[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 58.348320] sshd (6055) used greatest stack depth: 53184 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 58.567424] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 60.357586] random: sshd: uninitialized urandom read (32 bytes read) [ 60.801514] random: sshd: uninitialized urandom read (32 bytes read) [ 63.224380] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.83' (ECDSA) to the list of known hosts. [ 68.967856] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/10 12:29:29 fuzzer started [ 73.543589] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/10 12:29:33 dialing manager at 10.128.0.26:45337 2018/10/10 12:29:33 syscalls: 1 2018/10/10 12:29:33 code coverage: enabled 2018/10/10 12:29:33 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/10 12:29:33 setuid sandbox: enabled 2018/10/10 12:29:33 namespace sandbox: enabled 2018/10/10 12:29:33 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/10 12:29:33 fault injection: enabled 2018/10/10 12:29:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/10 12:29:33 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/10 12:29:33 net device setup: enabled [ 78.788054] random: crng init done 12:31:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56b, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x62) sendmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=[{0xc}], 0xc, 0x20000000}, 0x5000000000000000}, {{&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000b80), 0x0, 0x4000001}}], 0x2, 0x20000000) fchown(r0, 0x0, 0x0) [ 202.382847] IPVS: ftp: loaded support on port[0] = 21 [ 203.731142] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.737748] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.746551] device bridge_slave_0 entered promiscuous mode [ 203.904431] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.910927] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.919642] device bridge_slave_1 entered promiscuous mode [ 204.063230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 204.203268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 204.638099] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.783388] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 205.488268] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 205.496750] team0: Port device team_slave_0 added 12:31:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 205.643676] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 205.651865] team0: Port device team_slave_1 added [ 205.991176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.226100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 206.233221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.242472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.443486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.451124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.460434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.595201] IPVS: ftp: loaded support on port[0] = 21 [ 206.762757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.770454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.779878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.670918] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.677583] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.686245] device bridge_slave_0 entered promiscuous mode [ 208.926102] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.932743] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.941248] device bridge_slave_1 entered promiscuous mode [ 209.183930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.323010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 209.415300] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.421788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.428917] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.435459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.444719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 209.612397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.202492] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.498278] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.746818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 210.754049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.982454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 210.989538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 12:31:49 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x14, &(0x7f0000caaffb), &(0x7f0000000080)=0xc) [ 211.647052] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.655334] team0: Port device team_slave_0 added [ 211.968004] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.976471] team0: Port device team_slave_1 added [ 212.293851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.300949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.310039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.542504] IPVS: ftp: loaded support on port[0] = 21 [ 212.614132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 212.621203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.630469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.891129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.899318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.908477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.184873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 213.192663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.201509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.239568] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.246175] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.254963] device bridge_slave_0 entered promiscuous mode [ 215.483047] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.489520] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.498223] device bridge_slave_1 entered promiscuous mode [ 215.749853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.001378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.596477] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.603065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.610025] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.616628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.625579] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.736675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.973255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.061473] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.361977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.369196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.661296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 