[info] Using makefile-style concurrent boot in runlevel 2. [ 26.702535] audit: type=1800 audit(1544388687.869:21): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. 2018/12/09 20:51:45 parsed 1 programs 2018/12/09 20:51:47 executed programs: 0 syzkaller login: [ 46.342776] IPVS: ftp: loaded support on port[0] = 21 [ 46.357377] IPVS: ftp: loaded support on port[0] = 21 [ 46.405740] IPVS: ftp: loaded support on port[0] = 21 [ 46.451435] IPVS: ftp: loaded support on port[0] = 21 [ 46.485489] IPVS: ftp: loaded support on port[0] = 21 [ 46.509286] IPVS: ftp: loaded support on port[0] = 21 [ 47.768765] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.782278] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.790956] device bridge_slave_0 entered promiscuous mode [ 47.818162] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.826472] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.833955] device bridge_slave_0 entered promiscuous mode [ 47.863611] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.875072] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.883473] device bridge_slave_0 entered promiscuous mode [ 47.893556] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.902294] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.911248] device bridge_slave_0 entered promiscuous mode [ 47.920788] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.927507] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.934904] device bridge_slave_1 entered promiscuous mode [ 47.942807] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.950415] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.957948] device bridge_slave_1 entered promiscuous mode [ 47.967070] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.973434] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.981135] device bridge_slave_0 entered promiscuous mode [ 47.991515] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.998726] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.006316] device bridge_slave_1 entered promiscuous mode [ 48.018195] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.024566] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.032420] device bridge_slave_1 entered promiscuous mode [ 48.040053] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.051022] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.058779] device bridge_slave_0 entered promiscuous mode [ 48.068237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.078224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.093152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.101630] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.114036] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.122306] device bridge_slave_1 entered promiscuous mode [ 48.133135] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.149350] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.156915] device bridge_slave_1 entered promiscuous mode [ 48.163663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.175364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.184550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.196397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.209295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.236291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.247678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.267290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.336491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.407940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.460089] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.482314] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.501720] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.530839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.548139] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.565371] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.595307] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.603169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.618635] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.634340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.644628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.656584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.667686] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.679023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.691936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.710902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.733721] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.789621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 48.806161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.918857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.928557] team0: Port device team_slave_0 added [ 48.995633] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.011538] team0: Port device team_slave_0 added [ 49.021442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.030743] team0: Port device team_slave_1 added [ 49.039252] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.050519] team0: