Warning: Permanently added '10.128.0.227' (ECDSA) to the list of known hosts. syzkaller login: [ 153.781482][ T8450] IPVS: ftp: loaded support on port[0] = 21 [ 153.949205][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 154.104658][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.111830][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.121226][ T8450] device bridge_slave_0 entered promiscuous mode [ 154.133223][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.140686][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.150679][ T8450] device bridge_slave_1 entered promiscuous mode [ 154.195650][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.208482][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.251037][ T8450] team0: Port device team_slave_0 added [ 154.260751][ T8450] team0: Port device team_slave_1 added [ 154.302191][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.309563][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.335762][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.349566][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.356814][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.383052][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.468120][ T8450] device hsr_slave_0 entered promiscuous mode [ 154.533156][ T8450] device hsr_slave_1 entered promiscuous mode [ 154.775040][ T8450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.819497][ T8450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.887158][ T8450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.938785][ T8450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.098749][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.122311][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.131294][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.148823][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.167256][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.178076][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.188868][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.196274][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.228126][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.238692][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.248844][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.258843][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.266182][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.275203][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.286374][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.297309][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.307982][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.329308][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.339086][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.349767][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.373179][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.383092][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.405792][ T8450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.419527][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.432122][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.442633][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.475819][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.484778][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.512710][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.545575][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.556123][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.597136][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.606469][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.625929][ T8450] device