[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.137' (ECDSA) to the list of known hosts. 2020/05/03 09:55:21 parsed 1 programs 2020/05/03 09:55:22 executed programs: 0 syzkaller login: [ 201.884537][ T27] audit: type=1400 audit(1588499722.563:8): avc: denied { execmem } for pid=7095 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 202.038529][ T7099] IPVS: ftp: loaded support on port[0] = 21 [ 202.038535][ T7096] IPVS: ftp: loaded support on port[0] = 21 [ 202.061951][ T7103] IPVS: ftp: loaded support on port[0] = 21 [ 202.087170][ T7102] IPVS: ftp: loaded support on port[0] = 21 [ 202.102098][ T7104] IPVS: ftp: loaded support on port[0] = 21 [ 202.226701][ T7116] IPVS: ftp: loaded support on port[0] = 21 [ 202.416304][ T7103] chnl_net:caif_netlink_parms(): no params data found [ 202.490471][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 202.591702][ T7096] chnl_net:caif_netlink_parms(): no params data found [ 202.716662][ T7102] chnl_net:caif_netlink_parms(): no params data found [ 202.816207][ T7104] chnl_net:caif_netlink_parms(): no params data found [ 202.828588][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.837818][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.846541][ T7099] device bridge_slave_0 entered promiscuous mode [ 202.878478][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.885780][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.898194][ T7103] device bridge_slave_0 entered promiscuous mode [ 202.919285][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.926504][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.937964][ T7099] device bridge_slave_1 entered promiscuous mode [ 202.965131][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.973435][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.981837][ T7103] device bridge_slave_1 entered promiscuous mode [ 203.015362][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.023582][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.032607][ T7096] device bridge_slave_0 entered promiscuous mode [ 203.043318][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.050370][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.060210][ T7096] device bridge_slave_1 entered promiscuous mode [ 203.069944][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.098398][ T7116] chnl_net:caif_netlink_parms(): no params data found [ 203.118742][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.131623][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.187393][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.225690][ T7096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.246037][ T7096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.281979][ T7099] team0: Port device team_slave_0 added [ 203.319625][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.327260][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.336434][ T7102] device bridge_slave_0 entered promiscuous mode [ 203.349966][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.357690][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.366669][ T7102] device bridge_slave_1 entered promiscuous mode [ 203.375593][ T7099] team0: Port device team_slave_1 added [ 203.392864][ T7103] team0: Port device team_slave_0 added [ 203.404330][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.412198][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.420033][ T7104] device bridge_slave_0 entered promiscuous mode [ 203.440105][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.453665][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.463516][ T7116] device bridge_slave_0 entered promiscuous mode [ 203.483654][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.490671][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.516602][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.529775][ T7103] team0: Port device team_slave_1 added [ 203.548849][ T7096] team0: Port device team_slave_0 added [ 203.555225][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.562483][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.570246][ T7104] device bridge_slave_1 entered promiscuous mode [ 203.589019][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.600685][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.608509][ T7116] device bridge_slave_1 entered promiscuous mode [ 203.625433][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.632527][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.658727][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.677480][ T7096] team0: Port device team_slave_1 added [ 203.693862][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.731178][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.738142][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.764973][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.790120][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.805789][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.816968][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.830231][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.895023][ T7099] device hsr_slave_0 entered promiscuous mode [ 203.951178][ T7099] device hsr_slave_1 entered promiscuous mode [ 204.002484][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.009727][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.037813][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.058310][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.098112][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.106534][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.134429][ T7096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.165670][ T7102] team0: Port device team_slave_0 added [ 204.178729][ T7102] team0: Port device team_slave_1 added [ 204.200791][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.207769][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.236585][ T7096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.250757][ T7116] team0: Port device team_slave_0 added [ 204.267216][ T7104] team0: Port device team_slave_0 added [ 204.281692][ T7104] team0: Port device team_slave_1 added [ 204.300795][ T7116] team0: Port device team_slave_1 added [ 204.355582][ T7103] device hsr_slave_0 entered promiscuous mode [ 204.411146][ T7103] device hsr_slave_1 entered promiscuous mode [ 204.450679][ T7103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.458475][ T7103] Cannot create hsr debugfs directory [ 204.507227][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.518413][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.547637][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.566520][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.573575][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.601831][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.644358][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.655277][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.682164][ T7104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.764773][ T7096] device hsr_slave_0 entered promiscuous mode [ 204.821237][ T7096] device hsr_slave_1 entered promiscuous mode [ 204.880677][ T7096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.888257][ T7096] Cannot create hsr debugfs directory [ 204.896045][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.903580][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.930152][ T7116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.948154][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.957102][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.984016][ T7116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.996570][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.004167][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.031040][ T7104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.115773][ T7102] device hsr_slave_0 entered promiscuous mode [ 205.161132][ T7102] device hsr_slave_1 entered promiscuous mode [ 205.200633][ T7102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.208212][ T7102] Cannot create hsr debugfs directory [ 205.333551][ T7104] device hsr_slave_0 entered promiscuous mode [ 205.361203][ T7104] device hsr_slave_1 entered