[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 105.986129][ T32] audit: type=1800 audit(1583073954.064:25): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 106.009754][ T32] audit: type=1800 audit(1583073954.084:26): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 106.049177][ T32] audit: type=1800 audit(1583073954.114:27): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. syzkaller login: [ 116.573592][T11053] IPVS: ftp: loaded support on port[0] = 21 [ 116.663219][T11053] chnl_net:caif_netlink_parms(): no params data found [ 116.739306][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.746565][T11053] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.755718][T11053] device bridge_slave_0 entered promiscuous mode [ 116.765025][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.772141][T11053] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.780946][T11053] device bridge_slave_1 entered promiscuous mode [ 116.809212][T11053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.821197][T11053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.848163][T11053] team0: Port device team_slave_0 added [ 116.856597][T11053] team0: Port device team_slave_1 added [ 116.879629][T11053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.886913][T11053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.913045][T11053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.925894][T11053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.933007][T11053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.959171][T11053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.027473][T11053] device hsr_slave_0 entered promiscuous mode [ 117.074672][T11053] device hsr_slave_1 entered promiscuous mode [ 117.223542][T11053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.268040][T11053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.328583][T11053] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.388314][T11053] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.471815][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.479063][T11053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.486919][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.494288][T11053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.560814][T11053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.578492][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.590425][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.600650][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.610487][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 117.627101][T11053] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.642515][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.651679][ T4122] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.658949][ T4122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.688540][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.698226][ T4122] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.705530][ T4122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.715886][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.733222][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.742437][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.752554][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.776212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.785845][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.795509][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.805106][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.819760][T11053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.844785][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.852387][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.869709][T11053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.897095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.907322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.936357][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.945724][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.959447][T11053] device