veth0_vlan entered promiscuous mode [ 155.645705][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.654457][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.668988][ T8450] device veth1_vlan entered promiscuous mode [ 155.711598][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.720772][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.730520][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.740020][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.758962][ T8450] device veth0_macvtap entered promiscuous mode [ 155.778741][ T8450] device veth1_macvtap entered promiscuous mode [ 155.826303][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.836508][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.846213][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.857131][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.867338][ T2313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.885906][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.893602][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.904192][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program executing program executing program [ 156.183159][ T8671] ===================================================== [ 156.190136][ T8671] BUG: KMSAN: uninit-value in nf_conntrack_udplite_packet+0x4e8/0x1110 [ 156.198485][ T8671] CPU: 1 PID: 8671 Comm: syz-executor444 Not tainted 5.8.0-rc5-syzkaller #0 [ 156.209750][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.219822][ T8671] Call Trace: [ 156.223130][ T8671] dump_stack+0x1df/0x240 [ 156.227521][ T8671] kmsan_report+0xf7/0x1e0 [ 156.231970][ T8671] __msan_warning+0x58/0xa0 [ 156.236505][ T8671] nf_conntrack_udplite_packet+0x4e8/0x1110 [ 156.242471][ T8671] nf_conntrack_in+0x93d/0x26b1 [ 156.247392][ T8671] ipv6_conntrack_local+0x68/0x80 [ 156.252456][ T8671] ? ipv6_conntrack_in+0x80/0x80 [ 156.257399][ T8671] nf_hook_slow+0x16e/0x400 [ 156.261917][ T8671] __ip6_local_out+0x56d/0x750 [ 156.266702][ T8671] ? __ip6_local_out+0x750/0x750 [ 156.271648][ T8671] ip6_local_out+0xa4/0x1d0 [ 156.276198][ T8671] ip6_send_skb+0xfa/0x390 [ 156.280641][ T8671] udp_v6_send_skb+0x1834/0x1e80 [ 156.286467][ T8671] udpv6_sendmsg+0x4570/0x4940 [ 156.291265][ T8671] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.297342][ T8671] ? aa_label_sk_perm+0x767/0x930 [ 156.302373][ T8671] ? udpv6_sendmsg+0x4940/0x4940 [ 156.307341][ T8671] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.313414][ T8671] ? aa_sk_perm+0x83c/0xcd0 [ 156.318117][ T8671] ? udpv6_rcv+0x70/0x70 [ 156.322383][ T8671] ? udpv6_rcv+0x70/0x70 [ 156.327539][ T8671] inet6_sendmsg+0x276/0x2e0 [ 156.332767][ T8671] kernel_sendmsg+0x24a/0x440 [ 156.337454][ T8671] sock_no_sendpage+0x235/0x300 [ 156.342316][ T8671] ? sock_no_mmap+0x30/0x30 [ 156.346824][ T8671] sock_sendpage+0x1e1/0x2c0 [ 156.351433][ T8671] pipe_to_sendpage+0x38c/0x4c0 [ 156.356273][ T8671] ? sock_fasync+0x250/0x250 [ 156.361150][ T8671] __splice_from_pipe+0x565/0xf00 [ 156.366176][ T8671] ? generic_splice_sendpage+0x2d0/0x2d0 [ 156.371864][ T8671] generic_splice_sendpage+0x1d5/0x2d0 [ 156.377338][ T8671] ? iter_file_splice_write+0x1800/0x1800 [ 156.383070][ T8671] direct_splice_actor+0x1fd/0x580 [ 156.388220][ T8671] ? kmsan_get_metadata+0x4f/0x180 [ 156.393339][ T8671] splice_direct_to_actor+0x6b2/0xf50 [ 156.399769][ T8671] ? do_splice_direct+0x580/0x580 [ 156.404936][ T8671] do_splice_direct+0x342/0x580 [ 156.409816][ T8671] do_sendfile+0x101b/0x1d40 [ 156.414426][ T8671] __se_sys_sendfile64+0x2bb/0x360 [ 156.419550][ T8671] ? kmsan_get_metadata+0x4f/0x180 [ 156.428917][ T8671] __x64_sys_sendfile64+0x56/0x70 [ 156.434318][ T8671] do_syscall_64+0xb0/0x150 [ 