Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts.
syzkaller login: [ 114.994979][T11251] IPVS: ftp: loaded support on port[0] = 21
[ 115.094224][T11251] chnl_net:caif_netlink_parms(): no params data found
[ 115.169740][T11251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.177134][T11251] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.185745][T11251] device bridge_slave_0 entered promiscuous mode
[ 115.194553][T11251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.201923][T11251] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.210278][T11251] device bridge_slave_1 entered promiscuous mode
[ 115.236132][T11251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.247852][T11251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.275040][T11251] team0: Port device team_slave_0 added
[ 115.284053][T11251] team0: Port device team_slave_1 added
[ 115.306286][T11251] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 115.313468][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 115.339590][T11251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 115.351613][T11251] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 115.358736][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 115.384762][T11251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 115.456188][T11251] device hsr_slave_0 entered promiscuous mode
[ 115.502714][T11251] device hsr_slave_1 entered promiscuous mode
[ 115.647955][T11251] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 115.695904][T11251] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 115.756167][T11251] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 115.816539][T11251] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 115.899056][T11251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.906305][T11251] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.914126][T11251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.921271][T11251] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.984736][T11251] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.000909][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 116.013342][ T2742] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.023333][ T2742] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.034061][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 116.050071][T11251] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.066422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 116.075361][ T17] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.082605][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.097903][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 116.108215][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 116.117635][T11257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.124883][T11257] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.140722][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 116.162213][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 116.172028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 116.181360][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 116.194097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 116.205716][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 116.215070][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 116.231214][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 116.240603][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 116.256697][T11251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 116.268875][T11251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 116.278334][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 116.287595][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 116.314733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 116.322525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 116.339617][T11251] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.365212][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 116.375346][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 116.401231][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 116.410677][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 116.424191][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 116.433061][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 116.444793][T11251] device veth0_vlan entered promiscuous mode
