[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 33.928398][ T7187] IPVS: ftp: loaded support on port[0] = 21 [ 34.210264][ T6920] tipc: TX() has been purged, node left! [ 34.561052][ T7182] can: request_module (can-proto-0) failed. [ 36.932926][ T7182] can: request_module (can-proto-0) failed. [ 36.942423][ T7182] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. 2020/05/20 04:33:59 parsed 1 programs 2020/05/20 04:34:00 executed programs: 0 [ 44.217614][ T7319] IPVS: ftp: loaded support on port[0] = 21 [ 44.227721][ T7317] IPVS: ftp: loaded support on port[0] = 21 [ 44.316195][ T7329] IPVS: ftp: loaded support on port[0] = 21 [ 44.316210][ T7340] IPVS: ftp: loaded support on port[0] = 21 [ 44.329612][ T7345] IPVS: ftp: loaded support on port[0] = 21 [ 44.413873][ T7319] chnl_net:caif_netlink_parms(): no params data found [ 44.481000][ T7375] IPVS: ftp: loaded support on port[0] = 21 [ 44.509299][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.519269][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.528737][ T7319] device bridge_slave_0 entered promiscuous mode [ 44.547059][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.557157][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.569700][ T7319] device bridge_slave_1 entered promiscuous mode [ 44.641368][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.677104][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.708329][ T7319] team0: Port device team_slave_0 added [ 44.717294][ T7319] team0: Port device team_slave_1 added [ 44.742111][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 44.773944][ T7340] chnl_net:caif_netlink_parms(): no params data found [ 44.841385][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.848973][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.878432][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.915122][ T7345] chnl_net:caif_netlink_parms(): no params data found [ 44.924975][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.933126][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.962350][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.979422][ T7329] chnl_net:caif_netlink_parms(): no params data found [ 45.078483][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.086265][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.095649][ T7329] device bridge_slave_0 entered promiscuous mode [ 45.106873][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.114068][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.121591][ T7329] device bridge_slave_1 entered promiscuous mode [ 45.128805][ T7340] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.136415][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.144030][ T7340] device bridge_slave_0 entered promiscuous mode [ 45.183533][ T7319] device hsr_slave_0 entered promiscuous mode [ 45.221937][ T7319] device hsr_slave_1 entered promiscuous mode [ 45.272087][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.279936][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.288208][ T7317] device bridge_slave_0 entered promiscuous mode [ 45.298686][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.306929][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.314841][ T7317] device bridge_slave_1 entered promiscuous mode [ 45.332458][ T7340] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.339543][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.347821][ T7340] device bridge_slave_1 entered promiscuous mode [ 45.368710][ T7340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.391293][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.412331][ T7340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.426852][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.436984][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.444730][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.452569][ T7345] device bridge_slave_0 entered promiscuous mode [ 45.485005][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.498926][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.508505][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.518740][ T7345] device bridge_slave_1 entered promiscuous mode [ 45.539289][ T7340] team0: Port device team_slave_0 added [ 45.553847][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.579567][ T7340] team0: Port device team_slave_1 added [ 45.600029][ T7329] team0: Port device team_slave_0 added [ 45.611583][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.638881][ T7329] team0: Port device team_slave_1 added [ 45.646014][ T7375] chnl_net:caif_netlink_parms(): no params data found [ 45.656983][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.669232][ T7317] team0: Port device team_slave_0 added [ 45.675560][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.684916][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.713316][ T7340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.729587][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.737646][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.764695][ T7340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.790643][ T7317] team0: Port device team_slave_1 added [ 45.808808][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.816391][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.843002][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.866588][ T7345] team0: Port device team_slave_0 added [ 45.874066][ T7345] team0: Port device team_slave_1 added [ 45.884246][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.891201][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.918169][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.003252][ T7340] device hsr_slave_0 entered promiscuous mode [ 46.071644][ T7340] device hsr_slave_1 entered promiscuous mode [ 46.111286][ T7340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.118891][ T7340] Cannot create hsr debugfs directory [ 46.135377][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.144785][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.171814][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.186882][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.194430][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.221178][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.255654][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.264209][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.293145][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.308951][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.316721][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.348574][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.403415][ T7329] device hsr_slave_0 entered promiscuous mode [ 46.451533][ T7329] device hsr_slave_1 entered promiscuous mode [ 46.491177][ T7329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.498851][ T7329] Cannot create hsr debugfs directory [ 46.518919][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.527681][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.536048][ T7375] device bridge_slave_0 entered promiscuous mode [ 46.602937][ T7317] device hsr_slave_0 entered promiscuous mode [ 46.641253][ T7317] device hsr_slave_1 entered promiscuous mode [ 46.680993][ T7317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.688590][ T7317] Cannot create hsr debugfs directory [ 46.711680][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.718831][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.727226][ T7375] device bridge_slave_1 entered promiscuous mode [ 46.786696][ T7319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.883388][ T7345] device hsr_slave_0 entered promiscuous mode [ 46.921322][ T7345] device hsr_slave_1 entered promiscuous mode [ 46.960888][ T7345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.968869][ T7345] Cannot create hsr debugfs directory [ 46.984758][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.994880][ T7319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.046910][ T7319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.094251][ T7319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.160281][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.218950][ T7375] team0: Port device team_slave_0 added [ 47.232311][ T7375] team0: Port device team_slave_1 added [ 47.274105][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.281536][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.308605][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.343106][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.350082][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.378895][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.420117][ T7317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.496524][ T7317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.564075][ T7340] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.652465][ T7375] device hsr_slave_0 entered promiscuous mode [ 47.701014][ T7375] device hsr_slave_1 entered promiscuous mode [ 47.740671][ T7375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.748456][ T7375] Cannot create hsr debugfs directory [ 47.754843][ T7317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.811801][ T7317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.861892][ T7340] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.913851][ T7340] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.953676][ T7340] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.028226][ T7329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.074588][ T7329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.124286][ T7329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.172864][ T7329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.258899][ T7345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.301675][ T7345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.375687][ T7345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.432856][ T7345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.481531][ T7375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.524746][ T7375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.574196][ T7375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.641824][ T7375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.700728][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.722932][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.768972][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.777780][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.794942][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.806007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.814558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.823852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.832917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.843106][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.850522][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.865255][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.881417][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.890669][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.907822][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.920300][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.928958][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.938280][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.945903][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.956150][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.965077][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.973818][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.981294][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.989591][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.009922][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.018891][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.029208][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.038149][ T2709] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.046605][ T2709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.055505][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.064362][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.074307][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.084023][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.092305][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.109939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.119577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.130656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.139077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.147713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.156058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.165423][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.175937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.194987][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.204221][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.213363][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.222365][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.232023][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.248845][ T7317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.259861][ T7317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.282514][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.294101][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.306168][ T2709] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.316196][ T2709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.324805][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.333780][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.343948][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.353455][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.363277][ T2709] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.370713][ T2709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.378252][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.387513][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.396172][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.405091][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.413656][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.422836][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.431162][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.446039][ T7329] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.454877][ T7319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.463393][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.471987][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.491334][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.506005][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.515352][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.524114][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.532852][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.542286][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.551229][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.560400][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.571570][ T7340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.583841][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.611164][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.619076][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.629412][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.638057][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.647516][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.656816][ T3150] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.664582][ T3150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.672453][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.680195][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.688153][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.696027][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.704625][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.723359][ T7375] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.732005][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.740595][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.752341][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.759468][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.768709][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.781359][ T7345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.789074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.798895][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.808655][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.816008][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.839056][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.847364][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.856803][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.865827][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.873052][ T3147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.881436][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.890620][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.899247][ T3147] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.907833][ T3147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.916748][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.926685][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.936185][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.947822][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.960679][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.968331][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.978884][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.007796][ T7345] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.022381][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.032046][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.041646][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.054257][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.065492][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.075105][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.084107][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.094139][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.102915][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.111779][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.120686][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.130368][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.142006][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.158687][ T7375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.172051][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.193425][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.203360][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.214345][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.225557][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.235294][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.244569][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.253691][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.263337][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.280364][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.290507][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.299214][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.308640][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.317279][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.325414][ T3147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.334156][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.343030][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.352578][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.364534][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.373570][ T3147] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.381144][ T3147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.389854][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.411538][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.421689][ T7329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.438367][ T7340] device veth0_vlan entered promiscuous mode [ 50.450484][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.458247][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.470397][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.479165][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.488998][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.498602][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.507874][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.534762][ T7340] device veth1_vlan entered promiscuous mode [ 50.544698][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.557492][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.568518][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.577355][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.585914][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.595084][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.604578][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.614070][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.623535][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.633685][ T7319] device veth0_vlan entered promiscuous mode [ 50.652740][ T7317] device veth0_vlan entered promiscuous mode [ 50.668754][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.677806][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.690695][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.707199][ T7340] device veth0_macvtap entered promiscuous mode [ 50.717785][ T7340] device veth1_macvtap entered promiscuous mode [ 50.734051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.742539][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.752097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.761629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.771879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.781478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.793214][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.801735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.813663][ T7317] device veth1_vlan entered promiscuous mode [ 50.824201][ T7329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.837121][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.852318][ T7319] device veth1_vlan entered promiscuous mode [ 50.859640][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.867721][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.877277][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.886428][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.896102][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.905406][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.920834][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.928937][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.937705][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.947198][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.956221][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.981159][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.991655][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.001865][ T3150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.014653][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.031915][ T7317] device veth0_macvtap entered promiscuous mode [ 51.041820][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.051496][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.061535][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.071483][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.080661][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.110753][ T7317] device veth1_macvtap entered promiscuous mode [ 51.143852][ T7319] device veth0_macvtap entered promiscuous mode [ 51.164193][ T7375] device veth0_vlan entered promiscuous mode [ 51.174338][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.183698][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.194595][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.203260][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.213005][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.222129][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.231357][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.309355][ T7375] device veth1_vlan entered promiscuous mode [ 51.317231][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.326541][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.335896][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.344389][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.353356][ T7319] device veth1_macvtap entered promiscuous mode [ 51.417960][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.431640][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.443686][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.463200][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 51.477381][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.488829][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.505543][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.517399][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.528723][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 