[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 49.736086][ T27] audit: type=1800 audit(1582543612.993:29): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 60.510079][ T8529] IPVS: ftp: loaded support on port[0] = 21 [ 60.823278][ T902] tipc: TX() has been purged, node left! [ 61.145060][ T8526] can: request_module (can-proto-0) failed. [ 63.861564][ T8526] can: request_module (can-proto-0) failed. [ 63.874025][ T8526] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.108' (ECDSA) to the list of known hosts. 2020/02/24 11:27:14 parsed 1 programs 2020/02/24 11:27:15 executed programs: 0 [ 72.145749][ T8613] IPVS: ftp: loaded support on port[0] = 21 [ 72.180254][ T8615] IPVS: ftp: loaded support on port[0] = 21 [ 72.358852][ T8620] IPVS: ftp: loaded support on port[0] = 21 [ 72.361992][ T8623] IPVS: ftp: loaded support on port[0] = 21 [ 72.376554][ T8622] IPVS: ftp: loaded support on port[0] = 21 [ 72.399390][ T8618] IPVS: ftp: loaded support on port[0] = 21 [ 72.405819][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 72.449194][ T8615] chnl_net:caif_netlink_parms(): no params data found [ 72.552354][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.560347][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.568407][ T8613] device bridge_slave_0 entered promiscuous mode [ 72.592543][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.600393][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.609648][ T8613] device bridge_slave_1 entered promiscuous mode [ 72.684780][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.697925][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.708039][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.715956][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.724165][ T8615] device bridge_slave_0 entered promiscuous mode [ 72.766510][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.773883][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.781603][ T8615] device bridge_slave_1 entered promiscuous mode [ 72.796290][ T8620] chnl_net:caif_netlink_parms(): no params data found [ 72.821233][ T8613] team0: Port device team_slave_0 added [ 72.839727][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 72.870445][ T8613] team0: Port device team_slave_1 added [ 72.880095][ T8623] chnl_net:caif_netlink_parms(): no params data found [ 72.898004][ T8615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.938109][ T8615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.983606][ T8615] team0: Port device team_slave_0 added [ 73.005919][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.012925][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.039795][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.055483][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.062490][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.088790][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.100858][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 73.115763][ T8615] team0: Port device team_slave_1 added [ 73.178585][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.190042][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.225489][ T8615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.242461][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.250262][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.258392][ T8623] device bridge_slave_0 entered promiscuous mode [ 73.275412][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.282823][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.291147][ T8620] device bridge_slave_0 entered promiscuous mode [ 73.299492][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.307280][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.334862][ T8615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.351340][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.359491][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.367677][ T8623] device bridge_slave_1 entered promiscuous mode [ 73.377560][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.386172][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.394678][ T8622] device bridge_slave_0 entered promiscuous mode [ 73.402658][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.410672][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.418900][ T8620] device bridge_slave_1 entered promiscuous mode [ 73.476505][ T8613] device hsr_slave_0 entered promiscuous mode [ 73.523633][ T8613] device hsr_slave_1 entered promiscuous mode [ 73.576711][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.583928][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.591605][ T8622] device bridge_slave_1 entered promiscuous mode [ 73.616928][ T8620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.651191][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.672527][ T8620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.687045][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.694675][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.702341][ T8618] device bridge_slave_0 entered promiscuous mode [ 73.744944][ T8615] device hsr_slave_0 entered promiscuous mode [ 73.783629][ T8615] device hsr_slave_1 entered promiscuous mode [ 73.843298][ T8615] debugfs: Directory 'hsr0' with parent '/' already present! [ 73.852616][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.875534][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.885079][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.892157][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.900041][ T8618] device bridge_slave_1 entered promiscuous mode [ 73.944722][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.974135][ T8623] team0: Port device team_slave_0 added [ 