[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.545264][ T27] audit: type=1800 audit(1579384357.707:25): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.573024][ T27] audit: type=1800 audit(1579384357.707:26): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.614134][ T27] audit: type=1800 audit(1579384357.707:27): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.147' (ECDSA) to the list of known hosts. 2020/01/18 21:53:21 parsed 1 programs 2020/01/18 21:53:24 executed programs: 0 syzkaller login: [ 130.439012][ T9589] IPVS: ftp: loaded support on port[0] = 21 [ 130.449013][ T9590] IPVS: ftp: loaded support on port[0] = 21 [ 130.487839][ T9591] IPVS: ftp: loaded support on port[0] = 21 [ 130.498085][ T9588] IPVS: ftp: loaded support on port[0] = 21 [ 130.500627][ T9592] IPVS: ftp: loaded support on port[0] = 21 [ 130.514483][ T9587] IPVS: ftp: loaded support on port[0] = 21 [ 130.693290][ T9589] chnl_net:caif_netlink_parms(): no params data found [ 130.730093][ T9590] chnl_net:caif_netlink_parms(): no params data found [ 130.801195][ T9592] chnl_net:caif_netlink_parms(): no params data found [ 130.810529][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.818460][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.826750][ T9589] device bridge_slave_0 entered promiscuous mode [ 130.836510][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.844121][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.851899][ T9589] device bridge_slave_1 entered promiscuous mode [ 130.932692][ T9589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.949734][ T9589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.962885][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.972410][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.980473][ T9590] device bridge_slave_0 entered promiscuous mode [ 130.990814][ T9588] chnl_net:caif_netlink_parms(): no params data found [ 131.021096][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.028269][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.036138][ T9592] device bridge_slave_0 entered promiscuous mode [ 131.044255][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.051416][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.059994][ T9590] device bridge_slave_1 entered promiscuous mode [ 131.106799][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.114015][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.121687][ T9592] device bridge_slave_1 entered promiscuous mode [ 131.150719][ T9589] team0: Port device team_slave_0 added [ 131.181388][ T9590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.201544][ T9589] team0: Port device team_slave_1 added [ 131.212926][ T9591] chnl_net:caif_netlink_parms(): no params data found [ 131.236775][ T9590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.269169][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.357518][ T9589] device hsr_slave_0 entered promiscuous mode [ 131.413485][ T9589] device hsr_slave_1 entered promiscuous mode [ 131.453504][ T9588] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.460677][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.468625][ T9588] device bridge_slave_0 entered promiscuous mode [ 131.478495][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.499829][ T9587] chnl_net:caif_netlink_parms(): no params data found [ 131.512746][ T9588] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.520478][ T9588] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.529038][ T9588] device bridge_slave_1 entered promiscuous mode [ 131.549800][ T9590] team0: Port device team_slave_0 added [ 131.563881][ T9590] team0: Port device team_slave_1 added [ 131.584766][ T9592] team0: Port device team_slave_0 added [ 131.605841][ T9588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.635721][ T9592] team0: Port device team_slave_1 added [ 131.658775][ T9588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.698138][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.705488][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.713832][ T9587] device bridge_slave_0 entered promiscuous mode [ 131.724425][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.732098][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.740818][ T9587] device bridge_slave_1 entered promiscuous mode [ 131.754968][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.762047][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.770613][ T9591] device bridge_slave_0 entered promiscuous mode [ 131.780319][ T9588] team0: Port device team_slave_0 added [ 131.789360][ T9588] team0: Port device team_slave_1 added [ 131.854988][ T9592] device hsr_slave_0 entered promiscuous mode [ 131.893389][ T9592] device hsr_slave_1 entered promiscuous mode [ 131.933223][ T9592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.941238][ T9592] Cannot create hsr debugfs directory [ 131.977704][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.986025][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.994215][ T9591] device bridge_slave_1 entered promiscuous mode [ 132.076134][ T9590] device hsr_slave_0 entered promiscuous mode [ 132.103276][ T9590] device hsr_slave_1 entered promiscuous mode [ 132.173214][ T9590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.180918][ T9590] Cannot create hsr debugfs directory [ 132.188327][ T9587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.218106][ T9591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.238756][ T9587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.298413][ T9588] device hsr_slave_0 entered promiscuous mode [ 132.353523][ T9588] device hsr_slave_1 entered promiscuous mode [ 132.423114][ T9588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.423153][ T9588] Cannot create hsr debugfs directory [ 132.444143][ T9591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.504259][ T9587] team0: Port device team_slave_0 added [ 132.529206][ T9591] team0: Port device team_slave_0 added [ 132.544408][ T9587] team0: Port device team_slave_1 