[ 54.931940] audit: type=1800 audit(1538967450.976:28): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 56.342395] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 57.739038] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 58.119314] random: sshd: uninitialized urandom read (32 bytes read) [ 59.849844] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.109' (ECDSA) to the list of known hosts. [ 65.606387] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 02:57:43 fuzzer started [ 70.117592] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 02:57:48 dialing manager at 10.128.0.26:36867 2018/10/08 02:57:48 syscalls: 1 2018/10/08 02:57:48 code coverage: enabled 2018/10/08 02:57:48 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 02:57:48 setuid sandbox: enabled 2018/10/08 02:57:48 namespace sandbox: enabled 2018/10/08 02:57:48 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 02:57:48 fault injection: enabled 2018/10/08 02:57:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 02:57:48 net packed injection: enabled 2018/10/08 02:57:48 net device setup: enabled [ 75.822777] random: crng init done 02:59:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x803, 0x8010000000000088) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0xfffffdef]}}, 0x1c) [ 198.464173] IPVS: ftp: loaded support on port[0] = 21 [ 200.787578] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.794140] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.802774] device bridge_slave_0 entered promiscuous mode [ 200.961737] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.968207] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.976889] device bridge_slave_1 entered promiscuous mode [ 201.117219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.255554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.682424] bond0: Enslaving bond_slave_0 as an active interface with an up link 02:59:57 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x7, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x301}, 0xffffff50}}, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x8000400}, 0xc) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000480)=0x800, 0x4) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4b9c, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6370752f73797a3104", 0x1ff) open(&(0x7f0000000400)='./file0\x00', 0x200080, 0x132) [ 201.874472] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.262852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.269885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.718464] IPVS: ftp: loaded support on port[0] = 21 [ 202.867961] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.876223] team0: Port device team_slave_0 added [ 203.127759] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.135947] team0: Port device team_slave_1 added [ 203.357706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 203.364832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.373854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.514492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.521794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.530686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.795070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.802857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.811994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.975682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.983424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.992568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.189675] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.196263] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.204957] device bridge_slave_0 entered promiscuous mode [ 206.347426] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.353995] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.362629] device bridge_slave_1 entered promiscuous mode [ 206.565822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.627155] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.633808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.640730] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.647324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.656526] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.823631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 207.301893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.368637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.513278] bond0: Enslaving bond_slave_1 as an active interface with an up link 03:00:03 executing program 2: ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x7, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0x1c, 0x14}}, 0xffffff50}}, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4b9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) [ 207.684181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.691263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.937924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.945170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.668371] IPVS: ftp: loaded support on port[0] = 21 [ 208.692301] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.700344] team0: Port device team_slave_0 added [ 208.936040] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.944194] team0: Port device team_slave_1 added [ 209.099050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 209.107808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.117017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.389518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 