[ 152.685248][ T32] audit: type=1400 audit(1582352751.738:41): avc: denied { map } for pid=12297 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. syzkaller login: [ 166.637710][ T32] audit: type=1400 audit(1582352765.688:42): avc: denied { map } for pid=12316 comm="syz-executor026" path="/root/syz-executor026750264" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 166.683711][T12317] IPVS: ftp: loaded support on port[0] = 21 [ 166.818947][T12317] chnl_net:caif_netlink_parms(): no params data found [ 166.913918][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.921068][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.929918][T12317] device bridge_slave_0 entered promiscuous mode [ 166.941112][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.948510][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.957180][T12317] device bridge_slave_1 entered promiscuous mode [ 166.990508][T12317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.005642][T12317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.038364][T12317] team0: Port device team_slave_0 added [ 167.049364][T12317] team0: Port device team_slave_1 added [ 167.077994][T12317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.085020][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.110986][T12317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.125918][T12317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.132965][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.158955][T12317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.236002][T12317] device hsr_slave_0 entered promiscuous mode [ 167.282623][T12317] device hsr_slave_1 entered promiscuous mode [ 167.472883][ T32] audit: type=1400 audit(1582352766.528:43): avc: denied { create } for pid=12317 comm="syz-executor026" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 167.481008][T12317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.497938][ T32] audit: type=1400 audit(1582352766.528:44): avc: denied { write } for pid=12317 comm="syz-executor026" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 167.498049][ T32] audit: type=1400 audit(1582352766.528:45): avc: denied { read } for pid=12317 comm="syz-executor026" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 167.588686][T12317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.648159][T12317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.708222][T12317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.809225][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.816442][T12317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.824489][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.831655][T12317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.854839][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.866214][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.976578][T12317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.002796][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.011674][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.029504][T12317] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.045218][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.055267][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.064828][ T2642] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.072097][ T2642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.089200][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.098431][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.107730][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.114905][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.135619][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.163802][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.174844][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.185103][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.214007][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.224584][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.234703][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.245243][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.254675][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.275428][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.284648][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.301355][T12317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.343291][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.350802][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.376219][T12317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.422647][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.432608][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.475421][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.484464][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.503472][T12317] device veth0_vlan entered promiscuous mode [ 168.515567][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.525622][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.547321][T12317] device veth1_vlan entered promiscuous mode [ 168.602976][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.611678][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.624210][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.633716][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.653103][T12317] device veth0_macvtap entered promiscuous mode [ 168.669285][T12317] device veth1_macvtap entered promiscuous mode [ 