Port device team_slave_0 added [ 49.067473] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.075790] team0: Port device team_slave_0 added [ 49.091461] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.109865] team0: Port device team_slave_1 added [ 49.124567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.152217] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.160679] team0: Port device team_slave_1 added [ 49.169855] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.179443] team0: Port device team_slave_1 added [ 49.188931] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.201281] team0: Port device team_slave_0 added [ 49.207976] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.218111] team0: Port device team_slave_0 added [ 49.225419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.243435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.259774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.281236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.293067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.302969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.317409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.338097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.352169] team0: Port device team_slave_1 added [ 49.358101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.375709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.384407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.392908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.401514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.410198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.417416] team0: Port device team_slave_1 added [ 49.426430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.435946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.448996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.460316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.478084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.492107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.500756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.508555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.516427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.528013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 49.536639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.547618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.559681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.585788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.596082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.604315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.612947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.621104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.629058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.636651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.644372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.653987] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.666638] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 49.677983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.687991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.697839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.706707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.714627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.724120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.741853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.754047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.783103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.791150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.802728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.826780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.834459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.845787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.865422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.887808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.898034] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.916398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.924436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.971424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.986638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.998034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.418648] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.425216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.432232] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.438675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.446981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.539451] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.545916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.552602] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.559047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.575890] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.584648] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