Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. syzkaller login: [ 125.324648][ T32] audit: type=1400 audit(1584357200.389:42): avc: denied { map } for pid=12269 comm="syz-executor479" path="/root/syz-executor479885904" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 125.359147][T12270] IPVS: ftp: loaded support on port[0] = 21 [ 125.444003][T12270] chnl_net:caif_netlink_parms(): no params data found [ 125.519610][T12270] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.526756][T12270] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.535216][T12270] device bridge_slave_0 entered promiscuous mode [ 125.545431][T12270] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.552688][T12270] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.560844][T12270] device bridge_slave_1 entered promiscuous mode [ 125.587259][T12270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.600450][T12270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.626919][T12270] team0: Port device team_slave_0 added [ 125.636530][T12270] team0: Port device team_slave_1 added [ 125.658816][T12270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.665930][T12270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.691950][T12270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.705815][T12270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.712944][T12270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.738963][T12270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.806118][T12270] device hsr_slave_0 entered promiscuous mode [ 125.862834][T12270] device hsr_slave_1 entered promiscuous mode [ 126.033031][ T32] audit: type=1400 audit(1584357201.089:43): avc: denied { create } for pid=12270 comm="syz-executor479" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 126.059600][ T32] audit: type=1400 audit(1584357201.119:44): avc: denied { write } for pid=12270 comm="syz-executor479" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 126.063357][T12270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.084736][ T32] audit: type=1400 audit(1584357201.119:45): avc: denied { read } for pid=12270 comm="syz-executor479" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 126.146908][T12270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.217118][T12270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.277138][T12270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.367305][T12270] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.374485][T12270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.381994][T12270] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.389280][T12270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.474812][T12270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.495586][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.504922][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.515295][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 126.537416][T12270] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.544923][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.553716][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.573877][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.583453][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.592265][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.599528][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.613743][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.622955][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.631748][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.638961][T12276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.684497][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.694391][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.703977][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.713916][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.723281][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.732715][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.741725][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.751143][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.760001][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.768974][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.781005][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.794227][T12270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.826554][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.834574][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.855160][T12270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.891258][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.900425][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.935623][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.944380][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.958560][T12270] device