Warning: Permanently added '[localhost]:64297' (ECDSA) to the list of known hosts. 2020/06/10 21:25:15 parsed 1 programs 2020/06/10 21:25:17 executed programs: 0 syzkaller login: [ 1058.564837][ T9285] IPVS: ftp: loaded support on port[0] = 21 [ 1058.564777][ T9288] IPVS: ftp: loaded support on port[0] = 21 [ 1058.564803][ T9287] IPVS: ftp: loaded support on port[0] = 21 [ 1058.564804][ T9286] IPVS: ftp: loaded support on port[0] = 21 [ 1059.160187][ T9286] chnl_net:caif_netlink_parms(): no params data found [ 1059.225399][ T9285] chnl_net:caif_netlink_parms(): no params data found [ 1059.296463][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 1059.320703][ T9287] chnl_net:caif_netlink_parms(): no params data found [ 1059.526978][ T9285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.555878][ T9285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.616513][ T9285] device bridge_slave_0 entered promiscuous mode [ 1059.706490][ T9285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.739480][ T9285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.769064][ T9285] device bridge_slave_1 entered promiscuous mode [ 1059.897794][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.915313][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.941079][ T9286] device bridge_slave_0 entered promiscuous mode [ 1059.958076][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.977323][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.997071][ T9288] device bridge_slave_0 entered promiscuous mode [ 1060.017276][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.036860][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.058531][ T9287] device bridge_slave_0 entered promiscuous mode [ 1060.090646][ T9285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.120638][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.139822][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.161205][ T9286] device bridge_slave_1 entered promiscuous mode [ 1060.180890][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.199496][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.220772][ T9288] device bridge_slave_1 entered promiscuous mode [ 1060.238168][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.256797][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.277748][ T9287] device bridge_slave_1 entered promiscuous mode [ 1060.300406][ T9285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.402027][ T9286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.424197][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.447057][ T9287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.477971][ T9285] team0: Port device team_slave_0 added [ 1060.493069][ T9286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.521337][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.551953][ T9287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.596157][ T9285] team0: Port device team_slave_1 added [ 1060.671551][ T9286] team0: Port device team_slave_0 added [ 1060.700094][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.728168][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.872004][ T9285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.952819][ T9288] team0: Port device team_slave_0 added [ 1061.006977][ T9287] team0: Port device team_slave_0 added [ 1061.038639][ T9286] team0: Port device team_slave_1 added [ 1061.075803][ T9285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.101810][ T9285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.157279][ T9285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.185898][ T9288] team0: Port device team_slave_1 added [ 1061.204230][ T9287] team0: Port device team_slave_1 added [ 1061.222625][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.236064][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.289514][ T9286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.339386][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.354069][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.409565][ T9286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.432113][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.445015][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.506319][ T9288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.542602][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.559770][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.611630][ T9287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.655806][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.670687][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.729140][ T9287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.764001][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.778676][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.850043][ T9288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.951132][ T9285] device hsr_slave_0 entered promiscuous mode [ 1062.058545][ T9285] device hsr_slave_1 entered promiscuous mode [ 1062.238233][ T9286] device hsr_slave_0 entered promiscuous mode [ 1062.305361][ T9286] device hsr_slave_1 entered promiscuous mode [ 1062.355250][ T9286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.373129][ T9286] Cannot create hsr debugfs directory [ 1062.427431][ T9287] device hsr_slave_0 entered promiscuous mode [ 1062.485180][ T9287] device hsr_slave_1 entered promiscuous mode [ 1062.545065][ T9287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.581581][ T9287] Cannot create hsr debugfs directory [ 1062.738430][ T9288] device hsr_slave_0 