[?25l[?1c7[ ok 8[?25h[?0c. [ 80.102141] audit: type=1800 audit(1553216037.146:25): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 80.121347] audit: type=1800 audit(1553216037.156:26): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 80.169384] audit: type=1800 audit(1553216037.196:27): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2019/03/22 00:54:09 fuzzer started 2019/03/22 00:54:14 dialing manager at 10.128.0.26:44543 2019/03/22 00:54:14 syscalls: 1 2019/03/22 00:54:14 code coverage: enabled 2019/03/22 00:54:14 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/22 00:54:14 extra coverage: extra coverage is not supported by the kernel 2019/03/22 00:54:14 setuid sandbox: enabled 2019/03/22 00:54:14 namespace sandbox: enabled 2019/03/22 00:54:14 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/22 00:54:14 fault injection: enabled 2019/03/22 00:54:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/22 00:54:14 net packet injection: enabled 2019/03/22 00:54:14 net device setup: enabled 00:56:43 executing program 0: syzkaller login: [ 246.987581] IPVS: ftp: loaded support on port[0] = 21 [ 247.121607] chnl_net:caif_netlink_parms(): no params data found [ 247.196893] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.203504] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.211702] device bridge_slave_0 entered promiscuous mode [ 247.221009] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.227582] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.235890] device bridge_slave_1 entered promiscuous mode [ 247.266241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.277128] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.307627] team0: Port device team_slave_0 added [ 247.315873] team0: Port device team_slave_1 added [ 247.506450] device hsr_slave_0 entered promiscuous mode [ 247.762585] device hsr_slave_1 entered promiscuous mode [ 247.949534] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.956441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.963620] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.970109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.038129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.055995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.066690] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.076795] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.088063] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 248.107574] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.123906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.133695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.141713] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.148318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.189506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.199669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.214858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.223438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.231432] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.237979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.245689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.254656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.263673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.272295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.280845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.289489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.297941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.306075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.315246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.323552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.336607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.344511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.371216] 8021q: adding VLAN 0 to HW filter on device batadv0 00:56:45 executing program 0: 00:56:45 executing program 0: 00:56:45 executing program 0: 00:56:45 executing program 0: 00:56:45 executing program 0: 00:56:45 executing program 0: ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000001, 0x8000) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e21, 0xe8c0, @remote, 0x1}, {0xa, 0x4e20, 0x9185, @mcast2, 0x9}, 0x6f3, [0x6, 0x400, 0x64, 0x6, 0x7, 0x5e, 0x1f, 0x3ff]}, 0x5c) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 00:56:46 executing program 0: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000006000/0x1000)=nil, 0x1000, 0xe) sync() [ 248.935849] binder: BINDER_SET_CONTEXT_MGR already set [ 248.941316] binder: 10271:10272 ioctl 40046207 0 returned -16 00:56:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) rt_sigprocmask(0x3, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xe9f, 