73.982036][ T8622] team0: Port device team_slave_0 added [ 73.990905][ T8620] team0: Port device team_slave_0 added [ 74.000760][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.013496][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.028100][ T8622] team0: Port device team_slave_1 added [ 74.036122][ T8623] team0: Port device team_slave_1 added [ 74.049688][ T8620] team0: Port device team_slave_1 added [ 74.089397][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.098088][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.124831][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.141672][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.149276][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.176504][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.202708][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.210350][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.237223][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.248758][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.257097][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.283339][ T8620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.302872][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.310590][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.337292][ T8620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.350532][ T8618] team0: Port device team_slave_0 added [ 74.362821][ T8618] team0: Port device team_slave_1 added [ 74.369528][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.377187][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.404308][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.485134][ T8620] device hsr_slave_0 entered promiscuous mode [ 74.534492][ T8620] device hsr_slave_1 entered promiscuous mode [ 74.573275][ T8620] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.645757][ T8622] device hsr_slave_0 entered promiscuous mode [ 74.683571][ T8622] device hsr_slave_1 entered promiscuous mode [ 74.723460][ T8622] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.752776][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.760096][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.787698][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.846040][ T8623] device hsr_slave_0 entered promiscuous mode [ 74.883717][ T8623] device hsr_slave_1 entered promiscuous mode [ 74.923477][ T8623] debugfs: Directory 'hsr0' with parent '/' already present! [ 74.934832][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.942531][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.969457][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.136874][ T8618] device hsr_slave_0 entered promiscuous mode [ 75.193705][ T8618] device hsr_slave_1 entered promiscuous mode [ 75.233372][ T8618] debugfs: Directory 'hsr0' with parent '/' already present! [ 75.257106][ T8613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.318434][ T8613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.370586][ T8613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.426481][ T8613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.515728][ T8615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.568630][ T8615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.647527][ T8615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.705821][ T8615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.828862][ T8620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.918503][ T8620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.967819][ T8620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.039070][ T8620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.125696][ T8623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.175256][ T8622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.235530][ T8622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.310324][ T8623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.337134][ T8622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.399316][ T8622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.462656][ T8623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.505040][ T8623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.581238][ T8618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.619731][ T8618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.647495][ T8618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.724672][ T8618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.784403][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.810541][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.833890][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.842745][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.858077][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.888814][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.897176][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.916798][ T8615] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.934171][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.946925][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.955881][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.963368][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.972828][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.982521][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.991052][ T2879] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.998172][ T2879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.006436][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.015390][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.024413][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.032912][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.040356][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.048491][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.057274][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.068552][ T8620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.104212][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.112926][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.122610][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.129844][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.139091][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.148062][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.156881][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.169613][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.178637][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.187324][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.196622][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.205491][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.214343][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.222874][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.231669][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.260778][ T8613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.274837][ T8613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.288360][ T8620] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.301491][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.311900][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.321907][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.331064][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.339732][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.348920][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.357883][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.366651][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.375834][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.385321][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.393980][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.401848][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.416421][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.466845][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.485883][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.495953][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.506447][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.513730][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.522233][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.531702][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.540721][ T2879] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.549909][ T2879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.559152][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.568153][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.576308][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.590479][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.602327][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.615074][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.628294][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.637019][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.647293][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.655246][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.666100][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.688703][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.712077][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.721617][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.735464][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.745767][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.754738][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.764423][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.775329][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.785231][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.793303][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.801179][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.809378][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.825907][ T8620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.840568][ T8620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.857966][ T8623] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.870044][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.879071][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.888172][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.899221][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.908650][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.917788][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.926400][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.935709][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.944425][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.951602][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.959763][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.973718][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.006351][ T8613] device veth0_vlan entered promiscuous mode [ 78.029255][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.039599][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.049425][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.061324][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.070807][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.079955][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.089675][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.105504][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.112936][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.123589][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.132259][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.141570][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.150250][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.159166][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.167452][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.194486][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.202733][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.211562][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.220019][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.229216][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.238572][ T2879] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.245923][ T2879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.255149][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.264035][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.273247][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.282498][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.291743][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.302892][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.312216][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.321551][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.331168][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.339884][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.355189][ T8613] device veth1_vlan entered promiscuous mode [ 78.369916][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.378736][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.388003][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.398608][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.408012][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.427917][ T8620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.456242][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.467663][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.478794][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.489136][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.500323][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.510261][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.519763][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.528670][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.536137][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.543924][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.552632][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.561171][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.570782][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.580049][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.592318][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.616052][ T8623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.653769][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.662927][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.681118][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.688432][ T2881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.696884][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.705933][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.715836][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.724840][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.740657][ T8613] device veth0_macvtap entered promiscuous mode [ 78.776914][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.787453][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.797037][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.806346][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.815759][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.826163][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.835105][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.843792][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.859779][ T8618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.871355][ T8618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.890262][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.907520][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.918974][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.929108][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.937413][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.945654][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.954579][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.963038][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.973210][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.983976][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.003471][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.011232][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.019668][ T8615] device veth0_vlan entered promiscuous mode [ 79.035970][ T8613] device veth1_macvtap entered promiscuous mode [ 79.058570][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.067769][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.077632][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.086282][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.104974][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.124689][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.148964][ T8615] device veth1_vlan entered promiscuous mode [ 