entered promiscuous mode [ 1062.805281][ T9288] device hsr_slave_1 entered promiscuous mode [ 1062.895090][ T9288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.931071][ T9288] Cannot create hsr debugfs directory [ 1063.463647][ T9285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1063.656230][ T9285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1063.763310][ T9285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1063.851653][ T9285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1063.956964][ T9287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1064.039711][ T9287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1064.154295][ T9287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1064.240934][ T9287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1064.410578][ T9286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1064.519662][ T9286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1064.654008][ T9286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1064.767899][ T9286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1064.905220][ T9288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1064.987115][ T9288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1065.110609][ T9288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1065.217377][ T9288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1065.433632][ T9287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.515903][ T9285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.539343][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1065.565193][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1065.603135][ T9287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.651414][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1065.680391][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1065.715522][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.744243][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.788100][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1065.837771][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1065.869754][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1065.900114][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1065.927410][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1065.952032][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.968916][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.000375][ T9285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.025804][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.050839][ T9286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.079842][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1066.099620][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1066.120178][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1066.136928][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.150413][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.181471][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1066.229475][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1066.277447][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1066.320020][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1066.350432][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1066.382094][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1066.415116][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.437191][ T9289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.460460][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.486855][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1066.506131][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1066.525928][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1066.540578][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1066.555661][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.571438][ T9289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.583238][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1066.596491][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1066.612390][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.624196][ T9289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.637924][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1066.654088][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1066.667714][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1066.683067][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1066.702362][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1066.715359][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1066.738237][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.760686][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1066.773336][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1066.783751][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1066.796923][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1066.808139][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1066.819037][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.829360][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.852714][ T9287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.869190][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1066.879143][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1066.889929][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1066.908497][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1066.921988][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1066.936431][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1066.947738][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1066.959728][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1066.971292][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1066.982379][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.995282][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.006144][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1067.018412][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1067.031942][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1067.054990][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1067.065939][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1067.077071][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1067.087887][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1067.098800][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1067.110407][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1067.129272][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1067.140325][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1067.156867][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1067.173863][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1067.195997][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1067.219196][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1067.239983][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1067.252568][ T9313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1067.286790][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1067.298990][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1067.315422][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1067.327630][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1067.338099][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1067.347590][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1067.369624][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1067.382283][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1067.393535][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1067.404358][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1067.415519][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1067.426536][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1067.443838][ T9288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1067.477258][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1067.506059][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1067.527223][ T9285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1067.551732][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.573506][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1067.593702][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1067.645631][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1067.656345][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1067.666855][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1067.676648][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1067.699487][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.725292][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1067.741802][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1067.765411][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.785747][ T9285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.796402][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1067.810775][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1067.856821][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1067.867879][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1067.881273][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1067.893622][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1067.908005][ T9287] device veth0_vlan entered promiscuous mode [ 1067.919193][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1067.930204][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1067.965018][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1067.980024][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1067.995388][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1068.013069][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1068.030706][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1068.042676][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1068.061287][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1068.077095][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1068.089587][ T9286] device veth0_vlan entered promiscuous mode [ 1068.107550][ T9285] device veth0_vlan entered promiscuous mode [ 1068.117131][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1068.127931][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1068.139699][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1068.151200][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1068.166848][ T9287] device veth1_vlan entered promiscuous mode [ 1068.202574][ T9286] device veth1_vlan entered promiscuous mode [ 1068.219177][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1068.234634][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1068.250702][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1068.269505][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1068.284467][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1068.301551][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1068.314201][ T9289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1068.331362][ T9285] device veth1_vlan entered promiscuous mode [ 1068.348155][ T9288] device veth0_vlan entered promiscuous mode [ 1068.376669][ T9288] device