209.397222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.406276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.610650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.618347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.627688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.866530] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.874207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.883148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.949766] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.956326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.963338] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.969796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.978574] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 213.171943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.634205] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.640665] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.649442] device bridge_slave_0 entered promiscuous mode [ 213.904157] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.910636] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.919270] device bridge_slave_1 entered promiscuous mode [ 214.194669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 214.427348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 215.247895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.558677] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.815118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 215.822243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.149193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 216.156375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:00:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) [ 217.066705] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.074875] team0: Port device team_slave_0 added [ 217.473153] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.481189] team0: Port device team_slave_1 added [ 217.770504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.777696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.786783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.927703] IPVS: ftp: loaded support on port[0] = 21 [ 218.120952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 218.128231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.137209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.320469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.487990] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.495711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.505016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.833415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.840992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.850051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.698719] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.050596] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.057105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.065941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.255798] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.600642] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.607213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.614235] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.620684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.629314] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.072204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.891731] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.898226] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.906874] device bridge_slave_0 entered promiscuous mode [ 224.309557] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.316350] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.324879] device bridge_slave_1 entered promiscuous mode [ 224.639124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.976868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.072447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.438056] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.485480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.731112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 226.738282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.156387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.163584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:00:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) getpgrp(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)) tgkill(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @loopback}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380), &(0x7f00000003c0)=0x10) r2 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 227.794810] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 228.327488] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.335871] team0: Port device team_slave_0 added [ 228.793741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.802139] team0: Port device team_slave_1 added [ 228.898442] IPVS: ftp: loaded support on port[0] = 21 [ 229.243001] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.249384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.257671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.279688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.312387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.321286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.757273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.764596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.773391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.150869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.158606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.167813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.656401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.664204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.673350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.924828] 8021q: adding VLAN 0 to HW filter on device team0 03:00:27 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000140)=""/62, 0x3e) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000002c0)="89", 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3e6, 0x0) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0xf401000080550000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:00:29 