veth0_vlan entered promiscuous mode [ 126.974321][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.983818][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.995594][T12270] device veth1_vlan entered promiscuous mode [ 127.042705][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.051385][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.060496][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.069426][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.081756][T12270] device veth0_macvtap entered promiscuous mode [ 127.095850][T12270] device veth1_macvtap entered promiscuous mode [ 127.126077][T12270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.133780][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.142691][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.151667][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.161342][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.181664][T12270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.189276][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.198941][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 127.413145][ C1] ===================================================== [ 127.420110][ C1] BUG: KMSAN: use-after-free in find_match+0x317/0x1480 [ 127.427066][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.6.0-rc2-syzkaller #0 [ 127.434936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.444984][ C1] Call Trace: [ 127.448402][ C1] [ 127.451247][ C1] dump_stack+0x1c9/0x220 [ 127.455575][ C1] kmsan_report+0xf7/0x1e0 [ 127.459984][ C1] __msan_warning+0x58/0xa0 [ 127.464500][ C1] find_match+0x317/0x1480 [ 127.468920][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 127.474979][ C1] ? veth_xmit+0x6e1/0xb70 [ 127.479380][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.484574][ C1] __find_rr_leaf+0x3f9/0x1160 [ 127.489361][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 127.494466][ C1] fib6_table_lookup+0x586/0x1420 [ 127.499597][ C1] ip6_pol_route+0x203/0x2960 [ 127.504266][ C1] ? nf_ip6_checksum+0x501/0x610 [ 127.509194][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.514483][ C1] ip6_pol_route_input+0x123/0x140 [ 127.519677][ C1] fib6_rule_lookup+0x38f/0xa10 [ 127.524538][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 127.530082][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.535274][ C1] ip6_route_input+0xb9d/0xcf0 [ 127.540056][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.545255][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 127.550352][ C1] ipv6_rcv+0x628/0x710 [ 127.554500][ C1] ? local_bh_enable+0x40/0x40 [ 127.559260][ C1] process_backlog+0xa41/0x1410 [ 127.564103][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 127.569203][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.574408][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 127.579698][ C1] net_rx_action+0x786/0x1aa0 [ 127.584396][ C1] ? net_tx_action+0xc30/0xc30 [ 127.589164][ C1] __do_softirq+0x311/0x83d [ 127.593673][ C1] irq_exit+0x230/0x280 [ 127.597830][ C1] exiting_irq+0xe/0x10 [ 127.601980][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 127.607340][ C1] apic_timer_interrupt+0x2e/0x40 [ 127.612433][ C1] [ 127.615367][ C1] RIP: 0010:default_idle+0x53/0x90 [ 127.620690][ C1] Code: c3 f4 c9 f2 44 8b 35 44 c6 bf 01 48 c7 c7 98 87 d7 a2 e8 60 e5 96 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 67 9f 49 00 fb f4 <65> 8b 35 ce 61 e9 5e c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 127.640289][ C1] RSP: 0018:ffffa7a500cbbdf8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 127.648689][ C1] RAX: ffffa03cd796b798 RBX: ffffa03bed6f89d0 RCX: fffffa6085bbf580 [ 127.656660][ C1] RDX: ffffa03cc7b5e798 RSI: 0000000000000000 RDI: ffffffffa2d78798 [ 127.664618][ C1] RBP: ffffa7a500cbbe08 R08: fffffa608000000f R09: ffffa03befffb000 [ 127.672578][ C1] R10: 0000000000000004 R11: ffffffffa117c120 R12: ffffa03bed6f8000 [ 127.680533][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffa03bed6f89d0 [ 127.688523][ C1] ? __cpuidle_text_start+0x8/0x8 [ 127.693546][ C1] ? default_idle+0x40/0x90 [ 127.698030][ C1] ? __cpuidle_text_start+0x8/0x8 [ 127.703039][ C1] arch_cpu_idle+0x25/0x30 [ 127.707440][ C1] do_idle+0x26c/0x7b0 [ 127.711530][ C1] cpu_startup_entry+0x45/0x50 [ 127.716281][ C1] ? setup_APIC_timer+0x210/0x210 [ 127.721289][ C1] start_secondary+0x389/0x480 [ 127.726048][ C1] secondary_startup_64+0xa4/0xb0 [ 127.731068][ C1] [ 127.733383][ C1] Uninit was created at: [ 127.737613][ C1] kmsan_internal_poison_shadow+0x66/0xd0 [ 127.743316][ C1] kmsan_slab_free+0x6e/0xb0 [ 127.747903][ C1] kfree+0x565/0x30a0 [ 127.751873][ C1] netdev_name_node_alt_destroy+0x587/0x690 [ 127.757771][ C1] rtnl_linkprop+0x939/0xc00 [ 127.762357][ C1] rtnl_dellinkprop+0x9d/0xb0 [ 127.767016][ C1] rtnetlink_rcv_msg+0x1153/0x1570 [ 127.772108][ C1] netlink_rcv_skb+0x451/0x650 [ 127.776853][ C1] rtnetlink_rcv+0x50/0x60 [ 127.781251][ C1] netlink_unicast+0xf9e/0x1100 [ 127.786084][ C1] netlink_sendmsg+0x1246/0x14d0 [ 127.791008][ C1] ____sys_sendmsg+0x12b6/0x1350 [ 127.795930][ C1] __sys_sendmsg+0x451/0x5f0 [ 127.800511][ C1] __ia32_compat_sys_sendmsg+0xed/0x130 [ 127.806134][ C1] do_fast_syscall_32+0x3c7/0x6e0 [ 127.811149][ C1] entry_SYSENTER_compat+0x68/0x77 [ 127.816264][ C1] ===================================================== [ 127.823201][ C1] Disabling lock debugging due to kernel taint [ 127.829371][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 127.829373][ C0] ===================================================== [ 127.829394][ C0] BUG: KMSAN: use-after-free in find_match+0x317/0x1480 [ 127.835951][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 127.859184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.869230][ C1] Call Trace: [ 127.872528][ C1] [ 127.875367][ C1] dump_stack+0x1c9/0x220 [ 127.879690][ C1] panic+0x3d5/0xc3e [ 127.883601][ C1] kmsan_report+0x1df/0x1e0 [ 127.888104][ C1] __msan_warning+0x58/0xa0 [ 127.892599][ C1] find_match+0x317/0x1480 [ 127.897006][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 127.903067][ C1] ? veth_xmit+0x6e1/0xb70 [ 127.907600][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.912812][ C1] __find_rr_leaf+0x3f9/0x1160 [ 127.917666][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 127.922850][ C1] fib6_table_lookup+0x586/0x1420 [ 127.927940][ C1] ip6_pol_route+0x203/0x2960 [ 127.932619][ C1] ? nf_ip6_checksum+0x501/0x610 [ 127.937555][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.942767][ C1] ip6_pol_route_input+0x123/0x140 [ 127.947884][ C1] fib6_rule_lookup+0x38f/0xa10 [ 127.952731][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 127.958301][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.963490][ C1] ip6_route_input+0xb9d/0xcf0 [ 127.968271][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 127.973480][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 127.978596][ C1] ipv6_rcv+0x628/0x710 [ 127.982913][ C1] ? local_bh_enable+0x40/0x40 [ 127.987703][ C1] process_backlog+0xa41/0x1410 [ 127.992559][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 127.997665][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 128.002852][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 128.008125][ C1] net_rx_action+0x786/0x1aa0 [ 128.012804][ C1] ? net_tx_action+0xc30/0xc30 [ 128.017553][ C1] __do_softirq+0x311/0x83d [ 128.022056][ C1] irq_exit+0x230/0x280 [ 128.026285][ C1] exiting_irq+0xe/0x10 [ 128.030448][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 128.035808][ C1] apic_timer_interrupt+0x2e/0x40 [ 128.040832][ C1] [ 128.043775][ C1] RIP: 0010:default_idle+0x53/0x90 [ 128.048901][ C1] Code: c3 f4 c9 f2 44 8b 35 44 c6 bf 01 48 c7 c7 98 87 d7 a2 e8 60 e5 96 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 67 9f 49 00 fb f4 <65> 8b 35 ce 61 e9 5e c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 128.068494][ C1] RSP: 0018:ffffa7a500cbbdf8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 