[ OK ] Started Regular background program processing daemon. Starting Permit User Sessions... [ OK ] Found device /dev/ttyS0. [ OK ] Started Permit User Sessions. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ *] A start job is running for OpenBSD …Shell server (1min 26s / 2min 45s) [ **] A start job is running for OpenBSD …Shell server (1min 27s / 2min 45s) [ ***] A start job is running for OpenBSD …Shell server (1min 29s / 2min 57s) [ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. syzkaller login: [ 146.328292][ T8475] IPVS: ftp: loaded support on port[0] = 21 [ 146.497796][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 146.598688][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.605987][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.616557][ T8475] device bridge_slave_0 entered promiscuous mode [ 146.628260][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.635423][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.645072][ T8475] device bridge_slave_1 entered promiscuous mode [ 146.683519][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.698056][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.734884][ T8475] team0: Port device team_slave_0 added [ 146.745747][ T8475] team0: Port device team_slave_1 added [ 146.781210][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.788313][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.814519][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.828998][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.836020][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.862274][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.906538][ T8475] device hsr_slave_0 entered promiscuous mode [ 146.914458][ T8475] device hsr_slave_1 entered promiscuous mode [ 147.126352][ T8475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.148720][ T8475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.169726][ T8475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.190120][ T8475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.274188][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.281537][ T8475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.289754][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.297296][ T8475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.397874][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.424715][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.437267][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.446211][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.458267][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 147.480633][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.496008][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.506432][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.515959][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.523326][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.550983][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.560794][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.570901][ T3217] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.578463][ T3217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.586725][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.617594][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.628543][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.639360][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.682183][ T8475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.693077][ T8475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.711178][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.720885][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.732351][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.742658][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.753129][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.763132][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.773059][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.784444][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.822518][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.830647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.860691][ T8475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.905380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.916077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.960345][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.971709][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.992816][ T8475] device veth0_vlan