veth0_vlan entered promiscuous mode [ 117.967011][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.976179][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.994999][T11053] device veth1_vlan entered promiscuous mode [ 118.024338][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.033482][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.042897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.052276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.066852][T11053] device veth0_macvtap entered promiscuous mode [ 118.079933][T11053] device veth1_macvtap entered promiscuous mode [ 118.106121][T11053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.114429][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.123604][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.132727][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.142478][T11061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.159156][T11053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.167153][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.176858][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 118.404279][ C0] ===================================================== [ 118.411346][ C0] BUG: KMSAN: use-after-free in ip6_dst_destroy+0x5d8/0x720 [ 118.418738][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.6.0-rc2-syzkaller #0 [ 118.426613][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.436655][ C0] Call Trace: [ 118.440357][ C0] [ 118.443199][ C0] dump_stack+0x1c9/0x220 [ 118.447524][ C0] kmsan_report+0xf7/0x1e0 [ 118.451947][ C0] __msan_warning+0x58/0xa0 [ 118.456487][ C0] ip6_dst_destroy+0x5d8/0x720 [ 118.461244][ C0] ? ip6_blackhole_mtu+0x110/0x110 [ 118.466363][ C0] dst_destroy+0x1f5/0x5c0 [ 118.470788][ C0] dst_destroy_rcu+0x46/0x50 [ 118.475454][ C0] ? dst_release+0x2a0/0x2a0 [ 118.480046][ C0] rcu_core+0xb8a/0x19f0 [ 118.484302][ C0] ? rcu_scheduler_starting+0xc0/0xc0 [ 118.489674][ C0] rcu_core_si+0xe/0x10 [ 118.493829][ C0] __do_softirq+0x311/0x83d [ 118.498343][ C0] irq_exit+0x230/0x280 [ 118.502491][ C0] exiting_irq+0xe/0x10 [ 118.506662][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 118.512037][ C0] apic_timer_interrupt+0x2e/0x40 [ 118.517050][ C0] [ 118.519983][ C0] RIP: 0010:default_idle+0x53/0x90 [ 118.525086][ C0] Code: c3 f4 c9 f2 44 8b 35 44 c6 bf 01 48 c7 c7 98 87 97 b7 e8 60 e5 96 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 67 9f 49 00 fb f4 <65> 8b 35 ce 61 29 4a c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 118.544779][ C0] RSP: 0018:ffffffffb6e03d88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 118.553189][ C0] RAX: ffffa1614e16b798 RBX: ffffffffb6e2cc90 RCX: ffffe34dc7cdf580 [ 118.561256][ C0] RDX: ffffa1613e35e798 RSI: 0000000000000000 RDI: ffffffffb7978798 [ 118.569304][ C0] RBP: ffffffffb6e03d98 R08: ffffe34dc000000f R09: ffffa1606fffb000 [ 118.577421][ C0] R10: 0000000000000004 R11: ffffffffb5d7c120 R12: ffffffffb6e2c2c0 [ 118.585430][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffb6e2cc90 [ 118.593424][ C0] ? __cpuidle_text_start+0x8/0x8 [ 118.598459][ C0] ? default_idle+0x40/0x90 [ 118.603059][ C0] ? __cpuidle_text_start+0x8/0x8 [ 118.608081][ C0] arch_cpu_idle+0x25/0x30 [ 118.612496][ C0] do_idle+0x26c/0x7b0 [ 118.616680][ C0] cpu_startup_entry+0x45/0x50 [ 118.621454][ C0] rest_init+0x1be/0x1f0 [ 118.625703][ C0] arch_call_rest_init+0x13/0x15 [ 118.630643][ C0] start_kernel+0xa45/0xc1b [ 118.635150][ C0] ? kmsan_internal_return_address+0x10/0x30 [ 118.641139][ C0] x86_64_start_reservations+0x18/0x28 [ 118.646604][ C0] x86_64_start_kernel+0x83/0x86 [ 118.651544][ C0] secondary_startup_64+0xa4/0xb0 [ 118.656572][ C0] [ 118.658888][ C0] Uninit was created at: [ 118.663121][ C0] kmsan_internal_poison_shadow+0x66/0xd0 [ 118.668944][ C0] kmsan_slab_free+0x6e/0xb0 [ 118.673523][ C0] kfree+0x565/0x30a0 [ 118.677506][ C0] netdev_name_node_alt_destroy+0x587/0x690 [ 118.683393][ C0] rtnl_linkprop+0x939/0xc00 [ 118.687977][ C0] rtnl_dellinkprop+0x9d/0xb0 [ 118.692681][ C0] rtnetlink_rcv_msg+0x1153/0x1570 [ 118.697784][ C0] netlink_rcv_skb+0x451/0x650 [ 118.702536][ C0] rtnetlink_rcv+0x50/0x60 [ 118.707042][ C0] netlink_unicast+0xf9e/0x1100 [ 118.711880][ C0] netlink_sendmsg+0x1246/0x14d0 [ 118.716808][ C0] ____sys_sendmsg+0x12b6/0x1350 [ 118.721748][ C0] __sys_sendmsg+0x451/0x5f0 [ 118.726346][ C0] __se_sys_sendmsg+0x97/0xb0 [ 118.731045][ C0] __x64_sys_sendmsg+0x4a/0x70 [ 118.735889][ C0] do_syscall_64+0xb8/0x160 [ 118.740403][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 118.746280][ C0] ===================================================== [ 118.753203][ C0] Disabling lock debugging due to kernel taint [ 118.759347][ C1] ===================================================== [ 118.759352][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 118.759372][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 118.767632][ C1] BUG: KMSAN: use-after-free in find_match+0x317/0x1480 [ 118.774319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.800657][ C0] Call Trace: [ 118.803940][ C0] [ 118.806796][ C0] dump_stack+0x1c9/0x220 [ 118.811143][ C0] panic+0x3d5/0xc3e [ 118.815083][ C0] kmsan_report+0x1df/0x1e0 [ 118.819591][ C0] __msan_warning+0x58/0xa0 [ 118.824103][ C0] ip6_dst_destroy+0x5d8/0x720 [ 118.828891][ C0] ? ip6_blackhole_mtu+0x110/0x110 [ 118.834002][ C0] dst_destroy+0x1f5/0x5c0 [ 118.838431][ C0] dst_destroy_rcu+0x46/0x50 [ 118.843025][ C0] ? dst_release+0x2a0/0x2a0 [ 118.847617][ C0] rcu_core+0xb8a/0x19f0 [ 118.851875][ C0] ? rcu_scheduler_starting+0xc0/0xc0 [ 118.857264][ C0] rcu_core_si+0xe/0x10 [ 118.861421][ C0] __do_softirq+0x311/0x83d [ 118.865940][ C0] irq_exit+0x230/0x280 [ 118.870088][ C0] exiting_irq+0xe/0x10 [ 118.874231][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 118.880564][ C0] apic_timer_interrupt+0x2e/0x40 [ 118.885581][ C0] [ 118.888520][ C0] RIP: 0010:default_idle+0x53/0x90 [ 118.893621][ C0] Code: c3 f4 c9 f2 44 8b 35 44 c6 bf 01 48 c7 c7 98 87 97 b7 e8 60 e5 96 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 67 9f 49 00 fb f4 <65> 8b 35 ce 61 29 4a c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 118.913225][ C0] RSP: 0018:ffffffffb6e03d88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 118.921641][ C0] RAX: ffffa1614e16b798 RBX: ffffffffb6e2cc90 RCX: ffffe34dc7cdf580 [ 118.929614][ C0] RDX: ffffa1613e35e798 RSI: 0000000000000000 RDI: ffffffffb7978798 [ 118.937584][ C0] RBP: ffffffffb6e03d98 R08: ffffe34dc000000f R09: ffffa1606fffb000 [ 118.945557][ C0] R10: 0000000000000004 R11: ffffffffb5d7c120 R12: ffffffffb6e2c2c0 [ 118.953527][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffb6e2cc90 [ 118.961513][ C0] ? __cpuidle_text_start+0x8/0x8 [ 118.966554][ C0] ? default_idle+0x40/0x90 [ 118.971176][ C0] ? __cpuidle_text_start+0x8/0x8 [ 118.976201][ C0] arch_cpu_idle+0x25/0x30 [ 118.980727][ C0] do_idle+0x26c/0x7b0 [ 118.984832][ C0] cpu_startup_entry+0x45/0x50 [ 118.989598][ C0] rest_init+0x1be/0x1f0 [ 118.993844][ C0] arch_call_rest_init+0x13/0x15 [ 118.998788][ C0] start_kernel+0xa45/0xc1b [ 119.003308][ C0] ? kmsan_internal_return_address+0x10/0x30 [ 119.009326][ C0] x86_64_start_reservations+0x18/0x28 [ 119.014882][ C0] x86_64_start_kernel+0x83/0x86 [ 119.019831][ C0] secondary_startup_64+0xa4/0xb0 [ 119.024865][ C1] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 119.034404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 119.044462][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 119.050436][ C1] Call Trace: [ 119.053720][ C1] [ 119.056576][ C1] dump_stack+0x1c9/0x220 [ 119.061006][ C1] kmsan_report+0xf7/0x1e0 [ 119.065434][ C1] __msan_warning+0x58/0xa0 [ 119.070059][ C1] find_match+0x317/0x1480 [ 119.074480][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 119.079695][ C1] __find_rr_leaf+0x3f9/0x1160 [ 119.084482][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 119.089603][ C1] fib6_table_lookup+0x586/0x1420 [ 119.094666][ C1] ip6_pol_route+0x203/0x2960 [ 119.099369][ C1] ip6_pol_route_input+0x123/0x140 [ 119.104600][ C1] fib6_rule_lookup+0x38f/0xa10 [ 119.109460][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 119.115023][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 