217.668506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.513394] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.521569] team0: Port device team_slave_0 added [ 218.774478] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.782972] team0: Port device team_slave_1 added [ 219.158650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.165803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.174977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.480385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 219.487562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.496769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.824026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.831639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.840851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 12:31:57 executing program 3: mmap(&(0x7f0000414000/0x4000)=nil, 0x4000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x5, &(0x7f000045fff8)) [ 220.166880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.174639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.183778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.310382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.495992] IPVS: ftp: loaded support on port[0] = 21 [ 222.822867] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.019453] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.026041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.033121] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.039591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.048658] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.102969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.128273] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 224.134775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.142935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.869755] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.876429] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.885086] device bridge_slave_0 entered promiscuous mode [ 225.238066] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.244699] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.253453] device bridge_slave_1 entered promiscuous mode [ 225.604322] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.611708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.949300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.018070] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.345226] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.714458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.721600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.975984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.983183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.254324] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.262720] team0: Port device team_slave_0 added [ 229.598931] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.607845] team0: Port device team_slave_1 added [ 229.968538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.975813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.984950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.350435] 8021q: adding VLAN 0 to HW filter on device bond0 12:32:08 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) [ 230.413725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.420786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.429904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.793600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.801232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.810583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.238232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.246031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.255207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.073627] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.360141] IPVS: ftp: loaded support on port[0] = 21 [ 233.554248] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.560698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.569082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.360198] 8021q: adding VLAN 0 to HW filter on device team0 12:32:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000400)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40246608, 0xffffffffffffffff) [ 236.006897] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.013513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.020463] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.027049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.035655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 12:32:14 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x8, 0x1, 0x6, 0x0, 0x7, 0x100, 0xa, 0x1, 0x40, 0x7, 0xff, 0x4, 0x5, 0x0, 0x3ff, 0x1, 0x80, 0x80000000, 0xfffffffffffffff7, 0x0, 0x80, 0x20d6, 0x5, 0x3, 0x100000001, 0x0, 0x1000, 0x4, 0x3, 0x98, 0x3f, 0x4, 0x6, 0x80, 0x5, 0x0, 0x5, 0x1, @perf_config_ext={0x10001, 0x1}, 0x20, 0x133, 0x0, 0x3, 0xffffffffffff8001, 0x1ff, 0xffffffffffffffff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) pwrite64(r0, &(0x7f0000000000)="327ce3467f1c8b377e7f36907334f1fc4ad3721843a7f56fb0d359e7194d878e43f233b855c2526562c4dbd029f6", 0x2e, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, [0x0, 0x5, 0x9, 0x6, 0xbd9e, 0x4, 0x2, 0x7ff, 0x7fffffff, 0xae5, 0x7, 0x9, 0x8, 0x3, 0x10000]}, &(0x7f0000000300)=0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r2, 0x3}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200400, 0x0) syncfs(r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x12a9, 0x9, 0x1, 'queue0\x00', 0x3}) [ 236.543324] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.549835] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.558517] device bridge_slave_0 entered promiscuous mode [ 236.605743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 12:32:14 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) fcntl$addseals(r1, 0x409, 0x2) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x1, 0x7, 0x3, 0x3, 0x2b3}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x80000000, 0xfffffffffffff000, 0x100000001}) [ 237.080115] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.086756] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.095475] device bridge_slave_1 entered promiscuous