Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. syzkaller login: [ 114.792076][ T8474] IPVS: ftp: loaded support on port[0] = 21 [ 114.940460][ T8474] chnl_net:caif_netlink_parms(): no params data found [ 115.109814][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.117166][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.126270][ T8474] device bridge_slave_0 entered promiscuous mode [ 115.137447][ T8474] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.144831][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.154627][ T8474] device bridge_slave_1 entered promiscuous mode [ 115.188492][ T8474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.200402][ T8474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.235765][ T8474] team0: Port device team_slave_0 added [ 115.246453][ T8474] team0: Port device team_slave_1 added [ 115.275635][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.282720][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.308870][ T8474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.322275][ T8474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.329309][ T8474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.355485][ T8474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.427641][ T8474] device hsr_slave_0 entered promiscuous mode [ 115.482561][ T8474] device hsr_slave_1 entered promiscuous mode [ 115.675840][ T8474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.716281][ T8474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.766146][ T8474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.856138][ T8474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.937185][ T8474] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.944359][ T8474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.952195][ T8474] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.959498][ T8474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.975858][ T3061] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.985474][ T3061] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.052198][ T8474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.074790][ T8474] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.089657][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.098315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.107550][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.117535][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.126909][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.134213][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.151650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.161188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.171624][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.178963][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.193526][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.228080][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.239772][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.250724][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.260974][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.271238][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.281451][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.291015][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.302145][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.321400][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.330541][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.346614][ T8474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.374608][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.383037][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.400718][ T8474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.426929][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.436752][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.470243][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.479364][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.493640][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.502753][ T3061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.516869][ T8474] device veth0_vlan entered promiscuous mode [ 116.534606][ T8474] device veth1_vlan entered promiscuous mode [ 116.566821][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.575814][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.585366][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.595221][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.608423][ T8474] device veth0_macvtap entered promiscuous mode [ 116.625852][ T8474] device veth1_macvtap entered promiscuous mode [ 116.651067][ T8474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.659150][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.668490][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.678889][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.688881][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.704248][ T8474] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program [ 116.733296][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.745687][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program executing program executing program executing program executing program [ 116.993202][ T8358] ===================================================== [ 117.005300][ T8358] BUG: KMSAN: uninit-value in bpf_skb_load_helper_8+0xe0/0x290 [ 117.012961][ T8358] CPU: 1 PID: 8358 Comm: kworker/1:3 Not tainted 5.8.0-rc5-syzkaller #0 [ 117.021269][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.031312][ T8358] Workqueue: ipv6_addrconf addrconf_dad_work [ 117.037277][ T8358] Call Trace: [ 117.040560][ T8358] dump_stack+0x1df/0x240 [ 117.044879][ T8358] kmsan_report+0xf7/0x1e0 [ 117.049273][ T8358] __msan_warning+0x58/0xa0 [ 117.053773][ T8358] bpf_skb_load_helper_8+0xe0/0x290 [ 117.058996][ T8358] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 117.065146][ T8358] ___bpf_prog_run+0x214d/0x97a0 [ 117.070067][ T8358] ? process_one_work+0x1540/0x1f30 [ 117.075243][ T8358] ? worker_thread+0xed2/0x23f0 [ 117.080076][ T8358] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 117.085692][ T8358] __bpf_prog_run32+0x101/0x170 [ 117.090524][ T8358] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 117.096568][ T8358] ? kmsan_get_metadata+0x4f/0x180 [ 117.101680][ T8358] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.107494][ T8358] ? ___bpf_prog_run+0x97a0/0x97a0 [ 117.112598][ T8358] packet_rcv+0x70f/0x2150 [ 117.117003][ T8358] ? packet_sock_destruct+0x1e0/0x1e0 [ 117.122364][ T8358] dev_queue_xmit_nit+0x11a0/0x1280 [ 117.127561][ T8358] dev_hard_start_xmit+0x20c/0xa70 [ 117.132676][ T8358] __dev_queue_xmit+0x2f8d/0x3b20 [ 117.137692][ T8358] ? kmsan_memcpy_metadata+0xb/0x10 [ 117.142868][ T8358] ? __msan_memcpy+0x43/0x50 [ 117.147444][ T8358] dev_queue_xmit+0x4b/0x60 [ 117.151926][ T8358] neigh_connected_output+0x662/0x6e0 [ 117.157283][ T8358] ? neigh_resolve_output+0xb40/0xb40 [ 117.162635][ T8358] ip6_finish_output2+0x20fb/0x2620 [ 117.167851][ T8358] ? kmsan_get_metadata+0x11d/0x180 [ 117.173045][ T8358] __ip6_finish_output+0x824/0x8e0 [ 117.178138][ T8358] ip6_finish_output+0x166/0x410 [ 117.183068][ T8358] ip6_output+0x60a/0x770 [ 117.187387][ T8358] ? ip6_output+0x770/0x770 [ 117.191887][ T8358] ? ac6_seq_show+0x200/0x200 [ 117.196543][ T8358] ndisc_send_skb+0x1047/0x15a0 [ 117.201384][ T8358] ? ndisc_error_report+0x1a0/0x1a0 [ 117.206581][ T8358] ndisc_send_ns+0xe38/0xe80 [ 117.211168][ T8358] ? __queue_delayed_work+0x27c/0x450 [ 117.216521][ T8358] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.222336][ T8358] addrconf_dad_work+0xc2e/0x2ac0 [ 117.227364][ T8358] ? kmsan_get_metadata+0x11d/0x180 [ 117.232553][ T8358] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.238347][ T8358] ? ipv6_get_saddr_eval+0x1350/0x1350 [ 117.243786][ T8358] process_one_work+0x1540/0x1f30 [ 117.248804][ T8358] worker_thread+0xed2/0x23f0 [ 117.253483][ T8358] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.259303][ T8358] kthread+0x515/0x550 [ 117.263355][ T8358] ? process_one_work+0x1f30/0x1f30 [ 117.268542][ T8358] ? kthread_blkcg+0xf0/0xf0 [ 117.273116][ T8358] ret_from_fork+0x22/0x30 [ 117.277507][ T8358] [ 117.279816][ T8358] Uninit was stored to memory at: [ 117.284824][ T8358] kmsan_internal_chain_origin+0xad/0x130 [ 117.290519][ T8358] __msan_chain_origin+0x50/0x90 [ 117.295435][ T8358] ___bpf_prog_run+0x6c80/0x97a0 [ 117.300355][ T8358] __bpf_prog_run32+0x101/0x170 [ 117.305195][ T8358] packet_rcv+0x70f/0x2150 [ 117.309591][ T8358] dev_queue_xmit_nit+0x11a0/0x1280 [ 117.314803][ T8358] dev_hard_start_xmit+0x20c/0xa70 [ 117.319893][ T8358] __dev_queue_xmit+0x2f8d/0x3b20 [ 117.324904][ T8358] dev_queue_xmit+0x4b/0x60 [ 117.329399][ T8358] neigh_connected_output+0x662/0x6e0 [ 117.334757][ T8358] ip6_finish_output2+0x20fb/0x2620 [ 117.339927][ T8358] __ip6_finish_output+0x824/0x8e0 [ 117.345011][ T8358] ip6_finish_output+0x166/0x410 [ 117.349922][ T8358] ip6_output+0x60a/0x770 [ 117.354227][ T8358] ndisc_send_skb+0x1047/0x15a0 [ 117.359071][ T8358] ndisc_send_ns+0xe38/0xe80 [ 117.363638][ T8358] addrconf_dad_work+0xc2e/0x2ac0 [ 117.368637][ T8358] process_one_work+0x1540/0x1f30 [ 117.373637][ T8358] worker_thread+0xed2/0x23f0 [ 117.378286][ T8358] kthread+0x515/0x550 [ 117.382333][ T8358] ret_from_fork+0x22/0x30 [ 117.386720][ T8358] [ 117.389037][ T8358] Uninit was stored to memory at: [ 117.394049][ T8358] kmsan_internal_chain_origin+0xad/0x130 [ 117.399792][ T8358] __msan_chain_origin+0x50/0x90 [ 117.404703][ T8358] ___bpf_prog_run+0x6cbe/0x97a0 [ 117.409634][ T8358] __bpf_prog_run32+0x101/0x170 [ 117.414469][ T8358] packet_rcv+0x70f/0x2150 [ 117.418862][ T8358] dev_queue_xmit_nit+0x11a0/0x1280 [ 117.424035][ T8358] dev_hard_start_xmit+0x20c/0xa70 [ 117.429132][ T8358] __dev_queue_xmit+0x2f8d/0x3b20 [ 117.434136][ T8358] dev_queue_xmit+0x4b/0x60 [ 117.438616][ T8358] neigh_connected_output+0x662/0x6e0 [ 117.443973][ T8358] ip6_finish_output2+0x20fb/0x2620 [ 117.449155][ T8358] __ip6_finish_output+0x824/0x8e0 [ 117.454247][ T8358] ip6_finish_output+0x166/0x410 [ 117.459168][ T8358] ip6_output+0x60a/0x770 [ 117.463481][ T8358] ndisc_send_skb+0x1047/0x15a0 [ 117.468316][ T8358] ndisc_send_ns+0xe38/0xe80 [ 117.472880][ T8358] addrconf_dad_work+0xc2e/0x2ac0 [ 117.477874][ T8358] process_one_work+0x1540/0x1f30 [ 117.482878][ T8358] worker_thread+0xed2/0x23f0 [ 117.487537][ T8358] kthread+0x515/0x550 [ 117.491582][ T8358] ret_from_fork+0x22/0x30 [ 117.495965][ T8358] [ 117.498278][ T8358] Uninit was stored to memory at: [ 117.503281][ T8358] kmsan_internal_chain_origin+0xad/0x130 [ 117.508977][ T8358] __msan_chain_origin+0x50/0x90 [ 117.513893][ T8358] ___bpf_prog_run+0x6c64/0x97a0 [ 117.518806][ T8358] __bpf_prog_run32+0x101/0x170 [ 117.523629][ T8358] packet_rcv+0x70f/0x2150 [ 117.528017][ T8358] dev_queue_xmit_nit+0x11a0/0x1280 [ 117.533191][ T8358] dev_hard_start_xmit+0x20c/0xa70 [ 117.538286][ T8358] __dev_queue_xmit+0x2f8d/0x3b20 [ 117.543410][ T8358] dev_queue_xmit+0x4b/0x60 [ 117.547889][ T8358] neigh_connected_output+0x662/0x6e0 [ 117.553234][ T8358] ip6_finish_output2+0x20fb/0x2620 [ 117.558414][ T8358] __ip6_finish_output+0x824/0x8e0 [ 117.563509][ T8358] ip6_finish_output+0x166/0x410 [ 117.568419][ T8358] ip6_output+0x60a/0x770 [ 117.572723][ T8358] ndisc_send_skb+0x1047/0x15a0 [ 117.577547][ T8358] ndisc_send_ns+0xe38/0xe80 [ 117.582113][ T8358] addrconf_dad_work+0xc2e/0x2ac0 [ 117.587116][ T8358] process_one_work+0x1540/0x1f30 [ 117.592116][ T8358] worker_thread+0xed2/0x23f0 [ 117.596764][ T8358] kthread+0x515/0x550 [ 117.600813][ T8358] ret_from_fork+0x22/0x30 [ 117.605199][ T8358] [ 117.607508][ T8358] Local variable ----regs@__bpf_prog_run32 created at: [ 117.614342][ T8358] __bpf_prog_run32+0x87/0x170 [ 117.619084][ T8358] __bpf_prog_run32+0x87/0x170 [ 117.623818][ T8358] ===================================================== [ 117.630720][ T8358] Disabling lock debugging due to kernel taint [ 117.636842][ T8358] Kernel panic - not syncing: panic_on_warn set ... [ 117.643406][ T8358] CPU: 1 PID: 8358 Comm: kworker/1:3 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 117.653087][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.663125][ T8358] Workqueue: ipv6_addrconf addrconf_dad_work [ 117.669077][ T8358] Call Trace: [ 117.672345][ T8358] dump_stack+0x1df/0x240 [ 117.676652][ T8358] panic+0x3d5/0xc3e [ 117.680535][ T8358] kmsan_report+0x1df/0x1e0 [ 117.685017][ T8358] __msan_warning+0x58/0xa0 [ 117.689500][ T8358] bpf_skb_load_helper_8+0xe0/0x290 [ 117.694677][ T8358] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 117.700717][ T8358] ___bpf_prog_run+0x214d/0x97a0 [ 117.705628][ T8358] ? process_one_work+0x1540/0x1f30 [ 117.710800][ T8358] ? worker_thread+0xed2/0x23f0 [ 117.715625][ T8358] ? bpf_skb_get_nlattr_nest+0x2f0/0x2f0 [ 117.721240][ T8358] __bpf_prog_run32+0x101/0x170 [ 117.726069][ T8358] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 117.732125][ T8358] ? kmsan_get_metadata+0x4f/0x180 [ 117.737226][ T8358] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.743797][ T8358] ? ___bpf_prog_run+0x97a0/0x97a0 [ 117.748883][ T8358] packet_rcv+0x70f/0x2150 [ 117.753285][ T8358] ? packet_sock_destruct+0x1e0/0x1e0 [ 117.758638][ T8358] dev_queue_xmit_nit+0x11a0/0x1280 [ 117.763822][ T8358] dev_hard_start_xmit+0x20c/0xa70 [ 117.768917][ T8358] __dev_queue_xmit+0x2f8d/0x3b20 [ 117.773932][ T8358] ? kmsan_memcpy_metadata+0xb/0x10 [ 117.779106][ T8358] ? __msan_memcpy+0x43/0x50 [ 117.783683][ T8358] dev_queue_xmit+0x4b/0x60 [ 117.788176][ T8358] neigh_connected_output+0x662/0x6e0 [ 117.793539][ T8358] ? neigh_resolve_output+0xb40/0xb40 [ 117.798888][ T8358] ip6_finish_output2+0x20fb/0x2620 [ 117.804084][ T8358] ? kmsan_get_metadata+0x11d/0x180 [ 117.809273][ T8358] __ip6_finish_output+0x824/0x8e0 [ 117.814375][ T8358] ip6_finish_output+0x166/0x410 [ 117.819304][ T8358] ip6_output+0x60a/0x770 [ 117.823629][ T8358] ? ip6_output+0x770/0x770 [ 117.828125][ T8358] ? ac6_seq_show+0x200/0x200 [ 117.832798][ T8358] ndisc_send_skb+0x1047/0x15a0 [ 117.837639][ T8358] ? ndisc_error_report+0x1a0/0x1a0 [ 117.842814][ T8358] ndisc_send_ns+0xe38/0xe80 [ 117.847378][ T8358] ? __queue_delayed_work+0x27c/0x450 [ 117.852740][ T8358] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.858530][ T8358] addrconf_dad_work+0xc2e/0x2ac0 [ 117.863542][ T8358] ? kmsan_get_metadata+0x11d/0x180 [ 117.868727][ T8358] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.874514][ T8358] ? ipv6_get_saddr_eval+0x1350/0x1350 [ 117.879948][ T8358] process_one_work+0x1540/0x1f30 [ 117.884957][ T8358] worker_thread+0xed2/0x23f0 [ 117.889614][ T8358] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.895416][ T8358] kthread+0x515/0x550 [ 117.899460][ T8358] ? process_one_work+0x1f30/0x1f30 [ 117.904633][ T8358] ? kthread_blkcg+0xf0/0xf0 [ 117.909218][ T8358] ret_from_fork+0x22/0x30 [ 117.914728][ T8358] Kernel Offset: 0xfa00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 117.926247][ T8358] Rebooting in 86400 seconds..