0x101000) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x4, 0x81, 0x4000000000000, 0x4, 0x8}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{}, {0x0, 0x9}}, &(0x7f0000d43000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x6, 0xfffffffffffff800, 0x0, 0x100, 0x0, 0x2}) 00:56:46 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x0, 0x0, 0xfffffffffffffffa}], 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x8, 0x200) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x185000) open(&(0x7f0000000140)='./file0\x00', 0xc000, 0x8) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc23f}) write$P9_RSTAT(r1, &(0x7f00000000c0)={0x62, 0x7d, 0x1, {0x0, 0x5b, 0x3, 0x8000, {0x1, 0x1}, 0x4000000, 0x9, 0x9, 0x80000001, 0x6, '\\GPL#.', 0x0, '', 0x11, '\'.-#keyringeth1\\$', 0x11, '/dev/v4l-subdev#\x00'}}, 0x62) 00:56:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000004b0075cc914d45576bb1deb3ea989e5f4a5a36a0519040bebc79d45b77b91515de6ae14b31c55eacb97438627190a98397bcfcfab41151a9ab9159d8bb94c941c7386af997fd8eca8b90ede956ab68d76c174d8bb3a3673a738272ad658f97398375117556181da7c29efc637b59321e31bac8224d"], 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x1000039, 0x0, &(0x7f0000000180)=0x18) 00:56:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x3b, 0x7, 0x20000000000005, 0x0, 0x0}, 0x2c) lseek(r0, 0x0, 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000100), 0x0}, 0x18) 00:56:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x101040) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept$packet(r1, &(0x7f00000024c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002500)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000025c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@remote}}, &(0x7f00000026c0)=0xe8) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000200)="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", 0x1000) getpeername$packet(r1, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002740)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002780)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000027c0)={@loopback, @broadcast, 0x0}, &(0x7f0000002800)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002840)={'dummy0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f0000003b80)={&(0x7f0000002880)=@can={0x1d, 0x0}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002900)=""/174, 0xae}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/97, 0x61}, {&(0x7f0000003a40)=""/65, 0x41}], 0x4, &(0x7f0000003b00)=""/68, 0x44}, 0x2000) accept$packet(r1, &(0x7f0000003bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003c00)=0x14) getsockname$packet(r1, &(0x7f0000003c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003c80)=0x14) accept$packet(r1, &(0x7f00000053c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005400)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000005980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x202150}, 0xc, &(0x7f0000005940)={&(0x7f0000005440)={0x4f0, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x258, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x10000, 0x3f, 0x5, 0x8}, {0x81, 0x1d, 0x80, 0x3}, {0xed8d354, 0x81, 0x4, 0x20}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r7}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x174, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}]}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x81}, 0x1) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x6, 0x5, 0xfffffffffffffffe}) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) 00:56:46 executing program 0: r0 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800000800) getsockname(r0, &(0x7f0000000080)=@in={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80) r1 = userfaultfd(0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x40002, 0x0) execveat(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='/dev/vbi#\x00', &(0x7f0000000480)='/dev/vbi#\x00', &(0x7f00000004c0)='$-md5sum\x00'], &(0x7f00000006c0)=[&(0x7f0000000540)='/dev/vbi#\x00', &(0x7f0000000580)='ppp0-ppp1*)\x00', &(0x7f00000005c0)='vmnet0.