DUID 00:04:ed:8e:b4:7f:69:d0:36:4f:6f:71:36:4b:ac:75:5c:50 forked to background, child pid 3174 [ 21.851858][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.864328][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.141' (ECDSA) to the list of known hosts. syzkaller login: [ 42.226784][ T3602] chnl_net:caif_netlink_parms(): no params data found [ 42.241451][ T3601] chnl_net:caif_netlink_parms(): no params data found [ 42.333228][ T3599] chnl_net:caif_netlink_parms(): no params data found [ 42.343923][ T3600] chnl_net:caif_netlink_parms(): no params data found [ 42.385807][ T3598] chnl_net:caif_netlink_parms(): no params data found [ 42.413726][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.420915][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.429097][ T3602] device bridge_slave_0 entered promiscuous mode [ 42.455938][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.463938][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.471593][ T3601] device bridge_slave_0 entered promiscuous mode [ 42.478891][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.485948][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.493927][ T3602] device bridge_slave_1 entered promiscuous mode [ 42.516627][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.523708][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.531758][ T3601] device bridge_slave_1 entered promiscuous mode [ 42.546664][ T3597] chnl_net:caif_netlink_parms(): no params data found [ 42.579137][ T3601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.589698][ T3602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.602434][ T3602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.625478][ T3601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.655866][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.663065][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.671196][ T3599] device bridge_slave_0 entered promiscuous mode [ 42.693051][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.700331][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.708089][ T3600] device bridge_slave_0 entered promiscuous mode [ 42.718496][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.725571][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.733287][ T3599] device bridge_slave_1 entered promiscuous mode [ 42.745929][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.753121][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.760750][ T3598] device bridge_slave_0 entered promiscuous mode [ 42.768259][ T3602] team0: Port device team_slave_0 added [ 42.774112][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.781483][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.789077][ T3600] device bridge_slave_1 entered promiscuous mode [ 42.804473][ T3601] team0: Port device team_slave_0 added [ 42.811203][ T3602] team0: Port device team_slave_1 added [ 42.817202][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.824264][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.831915][ T3598] device bridge_slave_1 entered promiscuous mode [ 42.850577][ T3601] team0: Port device team_slave_1 added [ 42.879515][ T3599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.899440][ T3598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.909743][ T3600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.925537][ T3599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.940155][ T3602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.947145][ T3602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.973214][ T3602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.985225][ T3598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.995418][ T3600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.004676][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.011874][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.019534][ T3597] device bridge_slave_0 entered promiscuous mode [ 43.031498][ T3601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.038691][ T3601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.064898][ T3601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.075882][ T3602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.082913][ T3602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.108807][ T3602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.130085][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.137576][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.145100][ T3597] device bridge_slave_1 entered promiscuous mode [ 43.156662][ T3601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.163607][ T3601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.189721][ T3601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.211268][ T3600] team0: Port device team_slave_0 added [ 43.222051][ T3599] team0: Port device team_slave_0 added [ 43.235002][ T3598] team0: Port device team_slave_0 added [ 43.244802][ T3600] team0: Port device team_slave_1 added [ 43.256639][ T3599] team0: Port device team_slave_1 added [ 43.271271][ T3598] team0: Port device team_slave_1 added [ 43.282371][ T3597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.302718][ T3602] device hsr_slave_0 entered promiscuous mode [ 43.309346][ T3602] device hsr_slave_1 entered promiscuous mode [ 43.326276][ T3597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.342000][ T3601] device hsr_slave_0 entered promiscuous mode [ 43.348566][ T3601] device hsr_slave_1 entered promiscuous mode [ 43.354849][ T3601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.362889][ T3601] Cannot create hsr debugfs directory [ 43.374362][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.381506][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.407630][ T3600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.422055][ T3599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.429311][ T3599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.455387][ T3599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.478830][ T3598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.485777][ T3598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.511699][ T3598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.527764][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.534714][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.561291][ T3600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.572527][ T3599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.579592][ T3599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.605647][ T3599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.626531][ T3598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.633488][ T3598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.659773][ T3598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.671336][ T3597] team0: Port device team_slave_0 added [ 43.704808][ T3597] team0: Port device team_slave_1 added [ 43.737372][ T3600] device hsr_slave_0 entered promiscuous mode [ 43.744132][ T3600] device hsr_slave_1 entered promiscuous mode [ 43.750739][ T3600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.758553][ T3600] Cannot create hsr debugfs directory [ 43.766500][ T3599] device hsr_slave_0 entered promiscuous mode [ 43.772933][ T3599] device hsr_slave_1 entered promiscuous mode [ 43.779428][ T3599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.787025][ T3599] Cannot create hsr debugfs directory [ 43.810719][ T3598] device hsr_slave_0 entered promiscuous mode [ 43.817388][ T3598] device hsr_slave_1 entered promiscuous mode [ 43.823741][ T3598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.831353][ T3598] Cannot create hsr debugfs directory [ 43.846898][ T3597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.853840][ T3597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.879819][ T3597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.912399][ T3597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.919433][ T3597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.945361][ T3597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.008691][ T3597] device hsr_slave_0 entered promiscuous mode [ 44.015119][ T3597] device hsr_slave_1 entered promiscuous mode [ 44.022080][ T3597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.029979][ T3597] Cannot create hsr debugfs directory [ 44.124707][ T3602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.150192][ T3602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.171820][ T3602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.192702][ T3602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.229603][ T3601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.237823][ T3601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.248222][ T3601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.267625][ T3601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.299129][ T3599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.316881][ T3599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.325298][ T3599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.335671][ T3599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.360914][ T3600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.369225][ T3600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.385818][ T3600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.417616][ T3600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.453246][ T3598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.466929][ T3602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.487222][ T3601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.493974][ T3598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.505517][ T3598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.514231][ T3598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.539518][ T3597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.548199][ T3597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.561372][ T3601] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.569498][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.578473][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.585944][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.593647][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.603568][ T3602] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.613671][ T3597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.622836][ T3597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.665807][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.674977][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.683742][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.690813][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.698409][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.706967][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.715238][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.722312][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.729910][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.738647][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.747241][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.754267][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.761974][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.775594][ T3599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.819226][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.827410][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.835115][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.844189][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.853289][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.860447][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.868296][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.876780][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.885048][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.893401][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.902201][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.910559][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.918972][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.927724][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.935969][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.944327][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.952757][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.962043][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.969946][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.984194][ T3599] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.005581][ T3602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.017679][ T3602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.034978][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.042771][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.050600][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.059128][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.067550][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.075660][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.083917][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.092854][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.101344][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.109697][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.118539][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.127596][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.153444][ T3600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.167868][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.179040][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.187656][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.194683][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.203235][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.211706][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.220279][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.227368][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.234915][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.242580][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.250125][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.263816][ T3598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.278850][ T3600] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.289785][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.298036][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.305408][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.313161][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.321853][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.330240][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.337329][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.344992][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.362186][ T3602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.372484][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.381248][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.389966][ T1565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.398734][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.405765][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.416158][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.424531][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.442046][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.449756][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.458697][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.466353][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.474823][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.486495][ T3601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.504985][ T3598] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.523375][ T3602] device veth0_vlan entered promiscuous mode [ 45.530452][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.539682][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.547676][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.555956][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.564412][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.572936][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.581214][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.591689][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.599425][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.607162][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.615298][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.626213][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.634635][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.643230][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.650321][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.665907][ T3600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.676782][ T3600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.699313][ T3599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.710427][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.720430][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.728654][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.737449][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.745829][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.754290][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.762891][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.771382][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.779938][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.788438][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.796715][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.804759][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.813162][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.834286][ T3602] device veth1_vlan entered promiscuous mode [ 45.848373][ T3600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.861170][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.869183][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.877978][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.885376][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.893900][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.903328][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.911595][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.919764][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.927358][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.943114][ T3597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.954150][ T3601] device veth0_vlan entered promiscuous mode [ 45.962102][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.971105][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.978753][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.987828][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.996451][ T3635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.004732][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.011829][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.026476][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.035203][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.051568][ T3597] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.064599][ T3602] device veth0_macvtap entered promiscuous mode [ 46.078903][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.086698][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.094166][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.103025][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.110812][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.120297][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.128736][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.138482][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.146832][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.155105][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.163807][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.172181][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.180740][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.188747][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.199841][ T3601] device veth1_vlan entered promiscuous mode [ 46.219204][ T3602] device veth1_macvtap entered promiscuous mode [ 46.228155][ T3599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.235291][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.244457][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.252828][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.261577][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.269981][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.277071][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.284588][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.293267][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.303164][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.310946][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.319152][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.332038][ T3598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.351862][ T3602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.367945][ T3600] device veth0_vlan entered promiscuous mode [ 46.374295][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.382585][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.390613][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.398968][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.407104][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.415367][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.424067][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.432493][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.440907][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.447962][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.455465][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.464437][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.478523][ T3602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.502847][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.511772][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.520588][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.529209][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.537871][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.546277][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.554568][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.562862][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.573216][ T3602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.585054][ T3602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.594078][ T3602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.602925][ T3602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.615875][ T3600] device veth1_vlan entered