79.166570][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.177194][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.209352][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.245109][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.255487][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.265498][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.275504][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.284730][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.294287][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.305464][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.314264][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.325536][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.342456][ T8615] device veth0_macvtap entered promiscuous mode [ 79.351748][ T8620] device veth0_vlan entered promiscuous mode [ 79.365083][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.376001][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.389094][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.399252][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.408749][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.421741][ T8615] device veth1_macvtap entered promiscuous mode [ 79.437934][ T8620] device veth1_vlan entered promiscuous mode [ 79.455604][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.465175][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.474543][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.484777][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.493828][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.502104][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.512413][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.520703][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.529498][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.538556][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.555291][ T8623] device veth0_vlan entered promiscuous mode [ 79.634329][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.642930][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.661162][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.680453][ T8623] device veth1_vlan entered promiscuous mode [ 79.726017][ T8622] device veth0_vlan entered promiscuous mode [ 79.737805][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.750197][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.762891][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.828087][ T8622] device veth1_vlan entered promiscuous mode [ 79.836755][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.847861][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.858322][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.868607][ T2881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.890068][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.902195][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.917277][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.951404][ T8623] device veth0_macvtap entered promiscuous mode [ 79.979701][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.990087][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.002415][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.011962][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.022891][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.032060][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.041289][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.050131][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.059308][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.068897][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.079385][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.088125][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.097251][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.108580][ T8618] device veth0_vlan entered promiscuous mode [ 80.120798][ T8662] ================================================================== [ 80.129211][ T8662] BUG: KASAN: use-after-free in ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 80.139254][ T8662] Read of size 4 at addr ffff8880a8bf243c by task syz-executor.2/8662 [ 80.147616][ T8662] [ 80.149985][ T8662] CPU: 0 PID: 8662 Comm: syz-executor.2 Not tainted 5.5.0-rc2-syzkaller #0 [ 80.159256][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.170002][ T8662] Call Trace: [ 80.173416][ T8662] dump_stack+0x12d/0x187 [ 80.178440][ T8662] print_address_description.constprop.8.cold.10+0x9/0x31d [ 80.186520][ T8662] ? ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 80.193660][ T8662] __kasan_report.cold.11+0x1b/0x3a [ 80.199213][ T8662] ? ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 80.205997][ T8662] ? ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 80.212164][ T8662] kasan_report+0x12/0x20 [ 80.217051][ T8662] __asan_report_load4_noabort+0x14/0x20 [ 80.222801][ T8662] ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 80.228800][ T8662] ? mutex_lock_io_nested+0x1280/0x1280 [ 80.234364][ T8662] ? __kasan_check_read+0x11/0x20 [ 80.240219][ T8662] ? ethnl_default_doit+0xa10/0xa10 [ 80.245805][ T8662] ? __kasan_check_read+0x11/0x20 [ 80.251392][ T8662] ? ethnl_parse_header+0x1bc/0x710 [ 80.256896][ T8662] ? memcpy+0x45/0x50 [ 80.261162][ T8662] ethnl_update_bitset+0xe/0x13 [ 80.266389][ T8662] ethnl_set_linkmodes+0x3b8/0xae0 [ 80.273266][ T8662] ? linkmodes_prepare_data+0x250/0x250 [ 80.279786][ T8662] ? kfree_skbmem+0x8c/0x130 [ 80.284839][ T8662] ? kfree_skbmem+0x8c/0x130 [ 80.289684][ T8662] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 80.295387][ T8662] ? kmem_cache_free+0x9d/0x320 [ 80.300655][ T8662] ? __kasan_check_write+0x14/0x20 [ 80.306406][ T8662] ? apparmor_capable+0x35e/0x670 [ 80.311529][ T8662] ? __kasan_check_write+0x14/0x20 [ 80.316883][ T8662] ? apparmor_capable+0x35e/0x670 [ 80.322088][ T8662] ? lock_downgrade+0x900/0x900 [ 80.327266][ T8662] ? ns_capable_common+0x5e/0xd0 [ 80.332386][ T8662] genl_rcv_msg+0x5d9/0x10e0 [ 80.337862][ T8662] ? genl_rcv_msg+0x5d9/0x10e0 [ 80.343443][ T8662] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 80.350096][ T8662] netlink_rcv_skb+0x13c/0x380 [ 80.355082][ T8662] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 80.362631][ T8662] ? netlink_ack+0x970/0x970 [ 80.367773][ T8662] ? netlink_deliver_tap+0x178/0xac0 [ 80.373465][ T8662] genl_rcv+0x23/0x40 [ 80.377754][ T8662] netlink_unicast+0x45e/0x6a0 [ 80.382643][ T8662] ? netlink_attachskb+0x740/0x740 [ 80.390124][ T8662] ? _copy_from_iter_full+0x18a/0x780 [ 80.395622][ T8662] ? __kasan_check_read+0x11/0x20 [ 80.401731][ T8662] ? __check_object_size+0x203/0x2ea [ 80.407350][ T8662] netlink_sendmsg+0x7b0/0xcb0 [ 80.412586][ T8662] ? netlink_unicast+0x6a0/0x6a0 [ 80.417759][ T8662] ? apparmor_socket_sendmsg+0x1b/0x20 [ 80.423632][ T8662] ? netlink_unicast+0x6a0/0x6a0 [ 80.429730][ T8662] sock_sendmsg+0xb5/0xf0 [ 80.434208][ T8662] ____sys_sendmsg+0x603/0x950 [ 80.439788][ T8662] ? copy_msghdr_from_user+0x209/0x420 [ 80.446229][ T8662] ? kernel_sendmsg+0x30/0x30 [ 80.451357][ T8662] ___sys_sendmsg+0xe4/0x160 [ 80.455966][ T8662] ? sendmsg_copy_msghdr+0x30/0x30 [ 80.466339][ T8662] ? __kasan_check_read+0x11/0x20 [ 80.471429][ T8662] ? __fget+0x2ac/0x410 [ 80.477036][ T8662] ? ksys_dup3+0x2e0/0x2e0 [ 80.481802][ T8662] ? __might_fault+0xf1/0x1b0 [ 80.488001][ T8662] ? __fget_light+0x179/0x1f0 [ 80.492784][ T8662] ? lock_acquire+0x194/0x410 [ 80.499922][ T8662] ? __fdget+0xe/0x10 [ 80.504510][ T8662] __sys_sendmsg+0xd9/0x180 [ 80.509553][ T8662] ? __sys_sendmsg_sock+0xa0/0xa0 [ 80.514678][ T8662] ? __kasan_check_read+0x11/0x20 [ 80.519710][ T8662] ? _copy_to_user+0xcb/0xf0 [ 80.525102][ T8662] ? put_timespec64+0xa9/0x100 [ 80.530003][ T8662] ? nsecs_to_jiffies+0x20/0x20 [ 80.534852][ T8662] ? __blkcg_punt_bio_submit+0x1c0/0x1c0 [ 80.540485][ T8662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.547135][ T8662] __x64_sys_sendmsg+0x73/0xb0 [ 80.551914][ T8662] do_syscall_64+0xca/0x5f0 [ 80.557061][ T8662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.563800][ T8662] RIP: 0033:0x45c429 [ 80.568000][ T8662] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 80.589577][ T8662] RSP: 002b:00007f7b68546c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.598944][ T8662] RAX: ffffffffffffffda RBX: 00007f7b685476d4 RCX: 000000000045c429 [ 80.607346][ T8662] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 80.615885][ T8662] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 80.624686][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 80.633116][ T8662] R13: 0000000000000904 R14: 00000000004d4f90 R15: 000000000076bf2c [ 80.643441][ T8662] [ 80.646267][ T8662] Allocated by task 8623: [ 80.651851][ T8662] save_stack+0x21/0x90 [ 80.656267][ T8662] __kasan_kmalloc.constprop.17+0xc7/0xd0 [ 80.662412][ T8662] kasan_kmalloc+0x9/0x10 [ 80.666995][ T8662] __kmalloc_node_track_caller+0x4d/0x70 [ 80.672801][ T8662] __kmalloc_reserve.isra.46+0x2c/0xc0 [ 80.678519][ T8662] __alloc_skb+0xd7/0x570 [ 80.683605][ T8662] alloc_uevent_skb+0x84/0x220 [ 80.688541][ T8662] kobject_uevent_env+0xbf1/0xe90 [ 80.694171][ T8662] kobject_uevent+0xb/0x10 [ 80.699251][ T8662] net_rx_queue_update_kobjects+0xab/0x3a0 [ 80.705888][ T8662] netdev_register_kobject+0x249/0x360 [ 80.713365][ T8662] register_netdevice+0x489/0xf00 [ 80.718621][ T8662] __rtnl_newlink+0x1091/0x1480 [ 80.723785][ T8662] rtnl_newlink+0x61/0x90 [ 80.728112][ T8662] rtnetlink_rcv_msg+0x34a/0x8d0 [ 80.733057][ T8662] netlink_rcv_skb+0x13c/0x380 [ 80.737822][ T8662] rtnetlink_rcv+0x10/0x20 [ 80.742253][ T8662] netlink_unicast+0x45e/0x6a0 [ 80.747354][ T8662] netlink_sendmsg+0x7b0/0xcb0 [ 80.752950][ T8662] sock_sendmsg+0xb5/0xf0 [ 80.757824][ T8662] __sys_sendto+0x1f2/0x2e0 [ 80.762481][ T8662] __x64_sys_sendto+0xdc/0x1a0 [ 80.767246][ T8662] do_syscall_64+0xca/0x5f0 [ 80.771748][ T8662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.777622][ T8662] [ 80.779939][ T8662] Freed by task 8623: [ 80.784285][ T8662] save_stack+0x21/0x90 [ 80.789071][ T8662] __kasan_slab_free+0x102/0x150 [ 80.794338][ T8662] kasan_slab_free+0xe/0x10 [ 80.800234][ T8662] kfree+0x108/0x2c0 [ 80.805103][ T8662] skb_free_head+0x6e/0x90 [ 80.810591][ T8662] skb_release_data+0x27f/0x3f0 [ 80.817128][ T8662] skb_release_all+0x3d/0x50 [ 80.822140][ T8662] consume_skb+0xad/0x2d0 [ 80.826847][ T8662] netlink_broadcast_filtered+0x2b9/0xaa0 [ 80.832914][ T8662] netlink_broadcast+0xe/0x10 [ 80.838236][ T8662] kobject_uevent_env+0xc97/0xe90 [ 80.844161][ T8662] kobject_uevent+0xb/0x10 [ 80.848712][ T8662] net_rx_queue_update_kobjects+0xab/0x3a0 [ 80.855122][ T8662] netdev_register_kobject+0x249/0x360 [ 80.860875][ T8662] register_netdevice+0x489/0xf00 [ 80.866858][ T8662] __rtnl_newlink+0x1091/0x1480 [ 80.871719][ T8662] rtnl_newlink+0x61/0x90 [ 80.876297][ T8662] rtnetlink_rcv_msg+0x34a/0x8d0 [ 80.881543][ T8662] netlink_rcv_skb+0x13c/0x380 [ 80.887775][ T8662] rtnetlink_rcv+0x10/0x20 [ 80.893144][ T8662] netlink_unicast+0x45e/0x6a0 [ 80.898456][ T8662] netlink_sendmsg+0x7b0/0xcb0 [ 80.904616][ T8662] sock_sendmsg+0xb5/0xf0 [ 80.909244][ T8662] __sys_sendto+0x1f2/0x2e0 [ 80.914416][ T8662] __x64_sys_sendto+0xdc/0x1a0 [ 80.919480][ T8662] do_syscall_64+0xca/0x5f0 [ 80.924192][ T8662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 80.930308][ T8662] [ 80.933417][ T8662] The buggy address belongs to the object at ffff8880a8bf2400 [ 80.933417][ T8662] which belongs to the cache kmalloc-512 of size 512 [ 80.947775][ T8662] The buggy address is located 60 bytes inside of [ 80.947775][ T8662] 512-byte region [ffff8880a8bf2400, ffff8880a8bf2600) [ 80.963827][ T8662] The buggy address belongs to the page: [ 80.970265][ T8662] page:ffffea0002a2fc80 refcount:1 mapcount:0 