entered promiscuous mode [ 148.001144][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.011006][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.035953][ T8475] device veth1_vlan entered promiscuous mode [ 148.091436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.100362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.110105][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.119961][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.140759][ T8475] device veth0_macvtap entered promiscuous mode [ 148.160679][ T8475] device veth1_macvtap entered promiscuous mode [ 148.202684][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.210490][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.221484][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.230643][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.240814][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.261920][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.270411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.280737][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 148.528377][ C1] ===================================================== [ 148.535388][ C1] BUG: KMSAN: uninit-value in can_receive+0x26b/0x630 [ 148.542185][ C1] CPU: 1 PID: 8475 Comm: syz-executor984 Not tainted 5.8.0-rc5-syzkaller #0 [ 148.550887][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.560964][ C1] Call Trace: [ 148.564265][ C1] [ 148.567140][ C1] dump_stack+0x21c/0x280 [ 148.571766][ C1] kmsan_report+0xf7/0x1e0 [ 148.576231][ C1] __msan_warning+0x58/0xa0 [ 148.580768][ C1] can_receive+0x26b/0x630 [ 148.585228][ C1] can_rcv+0x1fb/0x410 [ 148.589344][ C1] __netif_receive_skb+0x265/0x670 [ 148.594480][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 148.600046][ C1] ? can_rcv_filter+0x1110/0x1110 [ 148.605114][ C1] process_backlog+0x50d/0xba0 [ 148.609944][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.615817][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 148.621129][ C1] napi_poll+0x43b/0xfd0 [ 148.625408][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.630622][ C1] net_rx_action+0x35c/0xd40 [ 148.635215][ C1] ? net_tx_action+0xdc0/0xdc0 [ 148.639979][ C1] __do_softirq+0x2ea/0x7f5 [ 148.644487][ C1] asm_call_on_stack+0xf/0x20 [ 148.649146][ C1] [ 148.652082][ C1] do_softirq_own_stack+0x7c/0xa0 [ 148.657128][ C1] __irq_exit_rcu+0x226/0x270 [ 148.661809][ C1] irq_exit_rcu+0xe/0x10 [ 148.666047][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 148.671864][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 148.677863][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x4b/0x70 [ 148.684265][ C1] Code: 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 28 48 89 df e8 b8 6e 4b f1 c6 00 00 c6 03 00 4d 85 e4 75 1c 4c 89 7d d8 ff 75 d8 9d <48> 83 c4 08 5b 41 5c 41 5e 41 5f 5d c3 e8 53 74 4b f1 eb d1 44 89 [ 148.703862][ C1] RSP: 0018:ffff8880b8b0f880 EFLAGS: 00000282 [ 148.709944][ C1] RAX: ffff88821fd3bc00 RBX: ffff88812fd1dc00 RCX: 000000021fc9cc00 [ 148.717927][ C1] RDX: ffff88821fc9cc00 RSI: 00000000000004a0 RDI: ffff88812fd1dc00 [ 148.725895][ C1] RBP: ffff8880b8b0f8a8 R08: ffffea000000000f R09: ffff88812fffa000 [ 148.733862][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 148.741835][ C1] R13: ffff8880b656c2e8 R14: 0000000000000000 R15: 0000000000000282 [ 148.749851][ C1] hrtimer_start_range_ns+0x459/0x4e0 [ 148.755249][ C1] j1939_tp_schedule_txtimer+0x132/0x1b0 [ 148.760890][ C1] j1939_sk_sendmsg+0x1cc0/0x2950 [ 148.765962][ C1] ____sys_sendmsg+0xc82/0x1240 [ 148.770829][ C1] ? j1939_sk_getsockopt+0x6a0/0x6a0 [ 148.776121][ C1] __sys_sendmsg+0x6d1/0x840 [ 148.780756][ C1] ? j1939_sk_release+0xfd0/0xfd0 [ 148.785812][ C1] ? __sys_bind+0x54b/0x920 [ 148.790315][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.795512][ C1] ? kmsan_get_metadata+0x116/0x180 [ 148.800721][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 148.806525][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 148.812683][ C1] __se_sys_sendmsg+0x97/0xb0 [ 148.817364][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 148.822123][ C1] do_syscall_64+0xad/0x160 [ 148.826734][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.832627][ C1] RIP: 0033:0x443559 [ 148.836511][ C1] Code: Bad RIP value. [ 148.840570][ C1] RSP: 002b:00007ffffdad8558 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.848995][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443559 [ 148.856994][ C1] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 148.864981][ C1] RBP: 