added [ 132.579486][ T9589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.636288][ T9589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.697678][ T9591] team0: Port device team_slave_1 added [ 132.721728][ T9589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.824210][ T9589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.926176][ T9587] device hsr_slave_0 entered promiscuous mode [ 132.953516][ T9587] device hsr_slave_1 entered promiscuous mode [ 132.993665][ T9587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.001371][ T9587] Cannot create hsr debugfs directory [ 133.086241][ T9591] device hsr_slave_0 entered promiscuous mode [ 133.133518][ T9591] device hsr_slave_1 entered promiscuous mode [ 133.173162][ T9591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.180790][ T9591] Cannot create hsr debugfs directory [ 133.215105][ T9592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.268034][ T9592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.317900][ T9592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.390949][ T9588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.439161][ T9592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.505489][ T9590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.545048][ T9588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.587841][ T9588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.640888][ T9588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.686340][ T9590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.738848][ T9590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.805482][ T9590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.978327][ T9591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.005508][ T9587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.035365][ T9587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.075481][ T9587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.129023][ T9591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.167037][ T9591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.226530][ T9591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.297896][ T9587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.406140][ T9589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.422641][ T9588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.466323][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.505687][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.516290][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.524300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.531895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.544315][ T9588] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.559288][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.576599][ T9589] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.584096][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.591937][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.617305][ T9590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.626085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.640025][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.649219][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.656461][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.665962][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.675098][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.683573][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.690646][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.698466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.707116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.715819][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.723046][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.731077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.739146][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.756820][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.766358][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.775949][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.783083][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.791018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.821860][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.832086][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.841536][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.848671][ T2740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.857164][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.866442][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.875701][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.882746][ T2740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.890480][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.909333][ T9587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.930758][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.939639][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.949507][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.958575][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.967962][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.976930][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.985916][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.006496][ T9591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.034458][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.042410][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.051432][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.060435][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.069526][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.078312][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.087261][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.095829][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.104374][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.112724][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.120781][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.128592][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.136846][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.156316][ T9590] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.169773][ T9591] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.183928][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.191637][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.199741][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.212324][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.220680][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.229368][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.240081][ T9587] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.253694][ T9588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.286575][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.296499][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.305553][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.315097][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.323777][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.332431][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.341299][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.348434][ T2740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.356284][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.364828][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.373326][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.382013][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.390990][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.398251][ T2740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.406314][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.415859][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.424584][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.433334][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.442005][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.451001][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.458208][ T2740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.468118][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.476300][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.484401][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.493485][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.502012][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.509199][ T2740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.537710][ T9589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.561999][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.570413][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.579034][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.588309][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.597835][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.606865][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.616858][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.625955][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.634492][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.641542][ T2740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.649459][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.658645][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.668003][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.689770][ T9592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.701009][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.710489][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.719058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.728026][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.736715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.747030][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.754666][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.762126][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.771380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.779952][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.787337][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.802849][ T9588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.822355][ T9590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.836189][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.863689][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.872456][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.881726][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.891501][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.900495][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.908730][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.916488][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.925049][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.933881][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.942489][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.952488][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.960495][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.999088][ T9589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.024545][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.032120][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.040679][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.050023][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.063696][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.093993][ T9590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.101378][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.112705][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.120699][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.132623][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.142414][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.152322][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.162819][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.170796][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.179491][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.220931][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.230923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.239901][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.249974][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.262319][ T9591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.302839][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.311421][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.319362][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.329576][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.338524][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.346903][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.355534][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.365785][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.374832][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.384141][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.392723][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.401078][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.418730][ T9588] device veth0_vlan entered promiscuous mode [ 136.427626][ T9589] device veth0_vlan entered promiscuous mode [ 136.451844][ T9587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.462649][ T9587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.492802][ T9588] device veth1_vlan entered promiscuous mode [ 136.507724][ T9589] device veth1_vlan entered promiscuous mode [ 136.517300][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.526930][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.536874][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.545985][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.554977][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.562531][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.584509][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.611082][ T9590] device veth0_vlan entered promiscuous mode [ 136.624115][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.632225][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.641063][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.650619][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.659416][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.696975][ T9590] device veth1_vlan entered promiscuous mode [ 136.736329][ T9587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.767049][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.780465][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.789949][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.798979][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.806640][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.814345][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.823040][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.834241][ T9592] device veth0_vlan entered promiscuous mode [ 136.851524][ T9591] device veth0_vlan entered promiscuous mode [ 136.865760][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.874951][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.889739][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.898694][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 2020/01/18 21:53:31 executed programs: 6 [ 136.923931][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.939713][ T9592] device veth1_vlan entered promiscuous mode [ 136.956466][ T9591] device veth1_vlan entered promiscuous mode [ 136.968473][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.977355][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.993297][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.001347][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.059879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.076475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.094154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.110403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.151072][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.161817][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.193973][ T9587] device veth0_vlan entered promiscuous mode [ 137.208814][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.240519][ T2740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.300489][ T9587] device veth1_vlan entered promiscuous mode [ 137.363181][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 2020/01/18 21:53:36 executed programs: 177 2020/01/18 21:53:41 executed programs: 346 [ 147.222152][T10566] ================================================================== [ 147.230819][T10566] BUG: KASAN: slab-out-of-bounds in bitmap_ip_test+0xde/0x170 [ 147.238291][T10566] Read of size 8 at addr ffff888096181c80 by task syz-executor.1/10566 [ 147.246547][T10566] [ 147.248890][T10566] CPU: 0 PID: 10566 Comm: syz-executor.1 Not tainted 5.5.0-rc6-syzkaller #0 [ 147.257558][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.267730][T10566] Call Trace: [ 147.271031][T10566] dump_stack+0x197/0x210 [ 147.275386][T10566] ? bitmap_ip_test+0xde/0x170 [ 147.280165][T10566] print_address_description.constprop.0.cold+0xd4/0x30b [ 147.287189][T10566] ? bitmap_ip_test+0xde/0x170 [ 147.291964][T10566] ? bitmap_ip_test+0xde/0x170 [ 147.296844][T10566] __kasan_report.cold+0x1b/0x41 [ 147.301797][T10566] ? bitmap_ip_test+0xde/0x170 [ 147.306574][T10566] kasan_report+0x12/0x20 [ 147.311106][T10566] check_memory_region+0x134/0x1a0 [ 147.316232][T10566] __kasan_check_read+0x11/0x20 [ 147.321150][T10566] bitmap_ip_test+0xde/0x170 [ 147.325876][T10566] bitmap_ip_uadt+0x87a/0xa10 [ 147.330551][T10566] ? bitmap_ip_destroy+0x1d0/0x1d0 [ 147.335674][T10566] ? bitmap_ip_kadt+0x5a0/0x5a0 [ 147.340537][T10566] ? nla_memcpy+0xb0/0xb0 [ 147.344886][T10566] ? ip_set_utest+0x4b0/0x8d0 [ 147.349575][T10566] ? __kasan_check_read+0x11/0x20 [ 147.354765][T10566] ip_set_utest+0x570/0x8d0 [ 147.359281][T10566] ? ip_set_put_byindex+0x490/0x490 [ 147.364493][T10566] ? __mutex_lock+0x458/0x13c0 [ 147.369272][T10566] ? ip_set_put_byindex+0x490/0x490 [ 