128.076899][ C1] RAX: ffffa03cd796b798 RBX: ffffa03bed6f89d0 RCX: fffffa6085bbf580 [ 128.084866][ C1] RDX: ffffa03cc7b5e798 RSI: 0000000000000000 RDI: ffffffffa2d78798 [ 128.092834][ C1] RBP: ffffa7a500cbbe08 R08: fffffa608000000f R09: ffffa03befffb000 [ 128.100793][ C1] R10: 0000000000000004 R11: ffffffffa117c120 R12: ffffa03bed6f8000 [ 128.108750][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffa03bed6f89d0 [ 128.116715][ C1] ? __cpuidle_text_start+0x8/0x8 [ 128.121730][ C1] ? default_idle+0x40/0x90 [ 128.126213][ C1] ? __cpuidle_text_start+0x8/0x8 [ 128.131234][ C1] arch_cpu_idle+0x25/0x30 [ 128.135660][ C1] do_idle+0x26c/0x7b0 [ 128.139722][ C1] cpu_startup_entry+0x45/0x50 [ 128.144483][ C1] ? setup_APIC_timer+0x210/0x210 [ 128.149493][ C1] start_secondary+0x389/0x480 [ 128.154282][ C1] secondary_startup_64+0xa4/0xb0 [ 128.159307][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 128.168748][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 128.178811][ C0] Call Trace: [ 128.182088][ C0] dump_stack+0x1c9/0x220 [ 128.186433][ C0] kmsan_report+0xf7/0x1e0 [ 128.190847][ C0] __msan_warning+0x58/0xa0 [ 128.195344][ C0] find_match+0x317/0x1480 [ 128.199759][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 128.205923][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 128.211149][ C0] __find_rr_leaf+0x3f9/0x1160 [ 128.215942][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 128.221068][ C0] fib6_table_lookup+0x586/0x1420 [ 128.226108][ C0] ip6_pol_route+0x203/0x2960 [ 128.230797][ C0] ? nf_ip6_checksum+0x501/0x610 [ 128.235961][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 128.241173][ C0] ip6_pol_route_input+0x123/0x140 [ 128.246381][ C0] fib6_rule_lookup+0x38f/0xa10 [ 128.251264][ C0] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 128.256823][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 128.262045][ C0] ip6_route_input+0xb9d/0xcf0 [ 128.266809][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 128.272021][ C0] ip6_rcv_finish_core+0x1f9/0x470 [ 128.277121][ C0] ipv6_rcv+0x628/0x710 [ 128.281269][ C0] ? local_bh_enable+0x40/0x40 [ 128.286031][ C0] process_backlog+0xa41/0x1410 [ 128.290876][ C0] ? __list_add_valid+0xb8/0x420 [ 128.295918][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 128.301019][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 128.306469][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 128.311756][ C0] net_rx_action+0x786/0x1aa0 [ 128.316479][ C0] ? net_tx_action+0xc30/0xc30 [ 128.321244][ C0] __do_softirq+0x311/0x83d [ 128.325759][ C0] ? ksoftirqd_should_run+0x30/0x30 [ 128.330956][ C0] ? takeover_tasklets+0x8f0/0x8f0 [ 128.336059][ C0] run_ksoftirqd+0x25/0x40 [ 128.340480][ C0] smpboot_thread_fn+0x493/0x980 [ 128.345434][ C0] kthread+0x4b5/0x4f0 [ 128.349490][ C0] ? cpu_report_death+0x180/0x180 [ 128.354506][ C0] ? kthread_blkcg+0xf0/0xf0 [ 128.359085][ C0] ret_from_fork+0x35/0x40 [ 128.363493][ C0] [ 128.365808][ C0] Uninit was created at: [ 128.370126][ C0] kmsan_internal_poison_shadow+0x66/0xd0 [ 128.375834][ C0] kmsan_slab_free+0x6e/0xb0 [ 128.380411][ C0] kfree+0x565/0x30a0 [ 128.384382][ C0] netdev_name_node_alt_destroy+0x587/0x690 [ 128.390262][ C0] rtnl_linkprop+0x939/0xc00 [ 128.394865][ C0] rtnl_dellinkprop+0x9d/0xb0 [ 128.399526][ C0] rtnetlink_rcv_msg+0x1153/0x1570 [ 128.404642][ C0] netlink_rcv_skb+0x451/0x650 [ 128.409391][ C0] rtnetlink_rcv+0x50/0x60 [ 128.413792][ C0] netlink_unicast+0xf9e/0x1100 [ 128.418630][ C0] netlink_sendmsg+0x1246/0x14d0 [ 128.423551][ C0] ____sys_sendmsg+0x12b6/0x1350 [ 128.428615][ C0] __sys_sendmsg+0x451/0x5f0 [ 128.433198][ C0] __ia32_compat_sys_sendmsg+0xed/0x130 [ 128.438731][ C0] do_fast_syscall_32+0x3c7/0x6e0 [ 128.443745][ C0] entry_SYSENTER_compat+0x68/0x77 [ 128.448839][ C0] ===================================================== [ 129.395317][ C1] Shutting down cpus with NMI [ 129.413060][ C1] ------------[ cut here ]------------ [ 129.418507][ C1] kernel BUG at mm/kmsan/kmsan.h:87! [ 129.423787][ C1] invalid opcode: 0000 [#1] SMP [ 129.428622][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 129.437879][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.447956][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 