00007ffffdad8560 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 148.872954][ C1] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 00007ffffdad8570 [ 148.880950][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.888926][ C1] [ 148.891252][ C1] Uninit was created at: [ 148.895488][ C1] kmsan_internal_poison_shadow+0x66/0xd0 [ 148.901217][ C1] kmsan_slab_alloc+0x8a/0xe0 [ 148.905884][ C1] __kmalloc_node_track_caller+0xeab/0x12e0 [ 148.911770][ C1] __alloc_skb+0x35f/0xb30 [ 148.916181][ C1] j1939_tp_txtimer+0x402c/0x6980 [ 148.921196][ C1] __run_hrtimer+0x7cd/0xf00 [ 148.925772][ C1] hrtimer_run_softirq+0x3bf/0x690 [ 148.930877][ C1] __do_softirq+0x2ea/0x7f5 [ 148.935358][ C1] ===================================================== [ 148.942271][ C1] Disabling lock debugging due to kernel taint [ 148.948412][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 148.954995][ C1] CPU: 1 PID: 8475 Comm: syz-executor984 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 148.965041][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.975087][ C1] Call Trace: [ 148.978364][ C1] [ 148.981213][ C1] dump_stack+0x21c/0x280 [ 148.985547][ C1] panic+0x4d7/0xef7 [ 148.989457][ C1] ? add_taint+0x17c/0x210 [ 148.993869][ C1] kmsan_report+0x1df/0x1e0 [ 148.998375][ C1] __msan_warning+0x58/0xa0 [ 149.002882][ C1] can_receive+0x26b/0x630 [ 149.007305][ C1] can_rcv+0x1fb/0x410 [ 149.011392][ C1] __netif_receive_skb+0x265/0x670 [ 149.016516][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 149.022061][ C1] ? can_rcv_filter+0x1110/0x1110 [ 149.027088][ C1] process_backlog+0x50d/0xba0 [ 149.031850][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 149.037664][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 149.042967][ C1] napi_poll+0x43b/0xfd0 [ 149.047228][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.052432][ C1] net_rx_action+0x35c/0xd40 [ 149.057034][ C1] ? net_tx_action+0xdc0/0xdc0 [ 149.061789][ C1] __do_softirq+0x2ea/0x7f5 [ 149.066310][ C1] asm_call_on_stack+0xf/0x20 [ 149.070983][ C1] [ 149.073917][ C1] do_softirq_own_stack+0x7c/0xa0 [ 149.078932][ C1] __irq_exit_rcu+0x226/0x270 [ 149.083601][ C1] irq_exit_rcu+0xe/0x10 [ 149.087842][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 149.093645][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 149.099620][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x4b/0x70 [ 149.106026][ C1] Code: 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 28 48 89 df e8 b8 6e 4b f1 c6 00 00 c6 03 00 4d 85 e4 75 1c 4c 89 7d d8 ff 75 d8 9d <48> 83 c4 08 5b 41 5c 41 5e 41 5f 5d c3 e8 53 74 4b f1 eb d1 44 89 [ 149.125641][ C1] RSP: 0018:ffff8880b8b0f880 EFLAGS: 00000282 [ 149.131709][ C1] RAX: ffff88821fd3bc00 RBX: ffff88812fd1dc00 RCX: 000000021fc9cc00 [ 149.140115][ C1] RDX: ffff88821fc9cc00 RSI: 00000000000004a0 RDI: ffff88812fd1dc00 [ 149.148080][ C1] RBP: ffff8880b8b0f8a8 R08: ffffea000000000f R09: ffff88812fffa000 [ 149.156048][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 149.164014][ C1] R13: ffff8880b656c2e8 R14: 0000000000000000 R15: 0000000000000282 [ 149.172014][ C1] hrtimer_start_range_ns+0x459/0x4e0 [ 149.177408][ C1] j1939_tp_schedule_txtimer+0x132/0x1b0 [ 149.183035][ C1] j1939_sk_sendmsg+0x1cc0/0x2950 [ 149.188085][ C1] ____sys_sendmsg+0xc82/0x1240 [ 149.192950][ C1] ? j1939_sk_getsockopt+0x6a0/0x6a0 [ 149.198230][ C1] __sys_sendmsg+0x6d1/0x840 [ 149.202834][ C1] ? j1939_sk_release+0xfd0/0xfd0 [ 149.207855][ C1] ? __sys_bind+0x54b/0x920 [ 149.212352][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.217561][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.222760][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 149.228565][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 149.234720][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.239405][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.244215][ C1] do_syscall_64+0xad/0x160 [ 149.248857][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 149.254754][ C1] RIP: 0033:0x443559 [ 149.258636][ C1] Code: Bad RIP value. [ 149.262707][ C1] RSP: 002b:00007ffffdad8558 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.271217][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443559 [ 149.279198][ C1] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 149.287176][ C1] RBP: 00007ffffdad8560 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 149.295141][ C1] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 00007ffffdad8570 [ 149.303107][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.311705][ C1] ------------[ cut here ]------------ [ 149.317175][ C1] kernel BUG at mm/kmsan/kmsan.h:87! [ 149.322464][ C1] invalid opcode: 0000 [#1] SMP [ 149.327336][ C1] CPU: 1 PID: 8475 Comm: syz-executor984 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 149.337403][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.347480][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 149.354097][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 149.373698][ C1] RSP: 0018:ffff88812fd05738 EFLAGS: 00010046 [ 149.379768][ C1] RAX: 0000000000000002 RBX: 00000000056300cf RCX: 00000000056300cf [ 149.387753][ C1] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fd0581c [ 149.395720][ C1] RBP: ffff88812fd057e0 R08: ffffea000000000f R09: ffff88812fffa000 [ 149.403697][ C1] R10: 0000000000000002 R11: ffff88810526db80 R12: 0000000000000000 [ 149.411663][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 149.419682][ C1] FS: 0000000000ab2880(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 149.428668][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.435242][ C1] CR2: 00007fa7012891e8 CR3: 00000000b8b85000 CR4: 00000000001406e0 [ 149.443204][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.451169][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.459127][ C1] Call Trace: [ 149.462410][ C1] [ 149.465286][ C1] kmsan_check_memory+0xd/0x10 [ 149.470058][ C1] iowrite8+0x99/0x300 [ 149.474475][ C1] pvpanic_panic_notify+0xb7/0xe0 [ 149.479510][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 149.484615][ C1] atomic_notifier_call_chain+0x123/0x290 [ 149.490346][ C1] panic+0x560/0xef7 [ 149.494250][ C1] ? add_taint+0x17c/0x210 [ 149.498661][ C1] kmsan_report+0x1df/0x1e0 [ 149.503174][ C1] __msan_warning+0x58/0xa0 [ 149.507687][ C1] can_receive+0x26b/0x630 [ 149.512106][ C1] can_rcv+0x1fb/0x410 [ 149.516173][ C1] __netif_receive_skb+0x265/0x670 [ 149.521362][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 149.526896][ C1] ? can_rcv_filter+0x1110/0x1110 [ 149.531929][ C1] process_backlog+0x50d/0xba0 [ 149.536707][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 149.542528][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 149.547811][ C1] napi_poll+0x43b/0xfd0 [ 149.552077][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.557280][ C1] net_rx_action+0x35c/0xd40 [ 149.561906][ C1] ? net_tx_action+0xdc0/0xdc0 [ 149.566666][ C1] __do_softirq+0x2ea/0x7f5 [ 149.571175][ C1] asm_call_on_stack+0xf/0x20 [ 149.575835][ C1] [ 149.578767][ C1] do_softirq_own_stack+0x7c/0xa0 [ 149.583805][ C1] __irq_exit_rcu+0x226/0x270 [ 149.588494][ C1] irq_exit_rcu+0xe/0x10 [ 149.592744][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 149.598556][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 149.604538][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x4b/0x70 [ 149.610950][ C1] Code: 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 28 48 89 df e8 b8 6e 4b f1 c6 00 00 c6 03 00 4d 85 e4 75 1c 4c 89 7d d8 ff 75 d8 9d <48> 83 c4 08 5b 41 5c 41 5e 41 5f 5d c3 e8 53 74 4b f1 eb d1 44 89 [ 149.630546][ C1] RSP: 0018:ffff8880b8b0f880 EFLAGS: 00000282 [ 149.636624][ C1] RAX: ffff88821fd3bc00 RBX: ffff88812fd1dc00 RCX: 000000021fc9cc00 [ 149.644687][ C1] RDX: ffff88821fc9cc00 RSI: 00000000000004a0 RDI: ffff88812fd1dc00 [ 149.652678][ C1] RBP: ffff8880b8b0f8a8 R08: ffffea000000000f R09: ffff88812fffa000 [ 149.660682][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 149.668663][ C1] R13: ffff8880b656c2e8 R14: 0000000000000000 R15: 0000000000000282 [ 149.676665][ C1] hrtimer_start_range_ns+0x459/0x4e0 [ 149.682051][ C1] j1939_tp_schedule_txtimer+0x132/0x1b0 [ 149.687692][ C1] j1939_sk_sendmsg+0x1cc0/0x2950 [ 149.692765][ C1] ____sys_sendmsg+0xc82/0x1240 [ 149.697647][ C1] ? j1939_sk_getsockopt+0x6a0/0x6a0 [ 149.702930][ C1] __sys_sendmsg+0x6d1/0x840 [ 149.707547][ C1] ? j1939_sk_release+0xfd0/0xfd0 [ 149.713621][ C1] ? __sys_bind+0x54b/0x920 [ 149.718116][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.723325][ C1] ? kmsan_get_metadata+0x116/0x180 [ 149.728530][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 149.734332][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 149.740484][ C1] __se_sys_sendmsg+0x97/0xb0 [ 149.745176][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 149.749937][ C1] do_syscall_64+0xad/0x160 [ 149.754442][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 149.760327][ C1] RIP: 0033:0x443559 [ 149.764218][ C1] Code: Bad RIP value. [ 149.768282][ C1] RSP: 002b:00007ffffdad8558 