================================================================== BUG: KMSAN: uninit-value in ebt_stp_mt_check+0x24b/0x460 net/bridge/netfilter/ebt_stp.c:162 CPU: 0 PID: 8659 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #102 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Not allocated shadow for addr ffff880136e6c000 (page ffffea0007496880) Call Trace: ------------[ cut here ]------------ __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:113 kernel BUG at mm/kmsan/kmsan.c:1344! invalid opcode: 0000 [#1] SMP PTI kmsan_report+0x149/0x260 mm/kmsan/kmsan.c:1084 Dumping ftrace buffer: __msan_warning_32+0x6e/0xc0 mm/kmsan/kmsan_instr.c:686 (ftrace buffer empty) ebt_stp_mt_check+0x24b/0x460 net/bridge/netfilter/ebt_stp.c:162 Modules linked in: xt_check_match+0x13fb/0x1610 net/netfilter/x_tables.c:500 CPU: 1 PID: 4450 Comm: sshd Not tainted 4.17.0-rc5+ #102 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 mm/kmsan/kmsan.c:1343 ebt_check_match net/bridge/netfilter/ebtables.c:372 [inline] ebt_check_entry net/bridge/netfilter/ebtables.c:702 [inline] translate_table+0x4bb5/0x60f0 net/bridge/netfilter/ebtables.c:943 RSP: 0018:ffff8801984be6f0 EFLAGS: 00010002 do_replace_finish+0x1258/0x2ea0 net/bridge/netfilter/ebtables.c:999 RAX: 0000000000000046 RBX: 00000000000004c0 RCX: 0000000000000000 do_replace+0x719/0x780 net/bridge/netfilter/ebtables.c:1138 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88021fd36eec do_ebt_set_ctl+0x2ab/0x3c0 net/bridge/netfilter/ebtables.c:1517 RBP: ffff8801984be708 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffff880136e6c000 R13: 00000000000002ae R14: 0000000000000001 R15: 00000000000002ae FS: 00007f86d77017c0(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x476/0x4d0 net/netfilter/nf_sockopt.c:115 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 ip_setsockopt+0x24b/0x2b0 net/ipv4/ip_sockglue.c:1253 CR2: 0000000000a47e80 CR3: 00000001c9aaa000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 tcp_setsockopt+0x1bb/0x1f0 net/ipv4/tcp.c:2891 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: sock_common_setsockopt+0x136/0x170 net/core/sock.c:3039 kmsan_internal_memset_shadow mm/kmsan/kmsan.c:172 [inline] kmsan_internal_unpoison_shadow+0x5c/0xe0 mm/kmsan/kmsan.c:209 kmsan_unpoison_shadow+0x66/0xb0 mm/kmsan/kmsan.c:223 __sys_setsockopt+0x4af/0x560 net/socket.c:1903 virtqueue_get_buf_ctx+0x73f/0xa20 drivers/virtio/virtio_ring.c:759 __do_sys_setsockopt net/socket.c:1914 [inline] __se_sys_setsockopt net/socket.c:1911 [inline] __x64_sys_setsockopt+0x15c/0x1c0 net/socket.c:1911 virtqueue_get_buf+0x72/0x90 drivers/virtio/virtio_ring.c:766 do_syscall_64+0x152/0x230 arch/x86/entry/common.c:287 free_old_xmit_skbs drivers/net/virtio_net.c:1234 [inline] start_xmit+0x293/0x29b0 drivers/net/virtio_net.c:1399 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x455a09 RSP: 002b:00007f37675edc68 EFLAGS: 00000246 __netdev_start_xmit include/linux/netdevice.h:4087 [inline] netdev_start_xmit include/linux/netdevice.h:4096 [inline] xmit_one net/core/dev.c:3053 [inline] dev_hard_start_xmit+0x5f1/0xc70 net/core/dev.c:3069 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f37675ee6d4 RCX: 0000000000455a09 sch_direct_xmit+0x578/0x8f0 net/sched/sch_generic.c:327 RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000013 qdisc_restart net/sched/sch_generic.c:399 [inline] __qdisc_run+0x1785/0x3730 net/sched/sch_generic.c:410 RBP: 000000000072bea0 R08: 00000000000002e8 R09: 0000000000000000 __dev_xmit_skb net/core/dev.c:3244 [inline] __dev_queue_xmit+0x1d50/0x3510 net/core/dev.c:3552 R10: 00000000200000c0 R11: 0000000000000246 R12: 00000000ffffffff dev_queue_xmit+0x4b/0x60 net/core/dev.c:3617 R13: 00000000000005c8 R14: 00000000006fcb60 R15: 0000000000000000 neigh_hh_output include/net/neighbour.h:472 [inline] neigh_output include/net/neighbour.h:480 [inline] ip_finish_output2+0x12bf/0x1490 net/ipv4/ip_output.c:229 Local variable description: ----mtpar.i@translate_table ip_finish_output+0xcaf/0xff0 net/ipv4/ip_output.c:317 Variable was created at: NF_HOOK_COND include/linux/netfilter.h:277 [inline] ip_output+0x505/0x5d0 net/ipv4/ip_output.c:405 translate_table+0xbc/0x60f0 net/bridge/netfilter/ebtables.c:831 do_replace_finish+0x1258/0x2ea0 net/bridge/netfilter/ebtables.c:999 ================================================================== dst_output include/net/dst.h:444 [inline] ip_local_out net/ipv4/ip_output.c:124 [inline] ip_queue_xmit+0x1a1d/0x1d10 net/ipv4/ip_output.c:504