Warning: Permanently added '10.128.1.45' (ECDSA) to the list of known hosts. syzkaller login: [ 107.907467][T11021] IPVS: ftp: loaded support on port[0] = 21 [ 108.007547][T11021] chnl_net:caif_netlink_parms(): no params data found [ 108.055589][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.062835][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.071178][T11021] device bridge_slave_0 entered promiscuous mode [ 108.080176][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.087778][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.097100][T11021] device bridge_slave_1 entered promiscuous mode [ 108.123260][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.135451][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.162679][T11021] team0: Port device team_slave_0 added [ 108.172422][T11021] team0: Port device team_slave_1 added [ 108.236038][T11021] device hsr_slave_0 entered promiscuous mode [ 108.302584][T11021] device hsr_slave_1 entered promiscuous mode [ 108.463393][T11021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.516333][T11021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.576245][T11021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.636446][T11021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.708088][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.715397][T11021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.723021][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.730137][T11021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.789060][T11021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.806366][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.818925][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.828669][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.838518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 108.857601][T11021] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.873849][ T3394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.883290][ T3394] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.890871][ T3394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.915105][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.924086][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.931223][ T2772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.952372][ T3394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.974613][ T3394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.984941][ T3394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.997182][ T3394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.012967][ T3394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.029608][T11021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.055744][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.064896][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.081083][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.105850][ T3394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.116224][ T3394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.140996][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.151175][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.165022][T11021] device veth0_vlan entered promiscuous mode [ 109.176079][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.185549][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready executing program [ 109.205202][T11021] device veth1_vlan entered promiscuous mode [ 109.276574][T11027] device veth0_to_team entered promiscuous mode [ 109.313315][T11027] device veth0_to_bond entered promiscuous mode [ 109.426920][T11028] device veth1_to_hsr entered promiscuous mode executing program [ 109.483704][T11028] device veth1_to_team entered promiscuous mode [ 109.576220][T11030] veth0_to_team: This device is already a HSR slave. [ 109.696986][T11031] hsr_slave_0: This device is already a HSR slave. executing program [ 109.836721][T11034] veth0_to_team: This device is already a HSR slave. [ 109.977341][T11034] veth1_to_hsr: This device is already a HSR slave. executing program [ 110.031686][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.040437][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.107471][T11037] veth0_to_team: This device is already a HSR slave. [ 110.256455][T11038] veth1_to_hsr: This device is already a HSR slave. executing program [ 110.396404][T11040] veth0_to_team: This device is already a