mapping:ffff8880aa400a80 index:0x0 [ 80.981963][ T8662] raw: 00fffe0000000200 ffffea000255ee48 ffffea000222b808 ffff8880aa400a80 [ 80.991386][ T8662] raw: 0000000000000000 ffff8880a8bf2000 0000000100000004 0000000000000000 [ 80.999988][ T8662] page dumped because: kasan: bad access detected [ 81.006748][ T8662] [ 81.009065][ T8662] Memory state around the buggy address: [ 81.016219][ T8662] ffff8880a8bf2300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.025319][ T8662] ffff8880a8bf2380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.033837][ T8662] >ffff8880a8bf2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.045229][ T8662] ^ [ 81.052494][ T8662] ffff8880a8bf2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.061955][ T8662] ffff8880a8bf2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.070620][ T8662] ================================================================== [ 81.079152][ T8662] Disabling lock debugging due to kernel taint [ 81.093782][ T8662] Kernel panic - not syncing: panic_on_warn set ... [ 81.100603][ T8662] CPU: 0 PID: 8662 Comm: syz-executor.2 Tainted: G B 5.5.0-rc2-syzkaller #0 [ 81.110680][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.123677][ T8662] Call Trace: [ 81.127530][ T8662] dump_stack+0x12d/0x187 [ 81.132363][ T8662] ? ethnl_update_bitset32.part.5+0x720/0x1830 [ 81.139127][ T8662] panic+0x22a/0x4e3 [ 81.143221][ T8662] ? add_taint.cold.7+0x11/0x11 [ 81.148188][ T8662] ? ___preempt_schedule+0x16/0x18 [ 81.153604][ T8662] ? ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 81.159778][ T8662] end_report+0x47/0x4f [ 81.163937][ T8662] __kasan_report.cold.11+0xe/0x3a [ 81.169257][ T8662] ? ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 81.175601][ T8662] ? ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 81.182042][ T8662] kasan_report+0x12/0x20 [ 81.186416][ T8662] __asan_report_load4_noabort+0x14/0x20 [ 81.192048][ T8662] ethnl_update_bitset32.part.5+0x7c7/0x1830 [ 81.198396][ T8662] ? mutex_lock_io_nested+0x1280/0x1280 [ 81.204185][ T8662] ? __kasan_check_read+0x11/0x20 [ 81.209916][ T8662] ? ethnl_default_doit+0xa10/0xa10 [ 81.215614][ T8662] ? __kasan_check_read+0x11/0x20 [ 81.221154][ T8662] ? ethnl_parse_header+0x1bc/0x710 [ 81.226598][ T8662] ? memcpy+0x45/0x50 [ 81.231057][ T8662] ethnl_update_bitset+0xe/0x13 [ 81.236024][ T8662] ethnl_set_linkmodes+0x3b8/0xae0 [ 81.241339][ T8662] ? linkmodes_prepare_data+0x250/0x250 [ 81.247195][ T8662] ? kfree_skbmem+0x8c/0x130 [ 81.252836][ T8662] ? kfree_skbmem+0x8c/0x130 [ 81.257606][ T8662] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 81.264060][ T8662] ? kmem_cache_free+0x9d/0x320 [ 81.269079][ T8662] ? __kasan_check_write+0x14/0x20 [ 81.274721][ T8662] ? apparmor_capable+0x35e/0x670 [ 81.279740][ T8662] ? __kasan_check_write+0x14/0x20 [ 81.285112][ T8662] ? apparmor_capable+0x35e/0x670 [ 81.290335][ T8662] ? lock_downgrade+0x900/0x900 [ 81.295445][ T8662] ? ns_capable_common+0x5e/0xd0 [ 81.300496][ T8662] genl_rcv_msg+0x5d9/0x10e0 [ 81.305093][ T8662] ? genl_rcv_msg+0x5d9/0x10e0 [ 81.309867][ T8662] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 81.316347][ T8662] netlink_rcv_skb+0x13c/0x380 [ 81.321306][ T8662] ? genl_family_rcv_msg_attrs_parse+0x340/0x340 [ 81.328094][ T8662] ? netlink_ack+0x970/0x970 [ 81.332693][ T8662] ? netlink_deliver_tap+0x178/0xac0 [ 81.338034][ T8662] genl_rcv+0x23/0x40 [ 81.342305][ T8662] netlink_unicast+0x45e/0x6a0 [ 81.347163][ T8662] ? netlink_attachskb+0x740/0x740 [ 81.352654][ T8662] ? _copy_from_iter_full+0x18a/0x780 [ 81.358485][ T8662] ? __kasan_check_read+0x11/0x20 [ 81.363647][ T8662] ? __check_object_size+0x203/0x2ea [ 81.368927][ T8662] netlink_sendmsg+0x7b0/0xcb0 [ 81.373793][ T8662] ? netlink_unicast+0x6a0/0x6a0 [ 81.378748][ T8662] ? apparmor_socket_sendmsg+0x1b/0x20 [ 81.384734][ T8662] ? netlink_unicast+0x6a0/0x6a0 [ 81.390489][ T8662] sock_sendmsg+0xb5/0xf0 [ 81.395142][ T8662] ____sys_sendmsg+0x603/0x950 [ 81.400223][ T8662] ? copy_msghdr_from_user+0x209/0x420 [ 81.406435][ T8662] ? kernel_sendmsg+0x30/0x30 [ 81.412813][ T8662] ___sys_sendmsg+0xe4/0x160 [ 81.417405][ T8662] ? sendmsg_copy_msghdr+0x30/0x30 [ 81.423261][ T8662] ? __kasan_check_read+0x11/0x20 [ 81.428599][ T8662] ? __fget+0x2ac/0x410 [ 81.433069][ T8662] ? ksys_dup3+0x2e0/0x2e0 [ 81.437897][ T8662] ? __might_fault+0xf1/0x1b0 [ 81.442585][ T8662] ? __fget_light+0x179/0x1f0 [ 81.447573][ T8662] ? lock_acquire+0x194/0x410 [ 81.452260][ T8662] ? __fdget+0xe/0x10 [ 81.456236][ T8662] __sys_sendmsg+0xd9/0x180 [ 81.460903][ T8662] ? __sys_sendmsg_sock+0xa0/0xa0 [ 81.465932][ T8662] ? __kasan_check_read+0x11/0x20 [ 81.471504][ T8662] ? _copy_to_user+0xcb/0xf0 [ 81.476313][ T8662] ? put_timespec64+0xa9/0x100 [ 81.482089][ T8662] ? nsecs_to_jiffies+0x20/0x20 [ 81.487038][ T8662] ? __blkcg_punt_bio_submit+0x1c0/0x1c0 [ 81.492770][ T8662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.500196][ T8662] __x64_sys_sendmsg+0x73/0xb0 [ 81.504966][ T8662] do_syscall_64+0xca/0x5f0 [ 81.509551][ T8662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.515606][ T8662] RIP: 0033:0x45c429 [ 81.519600][ T8662] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 81.540195][ T8662] RSP: 002b:00007f7b68546c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.549894][ T8662] RAX: ffffffffffffffda RBX: 00007f7b685476d4 RCX: 000000000045c429 [ 81.558584][ T8662] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 81.567247][ T8662] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 81.575427][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 81.585176][ T8662] R13: 0000000000000904 R14: 00000000004d4f90 R15: 000000000076bf2c [ 81.594942][ T8662] Kernel Offset: disabled [ 81.599389][ T8662] Rebooting in 86400 seconds..