mode 12:32:15 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) fcntl$addseals(r1, 0x409, 0x2) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x1, 0x7, 0x3, 0x3, 0x2b3}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x80000000, 0xfffffffffffff000, 0x100000001}) [ 237.559368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 12:32:15 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) fcntl$addseals(r1, 0x409, 0x2) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x1, 0x7, 0x3, 0x3, 0x2b3}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x80000000, 0xfffffffffffff000, 0x100000001}) [ 237.986751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 12:32:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x700}, 0xc, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004000100000050e7522dd391a7f610890e00000001010007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) 12:32:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[], 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) [ 239.264067] bond0: Enslaving bond_slave_0 as an active interface with an up link 12:32:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x6}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x7f, 0x2, 0x3ff, 0x5}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x9}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x5, @loopback, 0x9}, @in={0x2, 0x4e21}], 0x78) [ 239.676145] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.047194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.054656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.466398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.473624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.851990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.592272] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.600708] team0: Port device team_slave_0 added [ 241.916546] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.925203] team0: Port device team_slave_1 added [ 242.213563] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.261036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 242.268420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.277441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.603230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 242.610432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.619496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.947692] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.955617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.964560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.300988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 243.308783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.317863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.703321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.709951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.717999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:32:22 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) [ 244.939226] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.107090] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.113860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.120964] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.127616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.136479] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 246.143381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.028861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.825118] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 12:32:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000009, 0x100031, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)) [ 250.640503] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.647153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.655538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.237929] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.945797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.522970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 12:32:33 executing program 3: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6}}, 0xe8) r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0x0) r1 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) [ 255.097936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.104587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.112669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.450840] 8021q: adding VLAN 0 to HW filter on device team0 12:32:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000016c0)={0x0, 0x0, @pic={0x0, 0x40bd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20, 0x0, 0x5}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x5d, &(0x7f0000000080), 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0)=0x31, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000640)="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", 0x9d5) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, 0x0, 0x6, &(0x7f00000000c0)) 12:32:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x6}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x7f, 0x2, 0x3ff, 0x5}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x9}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x5, @loopback, 0x9}, @in={0x2, 0x4e21}], 0x78) 12:32:35 executing program 5: r0 = shmget(0x0, 0x3000, 0x1008, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x2, 0x48020) seccomp(0x1, 0x0, &(0x7f0000000040)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup(r2) openat$cgroup(r4, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-'}, 0x28, 0x1) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000200)={0x8, 0xecff, 0x10000, 0x4, 0x80}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x8, 0x2, [0xf538, 0xff]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x5}, &(0x7f0000000300)=0x10) chroot(&(0x7f0000000340)='./file0\x00') r7 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)=0x0) write$P9_RGETLOCK(r4, &(0x7f0000000400)={0x20, 0x37, 0x2, {0x2, 0x1, 0xff, r8, 0x2, 'L-'}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000440)={0x1, 0x6, 0xfd5, 0x2, 0xf761}, 0x14) r9 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f0000000480)=""/26, 0x20000, 0x1000, 0xea}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0xe8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000640)={r6, 0x7}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snapshot\x00', 