[ 116.459204][T11251] device veth1_vlan entered promiscuous mode
[ 116.488565][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 116.498433][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 116.507471][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 116.517083][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 116.532852][T11251] device veth0_macvtap entered promiscuous mode
[ 116.546131][T11251] device veth1_macvtap entered promiscuous mode
[ 116.569483][T11251] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.577193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 116.587575][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 116.596451][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 116.605595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 116.621626][T11251] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.629596][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 116.639630][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
executing program
[ 116.862205][ C1] =====================================================
[ 116.869210][ C1] BUG: KMSAN: use-after-free in find_match+0x317/0x1480
[ 116.876132][ C1] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.6.0-rc2-syzkaller #0
[ 116.884264][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 116.894322][ C1] Workqueue: ipv6_addrconf addrconf_dad_work
[ 116.900283][ C1] Call Trace:
[ 116.903551][ C1]
[ 116.906389][ C1] dump_stack+0x1c9/0x220
[ 116.910714][ C1] kmsan_report+0xf7/0x1e0
[ 116.915125][ C1] __msan_warning+0x58/0xa0
[ 116.919618][ C1] find_match+0x317/0x1480
[ 116.924026][ C1] ? veth_xmit+0x6e1/0xb70
[ 116.928435][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 116.933631][ C1] __find_rr_leaf+0x3f9/0x1160
[ 116.938412][ C1] ? kmsan_get_metadata+0x4f/0x180
[ 116.943510][ C1] fib6_table_lookup+0x586/0x1420
[ 116.948551][ C1] ip6_pol_route+0x203/0x2960
[ 116.953242][ C1] ip6_pol_route_input+0x123/0x140
[ 116.958356][ C1] fib6_rule_lookup+0x38f/0xa10
[ 116.963200][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0
[ 116.968739][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 116.973927][ C1] ip6_route_input+0xb9d/0xcf0
[ 116.978688][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 116.983883][ C1] ip6_rcv_finish_core+0x1f9/0x470
[ 116.988981][ C1] ipv6_rcv+0x628/0x710
[ 116.993135][ C1] ? local_bh_enable+0x40/0x40
[ 116.997889][ C1] process_backlog+0xa41/0x1410
[ 117.002745][ C1] ? kmsan_get_metadata+0x4f/0x180
[ 117.007858][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.013064][ C1] ? rps_trigger_softirq+0x2e0/0x2e0
[ 117.018355][ C1] net_rx_action+0x786/0x1aa0
[ 117.023049][ C1] ? net_tx_action+0xc30/0xc30
[ 117.027813][ C1] __do_softirq+0x311/0x83d
[ 117.032338][ C1] do_softirq_own_stack+0x49/0x80
[ 117.037355][ C1]
[ 117.040295][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 117.045504][ C1] local_bh_enable+0x36/0x40
[ 117.050098][ C1] ip6_finish_output2+0x2113/0x2640
[ 117.055323][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.060536][ C1] __ip6_finish_output+0x824/0x8e0
[ 117.065665][ C1] ip6_finish_output+0x166/0x410
[ 117.070609][ C1] ip6_output+0x60a/0x770
[ 117.074945][ C1] ? ip6_output+0x770/0x770
[ 117.079455][ C1] ? ac6_seq_show+0x200/0x200
[ 117.084137][ C1] ndisc_send_skb+0x1047/0x15a0
[ 117.089015][ C1] ? ndisc_error_report+0x1a0/0x1a0