executing program 0: capset(&(0x7f0000000180)={0x19980330}, &(0x7f00009b3000)) r0 = memfd_create(&(0x7f0000000240)="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", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x40000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getpgid(r1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000200)='./file0/file0\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in6=@mcast2, 0x4e23, 0x3, 0x4e20, 0x10001, 0x2, 0x20, 0x80, 0x2c, 0x0, r3}, {0x1ff, 0x8000, 0x4c, 0x9, 0x7, 0x20, 0x7fffffff, 0x247d}, {0x5b5f, 0x9a7, 0x100000001}, 0x1, 0x6e6bba, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast1, 0x4d4, 0x33}, 0x2, @in=@broadcast, 0x3503, 0x6, 0x3, 0xff, 0x4b, 0x9, 0x4e}}, 0xe8) [ 232.971890] syz-executor0 (6873) used greatest stack depth: 51072 bytes left [ 233.197249] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) 03:00:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0xea0ea18e39d1a8bf, 0xfa00, {&(0x7f0000000240), r1, r0}}, 0xfd33) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x410000, 0x0) 03:00:30 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400200, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) open_by_handle_at(r0, &(0x7f00000000c0)={0xdd, 0x400000000, "b96695dc84247c57436bc176966a3dd606b63208fbf726c861b1ce2dc53217ee8a3ad00da4f0a56551bfe82de2fe040006445122c2ed3a12ba6c7ffca6f083b855b8c1db9e293317e44ee5ae9dd6aa4ba82d638efec45cf8518c01ca79f4a3b88a3fe1b9e7435405fbb7c4613ba96197dd89ac20e28fc5f122e5e79bdaefab64a64da1848f2f97c426cd77c049284083a5ba4fd7b6634cc297c8c7ab72e9fc43926f827d16fe7f2bd1e4be3e0a99adef40961287a3b3ed32ddeba4abf3342849948e7accacacedd000637d78be88dce35330983c0e"}, 0x402000) timer_create(0x3, &(0x7f0000000000)={0x0, 0x40, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000001c0)) 03:00:30 executing program 0: r0 = socket(0x4000000000000010, 0x802, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff, 0x20200) write(r0, &(0x7f00000004c0)="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", 0xfc) [ 234.811864] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 234.819333] netlink: 188 bytes leftover after parsing attributes in process `syz-executor0'. [ 234.864511] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 234.872088] netlink: 188 bytes leftover after parsing attributes in process `syz-executor0'. 03:00:31 executing program 0: r0 = socket(0x4000000000000010, 0x802, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff, 0x20200) write(r0, &(0x7f00000004c0)="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", 0xfc) [ 235.323990] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 235.331387] netlink: 188 bytes leftover after parsing attributes in process `syz-executor0'. 03:00:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0xff, 0x9, 0x4d99, 0xcc6b, 0x6, 0x4fb}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000580)=""/185) [ 235.733751] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.740284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.747431] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.754072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.762828] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.793162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.991147] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.997773] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.006315] device bridge_slave_0 entered promiscuous mode 03:00:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4c, &(0x7f0000000100)="153f6234328dd2e6495d76607041b4f016b07e295cee15e0a54decf0d12514ce9bf03023dd315a1d586fd048b188ec025b2fb1197fbd942bd04a3c3cd3fbc1606219b38cc28af9488690e6bbf293b9a8645065f45cb9dff78803beaecb9864d630546e2d1c57939a021cc691e8332759fd50ed2d97cb910408fbf64cac56d82e9362f9bbed3e631f6adff2ac0b8432ca4a6869c5b502f153c00bcc7262f32c36b67a875af184f6e1bb40b9c713c2ef1a") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @dev, 'ip_vti0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x1b3, 0x0) [ 236.474386] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.480886] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.489474] device bridge_slave_1 entered promiscuous mode [ 236.907199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.257639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.355423] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.545094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.734006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.085366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 239.092553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.458581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 239.465764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.885892] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.471972] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.480110] team0: Port device team_slave_0 added [ 240.674953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.683146] team0: Port device team_slave_1 added [ 240.892011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 240.901103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.910180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 03:00:37 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x7, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x301}, 0xffffff50}}, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x8000400}, 0xc) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000480)=0x800, 0x4) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4b9c, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6370752f73797a3104", 0x1ff) open(&(0x7f0000000400)='./file0\x00', 0x200080, 0x132) [ 