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.776684][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443559 [ 149.784650][ C1] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 149.792619][ C1] RBP: 00007ffffdad8560 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 149.800584][ C1] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 00007ffffdad8570 [ 149.808562][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.816550][ C1] Modules linked in: [ 149.820477][ C1] ---[ end trace e6bcd02547ea1c83 ]--- [ 149.825955][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 149.832547][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 149.852160][ C1] RSP: 0018:ffff88812fd05738 EFLAGS: 00010046 [ 149.858227][ C1] RAX: 0000000000000002 RBX: 00000000056300cf RCX: 00000000056300cf [ 149.866196][ C1] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fd0581c [ 149.874186][ C1] RBP: ffff88812fd057e0 R08: ffffea000000000f R09: ffff88812fffa000 [ 149.882157][ C1] R10: 0000000000000002 R11: ffff88810526db80 R12: 0000000000000000 [ 149.890139][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 149.898130][ C1] FS: 0000000000ab2880(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 149.907056][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.913654][ C1] CR2: 00007fa7012891e8 CR3: 00000000b8b85000 CR4: 00000000001406e0 [ 149.921624][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.929605][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.937584][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 149.944878][ C1] ------------[ cut here ]------------ [ 149.950332][ C1] kernel BUG at mm/kmsan/kmsan.h:87! [ 149.955619][ C1] invalid opcode: 0000 [#2] SMP [ 149.960478][ C1] CPU: 1 PID: 8475 Comm: syz-executor984 Tainted: G B D 5.8.0-rc5-syzkaller #0 [ 149.970530][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.980613][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 149.987208][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 150.006807][ C1] RSP: 0018:ffff88812fd05118 EFLAGS: 00010002 [ 150.012868][ C1] RAX: 0000000000000003 RBX: 0000000005a90106 RCX: 0000000005a90106 [ 150.020845][ C1] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fd051fc [ 150.028812][ C1] RBP: ffff88812fd051c0 R08: ffffea000000000f R09: ffff88812fffa000 [ 150.037063][ C1] R10: 0000000000000002 R11: ffff88810526db80 R12: 0000000000000000 [ 150.045037][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 150.053010][ C1] FS: 0000000000ab2880(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 150.061946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.068524][ C1] CR2: 00007fa7012891e8 CR3: 00000000b8b85000 CR4: 00000000001406e0 [ 150.076490][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.084457][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.092432][ C1] Call Trace: [ 150.095712][ C1] [ 150.098584][ C1] kmsan_check_memory+0xd/0x10 [ 150.103359][ C1] iowrite8+0x99/0x300 [ 150.107458][ C1] pvpanic_panic_notify+0xb7/0xe0 [ 150.112491][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 150.117621][ C1] atomic_notifier_call_chain+0x123/0x290 [ 150.123484][ C1] panic+0x560/0xef7 [ 150.127421][ C1] ? __show_regs+0xbfb/0xef0 [ 150.132015][ C1] ? irq_work_queue+0x103/0x3d0 [ 150.136887][ C1] oops_end+0x2a5/0x2d0 [ 150.141077][ C1] die+0x317/0x370 [ 150.144825][ C1] do_trap+0x3c0/0x760 [ 150.148910][ C1] handle_invalid_op+0x18b/0x230 [ 150.153943][ C1] ? kmsan_internal_check_memory+0x3c0/0x3d0 [ 150.159938][ C1] ? kmsan_internal_check_memory+0x3c0/0x3d0 [ 150.165924][ C1] exc_invalid_op+0x60/0x80 [ 150.170427][ C1] asm_exc_invalid_op+0x12/0x20 [ 150.175290][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 150.181889][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 150.201535][ C1] RSP: 0018:ffff88812fd05738 EFLAGS: 00010046 [ 150.207593][ C1] RAX: 0000000000000002 RBX: 00000000056300cf RCX: 00000000056300cf [ 150.215560][ C1] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fd0581c [ 150.223522][ C1] RBP: ffff88812fd057e0 R08: ffffea000000000f R09: ffff88812fffa000 [ 150.231493][ C1] R10: 0000000000000002 R11: ffff88810526db80 R12: 0000000000000000 [ 150.239542][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 150.247622][ C1] ? kmsan_internal_check_memory+0x324/0x3d0 [ 150.253636][ C1] kmsan_check_memory+0xd/0x10 [ 150.258393][ C1] iowrite8+0x99/0x300 [ 150.262477][ C1] pvpanic_panic_notify+0xb7/0xe0 [ 150.267493][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 150.272594][ C1] atomic_notifier_call_chain+0x123/0x290 [ 150.278327][ C1] panic+0x560/0xef7 [ 150.282226][ C1] ? add_taint+0x17c/0x210 [ 150.286715][ C1] kmsan_report+0x1df/0x1e0 [ 150.291227][ C1] __msan_warning+0x58/0xa0 [ 150.295826][ C1] can_receive+0x26b/0x630 [ 150.300254][ C1] can_rcv+0x1fb/0x410 [ 150.304322][ C1] __netif_receive_skb+0x265/0x670 [ 150.309422][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 150.315062][ C1] ? can_rcv_filter+0x1110/0x1110 [ 150.320103][ C1] process_backlog+0x50d/0xba0 [ 150.324870][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 150.330789][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 150.336080][ C1] napi_poll+0x43b/0xfd0 [ 150.340334][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.345538][ C1] net_rx_action+0x35c/0xd40 [ 150.350145][ C1] ? net_tx_action+0xdc0/0xdc0 [ 150.354943][ C1] __do_softirq+0x2ea/0x7f5 [ 150.359451][ C1] asm_call_on_stack+0xf/0x20 [ 150.364106][ C1] [ 150.367038][ C1] do_softirq_own_stack+0x7c/0xa0 [ 150.372054][ C1] __irq_exit_rcu+0x226/0x270 [ 150.376736][ C1] irq_exit_rcu+0xe/0x10 [ 150.381695][ C1] sysvec_apic_timer_interrupt+0x107/0x130 [ 150.387508][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 150.393486][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x4b/0x70 [ 150.399898][ C1] Code: 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 28 48 89 df e8 b8 6e 4b f1 c6 00 00 c6 03 00 4d 85 e4 75 1c 4c 89 7d d8 ff 75 d8 9d <48> 83 c4 08 5b 41 5c 41 5e 41 5f 5d c3 e8 53 74 4b f1 eb d1 44 89 [ 150.419506][ C1] RSP: 0018:ffff8880b8b0f880 EFLAGS: 00000282 [ 150.425566][ C1] RAX: ffff88821fd3bc00 RBX: ffff88812fd1dc00 RCX: 000000021fc9cc00 [ 150.433539][ C1] RDX: ffff88821fc9cc00 RSI: 00000000000004a0 RDI: ffff88812fd1dc00 [ 150.441504][ C1] RBP: ffff8880b8b0f8a8 R08: ffffea000000000f R09: ffff88812fffa000 [ 150.449857][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 150.457823][ C1] R13: ffff8880b656c2e8 R14: 0000000000000000 R15: 0000000000000282 [ 150.465826][ C1] hrtimer_start_range_ns+0x459/0x4e0 [ 150.471226][ C1] j1939_tp_schedule_txtimer+0x132/0x1b0 [ 150.476868][ C1] j1939_sk_sendmsg+0x1cc0/0x2950 [ 150.481932][ C1] ____sys_sendmsg+0xc82/0x1240 [ 150.486887][ C1] ? j1939_sk_getsockopt+0x6a0/0x6a0 [ 150.492176][ C1] __sys_sendmsg+0x6d1/0x840 [ 150.496788][ C1] ? j1939_sk_release+0xfd0/0xfd0 [ 150.501809][ C1] ? __sys_bind+0x54b/0x920 [ 150.506318][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.511516][ C1] ? kmsan_get_metadata+0x116/0x180 [ 150.516719][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 150.522521][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 150.528683][ C1] __se_sys_sendmsg+0x97/0xb0 [ 150.533359][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 150.538110][ C1] do_syscall_64+0xad/0x160 [ 150.542602][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 150.548481][ C1] RIP: 0033:0x443559 [ 150.552351][ C1] Code: Bad RIP value. [ 150.556399][ C1] RSP: 002b:00007ffffdad8558 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.564796][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443559 [ 150.572779][ C1] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 150.580751][ C1] RBP: 00007ffffdad8560 R08: 0000000001bbbbbb R09: 0000000001bbbbbb [ 150.588732][ C1] R10: 0000000001bbbbbb R11: 0000000000000246 R12: 00007ffffdad8570 [ 150.596703][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.604683][ C1] Modules linked in: [ 150.608606][ C1] ---[ end trace e6bcd02547ea1c84 ]--- [ 150.614089][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 150.620663][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 150.642792][ C1] RSP: 0018:ffff88812fd05738 EFLAGS: 00010046 [ 150.648856][ C1] RAX: 0000000000000002 RBX: 00000000056300cf RCX: 00000000056300cf [ 150.656835][ C1] RDX: 0000000000000000 RSI: 00000000000004a0 RDI: ffff88812fd0581c [ 150.664805][ C1] RBP: ffff88812fd057e0 R08: ffffea000000000f R09: ffff88812fffa000 [ 150.672769][ C1] R10: 0000000000000002 R11: ffff88810526db80 R12: 0000000000000000 [ 150.680736][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 150.688713][ C1] FS: 0000000000ab2880(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 150.697653][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.704229][ C1] CR2: 00007fa7012891e8 CR3: 00000000b8b85000 CR4: 00000000001406e0 [ 150.712192][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.720330][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.728294][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 150.736152][ C1] Kernel Offset: disabled [ 150.740499][ C1] Rebooting in 86400 seconds..