Not allocated shadow for addr ffff8801dcec8000 (page ffffea000b2d8b00) Attempted to access 102 bytes ------------[ cut here ]------------ kernel BUG at mm/kmsan/kmsan.c:1326! invalid opcode: 0000 [#1] SMP PTI Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.16.0+ #83 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 mm/kmsan/kmsan.c:1325 RSP: 0018:ffff88021fc0eed8 EFLAGS: 00010086 RAX: 000000000000001d RBX: 0000000000000760 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 RBP: ffff88021fc0eef0 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801dcec8000 R13: 0000000000000066 R14: 0000000000000001 R15: 0000000000000066 FS: 0000000000000000(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffcd2868ab0 CR3: 00000001a7db8000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kmsan_internal_memset_shadow mm/kmsan/kmsan.c:171 [inline] kmsan_internal_unpoison_shadow+0x5c/0xe0 mm/kmsan/kmsan.c:208 kmsan_unpoison_shadow+0x66/0xb0 mm/kmsan/kmsan.c:222 virtqueue_get_buf_ctx+0x742/0xa20 drivers/virtio/virtio_ring.c:760 virtqueue_get_buf+0x72/0x90 drivers/virtio/virtio_ring.c:767 free_old_xmit_skbs drivers/net/virtio_net.c:1230 [inline] start_xmit+0x276/0x2840 drivers/net/virtio_net.c:1388 __netdev_start_xmit include/linux/netdevice.h:4066 [inline] netdev_start_xmit include/linux/netdevice.h:4075 [inline] xmit_one net/core/dev.c:3026 [inline] dev_hard_start_xmit+0x5f1/0xc70 net/core/dev.c:3042 sch_direct_xmit+0x540/0x8f0 net/sched/sch_generic.c:327 qdisc_restart net/sched/sch_generic.c:399 [inline] __qdisc_run+0x1785/0x3730 net/sched/sch_generic.c:410 __dev_xmit_skb net/core/dev.c:3217 [inline] __dev_queue_xmit+0x174a/0x2b60 net/core/dev.c:3525 dev_queue_xmit+0x4b/0x60 net/core/dev.c:3590 neigh_hh_output include/net/neighbour.h:472 [inline] neigh_output include/net/neighbour.h:480 [inline] ip_finish_output2+0x1198/0x1380 net/ipv4/ip_output.c:229 ip_finish_output+0xcb0/0xff0 net/ipv4/ip_output.c:317 NF_HOOK_COND include/linux/netfilter.h:277 [inline] ip_output+0x502/0x5c0 net/ipv4/ip_output.c:405 dst_output include/net/dst.h:443 [inline] ip_local_out net/ipv4/ip_output.c:124 [inline] ip_queue_xmit+0x1fae/0x21c0 net/ipv4/ip_output.c:504 tcp_transmit_skb+0x38be/0x51f0 net/ipv4/tcp_output.c:1176 tcp_send_ack+0x7e3/0x910 net/ipv4/tcp_output.c:3645 tcp_delack_timer_handler+0x5d0/0xac0 net/ipv4/tcp_timer.c:276 tcp_delack_timer+0x1be/0x360 net/ipv4/tcp_timer.c:303 call_timer_fn+0x26a/0x5a0 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers+0xda7/0x11c0 kernel/time/timer.c:1666 run_timer_softirq+0x43/0x70 kernel/time/timer.c:1692 __do_softirq+0x56d/0x93d kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x202/0x240 kernel/softirq.c:405 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:541 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:857 RIP: 0010:native_safe_halt arch/x86/include/asm/irqflags.h:55 [inline] RIP: 0010:arch_safe_halt arch/x86/include/asm/irqflags.h:97 [inline] RIP: 0010:default_idle+0x1fb/0x3c0 arch/x86/kernel/process.c:354 RSP: 0018:ffffffff87c0fd88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 RAX: ffff880203eb5440 RBX: 0000000000000000 RCX: ffff880000000000 RDX: ffff880203ab5440 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 RBP: ffffffff87c0fdc0 R08: 0000000001080020 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff87c1eb00 R14: ffffffff87c0fe24 R15: ffffffff87c1f418 arch_cpu_idle+0x20/0x30 arch/x86/kernel/process.c:345 default_idle_call kernel/sched/idle.c:98 [inline] cpuidle_idle_call kernel/sched/idle.c:156 [inline] do_idle+0x349/0x790 kernel/sched/idle.c:246 cpu_startup_entry+0x45/0x50 kernel/sched/idle.c:351 rest_init+0x1c1/0x1f0 init/main.c:438 start_kernel+0xf93/0xfb0 init/main.c:719 x86_64_start_reservations arch/x86/kernel/head64.c:378 [inline] x86_64_start_kernel+0x2fa/0x310 arch/x86/kernel/head64.c:359 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:239 Code: 75 29 48 c7 c7 71 2a a1 87 31 c0 e8 0d 11 86 ff 80 3c 25 a8 a4 2d 88 00 75 11 48 c7 c7 a1 2a a1 87 31 c0 4c 89 fe e8 f2 10 86 ff <0f> 0b eb fe 48 3d ff ff ff 1f 0f 87 a2 fe ff ff 48 8b 1c 25 10 RIP: kmsan_get_shadow_address+0x1ce/0x1f0 mm/kmsan/kmsan.c:1325 RSP: ffff88021fc0eed8 ---[ end trace 688f199442974a10 ]---