156.438825][ T8671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 156.444711][ T8671] RIP: 0033:0x443d99 [ 156.448589][ T8671] Code: Bad RIP value. [ 156.452998][ T8671] RSP: 002b:00007ffe62d02e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.461417][ T8671] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443d99 [ 156.469382][ T8671] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 156.477349][ T8671] RBP: 00007ffe62d02e10 R08: 0000000000000012 R09: 0000000000000000 [ 156.485327][ T8671] R10: 000000000000a808 R11: 0000000000000246 R12: 0000000000000000 [ 156.493295][ T8671] R13: 000000000002623d R14: 0000000000000000 R15: 0000000000000000 [ 156.501377][ T8671] [ 156.503694][ T8671] Uninit was stored to memory at: [ 156.508720][ T8671] kmsan_internal_chain_origin+0xad/0x130 [ 156.514439][ T8671] __msan_chain_origin+0x50/0x90 [ 156.519370][ T8671] udp_v6_send_skb+0x19f5/0x1e80 [ 156.524310][ T8671] udpv6_sendmsg+0x4570/0x4940 [ 156.529230][ T8671] inet6_sendmsg+0x276/0x2e0 [ 156.533837][ T8671] kernel_sendmsg+0x24a/0x440 [ 156.538615][ T8671] sock_no_sendpage+0x235/0x300 [ 156.543460][ T8671] sock_sendpage+0x1e1/0x2c0 [ 156.548044][ T8671] pipe_to_sendpage+0x38c/0x4c0 [ 156.552911][ T8671] __splice_from_pipe+0x565/0xf00 [ 156.557976][ T8671] generic_splice_sendpage+0x1d5/0x2d0 [ 156.563436][ T8671] direct_splice_actor+0x1fd/0x580 [ 156.568577][ T8671] splice_direct_to_actor+0x6b2/0xf50 [ 156.573946][ T8671] do_splice_direct+0x342/0x580 [ 156.578791][ T8671] do_sendfile+0x101b/0x1d40 [ 156.583427][ T8671] __se_sys_sendfile64+0x2bb/0x360 [ 156.588542][ T8671] __x64_sys_sendfile64+0x56/0x70 [ 156.593583][ T8671] do_syscall_64+0xb0/0x150 [ 156.598098][ T8671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 156.603971][ T8671] [ 156.606286][ T8671] Uninit was stored to memory at: [ 156.611312][ T8671] kmsan_internal_chain_origin+0xad/0x130 [ 156.617117][ T8671] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 156.623118][ T8671] kmsan_memcpy_metadata+0xb/0x10 [ 156.628161][ T8671] __msan_memcpy+0x43/0x50 [ 156.632594][ T8671] _copy_from_iter_full+0xbfe/0x13b0 [ 156.638126][ T8671] udplite_getfrag+0xb1/0x130 [ 156.642791][ T8671] __ip6_append_data+0x507b/0x6320 [ 156.650446][ T8671] ip6_make_skb+0x6ce/0xcf0 [ 156.654967][ T8671] udpv6_sendmsg+0x42f4/0x4940 [ 156.660343][ T8671] inet6_sendmsg+0x276/0x2e0 [ 156.664955][ T8671] kernel_sendmsg+0x24a/0x440 [ 156.669649][ T8671] sock_no_sendpage+0x235/0x300 [ 156.674488][ T8671] sock_sendpage+0x1e1/0x2c0 [ 156.679067][ T8671] pipe_to_sendpage+0x38c/0x4c0 [ 156.683997][ T8671] __splice_from_pipe+0x565/0xf00 [ 156.689252][ T8671] generic_splice_sendpage+0x1d5/0x2d0 [ 156.694723][ T8671] direct_splice_actor+0x1fd/0x580 [ 156.699844][ T8671] splice_direct_to_actor+0x6b2/0xf50 [ 156.705223][ T8671] do_splice_direct+0x342/0x580 [ 156.710079][ T8671] do_sendfile+0x101b/0x1d40 [ 156.714668][ T8671] __se_sys_sendfile64+0x2bb/0x360 [ 156.719790][ T8671] __x64_sys_sendfile64+0x56/0x70 [ 156.724803][ T8671] do_syscall_64+0xb0/0x150 [ 156.729313][ T8671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 156.735366][ T8671] [ 156.737708][ T8671] Uninit was created at: [ 156.741951][ T8671] kmsan_save_stack_with_flags+0x3c/0x90 [ 156.747615][ T8671] kmsan_alloc_page+0xb9/0x180 [ 156.752394][ T8671] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 156.757948][ T8671] alloc_pages_current+0x672/0x990 [ 156.763052][ T8671] push_pipe+0x605/0xb70 [ 156.767286][ T8671] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 156.773212][ T8671] do_splice_to+0x4fc/0x14f0 [ 156.777790][ T8671] splice_direct_to_actor+0x45c/0xf50 [ 156.783201][ T8671] do_splice_direct+0x342/0x580 [ 156.788071][ T8671] do_sendfile+0x101b/0x1d40 [ 156.792662][ T8671] __se_sys_sendfile64+0x2bb/0x360 [ 156.797780][ T8671] __x64_sys_sendfile64+0x56/0x70 [ 156.802902][ T8671] do_syscall_64+0xb0/0x150 [ 156.807431][ T8671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 156.813998][ T8671] ===================================================== [ 156.820917][ T8671] Disabling lock debugging due to kernel taint [ 156.827075][ T8671] Kernel panic - not syncing: panic_on_warn set ... [ 156.834086][ T8671] CPU: 1 PID: 8671 Comm: syz-executor444 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 156.844134][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.854227][ T8671] Call Trace: [ 156.857569][ T8671] dump_stack+0x1df/0x240 [ 156.861929][ T8671] panic+0x3d5/0xc3e [ 156.865865][ T8671] kmsan_report+0x1df/0x1e0 [ 156.870366][ T8671] __msan_warning+0x58/0xa0 [ 156.874882][ T8671] nf_conntrack_udplite_packet+0x4e8/0x1110 [ 156.880807][ T8671] nf_conntrack_in+0x93d/0x26b1 [ 156.885677][ T8671] ipv6_conntrack_local+0x68/0x80 [ 156.890714][ T8671] ? ipv6_conntrack_in+0x80/0x80 [ 156.895648][ T8671] nf_hook_slow+0x16e/0x400 [ 156.900156][ T8671] __ip6_local_out+0x56d/0x750 [ 156.904924][ T8671] ? __ip6_local_out+0x750/0x750 [ 156.909854][ T8671] ip6_local_out+0xa4/0x1d0 [ 156.914577][ T8671] ip6_send_skb+0xfa/0x390 [ 156.919616][ T8671] udp_v6_send_skb+0x1834/0x1e80 [ 156.924595][ T8671] udpv6_sendmsg+0x4570/0x4940 [ 156.929363][ T8671] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.935445][ T8671] ? aa_label_sk_perm+0x767/0x930 [ 156.940481][ T8671] ? udpv6_sendmsg+0x4940/0x4940 [ 156.945447][ T8671] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.951703][ T8671] ? aa_sk_perm+0x83c/0xcd0 [ 156.958246][ T8671] ? udpv6_rcv+0x70/0x70 [ 156.962498][ T8671] ? udpv6_rcv+0x70/0x70 [ 156.966727][ T8671] inet6_sendmsg+0x276/0x2e0 [ 156.971320][ T8671] kernel_sendmsg+0x24a/0x440 [ 156.976019][ T8671] sock_no_sendpage+0x235/0x300 [ 156.980892][ T8671] ? sock_no_mmap+0x30/0x30 [ 156.985407][ T8671] sock_sendpage+0x1e1/0x2c0 [ 156.990043][ T8671] pipe_to_sendpage+0x38c/0x4c0 [ 156.994904][ T8671] ? sock_fasync+0x250/0x250 [ 156.999880][ T8671] __splice_from_pipe+0x565/0xf00 [ 157.004943][ T8671] ? generic_splice_sendpage+0x2d0/0x2d0 [ 157.010599][ T8671] generic_splice_sendpage+0x1d5/0x2d0 [ 157.017021][ T8671] ? iter_file_splice_write+0x1800/0x1800 [ 157.023543][ T8671] direct_splice_actor+0x1fd/0x580 [ 157.028680][ T8671] ? kmsan_get_metadata+0x4f/0x180 [ 157.033827][ T8671] splice_direct_to_actor+0x6b2/0xf50 [ 157.039250][ T8671] ? do_splice_direct+0x580/0x580 [ 157.044296][ T8671] do_splice_direct+0x342/0x580 [ 157.049160][ T8671] do_sendfile+0x101b/0x1d40 [ 157.053798][ T8671] __se_sys_sendfile64+0x2bb/0x360 [ 157.060138][ T8671] ? kmsan_get_metadata+0x4f/0x180 [ 157.065257][ T8671] __x64_sys_sendfile64+0x56/0x70 [ 157.070306][ T8671] do_syscall_64+0xb0/0x150 [ 157.074817][ T8671] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 157.080718][ T8671] RIP: 0033:0x443d99 [ 157.084606][ T8671] Code: Bad RIP value. [ 157.088776][ T8671] RSP: 002b:00007ffe62d02e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.097200][ T8671] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000443d99 [ 157.105187][ T8671] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 157.113603][ T8671] RBP: 00007ffe62d02e10 R08: 0000000000000012 R09: 0000000000000000 [ 157.121580][ T8671] R10: 000000000000a808 R11: 0000000000000246 R12: 0000000000000000 [ 157.129645][ T8671] R13: 000000000002623d R14: 0000000000000000 R15: 0000000000000000 [ 157.139635][ T8671] Kernel Offset: 0x17000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 157.151621][ T8671] Rebooting in 86400 seconds..