Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. syzkaller login: [ 114.367458][T10842] IPVS: ftp: loaded support on port[0] = 21 [ 114.456383][T10842] chnl_net:caif_netlink_parms(): no params data found [ 114.533074][T10842] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.540205][T10842] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.548967][T10842] device bridge_slave_0 entered promiscuous mode [ 114.557705][T10842] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.565045][T10842] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.574226][T10842] device bridge_slave_1 entered promiscuous mode [ 114.600621][T10842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.613325][T10842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.640303][T10842] team0: Port device team_slave_0 added [ 114.648546][T10842] team0: Port device team_slave_1 added [ 114.671637][T10842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.678823][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.704918][T10842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.717017][T10842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.724205][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.750201][T10842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.815547][T10842] device hsr_slave_0 entered promiscuous mode [ 114.862687][T10842] device hsr_slave_1 entered promiscuous mode [ 115.010547][T10842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.056374][T10842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.116442][T10842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.176525][T10842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.259071][T10842] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.266291][T10842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.274118][T10842] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.281266][T10842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.345330][T10842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.361278][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.373521][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.384209][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.394581][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 115.411290][T10842] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.426981][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.436071][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.443379][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.488787][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.497673][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.504931][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.515660][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.525292][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.534833][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.544046][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.555575][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.570779][T10842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.596833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.604982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.621334][T10842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.648350][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.658527][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.688297][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.698107][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.709923][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.718739][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.729430][T10842] device veth0_vlan entered promiscuous mode [ 115.747122][T10842] device veth1_vlan entered promiscuous mode [ 115.777954][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.787610][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.796723][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.805984][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.821469][T10842] device veth0_macvtap entered promiscuous mode [ 115.833899][T10842] device veth1_macvtap entered promiscuous mode [ 115.858733][T10842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.866663][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.875867][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.884597][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.894219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.912628][T10842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.920213][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.929990][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 116.149223][ C1] ===================================================== [ 116.156217][ C1] BUG: KMSAN: use-after-free in find_match+0x317/0x1480 [ 116.163256][ C1] CPU: 1 PID: 31 Comm: kworker/1:1 Not tainted 5.6.0-rc2-syzkaller #0 [ 116.171433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.181498][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 116.187464][ C1] Call Trace: [ 116.190776][ C1] [ 116.193626][ C1] dump_stack+0x1c9/0x220 [ 116.197979][ C1] kmsan_report+0xf7/0x1e0 [ 116.202429][ C1] __msan_warning+0x58/0xa0 [ 116.206924][ C1] find_match+0x317/0x1480 [ 116.211335][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 116.217473][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 116.222713][ C1] __find_rr_leaf+0x3f9/0x1160 [ 116.227469][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 116.232574][ C1] fib6_table_lookup+0x586/0x1420 [ 116.237611][ C1] ip6_pol_route+0x203/0x2960 [ 116.242292][ C1] ip6_pol_route_input+0x123/0x140 [ 116.247390][ C1] fib6_rule_lookup+0x38f/0xa10 [ 116.252223][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 116.257754][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 116.262935][ C1] ip6_route_input+0xb9d/0xcf0 [ 116.267685][ C1] ? ipvlan_l3_rcv+0x660/0xb70 [ 116.272433][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 116.277546][ C1] ? ipvlan_ns_exit+0x160/0x160 [ 116.282386][ C1] ipv6_rcv+0x628/0x710 [ 116.286542][ C1] ? local_bh_enable+0x40/0x40 [ 116.291292][ C1] process_backlog+0xa41/0x1410 [ 116.296139][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 116.301236][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 116.306415][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 116.311683][ C1] net_rx_action+0x786/0x1aa0 [ 116.316352][ C1] ? net_tx_action+0xc30/0xc30 [ 116.321113][ C1] __do_softirq+0x311/0x83d [ 116.325601][ C1] do_softirq_own_stack+0x49/0x80 [ 116.330597][ C1] [ 116.333520][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 116.338701][ C1] local_bh_enable+0x36/0x40 [ 116.343269][ C1] ip6_finish_output2+0x2113/0x2640 [ 116.348473][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 116.353654][ C1] __ip6_finish_output+0x824/0x8e0 [ 116.358770][ C1] ip6_finish_output+0x166/0x410 [ 116.363704][ C1] ip6_output+0x60a/0x770 [ 116.368038][ C1] ? ip6_output+0x770/0x770 [ 116.372522][ C1] ? ac6_seq_show+0x200/0x200 [ 116.377178][ C1] ndisc_send_skb+0x1047/0x15a0 [ 116.382025][ C1] ? ndisc_error_report+0x1a0/0x1a0 [ 116.387217][ C1] ndisc_send_ns+0xe38/0xe80 [ 116.391789][ C1] ? __queue_delayed_work+0x27f/0x450 [ 116.397142][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 116.402952][ C1] addrconf_dad_work+0xc0b/0x2aa0 [ 116.407971][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 116.413100][ C1] ? ipv6_get_saddr_eval+0x1350/0x1350 [ 116.418581][ C1] process_one_work+0x1555/0x1f40 [ 116.423606][ C1] worker_thread+0xef6/0x2450 [ 116.428285][ C1] kthread+0x4b5/0x4f0 [ 116.432423][ C1] ? process_one_work+0x1f40/0x1f40 [ 116.437625][ C1] ? kthread_blkcg+0xf0/0xf0 [ 116.442204][ C1] ret_from_fork+0x35/0x40 [ 116.446644][ C1] [ 116.448948][ C1] Uninit was created at: [ 116.453170][ C1] kmsan_internal_poison_shadow+0x66/0xd0 [ 116.458876][ C1] kmsan_slab_free+0x6e/0xb0 [ 116.463442][ C1] kfree+0x565/0x30a0 [ 116.467415][ C1] netdev_name_node_alt_destroy+0x587/0x690 [ 116.473289][ C1] rtnl_linkprop+0x939/0xc00 [ 116.477854][ C1] rtnl_dellinkprop+0x9d/0xb0 [ 116.482509][ C1] rtnetlink_rcv_msg+0x1153/0x1570 [ 116.487604][ C1] netlink_rcv_skb+0x451/0x650 [ 116.498512][ C1] rtnetlink_rcv+0x50/0x60 [ 116.502903][ C1] netlink_unicast+0xf9e/0x1100 [ 116.507827][ C1] netlink_sendmsg+0x1246/0x14d0 [ 116.512749][ C1] ____sys_sendmsg+0x12b6/0x1350 [ 116.517677][ C1] __sys_sendmsg+0x451/0x5f0 [ 116.522249][ C1] __se_sys_sendmsg+0x97/0xb0 [ 116.526916][ C1] __x64_sys_sendmsg+0x4a/0x70 [ 116.531673][ C1] do_syscall_64+0xb8/0x160 [ 116.536168][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 116.542048][ C1] ===================================================== [ 116.548960][ C1] Disabling lock debugging due to kernel taint [ 116.555091][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 116.561661][ C1] CPU: 1 PID: 31 Comm: kworker/1:1 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 116.571468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.581526][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 116.587512][ C1] Call Trace: [ 116.590787][ C1] [ 116.593622][ C1] dump_stack+0x1c9/0x220 [ 116.597995][ C1] panic+0x3d5/0xc3e [ 116.601903][ C1] kmsan_report+0x1df/0x1e0 [ 116.606414][ C1] __msan_warning+0x58/0xa0 [ 116.610905][ C1] find_match+0x317/0x1480 [ 116.615315][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 116.621501][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 116.626692][ C1] __find_rr_leaf+0x3f9/0x1160 [ 116.631448][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 116.636589][ C1] fib6_table_lookup+0x586/0x1420 [ 116.641617][ C1] ip6_pol_route+0x203/0x2960 [ 116.646294][ C1] ip6_pol_route_input+0x123/0x140 [ 116.651392][ C1] fib6_rule_lookup+0x38f/0xa10 [ 116.656236][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 116.661765][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 116.666948][ C1] ip6_route_input+0xb9d/0xcf0 [ 116.671718][ C1] ? ipvlan_l3_rcv+0x660/0xb70 [ 116.676474][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 116.681563][ C1] ? ipvlan_ns_exit+0x160/0x160 [ 116.686393][ C1] ipv6_rcv+0x628/0x710 [ 116.690555][ C1] ? local_bh_enable+0x40/0x40 [ 116.695301][ C1] process_backlog+0xa41/0x1410 [ 116.700154][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 116.705247][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 116.710439][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 116.715715][ C1] net_rx_action+0x786/0x1aa0 [ 116.720383][ C1] ? net_tx_action+0xc30/0xc30 [ 116.725126][ C1] __do_softirq+0x311/0x83d [ 116.729614][ C1] do_softirq_own_stack+0x49/0x80 [ 116.734624][ C1] [ 116.737559][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 116.742750][ C1] local_bh_enable+0x36/0x40 [ 116.747331][ C1] ip6_finish_output2+0x2113/0x2640 [ 116.752542][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 116.757770][ C1] __ip6_finish_output+0x824/0x8e0 [ 116.762876][ C1] ip6_finish_output+0x166/0x410 [ 116.767803][ C1] ip6_output+0x60a/0x770 [ 116.772125][ C1] ? ip6_output+0x770/0x770 [ 116.776608][ C1] ? ac6_seq_show+0x200/0x200 [ 116.781262][ C1] ndisc_send_skb+0x1047/0x15a0 [ 116.786109][ C1] ? ndisc_error_report+0x1a0/0x1a0 [ 116.791288][ C1] ndisc_send_ns+0xe38/0xe80 [ 116.795859][ C1] ? __queue_delayed_work+0x27f/0x450 [ 116.801211][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 116.807006][ C1] addrconf_dad_work+0xc0b/0x2aa0 [ 116.812018][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 116.817115][ C1] ? ipv6_get_saddr_eval+0x1350/0x1350 [ 116.822557][ C1] process_one_work+0x1555/0x1f40 [ 116.827573][ C1] worker_thread+0xef6/0x2450 [ 116.832245][ C1] kthread+0x4b5/0x4f0 [ 116.836304][ C1] ? process_one_work+0x1f40/0x1f40 [ 116.841482][ C1] ? kthread_blkcg+0xf0/0xf0 [ 116.846053][ C1] ret_from_fork+0x35/0x40 [ 116.851120][ C1] ------------[ cut here ]------------ [ 116.856578][ C1] kernel BUG at mm/kmsan/kmsan.h:87! [ 116.861878][ C1] invalid opcode: 0000 [#1] SMP [ 116.866712][ C1] CPU: 1 PID: 31 Comm: kworker/1:1 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 116.876279][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.886370][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 116.892351][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 