promiscuous mode [ 205.390567][ T7104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.398267][ T7104] Cannot create hsr debugfs directory [ 205.495291][ T7116] device hsr_slave_0 entered promiscuous mode [ 205.551019][ T7116] device hsr_slave_1 entered promiscuous mode [ 205.590588][ T7116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.599166][ T7116] Cannot create hsr debugfs directory [ 205.943347][ T7099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.986617][ T7099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.052582][ T7099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.129244][ T7099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.210786][ T7103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.280260][ T7103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.325055][ T7103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.397962][ T7103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.476178][ T7102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.514948][ T7102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.588793][ T7102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.635548][ T7102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.734287][ T7096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.798695][ T7096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.853171][ T7096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.896249][ T7096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.010177][ T7104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.038919][ T7104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.093497][ T7104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.178405][ T7104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.265599][ T7116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.334515][ T7116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.365405][ T7116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.423760][ T7116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.517621][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.547520][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.562587][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.573326][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.585600][ T7103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.615318][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.624509][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.634630][ T2712] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.642046][ T2712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.650107][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.659455][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.669490][ T2712] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.676662][ T2712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.685727][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.731554][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.740180][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.749823][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.765442][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.774761][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.783383][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.796848][ T7103] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.818744][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.826195][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.835161][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.844870][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.886899][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.895692][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.905451][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.914990][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.923983][ T2689] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.931126][ T2689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.939184][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.948237][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.956872][ T2689] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.964077][ T2689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.971972][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.980515][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.993468][ T7096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.019295][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.026318][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.035959][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.044976][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.082235][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.091225][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.099804][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.111837][ T2690] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.118905][ T2690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.126651][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.135427][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.143978][ T2690] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.151116][ T2690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.158686][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.206209][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.215459][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.223727][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.238323][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.247180][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.255403][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.264933][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.274149][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.283999][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.305511][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.325134][ T7096] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.336708][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.347781][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.370005][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.382528][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.402657][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.412656][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.423238][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.433295][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.442626][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.451550][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.458598][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.467111][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.476493][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.491592][ T7103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.505637][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.536815][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.545117][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.554191][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.562807][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.572429][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.581946][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.590686][ T2725] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.598707][ T2725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.606771][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.616852][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.627885][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.636499][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.645111][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.653998][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.663331][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.671889][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.691270][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.699918][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.712662][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.745980][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.756019][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.765054][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.776528][ T7116] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.796554][ T7099] device veth0_vlan entered promiscuous mode [ 208.813400][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.823656][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.833173][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.851792][ T7104] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.878640][ T7099] device veth1_vlan entered promiscuous mode [ 208.891177][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.901642][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.909302][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.918757][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.928383][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.937379][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.946480][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.956109][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.965136][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.975715][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.983087][ T3311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.990919][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.998380][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.025313][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.033263][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.041697][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.051381][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.059741][ T2690] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.066949][ T2690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.075649][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.084872][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.093643][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.101618][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.109036][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.118165][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.127019][ T2690] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.134161][ T2690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.152109][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.167069][ T7096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.178926][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.196530][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.213143][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.222773][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.236526][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.245504][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.255642][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.264578][ T2690] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.271723][ T2690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.279595][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.345846][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.355449][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.367194][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.378420][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.388259][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.410589][ T7096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.439270][ T7099] device veth0_macvtap entered promiscuous mode [ 209.447470][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.462343][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.469953][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.478089][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.487440][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.496321][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.505408][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.514491][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.523127][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.531913][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.540862][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.550070][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.583933][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.597363][ T7099] device veth1_macvtap entered promiscuous mode [ 209.606882][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.624327][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.638623][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.654985][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.667058][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.678396][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.688742][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.743375][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.752110][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.761906][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.770963][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.779300][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.788087][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.796565][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.806100][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.814410][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.838428][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.859207][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.880928][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.889613][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.898996][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.907586][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.916027][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.926095][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.939051][ T7103] device veth0_vlan entered promiscuous mode [ 209.963754][ T7103] device veth1_vlan entered promiscuous mode [ 209.988684][ T7096] device veth0_vlan entered promiscuous mode [ 209.999175][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.008558][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.022433][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.032257][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.041231][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.050819][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.058546][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.094966][ T7104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.107353][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.119970][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.134075][ T7096] device veth1_vlan entered promiscuous mode [ 210.212255][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.219734][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.228413][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.237974][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.256585][ T7116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.269360][ T7103] device veth0_macvtap entered promiscuous mode [ 210.312711][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.321567][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.329812][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.355426][ T7103] device veth1_macvtap entered promiscuous mode [ 210.403131][ T7102] device veth0_vlan entered promiscuous mode [ 210.420848][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.428915][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.449279][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.479735][ T7096] device veth0_macvtap entered promiscuous mode [ 210.496966][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.509600][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.526702][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.543709][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.569650][ T7096] device veth1_macvtap entered promiscuous mode [ 210.593957][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.605537][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.618761][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.635177][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.662117][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.673011][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.689017][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.703542][ T7102] device veth1_vlan entered promiscuous mode 2020/05/03 09:55:31 executed programs: 6 [ 210.738081][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 210.756181][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.768837][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.801542][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.809670][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.819652][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.829313][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.838941][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.892347][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.904562][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.916123][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 210.940141][ C1] hrtimer: interrupt took 44262 ns [ 210.956587][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.976462][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.998081][ T7104] device veth0_vlan entered promiscuous mode [ 211.062693][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.087846][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.097507][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.106875][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.115896][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.124882][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.134172][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.145565][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.157395][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.167860][ T2690] ================================================================== [ 211.173896][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.176144][ T2690] BUG: KASAN: use-after-free in rpc_net_ns+0x222/0x230 [ 211.176163][ T2690] Read of size 8 at addr ffff8880a7c888d8 by task kworker/0:3/2690 [ 211.187067][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.193424][ T2690] [ 211.193440][ T2690] CPU: 0 PID: 2690 Comm: kworker/0:3 Not tainted 5.7.0-rc3-syzkaller #0 [ 211.193448][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.193467][ T2690] Workqueue: events rpc_free_client_work [ 211.193474][ T2690] Call Trace: [ 211.193491][ T2690] dump_stack+0x188/0x20d [ 211.193512][ T2690] print_address_description.constprop.0.cold+0xd3/0x315 [ 211.203774][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.211358][ T2690] ? rpc_net_ns+0x222/0x230 [ 211.211374][ T2690] __kasan_report.cold+0x35/0x4d [ 211.211395][ T2690] ? rpc_net_ns+0x222/0x230 [ 211.211410][ T2690] ? rpc_net_ns+0x222/0x230 [ 211.211426][ T2690] kasan_report+0x33/0x50 [ 211.283269][ T2690] rpc_net_ns+0x222/0x230 [ 211.287589][ T2690] rpc_free_client_work+0x1a/0x60 [ 211.292602][ T2690] process_one_work+0x965/0x16a0 [ 211.297523][ T2690] ? lock_release+0x800/0x800 [ 211.302201][ T2690] ? pwq_dec_nr_in_flight+0x310/0x310 [ 211.307570][ T2690] ? rwlock_bug.part.0+0x90/0x90 [ 211.312518][ T2690] worker_thread+0x96/0xe20 [ 211.317033][ T2690] ? process_one_work+0x16a0/0x16a0 [ 211.322220][ T2690] kthread+0x388/0x470 [ 211.326267][ T2690] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 211.331977][ T2690] ret_from_fork+0x24/0x30 [ 211.336373][ T2690] [ 211.338681][ T2690] Allocated by task 8372: [ 211.343076][ T2690] save_stack+0x1b/0x40 [ 211.347208][ T2690] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 211.353046][ T2690] __kmalloc+0x161/0x7a0 [ 211.357306][ T2690] xprt_alloc+0x2d/0x800 [ 211.361541][ T2690] xs_setup_xprt.part.0+0x56/0x2e0 [ 211.366645][ T2690] xs_setup_udp+0x9e/0x890 [ 211.371747][ T2690] xprt_create_transport+0xf9/0x480 [ 211.378147][ T2690] rpc_create+0x282/0x680 [ 211.382485][ T2690] nfs_create_rpc_client+0x4eb/0x680 [ 211.387781][ T2690] nfs_init_client+0x6d/0xf0 [ 211.392680][ T2690] nfs_get_client+0x1098/0x1430 [ 211.397517][ T2690] nfs_init_server+0x305/0xf00 [ 211.402263][ T2690] nfs_create_server+0x15c/0x700 [ 211.407283][ T2690] nfs_try_get_tree+0x166/0x8d0 [ 211.412111][ T2690] nfs_get_tree+0x95a/0x13a0 [ 211.416679][ T2690] vfs_get_tree+0x89/0x2f0 [ 211.421096][ T2690] do_mount+0x1306/0x1b30 [ 211.425417][ T2690] __x64_sys_mount+0x18f/0x230 [ 211.430182][ T2690] do_syscall_64+0xf6/0x7d0 [ 211.434680][ T2690] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 211.440544][ T2690] [ 211.442915][ T2690] Freed by task 23: [ 211.446730][ T2690] save_stack+0x1b/0x40 [ 211.450872][ T2690] __kasan_slab_free+0xf7/0x140 [ 211.455714][ T2690] kmem_cache_free_bulk+0x7d/0x280 [ 211.461500][ T2690] kfree_rcu_work+0x1a1/0x480 [ 211.466162][ T2690] process_one_work+0x965/0x16a0 [ 211.471209][ T2690] worker_thread+0x96/0xe20 [ 211.475990][ T2690] kthread+0x388/0x470 [ 211.480044][ T2690] ret_from_fork+0x24/0x30 [ 211.484432][ T2690] [ 211.486740][ T2690] The buggy address belongs to the object at ffff8880a7c88000 [ 211.486740][ T2690] which belongs to the cache kmalloc-4k of size 4096 [ 211.501590][ T2690] The buggy address is located 2264 bytes inside of [ 211.501590][ T2690] 4096-byte region [ffff8880a7c88000, ffff8880a7c89000) [ 211.515014][ T2690] The buggy address belongs to the page: [ 211.520639][ T2690] page:ffffea00029f2200 refcount:1 mapcount:0 mapping:00000000862db9cd index:0x0 head:ffffea00029f2200 order:1 compound_mapcount:0 [ 211.534076][ T2690] flags: 0xfffe0000010200(slab|head) [ 211.540150][ T2690] raw: 00fffe0000010200 ffffea00029ca708 ffffea00029a1c88 ffff8880aa002000 [ 211.548758][ T2690] raw: 0000000000000000 ffff8880a7c88000 0000000100000001 0000000000000000 [ 211.557320][ T2690] page dumped because: kasan: bad access detected [ 211.563717][ T2690] [ 211.566034][ T2690] Memory state around the buggy address: [ 211.571648][ T2690] ffff8880a7c88780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.579691][ T2690] ffff8880a7c88800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.587822][ T2690] >ffff8880a7c88880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.596831][ T2690] ^ [ 211.604708][ T2690] ffff8880a7c88900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.612750][ T2690] ffff8880a7c88980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.620790][ T2690] ================================================================== [ 211.628918][ T2690] Disabling lock debugging due to kernel taint [ 211.645378][ T7104] device veth1_vlan entered promiscuous mode [ 211.654084][ T2690] Kernel panic - not syncing: panic_on_warn set ... [ 211.660685][ T2690] CPU: 0 PID: 2690 Comm: kworker/0:3 Tainted: G B 5.7.0-rc3-syzkaller #0 [ 211.662186][ T7116] device veth0_vlan entered promiscuous mode [ 211.670378][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.670396][ T2690] Workqueue: events rpc_free_client_work [ 211.670401][ T2690] Call Trace: [ 211.670422][ T2690] dump_stack+0x188/0x20d [ 211.699780][ T2690] panic+0x2e3/0x75c [ 211.703706][ T2690] ? add_taint.cold+0x16/0x16 [ 211.708383][ T2690] ? preempt_schedule_common+0x5e/0xc0 [ 211.713873][ T2690] ? rpc_net_ns+0x222/0x230 [ 211.718892][ T2690] ? preempt_schedule_thunk+0x16/0x18 [ 211.724240][ T2690] ? trace_hardirqs_on+0x55/0x220 [ 211.729274][ T2690] ? rpc_net_ns+0x222/0x230 [ 211.733757][ T2690] end_report+0x4d/0x53 [ 211.737896][ T2690] __kasan_report.cold+0xd/0x4d [ 211.742744][ T2690] ? rpc_net_ns+0x222/0x230 [ 211.747241][ T2690] ? rpc_net_ns+0x222/0x230 [ 211.751739][ T2690] kasan_report+0x33/0x50 [ 211.756155][ T2690] rpc_net_ns+0x222/0x230 [ 211.760482][ T2690] rpc_free_client_work+0x1a/0x60 [ 211.765530][ T2690] process_one_work+0x965/0x16a0 [ 211.770467][ T2690] ? lock_release+0x800/0x800 [ 211.775140][ T2690] ? pwq_dec_nr_in_flight+0x310/0x310 [ 211.780507][ T2690] ? rwlock_bug.part.0+0x90/0x90 [ 211.785456][ T2690] worker_thread+0x96/0xe20 [ 211.789976][ T2690] ? process_one_work+0x16a0/0x16a0 [ 211.795169][ T2690] kthread+0x388/0x470 [ 211.799236][ T2690] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 211.805002][ T2690] ret_from_fork+0x24/0x30 [ 211.811076][ T2690] Kernel Offset: disabled [ 211.815403][ T2690] Rebooting in 86400 seconds..