ 187.066216] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 187.071604] Modules linked in: [ 187.074856] ---[ end trace 4a16502d6ed87d5b ]--- [ 187.079639] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 187.084326] Code: 00 74 27 65 8b 04 25 40 8f 03 00 ff c0 83 f8 08 7d 28 65 89 04 25 40 8f 03 00 65 c6 04 25 d5 6c 0b 00 ff c3 0f 0b 66 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 187.103349] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 187.108780] RAX: 0000000000000100 RBX: 0000000000000001 RCX: 00000000c0000101 [ 187.116076] RDX: 00000000ffff8802 RSI: ffffffff8ac011a8 RDI: ffffea000cbf2560 [ 187.123379] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 187.130667] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 187.137978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.145275] FS: 000000000276e940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 187.153522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.159420] CR2: 00000000004dac7b CR3: 000000014c1f8000 CR4: 00000000001426f0 [ 187.166711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.174000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400