IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready bridge0: port 2(bridge_slave_1) entered blocking state bridge0: port 2(bridge_slave_1) entered forwarding state IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready ------------[ cut here ]------------ kernel BUG at mm/kmsan/kmsan.c:729! invalid opcode: 0000 [#1] SMP CPU: 1 PID: 3764 Comm: udevd Not tainted 5.0.0+ #16 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kmsan_internal_check_memory+0xb84/0xbb0 mm/kmsan/kmsan.c:727 Code: 65 8b 34 25 04 90 03 00 65 48 8b 14 25 90 0d 04 00 48 c7 c7 6c 6c 81 8b 31 c0 e8 b7 fd 79 ff 0f 0b 0f 0b e8 8e 22 56 ff 0f 0b <0f> 0b e8 75 d0 79 ff 85 c0 75 1f 65 8b 34 25 04 90 03 00 65 48 8b binder: 10230:10231 Acquire 1 refcount change on invalid ref 0 ret -22 RSP: 0018:ffff88810d5ffa60 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 00000000e62000b3 RCX: ffff888000000000 RDX: 000007ffffffffff RSI: 0000000000000004 RDI: ffff88810d5ffc08 RBP: ffff88810d5ffb10 R08: ffff88810d5ffc08 R09: ffff88818d5ffc08 R10: ffff88810d43fc08 R11: ffffffff8229a110 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000000000282 R15: 0000000000000000 FS: 00007fe9cee327a0(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000073216c CR3: 000000010dc47000 CR4: 00000000001406e0 Call Trace: kmsan_check_memory+0xd/0x10 mm/kmsan/kmsan.c:737 binder: 10230:10231 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 ep_send_events_proc+0xa8b/0x1640 fs/eventpoll.c:1675 binder: 10230:10232 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 ep_scan_ready_list+0x366/0xe80 fs/eventpoll.c:708 ep_send_events fs/eventpoll.c:1715 [inline] ep_poll fs/eventpoll.c:1852 [inline] do_epoll_wait+0xd00/0x1990 fs/eventpoll.c:2216 binder: 10230:10232 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 __do_sys_epoll_wait fs/eventpoll.c:2226 [inline] __se_sys_epoll_wait+0xb3/0xe0 fs/eventpoll.c:2223 __x64_sys_epoll_wait+0x56/0x70 fs/eventpoll.c:2223 do_syscall_64+0xbc/0xf0 arch/x86/entry/common.c:291 binder: 10230:10231 Acquire 1 refcount change on invalid ref 0 ret -22 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x7fe9ce546943 binder: 10230:10231 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 Code: 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 83 3d b5 dc 2a 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 3b c4 00 00 48 89 04 24 RSP: 002b:00007fff04230d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fe9ce546943 RDX: 0000000000000008 RSI: 00007fff04230e60 RDI: 000000000000000a RBP: 0000000000000000 R08: 00000000014bf0d0 R09: 00007fe9ce5901d0 R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000010 R14: 00000000014c0c70 R15: 00000000014bf250 Modules linked in: ---[ end trace 64cc5fb826818c84 ]--- RIP: 0010:kmsan_internal_check_memory+0xb84/0xbb0 mm/kmsan/kmsan.c:727 Code: 65 8b 34 25 04 90 03 00 65 48 8b 14 25 90 0d 04 00 48 c7 c7 6c 6c 81 8b 31 c0 e8 b7 fd 79 ff 0f 0b 0f 0b e8 8e 22 56 ff 0f 0b <0f> 0b e8 75 d0 79 ff 85 c0 75 1f 65 8b 34 25 04 90 03 00 65 48 8b RSP: 0018:ffff88810d5ffa60 EFLAGS: 00010046 kmsan_in_runtime: -1, last_caller: __msan_instrument_asm_store+0xb2/0x150 mm/kmsan/kmsan_instr.c:82 RAX: 0000000000000002 RBX: 00000000e62000b3 RCX: ffff888000000000 ------------[ cut here ]------------ RDX: 000007ffffffffff RSI: 0000000000000004 RDI: ffff88810d5ffc08 kernel BUG at mm/kmsan/kmsan_hooks.c:366! RBP: ffff88810d5ffb10 R08: ffff88810d5ffc08 R09: ffff88818d5ffc08 invalid opcode: 0000 [#2] SMP R10: ffff88810d43fc08 R11: ffffffff8229a110 R12: 0000000000000004 CPU: 0 PID: 10229 Comm: syz-executor.1 Tainted: G D 5.0.0+ #16 R13: 0000000000000004 R14: 0000000000000282 R15: 0000000000000000 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FS: 00007fe9cee327a0(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 RIP: 0010:kmsan_vmap_page_range_noflush+0x21e/0x220 mm/kmsan/kmsan_hooks.c:366 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Code: 0f 0b e8 95 aa 79 ff 85 c0 75 1f 65 8b 34 25 04 90 03 00 65 48 8b 14 25 90 0d 04 00 48 c7 c7 6c 6c 81 8b 31 c0 e8 a2 d7 79 ff <0f> 0b 55 48 89 e5 be c0 80 60 00 e8 62 16 fd ff 5d c3 55 48 89 e5 CR2: 000000000073216c CR3: 000000010dc47000 CR4: 00000000001406e0 RSP: 0018:ffff88807dd6f608 EFLAGS: 00010246