241.098137] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.104778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.112638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.240430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.247578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.256805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.529992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.537929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.546811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.775706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.783668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.792862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.108528] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.101507] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.108096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.115155] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.121692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.130244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.136999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.871967] 8021q: adding VLAN 0 to HW filter on device bond0 03:00:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x39044, 0x2000005) [ 247.774627] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.338256] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.344749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.352651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.874169] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.255635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.779723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 03:00:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x1, 0x2) [ 252.320978] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 252.327484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.335452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.649686] 8021q: adding VLAN 0 to HW filter on device team0 03:00:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@remote, @rand_addr, @remote}, 0x12) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x18) close(r3) dup3(r1, r2, 0x0) 03:00:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="24000000260077000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x40010, r0, 0x0) 03:00:50 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x7, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x301}, 0xffffff50}}, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000180)=@proc={0x10, 0x0, 0x0, 0x8000400}, 0xc) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000480)=0x800, 0x4) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4b9c, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6370752f73797a3104", 0x1ff) open(&(0x7f0000000400)='./file0\x00', 0x200080, 0x132) 03:00:50 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20300, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r1, 0x605, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) ptrace$setregset(0x4205, r2, 0x203, &(0x7f0000000380)={&(0x7f0000000340)="ecae9603d74ec5574f0f7bb7e40206080fcc41cec70000b41497d72144037fc7a928b5662cf30a1d", 0x28}) faccessat(r0, &(0x7f00000003c0)='./file0\x00', 0x1c0, 0x100) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000400)=0x5, &(0x7f0000000440)=0x2) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000480), 0x4) fcntl$setflags(r0, 0x2, 0x1) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1) sendmsg$nl_netfilter(r0, &(0x7f0000001800)={&(0x7f00000004c0), 0xc, &(0x7f00000017c0)={&(0x7f0000000500)={0x128c, 0x4, 0xb, 0x408, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x9}, [@generic="6b4776ffc38a5d4f098f4e673531ee42baa9ed681b3c6482f4d34fc8179efcecf8d36a6d53643ae858fa8b878a78a9cc23d616c84fe0ac46548cd804a8907f242c86da6e085e6299de574c3fad294b107d36188cfb3eb9153793cc2f40ef7e3071e96862556f946e8ee2a0dcede5d14d781388b33fdbe4f575ee04917c3a3cad7a8d56929176eef2431af4a44b8baefae09e901c9391900eb68dbd98998c36a211ad56deafa1d7b4fa38d3751b1892de6ada10121bb7b9580a86676869597ec43fdf6b07", @generic="109eae6b337dce644e6fb28959ca05557f0f3cb37bdb24d33485fd1a081300690f0c9db83126711df8eea28440c7875ae8d7d667870f22f3a37b22427a4770b08b0f4f89e6679976577474df0cefe28390599f9f067d13f6fd193b0d0b68092f82f9cc6b29af1bf430ce79bed3f04b43d78d3ab4553973c75efd03da0e325121b46a7397a8fdab85786586981aad1ad2b99aff2071fbefcde8c1adc68d677c474aef7cf0a36d0f5454888523cfc51affe793d6de23ec859e50849c97cc62db89c39b3bdf9e569c5838552682c066d1b74fc62d7fc0297b581dc91212", @generic="820d21f65063f81b3343", @nested={0x10cc, 0x96, [@generic="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", @generic="ed0145655c4d2b5fd5f3f901c90abb063716b3caea0275b47dd4450e56e22311f2cb57afd7c51d47bdcafeefb3849985be14c552fc86bc2f30cec20d0d56acc9e2f67c0103bb4f59013935091e2265a38714f53bf67bdc8ded11b3994d88c2b0e2df51268c48dd867c85edb1cba4b4c3d3a0fc2b71cd880df43e58d442b0ca854e35778c7159682eeeb64561d14491e88018f7383d8f452220612db585b6f3376e7c1fc7f964d574bdacf00dc46c4dd71512ffcf935c71c0743a318541be8d668a1fa886896e"]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x4}, 0x10) set_thread_area(&(0x7f0000001840)={0x7, 0x20001000, 0xffffffffffffffff, 0x6, 0x1, 0x2, 0x9, 0x10001, 0x1, 0x20}) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000001880)={0x7fffffff, 0x5}) getsockname$inet(r0, &(0x7f00000018c0)={0x2, 0x0, @rand_addr}, &(0x7f0000001900)=0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x200000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000001980)) accept4$packet(r0, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001a00)=0x14, 0x80000) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001a40)={{{@in6=@mcast1, @in6=@mcast1, 0x4e24, 0x8, 0x4e21, 0xa37, 0xa, 0x0, 0xa0, 0x67, r5, r3}, {0x8, 0x9, 0xfffffffffffffff9, 0x4, 0xfffffffffffffff7, 0x1, 0xc53, 0x2}, {0xffffffffffffffff, 0x3, 0x6, 0x3}, 0x20, 0x6e6bb3, 0x1, 0x0, 0x3, 0x1}, {{@in=@rand_addr=0xffffffffffffff06, 0x4d6, 0xff}, 0xa, @in=@multicast2, 0x3503, 0x6, 0x3, 0x8, 0xffffffffffff1430, 0x4ed, 0x7c}}, 0xe8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001b40)={0x0, 0x4}, &(0x7f0000001b80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001bc0)={r6, @in={{0x2, 