116.898961][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c c8 93 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 116.918564][ C1] RSP: 0018:ffff9d7880cefff8 EFLAGS: 00010046 [ 116.924607][ C1] RAX: 0000000000000002 RBX: 0000000006c100fa RCX: 0000000006c100fa [ 116.932561][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9d7880cf00d4 [ 116.940511][ C1] RBP: ffff9d7880cf00a0 R08: 0000000000000000 R09: ffff93376fd28ed0 [ 116.948473][ C1] R10: 0000000000000000 R11: ffffffff8aa16f70 R12: 0000000000000000 [ 116.956419][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 116.964423][ C1] FS: 0000000000000000(0000) GS:ffff93376fd00000(0000) knlGS:0000000000000000 [ 116.973394][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.979971][ C1] CR2: 00000000004c8728 CR3: 0000000186223000 CR4: 00000000001406e0 [ 116.987929][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.995881][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.003842][ C1] Call Trace: [ 117.007122][ C1] [ 117.009986][ C1] kmsan_check_memory+0xd/0x10 [ 117.014728][ C1] iowrite8+0x99/0x2e0 [ 117.018782][ C1] pvpanic_panic_notify+0x99/0xc0 [ 117.023800][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 117.028908][ C1] atomic_notifier_call_chain+0x12a/0x240 [ 117.034619][ C1] panic+0x468/0xc3e [ 117.038530][ C1] kmsan_report+0x1df/0x1e0 [ 117.043024][ C1] __msan_warning+0x58/0xa0 [ 117.047510][ C1] find_match+0x317/0x1480 [ 117.051912][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 117.058059][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 117.063267][ C1] __find_rr_leaf+0x3f9/0x1160 [ 117.068089][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 117.073269][ C1] fib6_table_lookup+0x586/0x1420 [ 117.078314][ C1] ip6_pol_route+0x203/0x2960 [ 117.082996][ C1] ip6_pol_route_input+0x123/0x140 [ 117.088099][ C1] fib6_rule_lookup+0x38f/0xa10 [ 117.092940][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 117.098470][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 117.103646][ C1] ip6_route_input+0xb9d/0xcf0 [ 117.108434][ C1] ? ipvlan_l3_rcv+0x660/0xb70 [ 117.113184][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 117.118274][ C1] ? ipvlan_ns_exit+0x160/0x160 [ 117.123099][ C1] ipv6_rcv+0x628/0x710 [ 117.127238][ C1] ? local_bh_enable+0x40/0x40 [ 117.131982][ C1] process_backlog+0xa41/0x1410 [ 117.136833][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 117.141952][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 117.147239][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 117.152582][ C1] net_rx_action+0x786/0x1aa0 [ 117.157291][ C1] ? net_tx_action+0xc30/0xc30 [ 117.162039][ C1] __do_softirq+0x311/0x83d [ 117.166534][ C1] do_softirq_own_stack+0x49/0x80 [ 117.172485][ C1] [ 117.175443][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 117.180621][ C1] local_bh_enable+0x36/0x40 [ 117.185331][ C1] ip6_finish_output2+0x2113/0x2640 [ 117.190537][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 117.195723][ C1] __ip6_finish_output+0x824/0x8e0 [ 117.200859][ C1] ip6_finish_output+0x166/0x410 [ 117.205779][ C1] ip6_output+0x60a/0x770 [ 117.210091][ C1] ? ip6_output+0x770/0x770 [ 117.214571][ C1] ? ac6_seq_show+0x200/0x200 [ 117.219224][ C1] ndisc_send_skb+0x1047/0x15a0 [ 117.224066][ C1] ? ndisc_error_report+0x1a0/0x1a0 [ 117.229306][ C1] ndisc_send_ns+0xe38/0xe80 [ 117.233884][ C1] ? __queue_delayed_work+0x27f/0x450 [ 117.239264][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.245066][ C1] addrconf_dad_work+0xc0b/0x2aa0 [ 117.250089][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 117.255188][ C1] ? ipv6_get_saddr_eval+0x1350/0x1350 [ 117.260677][ C1] process_one_work+0x1555/0x1f40 [ 117.265696][ C1] worker_thread+0xef6/0x2450 [ 117.270424][ C1] kthread+0x4b5/0x4f0 [ 117.274468][ C1] ? process_one_work+0x1f40/0x1f40 [ 117.279692][ C1] ? kthread_blkcg+0xf0/0xf0 [ 117.284269][ C1] ret_from_fork+0x35/0x40 [ 117.288666][ C1] Modules linked in: [ 117.292544][ C1] ---[ end trace 3758f87c9e2de009 ]--- [ 117.297986][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 117.304595][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c