veth1_vlan entered promiscuous mode [ 1068.410111][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1068.422880][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1068.435810][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1068.449681][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1068.462662][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1068.480520][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.496476][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.509370][ T9287] device veth0_macvtap entered promiscuous mode [ 1068.535909][ T9287] device veth1_macvtap entered promiscuous mode [ 1068.563326][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1068.582020][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1068.598287][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.612956][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.631947][ T9286] device veth0_macvtap entered promiscuous mode [ 1068.648384][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1068.666289][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.684234][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.709237][ T9285] device veth0_macvtap entered promiscuous mode [ 1068.723779][ T9286] device veth1_macvtap entered promiscuous mode [ 1068.735796][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1068.750472][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1068.767677][ T9288] device veth0_macvtap entered promiscuous mode [ 1068.787245][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.805248][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.821663][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1068.844204][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.873607][ T9285] device veth1_macvtap entered promiscuous mode [ 1068.891223][ T9288] device veth1_macvtap entered promiscuous mode [ 1068.908377][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1068.928359][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1068.945341][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1068.976541][ T9286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1069.000131][ T9286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.026868][ T9286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.049863][ T9286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.074484][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1069.105278][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.140683][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.176751][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1069.197456][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1069.217266][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1069.240053][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1069.274312][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1069.309079][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1069.487109][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1069.512963][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.536553][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1069.561803][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.590515][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.628009][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1069.655732][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.679011][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1069.703939][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.725670][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1069.747082][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.769949][ T9285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.796887][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1069.822462][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1069.845980][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1069.864022][ T9314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1069.886088][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1069.904680][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.926968][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1069.943554][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.963324][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.980466][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1069.996068][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.018960][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1070.042215][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.059553][ T9285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1070.074517][ T9285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.102417][ T9285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.213950][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1070.243797][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1070.262230][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1070.281468][ T9293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1070.601178][ T9286] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation 2020/06/10 21:25:30 executed programs: 4 [ 1074.926108][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.956830][ T9458] device bridge_slave_0 left promiscuous mode [ 1074.974679][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.119747][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.204115][ T9464] device bridge_slave_0 left promiscuous mode [ 1075.257736][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.415423][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.513900][ T9474] device bridge_slave_0 left promiscuous mode [ 1075.554098][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.667693][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.738206][ T9476] device bridge_slave_0 left promiscuous mode [ 1075.760718][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.230531][ T9481] bond0: (slave bond_slave_0): Releasing backup interface 2020/06/10 21:25:35 executed programs: 35 [ 1076.468466][ T9486] bond0: (slave bond_slave_1): Releasing backup interface [ 1076.629162][ T9491] bond0: (slave bond_slave_1): Releasing backup interface [ 1076.746434][ T9490] bond0: (slave bond_slave_1): Releasing backup interface [ 1077.194402][ T9501] bond0: (slave bond_slave_1): Releasing backup interface [ 1077.428509][ T9505] team0: Port device team_slave_1 removed [ 1077.549252][ T9508] team0: Port device team_slave_1 removed [ 1077.681757][ T9513] team0: Port device team_slave_1 removed [ 1078.082588][ T9521] team0: Port device team_slave_1 removed [ 1078.185522][ T9525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.295555][ T9525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.339730][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.413558][ T9527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.453418][ T9532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.537830][ T9532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.875951][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.963535][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.142576][ T9547] device hsr_slave_1 left promiscuous mode [ 1079.294612][ T9549] device hsr_slave_1 left promiscuous mode [ 1079.397652][ T9555] device hsr_slave_0 left promiscuous mode [ 1079.466445][ T9555] device hsr_slave_1 left promiscuous mode [ 1079.974234][ T9564] device hsr_slave_1 left promiscuous mode 2020/06/10 21:25:41 executed programs: 55 [ 1082.230768][ T9616] device veth0_macvtap left promiscuous mode [ 1082.627500][ T9630] device veth1_macvtap left promiscuous mode [ 1083.045673][ T9647] device veth0_macvtap left promiscuous mode 2020/06/10 21:25:46 executed programs: 101 [ 1090.058463][ T9978] ================================================================== [ 1090.064795][ T9978] BUG: KASAN: use-after-free in free_netdev+0x41f/0x4a0 [ 1090.064795][ T9978] Read of size 8 at addr ffff888026c226f8 by task syz-executor.0/9978 [ 1090.064795][ T9978] [ 1090.064795][ T9978] CPU: 3 PID: 9978 Comm: syz-executor.0 Not tainted 5.7.0-syzkaller #0 [ 1090.064795][ T9978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 1090.064795][ T9978] Call Trace: [ 1090.064795][ T9978] dump_stack+0x188/0x20d [ 1090.064795][ T9978] ? free_netdev+0x41f/0x4a0 [ 1090.064795][ T9978] ? free_netdev+0x41f/0x4a0 [ 1090.064795][ T9978] print_address_description.constprop.0.cold+0xd3/0x413 [ 1090.064795][ T9978] ? vprintk_func+0x97/0x1a6 [ 1090.064795][ T9978] ? free_netdev+0x41f/0x4a0 [ 1090.064795][ T9978] kasan_report.cold+0x1f/0x37 [ 1090.064795][ T9978] ? free_netdev+0x41f/0x4a0 [ 1090.064795][ T9978] free_netdev+0x41f/0x4a0 [ 1090.064795][ T9978] netdev_run_todo+0x5fc/0x760 [ 1090.064795][ T9978] ? register_netdev+0x50/0x50 [ 1090.064795][ T9978] ? rtnl_fdb_get+0xf60/0xf60 [ 1090.064795][ T9978] rtnetlink_rcv_msg+0x45b/0xad0 [ 1090.064795][ T9978] ? rtnl_bridge_getlink+0x870/0x870 [ 1090.064795][ T9978] ? lock_acquire+0x1f2/0x8f0 [ 1090.064795][ T9978] ? netlink_deliver_tap+0x146/0xb50 [ 1090.064795][ T9978] netlink_rcv_skb+0x15a/0x430 [ 1090.064795][ T9978] ? rtnl_bridge_getlink+0x870/0x870 [ 1090.064795][ T9978] ? netlink_ack+0xa60/0xa60 [ 1090.064795][ T9978] netlink_unicast+0x537/0x740 [ 1090.064795][ T9978] ? netlink_attachskb+0x810/0x810 [ 1090.064795][ T9978] ? _copy_from_iter_full+0x25c/0x870 [ 1090.064795][ T9978] ? __phys_addr_symbol+0x2c/0x70 [ 1090.064795][ T9978] ? __check_object_size+0x171/0x437 [ 1090.064795][ T9978] netlink_sendmsg+0x882/0xe10 [ 1090.064795][ T9978] ? aa_af_perm+0x260/0x260 [ 1090.064795][ T9978] ? netlink_unicast+0x740/0x740 [ 1090.064795][ T9978] ? netlink_unicast+0x740/0x740 [ 1090.064795][ T9978] sock_sendmsg+0xcf/0x120 [ 1090.064795][ T9978] ____sys_sendmsg+0x6e6/0x810 [ 1090.495254][ T9978] ? get_compat_msghdr+0xd1/0x120 [ 1090.495254][ T9978] ? kernel_sendmsg+0x50/0x50 [ 1090.495254][ T9978] ___sys_sendmsg+0x100/0x170 [ 1090.495254][ T9978] ? debug_smp_processor_id+0x2f/0x185 [ 1090.495254][ T9978] ? sendmsg_copy_msghdr+0x70/0x70 [ 1090.495254][ T9978] ? __fget_files+0x32f/0x500 [ 1090.495254][ T9978] ? ksys_dup3+0x3c0/0x3c0 [ 1090.495254][ T9978] ? __fget_light+0x20e/0x270 [ 1090.495254][ T9978] __sys_sendmsg+0xe5/0x1b0 [ 1090.495254][ T9978] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1090.495254][ T9978] ? do_fast_syscall_32+0xcc/0xe90 [ 1090.495254][ T9978] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1090.495254][ T9978] do_fast_syscall_32+0x270/0xe90 [ 1090.495254][ T9978] entry_SYSENTER_compat+0x70/0x7f [ 1090.495254][ T9978] [ 1090.495254][ T9978] Allocated by task 9967: [ 1090.495254][ T9978] save_stack+0x1b/0x40 [ 1090.495254][ T9978] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1090.495254][ T9978] __kmalloc+0x161/0x7a0 [ 1090.495254][ T9978] sk_prot_alloc+0x223/0x2f0 [ 1090.495254][ T9978] sk_alloc+0x36/0x1100 [ 1090.495254][ T9978] tun_chr_open+0x7b/0x550 [ 1090.495254][ T9978] misc_open+0x372/0x4a0 [ 1090.495254][ T9978] chrdev_open+0x219/0x5c0 [ 1090.495254][ T9978] do_dentry_open+0x546/0x1340 [ 1090.495254][ T9978] path_openat+0x1e59/0x27d0 [ 1090.495254][ T9978] do_filp_open+0x192/0x260 [ 1090.495254][ T9978] do_sys_openat2+0x585/0x7d0 [ 1090.495254][ T9978] do_sys_open+0xc3/0x140 [ 1090.495254][ T9978] do_fast_syscall_32+0x270/0xe90 [ 1090.495254][ T9978] entry_SYSENTER_compat+0x70/0x7f [ 1090.495254][ T9978] [ 1090.495254][ T9978] Freed by task 9963: [ 1090.814929][ T9978] save_stack+0x1b/0x40 [ 1090.814929][ T9978] __kasan_slab_free+0xf7/0x140 [ 1090.814929][ T9978] kfree+0x109/0x2b0 [ 1090.814929][ T9978] __sk_destruct+0x5ad/0x7c0 [ 1090.814929][ T9978] sk_destruct+0xc6/0x100 [ 1090.814929][ T9978] __sk_free+0xef/0x3d0 [ 1090.814929][ T9978] sk_free+0x78/0xa0 [ 1090.814929][ T9978] __tun_detach+0xbc3/0x1110 [ 1090.814929][ T9978] tun_chr_close+0x10e/0x180 [ 1090.814929][ T9978] __fput+0x33e/0x880 [ 1090.814929][ T9978] task_work_run+0xf4/0x1b0 [ 1090.814929][ T9978] exit_to_usermode_loop+0x2fa/0x360 [ 1090.814929][ T9978] do_fast_syscall_32+0xbef/0xe90 [ 1090.814929][ T9978] entry_SYSENTER_compat+0x70/0x7f [ 1090.814929][ T9978] [ 1090.814929][ T9978] The buggy address belongs to the object at ffff888026c22000 [ 1090.814929][ T9978] which belongs to the cache kmalloc-4k of size 4096 [ 1090.814929][ T9978] The buggy address is located 1784 bytes inside of [ 1090.814929][ T9978] 4096-byte region [ffff888026c22000, ffff888026c23000) [ 1090.814929][ T9978] The buggy address belongs to the page: [ 1090.814929][ T9978] page:ffffea00009b0880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea00009b0880 order:1 compound_mapcount:0 [ 1090.814929][ T9978] flags: 0xfffe0000010200(slab|head) [ 1090.814929][ T9978] raw: 00fffe0000010200 ffffea000044d808 ffffea000079a908 ffff88802c802000 [ 1090.814929][ T9978] raw: 0000000000000000 ffff888026c22000 0000000100000001 0000000000000000 [ 1090.814929][ T9978] page dumped because: kasan: bad access detected [ 1090.814929][ T9978] [ 1090.814929][ T9978] Memory state around the buggy address: [ 1090.814929][ T9978] ffff888026c22580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1090.814929][ T9978] ffff888026c22600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1090.814929][ T9978] >ffff888026c22680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1090.814929][ T9978] ^ [ 1090.814929][ T9978] ffff888026c22700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1090.814929][ T9978] ffff888026c22780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1090.814929][ T9978] ================================================================== [ 1090.814929][ T9978] Disabling lock debugging due to kernel taint [ 1091.320704][ T0] NOHZ: local_softirq_pending 08 [ 1091.331547][ T9978] Kernel panic - not syncing: panic_on_warn set ... [ 1091.380846][ T9978] CPU: 3 PID: 9978 Comm: syz-executor.0 Tainted: G B 5.7.0-syzkaller #0 [ 1091.395199][ T9978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 1091.395199][ T9978] Call Trace: [ 1091.395199][ T9978] dump_stack+0x188/0x20d [ 1091.395199][ T9978] ? free_netdev+0x340/0x4a0 [ 1091.395199][ T9978] panic+0x2e3/0x75c [ 1091.395199][ T9978] ? add_taint.cold+0x16/0x16 [ 1091.395199][ T9978] ? preempt_schedule_common+0x5e/0xc0 [ 1091.395199][ T9978] ? free_netdev+0x41f/0x4a0 [ 1091.395199][ T9978] ? free_netdev+0x41f/0x4a0 [ 1091.395199][ T9978] ? preempt_schedule_thunk+0x16/0x18 [ 1091.395199][ T9978] ? trace_hardirqs_on+0x55/0x230 [ 1091.395199][ T9978] ? free_netdev+0x41f/0x4a0 [ 1091.395199][ T9978] ? free_netdev+0x41f/0x4a0 [ 1091.395199][ T9978] end_report+0x4d/0x53 [ 1091.395199][ T9978] kasan_report.cold+0xd/0x37 [ 1091.395199][ T9978] ? free_netdev+0x41f/0x4a0 [ 1091.395199][ T9978] free_netdev+0x41f/0x4a0 [ 1091.395199][ T9978] netdev_run_todo+0x5fc/0x760 [ 1091.395199][ T9978] ? register_netdev+0x50/0x50 [ 1091.395199][ T9978] ? rtnl_fdb_get+0xf60/0xf60 [ 1091.395199][ T9978] rtnetlink_rcv_msg+0x45b/0xad0 [ 1091.395199][ T9978] ? rtnl_bridge_getlink+0x870/0x870 [ 1091.395199][ T9978] ? lock_acquire+0x1f2/0x8f0 [ 1091.395199][ T9978] ? netlink_deliver_tap+0x146/0xb50 [ 1091.395199][ T9978] netlink_rcv_skb+0x15a/0x430 [ 1091.395199][ T9978] ? rtnl_bridge_getlink+0x870/0x870 [ 1091.395199][ T9978] ? netlink_ack+0xa60/0xa60 [ 1091.395199][ T9978] netlink_unicast+0x537/0x740 [ 1091.395199][ T9978] ? netlink_attachskb+0x810/0x810 [ 1091.395199][ T9978] ? _copy_from_iter_full+0x25c/0x870 [ 1091.395199][ T9978] ? __phys_addr_symbol+0x2c/0x70 [ 1091.395199][ T9978] ? __check_object_size+0x171/0x437 [ 1091.395199][ T9978] netlink_sendmsg+0x882/0xe10 [ 1091.395199][ T9978] ? aa_af_perm+0x260/0x260 [ 1091.395199][ T9978] ? netlink_unicast+0x740/0x740 [ 1091.395199][ T9978] ? netlink_unicast+0x740/0x740 [ 1091.395199][ T9978] sock_sendmsg+0xcf/0x120 [ 1091.395199][ T9978] ____sys_sendmsg+0x6e6/0x810 [ 1091.395199][ T9978] ? get_compat_msghdr+0xd1/0x120 [ 1091.395199][ T9978] ? kernel_sendmsg+0x50/0x50 [ 1091.395199][ T9978] ___sys_sendmsg+0x100/0x170 [ 1091.395199][ T9978] ? debug_smp_processor_id+0x2f/0x185 [ 1091.395199][ T9978] ? sendmsg_copy_msghdr+0x70/0x70 [ 1091.395199][ T9978] ? __fget_files+0x32f/0x500 [ 1091.395199][ T9978] ? ksys_dup3+0x3c0/0x3c0 [ 1091.395199][ T9978] ? __fget_light+0x20e/0x270 [ 1091.395199][ T9978] __sys_sendmsg+0xe5/0x1b0 [ 1091.395199][ T9978] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1091.395199][ T9978] ? do_fast_syscall_32+0xcc/0xe90 [ 1091.395199][ T9978] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1091.395199][ T9978] do_fast_syscall_32+0x270/0xe90 [ 1091.395199][ T9978] entry_SYSENTER_compat+0x70/0x7f [ 1091.395199][ T9978] Kernel Offset: disabled [ 1091.395199][ T9978] Rebooting in 86400 seconds..