0x4e20, @remote}}, 0x0, 0xffff, 0x20000, 0xfff, 0x48}, &(0x7f0000001c80)=0x98) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000001cc0), &(0x7f0000001d00)=0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000001d40), &(0x7f0000001d80)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001e00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001dc0)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000001e40)={0x7, 0x8, 0xfa00, {r7, 0x6}}, 0x10) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000001e80)={0xdd, 0x8}) open(&(0x7f0000001ec0)='./file0\x00', 0x100, 0x84) r8 = shmget(0x2, 0x1000, 0x41, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r8, 0xd, &(0x7f0000001f00)=""/4096) 03:00:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="960f33"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:00:50 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/140, 0x8c}], 0x1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/176, 0xb0}], 0x1) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) [ 254.649449] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.656431] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.663345] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.670149] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.674139] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 254.677094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.698455] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.705692] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.712527] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.719303] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.726151] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.732986] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.813935] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 254.846302] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.853531] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.860319] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.867238] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.874181] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.880979] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.887952] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.894817] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.901596] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.908463] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.915316] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.930731] ================================================================== [ 254.938143] BUG: KMSAN: uninit-value in vmx_vcpu_put+0x77b/0xce0 [ 254.944316] CPU: 0 PID: 7523 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #63 [ 254.951515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.960886] Call Trace: [ 254.963507] dump_stack+0x306/0x460 [ 254.967159] ? vmx_vcpu_put+0x77b/0xce0 [ 254.971179] kmsan_report+0x1a3/0x2d0 [ 254.975019] __msan_warning+0x7c/0xe0 [ 254.978848] vmx_vcpu_put+0x77b/0xce0 [ 254.982680] ? vmx_vcpu_load+0x1cf0/0x1cf0 [ 254.986928] kvm_arch_vcpu_put+0x3b6/0x480 [ 254.991192] kvm_sched_out+0x90/0xb0 [ 254.994923] __schedule+0x970/0x9b0 [ 254.998575] ? kvm_arch_vcpu_ioctl_run+0x1bba/0x10a20 [ 255.003785] _cond_resched+0x5e/0xf0 [ 255.007520] kvm_arch_vcpu_ioctl_run+0x1bba/0x10a20 [ 255.012696] ? task_kmsan_context_state+0x6b/0x120 [ 255.017658] ? __msan_get_context_state+0x9/0x30 [ 255.022442] ? INIT_INT+0xc/0x30 [ 255.025824] ? task_kmsan_context_state+0x6b/0x120 [ 255.030781] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 255.036292] ? kmsan_set_origin_inline+0x6b/0x120 [ 255.041156] ? __msan_poison_alloca+0x17a/0x210 [ 255.045849] ? put_pid+0x71/0x410 [ 255.049315] ? kvm_vcpu_ioctl+0x20a4/0x20b0 [ 255.053661] ? put_pid+0x1a9/0x410 [ 255.057220] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 255.062604] ? get_task_pid+0x17b/0x270 [ 255.066605] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 255.070791] ? do_vfs_ioctl+0x18a/0x2810 [ 255.074892] ? __se_sys_ioctl+0x1da/0x270 [ 255.079069] ? kvm_vm_release+0x90/0x90 [ 255.083067] do_vfs_ioctl+0xcf3/0x2810 [ 255.086990] ? security_file_ioctl+0x92/0x200 [ 255.091531] __se_sys_ioctl+0x1da/0x270 [ 255.095559] __x64_sys_ioctl+0x4a/0x70 [ 255.099468] do_syscall_64+0xbe/0x100 [ 255.103296] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 255.108501] RIP: 0033:0x457579 [ 255.111707] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.130623] RSP: 002b:00007fc982095c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.138353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 255.145631] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 255.152906] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 255.160181] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9820966d4 [ 255.168500] R13: 00000000004c003b R14: 00000000004d0108 R15: 00000000ffffffff [ 255.175797] [ 255.177445] Uninit was stored to memory at: [ 255.181797] kmsan_internal_chain_origin+0x136/0x240 [ 255.186910] __msan_chain_origin+0x75/0xd0 [ 255.191174] vmx_prepare_switch_to_guest+0x4f6/0x1720 [ 255.196399] kvm_arch_vcpu_ioctl_run+0x82fa/0x10a20 [ 255.201431] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 255.205610] do_vfs_ioctl+0xcf3/0x2810 [ 255.209552] __se_sys_ioctl+0x1da/0x270 [ 255.213535] __x64_sys_ioctl+0x4a/0x70 [ 255.217435] do_syscall_64+0xbe/0x100 [ 255.221250] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 255.226441] [ 255.228077] Local variable description: ----error.i.i@vmx_prepare_switch_to_guest [ 255.235697] Variable was created at: [ 255.239433] vmx_prepare_switch_to_guest+0x188/0x1720 [ 255.244640] kvm_arch_vcpu_ioctl_run+0x82fa/0x10a20 [ 255.249658] ================================================================== [ 255.257027] Disabling lock debugging due to kernel taint [ 255.262996] Kernel panic - not syncing: panic_on_warn set ... [ 255.262996] [ 255.270401] CPU: 