129.454546][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c e8 a1 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 129.474163][ C1] RSP: 0018:ffffa7a500ceff98 EFLAGS: 00010046 [ 129.480210][ C1] RAX: 0000000000000002 RBX: 0000000005c70103 RCX: 0000000005c70103 [ 129.488171][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffa7a500cf0074 [ 129.496124][ C1] RBP: ffffa7a500cf0040 R08: 0000000000000001 R09: ffffa03befd28ed0 [ 129.504107][ C1] R10: 0000000000000000 R11: ffffffff98c16f70 R12: 0000000000000000 [ 129.512070][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 129.520079][ C1] FS: 0000000000000000(0000) GS:ffffa03befd00000(0000) knlGS:0000000000000000 [ 129.529077][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.535655][ C1] CR2: 00005594228e5150 CR3: 00000000aed79000 CR4: 00000000001406e0 [ 129.543611][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.551654][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.559607][ C1] Call Trace: [ 129.562872][ C1] [ 129.565729][ C1] kmsan_check_memory+0xd/0x10 [ 129.570479][ C1] iowrite8+0x99/0x2e0 [ 129.574541][ C1] pvpanic_panic_notify+0x99/0xc0 [ 129.579551][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 129.584648][ C1] atomic_notifier_call_chain+0x12a/0x240 [ 129.590360][ C1] panic+0x468/0xc3e [ 129.594280][ C1] kmsan_report+0x1df/0x1e0 [ 129.598789][ C1] __msan_warning+0x58/0xa0 [ 129.603291][ C1] find_match+0x317/0x1480 [ 129.607698][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 129.613780][ C1] ? veth_xmit+0x6e1/0xb70 [ 129.618182][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 129.623526][ C1] __find_rr_leaf+0x3f9/0x1160 [ 129.628309][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 129.633416][ C1] fib6_table_lookup+0x586/0x1420 [ 129.638468][ C1] ip6_pol_route+0x203/0x2960 [ 129.643138][ C1] ? nf_ip6_checksum+0x501/0x610 [ 129.648076][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 129.653291][ C1] ip6_pol_route_input+0x123/0x140 [ 129.658410][ C1] fib6_rule_lookup+0x38f/0xa10 [ 129.663345][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 129.668890][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 129.674093][ C1] ip6_route_input+0xb9d/0xcf0 [ 129.678855][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 129.684056][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 129.689161][ C1] ipv6_rcv+0x628/0x710 [ 129.693316][ C1] ? local_bh_enable+0x40/0x40 [ 129.698075][ C1] process_backlog+0xa41/0x1410 [ 129.702954][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 129.708058][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 129.713291][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 129.718680][ C1] net_rx_action+0x786/0x1aa0 [ 129.723389][ C1] ? net_tx_action+0xc30/0xc30 [ 129.728141][ C1] __do_softirq+0x311/0x83d [ 129.732652][ C1] irq_exit+0x230/0x280 [ 129.736885][ C1] exiting_irq+0xe/0x10 [ 129.741030][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 129.746408][ C1] apic_timer_interrupt+0x2e/0x40 [ 129.751425][ C1] [ 129.754362][ C1] RIP: 0010:default_idle+0x53/0x90 [ 129.759466][ C1] Code: c3 f4 c9 f2 44 8b 35 44 c6 bf 01 48 c7 c7 98 87 d7 a2 e8 60 e5 96 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 67 9f 49 00 fb f4 <65> 8b 35 ce 61 e9 5e c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 129.779060][ C1] RSP: 0018:ffffa7a500cbbdf8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 129.787460][ C1] RAX: ffffa03cd796b798 RBX: ffffa03bed6f89d0 RCX: fffffa6085bbf580 [ 129.795418][ C1] RDX: ffffa03cc7b5e798 RSI: 0000000000000000 RDI: ffffffffa2d78798 [ 129.803375][ C1] RBP: ffffa7a500cbbe08 R08: fffffa608000000f R09: ffffa03befffb000 [ 129.811339][ C1] R10: 0000000000000004 R11: ffffffffa117c120 R12: ffffa03bed6f8000 [ 129.819298][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffa03bed6f89d0 [ 129.827294][ C1] ? __cpuidle_text_start+0x8/0x8 [ 129.832316][ C1] ? default_idle+0x40/0x90 [ 129.836807][ C1] ? __cpuidle_text_start+0x8/0x8 [ 129.841820][ C1] arch_cpu_idle+0x25/0x30 [ 129.846225][ C1] do_idle+0x26c/0x7b0 [ 129.850290][ C1] cpu_startup_entry+0x45/0x50 [ 129.855040][ C1] ? setup_APIC_timer+0x210/0x210 [ 129.860049][ C1] start_secondary+0x389/0x480 [ 129.864838][ C1] secondary_startup_64+0xa4/0xb0 [ 129.869853][ C1] Modules linked in: [ 129.873738][ C1] ---[ end trace 689b5526f41aa6f7 ]--- [ 129.879186][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 129.885759][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c e8 a1 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 129.905365][ C1] RSP: 0018:ffffa7a500ceff98 EFLAGS: 00010046 [ 129.911419][ C1] RAX: 0000000000000002 RBX: 0000000005c70103 RCX: 0000000005c70103 [ 129.919376][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffa7a500cf0074 [ 129.927330][ C1] RBP: ffffa7a500cf0040 R08: 0000000000000001 R09: ffffa03befd28ed0 [ 129.935280][ C1] R10: 0000000000000000 R11: ffffffff98c16f70 R12: 0000000000000000 [ 129.943229][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 129.951186][ C1] FS: 0000000000000000(0000) GS:ffffa03befd00000(0000) knlGS:0000000000000000 [ 129.960098][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.966679][ C1] CR2: 00005594228e5150 CR3: 00000000aed79000 CR4: 00000000001406e0 [ 129.974629][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.982574][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.990522][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 129.997724][ C1] ------------[ cut here ]------------ [ 130.003155][ C1] kernel BUG at mm/kmsan/kmsan.h:87! [ 130.008433][ C1] invalid opcode: 0000 [#2] SMP [ 130.013264][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B D 5.6.0-rc2-syzkaller #0 [ 130.022514][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 130.032562][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 130.039129][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c e8 a1 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 130.058835][ C1] RSP: 0018:ffffa7a500cef988 EFLAGS: 00010002 [ 130.064883][ C1] RAX: 0000000000000003 RBX: 0000000007e500cd RCX: 0000000007e500cd [ 130.072839][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffa7a500cefa64 [ 130.080816][ C1] RBP: ffffa7a500cefa30 R08: 0000000000000000 R09: ffffa03befd28ed0 [ 130.088768][ C1] R10: 0000000000000000 R11: ffffffff98c16f70 R12: 0000000000000000 [ 130.096719][ C1] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 130.104798][ C1] FS: 0000000000000000(0000) GS:ffffa03befd00000(0000) knlGS:0000000000000000 [ 130.113711][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.120294][ C1] CR2: 00005594228e5150 CR3: 00000000aed79000 CR4: 00000000001406e0 [ 130.128247][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.136198][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.144148][ C1] Call Trace: [ 130.147411][ C1] [ 130.150259][ C1] ? vprintk_func+0x636/0x820 [ 130.154939][ C1] kmsan_check_memory+0xd/0x10 [ 130.159689][ C1] iowrite8+0x99/0x2e0 [ 130.163743][ C1] pvpanic_panic_notify+0x99/0xc0 [ 130.168833][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 130.173927][ C1] atomic_notifier_call_chain+0x12a/0x240 [ 130.179641][ C1] panic+0x468/0xc3e [ 130.183562][ C1] oops_end+0x2a5/0x2d0 [ 130.187709][ C1] die+0x317/0x370 [ 130.191431][ C1] do_trap+0x3c0/0x760 [ 130.195495][ C1] do_invalid_op+0x2d4/0x370 [ 130.200207][ C1] ? kmsan_internal_check_memory+0x3c0/0x3d0 [ 130.206177][ C1] ? kmsan_internal_check_memory+0x3c0/0x3d0 [ 130.212165][ C1] invalid_op+0x3d/0x50 [ 130.216311][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 130.222878][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c e8 a1 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 130.242465][ C1] RSP: 0018:ffffa7a500ceff98 EFLAGS: 00010046 [ 130.248505][ C1] RAX: 0000000000000002 RBX: 0000000005c70103 RCX: 0000000005c70103 [ 130.256452][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffa7a500cf0074 [ 130.264402][ C1] RBP: ffffa7a500cf0040 R08: 0000000000000001 R09: ffffa03befd28ed0 [ 130.272351][ C1] R10: 0000000000000000 R11: ffffffff98c16f70 R12: 0000000000000000 [ 130.280299][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 130.288259][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 130.293359][ C1] ? kmsan_internal_check_memory+0x324/0x3d0 [ 130.299326][ C1] kmsan_check_memory+0xd/0x10 [ 130.304071][ C1] iowrite8+0x99/0x2e0 [ 130.308127][ C1] pvpanic_panic_notify+0x99/0xc0 [ 130.313138][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 130.318234][ C1] atomic_notifier_call_chain+0x12a/0x240 [ 130.324027][ C1] panic+0x468/0xc3e [ 