Warning: Permanently added '[localhost]:9842' (ED25519) to the list of known hosts. 1970/01/01 00:04:11 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:04:15 parsed 1 programs [ 256.383197][ T3361] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:04:16 executed programs: 0 [ 260.655139][ T3367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.675873][ T3367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.844476][ T3367] hsr_slave_0: entered promiscuous mode [ 262.892257][ T3367] hsr_slave_1: entered promiscuous mode [ 264.483282][ T3367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.522080][ T3367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.570095][ T3367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.616578][ T3367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.416349][ T3367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.912867][ T3367] veth0_vlan: entered promiscuous mode [ 273.000764][ T3367] veth1_vlan: entered promiscuous mode [ 273.199442][ T3367] veth0_macvtap: entered promiscuous mode [ 273.264962][ T3367] veth1_macvtap: entered promiscuous mode [ 273.512907][ T3367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.514419][ T3367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.522563][ T3367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.524178][ T3367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.461995][ T1821] ================================================================== [ 274.470623][ T1821] BUG: KASAN: invalid-access in __packet_get_status+0xb8/0x138 [ 274.475150][ T1821] Read at addr f7f0000004280000 by task kworker/1:2/1821 [ 274.476799][ T1821] Pointer tag: [f7], memory tag: [f0] [ 274.478850][ T1821] [ 274.479925][ T1821] CPU: 1 PID: 1821 Comm: kworker/1:2 Not tainted 6.10.0-rc6-syzkaller-g8a9c6c40432e #0 [ 274.481112][ T1821] Hardware name: linux,dummy-virt (DT) [ 274.482163][ T1821] Workqueue: mld mld_dad_work [ 274.484111][ T1821] Call trace: [ 274.484814][ T1821] dump_backtrace+0x94/0xec [ 274.485665][ T1821] show_stack+0x18/0x24 [ 274.486325][ T1821] dump_stack_lvl+0x78/0x90 [ 274.486938][ T1821] print_report+0x108/0x618 [ 274.487634][ T1821] kasan_report+0x88/0xac [ 274.488378][ T1821] __do_kernel_fault+0x1a0/0x1dc [ 274.489017][ T1821] do_tag_check_fault+0x78/0x8c [ 274.489676][ T1821] do_mem_abort+0x44/0x94 [ 274.490290][ T1821] el1_abort+0x40/0x60 [ 274.490859][ T1821] el1h_64_sync_handler+0xd8/0xe4 [ 274.491546][ T1821] el1h_64_sync+0x64/0x68 [ 274.492155][ T1821] __packet_get_status+0xb8/0x138 [ 274.492801][ T1821] tpacket_rcv+0x2b0/0xbd0 [ 274.493498][ T1821] dev_queue_xmit_nit+0x284/0x2c8 [ 274.494189][ T1821] dev_hard_start_xmit+0x7c/0x118 [ 274.494793][ T1821] __dev_queue_xmit+0x1c0/0xea8 [ 274.495454][ T1821] ip6_finish_output2+0x3ac/0x914 [ 274.496129][ T1821] ip6_finish_output+0x228/0x344 [ 274.496749][ T1821] ip6_output+0x78/0x1c8 [ 274.497367][ T1821] NF_HOOK.constprop.0+0x50/0xe0 [ 274.498092][ T1821] mld_sendpack+0x204/0x408 [ 274.498700][ T1821] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 274.499389][ T1821] mld_dad_work+0x40/0x1a4 [ 274.500008][ T1821] process_one_work+0x164/0x2a8 [ 274.500638][ T1821] worker_thread+0x268/0x378 [ 274.501250][ T1821] kthread+0x114/0x118 [ 274.501871][ T1821] ret_from_fork+0x10/0x20 [ 274.502734][ T1821] [ 274.503316][ T1821] The buggy address belongs to the physical page: [ 274.504208][ T1821] page: refcount:9 mapcount:1 mapping:0000000000000000 index:0xf4f0000004286800 pfn:0x44280 [ 274.505336][ T1821] head: order:3 mapcount:8 entire_mapcount:0 nr_pages_mapped:8 pincount:0 [ 274.506320][ T1821] flags: 0x1ffc20003000040(head|arch_2|arch_3|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x8) [ 274.508364][ T1821] raw: 01ffc20003000040 0000000000000000 dead000000000122 0000000000000000 [ 274.509426][ T1821] raw: f4f0000004286800 0000000000000000 0000000900000000 0000000000000000 [ 274.510503][ T1821] head: 01ffc20003000040 0000000000000000 dead000000000122 0000000000000000 [ 274.511402][ T1821] head: f4f0000004286800 0000000000000000 0000000900000000 0000000000000000 [ 274.512331][ T1821] head: 01ffc20003000003 ffffc1ffc010a001 ffffffff00000007 0000000000000008 [ 274.513407][ T1821] head: 0000000000000008 0000000000000000 0000000000000000 0000000000000000 [ 274.514257][ T1821] page dumped because: kasan: bad access detected [ 274.514950][ T1821] [ 274.515367][ T1821] Memory state around the buggy address: [ 274.516205][ T1821] fff000000427fe00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa [ 274.517171][ T1821] fff000000427ff00: fa fa fa fa fe fe fe fe fe fe fe fe fe fe fe fe [ 274.518197][ T1821] >fff0000004280000: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 [ 274.519092][ T1821] ^ [ 274.519886][ T1821] fff0000004280100: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 [ 274.520628][ T1821] fff0000004280200: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 [ 274.521461][ T1821] ================================================================== [ 274.522982][ T1821] Disabling lock debugging due to kernel taint 1970/01/01 00:04:35 executed programs: 1 1970/01/01 00:04:40 executed programs: 7 1970/01/01 00:04:45 executed programs: 16 1970/01/01 00:04:51 executed programs: 25 1970/01/01 00:04:56 executed programs: 34 1970/01/01 00:05:02 executed programs: 43