[ 557.291798][ T3005] bridge_slave_1: left promiscuous mode [ 557.299407][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.313508][ T3005] bridge_slave_0: left allmulticast mode [ 557.319390][ T3005] bridge_slave_0: left promiscuous mode [ 557.326353][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.708882][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 557.741261][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 557.778829][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.814557][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.032693][ T3005] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.105' (ECDSA) to the list of known hosts. [ 563.951054][ T8532] nr0: entered promiscuous mode [ 563.961814][ T8532] ===================================================== [ 563.969155][ T8532] BUG: KMSAN: uninit-value in llc_rcv+0x1192/0x1530 [ 563.976038][ T8532] llc_rcv+0x1192/0x1530 [ 563.980451][ T8532] __netif_receive_skb+0x1a6/0x5a0 [ 563.985951][ T8532] netif_receive_skb+0x58/0x660 [ 563.990992][ T8532] tun_rx_batched+0x83b/0x920 [ 563.995962][ T8532] tun_get_user+0x54ca/0x6920 [ 564.000824][ T8532] tun_chr_write_iter+0x3af/0x5d0 [ 564.006142][ T8532] vfs_write+0x8f9/0x1490 [ 564.010657][ T8532] ksys_write+0x20f/0x4c0 [ 564.015293][ T8532] __x64_sys_write+0x93/0xd0 [ 564.020081][ T8532] do_syscall_64+0x41/0xc0 [ 564.024829][ T8532] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 564.030940][ T8532] [ 564.033455][ T8532] Uninit was created at: [ 564.037923][ T8532] slab_post_alloc_hook+0x12d/0xb60 [ 564.043516][ T8532] kmem_cache_alloc_node+0x535/0xa30 [ 564.049056][ T8532] kmalloc_reserve+0x148/0x470 [ 564.054307][ T8532] __alloc_skb+0x318/0x740 [ 564.058913][ T8532] alloc_skb_with_frags+0xbd/0xbb0 [ 564.064316][ T8532] sock_alloc_send_pskb+0xa80/0xbf0 [ 564.069700][ T8532] tun_get_user+0x2329/0x6920 [ 564.074684][ T8532] tun_chr_write_iter+0x3af/0x5d0 [ 564.079925][ T8532] vfs_write+0x8f9/0x1490 [ 564.084567][ T8532] ksys_write+0x20f/0x4c0 [ 564.089095][ T8532] __x64_sys_write+0x93/0xd0 [ 564.093992][ T8532] do_syscall_64+0x41/0xc0 [ 564.098609][ T8532] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 564.104794][ T8532] [ 564.107194][ T8532] CPU: 1 PID: 8532 Comm: syz-executor259 Not tainted 6.4.0-syzkaller-g257152fe29be #0 [ 564.117018][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 564.127547][ T8532] ===================================================== [ 564.134680][ T8532] Disabling lock debugging due to kernel taint [ 564.141037][ T8532] Kernel panic - not syncing: kmsan.panic set ... [ 564.147576][ T8532] CPU: 1 PID: 8532 Comm: syz-executor259 Tainted: G B 6.4.0-syzkaller-g257152fe29be #0 [ 564.159037][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 564.169230][ T8532] Call Trace: [ 564.172604][ T8532] [ 564.175637][ T8532] dump_stack_lvl+0x1bf/0x240 [ 564.180779][ T8532] dump_stack+0x1e/0x20 [ 564.185203][ T8532] panic+0x4d5/0xc70 [ 564.189265][ T8532] ? add_taint+0x108/0x1a0 [ 564.193852][ T8532] kmsan_report+0x2d0/0x2d0 [ 564.198567][ T8532] ? __msan_warning+0x96/0x110 [ 564.203529][ T8532] ? llc_rcv+0x1192/0x1530 [ 564.208103][ T8532] ? __netif_receive_skb+0x1a6/0x5a0 [ 564.213588][ T8532] ? netif_receive_skb+0x58/0x660 [ 564.218786][ T8532] ? tun_rx_batched+0x83b/0x920 [ 564.223836][ T8532] ? tun_get_user+0x54ca/0x6920 [ 564.228870][ T8532] ? tun_chr_write_iter+0x3af/0x5d0 [ 564.234260][ T8532] ? vfs_write+0x8f9/0x1490 [ 564.238971][ T8532] ? ksys_write+0x20f/0x4c0 [ 564.243692][ T8532] ? __x64_sys_write+0x93/0xd0 [ 564.248664][ T8532] ? do_syscall_64+0x41/0xc0 [ 564.253442][ T8532] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 564.259699][ T8532] ? kmsan_internal_memmove_metadata+0x9a/0x360 [ 564.266163][ T8532] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 564.272442][ T8532] ? __pskb_pull_tail+0x1d0a/0x2320 [ 564.277870][ T8532] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 564.283898][ T8532] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 564.289923][ T8532] __msan_warning+0x96/0x110 [ 564.294798][ T8532] llc_rcv+0x1192/0x1530 [ 564.299218][ T8532] __netif_receive_skb+0x1a6/0x5a0 [ 564.304550][ T8532] ? llc_set_station_handler+0x70/0x70 [ 564.310191][ T8532] netif_receive_skb+0x58/0x660 [ 564.315214][ T8532] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 564.321244][ T8532] tun_rx_batched+0x83b/0x920 [ 564.326118][ T8532] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 564.332142][ T8532] tun_get_user+0x54ca/0x6920 [ 564.337004][ T8532] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 564.343499][ T8532] tun_chr_write_iter+0x3af/0x5d0 [ 564.348728][ T8532] ? tun_chr_read_iter+0x670/0x670 [ 564.354028][ T8532] vfs_write+0x8f9/0x1490 [ 564.358581][ T8532] ksys_write+0x20f/0x4c0 [ 564.363209][ T8532] __x64_sys_write+0x93/0xd0 [ 564.368008][ T8532] do_syscall_64+0x41/0xc0 [ 564.372616][ T8532] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 564.378698][ T8532] RIP: 0033:0x7fa2a3c47b69 [ 564.383239][ T8532] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 564.403169][ T8532] RSP: 002b:00007ffee8902898 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.411753][ T8532] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2a3c47b69 [ 564.419963][ T8532] RDX: 000000000000b107 RSI: 00000000200000c0 RDI: 0000000000000003 [ 564.429242][ T8532] RBP: 00007fa2a3c0bd10 R08: 0000000000000000 R09: 0000000000000000 [ 564.437358][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa2a3c0bda0 [ 564.445618][ T8532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.453761][ T8532] [ 564.457152][ T8532] Kernel Offset: disabled [ 564.461671][ T8532] Rebooting in 86400 seconds..