51.540468][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.551845][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.560776][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.570128][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.578947][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.588670][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.598190][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.606064][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.613855][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.623185][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.631851][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.640555][ T3149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.649812][ T8584] ================================================================== [ 51.658488][ T8584] BUG: KASAN: slab-out-of-bounds in br_mrp_parse+0x277/0x3a0 [ 51.665848][ T8584] Read of size 4 at addr ffff888092996f5c by task syz-executor.0/8584 [ 51.674624][ T8584] [ 51.676932][ T8584] CPU: 0 PID: 8584 Comm: syz-executor.0 Not tainted 5.7.0-rc2-syzkaller #0 [ 51.685984][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.696588][ T8584] Call Trace: [ 51.699879][ T8584] dump_stack+0x128/0x182 [ 51.704463][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 51.709233][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 51.713890][ T8584] print_address_description.constprop.8.cold.10+0x9/0x317 [ 51.721314][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 51.726081][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 51.731006][ T8584] __kasan_report.cold.11+0x35/0x4d [ 51.736444][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 51.741612][ T8584] kasan_report+0x32/0x50 [ 51.746059][ T8584] br_mrp_parse+0x277/0x3a0 [ 51.750885][ T8584] ? br_mrp_enabled+0x40/0x40 [ 51.755652][ T8584] ? finish_task_switch+0x11d/0x6a0 [ 51.760837][ T8584] ? lock_downgrade+0x800/0x800 [ 51.766109][ T8584] br_afspec+0x316/0x3d0 [ 51.770364][ T8584] ? lock_downgrade+0x800/0x800 [ 51.776554][ T8584] ? br_process_vlan_info+0x7b0/0x7b0 [ 51.782266][ T8584] ? mark_held_locks+0x110/0x110 [ 51.787332][ T8584] ? _raw_spin_unlock_irq+0x58/0x80 [ 51.792831][ T8584] ? finish_task_switch+0x11d/0x6a0 [ 51.798187][ T8584] br_setlink+0x33c/0x4c0 [ 51.802506][ T8584] ? br_afspec+0x3d0/0x3d0 [ 51.807018][ T8584] ? rwlock_bug.part.0+0x40/0x90 [ 51.811951][ T8584] ? do_raw_spin_unlock+0x172/0x260 [ 51.817283][ T8584] ? _raw_spin_unlock+0x24/0x40 [ 51.822331][ T8584] ? __mutex_lock+0x5a9/0x13e0 [ 51.827260][ T8584] ? rtnetlink_rcv_msg+0x2f8/0x8c0 [ 51.833370][ T8584] ? mutex_lock_io_nested+0x12e0/0x12e0 [ 51.839312][ T8584] ? lock_downgrade+0x800/0x800 [ 51.844152][ T8584] rtnl_bridge_setlink+0x214/0x6e0 [ 51.849272][ T8584] rtnetlink_rcv_msg+0x346/0x8c0 [ 51.854652][ T8584] ? rtnetlink_put_metrics+0x450/0x450 [ 51.860093][ T8584] ? memcpy+0x38/0x60 [ 51.864089][ T8584] ? __copy_skb_header+0x288/0x4b0 [ 51.869374][ T8584] ? skb_splice_bits+0x190/0x190 [ 51.874691][ T8584] netlink_rcv_skb+0x119/0x340 [ 51.879536][ T8584] ? rtnetlink_put_metrics+0x450/0x450 [ 51.885291][ T8584] ? netlink_ack+0x890/0x890 [ 51.889869][ T8584] netlink_unicast+0x434/0x630 [ 51.894791][ T8584] ? netlink_attachskb+0x6b0/0x6b0 [ 51.899894][ T8584] ? __check_object_size+0x1f5/0x2c8 [ 51.905155][ T8584] netlink_sendmsg+0x714/0xc60 [ 51.910186][ T8584] ? netlink_unicast+0x630/0x630 [ 51.915264][ T8584] ? _copy_from_user+0xbe/0x100 [ 51.920104][ T8584] ? netlink_unicast+0x630/0x630 [ 51.925023][ T8584] sock_sendmsg+0xac/0xe0 [ 51.929445][ T8584] ____sys_sendmsg+0x554/0x760 [ 51.934576][ T8584] ? kernel_sendmsg+0x30/0x30 [ 51.939229][ T8584] ? __copy_msghdr_from_user+0x3c0/0x3c0 [ 51.944932][ T8584] ___sys_sendmsg+0xe4/0x160 [ 51.949508][ T8584] ? sendmsg_copy_msghdr+0x30/0x30 [ 51.954602][ T8584] ? lock_release+0x7f0/0x7f0 [ 51.959287][ T8584] ? mark_held_locks+0x110/0x110 [ 51.964198][ T8584] ? futex_exit_release+0x60/0x60 [ 51.969509][ T8584] ? apparmor_path_rename+0xb50/0xb50 [ 51.975092][ T8584] ? __fget_files+0x284/0x3d0 [ 51.979760][ T8584] ? ksys_dup3+0x2e0/0x2e0 [ 51.984243][ T8584] ? lock_downgrade+0x800/0x800 [ 51.989080][ T8584] ? __fget_light+0x1a5/0x220 [ 51.993987][ T8584] ? sockfd_lookup_light+0x17/0x140 [ 51.999294][ T8584] __sys_sendmsg+0xce/0x170 [ 52.004129][ T8584] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.009272][ T8584] ? put_timespec64+0xa6/0xf0 [ 52.014040][ T8584] ? nsecs_to_jiffies+0x20/0x20 [ 52.018877][ T8584] do_syscall_64+0xc6/0x620 [ 52.023455][ T8584] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.029579][ T8584] RIP: 0033:0x45ca29 [ 52.033679][ T8584] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.053660][ T8584] RSP: 002b:00007f3602a0ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.062678][ T8584] RAX: ffffffffffffffda RBX: 0000000000500d80 RCX: 000000000045ca29 [ 52.070783][ T8584] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 52.078956][ T8584] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 52.086923][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 52.095165][ T8584] R13: 00000000000009fd R14: 00000000004ccd59 R15: 00007f3602a0b6d4 [ 52.103116][ T8584] [ 52.105472][ T8584] Allocated by task 7340: [ 52.109808][ T8584] save_stack+0x19/0x40 [ 52.113948][ T8584] __kasan_kmalloc.constprop.17+0xc1/0xd0 [ 52.119678][ T8584] alloc_netdev_mqs+0x5a/0xd00 [ 52.124434][ T8584] rtnl_create_link+0x1e5/0xb60 [ 52.129523][ T8584] __rtnl_newlink+0xb22/0x1250 [ 52.134292][ T8584] rtnl_newlink+0x5c/0x80 [ 52.138868][ T8584] rtnetlink_rcv_msg+0x346/0x8c0 [ 52.143779][ T8584] netlink_rcv_skb+0x119/0x340 [ 52.148971][ T8584] netlink_unicast+0x434/0x630 [ 52.153749][ T8584] netlink_sendmsg+0x714/0xc60 [ 52.158488][ T8584] sock_sendmsg+0xac/0xe0 [ 52.162802][ T8584] __sys_sendto+0x1d9/0x2b0 [ 52.167483][ T8584] __x64_sys_sendto+0xd8/0x1b0 [ 52.172252][ T8584] do_syscall_64+0xc6/0x620 [ 52.178123][ T8584] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.183984][ T8584] [ 52.186292][ T8584] Freed by task 1: [ 52.190202][ T8584] save_stack+0x19/0x40 [ 52.194426][ T8584] __kasan_slab_free+0xf7/0x140 [ 52.199290][ T8584] kfree+0x107/0x2b0 [ 52.203290][ T8584] tomoyo_realpath_from_path+0x145/0x670 [ 