119.120234][ C1] ip6_route_input+0xb9d/0xcf0 [ 119.125019][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 119.130248][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 119.135363][ C1] ipv6_rcv+0x628/0x710 [ 119.139528][ C1] ? local_bh_enable+0x40/0x40 [ 119.144300][ C1] process_backlog+0xa41/0x1410 [ 119.149174][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 119.154319][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 119.159529][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 119.164833][ C1] net_rx_action+0x786/0x1aa0 [ 119.169538][ C1] ? net_tx_action+0xc30/0xc30 [ 119.174309][ C1] __do_softirq+0x311/0x83d [ 119.178832][ C1] do_softirq_own_stack+0x49/0x80 [ 119.183853][ C1] [ 119.186801][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 119.192000][ C1] local_bh_enable+0x36/0x40 [ 119.196589][ C1] ip6_finish_output2+0x2113/0x2640 [ 119.201826][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 119.207030][ C1] __ip6_finish_output+0x824/0x8e0 [ 119.212156][ C1] ip6_finish_output+0x166/0x410 [ 119.217102][ C1] ip6_output+0x60a/0x770 [ 119.221443][ C1] ? ip6_output+0x770/0x770 [ 119.225944][ C1] ? ac6_seq_show+0x200/0x200 [ 119.230617][ C1] ndisc_send_skb+0x1047/0x15a0 [ 119.235497][ C1] ? ndisc_error_report+0x1a0/0x1a0 [ 119.240700][ C1] ndisc_send_ns+0xe38/0xe80 [ 119.245295][ C1] ? __queue_delayed_work+0x27f/0x450 [ 119.250673][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 119.256497][ C1] addrconf_dad_work+0xc0b/0x2aa0 [ 119.261524][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 119.266739][ C1] ? ipv6_get_saddr_eval+0x1350/0x1350 [ 119.272197][ C1] process_one_work+0x1555/0x1f40 [ 119.277272][ C1] worker_thread+0xef6/0x2450 [ 119.281954][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 119.287758][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 119.292990][ C1] kthread+0x4b5/0x4f0 [ 119.297061][ C1] ? process_one_work+0x1f40/0x1f40 [ 119.302271][ C1] ? kthread_blkcg+0xf0/0xf0 [ 119.306870][ C1] ret_from_fork+0x35/0x40 [ 119.311286][ C1] [ 119.313664][ C1] Uninit was created at: [ 119.317906][ C1] kmsan_internal_poison_shadow+0x66/0xd0 [ 119.323753][ C1] kmsan_slab_free+0x6e/0xb0 [ 119.328391][ C1] kfree+0x565/0x30a0 [ 119.332378][ C1] netdev_name_node_alt_destroy+0x587/0x690 [ 119.338266][ C1] rtnl_linkprop+0x939/0xc00 [ 119.342869][ C1] rtnl_dellinkprop+0x9d/0xb0 [ 119.347542][ C1] rtnetlink_rcv_msg+0x1153/0x1570 [ 119.352657][ C1] netlink_rcv_skb+0x451/0x650 [ 119.357413][ C1] rtnetlink_rcv+0x50/0x60 [ 119.361820][ C1] netlink_unicast+0xf9e/0x1100 [ 119.366667][ C1] netlink_sendmsg+0x1246/0x14d0 [ 119.371600][ C1] ____sys_sendmsg+0x12b6/0x1350 [ 119.376527][ C1] __sys_sendmsg+0x451/0x5f0 [ 119.381113][ C1] __se_sys_sendmsg+0x97/0xb0 [ 119.385892][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 119.390649][ C1] do_syscall_64+0xb8/0x160 [ 119.395145][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 119.401103][ C1] ===================================================== [ 120.256003][ C0] Shutting down cpus with NMI [ 120.274039][ C0] ------------[ cut here ]------------ [ 120.279484][ C0] kernel BUG at mm/kmsan/kmsan.h:87! [ 120.284757][ C0] invalid opcode: 0000 [#1] SMP [ 120.289593][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 120.298850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.308901][ C0] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 120.315472][ C0] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c a8 b6 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 120.335078][ C0] RSP: 0018:ffffa8cec0003918 EFLAGS: 00010046 [ 120.341136][ C0] RAX: 0000000000000002 RBX: 0000000004890001 RCX: 0000000004890001 [ 120.349089][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffa8cec00039f4 [ 120.357041][ C0] RBP: ffffa8cec00039c0 R08: 0000000000000001 R09: ffffa1606fc28ed0 [ 120.364992][ C0] R10: 0000000000000000 R11: ffffffffad816f70 R12: 0000000000000000 [ 120.372947][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 120.380905][ C0] FS: 0000000000000000(0000) GS:ffffa1606fc00000(0000) knlGS:0000000000000000 [ 120.389824][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.396389][ C0] CR2: 000056167c266110 CR3: 000000010b125000 CR4: 00000000001406f0 [ 120.404443][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.412417][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.420372][ C0] Call Trace: [ 120.423639][ C0] [ 120.426500][ C0] kmsan_check_memory+0xd/0x10 [ 120.431256][ C0] iowrite8+0x99/0x2e0 [ 120.435322][ C0] pvpanic_panic_notify+0x99/0xc0 [ 120.440336][ C0] ? pvpanic_mmio_remove+0x60/0x60 [ 120.445447][ C0] atomic_notifier_call_chain+0x12a/0x240 [ 120.451184][ C0] panic+0x468/0xc3e [ 120.455108][ C0] kmsan_report+0x1df/0x1e0 [ 120.459782][ C0] __msan_warning+0x58/0xa0 [ 120.464288][ C0] ip6_dst_destroy+0x5d8/0x720 [ 120.469049][ C0] ? ip6_blackhole_mtu+0x110/0x110 [ 120.474161][ C0] dst_destroy+0x1f5/0x5c0 [ 120.478577][ C0] dst_destroy_rcu+0x46/0x50 [ 120.483154][ C0] ? dst_release+0x2a0/0x2a0 [ 120.487735][ C0] rcu_core+0xb8a/0x19f0 [ 120.491998][ C0] ? rcu_scheduler_starting+0xc0/0xc0 [ 120.497365][ C0] rcu_core_si+0xe/0x10 [ 120.501509][ C0] __do_softirq+0x311/0x83d [ 120.506013][ C0] irq_exit+0x230/0x280 [ 120.510157][ C0] exiting_irq+0xe/0x10 [ 120.514301][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 120.519660][ C0] apic_timer_interrupt+0x2e/0x40 [ 120.524664][ C0] [ 120.527593][ C0] RIP: 0010:default_idle+0x53/0x90 [ 120.532696][ C0] Code: c3 f4 c9 f2 44 8b 35 44 c6 bf 01 48 c7 c7 98 87 97 b7 e8 60 e5 96 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 67 9f 49 00 fb f4 <65> 8b 35 ce 61 29 4a c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 120.552295][ C0] RSP: 0018:ffffffffb6e03d88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 120.560690][ C0] RAX: ffffa1614e16b798 RBX: ffffffffb6e2cc90 RCX: ffffe34dc7cdf580 [ 120.568643][ C0] RDX: ffffa1613e35e798 RSI: 0000000000000000 RDI: ffffffffb7978798 [ 120.576610][ C0] RBP: ffffffffb6e03d98 R08: ffffe34dc000000f R09: ffffa1606fffb000 [ 120.584577][ C0] R10: 0000000000000004 R11: ffffffffb5d7c120 R12: ffffffffb6e2c2c0 [ 120.592550][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffb6e2cc90 [ 120.600530][ C0] ? __cpuidle_text_start+0x8/0x8 [ 120.605549][ C0] ? default_idle+0x40/0x90 [ 120.610037][ C0] ? __cpuidle_text_start+0x8/0x8 [ 120.615048][ C0] arch_cpu_idle+0x25/0x30 [ 120.619449][ C0] do_idle+0x26c/0x7b0 [ 120.623524][ C0] cpu_startup_entry+0x45/0x50 [ 120.628275][ C0] rest_init+0x1be/0x1f0 [ 120.632516][ C0] arch_call_rest_init+0x13/0x15 [ 120.637574][ C0] start_kernel+0xa45/0xc1b [ 120.642083][ C0] ? kmsan_internal_return_address+0x10/0x30 [ 120.648078][ C0] x86_64_start_reservations+0x18/0x28 [ 120.653543][ C0] x86_64_start_kernel+0x83/0x86 [ 120.658483][ C0] secondary_startup_64+0xa4/0xb0 [ 120.663502][ C0] Modules linked in: [ 120.667387][ C0] ---[ end trace 75a7301054b10568 ]--- [ 120.672852][ C0] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 120.679445][ C0] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c a8 b6 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 120.699168][ C0] RSP: 0018:ffffa8cec0003918 EFLAGS: 00010046 [ 120.705230][ C0] RAX: 0000000000000002 RBX: 0000000004890001 RCX: 0000000004890001 [ 120.713197][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffa8cec00039f4 [ 120.721165][ C0] RBP: ffffa8cec00039c0 R08: 0000000000000001 R09: ffffa1606fc28ed0 [ 120.729247][ C0] R10: 0000000000000000 R11: ffffffffad816f70 R12: 0000000000000000 [ 120.737214][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 120.745183][ C0] FS: 0000000000000000(0000) GS:ffffa1606fc00000(0000) knlGS:0000000000000000 [ 120.754130][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.760709][ C0] CR2: 000056167c266110 CR3: 000000010b125000 CR4: 00000000001406f0 [ 120.768680][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.776644][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.784710][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 120.792839][ C0] Kernel Offset: 0x27600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 120.804480][ C0] Rebooting in 86400 seconds..