{\x00', &(0x7f0000000600)='/dev/vbi#\x00', &(0x7f0000000640)='/dev/vbi#\x00', &(0x7f0000000680)='/dev/vbi#\x00'], 0x1100) r3 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000340)=""/78) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={r4, 0x7ff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000300)={r4, 0x3, 0x2}, 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)) read(r1, &(0x7f0000000000)=""/12, 0xc) 00:56:46 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000040)={{0x3, @name="9430a3a446c93117ebdc277c991355bbffe977278e73979ef6952907d0160bce"}, 0x8, 0x10000, 0x5}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e20, @rand_addr=0x9}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x8, 0xd220, r1, 0x0, r2, 0x0, 0x3, 0x1}) fcntl$dupfd(r0, 0x406, r0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000000)={0x0, 0x59555956, 0x2, @stepwise}) 00:56:46 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000380)={{0x100000001}}) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5423) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 00:56:47 executing program 0: gettid() r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='\xa0d\xb9\x14\x8e\x0f\xc1\x81\xd1\xdf\x9a>\xdaT\x85q\xdc\"\xe7\xda_Q9\x89\xabE$\xc3(l*?\xbc5\x8a\xe1\x13:\x04\xedm\xc5\v\x8dv@gD\xd0\"|\x9eG\xb7\x19\x95\x18\x88\x8b\x90\xc0S\xbb\xb1\xf5\xf0\x1c\xf4\x907\x8fm\xc2\xce\xd5\xf4\x00\x00\x00\x00\x00\x00\x00\x06Dg\xbb.\xc0\xddt\xcb\xc2\xb8\xc4\x97\xb8\x9e\x9e!1\xca') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30}, 0x30) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) 00:56:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_deladdr={0xa8, 0x15, 0x607, 0x70bd2b, 0x25dfdbfe, {0xa, 0x80, 0x200, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x5}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x100000000, 0x9}}, @IFA_CACHEINFO={0x14, 0x6, {0x50e6, 0x6, 0x100000001}}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, [], 0x8}}, @IFA_LOCAL={0x14, 0x2, @rand_addr="0f25f64759e8b9680d13939d472b591a"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000012000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) 00:56:47 executing program 0: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)=""/233, &(0x7f00000001c0)=0xe9) r1 = socket(0xa, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) setsockopt$inet_int(r1, 0x0, 0xa, 0xfffffffffffffffe, 0xb9) 00:56:47 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) sendto$unix(r0, &(0x7f0000000180)="919f1385069a3ee2eb65f95d6935e97d8d000d6ce5d50b804b19910e5e4106da00cd82ed5d60e1edabc399f6aa96df8fe94444310df612f54676a195f40d5c81eddb965c8918fca32a5cc9ecabd81410980e03", 0x53, 0xc000, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x40046109, &(0x7f0000000300)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000200)) fcntl$setstatus(r0, 0x4, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x1e}) close(r1) 00:56:47 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x39}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x401) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 00:56:47 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e20, @multicast2}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 00:56:47 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x410000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x1002}) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x2, 0x1240b06b}, {0x0, 0xf}], r1}, 0x18, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x6c1, 0x20}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x21, 0x200, 0x4, 0x200, r2}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000002c0)=0xc50b, 0x4) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000003c0)) prctl$PR_GET_FP_MODE(0x2e) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r3 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0xa84, 0x200000) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000440)=""/49) ioctl(r3, 0x6, &(0x7f0000000480)="2cad43e3d4b89a790e603808ee7cd9e5b691928199e4bd0ab9d5c17f4d279f84c74a972eec90b7a337f0c13f7d7192cb132db595b76617d06ec66de18910e37c7c84d76ac8d04ddcc8c75e6676b002b492781ff65887cf2bc12d452723484bbcbbedccf6393bae4383a017c5aeb5f3a33ac7f27079049bbaf33eb6ee3eff985a2598473bac6d1b2785cc779f29a837c7dafebb8cea54b3ce5caf987e887466264bb1ec44") getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000009c0)={@local, @local, 0x0}, &(0x7f0000000a00)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x6, 0x4e23, 0xfffffffffffffffa, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x2c, r4, r1}, {0x9, 0x4, 0x1, 0x0, 0x800, 0x6, 0x3, 0x6}, {0xffffffffffff8000, 0x6, 0x2, 0xfffffffe}, 0x53b, 0x6e6bb8, 0x3, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d6, 0x7f}, 0xa, @in=@remote, 0x3504, 0x0, 0x2, 0x0, 0x8, 0x8, 0x3}}, 0xe8) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000b40)=0xa6b) r5 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000b80)=r5) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000bc0)) fcntl$setstatus(r3, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) splice(r3, &(0x7f0000000c00), r3, &(0x7f0000000c40), 0xe581, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000c80)={0x2, [0x0, 