52.208900][ T8584] tomoyo_path_perm+0x1fa/0x370 [ 52.213723][ T8584] security_inode_getattr+0xab/0x100 [ 52.219337][ T8584] vfs_getattr+0x17/0x40 [ 52.223833][ T8584] vfs_statx+0xcb/0x130 [ 52.227984][ T8584] __do_sys_newlstat+0x77/0xd0 [ 52.232730][ T8584] do_syscall_64+0xc6/0x620 [ 52.238304][ T8584] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.244173][ T8584] [ 52.246478][ T8584] The buggy address belongs to the object at ffff888092996000 [ 52.246478][ T8584] which belongs to the cache kmalloc-4k of size 4096 [ 52.262110][ T8584] The buggy address is located 3932 bytes inside of [ 52.262110][ T8584] 4096-byte region [ffff888092996000, ffff888092997000) [ 52.275598][ T8584] The buggy address belongs to the page: [ 52.281542][ T8584] page:ffffea00024a6580 refcount:1 mapcount:0 mapping:00000000e0c12e3c index:0x0 head:ffffea00024a6580 order:1 compound_mapcount:0 [ 52.295314][ T8584] flags: 0xfffe0000010200(slab|head) [ 52.300595][ T8584] raw: 00fffe0000010200 ffffea00027dba08 ffffea00024a2688 ffff8880aa402000 [ 52.309155][ T8584] raw: 0000000000000000 ffff888092996000 0000000100000001 0000000000000000 [ 52.317742][ T8584] page dumped because: kasan: bad access detected [ 52.324125][ T8584] [ 52.326447][ T8584] Memory state around the buggy address: [ 52.332092][ T8584] ffff888092996e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.340136][ T8584] ffff888092996e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.348181][ T8584] >ffff888092996f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.356279][ T8584] ^ [ 52.363305][ T8584] ffff888092996f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.371784][ T8584] ffff888092997000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 52.379821][ T8584] ================================================================== [ 52.410362][ T8584] Kernel panic - not syncing: panic_on_warn set ... [ 52.417110][ T8584] CPU: 1 PID: 8584 Comm: syz-executor.0 Tainted: G B 5.7.0-rc2-syzkaller #0 [ 52.427157][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.437284][ T8584] Call Trace: [ 52.440667][ T8584] dump_stack+0x128/0x182 [ 52.445265][ T8584] ? br_mrp_parse+0x240/0x3a0 [ 52.450168][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 52.454846][ T8584] panic+0x22a/0x4e3 [ 52.458721][ T8584] ? add_taint.cold.7+0x11/0x11 [ 52.463698][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 52.468689][ T8584] ? preempt_schedule_thunk+0x16/0x18 [ 52.474202][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 52.478889][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 52.483534][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 52.488208][ T8584] end_report+0x4d/0x53 [ 52.492530][ T8584] __kasan_report.cold.11+0xd/0x4d [ 52.497629][ T8584] ? br_mrp_parse+0x277/0x3a0 [ 52.502408][ T8584] kasan_report+0x32/0x50 [ 52.506873][ T8584] br_mrp_parse+0x277/0x3a0 [ 52.511355][ T8584] ? br_mrp_enabled+0x40/0x40 [ 52.516016][ T8584] ? finish_task_switch+0x11d/0x6a0 [ 52.521183][ T8584] ? lock_downgrade+0x800/0x800 [ 52.526001][ T8584] br_afspec+0x316/0x3d0 [ 52.530856][ T8584] ? lock_downgrade+0x800/0x800 [ 52.535802][ T8584] ? br_process_vlan_info+0x7b0/0x7b0 [ 52.541270][ T8584] ? mark_held_locks+0x110/0x110 [ 52.546183][ T8584] ? _raw_spin_unlock_irq+0x58/0x80 [ 52.551457][ T8584] ? finish_task_switch+0x11d/0x6a0 [ 52.556646][ T8584] br_setlink+0x33c/0x4c0 [ 52.560957][ T8584] ? br_afspec+0x3d0/0x3d0 [ 52.565361][ T8584] ? rwlock_bug.part.0+0x40/0x90 [ 52.571229][ T8584] ? do_raw_spin_unlock+0x172/0x260 [ 52.576415][ T8584] ? _raw_spin_unlock+0x24/0x40 [ 52.581435][ T8584] ? __mutex_lock+0x5a9/0x13e0 [ 52.586187][ T8584] ? rtnetlink_rcv_msg+0x2f8/0x8c0 [ 52.591393][ T8584] ? mutex_lock_io_nested+0x12e0/0x12e0 [ 52.597095][ T8584] ? lock_downgrade+0x800/0x800 [ 52.602064][ T8584] rtnl_bridge_setlink+0x214/0x6e0 [ 52.607273][ T8584] rtnetlink_rcv_msg+0x346/0x8c0 [ 52.612354][ T8584] ? rtnetlink_put_metrics+0x450/0x450 [ 52.617829][ T8584] ? memcpy+0x38/0x60 [ 52.621794][ T8584] ? __copy_skb_header+0x288/0x4b0 [ 52.626892][ T8584] ? skb_splice_bits+0x190/0x190 [ 52.632051][ T8584] netlink_rcv_skb+0x119/0x340 [ 52.636808][ T8584] ? rtnetlink_put_metrics+0x450/0x450 [ 52.642371][ T8584] ? netlink_ack+0x890/0x890 [ 52.647324][ T8584] netlink_unicast+0x434/0x630 [ 52.652318][ T8584] ? netlink_attachskb+0x6b0/0x6b0 [ 52.657437][ T8584] ? __check_object_size+0x1f5/0x2c8 [ 52.662867][ T8584] netlink_sendmsg+0x714/0xc60 [ 52.667632][ T8584] ? netlink_unicast+0x630/0x630 [ 52.673665][ T8584] ? _copy_from_user+0xbe/0x100 [ 52.678495][ T8584] ? netlink_unicast+0x630/0x630 [ 52.683657][ T8584] sock_sendmsg+0xac/0xe0 [ 52.687984][ T8584] ____sys_sendmsg+0x554/0x760 [ 52.692793][ T8584] ? kernel_sendmsg+0x30/0x30 [ 52.697551][ T8584] ? __copy_msghdr_from_user+0x3c0/0x3c0 [ 52.703323][ T8584] ___sys_sendmsg+0xe4/0x160 [ 52.707907][ T8584] ? sendmsg_copy_msghdr+0x30/0x30 [ 52.713500][ T8584] ? lock_release+0x7f0/0x7f0 [ 52.718186][ T8584] ? mark_held_locks+0x110/0x110 [ 52.723177][ T8584] ? futex_exit_release+0x60/0x60 [ 52.728191][ T8584] ? apparmor_path_rename+0xb50/0xb50 [ 52.734585][ T8584] ? __fget_files+0x284/0x3d0 [ 52.739624][ T8584] ? ksys_dup3+0x2e0/0x2e0 [ 52.744646][ T8584] ? lock_downgrade+0x800/0x800 [ 52.749746][ T8584] ? __fget_light+0x1a5/0x220 [ 52.754408][ T8584] ? sockfd_lookup_light+0x17/0x140 [ 52.759573][ T8584] __sys_sendmsg+0xce/0x170 [ 52.764782][ T8584] ? __sys_sendmsg_sock+0xa0/0xa0 [ 52.769931][ T8584] ? put_timespec64+0xa6/0xf0 [ 52.775117][ T8584] ? nsecs_to_jiffies+0x20/0x20 [ 52.780137][ T8584] do_syscall_64+0xc6/0x620 [ 52.784988][ T8584] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 52.791251][ T8584] RIP: 0033:0x45ca29 [ 52.795361][ T8584] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.816981][ T8584] RSP: 002b:00007f3602a0ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.826167][ T8584] RAX: ffffffffffffffda RBX: 0000000000500d80 RCX: 000000000045ca29 [ 52.834472][ T8584] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 52.843409][ T8584] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 52.852185][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 52.860143][ T8584] R13: 00000000000009fd R14: 00000000004ccd59 R15: 00007f3602a0b6d4 [ 52.869844][ T8584] Kernel Offset: disabled [ 52.874415][ T8584] Rebooting in 86400 seconds..