168.708287][T12317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.716375][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.725311][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.733947][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.744119][ T2642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.765241][T12317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.773321][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.783151][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 169.057486][ T32] audit: type=1400 audit(1582352768.108:46): avc: denied { prog_load } for pid=12317 comm="syz-executor026" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 169.099478][ T32] audit: type=1400 audit(1582352768.148:47): avc: denied { prog_run } for pid=12317 comm="syz-executor026" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 169.100151][T12317] ===================================================== [ 169.129753][T12317] BUG: KMSAN: uninit-value in batadv_get_vid+0x1fd/0x340 [ 169.136759][T12317] CPU: 0 PID: 12317 Comm: syz-executor026 Not tainted 5.6.0-rc2-syzkaller #0 [ 169.145498][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.155537][T12317] Call Trace: [ 169.158822][T12317] dump_stack+0x1c9/0x220 [ 169.163167][T12317] kmsan_report+0xf7/0x1e0 [ 169.167584][T12317] __msan_warning+0x58/0xa0 [ 169.172118][T12317] batadv_get_vid+0x1fd/0x340 [ 169.176801][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.182016][T12317] batadv_interface_tx+0x30a/0x2450 [ 169.187265][T12317] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 169.193334][T12317] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 169.199389][T12317] ? netif_skb_features+0xbe4/0x1030 [ 169.204682][T12317] ? batadv_softif_is_valid+0xb0/0xb0 [ 169.210039][T12317] dev_hard_start_xmit+0x531/0xab0 [ 169.215153][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.220363][T12317] __dev_queue_xmit+0x37de/0x4220 [ 169.225424][T12317] dev_queue_xmit+0x4b/0x60 [ 169.229918][T12317] __bpf_redirect+0x11d5/0x1440 [ 169.234783][T12317] bpf_clone_redirect+0x466/0x620 [ 169.239817][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 169.245706][T12317] bpf_prog_bb15b996d00816f9+0x7a4/0x1000 [ 169.251412][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 169.257300][T12317] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 169.263443][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.268540][T12317] ? kmsan_internal_set_origin+0x75/0xb0 [ 169.274182][T12317] ? __msan_poison_alloca+0xf0/0x120 [ 169.279453][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.284643][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.290434][T12317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 169.296490][T12317] ? ktime_get+0x2b8/0x400 [ 169.300903][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.306001][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.311815][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 169.317704][T12317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 169.323765][T12317] bpf_test_run+0x60c/0xe50 [ 169.328274][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.333483][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.339277][T12317] bpf_prog_test_run_skb+0xcab/0x24a0 [ 169.344675][T12317] ? bpf_fentry_test6+0xd0/0xd0 [ 169.349509][T12317] __do_sys_bpf+0xa684/0x13510 [ 169.354287][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.359387][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.364571][T12317] ? kmsan_set_origin_checked+0x95/0xf0 [ 169.370116][T12317] ? __fpregs_load_activate+0x38c/0x3c0 [ 169.375657][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.380844][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.386640][T12317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 169.392690][T12317] ? prepare_exit_to_usermode+0x1ca/0x520 [ 169.398392][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.403492][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.408595][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.414390][T12317] __ia32_sys_bpf+0xdb/0x120 [ 169.418969][T12317] ? __se_sys_bpf+0xa0/0xa0 [ 169.423457][T12317] do_fast_syscall_32+0x3c7/0x6e0 [ 169.428483][T12317] entry_SYSENTER_compat+0x68/0x77 [ 169.433576][T12317] RIP: 0023:0xf7fc8d99 [ 169.437626][T12317] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.457213][T12317] RSP: 002b:00000000ff9adc0c EFLAGS: 00000246 ORIG_RAX: 0000000000000165 [ 169.465605][T12317] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000280 [ 169.473557][T12317] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000005b [ 169.481519][T12317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.489481][T12317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 169.497434][T12317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.505411][T12317] [ 169.507825][T12317] Uninit was created at: [ 169.512061][T12317] kmsan_internal_poison_shadow+0x66/0xd0 [ 169.517765][T12317] kmsan_slab_alloc+0x8a/0xe0 [ 169.522423][T12317] __kmalloc_node_track_caller+0xb40/0x1200 [ 169.528298][T12317] pskb_expand_head+0x20b/0x1b00 [ 169.533216][T12317] skb_ensure_writable+0x3ea/0x490 [ 169.538316][T12317] bpf_clone_redirect+0x251/0x620 [ 169.543329][T12317] bpf_prog_bb15b996d00816f9+0x7a4/0x1000 [ 169.549058][T12317] bpf_test_run+0x60c/0xe50 [ 169.553572][T12317] bpf_prog_test_run_skb+0xcab/0x24a0 [ 169.558926][T12317] __do_sys_bpf+0xa684/0x13510 [ 169.563676][T12317] __ia32_sys_bpf+0xdb/0x120 [ 169.568261][T12317] do_fast_syscall_32+0x3c7/0x6e0 [ 169.573268][T12317] entry_SYSENTER_compat+0x68/0x77 [ 169.578351][T12317] ===================================================== [ 169.585261][T12317] Disabling lock debugging due to kernel taint [ 169.591394][T12317] Kernel panic - not syncing: panic_on_warn set ... [ 169.597967][T12317] CPU: 0 PID: 12317 Comm: syz-executor026 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 169.608088][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.618125][T12317] Call Trace: [ 169.621420][T12317] dump_stack+0x1c9/0x220 [ 169.625748][T12317] panic+0x3d5/0xc3e [ 169.629670][T12317] kmsan_report+0x1df/0x1e0 [ 169.634182][T12317] __msan_warning+0x58/0xa0 [ 169.638703][T12317] batadv_get_vid+0x1fd/0x340 [ 169.643368][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.648590][T12317] batadv_interface_tx+0x30a/0x2450 [ 169.653774][T12317] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 169.659829][T12317] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 169.665899][T12317] ? netif_skb_features+0xbe4/0x1030 [ 169.671189][T12317] ? batadv_softif_is_valid+0xb0/0xb0 [ 169.676547][T12317] dev_hard_start_xmit+0x531/0xab0 [ 169.681667][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.686894][T12317] __dev_queue_xmit+0x37de/0x4220 [ 169.691954][T12317] dev_queue_xmit+0x4b/0x60 [ 169.696486][T12317] __bpf_redirect+0x11d5/0x1440 [ 169.701352][T12317] bpf_clone_redirect+0x466/0x620 [ 169.706419][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 169.712302][T12317] bpf_prog_bb15b996d00816f9+0x7a4/0x1000 [ 169.718012][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 169.723903][T12317] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 169.730057][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.735160][T12317] ? kmsan_internal_set_origin+0x75/0xb0 [ 169.740785][T12317] ? __msan_poison_alloca+0xf0/0x120 [ 169.746054][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.751242][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.757035][T12317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 169.763087][T12317] ? ktime_get+0x2b8/0x400 [ 169.767508][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.772620][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.778409][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 169.784293][T12317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 169.790354][T12317] bpf_test_run+0x60c/0xe50 [ 169.794853][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.800073][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.805867][T12317] bpf_prog_test_run_skb+0xcab/0x24a0 [ 169.811262][T12317] ? bpf_fentry_test6+0xd0/0xd0 [ 169.816108][T12317] __do_sys_bpf+0xa684/0x13510 [ 169.820888][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.825987][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.831174][T12317] ? kmsan_set_origin_checked+0x95/0xf0 [ 169.836721][T12317] ? __fpregs_load_activate+0x38c/0x3c0 [ 169.842249][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 169.847432][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.853225][T12317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 169.859275][T12317] ? prepare_exit_to_usermode+0x1ca/0x520 [ 169.865484][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.870588][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 169.875690][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 169.881495][T12317] __ia32_sys_bpf+0xdb/0x120 [ 169.886080][T12317] ? __se_sys_bpf+0xa0/0xa0 [ 169.890577][T12317] do_fast_syscall_32+0x3c7/0x6e0 [ 169.895622][T12317] entry_SYSENTER_compat+0x68/0x77 [ 169.900735][T12317] RIP: 0023:0xf7fc8d99 [ 169.904788][T12317] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.924373][T12317] RSP: 002b:00000000ff9adc0c EFLAGS: 00000246 ORIG_RAX: 0000000000000165 [ 169.932775][T12317] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000280 [ 169.940730][T12317] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000005b [ 169.948691][T12317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.956654][T12317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 169.964606][T12317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.972996][T12317] ------------[ cut here ]------------ [ 169.978451][T12317] kernel BUG at mm/kmsan/kmsan.h:87! [ 169.983723][T12317] invalid opcode: 0000 [#1] SMP [ 169.988564][T12317] CPU: 0 PID: 12317 Comm: syz-executor026 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 169.998686][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.008730][T12317] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 170.015307][T12317] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c e8 b6 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 170.034916][T12317] RSP: 0018:ffff9fd8c1566d08 EFLAGS: 00010046 [ 170.040965][T12317] RAX: 0000000000000002 RBX: 0000000004940108 RCX: 0000000004940108 [ 170.048921][T12317] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9fd8c1566de4 [ 170.056915][T12317] RBP: ffff9fd8c1566db0 R08: 0000000000000000 R09: ffff998cefc28ed0 [ 170.064870][T12317] R10: 0000000000000000 R11: ffffffffadc16f70 R12: 0000000000000000 [ 170.072825][T12317] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 170.080793][T12317] FS: 0000000000000000(0000) GS:ffff998cefc00000(0063) knlGS:0000000008197840 [ 170.089725][T12317] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 170.096291][T12317] CR2: 0000000020000200 CR3: 0000000102c07000 CR4: 00000000001406f0 [ 