0x8000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x80101, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000700)) r11 = timerfd_create(0x3, 0x80800) sched_rr_get_interval(r8, &(0x7f0000000740)) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000780)={r6, 0x7ff, 0x8e, 0x2, 0x3, 0x1, 0x9, 0x2, {r5, @in6={{0xa, 0x4e21, 0x3f, @mcast2, 0x5}}, 0x2, 0x5, 0x7fffffff, 0x6, 0x9c1}}, &(0x7f0000000840)=0xb0) sendmsg$nl_route(r11, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@ipmr_delroute={0x24, 0x19, 0x710, 0x70bd2c, 0x25dfdbfb, {0x80, 0x94, 0x94, 0x1, 0xff, 0x0, 0x0, 0x5, 0x1100}, [@RTA_GATEWAY={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) fchown(r1, r10, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x48, 0x20, {"a1cabf56fc64a81f1f6ee668ca477b81b4636e0adf3492e7c208023cb6ea81d18c9e70f8e5447588e2eec64b9bee"}}, {0x0, "d71b08938c174b3080afe75eda3cba9afd41cab6ad44dbd0e162b768c3c4747f93a060266d5c25281c85802f60dabbb8c50e486e564e0c5ef29b63d794f42df31abe0907efd065bdc34b7e4411d3879c07bb4e3d43d54ffb083267efc4a2310bb8ff784bf719b7e8dbb301d9fe719866de552f4acb4f2a0c62ecfc4bcf56f73bac3d4b1ba087e4f074bab7f5f5c56172269c"}}, &(0x7f0000000a80)=""/247, 0xdc, 0xf7}, 0x20) 12:32:35 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 12:32:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000009, 0x100031, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)) 12:32:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x5560676d) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000fff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x84d07}) [ 257.786061] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 12:32:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x5d, &(0x7f0000000080), 0x0) mlockall(0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000640)="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", 0xfb9) timer_create(0x0, &(0x7f0000000040)={0x0, 0x35, 0x1, @thr={&(0x7f0000001fc0)="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", &(0x7f0000002fc0)}}, &(0x7f0000000100)) connect$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @dev}, 0x5) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f00000000c0)) 12:32:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200), 0x4) 12:32:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000009, 0x100031, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)) [ 258.109314] ================================================================== [ 258.116753] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 258.124411] CPU: 0 PID: 7427 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #66 [ 258.131608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.141073] Call Trace: [ 258.143689] dump_stack+0x306/0x460 [ 258.147354] ? vmx_set_constant_host_state+0x1778/0x1830 [ 258.152876] kmsan_report+0x1a2/0x2e0 [ 258.156728] __msan_warning+0x7c/0xe0 [ 258.160577] vmx_set_constant_host_state+0x1778/0x1830 [ 258.165903] vmx_create_vcpu+0x3e6f/0x7870 [ 258.170175] ? kmsan_set_origin_inline+0x6b/0x120 [ 258.175057] ? __msan_poison_alloca+0x17a/0x210 [ 258.179855] ? vmx_vm_init+0x340/0x340 [ 258.183787] kvm_arch_vcpu_create+0x25d/0x2f0 [ 258.188679] kvm_vm_ioctl+0x13fd/0x33d0 [ 258.192901] ? __msan_poison_alloca+0x17a/0x210 [ 258.197615] ? do_vfs_ioctl+0x18a/0x2810 [ 258.201712] ? __se_sys_ioctl+0x1da/0x270 [ 258.205911] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 258.210783] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 258.215669] do_vfs_ioctl+0xcf3/0x2810 [ 258.219613] ? security_file_ioctl+0x92/0x200 [ 258.224152] __se_sys_ioctl+0x1da/0x270 [ 258.228174] __x64_sys_ioctl+0x4a/0x70 [ 258.232096] do_syscall_64+0xbe/0x100 [ 258.235937] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.241146] RIP: 0033:0x457579 [ 258.244363] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.263299] RSP: 002b:00007f2274125c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.271037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 258.278859] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 258.286239] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 258.293535] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f22741266d4 [ 258.300837] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 258.308155] 12:32:36 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) [ 258.309798] Local variable description: ----dt@vmx_set_constant_host_state [ 258.316862] Variable was created at: [ 258.320607] vmx_set_constant_host_state+0x2b0/0x1830 [ 258.325817] vmx_create_vcpu+0x3e6f/0x7870 [ 258.330075] ================================================================== [ 258.337443] Disabling lock debugging due to kernel taint [ 258.342937] Kernel panic - not syncing: panic_on_warn set ... [ 258.342937] [ 258.350344] CPU: 0 PID: 7427 Comm: syz-executor4 Tainted: G B 4.19.0-rc4+ #66 [ 258.359458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.371355] Call Trace: [ 258.373979] dump_stack+0x306/0x460 [ 258.377668] panic+0x54c/0xafa [ 258.380985] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 258.386492] kmsan_report+0x2d3/0x2e0 [ 258.390346] __msan_warning+0x7c/0xe0 [ 258.394187] vmx_set_constant_host_state+0x1778/0x1830 [ 258.399510] vmx_create_vcpu+0x3e6f/0x7870 [ 258.403784] ? kmsan_set_origin_inline+0x6b/0x120 [ 258.408671] ? __msan_poison_alloca+0x17a/0x210 [ 258.413397] ? vmx_vm_init+0x340/0x340 [ 258.417328] kvm_arch_vcpu_create+0x25d/0x2f0 [ 258.421885] kvm_vm_ioctl+0x13fd/0x33d0 [ 258.425915] ? __msan_poison_alloca+0x17a/0x210 [ 258.430629] ? do_vfs_ioctl+0x18a/0x2810 [ 258.434714] ? __se_sys_ioctl+0x1da/0x270 [ 258.438901] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 258.443779] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 258.448678] do_vfs_ioctl+0xcf3/0x2810 [ 258.452619] ? security_file_ioctl+0x92/0x200 [ 258.457158] __se_sys_ioctl+0x1da/0x270 [ 258.461182] __x64_sys_ioctl+0x4a/0x70 [ 258.465094] do_syscall_64+0xbe/0x100 [ 258.468930] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.474144] RIP: 0033:0x457579 [ 258.477364] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.496285] RSP: 002b:00007f2274125c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.504026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 258.511319] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 258.519474] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 258.526764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f22741266d4 [ 258.534054] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 258.542365] Kernel Offset: disabled [ 258.546005] Rebooting in 86400 seconds..