[ 117.094227][ C1] ndisc_send_ns+0xe38/0xe80
[ 117.098829][ C1] ? __queue_delayed_work+0x27f/0x450
[ 117.104214][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 117.110039][ C1] addrconf_dad_work+0xc0b/0x2aa0
[ 117.115071][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.120284][ C1] ? ipv6_get_saddr_eval+0x1350/0x1350
[ 117.125750][ C1] process_one_work+0x1555/0x1f40
[ 117.130798][ C1] worker_thread+0xef6/0x2450
[ 117.135493][ C1] kthread+0x4b5/0x4f0
[ 117.139551][ C1] ? process_one_work+0x1f40/0x1f40
[ 117.144751][ C1] ? kthread_blkcg+0xf0/0xf0
[ 117.149422][ C1] ret_from_fork+0x35/0x40
[ 117.153847][ C1]
[ 117.156159][ C1] Uninit was created at:
[ 117.160386][ C1] kmsan_internal_poison_shadow+0x66/0xd0
[ 117.166085][ C1] kmsan_slab_free+0x6e/0xb0
[ 117.170654][ C1] kfree+0x565/0x30a0
[ 117.174621][ C1] netdev_name_node_alt_destroy+0x587/0x690
[ 117.180495][ C1] rtnl_linkprop+0x939/0xc00
[ 117.185064][ C1] rtnl_dellinkprop+0x9d/0xb0
[ 117.189724][ C1] rtnetlink_rcv_msg+0x1153/0x1570
[ 117.194831][ C1] netlink_rcv_skb+0x451/0x650
[ 117.199582][ C1] rtnetlink_rcv+0x50/0x60
[ 117.203991][ C1] netlink_unicast+0xf9e/0x1100
[ 117.208825][ C1] netlink_sendmsg+0x1246/0x14d0
[ 117.213750][ C1] ____sys_sendmsg+0x12b6/0x1350
[ 117.218681][ C1] __sys_sendmsg+0x451/0x5f0
[ 117.223270][ C1] __se_sys_sendmsg+0x97/0xb0
[ 117.227930][ C1] __x64_sys_sendmsg+0x4a/0x70
[ 117.232675][ C1] do_syscall_64+0xb8/0x160
[ 117.237161][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 117.243029][ C1] =====================================================
[ 117.249939][ C1] Disabling lock debugging due to kernel taint
[ 117.256082][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 117.256085][ C0] =====================================================
[ 117.256108][ C0] BUG: KMSAN: use-after-free in find_match+0x317/0x1480
[ 117.262668][ C1] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.6.0-rc2-syzkaller #0
[ 117.285995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 117.296040][ C1] Workqueue: ipv6_addrconf addrconf_dad_work
[ 117.301994][ C1] Call Trace:
[ 117.305260][ C1]
[ 117.308100][ C1] dump_stack+0x1c9/0x220
[ 117.312422][ C1] panic+0x3d5/0xc3e
[ 117.316336][ C1] kmsan_report+0x1df/0x1e0
[ 117.320831][ C1] __msan_warning+0x58/0xa0
[ 117.325362][ C1] find_match+0x317/0x1480
[ 117.329767][ C1] ? veth_xmit+0x6e1/0xb70
[ 117.334177][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.339375][ C1] __find_rr_leaf+0x3f9/0x1160
[ 117.344262][ C1] ? kmsan_get_metadata+0x4f/0x180
[ 117.349362][ C1] fib6_table_lookup+0x586/0x1420
[ 117.354407][ C1] ip6_pol_route+0x203/0x2960
[ 117.359105][ C1] ip6_pol_route_input+0x123/0x140
[ 117.364225][ C1] fib6_rule_lookup+0x38f/0xa10
[ 117.369071][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0
[ 117.374611][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.379802][ C1] ip6_route_input+0xb9d/0xcf0
[ 117.384565][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.389895][ C1] ip6_rcv_finish_core+0x1f9/0x470
[ 117.395016][ C1] ipv6_rcv+0x628/0x710
[ 117.399176][ C1] ? local_bh_enable+0x40/0x40
[ 117.403966][ C1] process_backlog+0xa41/0x1410
[ 117.408820][ C1] ? kmsan_get_metadata+0x4f/0x180
[ 117.413929][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.419294][ C1] ? rps_trigger_softirq+0x2e0/0x2e0
[ 117.424568][ C1] net_rx_action+0x786/0x1aa0
[ 117.429249][ C1] ? net_tx_action+0xc30/0xc30
[ 117.434002][ C1] __do_softirq+0x311/0x83d
[ 117.438502][ C1] do_softirq_own_stack+0x49/0x80
[ 117.443512][ C1]
[ 117.446456][ C1] __local_bh_enable_ip+0x184/0x1d0
[ 117.451654][ C1] local_bh_enable+0x36/0x40
[ 117.456239][ C1] ip6_finish_output2+0x2113/0x2640
[ 117.461460][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.466659][ C1] __ip6_finish_output+0x824/0x8e0
[ 117.471775][ C1] ip6_finish_output+0x166/0x410
[ 117.476808][ C1] ip6_output+0x60a/0x770
[ 117.481168][ C1] ? ip6_output+0x770/0x770