HSR slave. [ 110.546415][T11041] hsr_slave_0: This device is already a HSR slave. executing program [ 110.717196][T11044] veth0_to_team: This device is already a HSR slave. [ 110.876378][T11046] device veth0_to_hsr entered promiscuous mode executing program [ 110.933856][T11046] device veth1_to_bridge entered promiscuous mode [ 111.045863][T11048] veth0_to_team: This device is already a HSR slave. [ 111.196742][T11049] veth1_to_hsr: This device is already a HSR slave. executing program [ 111.347638][T11051] veth0_to_team: This device is already a HSR slave. [ 111.496605][T11052] hsr_slave_0: This device is already a HSR slave. [ 111.542568][ C0] ===================================================== [ 111.550756][ C0] BUG: KMSAN: uninit-value in eth_type_trans+0x356/0xa90 [ 111.557893][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.5.0-rc5-syzkaller #0 [ 111.567338][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.578803][ C0] Call Trace: [ 111.582826][ C0] [ 111.585861][ C0] dump_stack+0x1c9/0x220 [ 111.590311][ C0] kmsan_report+0xf7/0x1e0 [ 111.594770][ C0] __msan_warning+0x58/0xa0 [ 111.599499][ C0] eth_type_trans+0x356/0xa90 [ 111.604174][ C0] __dev_forward_skb+0x3ec/0x990 [ 111.609116][ C0] veth_xmit+0x3fe/0xb70 [ 111.613359][ C0] ? veth_close+0x160/0x160 [ 111.618142][ C0] dev_hard_start_xmit+0x531/0xab0 [ 111.623310][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 111.628529][ C0] __dev_queue_xmit+0x37de/0x4220 [ 111.633597][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 111.638800][ C0] ? skb_clone+0x404/0x5d0 [ 111.643209][ C0] dev_queue_xmit+0x4b/0x60 [ 111.647837][ C0] hsr_forward_skb+0x2614/0x30d0 [ 111.652777][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 111.658092][ C0] hsr_handle_frame+0x385/0x4b0 [ 111.662954][ C0] ? hsr_port_exists+0x90/0x90 [ 111.667732][ C0] __netif_receive_skb_core+0x21de/0x5840 [ 111.673555][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 111.678851][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 111.683955][ C0] process_backlog+0x936/0x1410 [ 111.688899][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 111.694002][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 111.699202][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 111.704473][ C0] net_rx_action+0x786/0x1ab0 [ 111.709208][ C0] ? net_tx_action+0xc30/0xc30 [ 111.713976][ C0] __do_softirq+0x311/0x83d [ 111.718493][ C0] irq_exit+0x230/0x280 [ 111.722636][ C0] exiting_irq+0xe/0x10 [ 111.726786][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 111.732154][ C0] apic_timer_interrupt+0x2e/0x40 [ 111.737210][ C0] [ 111.740140][ C0] RIP: 0010:default_idle+0x53/0x90 [ 111.745235][ C0] Code: 13 f9 d6 f2 44 8b 35 64 54 d8 01 48 c7 c7 38 b7 22 be e8 50 1d a2 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 27 fe 56 00 fb f4 <65> 8b 35 46 c0 b6 43 c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 111.764830][ C0] RSP: 0018:ffffffffbd603d88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 111.773240][ C0] RAX: ffff912c3d81e738 RBX: ffffffffbd62cb90 RCX: fffffa5d46130d70 [ 111.781231][ C0] RDX: ffff912c35c11738 RSI: 0000000000000000 RDI: ffffffffbe22b738 [ 111.789196][ C0] RBP: ffffffffbd603d98 R08: fffffa5d4000000f R09: ffff912b67bfb000 [ 111.797166][ C0] R10: 0000000000000004 R11: ffffffffbc4a62a0 R12: ffffffffbd62c1c0 [ 111.810624][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffbd62cb90 [ 111.827078][ C0] ? __cpuidle_text_start+0x8/0x8 [ 111.833032][ C0] ? default_idle+0x40/0x90 [ 111.838443][ C0] ? __cpuidle_text_start+0x8/0x8 [ 111.843550][ C0] arch_cpu_idle+0x25/0x30 [ 111.848945][ C0] do_idle+0x26c/0x7b0 [ 111.853041][ C0] cpu_startup_entry+0x45/0x50 [ 111.857813][ C0] rest_init+0x1be/0x1f0 [ 111.862057][ C0] arch_call_rest_init+0x13/0x15 [ 111.867008][ C0] start_kernel+0x975/0xb3e [ 111.871528][ C0] ? kmsan_internal_check_memory+0x370/0x3d0 [ 111.878756][ C0] x86_64_start_reservations+0x18/0x28 [ 111.884234][ C0] x86_64_start_kernel+0x83/0x86 [ 111.889172][ C0] secondary_startup_64+0xa4/0xb0 [ 111.894242][ C0] [ 111.896555][ C0] Uninit was stored to memory at: [ 111.901580][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 111.907389][ C0] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 111.913368][ C0] kmsan_memcpy_metadata+0xb/0x10 [ 111.918376][ C0] __msan_memcpy+0x43/0x50 [ 111.922780][ C0] pskb_expand_head+0x38b/0x1b00 [ 111.927701][ C0] __skb_pad+0x47f/0x900 [ 111.932544][ C0] send_hsr_supervision_frame+0x122d/0x1500 [ 111.938446][ C0] hsr_announce+0x1e2/0x370 [ 111.942938][ C0] call_timer_fn+0x218/0x510 [ 111.947513][ C0] __run_timers+0xcff/0x1210 [ 111.952627][ C0] run_timer_softirq+0x2d/0x50 [ 111.957378][ C0] __do_softirq+0x311/0x83d [ 111.961863][ C0] [ 111.964206][ C0] Uninit was created at: [ 111.968439][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 111.974074][ C0] kmsan_alloc_page+0x12a/0x310 [ 111.978951][ C0] __alloc_pages_nodemask+0x57f2/0x5f60 [ 111.984480][ C0] page_frag_alloc+0x3ae/0x910 [ 111.989233][ C0] __napi_alloc_skb+0x193/0xa60 [ 111.994077][ C0] page_to_skb+0x19f/0x1100 [ 111.998580][ C0] receive_buf+0xe57/0x8ac0 [ 112.009914][ C0] virtnet_poll+0x64b/0x19f0 [ 112.014492][ C0] net_rx_action+0x786/0x1ab0 [ 112.019163][ C0] __do_softirq+0x311/0x83d [ 112.023653][ C0] ===================================================== [ 112.030793][ C0] Disabling lock debugging due to kernel taint [ 112.037410][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 112.044448][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 112.056626][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.066692][ C0] Call Trace: [ 112.069977][ C0] [ 112.072818][ C0] dump_stack+0x1c9/0x220 [ 112.077160][ C0] panic+0x3d5/0xc3e [ 112.081167][ C0] kmsan_report+0x1df/0x1e0 [ 112.085932][ C0] __msan_warning+0x58/0xa0 [ 112.090438][ C0] eth_type_trans+0x356/0xa90 [ 112.095174][ C0] __dev_forward_skb+0x3ec/0x990 [ 112.100137][ C0] veth_xmit+0x3fe/0xb70 [ 112.104640][ C0] ? veth_close+0x160/0x160 [ 112.109920][ C0] dev_hard_start_xmit+0x531/0xab0 [ 112.115319][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 112.120554][ C0] __dev_queue_xmit+0x37de/0x4220 [ 112.125745][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 112.130943][ C0] ? skb_clone+0x404/0x5d0 [ 112.135361][ C0] dev_queue_xmit+0x4b/0x60 [ 112.141259][ C0] hsr_forward_skb+0x2614/0x30d0 [ 112.146348][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 112.151817][ C0] hsr_handle_frame+0x385/0x4b0 [ 112.156792][ C0] ? hsr_port_exists+0x90/0x90 [ 112.162473][ C0] __netif_receive_skb_core+0x21de/0x5840 [ 112.168320][ C0] ? __msan_poison_alloca+0xf0/0x120 [ 112.173618][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 112.179411][ C0] process_backlog+0x936/0x1410 [ 112.185898][ C0] ? kmsan_get_metadata+0x4f/0x180 [ 112.191674][ C0] ? kmsan_get_metadata+0x11d/0x180 [ 112.196913][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 112.202775][ C0] net_rx_action+0x786/0x1ab0 [ 112.207932][ C0] ? net_tx_action+0xc30/0xc30 [ 112.213881][ C0] __do_softirq+0x311/0x83d [ 112.219966][ C0] irq_exit+0x230/0x280 [ 112.224127][ C0] exiting_irq+0xe/0x10 [ 112.228997][ C0] smp_apic_timer_interrupt+0x48/0x70 [ 112.234379][ C0] apic_timer_interrupt+0x2e/0x40 [ 112.239747][ C0] [ 112.244234][ C0] RIP: 0010:default_idle+0x53/0x90 [ 112.249690][ C0] Code: 13 f9 d6 f2 44 8b 35 64 54 d8 01 48 c7 c7 38 b7 22 be e8 50 1d a2 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 27 fe 56 00 fb f4 <65> 8b 35 46 c0 b6 43 c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 112.270628][ C0] RSP: 0018:ffffffffbd603d88 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 112.280868][ C0] RAX: ffff912c3d81e738 RBX: ffffffffbd62cb90 RCX: fffffa5d46130d70 [ 112.289555][ C0] RDX: ffff912c35c11738 RSI: 0000000000000000 RDI: ffffffffbe22b738 [ 112.297530][ C0] RBP: ffffffffbd603d98 R08: fffffa5d4000000f R09: ffff912b67bfb000 [ 112.306111][ C0] R10: 0000000000000004 R11: ffffffffbc4a62a0 R12: ffffffffbd62c1c0 [ 112.314198][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffbd62cb90 [ 112.322175][ C0] ? __cpuidle_text_start+0x8/0x8 [ 112.327724][ C0] ? default_idle+0x40/0x90 [ 112.334472][ C0] ? __cpuidle_text_start+0x8/0x8 [ 112.339629][ C0] arch_cpu_idle+0x25/0x30 [ 112.344058][ C0] do_idle+0x26c/0x7b0 [ 112.348489][ C0] cpu_startup_entry+0x45/0x50 [ 112.353630][ C0] rest_init+0x1be/0x1f0 [ 112.359154][ C0] arch_call_rest_init+0x13/0x15 [ 112.364944][ C0] start_kernel+0x975/0xb3e [ 112.369579][ C0] ? kmsan_internal_check_memory+0x370/0x3d0 [ 112.375911][ C0] x86_64_start_reservations+0x18/0x28 [ 112.381370][ C0] x86_64_start_kernel+0x83/0x86 [ 112.388188][ C0] secondary_startup_64+0xa4/0xb0 [ 112.394609][ C0] Kernel Offset: 0x2de00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 112.407974][ C0] Rebooting in 86400 seconds..