170.104244][T12317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.112210][T12317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.120161][T12317] Call Trace: [ 170.123479][T12317] kmsan_check_memory+0xd/0x10 [ 170.128242][T12317] iowrite8+0x99/0x2e0 [ 170.132305][T12317] pvpanic_panic_notify+0x99/0xc0 [ 170.137314][T12317] ? pvpanic_mmio_remove+0x60/0x60 [ 170.142421][T12317] atomic_notifier_call_chain+0x12a/0x240 [ 170.148147][T12317] panic+0x468/0xc3e [ 170.152074][T12317] kmsan_report+0x1df/0x1e0 [ 170.156660][T12317] __msan_warning+0x58/0xa0 [ 170.161162][T12317] batadv_get_vid+0x1fd/0x340 [ 170.165837][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 170.171032][T12317] batadv_interface_tx+0x30a/0x2450 [ 170.176217][T12317] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 170.182270][T12317] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 170.188333][T12317] ? netif_skb_features+0xbe4/0x1030 [ 170.193627][T12317] ? batadv_softif_is_valid+0xb0/0xb0 [ 170.198988][T12317] dev_hard_start_xmit+0x531/0xab0 [ 170.204102][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 170.209291][T12317] __dev_queue_xmit+0x37de/0x4220 [ 170.214342][T12317] dev_queue_xmit+0x4b/0x60 [ 170.218834][T12317] __bpf_redirect+0x11d5/0x1440 [ 170.223706][T12317] bpf_clone_redirect+0x466/0x620 [ 170.228734][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 170.234608][T12317] bpf_prog_bb15b996d00816f9+0x7a4/0x1000 [ 170.240307][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 170.246196][T12317] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 170.252348][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 170.257448][T12317] ? kmsan_internal_set_origin+0x75/0xb0 [ 170.263070][T12317] ? __msan_poison_alloca+0xf0/0x120 [ 170.268336][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 170.273519][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 170.279322][T12317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 170.285373][T12317] ? ktime_get+0x2b8/0x400 [ 170.289784][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 170.294910][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 170.300697][T12317] ? bpf_prog_bb15b996d00816f9+0x748/0x1000 [ 170.306574][T12317] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 170.312630][T12317] bpf_test_run+0x60c/0xe50 [ 170.317128][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 170.322348][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 170.328143][T12317] bpf_prog_test_run_skb+0xcab/0x24a0 [ 170.333541][T12317] ? bpf_fentry_test6+0xd0/0xd0 [ 170.338387][T12317] __do_sys_bpf+0xa684/0x13510 [ 170.343161][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 170.348277][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 170.353461][T12317] ? kmsan_set_origin_checked+0x95/0xf0 [ 170.359010][T12317] ? __fpregs_load_activate+0x38c/0x3c0 [ 170.364549][T12317] ? kmsan_get_metadata+0x11d/0x180 [ 170.369745][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 170.375548][T12317] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 170.381602][T12317] ? prepare_exit_to_usermode+0x1ca/0x520 [ 170.387314][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 170.392412][T12317] ? kmsan_get_metadata+0x4f/0x180 [ 170.397519][T12317] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 170.403322][T12317] __ia32_sys_bpf+0xdb/0x120 [ 170.407902][T12317] ? __se_sys_bpf+0xa0/0xa0 [ 170.412392][T12317] do_fast_syscall_32+0x3c7/0x6e0 [ 170.417440][T12317] entry_SYSENTER_compat+0x68/0x77 [ 170.422543][T12317] RIP: 0023:0xf7fc8d99 [ 170.426594][T12317] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 170.446181][T12317] RSP: 002b:00000000ff9adc0c EFLAGS: 00000246 ORIG_RAX: 0000000000000165 [ 170.454575][T12317] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000280 [ 170.462531][T12317] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000005b [ 170.470485][T12317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.478438][T12317] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 170.486389][T12317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.494360][T12317] Modules linked in: [ 170.498244][T12317] ---[ end trace 147834bf404cbdf5 ]--- [ 170.503688][T12317] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 170.510268][T12317] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c e8 b6 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 170.529865][T12317] RSP: 0018:ffff9fd8c1566d08 EFLAGS: 00010046 [ 170.535910][T12317] RAX: 0000000000000002 RBX: 0000000004940108 RCX: 0000000004940108 [ 170.543863][T12317] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9fd8c1566de4 [ 170.551833][T12317] RBP: ffff9fd8c1566db0 R08: 0000000000000000 R09: ffff998cefc28ed0 [ 170.559827][T12317] R10: 0000000000000000 R11: ffffffffadc16f70 R12: 0000000000000000 [ 170.567789][T12317] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 170.575746][T12317] FS: 0000000000000000(0000) GS:ffff998cefc00000(0063) knlGS:0000000008197840 [ 170.584746][T12317] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 170.591325][T12317] CR2: 0000000020000200 CR3: 0000000102c07000 CR4: 00000000001406f0 [ 170.599291][T12317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.607246][T12317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.615235][T12317] Kernel panic - not syncing: Fatal exception in interrupt [ 170.623030][T12317] Kernel Offset: 0x27a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 170.634648][T12317] Rebooting in 86400 seconds..