[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. 2020/05/27 01:07:21 parsed 1 programs 2020/05/27 01:07:25 executed programs: 0 syzkaller login: [ 118.162699][ T8854] IPVS: ftp: loaded support on port[0] = 21 [ 118.320690][ T8854] chnl_net:caif_netlink_parms(): no params data found [ 118.477463][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.485031][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.493253][ T8854] device bridge_slave_0 entered promiscuous mode [ 118.504101][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.511330][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.520720][ T8854] device bridge_slave_1 entered promiscuous mode [ 118.556467][ T8854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.568216][ T8854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.603636][ T8854] team0: Port device team_slave_0 added [ 118.611866][ T8854] team0: Port device team_slave_1 added [ 118.642733][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.649953][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.676076][ T8854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.689405][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.697296][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.723680][ T8854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.808790][ T8854] device hsr_slave_0 entered promiscuous mode [ 118.864881][ T8854] device hsr_slave_1 entered promiscuous mode [ 119.050800][ T8854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.108959][ T8854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.168809][ T8854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.218495][ T8854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.299213][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.306468][ T8854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.314367][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.321599][ T8854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.337410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.347378][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.413296][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.432348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.442289][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.462597][ T8854] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.473771][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.484186][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.493299][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.500666][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.540050][ T8854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.550782][ T8854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.566142][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.576697][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.586033][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.593120][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.602128][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.612838][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.626070][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.636396][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.646256][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.656532][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.666598][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.676245][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.686375][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.695513][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.712323][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.721738][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.755324][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.762812][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.784206][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.808964][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.827006][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.860619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.869474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.885092][ T8854] device veth0_vlan entered promiscuous mode [ 119.897292][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.906414][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.923289][ T8854] device veth1_vlan entered promiscuous mode [ 119.953384][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.962838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.971759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.981087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.995346][ T8854] device veth0_macvtap entered promiscuous mode [ 120.010398][ T8854] device veth1_macvtap entered promiscuous mode [ 120.039048][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.047065][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.056431][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.065657][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.075562][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.095075][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.120238][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.131038][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.656470][ C1] ===================================================== [ 120.663473][ C1] BUG: KMSAN: uninit-value in bpf_skb_load_helper_8+0xe0/0x290 [ 120.671014][ C1] CPU: 1 PID: 5236 Comm: systemd-udevd Not tainted 5.7.0-rc4-syzkaller #0 [ 120.679499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.689542][ C1] Call Trace: [ 120.692817][ C1] [ 120.695649][ C1] dump_stack+0x1c9/0x220 [ 120.699957][ C1] kmsan_report+0xf7/0x1e0 [ 120.704352][ C1] __msan_warning+0x58/0xa0 [ 120.708845][ C1] bpf_skb_load_helper_8+0xe0/0x290 [ 120.714037][ C1] ___bpf_prog_run+0x214d/0x97a0 [ 120.718964][ C1] ? run_timer_softirq+0x2d/0x50 [ 120.723883][ C1] ? __do_softirq+0x311/0x83d [ 120.728558][ C1] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 120.734174][ C1] __bpf_prog_run32+0x101/0x170 [ 120.738999][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 120.744189][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 120.749310][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 120.755093][ C1] ? ___bpf_prog_run+0x97a0/0x97a0 [ 120.760182][ C1] packet_rcv+0x70f/0x2160 [ 120.764583][ C1] ? packet_sock_destruct+0x1e0/0x1e0 [ 120.769929][ C1] dev_queue_xmit_nit+0x1199/0x1270 [ 120.775127][ C1] dev_hard_start_xmit+0x20f/0xab0 [ 120.780216][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 120.785406][ C1] __dev_queue_xmit+0x2f8d/0x3b20 [ 120.790406][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 120.795939][ C1] ? _raw_read_unlock_bh+0x5d/0x80 [ 120.801032][ C1] dev_queue_xmit+0x4b/0x60 [ 120.805515][ C1] ip6_finish_output2+0x2056/0x2640 [ 120.810711][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 120.815901][ C1] __ip6_finish_output+0x824/0x8e0 [ 120.820990][ C1] ip6_finish_output+0x166/0x410 [ 120.825906][ C1] ip6_output+0x60a/0x770 [ 120.830228][ C1] ? ip6_output+0x770/0x770 [ 120.834708][ C1] ? ac6_seq_show+0x200/0x200 [ 120.839412][ C1] mld_sendpack+0xeba/0x13d0 [ 120.843996][ C1] ? mld_send_report+0x480/0x480 [ 120.854491][ C1] mld_ifc_timer_expire+0x1158/0x1750 [ 120.859876][ C1] call_timer_fn+0x218/0x510 [ 120.864445][ C1] ? mld_gq_timer_expire+0x120/0x120 [ 120.869707][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 120.875489][ C1] __run_timers+0xcff/0x1210 [ 120.880054][ C1] ? mld_gq_timer_expire+0x120/0x120 [ 120.885316][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 