[ 117.485668][ C1] ? ac6_seq_show+0x200/0x200
[ 117.490333][ C1] ndisc_send_skb+0x1047/0x15a0
[ 117.495199][ C1] ? ndisc_error_report+0x1a0/0x1a0
[ 117.500394][ C1] ndisc_send_ns+0xe38/0xe80
[ 117.504994][ C1] ? __queue_delayed_work+0x27f/0x450
[ 117.510370][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[ 117.516179][ C1] addrconf_dad_work+0xc0b/0x2aa0
[ 117.521312][ C1] ? kmsan_get_metadata+0x11d/0x180
[ 117.526524][ C1] ? ipv6_get_saddr_eval+0x1350/0x1350
[ 117.531992][ C1] process_one_work+0x1555/0x1f40
[ 117.537043][ C1] worker_thread+0xef6/0x2450
[ 117.541737][ C1] kthread+0x4b5/0x4f0
[ 117.545796][ C1] ? process_one_work+0x1f40/0x1f40
[ 117.550987][ C1] ? kthread_blkcg+0xf0/0xf0
[ 117.555575][ C1] ret_from_fork+0x35/0x40
[ 117.559998][ C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.6.0-rc2-syzkaller #0
[ 117.569446][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 117.579488][ C0] Call Trace:
[ 117.582781][ C0] dump_stack+0x1c9/0x220
[ 117.587106][ C0] kmsan_report+0xf7/0x1e0
[ 117.591515][ C0] __msan_warning+0x58/0xa0
[ 117.596010][ C0] find_match+0x317/0x1480
[ 117.600424][ C0] ? __msan_metadata_ptr_for_store_4+0x13/0x20
[ 117.606574][ C0] ? kmsan_get_metadata+0x11d/0x180
[ 117.611772][ C0] __find_rr_leaf+0x3f9/0x1160
[ 117.616543][ C0] ? kmsan_get_metadata+0x4f/0x180
[ 117.621647][ C0] fib6_table_lookup+0x586/0x1420
[ 117.626695][ C0] ip6_pol_route+0x203/0x2960
[ 117.631362][ C0] ? nf_ip6_checksum+0x501/0x610
[ 117.636307][ C0] ? kmsan_get_metadata+0x11d/0x180
[ 117.641532][ C0] ip6_pol_route_input+0x123/0x140
[ 117.646659][ C0] fib6_rule_lookup+0x38f/0xa10
[ 117.651520][ C0] ? ip6_route_input_lookup+0x1f0/0x1f0
[ 117.657069][ C0] ? kmsan_get_metadata+0x11d/0x180
[ 117.662267][ C0] ip6_route_input+0xb9d/0xcf0
[ 117.667039][ C0] ? kmsan_get_metadata+0x11d/0x180
[ 117.672246][ C0] ip6_rcv_finish_core+0x1f9/0x470
[ 117.677350][ C0] ipv6_rcv+0x628/0x710
[ 117.681503][ C0] ? local_bh_enable+0x40/0x40
[ 117.686257][ C0] process_backlog+0xa41/0x1410
[ 117.691100][ C0] ? __list_add_valid+0xb8/0x420
[ 117.696030][ C0] ? kmsan_get_metadata+0x4f/0x180
[ 117.701137][ C0] ? kmsan_get_metadata+0x11d/0x180
[ 117.706338][ C0] ? rps_trigger_softirq+0x2e0/0x2e0
[ 117.711609][ C0] net_rx_action+0x786/0x1aa0
[ 117.716292][ C0] ? net_tx_action+0xc30/0xc30
[ 117.721045][ C0] __do_softirq+0x311/0x83d
[ 117.725547][ C0] ? ksoftirqd_should_run+0x30/0x30
[ 117.730729][ C0] ? takeover_tasklets+0x8f0/0x8f0
[ 117.735826][ C0] run_ksoftirqd+0x25/0x40
[ 117.740227][ C0] smpboot_thread_fn+0x493/0x980
[ 117.745169][ C0] kthread+0x4b5/0x4f0
[ 117.749220][ C0] ? cpu_report_death+0x180/0x180
[ 117.754234][ C0] ? kthread_blkcg+0xf0/0xf0
[ 117.758811][ C0] ret_from_fork+0x35/0x40
[ 117.763221][ C0]
[ 117.765611][ C0] Uninit was created at:
[ 117.769843][ C0] kmsan_internal_poison_shadow+0x66/0xd0
[ 117.775548][ C0] kmsan_slab_free+0x6e/0xb0
[ 117.780122][ C0] kfree+0x565/0x30a0
[ 117.784121][ C0] netdev_name_node_alt_destroy+0x587/0x690
[ 117.790018][ C0] rtnl_linkprop+0x939/0xc00
[ 117.794614][ C0] rtnl_dellinkprop+0x9d/0xb0
[ 117.799312][ C0] rtnetlink_rcv_msg+0x1153/0x1570
[ 117.804425][ C0] netlink_rcv_skb+0x451/0x650
[ 117.809180][ C0] rtnetlink_rcv+0x50/0x60
[ 117.813583][ C0] netlink_unicast+0xf9e/0x1100
[ 117.818424][ C0] netlink_sendmsg+0x1246/0x14d0
[ 117.823347][ C0] ____sys_sendmsg+0x12b6/0x1350
[ 117.828279][ C0] __sys_sendmsg+0x451/0x5f0
[ 117.832852][ C0] __se_sys_sendmsg+0x97/0xb0
[ 117.837510][ C0] __x64_sys_sendmsg+0x4a/0x70
[ 117.842259][ C0] do_syscall_64+0xb8/0x160
[ 117.846757][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 117.852642][ C0] =====================================================
[ 118.777281][ C1] Shutting down cpus with NMI
[ 118.795472][ C1] Kernel Offset: 0x4400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 118.807014][ C1] Rebooting in 86400 seconds..