130.328035][ C1] kmsan_report+0x1df/0x1e0 [ 130.332527][ C1] __msan_warning+0x58/0xa0 [ 130.337031][ C1] find_match+0x317/0x1480 [ 130.341439][ C1] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 130.347490][ C1] ? veth_xmit+0x6e1/0xb70 [ 130.351908][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 130.357096][ C1] __find_rr_leaf+0x3f9/0x1160 [ 130.361867][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 130.366967][ C1] fib6_table_lookup+0x586/0x1420 [ 130.372017][ C1] ip6_pol_route+0x203/0x2960 [ 130.376699][ C1] ? nf_ip6_checksum+0x501/0x610 [ 130.381642][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 130.386842][ C1] ip6_pol_route_input+0x123/0x140 [ 130.391943][ C1] fib6_rule_lookup+0x38f/0xa10 [ 130.396783][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 130.402315][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 130.407499][ C1] ip6_route_input+0xb9d/0xcf0 [ 130.412255][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 130.417442][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 130.422537][ C1] ipv6_rcv+0x628/0x710 [ 130.426680][ C1] ? local_bh_enable+0x40/0x40 [ 130.431441][ C1] process_backlog+0xa41/0x1410 [ 130.436286][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 130.441392][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 130.446583][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 130.451864][ C1] net_rx_action+0x786/0x1aa0 [ 130.456550][ C1] ? net_tx_action+0xc30/0xc30 [ 130.461306][ C1] __do_softirq+0x311/0x83d [ 130.465820][ C1] irq_exit+0x230/0x280 [ 130.469958][ C1] exiting_irq+0xe/0x10 [ 130.474095][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 130.479445][ C1] apic_timer_interrupt+0x2e/0x40 [ 130.484439][ C1] [ 130.487354][ C1] RIP: 0010:default_idle+0x53/0x90 [ 130.492456][ C1] Code: c3 f4 c9 f2 44 8b 35 44 c6 bf 01 48 c7 c7 98 87 d7 a2 e8 60 e5 96 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 67 9f 49 00 fb f4 <65> 8b 35 ce 61 e9 5e c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 130.512037][ C1] RSP: 0018:ffffa7a500cbbdf8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 130.520436][ C1] RAX: ffffa03cd796b798 RBX: ffffa03bed6f89d0 RCX: fffffa6085bbf580 [ 130.528390][ C1] RDX: ffffa03cc7b5e798 RSI: 0000000000000000 RDI: ffffffffa2d78798 [ 130.536356][ C1] RBP: ffffa7a500cbbe08 R08: fffffa608000000f R09: ffffa03befffb000 [ 130.544320][ C1] R10: 0000000000000004 R11: ffffffffa117c120 R12: ffffa03bed6f8000 [ 130.552281][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffa03bed6f89d0 [ 130.560257][ C1] ? __cpuidle_text_start+0x8/0x8 [ 130.565275][ C1] ? default_idle+0x40/0x90 [ 130.569760][ C1] ? __cpuidle_text_start+0x8/0x8 [ 130.574777][ C1] arch_cpu_idle+0x25/0x30 [ 130.579175][ C1] do_idle+0x26c/0x7b0 [ 130.583249][ C1] cpu_startup_entry+0x45/0x50 [ 130.588022][ C1] ? setup_APIC_timer+0x210/0x210 [ 130.593028][ C1] start_secondary+0x389/0x480 [ 130.597800][ C1] secondary_startup_64+0xa4/0xb0 [ 130.602813][ C1] Modules linked in: [ 130.606701][ C1] ---[ end trace 689b5526f41aa6f8 ]--- [ 130.612141][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 130.618723][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c e8 a1 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 130.638423][ C1] RSP: 0018:ffffa7a500ceff98 EFLAGS: 00010046 [ 130.644475][ C1] RAX: 0000000000000002 RBX: 0000000005c70103 RCX: 0000000005c70103 [ 130.652527][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffa7a500cf0074 [ 130.660688][ C1] RBP: ffffa7a500cf0040 R08: 0000000000000001 R09: ffffa03befd28ed0 [ 130.668639][ C1] R10: 0000000000000000 R11: ffffffff98c16f70 R12: 0000000000000000 [ 130.676590][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 130.684555][ C1] FS: 0000000000000000(0000) GS:ffffa03befd00000(0000) knlGS:0000000000000000 [ 130.693472][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.700043][ C1] CR2: 00005594228e5150 CR3: 00000000aed79000 CR4: 00000000001406e0 [ 130.708016][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.715971][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.723925][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 130.731922][ C1] Kernel Offset: 0x12a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 130.743542][ C1] Rebooting in 86400 seconds..