0 PID: 7523 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #63 [ 255.278983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.288352] Call Trace: [ 255.290963] dump_stack+0x306/0x460 [ 255.294625] panic+0x54c/0xafa [ 255.297876] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 255.303351] kmsan_report+0x2cd/0x2d0 [ 255.307176] __msan_warning+0x7c/0xe0 [ 255.311001] vmx_vcpu_put+0x77b/0xce0 [ 255.314854] ? vmx_vcpu_load+0x1cf0/0x1cf0 [ 255.319810] kvm_arch_vcpu_put+0x3b6/0x480 [ 255.324335] kvm_sched_out+0x90/0xb0 [ 255.328073] __schedule+0x970/0x9b0 [ 255.331724] ? kvm_arch_vcpu_ioctl_run+0x1bba/0x10a20 [ 255.336936] _cond_resched+0x5e/0xf0 [ 255.340677] kvm_arch_vcpu_ioctl_run+0x1bba/0x10a20 [ 255.345844] ? task_kmsan_context_state+0x6b/0x120 [ 255.350796] ? __msan_get_context_state+0x9/0x30 [ 255.355567] ? INIT_INT+0xc/0x30 [ 255.358951] ? task_kmsan_context_state+0x6b/0x120 [ 255.364701] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 255.370174] ? kmsan_set_origin_inline+0x6b/0x120 [ 255.375055] ? __msan_poison_alloca+0x17a/0x210 [ 255.379750] ? put_pid+0x71/0x410 [ 255.383223] ? kvm_vcpu_ioctl+0x20a4/0x20b0 [ 255.387573] ? put_pid+0x1a9/0x410 [ 255.391131] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 255.396510] ? get_task_pid+0x17b/0x270 [ 255.400521] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 255.404711] ? do_vfs_ioctl+0x18a/0x2810 [ 255.408787] ? __se_sys_ioctl+0x1da/0x270 [ 255.412955] ? kvm_vm_release+0x90/0x90 [ 255.416966] do_vfs_ioctl+0xcf3/0x2810 [ 255.420906] ? security_file_ioctl+0x92/0x200 [ 255.425434] __se_sys_ioctl+0x1da/0x270 [ 255.429452] __x64_sys_ioctl+0x4a/0x70 [ 255.433367] do_syscall_64+0xbe/0x100 [ 255.437199] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 255.442400] RIP: 0033:0x457579 [ 255.445614] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.464529] RSP: 002b:00007fc982095c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.472260] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 255.479538] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 255.486816] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 255.494096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9820966d4 [ 255.501378] R13: 00000000004c003b R14: 00000000004d0108 R15: 00000000ffffffff [ 257.085567] Shutting down cpus with NMI [ 257.089698] ------------[ cut here ]------------ [ 257.094516] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 257.099707] invalid opcode: 0000 [#1] SMP [ 257.103918] CPU: 1 PID: 7531 Comm: modprobe Tainted: G B 4.19.0-rc4+ #63 [ 257.106506] Kernel Offset: disabled [ [ 225577..11151577335]5] RReeboboootitinng gi in n8 64806400 0se cseoncodsn.ds.. . Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.129156] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 257.133892] Code: 00 74 27 65 8b 04 25 40 8f 03 00 ff c0 83 f8 08 7d 28 65 89 04 25 40 8f 03 00 65 c6 04 25 d5 6c 0b 00 ff c3 0f 0b 66 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 257.152849] RSP: 0018:fffffe0000049ea8 EFLAGS: 00010046 [ 257.158281] RAX: 0000000080000000 RBX: 0000000000000001 RCX: 00000000c0000101 [ 257.165602] RDX: 00000000ffff8802 RSI: ffffffff8ac011a8 RDI: ffff88021fcb9c00 [ 257.172917] RBP: fffffe0000049ef9 R08: 0000000000000000 R09: 0000000000000000 [ 257.180227] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 257.187546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.196020] FS: 00007f9cb3583700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 257.205337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.211264] CR2: 00007ffc33006e2c CR3: 000000015645b000 CR4: 00000000001426e0 [ 257.218583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.225929] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.233233] Call Trace: [ 257.235878] [ 257.238104] ? end_repeat_nmi+0x19/0x58 [ 257.242145] ? end_repeat_nmi+0x7/0x58 [ 257.246122] ? queued_spin_lock_slowpath+0xd5f/0x14d0 [ 257.251373] ? queued_spin_lock_slowpath+0xd5f/0x14d0 [ 257.256630] ? queued_spin_lock_slowpath+0xd5f/0x14d0 [ 257.262030] [ 257.264398] ? _raw_spin_lock+0x2c0/0x2d0 [ 257.268617] ? try_to_wake_up+0x14ac/0x2410 [ 257.273031] ? default_wake_function+0x92/0xb0 [ 257.277718] ? pollwake+0x246/0x320 [ 257.281407] ? arch_local_irq_disable+0x10/0x10 [ 257.286135] ? __wake_up_common+0x43b/0xa20 [ 257.290520] ? __x32_compat_sys_ppoll+0x1b0/0x1b0 [ 257.295443] ? __wake_up_common_lock+0x1a2/0x390 [ 257.300272] ? __wake_up+0x4a/0x60 [ 257.303908] ? __send_signal+0x13c2/0x1ab0 [ 257.308264] ? do_notify_parent+0xea2/0xfe0 [ 257.312711] ? do_exit+0x2e04/0x3f80 [ 257.316547] ? do_group_exit+0x1a0/0x350 [ 257.320711] ? __do_sys_exit_group+0x21/0x30 [ 257.325208] ? __se_sys_exit_group+0x14/0x20 [ 257.329702] ? __x64_sys_exit_group+0x1d/0x20 [ 257.334255] ? do_syscall_64+0xbe/0x100 [ 257.338297] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 257.343713] Modules linked in: [ 257.346996] ---[ end trace 9ec908ea46168828 ]--- [ 257.351826] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 257.356556] Code: 00 74 27 65 8b 04 25 40 8f 03 00 ff c0 83 f8 08 7d 28 65 89 04 25 40 8f 03 00 65 c6 04 25 d5 6c 0b 00 ff c3 0f 0b 66 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 257.376026] RSP: 0018:fffffe0000049ea8 EFLAGS: 00010046 [ 257.381468] RAX: 0000000080000000 RBX: 0000000000000001 RCX: 00000000c0000101 [ 257.388786] RDX: 00000000ffff8802 RSI: ffffffff8ac011a8 RDI: ffff88021fcb9c00 [ 257.396104] RBP: fffffe0000049ef9 R08: 0000000000000000 R09: 0000000000000000 [ 257.403417] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 257.410733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.418069] FS: 00007f9cb3583700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 257.426348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.432292] CR2: 00007ffc33006e2c CR3: 000000015645b000 CR4: 00000000001426e0 [ 257.440047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.448068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400