0x0]}, &(0x7f0000000cc0)=0xc) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000d00)) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000d40)={0x6723, 0x200, 0x7, 0x800, r6}, 0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000e00)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000e40)={0x0, 0x0, 0x400}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000e80)={r7, r8}) 00:56:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x501000, 0x0) pipe(&(0x7f0000000140)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x4101, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) [ 251.204374] IPVS: ftp: loaded support on port[0] = 21 [ 251.481633] chnl_net:caif_netlink_parms(): no params data found [ 251.575056] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.581703] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.589889] device bridge_slave_0 entered promiscuous mode [ 251.635313] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.642091] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.650273] device bridge_slave_1 entered promiscuous mode 00:56:48 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x501000, 0x0) pipe(&(0x7f0000000140)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x4101, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) [ 251.735739] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 251.764482] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 251.823539] team0: Port device team_slave_0 added [ 251.831796] team0: Port device team_slave_1 added [ 251.874058] ================================================================== [ 251.881635] BUG: KMSAN: uninit-value in netdevice_event_work_handler+0x5bc/0x7b0 [ 251.889281] CPU: 0 PID: 348 Comm: kworker/u4:10 Not tainted 5.0.0+ #16 [ 251.896122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.905711] Workqueue: gid-cache-wq netdevice_event_work_handler [ 251.911941] Call Trace: [ 251.914648] dump_stack+0x173/0x1d0 [ 251.918308] kmsan_report+0x131/0x2a0 [ 251.922160] __msan_warning+0x7a/0xf0 [ 251.925980] netdevice_event_work_handler+0x5bc/0x7b0 [ 251.931214] ? del_netdev_ips+0xa0/0xa0 [ 251.935214] ? del_netdev_default_ips_join+0x7d0/0x7d0 [ 251.940515] ? add_netdev_upper_ips+0x580/0x580 [ 251.945280] process_one_work+0x1607/0x2010 [ 251.949666] worker_thread+0x111c/0x2460 [ 251.953793] kthread+0x4a1/0x4e0 [ 251.957186] ? process_one_work+0x2010/0x2010 [ 251.961919] ? schedule_tail+0x1b2/0x410 [ 251.966000] ? kthread_blkcg+0xf0/0xf0 [ 251.969999] ret_from_fork+0x35/0x40 [ 251.973738] [ 251.975446] Uninit was created at: [ 251.978999] kmsan_save_stack_with_flags+0x7a/0x130 [ 251.984026] kmsan_internal_alloc_meta_for_pages+0x113/0x500 [ 251.989859] kmsan_alloc_page+0x7e/0x100 [ 251.993955] __alloc_pages_nodemask+0x137b/0x5e30 [ 251.998820] alloc_pages_current+0x69d/0x9b0 [ 252.003244] new_slab+0x3da/0x1f40 [ 252.006819] ___slab_alloc+0x1577/0x2060 [ 252.011159] __kmalloc_track_caller+0xbdf/0xc70 [ 252.015861] kmemdup+0x7a/0xf0 [ 252.019182] __addrconf_sysctl_register+0xe1/0x7d0 [ 252.024247] addrconf_sysctl_register+0x2c7/0x370 [ 252.029121] ipv6_add_dev+0x1be4/0x1f80 [ 252.033217] addrconf_notify+0x228d/0x57a0 [ 252.037473] raw_notifier_call_chain+0x13d/0x240 [ 252.042331] register_netdevice+0x210d/0x2660 [ 252.046944] veth_newlink+0x10e4/0x13b0 [ 252.050943] rtnl_newlink+0x2944/0x37a0 [ 252.054944] rtnetlink_rcv_msg+0x115b/0x1550 [ 252.059454] netlink_rcv_skb+0x431/0x620 [ 252.063550] rtnetlink_rcv+0x50/0x60 [ 252.067293] netlink_unicast+0xf3e/0x1020 [ 252.071467] netlink_sendmsg+0x127f/0x1300 [ 252.075913] __sys_sendto+0x8c4/0xac0 [ 252.079750] __se_sys_sendto+0x107/0x130 [ 252.083830] __x64_sys_sendto+0x6e/0x90 [ 252.087835] do_syscall_64+0xbc/0xf0 [ 252.091678] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 252.096891] ================================================================== [ 252.104273] Disabling lock debugging due to kernel taint [ 252.109755] Kernel panic - not syncing: panic_on_warn set ... [ 252.115657] CPU: 0 PID: 348 Comm: kworker/u4:10 Tainted: G B 5.0.0+ #16 [ 252.123777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.133167] Workqueue: gid-cache-wq netdevice_event_work_handler [ 252.139515] Call Trace: [ 252.142145] dump_stack+0x173/0x1d0 [ 252.145813] panic+0x3d1/0xb01 [ 252.149063] kmsan_report+0x29a/0x2a0 [ 252.152916] __msan_warning+0x7a/0xf0 [ 252.156755] netdevice_event_work_handler+0x5bc/0x7b0 [ 252.161984] ? del_netdev_ips+0xa0/0xa0 [ 252.164376] WARNING: not memsetting 192 bytes starting at ffff8881d5a79780, because the shadow is NULL [ 252.165986] ? del_netdev_default_ips_join+0x7d0/0x7d0 [ 252.175455] ------------[ cut here ]------------ [ 252.180689] ? add_netdev_upper_ips+0x580/0x580 [ 252.185414] kernel BUG at