[ 18.974271][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 18.984389][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 18.995617][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.079796][ T408] syz-executor.0 (408) used greatest stack depth: 21824 bytes left [ 19.529369][ T94] device bridge_slave_1 left promiscuous mode [ 19.535304][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.549416][ T94] device bridge_slave_0 left promiscuous mode [ 19.555572][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.564745][ T94] device veth1_macvtap left promiscuous mode [ 19.581441][ T94] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.0.130' (ECDSA) to the list of known hosts. 2022/12/09 15:30:36 ignoring optional flag "sandboxArg"="0" 2022/12/09 15:30:36 parsed 1 programs 2022/12/09 15:30:36 executed programs: 0 [ 36.853357][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 36.853372][ T30] audit: type=1400 audit(1670599836.910:137): avc: denied { mounton } for pid=452 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.884747][ T30] audit: type=1400 audit(1670599836.910:138): avc: denied { mount } for pid=452 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.915323][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.922206][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.929648][ T455] device bridge_slave_0 entered promiscuous mode [ 36.936250][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.943101][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.950187][ T455] device bridge_slave_1 entered promiscuous mode [ 36.984012][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.990880][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.998107][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.005844][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.022361][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.029635][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.036765][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.044384][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.052873][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.061001][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.068013][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.085770][ T455] device veth0_vlan entered promiscuous mode [ 37.092715][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.101009][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.108656][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.116423][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.123729][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.131843][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.138954][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.146059][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.154306][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.165601][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.174532][ T455] device veth1_macvtap entered promiscuous mode [ 37.183040][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.194268][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.206601][ T30] audit: type=1400 audit(1670599837.260:139): avc: denied { mount } for pid=455 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.234029][ T460] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.245119][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.252789][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.267415][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.276100][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.288406][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.296946][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.305262][ T464] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.314576][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.321725][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.337122][ T466] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.347159][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.354791][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.374098][ T469] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.383560][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.390916][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.409753][ T471] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.419619][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.427014][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.445861][ T473] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.455122][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.462560][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.481685][ T475] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.490711][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.497762][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.516230][ T477] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.525496][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.532928][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.550368][ T479] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.560187][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.567385][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.591289][ T481] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 37.602621][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.610071][ T481] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 37.629007][ T126] skbuff: skb_over_panic: text:ffffffff845de104 len:76 put:20 head:ffff88810be6c800 data:ffff88810be6c840 tail:0x8c end:0x80 dev:syztnl1 [ 37.642950][ T126] ------------[ cut here ]------------ [ 37.648225][ T126] kernel BUG at net/core/skbuff.c:113! [ 37.653718][ T126] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 37.659697][ T126] CPU: 1 PID: 126 Comm: kworker/1:2 Not tainted 5.15.77-syzkaller-04939-g7048384c9872-dirty #0 [ 37.669845][ T126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 37.679784][ T126] Workqueue: ipv6_addrconf addrconf_dad_work [ 37.685556][ T126] RIP: 0010:skb_panic+0x14c/0x150 [ 37.690484][ T126] Code: c7 e0 79 be 85 48 8b 75 c0 48 8b 55 b8 8b 4d d4 44 8b 45 d0 4c 8b 4d c8 31 c0 53 41 56 41 55 41 54 e8 13 04 dd 00 48 83 c4 20 <0f> 0b 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 78 4c [ 37.709865][ T126] RSP: 0018:ffffc90000b578c8 EFLAGS: 00010282 [ 37.715873][ T126] RAX: 0000000000000086 RBX: ffff88810ec36000 RCX: 5ef217b6d76d6700 [ 37.723662][ T126] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 37.731649][ T126] RBP: ffffc90000b57910 R08: ffffffff81583ba9 R09: ffffed103ee265e8 [ 37.739564][ T126] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: ffff88810be6c840 [ 37.747361][ T126] R13: 000000000000008c R14: 0000000000000080 R15: dffffc0000000000 [ 37.755168][ T126] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.764020][ T126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.770876][ T126] CR2: 00007ffc86685fb8 CR3: 000000011ef26000 CR4: 00000000003506a0 [ 37.778775][ T126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.786595][ T126] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.794572][ T126] Call Trace: [ 37.797695][ T126] [ 37.800823][ T126] ? add_grec+0xf74/0x13d0 [ 37.805161][ T126] ? add_grec+0xf74/0x13d0 [ 37.809410][ T126] skb_put+0x153/0x210 [ 37.813578][ T126] add_grec+0xf74/0x13d0 [ 37.817657][ T126] ? __kasan_check_write+0x14/0x20 [ 37.822608][ T126] ? wait_for_completion_killable_timeout+0x10/0x10 [ 37.829034][ T126] ipv6_mc_dad_complete+0x246/0x5f0 [ 37.834062][ T126] addrconf_dad_completed+0x733/0xe20 [ 37.839275][ T126] ? addrconf_dad_stop+0x430/0x430 [ 37.844310][ T126] addrconf_dad_work+0xd8f/0x1680 [ 37.849169][ T126] ? refcount_inc+0x80/0x80 [ 37.853505][ T126] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 37.858626][ T126] ? __kasan_check_read+0x11/0x20 [ 37.863553][ T126] ? strscpy+0xa8/0x270 [ 37.867486][ T126] process_one_work+0x6db/0xc00 [ 37.872163][ T126] worker_thread+0xb3e/0x1340 [ 37.876699][ T126] kthread+0x41c/0x500 [ 37.880590][ T126] ? worker_clr_flags+0x180/0x180 [ 37.885534][ T126] ? kthread_blkcg+0xd0/0xd0 [ 37.889960][ T126] ret_from_fork+0x1f/0x30 [ 37.894406][ T126] [ 37.897274][ T126] Modules linked in: [ 37.901551][ T126] ---[ end trace 5f2c1365a2bc5892 ]--- [ 37.906900][ T126] RIP: 0010:skb_panic+0x14c/0x150 [ 37.911807][ T126] Code: c7 e0 79 be 85 48 8b 75 c0 48 8b 55 b8 8b 4d d4 44 8b 45 d0 4c 8b 4d c8 31 c0 53 41 56 41 55 41 54 e8 13 04 dd 00 48 83 c4 20 <0f> 0b 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 78 4c [ 37.931407][ T126] RSP: 0018:ffffc90000b578c8 EFLAGS: 00010282 [ 37.937455][ T126] RAX: 0000000000000086 RBX: ffff88810ec36000 RCX: 5ef217b6d76d6700 [ 37.945424][ T126] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 37.953316][ T126] RBP: ffffc90000b57910 R08: ffffffff81583ba9 R09: ffffed103ee265e8 [ 37.961359][ T126] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: ffff88810be6c840 [ 37.969684][ T126] R13: 000000000000008c R14: 0000000000000080 R15: dffffc0000000000 [ 37.977642][ T126] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.986818][ T126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.993210][ T126] CR2: 00007ffc86685fb8 CR3: 000000011ef26000 CR4: 00000000003506a0 [ 38.001121][ T126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.009152][ T126] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.017196][ T126] Kernel panic - not syncing: Fatal exception [ 38.023544][ T126] Kernel Offset: disabled [ 38.027666][ T126] Rebooting in 86400 seconds..