.591087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.597808] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.604198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.619409] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.628481] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.634866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.641608] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.648022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.655904] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.789210] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.795659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.802366] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.808833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.830800] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.907268] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.913672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.920433] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.926863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.939949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.425233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.435975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.443235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.462924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.471328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.478574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.380330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.414385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.507086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.516650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.665848] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.685429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.706486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.718609] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.767360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.781913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 53.918335] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 53.924564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.933199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.991286] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.020724] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.033187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.043641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.056581] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.074011] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 54.084325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.097319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.106854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.135539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.142692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.237164] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.263094] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.282213] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.305253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.313955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.346270] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.402308] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 54.412486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.420999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.432102] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.584707] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.673062] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.521510] ================================================================== [ 55.529072] BUG: KASAN: use-after-free in __list_del_entry_valid+0xf1/0x100 [ 55.536191] Read of size 8 at addr ffff8881d1ffe730 by task ip/7457 [ 55.542602] [ 55.544238] CPU: 0 PID: 7457 Comm: ip Not tainted 4.20.0-rc4+ #335 [ 55.550554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.559916] Call Trace: [ 55.562522] dump_stack+0x244/0x39d [ 55.566168] ? dump_stack_print_info.cold.1+0x20/0x20 [ 55.571364] ? printk+0xa7/0xcf [ 55.574647] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 55.579419] print_address_description.cold.7+0x9/0x1ff [ 55.584803] kasan_report.cold.8+0x242/0x309 [ 55.589238] ? __list_del_entry_valid+0xf1/0x100 [ 55.594010] __asan_report_load8_noabort+0x14/0x20 [ 55.598950] __list_del_entry_valid+0xf1/0x100 [ 55.603544] neigh_mark_dead+0x13b/0x410 [ 55.607609] ? zap_class+0x640/0x640 [ 55.611333] ? neigh_change_state+0x680/0x680 [ 55.615848] ? kasan_check_read+0x11/0x20 [ 55.620001] ? do_raw_write_lock+0x14f/0x310 [ 55.624412] ? do_raw_read_unlock+0x70/0x70 [ 55.628793] ? __lock_is_held+0xb5/0x140 [ 55.632879] neigh_flush_dev+0x3a1/0x960 [ 55.636944] ? neigh_changeaddr+0x24/0x40 [ 55.641105] ? __neigh_for_each_release+0x4f0/0x4f0 [ 55.646132] ? do_raw_read_unlock+0x70/0x70 [ 55.650456] ? net_to_rxe+0xe1/0x110 [ 55.654200] neigh_changeaddr+0x31/0x40 [ 55.658193] ndisc_netdev_event+0xe6/0x5b0 [ 55.662433] ? ndisc_send_unsol_na+0x500/0x500 [ 55.667032] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 55.672589] ? netconsole_netdev_event+0x7d/0x280 [ 55.677445] notifier_call_chain+0x17e/0x380 [ 55.681876] ? unregister_die_notifier+0x20/0x20 [ 55.686637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.692197] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 55.697740] ? rtnl_is_locked+0xb5/0xf0 [ 55.701720] ? rtnl_trylock+0x20/0x20 [ 55.705540] raw_notifier_call_chain+0x2d/0x40 [ 55.710133] call_netdevice_notifiers_info+0x3f/0x90 [ 55.715250] dev_set_mac_address+0x293/0x3b0 [ 55.719665] ? netdev_state_change+0x1a0/0x1a0 [ 55.724262] ? lru_cache_add+0xa50/0xa50 [ 55.728339] do_setlink+0x7c7/0x3f30 [ 55.732060] ? print_usage_bug+0xc0/0xc0 [ 55.736140] ? validate_linkmsg+0xa50/0xa50 [ 55.740469] ? wp_page_copy+0x187b/0x24f0 [ 55.744633] ? mark_held_locks+0x130/0x130 [ 55.748890] ? mark_held_locks+0x130/0x130 [ 55.753133] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 55.758335] ? validate_nla+0x29a/0x1650 [ 55.762406] ? nla_memcmp+0x90/0x90 [ 55.766043] ? mark_held_locks+0x130/0x130 [ 55.770299] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 55.775848] ? rtnl_is_locked+0xb5/0xf0 [ 55.779841] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 55.784864] ? validate_linkmsg+0x271/0xa50 [ 55.789202] ? rtnl_stats_dump+0xd70/0xd70 [ 55.793446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.798994] ? netdev_master_upper_dev_get+0x173/0x250 [ 55.804275] ? __nla_parse+0x12c/0x3e0 [ 55.808170] ? netdev_has_any_upper_dev+0x170/0x170 [ 55.813214] __rtnl_newlink+0xcde/0x19e0 [ 55.817297] ? rtnl_link_unregister+0x390/0x390 [ 55.821966] ? rcu_softirq_qs+0x20/0x20 [ 55.825948] ? rcu_softirq_qs+0x20/0x20 [ 55.829923] ? unwind_dump+0x190/0x190 [ 55.833930] ? is_bpf_text_address+0xd3/0x170 [ 55.838458] ? kernel_text_address+0x79/0xf0 [ 55.842873] ? __kernel_text_address+0xd/0x40 [ 55.847374] ? unwind_get_return_address+0x61/0xa0 [ 55.852310] ? __save_stack_trace+0x8d/0xf0 [ 55.856654] ? save_stack+0xa9/0xd0 [ 55.860287] ? save_stack+0x43/0xd0 [ 55.863915] ? kasan_kmalloc+0xc7/0xe0 [ 55.867808] ? kmem_cache_alloc_trace+0x152/0x750 [ 55.872662] ? rtnl_newlink+0x4d/0xa0 [ 55.876467] ? rtnetlink_rcv_msg+0x46a/0xc20 [ 55.880880] ? netlink_rcv_skb+0x172/0x440 [ 55.885121] ? rtnetlink_rcv+0x1c/0x20 [ 55.889013] ? netlink_unicast+0x5a5/0x760 [ 55.893251] ? netlink_sendmsg+0xa18/0xfc0 [ 55.897545] ? rtnl_newlink+0x4d/0xa0 [ 55.901355] ? rcu_read_lock_sched_held+0x14f/0x180 [ 55.906391] ? kmem_cache_alloc_trace+0x353/0x750 [ 55.911239] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 55.916519] ? ns_capable_common+0x13f/0x170 [ 55.920930] ? rcu_softirq_qs+0x20/0x20 [ 55.924919] rtnl_newlink+0x6b/0xa0 [ 55.928550] ? __rtnl_newlink+0x19e0/0x19e0 [ 55.932878] rtnetlink_rcv_msg+0x46a/0xc20 [ 55.937123] ? rtnl_fdb_dump+0xd00/0xd00 [ 55.941211] netlink_rcv_skb+0x172/0x440 [ 55.945280] ? rtnl_fdb_dump+0xd00/0xd00 [ 55.949350] ? netlink_ack+0xb80/0xb80 [ 55.953254] rtnetlink_rcv+0x1c/0x20 [ 55.956978] netlink_unicast+0x5a5/0x760 [ 55.961048] ? netlink_attachskb+0x9a0/0x9a0 [ 55.965464] ? aa_sk_perm+0x22b/0x8e0 [ 55.969270] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 55.974303] netlink_sendmsg+0xa18/0xfc0 [ 55.978389] ? netlink_unicast+0x760/0x760 [ 55.982626] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 55.987565] ? apparmor_socket_sendmsg+0x29/0x30 [ 55.992331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.997898] ? security_socket_sendmsg+0x94/0xc0 [ 56.002661] ? netlink_unicast+0x760/0x760 [ 56.006914] sock_sendmsg+0xd5/0x120 [ 56.010635] ___sys_sendmsg+0x7fd/0x930 [ 56.014626] ? copy_msghdr_from_user+0x580/0x580 [ 56.019385] ? zap_class+0x640/0x640 [ 56.023110] ? zap_class+0x640/0x640 [ 56.026836] ? zap_class+0x640/0x640 [ 56.030562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.036103] ? __fget_light+0x2e9/0x430 [ 56.040086] ? fget_raw+0x20/0x20 [ 56.043553] ? __do_page_fault+0x620/0xe60 [ 56.047799] ? lock_downgrade+0x900/0x900 [ 56.051966] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 56.056901] ? kasan_check_read+0x11/0x20 [ 56.061074] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 56.066625] ? sockfd_lookup_light+0xc5/0x160 [ 56.071128] __sys_sendmsg+0x11d/0x280 [ 56.075036] ? __ia32_sys_shutdown+0x80/0x80 [ 56.079454] ? up_read_non_owner+0x100/0x100 [ 56.083872] ? do_syscall_64+0x9a/0x820 [ 56.087879] ? do_syscall_64+0x9a/0x820 [ 56.091873] ? trace_hardirqs_off_caller+0x310/0x310 [ 56.096989] __x64_sys_sendmsg+0x78/0xb0 [ 56.101063] do_syscall_64+0x1b9/0x820 [ 56.104954] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 56.110341] ? syscall_return_slowpath+0x5e0/0x5e0 [ 56.115271] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.120124] ? trace_hardirqs_on_caller+0x310/0x310 [ 56.125148] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 56.130172] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.135725] ? prepare_exit_to_usermode+0x291/0x3b0 [ 56.140751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.145608] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.150801] RIP: 