120.890492][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 120.896637][ C1] ? irqtime_account_irq+0xcb/0x2d0 [ 120.901827][ C1] run_timer_softirq+0x2d/0x50 [ 120.906583][ C1] ? timers_dead_cpu+0x9b0/0x9b0 [ 120.911496][ C1] __do_softirq+0x311/0x83d [ 120.915981][ C1] irq_exit+0x230/0x280 [ 120.920112][ C1] exiting_irq+0xe/0x10 [ 120.924245][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 120.929606][ C1] apic_timer_interrupt+0x2e/0x40 [ 120.934614][ C1] [ 120.937534][ C1] RIP: 0010:kmsan_internal_is_vmalloc_addr+0x24/0x30 [ 120.944184][ C1] Code: 66 0f 1f 44 00 00 55 48 89 e5 48 8b 05 65 69 84 0d 48 39 f8 0f 96 c1 48 ba ff ff ff ff ff 07 00 00 48 01 c2 48 39 fa 0f 97 c0 <20> c8 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 48 81 ff ff ff ff [ 120.963763][ C1] RSP: 0018:ffffb6dbc0d87a60 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 120.972147][ C1] RAX: ffffb6dbc0000001 RBX: ffffb6dbc0d87c48 RCX: ffffffff90055901 [ 120.980094][ C1] RDX: ffffbedbbfffffff RSI: 0000000000000004 RDI: ffffb6dbc0d87c48 [ 120.988041][ C1] RBP: ffffb6dbc0d87a60 R08: 0000000000000002 R09: ffffb6dbc0d87b08 [ 120.996006][ C1] R10: 0000000000000004 R11: ffffffff90055440 R12: 0000000006fb00b9 [ 121.005167][ C1] R13: 0000000000000004 R14: 0000000000000001 R15: ffffb6dbc0d87c48 [ 121.013137][ C1] ? fillonedir+0x670/0x670 [ 121.017615][ C1] ? filldir+0x4c1/0x1010 [ 121.021931][ C1] kmsan_get_metadata+0x4f/0x180 [ 121.026846][ C1] kmsan_internal_set_origin+0x75/0xb0 [ 121.032279][ C1] __msan_poison_alloca+0xf0/0x120 [ 121.037365][ C1] ? filldir+0x5a4/0x1010 [ 121.041681][ C1] ? filldir+0x5a4/0x1010 [ 121.045987][ C1] filldir+0x5a4/0x1010 [ 121.050135][ C1] kernfs_fop_readdir+0x8f2/0xf10 [ 121.055147][ C1] ? fillonedir+0x670/0x670 [ 121.059630][ C1] ? kernfs_rename_ns+0x1000/0x1000 [ 121.064801][ C1] iterate_dir+0x3d8/0x890 [ 121.069198][ C1] __se_sys_getdents+0x24e/0x5d0 [ 121.074134][ C1] ? fillonedir+0x670/0x670 [ 121.078627][ C1] __x64_sys_getdents+0x4a/0x70 [ 121.083466][ C1] do_syscall_64+0xb8/0x160 [ 121.087948][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 121.093814][ C1] RIP: 0033:0x7f88723ebf2b [ 121.098205][ C1] Code: fc ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 41 56 48 63 ff 41 55 41 54 b8 4e 00 00 00 55 53 48 89 f3 48 83 ec 08 0f 05 <48> 3d 00 f0 ff ff 77 55 48 8d 2c 06 49 89 c4 48 39 ee 73 34 90 44 [ 121.117785][ C1] RSP: 002b:00007ffef9c549d0 EFLAGS: 00000202 ORIG_RAX: 000000000000004e [ 121.126172][ C1] RAX: ffffffffffffffda RBX: 0000557eb1094690 RCX: 00007f88723ebf2b [ 121.134122][ C1] RDX: 0000000000008000 RSI: 0000557eb1094690 RDI: 0000000000000010 [ 121.142081][ C1] RBP: 0000557eb1094690 R08: 00007f88726d2308 R09: 0000000000008040 [ 121.150042][ C1] R10: 0000000000000020 R11: 0000000000000202 R12: fffffffffffffe50 [ 121.158001][ C1] R13: 0000000000000000 R14: 00000000000000fe R15: 0000557eb105dd40 [ 121.165959][ C1] [ 121.168307][ C1] Uninit was stored to memory at: [ 121.173332][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 121.179030][ C1] __msan_chain_origin+0x50/0x90 [ 121.183946][ C1] ___bpf_prog_run+0x6c80/0x97a0 [ 121.188868][ C1] __bpf_prog_run32+0x101/0x170 [ 121.193697][ C1] packet_rcv+0x70f/0x2160 [ 121.198127][ C1] dev_queue_xmit_nit+0x1199/0x1270 [ 121.203298][ C1] dev_hard_start_xmit+0x20f/0xab0 [ 121.208383][ C1] __dev_queue_xmit+0x2f8d/0x3b20 [ 121.213395][ C1] dev_queue_xmit+0x4b/0x60 [ 121.217962][ C1] ip6_finish_output2+0x2056/0x2640 [ 121.223134][ C1] __ip6_finish_output+0x824/0x8e0 [ 121.228220][ C1] ip6_finish_output+0x166/0x410 [ 121.233144][ C1] ip6_output+0x60a/0x770 [ 121.237459][ C1] mld_sendpack+0xeba/0x13d0 [ 121.242026][ C1] mld_ifc_timer_expire+0x1158/0x1750 [ 121.247372][ C1] call_timer_fn+0x218/0x510 [ 121.251941][ C1] __run_timers+0xcff/0x1210 [ 121.256510][ C1] run_timer_softirq+0x2d/0x50 [ 121.261252][ C1] __do_softirq+0x311/0x83d [ 121.265724][ C1] [ 121.268026][ C1] Uninit was stored to memory at: [ 121.273029][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 121.278734][ C1] __msan_chain_origin+0x50/0x90 [ 121.283650][ C1] ___bpf_prog_run+0x6cbe/0x97a0 [ 121.288560][ C1] __bpf_prog_run32+0x101/0x170 [ 121.293387][ C1] packet_rcv+0x70f/0x2160 [ 121.297782][ C1] dev_queue_xmit_nit+0x1199/0x1270 [ 121.302952][ C1] dev_hard_start_xmit+0x20f/0xab0 [ 121.308040][ C1] __dev_queue_xmit+0x2f8d/0x3b20 [ 121.313039][ C1] dev_queue_xmit+0x4b/0x60 [ 121.317520][ C1] ip6_finish_output2+0x2056/0x2640 [ 121.322701][ C1] __ip6_finish_output+0x824/0x8e0 [ 121.327788][ C1] ip6_finish_output+0x166/0x410 [ 121.332707][ C1] ip6_output+0x60a/0x770 [ 121.337012][ C1] mld_sendpack+0xeba/0x13d0 [ 121.341573][ C1] mld_ifc_timer_expire+0x1158/0x1750 [ 121.346918][ C1] call_timer_fn+0x218/0x510 [ 121.351478][ C1] __run_timers+0xcff/0x1210 [ 121.356042][ C1] run_timer_softirq+0x2d/0x50 [ 121.360790][ C1] __do_softirq+0x311/0x83d [ 121.365261][ C1] [ 121.367563][ C1] Uninit was stored to memory at: [ 121.372574][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 121.378268][ C1] __msan_chain_origin+0x50/0x90 [ 121.383180][ C1] ___bpf_prog_run+0x6c64/0x97a0 [ 121.388088][ C1] __bpf_prog_run32+0x101/0x170 [ 121.392913][ C1] packet_rcv+0x70f/0x2160 [ 121.397318][ C1] dev_queue_xmit_nit+0x1199/0x1270 [ 121.402503][ C1] dev_hard_start_xmit+0x20f/0xab0 [ 121.407600][ C1] __dev_queue_xmit+0x2f8d/0x3b20 [ 121.412626][ C1] dev_queue_xmit+0x4b/0x60 [ 121.417109][ C1] ip6_finish_output2+0x2056/0x2640 [ 121.422384][ C1] __ip6_finish_output+0x824/0x8e0 [ 121.427537][ C1] ip6_finish_output+0x166/0x410 [ 121.432455][ C1] ip6_output+0x60a/0x770 [ 121.436762][ C1] mld_sendpack+0xeba/0x13d0 [ 121.441337][ C1] mld_ifc_timer_expire+0x1158/0x1750 [ 121.446723][ C1] call_timer_fn+0x218/0x510 [ 121.451286][ C1] __run_timers+0xcff/0x1210 [ 121.455941][ C1] run_timer_softirq+0x2d/0x50 [ 121.460677][ C1] __do_softirq+0x311/0x83d [ 121.465148][ C1] [ 121.467452][ C1] Local variable ----regs@__bpf_prog_run32 created at: [ 121.474273][ C1] __bpf_prog_run32+0x87/0x170 [ 121.479010][ C1] __bpf_prog_run32+0x87/0x170 [ 121.483742][ C1] ===================================================== [ 121.490651][ C1] Disabling lock debugging due to kernel taint [ 121.496776][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 121.503338][ C1] CPU: 1 PID: 5236 Comm: systemd-udevd Tainted: G B 5.7.0-rc4-syzkaller #0 [ 121.513206][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.523246][ C1] Call Trace: [ 121.526519][ C1] [ 121.529353][ C1] dump_stack+0x1c9/0x220 [ 121.533674][ C1] panic+0x3d5/0xc3e [ 121.537555][ C1] kmsan_report+0x1df/0x1e0 [ 121.542051][ C1] __msan_warning+0x58/0xa0 [ 121.546530][ C1] bpf_skb_load_helper_8+0xe0/0x290 [ 121.551718][ C1] ___bpf_prog_run+0x214d/0x97a0 [ 121.556631][ C1] ? run_timer_softirq+0x2d/0x50 [ 121.561540][ C1] ? __do_softirq+0x311/0x83d [ 121.566193][ C1] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 121.571806][ C1] __bpf_prog_run32+0x101/0x170 [ 121.576637][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 121.581812][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 121.586911][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.592689][ C1] ? ___bpf_prog_run+0x97a0/0x97a0 [ 121.597778][ C1] packet_rcv+0x70f/0x2160 [ 121.602260][ C1] ? packet_sock_destruct+0x1e0/0x1e0 [ 121.607668][ C1] dev_queue_xmit_nit+0x1199/0x1270 [ 121.612870][ C1] dev_hard_start_xmit+0x20f/0xab0 [ 121.617968][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 121.623189][ C1] __dev_queue_xmit+0x2f8d/0x3b20 [ 121.628236][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 121.633799][ C1] ? _raw_read_unlock_bh+0x5d/0x80 [ 121.638891][ C1] dev_queue_xmit+0x4b/0x60 [ 121.643372][ C1] ip6_finish_output2+0x2056/0x2640 [ 121.649345][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 121.654543][ C1] __ip6_finish_output+0x824/0x8e0 [ 121.659639][ C1] ip6_finish_output+0x166/0x410 [ 121.664756][ C1] ip6_output+0x60a/0x770 [ 121.669066][ C1] ? ip6_output+0x770/0x770 [ 121.673545][ C1] ? ac6_seq_show+0x200/0x200 [ 121.678209][ C1] mld_sendpack+0xeba/0x13d0 [ 121.682796][ C1] ? mld_send_report+0x480/0x480 [ 121.687715][ C1] mld_ifc_timer_expire+0x1158/0x1750 [ 121.693072][ C1] call_timer_fn+0x218/0x510 [ 121.697644][ C1] ? mld_gq_timer_expire+0x120/0x120 [ 121.702904][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 121.708686][ C1] __run_timers+0xcff/0x1210 [ 121.713252][ C1] ? mld_gq_timer_expire+0x120/0x120 [ 121.718524][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 121.723700][ C1] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 121.729827][ C1] ? irqtime_account_irq+0xcb/0x2d0 [ 121.735004][ C1] run_timer_softirq+0x2d/0x50 [ 121.739742][ C1] ? timers_dead_cpu+0x9b0/0x9b0 [ 121.744663][ C1] __do_softirq+0x311/0x83d [ 121.749147][ C1] irq_exit+0x230/0x280 [ 121.753280][ C1] exiting_irq+0xe/0x10 [ 121.757408][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 121.762760][ C1] apic_timer_interrupt+0x2e/0x40 [ 121.767767][ C1] [ 121.770697][ C1] RIP: 0010:kmsan_internal_is_vmalloc_addr+0x24/0x30 [ 121.777626][ C1] Code: 66 0f 1f 44 00 00 55 48 89 e5 48 8b 05 65 69 84 0d 48 39 f8 0f 96 c1 48 ba ff ff ff ff ff 07 00 00 48 01 c2 48 39 fa 0f 97 c0 <20> c8 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 48 81 ff ff ff ff [ 121.797217][ C1] RSP: 0018:ffffb6dbc0d87a60 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 121.805601][ C1] RAX: ffffb6dbc0000001 RBX: ffffb6dbc0d87c48 RCX: ffffffff90055901 [ 121.813561][ C1] RDX: ffffbedbbfffffff RSI: 0000000000000004 RDI: ffffb6dbc0d87c48 [ 121.821506][ C1] RBP: ffffb6dbc0d87a60 R08: 0000000000000002 R09: ffffb6dbc0d87b08 [ 121.829452][ C1] R10: 0000000000000004 R11: ffffffff90055440 R12: 0000000006fb00b9 [ 121.837398][ C1] R13: 0000000000000004 R14: 0000000000000001 R15: ffffb6dbc0d87c48 [ 121.845353][ C1] ? fillonedir+0x670/0x670 [ 121.849835][ C1] ? filldir+0x4c1/0x1010 [ 121.854140][ C1] kmsan_get_metadata+0x4f/0x180 [ 121.859053][ C1] kmsan_internal_set_origin+0x75/0xb0 [ 121.864487][ C1] __msan_poison_alloca+0xf0/0x120 [ 121.869575][ C1] ? filldir+0x5a4/0x1010 [ 121.873890][ C1] ? filldir+0x5a4/0x1010 [ 121.878206][ C1] filldir+0x5a4/0x1010 [ 121.882347][ C1] kernfs_fop_readdir+0x8f2/0xf10 [ 121.887360][ C1] ? fillonedir+0x670/0x670 [ 121.891842][ C1] ? kernfs_rename_ns+0x1000/0x1000 [ 121.897031][ C1] iterate_dir+0x3d8/0x890 [ 121.901425][ C1] __se_sys_getdents+0x24e/0x5d0 [ 121.906340][ C1] ? fillonedir+0x670/0x670 [ 121.910818][ C1] __x64_sys_getdents+0x4a/0x70 [ 121.915645][ C1] do_syscall_64+0xb8/0x160 [ 121.920129][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 121.926005][ C1] RIP: 0033:0x7f88723ebf2b [ 121.930406][ C1] Code: fc ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 41 56 48 63 ff 41 55 41 54 b8 4e 00 00 00 55 53 48 89 f3 48 83 ec 08 0f 05 <48> 3d 00 f0 ff ff 77 55 48 8d 2c 06 49 89 c4 48 39 ee 73 34 90 44 [ 121.949996][ C1] RSP: 002b:00007ffef9c549d0 EFLAGS: 00000202 ORIG_RAX: 000000000000004e [ 121.958382][ C1] RAX: ffffffffffffffda RBX: 0000557eb1094690 RCX: 00007f88723ebf2b [ 121.966328][ C1] RDX: 0000000000008000 RSI: 0000557eb1094690 RDI: 0000000000000010 [ 121.974286][ C1] RBP: 0000557eb1094690 R08: 00007f88726d2308 R09: 0000000000008040 [ 121.982233][ C1] R10: 0000000000000020 R11: 0000000000000202 R12: fffffffffffffe50 [ 121.990191][ C1] R13: 0000000000000000 R14: 00000000000000fe R15: 0000557eb105dd40 [ 121.999518][ C1] Kernel Offset: 0xde00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 122.011040][ C1] Rebooting in 86400 seconds..