147.374570][T10566] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 147.379632][T10566] ? nfnetlink_bind+0x2c0/0x2c0 [ 147.384565][T10566] ? find_held_lock+0x35/0x130 [ 147.389333][T10566] ? __local_bh_enable_ip+0x15a/0x270 [ 147.394705][T10566] ? __dev_queue_xmit+0x175c/0x35c0 [ 147.399903][T10566] ? __local_bh_enable_ip+0x15a/0x270 [ 147.405277][T10566] ? lockdep_hardirqs_on+0x421/0x5e0 [ 147.410802][T10566] ? __dev_queue_xmit+0x172e/0x35c0 [ 147.416013][T10566] ? trace_hardirqs_on+0x67/0x240 [ 147.421039][T10566] ? __dev_queue_xmit+0x172e/0x35c0 [ 147.426408][T10566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 147.432648][T10566] ? apparmor_capable+0x497/0x900 [ 147.437674][T10566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 147.443914][T10566] ? __kasan_check_read+0x11/0x20 [ 147.448995][T10566] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 147.454449][T10566] netlink_rcv_skb+0x177/0x450 [ 147.459202][T10566] ? nfnetlink_bind+0x2c0/0x2c0 [ 147.464047][T10566] ? netlink_ack+0xb50/0xb50 [ 147.468666][T10566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 147.474981][T10566] ? ns_capable_common+0x93/0x100 [ 147.480007][T10566] ? ns_capable+0x20/0x30 [ 147.484342][T10566] ? __netlink_ns_capable+0x104/0x140 [ 147.489721][T10566] nfnetlink_rcv+0x1ba/0x460 [ 147.494407][T10566] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 147.499856][T10566] ? netlink_deliver_tap+0x24a/0xbe0 [ 147.505151][T10566] netlink_unicast+0x58c/0x7d0 [ 147.509913][T10566] ? netlink_attachskb+0x870/0x870 [ 147.515014][T10566] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 147.520769][T10566] ? __check_object_size+0x3d/0x437 [ 147.526135][T10566] netlink_sendmsg+0x91c/0xea0 [ 147.530947][T10566] ? netlink_unicast+0x7d0/0x7d0 [ 147.535875][T10566] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 147.541421][T10566] ? apparmor_socket_sendmsg+0x2a/0x30 [ 147.546876][T10566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 147.553120][T10566] ? security_socket_sendmsg+0x8d/0xc0 [ 147.558715][T10566] ? netlink_unicast+0x7d0/0x7d0 [ 147.563770][T10566] sock_sendmsg+0xd7/0x130 [ 147.568221][T10566] ____sys_sendmsg+0x753/0x880 [ 147.573195][T10566] ? kernel_sendmsg+0x50/0x50 [ 147.577889][T10566] ? find_held_lock+0x35/0x130 [ 147.582672][T10566] ___sys_sendmsg+0x100/0x170 [ 147.587410][T10566] ? sendmsg_copy_msghdr+0x70/0x70 [ 147.592623][T10566] ? __kasan_check_read+0x11/0x20 [ 147.597754][T10566] ? __fget+0x37f/0x550 [ 147.601914][T10566] ? ksys_dup3+0x3e0/0x3e0 [ 147.606474][T10566] ? __fget_light+0x1a9/0x230 [ 147.611188][T10566] ? __fdget+0x1b/0x20 [ 147.615272][T10566] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 147.621518][T10566] __sys_sendmsg+0x105/0x1d0 [ 147.626133][T10566] ? __sys_sendmsg_sock+0xc0/0xc0 [ 147.631183][T10566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 147.636736][T10566] ? do_fast_syscall_32+0xd1/0xe16 [ 147.641951][T10566] ? entry_SYSENTER_compat+0x70/0x7f [ 147.647235][T10566] ? do_fast_syscall_32+0xd1/0xe16 [ 147.652365][T10566] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 147.657832][T10566] do_fast_syscall_32+0x27b/0xe16 [ 147.662980][T10566] entry_SYSENTER_compat+0x70/0x7f [ 147.668097][T10566] RIP: 0023:0xf7fa0a39 [ 147.672162][T10566] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 147.691759][T10566] RSP: 002b:00000000f7f9c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 147.700172][T10566] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000180 [ 147.708139][T10566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.716208][T10566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.724249][T10566] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 147.732215][T10566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.740197][T10566] [ 147.742514][T10566] Allocated by task 10566: [ 147.746918][T10566] save_stack+0x23/0x90 [ 147.751071][T10566] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 147.756708][T10566] kasan_kmalloc+0x9/0x10 [ 147.761042][T10566] __kmalloc+0x163/0x770 [ 147.765270][T10566] ip_set_alloc+0x38/0x5e [ 147.769583][T10566] bitmap_ip_create+0x6ec/0xc20 [ 147.774545][T10566] ip_set_create+0x6f1/0x1500 [ 147.779213][T10566] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 147.784318][T10566] netlink_rcv_skb+0x177/0x450 [ 147.789145][T10566] nfnetlink_rcv+0x1ba/0x460 [ 147.793756][T10566] netlink_unicast+0x58c/0x7d0 [ 147.798511][T10566] netlink_sendmsg+0x91c/0xea0 [ 147.803260][T10566] sock_sendmsg+0xd7/0x130 [ 147.807670][T10566] ____sys_sendmsg+0x753/0x880 [ 147.812445][T10566] ___sys_sendmsg+0x100/0x170 [ 147.817124][T10566] __sys_sendmsg+0x105/0x1d0 [ 147.821705][T10566] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 147.827161][T10566] do_fast_syscall_32+0x27b/0xe16 [ 147.832886][T10566] entry_SYSENTER_compat+0x70/0x7f [ 147.837979][T10566] [ 147.840296][T10566] Freed by task 9: [ 147.844019][T10566] save_stack+0x23/0x90 [ 147.848177][T10566] __kasan_slab_free+0x102/0x150 [ 147.853120][T10566] kasan_slab_free+0xe/0x10 [ 147.857618][T10566] kfree+0x10a/0x2c0 [ 147.861514][T10566] shmem_free_in_core_inode+0x97/0xb0 [ 147.866885][T10566] i_callback+0x44/0x80 [ 147.871025][T10566] rcu_core+0x570/0x1540 [ 147.875433][T10566] rcu_core_si+0x9/0x10 [ 147.879583][T10566] __do_softirq+0x262/0x98c [ 147.884426][T10566] [ 147.886746][T10566] The buggy address belongs to the object at ffff888096181c80 [ 147.886746][T10566] which belongs to the cache kmalloc-32 of size 32 [ 147.900788][T10566] The buggy address is located 0 bytes inside of [ 147.900788][T10566] 32-byte region [ffff888096181c80, ffff888096181ca0) [ 147.913932][T10566] The buggy address belongs to the page: [ 147.919569][T10566] page:ffffea0002586040 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff888096181fc1 [ 147.929978][T10566] raw: 00fffe0000000200 ffffea000275d5c8 ffffea0002a3dac8 ffff8880aa4001c0 [ 147.938573][T10566] raw: ffff888096181fc1 ffff888096181000 000000010000003e 0000000000000000 [ 147.947161][T10566] page dumped because: kasan: bad access detected [ 