0033:0x7fb7f3cb7320 [ 56.154526] Code: 02 48 83 c8 ff eb 8d 48 8b 05 14 7b 2a 00 f7 da 64 89 10 48 83 c8 ff eb c9 90 83 3d d5 d2 2a 00 00 75 10 b8 2e 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e ba 00 00 48 89 04 24 [ 56.173436] RSP: 002b:00007ffee8dae368 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.181170] RAX: ffffffffffffffda RBX: 00007ffee8db2460 RCX: 00007fb7f3cb7320 [ 56.188445] RDX: 0000000000000000 RSI: 00007ffee8dae3a0 RDI: 0000000000000003 [ 56.195719] RBP: 00007ffee8dae3a0 R08: 0000000000000000 R09: 0000000000000000 [ 56.202995] R10: 0000000000000000 R11: 0000000000000246 R12: 000000005c0d806e [ 56.210280] R13: 0000000000000000 R14: 00000000006395c0 R15: 00007ffee8db2c40 [ 56.217565] [ 56.219198] Allocated by task 6109: [ 56.222859] save_stack+0x43/0xd0 [ 56.226317] kasan_kmalloc+0xc7/0xe0 [ 56.230033] __kmalloc+0x15b/0x760 [ 56.233583] ___neigh_create+0x13fc/0x2600 [ 56.237829] __neigh_create+0x30/0x40 [ 56.241637] ip6_finish_output2+0xa59/0x27a0 [ 56.246047] ip6_finish_output+0x58c/0xc60 [ 56.250280] ip6_output+0x232/0x9d0 [ 56.253909] ndisc_send_skb+0x1005/0x1560 [ 56.258064] ndisc_send_ns+0x3c6/0x8e0 [ 56.261953] addrconf_dad_work+0xbf2/0x1310 [ 56.266275] process_one_work+0xc90/0x1c40 [ 56.270514] worker_thread+0x17f/0x1390 [ 56.274489] kthread+0x35a/0x440 [ 56.277858] ret_from_fork+0x3a/0x50 [ 56.281568] [ 56.283196] Freed by task 7421: [ 56.286485] save_stack+0x43/0xd0 [ 56.289942] __kasan_slab_free+0x102/0x150 [ 56.294181] kasan_slab_free+0xe/0x10 [ 56.297996] kfree+0xcf/0x230 [ 56.301106] rcu_process_callbacks+0x1140/0x1ac0 [ 56.305870] __do_softirq+0x308/0xb7e [ 56.309661] [ 56.311292] The buggy address belongs to the object at ffff8881d1ffe4c0 [ 56.311292] which belongs to the cache kmalloc-1k of size 1024 [ 56.323964] The buggy address is located 624 bytes inside of [ 56.323964] 1024-byte region [ffff8881d1ffe4c0, ffff8881d1ffe8c0) [ 56.335932] The buggy address belongs to the page: [ 56.340871] page:ffffea000747ff80 count:1 mapcount:0 mapping:ffff8881da800ac0 index:0x0 compound_mapcount: 0 [ 56.350846] flags: 0x2fffc0000010200(slab|head) [ 56.355525] raw: 02fffc0000010200 ffffea000714b888 ffffea0007395888 ffff8881da800ac0 [ 56.363414] raw: 0000000000000000 ffff8881d1ffe040 0000000100000007 0000000000000000 [ 56.371290] page dumped because: kasan: bad access detected [ 56.376995] [ 56.378621] Memory state around the buggy address: [ 56.383550] ffff8881d1ffe600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.390917] ffff8881d1ffe680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.398279] >ffff8881d1ffe700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.405631] ^ [ 56.410561] ffff8881d1ffe780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.417919] ffff8881d1ffe800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.425274] ================================================================== [ 56.432656] Disabling lock debugging due to kernel taint [ 56.438174] Kernel panic - not syncing: panic_on_warn set ... [ 56.444075] CPU: 0 PID: 7457 Comm: ip Tainted: G B 4.20.0-rc4+ #335 [ 56.451774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.461120] Call Trace: [ 56.463714] dump_stack+0x244/0x39d [ 56.467362] ? dump_stack_print_info.cold.1+0x20/0x20 [ 56.472560] panic+0x2ad/0x55c [ 56.475749] ? add_taint.cold.5+0x16/0x16 [ 56.479910] ? trace_hardirqs_on+0xb4/0x310 [ 56.484232] kasan_end_report+0x47/0x4f [ 56.488204] kasan_report.cold.8+0x76/0x309 [ 56.492523] ? __list_del_entry_valid+0xf1/0x100 [ 56.497276] __asan_report_load8_noabort+0x14/0x20 [ 56.502210] __list_del_entry_valid+0xf1/0x100 [ 56.506794] neigh_mark_dead+0x13b/0x410 [ 56.510865] ? zap_class+0x640/0x640 [ 56.514576] ? neigh_change_state+0x680/0x680 [ 56.519076] ? kasan_check_read+0x11/0x20 [ 56.523222] ? do_raw_write_lock+0x14f/0x310 [ 56.527627] ? do_raw_read_unlock+0x70/0x70 [ 56.531947] ? __lock_is_held+0xb5/0x140 [ 56.536009] neigh_flush_dev+0x3a1/0x960 [ 56.540065] ? neigh_changeaddr+0x24/0x40 [ 56.544227] ? __neigh_for_each_release+0x4f0/0x4f0 [ 56.549259] ? do_raw_read_unlock+0x70/0x70 [ 56.553581] ? net_to_rxe+0xe1/0x110 [ 56.557297] neigh_changeaddr+0x31/0x40 [ 56.561272] ndisc_netdev_event+0xe6/0x5b0 [ 56.565506] ? ndisc_send_unsol_na+0x500/0x500 [ 56.570106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 56.575638] ? netconsole_netdev_event+0x7d/0x280 [ 56.580481] notifier_call_chain+0x17e/0x380 [ 56.584891] ? unregister_die_notifier+0x20/0x20 [ 56.589651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.595195] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 56.600731] ? rtnl_is_locked+0xb5/0xf0 [ 56.604699] ? rtnl_trylock+0x20/0x20 [ 56.608502] raw_notifier_call_chain+0x2d/0x40 [ 56.613084] call_netdevice_notifiers_info+0x3f/0x90 [ 56.618190] dev_set_mac_address+0x293/0x3b0 [ 56.622599] ? netdev_state_change+0x1a0/0x1a0 [ 56.627180] ? lru_cache_add+0xa50/0xa50 [ 56.631243] do_setlink+0x7c7/0x3f30 [ 56.634956] ? print_usage_bug+0xc0/0xc0 [ 56.639023] ? validate_linkmsg+0xa50/0xa50 [ 56.643345] ? wp_page_copy+0x187b/0x24f0 [ 56.647494] ? mark_held_locks+0x130/0x130 [ 56.651735] ? mark_held_locks+0x130/0x130 [ 56.655970] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 56.661162] ? validate_nla+0x29a/0x1650 [ 56.665229] ? nla_memcmp+0x90/0x90 [ 56.668857] ? mark_held_locks+0x130/0x130 [ 56.673094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 56.678637] ? rtnl_is_locked+0xb5/0xf0 [ 56.682613] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 56.687624] ? validate_linkmsg+0x271/0xa50 [ 56.691944] ? rtnl_stats_dump+0xd70/0xd70 [ 56.696180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.701720] ? netdev_master_upper_dev_get+0x173/0x250 [ 56.706995] ? __nla_parse+0x12c/0x3e0 [ 56.710892] ? netdev_has_any_upper_dev+0x170/0x170 [ 56.715910] __rtnl_newlink+0xcde/0x19e0 [ 56.719977] ? rtnl_link_unregister+0x390/0x390 [ 56.724643] ? rcu_softirq_qs+0x20/0x20 [ 56.728614] ? rcu_softirq_qs+0x20/0x20 [ 56.732582] ? unwind_dump+0x190/0x190 [ 56.736473] ? is_bpf_text_address+0xd3/0x170 [ 56.740972] ? kernel_text_address+0x79/0xf0 [ 56.745416] ? __kernel_text_address+0xd/0x40 [ 56.749911] ? unwind_get_return_address+0x61/0xa0 [ 56.754884] ? __save_stack_trace+0x8d/0xf0 [ 56.759224] ? save_stack+0xa9/0xd0 [ 56.762878] ? save_stack+0x43/0xd0 [ 56.766500] ? kasan_kmalloc+0xc7/0xe0 [ 56.770385] ? kmem_cache_alloc_trace+0x152/0x750 [ 56.775228] ? rtnl_newlink+0x4d/0xa0 [ 56.779026] ? rtnetlink_rcv_msg+0x46a/0xc20 [ 56.783448] ? netlink_rcv_skb+0x172/0x440 [ 56.787677] ? rtnetlink_rcv+0x1c/0x20 [ 56.791564] ? netlink_unicast+0x5a5/0x760 [ 56.795797] ? netlink_sendmsg+0xa18/0xfc0 [ 56.800065] ? rtnl_newlink+0x4d/0xa0 [ 56.803888] ? rcu_read_lock_sched_held+0x14f/0x180 [ 56.808918] ? kmem_cache_alloc_trace+0x353/0x750 [ 56.813755] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 56.819030] ? ns_capable_common+0x13f/0x170 [ 56.823434] ? rcu_softirq_qs+0x20/0x20 [ 56.827409] rtnl_newlink+0x6b/0xa0 [ 56.831033] ? __rtnl_newlink+0x19e0/0x19e0 [ 56.835868] rtnetlink_rcv_msg+0x46a/0xc20 [ 56.840108] ? rtnl_fdb_dump+0xd00/0xd00 [ 56.844174] netlink_rcv_skb+0x172/0x440 [ 56.848243] ? rtnl_fdb_dump+0xd00/0xd00 [ 56.852334] ? netlink_ack+0xb80/0xb80 [ 56.856228] rtnetlink_rcv+0x1c/0x20 [ 56.859940] netlink_unicast+0x5a5/0x760 [ 56.864003] ? netlink_attachskb+0x9a0/0x9a0 [ 56.868412] ? aa_sk_perm+0x22b/0x8e0 [ 56.872216] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 56.877234] netlink_sendmsg+0xa18/0xfc0 [ 56.881298] ? netlink_unicast+0x760/0x760 [ 56.885529] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 56.890454] ? apparmor_socket_sendmsg+0x29/0x30 [ 56.895216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.900753] ? security_socket_sendmsg+0x94/0xc0 [ 56.905508] ? netlink_unicast+0x760/0x760 [ 56.909742] sock_sendmsg+0xd5/0x120 [ 56.913453] ___sys_sendmsg+0x7fd/0x930 [ 56.917430] ? copy_msghdr_from_user+0x580/0x580 [ 56.922187] ? zap_class+0x640/0x640 [ 56.925908] ? zap_class+0x640/0x640 [ 56.929616] ? zap_class+0x640/0x640 [ 56.933333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 56.938865] ? __fget_light+0x2e9/0x430 [ 56.942843] ? fget_raw+0x20/0x20 [ 56.946303] ? __do_page_fault+0x620/0xe60 [ 56.950539] ? lock_downgrade+0x900/0x900 [ 56.954682] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 56.959612] ? kasan_check_read+0x11/0x20 [ 56.963763] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 56.969498] ? sockfd_lookup_light+0xc5/0x160 [ 56.973994] __sys_sendmsg+0x11d/0x280 [ 56.977892] ? __ia32_sys_shutdown+0x80/0x80 [ 56.982297] ? up_read_non_owner+0x100/0x100 [ 56.986705] ? do_syscall_64+0x9a/0x820 [ 56.990679] ? do_syscall_64+0x9a/0x820 [ 56.994656] ? trace_hardirqs_off_caller+0x310/0x310 [ 56.999765] __x64_sys_sendmsg+0x78/0xb0 [ 57.003842] do_syscall_64+0x1b9/0x820 [ 57.007729] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 57.013091] ? syscall_return_slowpath+0x5e0/0x5e0 [ 57.018019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.022861] ? trace_hardirqs_on_caller+0x310/0x310 [ 57.027877] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 57.032905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 57.038440] ? prepare_exit_to_usermode+0x291/0x3b0 [ 57.043466] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.048311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.053495] RIP: 0033:0x7fb7f3cb7320 [ 57.057208] Code: 02 48 83 c8 ff eb 8d 48 8b 05 14 7b 2a 00 f7 da 64 89 10 48 83 c8 ff eb c9 90 83 3d d5 d2 2a 00 00 75 10 b8 2e 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e ba 00 00 48 89 04 24 [ 57.076111] RSP: 002b:00007ffee8dae368 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.083826] RAX: ffffffffffffffda RBX: 00007ffee8db2460 RCX: 00007fb7f3cb7320 [ 57.091092] RDX: 0000000000000000 RSI: 00007ffee8dae3a0 RDI: 0000000000000003 [ 57.098358] RBP: 00007ffee8dae3a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.105624] R10: 0000000000000000 R11: 0000000000000246 R12: 000000005c0d806e [ 57.112899] R13: 0000000000000000 R14: 00000000006395c0 R15: 00007ffee8db2c40 [ 57.121155] Kernel Offset: disabled [ 57.124791] Rebooting in 86400 seconds..