mm/kmsan/kmsan.c:143! [ 252.190164] process_one_work+0x1607/0x2010 [ 252.194815] invalid opcode: 0000 [#1] SMP [ 252.199142] worker_thread+0x111c/0x2460 [ 252.203319] CPU: 1 PID: 10344 Comm: syz-executor.0 Tainted: G B 5.0.0+ #16 [ 252.207382] kthread+0x4a1/0x4e0 [ 252.215659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.219012] ? process_one_work+0x2010/0x2010 [ 252.228529] RIP: 0010:kmsan_internal_memset_shadow+0x401/0x410 [ 252.233090] ? schedule_tail+0x1b2/0x410 [ 252.239055] Code: 83 09 00 00 01 e8 5f 0f 7a ff 85 c0 75 14 48 c7 c7 96 6c 81 8b 4c 89 ee 48 89 da 31 c0 e8 77 3c 7a ff 41 c6 86 83 09 00 00 00 <0f> 0b 0f 0b 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 [ 252.243101] ? kthread_blkcg+0xf0/0xf0 [ 252.262066] RSP: 0018:ffff8881d5abf498 EFLAGS: 00010046 [ 252.265941] ret_from_fork+0x35/0x40 [ 252.271279] RAX: 000000000000005a RBX: ffff8881d5a79780 RCX: 2b5b61fb5590f100 [ 252.282255] RDX: 0000000000000000 RSI: 000000000003ffff RDI: 0000000000040000 [ 252.289520] RBP: ffff8881d5abf4d0 R08: 0000000000000000 R09: ffff88812fd39010 [ 252.296780] R10: 0000000000000000 R11: ffffffff861f4290 R12: ffff88812f807380 [ 252.304037] R13: 00000000000000c0 R14: ffff888062f43c00 R15: 00000000000000c0 [ 252.311410] FS: 00007f4a279d3700(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 252.319634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.325507] CR2: 0000001b2c922000 CR3: 00000000615d0000 CR4: 00000000001406e0 [ 252.332765] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.340026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.348585] Call Trace: [ 252.351178] kmsan_internal_unpoison_shadow+0x1f/0x40 [ 252.356363] kmsan_kmalloc+0xb8/0x130 [ 252.360160] kmsan_slab_alloc+0xe/0x10 [ 252.364047] __kmalloc+0x2a0/0x3a0 [ 252.367584] ? kzalloc+0xe/0x10 [ 252.371032] kzalloc+0xe/0x10 [ 252.374130] kmsan_vmap_page_range_noflush+0x6a/0x220 [ 252.379323] vm_map_ram+0x1018/0x1290 [ 252.383186] ion_heap_sglist_zero+0x3d9/0x4e0 [ 252.387703] ion_heap_buffer_zero+0x19f/0x1d0 [ 252.392281] ion_system_heap_free+0xe6/0x4d0 [ 252.396683] ? ion_system_heap_allocate+0x1400/0x1400 [ 252.401880] ? ion_system_heap_allocate+0x1400/0x1400 [ 252.407149] ? ion_system_heap_allocate+0x1400/0x1400 [ 252.412334] ion_buffer_destroy+0x187/0x4d0 [ 252.416665] _ion_heap_freelist_drain+0x526/0x840 [ 252.421514] ion_heap_freelist_drain+0x6e/0x80 [ 252.426090] ion_alloc+0x57f/0x1650 [ 252.429742] ? kmsan_internal_memset_shadow+0xc6/0x410 [ 252.435043] ion_ioctl+0x326/0x5c0 [ 252.438583] ? debug_shrink_set+0x220/0x220 [ 252.443009] do_vfs_ioctl+0xebd/0x2bf0 [ 252.446909] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 252.452096] ? security_file_ioctl+0x92/0x200 [ 252.456679] __se_sys_ioctl+0x1da/0x270 [ 252.460682] __x64_sys_ioctl+0x4a/0x70 [ 252.464568] do_syscall_64+0xbc/0xf0 [ 252.468283] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 252.473486] RIP: 0033:0x458209 [ 252.476673] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.495568] RSP: 002b:00007f4a279d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.503294] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 252.510648] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000006 [ 252.517912] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 252.525173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a279d36d4 [ 252.532436] R13: 00000000004c09cb R14: 00000000004d2740 R15: 00000000ffffffff [ 252.539711] Modules linked in: [ 252.542900] ---[ end trace 36779b569d5741f9 ]--- [ 252.547832] RIP: 0010:kmsan_internal_memset_shadow+0x401/0x410 [ 252.553794] Code: 83 09 00 00 01 e8 5f 0f 7a ff 85 c0 75 14 48 c7 c7 96 6c 81 8b 4c 89 ee 48 89 da 31 c0 e8 77 3c 7a ff 41 c6 86 83 09 00 00 00 <0f> 0b 0f 0b 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 [ 252.572691] RSP: 0018:ffff8881d5abf498 EFLAGS: 00010046 [ 252.578135] RAX: 000000000000005a RBX: ffff8881d5a79780 RCX: 2b5b61fb5590f100 [ 252.585393] RDX: 0000000000000000 RSI: 000000000003ffff RDI: 0000000000040000 [ 252.592825] RBP: ffff8881d5abf4d0 R08: 0000000000000000 R09: ffff88812fd39010 [ 252.600178] R10: 0000000000000000 R11: ffffffff861f4290 R12: ffff88812f807380 [ 252.607612] R13: 00000000000000c0 R14: ffff888062f43c00 R15: 00000000000000c0 [ 252.614883] FS: 00007f4a279d3700(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 252.623098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.628981] CR2: 0000001b2c922000 CR3: 00000000615d0000 CR4: 00000000001406e0 [ 252.636242] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.643504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.607164] Shutting down cpus with NMI [ 253.625528] Kernel Offset: disabled [ 253.629166] Rebooting in 86400 seconds..