promiscuous mode [ 46.625222][ T3599] device veth0_vlan entered promiscuous mode [ 46.633286][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.640971][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.648703][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.657354][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.666165][ T3601] device veth0_macvtap entered promiscuous mode [ 46.674856][ T3601] device veth1_macvtap entered promiscuous mode [ 46.692451][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.700370][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.708406][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.716091][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.724441][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.733187][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.740718][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.770268][ T3599] device veth1_vlan entered promiscuous mode [ 46.783404][ T3601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.794830][ T3601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.805666][ T3601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.817270][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.825169][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.833353][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.842327][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.850706][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.859134][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.868101][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.876592][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.885691][ T3600] device veth0_macvtap entered promiscuous mode [ 46.898627][ T3600] device veth1_macvtap entered promiscuous mode [ 46.910275][ T3597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network executing program [ 46.922314][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.931338][ T3598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.946812][ T3601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.959487][ T3601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.971225][ T3601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.981308][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.989472][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.998088][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.006443][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.014589][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.023209][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.039304][ T3640] ================================================================== [ 47.047386][ T3640] BUG: KASAN: use-after-free in vxlan_vnifilter_dump_dev+0x9a0/0xb40 [ 47.055440][ T3640] Read of size 4 at addr ffff888077388e70 by task syz-executor404/3640 [ 47.063658][ T3640] [ 47.065962][ T3640] CPU: 1 PID: 3640 Comm: syz-executor404 Tainted: G W 5.17.0-syzkaller-13034-gd888c83fcec7 #0 [ 47.077489][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.087539][ T3640] Call Trace: [ 47.090806][ T3640] [ 47.093728][ T3640] dump_stack_lvl+0xcd/0x134 [ 47.098319][ T3640] print_address_description.constprop.0.cold+0xeb/0x495 [ 47.105344][ T3640] ? vxlan_vnifilter_dump_dev+0x9a0/0xb40 [ 47.111067][ T3640] kasan_report.cold+0xf4/0x1c6 [ 47.115914][ T3640] ? vxlan_vnifilter_dump_dev+0x9a0/0xb40 [ 47.121629][ T3640] vxlan_vnifilter_dump_dev+0x9a0/0xb40 [ 47.127168][ T3640] ? rcu_read_lock_sched_held+0xd/0x70 [ 47.132622][ T3640] vxlan_vnifilter_dump+0x3ff/0x650 [ 47.137815][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 47.144059][ T3640] netlink_dump+0x4b5/0xb70 [ 47.148566][ T3640] ? netlink_deliver_tap+0xc40/0xc40 [ 47.153854][ T3640] ? lock_downgrade+0x6e0/0x6e0 [ 47.158703][ T3640] __netlink_dump_start+0x647/0x900 [ 47.163898][ T3640] rtnetlink_rcv_msg+0x70c/0xb80 [ 47.168834][ T3640] ? vxlan_vnifilter_process+0x5b0/0x5b0 [ 47.174464][ T3640] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 47.179222][ T3640] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 47.184508][ T3640] ? vxlan_vnifilter_process+0x5b0/0x5b0 [ 47.190136][ T3640] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 47.195502][ T3640] netlink_rcv_skb+0x153/0x420 [ 47.200266][ T3640] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 47.205032][ T3640] ? netlink_ack+0xa80/0xa80 [ 47.209617][ T3640] ? netlink_deliver_tap+0x1a2/0xc40 [ 47.214902][ T3640] ? netlink_deliver_tap+0x1b1/0xc40 [ 47.220188][ T3640] netlink_unicast+0x543/0x7f0 [ 47.224952][ T3640] ? netlink_attachskb+0x880/0x880 [ 47.230063][ T3640] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 47.236301][ T3640] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 47.242543][ T3640] ? __phys_addr_symbol+0x2c/0x70 [ 47.247569][ T3640] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 47.253308][ T3640] ? __check_object_size+0x16c/0x4f0 [ 47.258590][ T3640] netlink_sendmsg+0x904/0xe00 [ 47.263357][ T3640] ? netlink_unicast+0x7f0/0x7f0 [ 47.268294][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 47.274535][ T3640] ? netlink_unicast+0x7f0/0x7f0 [ 47.279468][ T3640] sock_sendmsg+0xcf/0x120 [ 47.283883][ T3640] ____sys_sendmsg+0x6e2/0x800 [ 47.288646][ T3640] ? kernel_sendmsg+0x50/0x50 [ 47.293320][ T3640] ? do_recvmmsg+0x6d0/0x6d0 [ 47.297908][ T3640] ? rcu_read_lock_sched_held+0xd/0x70 [ 47.303361][ T3640] ? lock_release+0x522/0x720 [ 47.308032][ T3640] ? kmem_cache_alloc+0x46/0x3b0 [ 47.312968][ T3640] ? lock_downgrade+0x6e0/0x6e0 [ 47.317811][ T3640] ? lock_release+0x522/0x720 [ 47.322482][ T3640] ? kmem_cache_alloc+0x46/0x3b0 [ 47.327417][ T3640] ? lock_downgrade+0x6e0/0x6e0 [ 47.332265][ T3640] ___sys_sendmsg+0xf3/0x170 [ 47.336852][ T3640] ? sendmsg_copy_msghdr+0x160/0x160 [ 47.342135][ T3640] ? lockdep_init_map_type+0x21a/0x7f0 [ 47.347590][ T3640] ? __raw_spin_lock_init+0x36/0x110 [ 47.352872][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 47.359113][ T3640] ? percpu_counter_add_batch+0xbd/0x180 [ 47.364742][ T3640] ? alloc_empty_file+0xd7/0x170 [ 47.369681][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 47.375919][ T3640] ? errseq_sample+0x56/0x70 [ 47.380506][ T3640] ? rcu_read_lock_sched_held+0xd/0x70 [ 47.385958][ T3640] ? lock_acquire+0x442/0x510 [ 47.390630][ T3640] ? rcu_read_lock_sched_held+0xd/0x70 [ 47.396082][ T3640] ? lock_release+0x522/0x720 [ 47.400752][ T3640] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 47.406991][ T3640] ? fd_install+0x1c7/0x640 [ 47.411490][ T3640] ? lock_downgrade+0x6e0/0x6e0 [ 47.416422][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 47.422660][ T3640] ? __fget_light+0x20f/0x270 [ 47.427331][ T3640] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 47.433571][ T3640] __sys_sendmsg+0xe5/0x1b0 [ 47.438074][ T3640] ? __sys_sendmsg_sock+0x30/0x30 [ 47.443105][ T3640] __do_fast_syscall_32+0x65/0xf0 [ 47.448125][ T3640] do_fast_syscall_32+0x2f/0x70 [ 47.452969][ T3640] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 47.459293][ T3640] RIP: 0023:0xf7e94549 [ 47.463353][ T3640] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 47.482949][ T3640] RSP: 002b:00000000f7fa5d4c EFLAGS: 00000246 ORIG_RAX: 0000000000000172 [ 47.491352][ T3640] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 47.499311][ T3640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7e4f1fe [ 47.507272][ T3640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.515233][ T3640] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 47.523192][ T3640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.531160][ T3640] [ 47.534165][ T3640] [ 47.536473][ T3640] Allocated by task 3558: [ 47.540782][ T3640] kasan_save_stack+0x1e/0x40 [ 47.545458][ T3640] __kasan_slab_alloc+0x90/0xc0 [ 47.550298][ T3640] kmem_cache_alloc+0x204/0x3b0 [ 47.555142][ T3640] getname_flags.part.0+0x50/0x4f0 [ 47.560244][ T3640] getname_flags+0x9a/0xe0 [ 47.564651][ T3640] user_path_at_empty+0x2b/0x60 [ 47.569494][ T3640] user_statfs+0x86/0x160 [ 47.573815][ T3640] __do_sys_statfs+0x7a/0xf0 [ 47.578398][ T3640] do_syscall_64+0x35/0x80 [ 47.582808][ T3640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.588698][ T3640] [ 47.591005][ T3640] Freed by task 3558: [ 47.594965][ T3640] kasan_save_stack+0x1e/0x40 [ 47.599639][ T3640] kasan_set_track+0x21/0x30 [ 47.604228][ T3640] kasan_set_free_info+0x20/0x30 [ 47.609160][ T3640] ____kasan_slab_free+0x166/0x1a0 [ 47.614271][ T3640] slab_free_freelist_hook+0x8b/0x1c0 [ 47.619638][ T3640] kmem_cache_free+0xdd/0x5a0 [ 47.624311][ T3640] putname+0xfe/0x140 [ 47.628283][ T3640] user_path_at_empty+0x4d/0x60 [ 47.633122][ T3640] user_statfs+0x86/0x160 [ 47.637444][ T3640] __do_sys_statfs+0x7a/0xf0 [ 47.642027][ T3640] do_syscall_64+0x35/0x80 [ 47.646433][ T3640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.652320][ T3640] [ 47.654628][ T3640] The buggy address belongs to the object at ffff888077388000 [ 47.654628][ T3640] which belongs to the cache names_cache of size 4096 [ 47.668755][ T3640] The buggy address is located 3696 bytes inside of [ 47.668755][ T3640] 4096-byte region [ffff888077388000, ffff888077389000) [ 47.682192][ T3640] [ 47.684504][ T3640] The buggy address belongs to the physical page: [ 47.690895][ T3640] page:ffffea0001dce200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77388 [ 47.701034][ T3640] head:ffffea0001dce200 order:3 compound_mapcount:0 compound_pincount:0 [ 47.709341][ T3640] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 47.717318][ T3640] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888010dcc500 [ 47.725903][ T3640] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 47.734475][ T3640] page dumped because: kasan: bad access detected [ 47.740877][ T3640] page_owner tracks the page as allocated [ 47.746578][ T3640] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3558, tgid 3558 (dhcpcd-run-hook), ts 35431391616, free_ts 34845522497 [ 47.768197][ T3640] get_page_from_freelist+0xba2/0x3df0 [ 47.773661][ T3640] __alloc_pages+0x1b2/0x500 [ 47.778242][ T3640] alloc_pages+0x1aa/0x310 [ 47.782650][ T3640] allocate_slab+0x26c/0x3c0 [ 47.787236][ T3640] ___slab_alloc+0x8df/0xf20 [ 47.791817][ T3640] __slab_alloc.constprop.0+0x4d/0xa0 [ 47.797184][ T3640] kmem_cache_alloc+0x360/0x3b0 [ 47.802030][ T3640] getname_flags.part.0+0x50/0x4f0 [ 47.807136][ T3640] getname_flags+0x9a/0xe0 [ 47.811540][ T3640] user_path_at_empty+0x2b/0x60 [ 47.816382][ T3640] user_statfs+0x86/0x160 [ 47.820705][ T3640] __do_sys_statfs+0x7a/0xf0 [ 47.825292][ T3640] do_syscall_64+0x35/0x80 [ 47.829701][ T3640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.835593][ T3640] page last free stack trace: [ 47.840246][ T3640] free_pcp_prepare+0x549/0xd20 [ 47.845090][ T3640] free_unref_page+0x19/0x690 [ 47.849758][ T3640] __unfreeze_partials+0x17c/0x1a0 [ 47.854863][ T3640] qlist_free_all+0x6a/0x170 [ 47.859443][ T3640] kasan_quarantine_reduce+0x180/0x200 [ 47.864897][ T3640] __kasan_slab_alloc+0xa2/0xc0 [ 47.869741][ T3640] kmem_cache_alloc+0x204/0x3b0 [ 47.874584][ T3640] getname_flags.part.0+0x50/0x4f0 [ 47.879686][ T3640] getname_flags+0x9a/0xe0 [ 47.884093][ T3640] vfs_fstatat+0x73/0xb0 [ 47.888325][ T3640] __do_sys_newfstatat+0x91/0x110 [ 47.893341][ T3640] do_syscall_64+0x35/0x80 [ 47.897746][ T3640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.903636][ T3640] [ 47.905944][ T3640] Memory state around the buggy address: [ 47.911557][ T3640] ffff888077388d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.919620][ T3640] ffff888077388d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.927680][ T3640] >ffff888077388e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.935899][ T3640] ^ [ 47.943600][ T3640] ffff888077388e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.951649][ T3640] ffff888077388f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.959693][ T3640] ================================================================== [ 47.980560][ T3640] Kernel panic - not syncing: panic_on_warn set ... [ 47.987167][ T3640] CPU: 0 PID: 3640 Comm: syz-executor404 Tainted: G W 5.17.0-syzkaller-13034-gd888c83fcec7 #0 [ 47.998716][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.008764][ T3640] Call Trace: [ 48.012035][ T3640] [ 48.014954][ T3640] dump_stack_lvl+0xcd/0x134 [ 48.019545][ T3640] panic+0x2d7/0x636 [ 48.023437][ T3640] ? panic_print_sys_info.part.0+0x10b/0x10b [ 48.029417][ T3640] ? preempt_schedule_common+0x59/0xc0 [ 48.034869][ T3640] ? vxlan_vnifilter_dump_dev+0x9a0/0xb40 [ 48.040593][ T3640] ? preempt_schedule_thunk+0x16/0x18 [ 48.045980][ T3640] ? trace_hardirqs_on+0x38/0x1c0 [ 48.051019][ T3640] ? trace_hardirqs_on+0x51/0x1c0 [ 48.056055][ T3640] ? vxlan_vnifilter_dump_dev+0x9a0/0xb40 [ 48.061771][ T3640] end_report.part.0+0x3f/0x7c [ 48.066537][ T3640] kasan_report.cold+0x93/0x1c6 [ 48.071387][ T3640] ? vxlan_vnifilter_dump_dev+0x9a0/0xb40 [ 48.077105][ T3640] vxlan_vnifilter_dump_dev+0x9a0/0xb40 [ 48.082649][ T3640] ? rcu_read_lock_sched_held+0xd/0x70 [ 48.088105][ T3640] vxlan_vnifilter_dump+0x3ff/0x650 [ 48.093296][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.099536][ T3640] netlink_dump+0x4b5/0xb70 [ 48.104035][ T3640] ? netlink_deliver_tap+0xc40/0xc40 [ 48.109317][ T3640] ? lock_downgrade+0x6e0/0x6e0 [ 48.114165][ T3640] __netlink_dump_start+0x647/0x900 [ 48.119368][ T3640] rtnetlink_rcv_msg+0x70c/0xb80 [ 48.124302][ T3640] ? vxlan_vnifilter_process+0x5b0/0x5b0 [ 48.129933][ T3640] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 48.134690][ T3640] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 48.139971][ T3640] ? vxlan_vnifilter_process+0x5b0/0x5b0 [ 48.145598][ T3640] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 48.150967][ T3640] netlink_rcv_skb+0x153/0x420 [ 48.155728][ T3640] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 48.160485][ T3640] ? netlink_ack+0xa80/0xa80 [ 48.165067][ T3640] ? netlink_deliver_tap+0x1a2/0xc40 [ 48.170354][ T3640] ? netlink_deliver_tap+0x1b1/0xc40 [ 48.175639][ T3640] netlink_unicast+0x543/0x7f0 [ 48.180400][ T3640] ? netlink_attachskb+0x880/0x880 [ 48.185503][ T3640] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 48.191741][ T3640] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 48.197978][ T3640] ? __phys_addr_symbol+0x2c/0x70 [ 48.202999][ T3640] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 48.208717][ T3640] ? __check_object_size+0x16c/0x4f0 [ 48.213995][ T3640] netlink_sendmsg+0x904/0xe00 [ 48.218758][ T3640] ? netlink_unicast+0x7f0/0x7f0 [ 48.223692][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.229932][ T3640] ? netlink_unicast+0x7f0/0x7f0 [ 48.234865][ T3640] sock_sendmsg+0xcf/0x120 [ 48.239277][ T3640] ____sys_sendmsg+0x6e2/0x800 [ 48.244051][ T3640] ? kernel_sendmsg+0x50/0x50 [ 48.248720][ T3640] ? do_recvmmsg+0x6d0/0x6d0 [ 48.253306][ T3640] ? rcu_read_lock_sched_held+0xd/0x70 [ 48.258762][ T3640] ? lock_release+0x522/0x720 [ 48.263434][ T3640] ? kmem_cache_alloc+0x46/0x3b0 [ 48.268370][ T3640] ? lock_downgrade+0x6e0/0x6e0 [ 48.273216][ T3640] ? lock_release+0x522/0x720 [ 48.277894][ T3640] ? kmem_cache_alloc+0x46/0x3b0 [ 48.282827][ T3640] ? lock_downgrade+0x6e0/0x6e0 [ 48.287677][ T3640] ___sys_sendmsg+0xf3/0x170 [ 48.292265][ T3640] ? sendmsg_copy_msghdr+0x160/0x160 [ 48.297546][ T3640] ? lockdep_init_map_type+0x21a/0x7f0 [ 48.302999][ T3640] ? __raw_spin_lock_init+0x36/0x110 [ 48.308283][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.314518][ T3640] ? percpu_counter_add_batch+0xbd/0x180 [ 48.320148][ T3640] ? alloc_empty_file+0xd7/0x170 [ 48.325088][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.331324][ T3640] ? errseq_sample+0x56/0x70 [ 48.335909][ T3640] ? rcu_read_lock_sched_held+0xd/0x70 [ 48.341365][ T3640] ? lock_acquire+0x442/0x510 [ 48.346036][ T3640] ? rcu_read_lock_sched_held+0xd/0x70 [ 48.351490][ T3640] ? lock_release+0x522/0x720 [ 48.356162][ T3640] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 48.362403][ T3640] ? fd_install+0x1c7/0x640 [ 48.366903][ T3640] ? lock_downgrade+0x6e0/0x6e0 [ 48.371749][ T3640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 48.377986][ T3640] ? __fget_light+0x20f/0x270 [ 48.382661][ T3640] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 48.388903][ T3640] __sys_sendmsg+0xe5/0x1b0 [ 48.393407][ T3640] ? __sys_sendmsg_sock+0x30/0x30 [ 48.398438][ T3640] __do_fast_syscall_32+0x65/0xf0 [ 48.403454][ T3640] do_fast_syscall_32+0x2f/0x70 [ 48.408298][ T3640] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 48.414622][ T3640] RIP: 0023:0xf7e94549 [ 48.418682][ T3640] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 48.438282][ T3640] RSP: 002b:00000000f7fa5d4c EFLAGS: 00000246 ORIG_RAX: 0000000000000172 [ 48.446687][ T3640] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200003c0 [ 48.454650][ T3640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7e4f1fe [ 48.462613][ T3640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.470576][ T3640] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 48.478533][ T3640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.486500][ T3640] [ 48.489672][ T3640] Kernel Offset: disabled [ 48.493982][ T3640] Rebooting in 86400 seconds..