147.954185][T10566] [ 147.956519][T10566] Memory state around the buggy address: [ 147.962191][T10566] ffff888096181b80: fb fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc [ 147.970290][T10566] ffff888096181c00: 00 00 02 fc fc fc fc fc 00 00 05 fc fc fc fc fc [ 147.978362][T10566] >ffff888096181c80: 04 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 147.986423][T10566] ^ [ 147.990496][T10566] ffff888096181d00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 147.998671][T10566] ffff888096181d80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 148.006728][T10566] ================================================================== [ 148.014782][T10566] Disabling lock debugging due to kernel taint [ 148.021009][T10566] Kernel panic - not syncing: panic_on_warn set ... [ 148.027603][T10566] CPU: 0 PID: 10566 Comm: syz-executor.1 Tainted: G B 5.5.0-rc6-syzkaller #0 [ 148.037651][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.047683][T10566] Call Trace: [ 148.050960][T10566] dump_stack+0x197/0x210 [ 148.055276][T10566] panic+0x2e3/0x75c [ 148.059269][T10566] ? add_taint.cold+0x16/0x16 [ 148.064128][T10566] ? retint_kernel+0x2b/0x2b [ 148.068707][T10566] ? trace_hardirqs_on+0x5e/0x240 [ 148.073760][T10566] ? bitmap_ip_test+0xde/0x170 [ 148.078516][T10566] end_report+0x47/0x4f [ 148.082672][T10566] ? bitmap_ip_test+0xde/0x170 [ 148.087437][T10566] __kasan_report.cold+0xe/0x41 [ 148.092307][T10566] ? bitmap_ip_test+0xde/0x170 [ 148.097074][T10566] kasan_report+0x12/0x20 [ 148.101384][T10566] check_memory_region+0x134/0x1a0 [ 148.106484][T10566] __kasan_check_read+0x11/0x20 [ 148.111319][T10566] bitmap_ip_test+0xde/0x170 [ 148.115961][T10566] bitmap_ip_uadt+0x87a/0xa10 [ 148.120750][T10566] ? bitmap_ip_destroy+0x1d0/0x1d0 [ 148.125846][T10566] ? bitmap_ip_kadt+0x5a0/0x5a0 [ 148.130692][T10566] ? nla_memcpy+0xb0/0xb0 [ 148.135028][T10566] ? ip_set_utest+0x4b0/0x8d0 [ 148.139692][T10566] ? __kasan_check_read+0x11/0x20 [ 148.144704][T10566] ip_set_utest+0x570/0x8d0 [ 148.149194][T10566] ? ip_set_put_byindex+0x490/0x490 [ 148.154495][T10566] ? __mutex_lock+0x458/0x13c0 [ 148.160052][T10566] ? ip_set_put_byindex+0x490/0x490 [ 148.165245][T10566] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 148.170172][T10566] ? nfnetlink_bind+0x2c0/0x2c0 [ 148.175009][T10566] ? find_held_lock+0x35/0x130 [ 148.179921][T10566] ? __local_bh_enable_ip+0x15a/0x270 [ 148.185339][T10566] ? __dev_queue_xmit+0x175c/0x35c0 [ 148.190517][T10566] ? __local_bh_enable_ip+0x15a/0x270 [ 148.195919][T10566] ? lockdep_hardirqs_on+0x421/0x5e0 [ 148.201206][T10566] ? __dev_queue_xmit+0x172e/0x35c0 [ 148.206644][T10566] ? trace_hardirqs_on+0x67/0x240 [ 148.211777][T10566] ? __dev_queue_xmit+0x172e/0x35c0 [ 148.216959][T10566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 148.223230][T10566] ? apparmor_capable+0x497/0x900 [ 148.228243][T10566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 148.234472][T10566] ? __kasan_check_read+0x11/0x20 [ 148.239485][T10566] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 148.244974][T10566] netlink_rcv_skb+0x177/0x450 [ 148.249729][T10566] ? nfnetlink_bind+0x2c0/0x2c0 [ 148.254563][T10566] ? netlink_ack+0xb50/0xb50 [ 148.259753][T10566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 148.266038][T10566] ? ns_capable_common+0x93/0x100 [ 148.271073][T10566] ? ns_capable+0x20/0x30 [ 148.275394][T10566] ? __netlink_ns_capable+0x104/0x140 [ 148.280766][T10566] nfnetlink_rcv+0x1ba/0x460 [ 148.285345][T10566] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 148.290808][T10566] ? netlink_deliver_tap+0x24a/0xbe0 [ 148.296084][T10566] netlink_unicast+0x58c/0x7d0 [ 148.300842][T10566] ? netlink_attachskb+0x870/0x870 [ 148.305951][T10566] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 148.311690][T10566] ? __check_object_size+0x3d/0x437 [ 148.316979][T10566] netlink_sendmsg+0x91c/0xea0 [ 148.321726][T10566] ? netlink_unicast+0x7d0/0x7d0 [ 148.326659][T10566] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 148.332295][T10566] ? apparmor_socket_sendmsg+0x2a/0x30 [ 148.337750][T10566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 148.343978][T10566] ? security_socket_sendmsg+0x8d/0xc0 [ 148.349439][T10566] ? netlink_unicast+0x7d0/0x7d0 [ 148.354485][T10566] sock_sendmsg+0xd7/0x130 [ 148.358899][T10566] ____sys_sendmsg+0x753/0x880 [ 148.363655][T10566] ? kernel_sendmsg+0x50/0x50 [ 148.368319][T10566] ? find_held_lock+0x35/0x130 [ 148.373109][T10566] ___sys_sendmsg+0x100/0x170 [ 148.377779][T10566] ? sendmsg_copy_msghdr+0x70/0x70 [ 148.382873][T10566] ? __kasan_check_read+0x11/0x20 [ 148.387882][T10566] ? __fget+0x37f/0x550 [ 148.392043][T10566] ? ksys_dup3+0x3e0/0x3e0 [ 148.396444][T10566] ? __fget_light+0x1a9/0x230 [ 148.401329][T10566] ? __fdget+0x1b/0x20 [ 148.405400][T10566] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 148.411642][T10566] __sys_sendmsg+0x105/0x1d0 [ 148.416228][T10566] ? __sys_sendmsg_sock+0xc0/0xc0 [ 148.421246][T10566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 148.426702][T10566] ? do_fast_syscall_32+0xd1/0xe16 [ 148.431812][T10566] ? entry_SYSENTER_compat+0x70/0x7f [ 148.437138][T10566] ? do_fast_syscall_32+0xd1/0xe16 [ 148.442238][T10566] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 148.447722][T10566] do_fast_syscall_32+0x27b/0xe16 [ 148.457170][T10566] entry_SYSENTER_compat+0x70/0x7f [ 148.462362][T10566] RIP: 0023:0xf7fa0a39 [ 148.466551][T10566] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 148.486143][T10566] RSP: 002b:00000000f7f9c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 148.494561][T10566] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000180 [ 148.502520][T10566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.510477][T10566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.518435][T10566] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 148.526395][T10566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.535879][T10566] Kernel Offset: disabled [ 148.540261][T10566] Rebooting in 86400 seconds..