c8 93 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 117.324181][ C1] RSP: 0018:ffff9d7880cefff8 EFLAGS: 00010046 [ 117.330231][ C1] RAX: 0000000000000002 RBX: 0000000006c100fa RCX: 0000000006c100fa [ 117.338188][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9d7880cf00d4 [ 117.346146][ C1] RBP: ffff9d7880cf00a0 R08: 0000000000000000 R09: ffff93376fd28ed0 [ 117.354143][ C1] R10: 0000000000000000 R11: ffffffff8aa16f70 R12: 0000000000000000 [ 117.362152][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 117.370115][ C1] FS: 0000000000000000(0000) GS:ffff93376fd00000(0000) knlGS:0000000000000000 [ 117.379066][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.385625][ C1] CR2: 00000000004c8728 CR3: 0000000186223000 CR4: 00000000001406e0 [ 117.393576][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.401526][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.409511][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 117.416746][ C1] ------------[ cut here ]------------ [ 117.422219][ C1] kernel BUG at mm/kmsan/kmsan.h:87! [ 117.427559][ C1] invalid opcode: 0000 [#2] SMP [ 117.432388][ C1] CPU: 1 PID: 31 Comm: kworker/1:1 Tainted: G B D 5.6.0-rc2-syzkaller #0 [ 117.441906][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.451967][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 117.457951][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 117.464514][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c c8 93 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 117.485149][ C1] RSP: 0018:ffff9d7880cef9e8 EFLAGS: 00010002 [ 117.491199][ C1] RAX: 0000000000000003 RBX: 00000000063c00cb RCX: 00000000063c00cb [ 117.499148][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9d7880cefac4 [ 117.507097][ C1] RBP: ffff9d7880cefa90 R08: 0000000000000000 R09: ffff93376fd28ed0 [ 117.515044][ C1] R10: 0000000000000000 R11: ffffffff8aa16f70 R12: 0000000000000000 [ 117.523038][ C1] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000001 [ 117.530990][ C1] FS: 0000000000000000(0000) GS:ffff93376fd00000(0000) knlGS:0000000000000000 [ 117.539895][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.546527][ C1] CR2: 00000000004c8728 CR3: 0000000186223000 CR4: 00000000001406e0 [ 117.554497][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.562461][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.570526][ C1] Call Trace: [ 117.573812][ C1] [ 117.576651][ C1] ? vprintk_func+0x636/0x820 [ 117.581444][ C1] kmsan_check_memory+0xd/0x10 [ 117.586193][ C1] iowrite8+0x99/0x2e0 [ 117.590263][ C1] pvpanic_panic_notify+0x99/0xc0 [ 117.595271][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 117.600382][ C1] atomic_notifier_call_chain+0x12a/0x240 [ 117.606106][ C1] panic+0x468/0xc3e [ 117.610015][ C1] oops_end+0x2a5/0x2d0 [ 117.614366][ C1] die+0x317/0x370 [ 117.618121][ C1] do_trap+0x3c0/0x760 [ 117.622199][ C1] do_invalid_op+0x2d4/0x370 [ 117.626783][ C1] ? kmsan_internal_check_memory+0x3c0/0x3d0 [ 117.632757][ C1] ? kmsan_internal_check_memory+0x3c0/0x3d0 [ 117.638738][ C1] invalid_op+0x3d/0x50 [ 117.642893][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 117.649476][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c c8 93 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 117.669123][ C1] RSP: 0018:ffff9d7880cefff8 EFLAGS: 00010046 [ 117.675205][ C1] RAX: 0000000000000002 RBX: 0000000006c100fa RCX: 0000000006c100fa [ 117.683170][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9d7880cf00d4 [ 117.691139][ C1] RBP: ffff9d7880cf00a0 R08: 0000000000000000 R09: ffff93376fd28ed0 [ 117.699114][ C1] R10: 0000000000000000 R11: ffffffff8aa16f70 R12: 0000000000000000 [ 117.707077][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 117.715046][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 117.720162][ C1] ? kmsan_internal_check_memory+0x324/0x3d0 [ 117.726144][ C1] kmsan_check_memory+0xd/0x10 [ 117.730900][ C1] iowrite8+0x99/0x2e0 [ 117.734960][ C1] pvpanic_panic_notify+0x99/0xc0 [ 117.739981][ C1] ? pvpanic_mmio_remove+0x60/0x60 [ 117.745182][ C1] atomic_notifier_call_chain+0x12a/0x240 [ 117.750907][ C1] panic+0x468/0xc3e [ 117.754811][ C1] kmsan_report+0x1df/0x1e0 [ 117.759302][ C1] __msan_warning+0x58/0xa0 [ 117.763792][ C1] find_match+0x317/0x1480 [ 117.768195][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 117.774366][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 117.779593][ C1] __find_rr_leaf+0x3f9/0x1160 [ 117.784360][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 117.789462][ C1] fib6_table_lookup+0x586/0x1420 [ 117.794488][ C1] ip6_pol_route+0x203/0x2960 [ 117.799256][ C1] ip6_pol_route_input+0x123/0x140 [ 117.804354][ C1] fib6_rule_lookup+0x38f/0xa10 [ 117.809183][ C1] ? ip6_route_input_lookup+0x1f0/0x1f0 [ 117.814724][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 117.819925][ C1] ip6_route_input+0xb9d/0xcf0 [ 117.824684][ C1] ? ipvlan_l3_rcv+0x660/0xb70 [ 117.829433][ C1] ip6_rcv_finish_core+0x1f9/0x470 [ 117.834529][ C1] ? ipvlan_ns_exit+0x160/0x160 [ 117.839357][ C1] ipv6_rcv+0x628/0x710 [ 117.843510][ C1] ? local_bh_enable+0x40/0x40 [ 117.848274][ C1] process_backlog+0xa41/0x1410 [ 117.853112][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 117.858205][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 117.863389][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 117.868686][ C1] net_rx_action+0x786/0x1aa0 [ 117.873385][ C1] ? net_tx_action+0xc30/0xc30 [ 117.878160][ C1] __do_softirq+0x311/0x83d [ 117.882650][ C1] do_softirq_own_stack+0x49/0x80 [ 117.887692][ C1] [ 117.890646][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 117.895823][ C1] local_bh_enable+0x36/0x40 [ 117.900422][ C1] ip6_finish_output2+0x2113/0x2640 [ 117.905626][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 117.910801][ C1] __ip6_finish_output+0x824/0x8e0 [ 117.915897][ C1] ip6_finish_output+0x166/0x410 [ 117.920827][ C1] ip6_output+0x60a/0x770 [ 117.925150][ C1] ? ip6_output+0x770/0x770 [ 117.929631][ C1] ? ac6_seq_show+0x200/0x200 [ 117.934284][ C1] ndisc_send_skb+0x1047/0x15a0 [ 117.939124][ C1] ? ndisc_error_report+0x1a0/0x1a0 [ 117.944302][ C1] ndisc_send_ns+0xe38/0xe80 [ 117.948872][ C1] ? __queue_delayed_work+0x27f/0x450 [ 117.954226][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 117.960019][ C1] addrconf_dad_work+0xc0b/0x2aa0 [ 117.965019][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 117.970118][ C1] ? ipv6_get_saddr_eval+0x1350/0x1350 [ 117.975564][ C1] process_one_work+0x1555/0x1f40 [ 117.980581][ C1] worker_thread+0xef6/0x2450 [ 117.985261][ C1] kthread+0x4b5/0x4f0 [ 117.989304][ C1] ? process_one_work+0x1f40/0x1f40 [ 117.994491][ C1] ? kthread_blkcg+0xf0/0xf0 [ 117.999074][ C1] ret_from_fork+0x35/0x40 [ 118.003481][ C1] Modules linked in: [ 118.007368][ C1] ---[ end trace 3758f87c9e2de00a ]--- [ 118.012817][ C1] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 118.019380][ C1] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 06 4c c8 93 31 c0 e8 e1 70 48 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 02 8f 48 ff 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 118.038961][ C1] RSP: 0018:ffff9d7880cefff8 EFLAGS: 00010046 [ 118.045016][ C1] RAX: 0000000000000002 RBX: 0000000006c100fa RCX: 0000000006c100fa [ 118.052964][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff9d7880cf00d4 [ 118.060923][ C1] RBP: ffff9d7880cf00a0 R08: 0000000000000000 R09: ffff93376fd28ed0 [ 118.068890][ C1] R10: 0000000000000000 R11: ffffffff8aa16f70 R12: 0000000000000000 [ 118.076846][ C1] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 118.084800][ C1] FS: 0000000000000000(0000) GS:ffff93376fd00000(0000) knlGS:0000000000000000 [ 118.093747][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.100306][ C1] CR2: 00000000004c8728 CR3: 0000000186223000 CR4: 00000000001406e0 [ 118.108256][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.116247][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.124202][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 118.132071][ C1] Kernel Offset: 0x4800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 118.143615][ C1] Rebooting in 86400 seconds..