[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 39.607636][ T7043] IPVS: ftp: loaded support on port[0] = 21 [ 39.960988][ T21] tipc: TX() has been purged, node left! [ 40.338591][ T7025] can: request_module (can-proto-0) failed. [ 43.056397][ T7025] can: request_module (can-proto-0) failed. [ 43.066935][ T7025] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. 2020/07/13 15:33:05 parsed 1 programs 2020/07/13 15:33:06 executed programs: 0 [ 50.831454][ T7168] IPVS: ftp: loaded support on port[0] = 21 [ 50.872096][ T7171] IPVS: ftp: loaded support on port[0] = 21 [ 50.925194][ T7169] IPVS: ftp: loaded support on port[0] = 21 [ 50.983992][ T7207] IPVS: ftp: loaded support on port[0] = 21 [ 51.013669][ T7200] IPVS: ftp: loaded support on port[0] = 21 [ 51.021852][ T7209] IPVS: ftp: loaded support on port[0] = 21 [ 51.177522][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 51.323321][ T7171] chnl_net:caif_netlink_parms(): no params data found [ 51.494023][ T7200] chnl_net:caif_netlink_parms(): no params data found [ 51.503830][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 51.570268][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.578645][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.589391][ T7168] device bridge_slave_0 entered promiscuous mode [ 51.620942][ T7169] chnl_net:caif_netlink_parms(): no params data found [ 51.647056][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.654113][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.667077][ T7168] device bridge_slave_1 entered promiscuous mode [ 51.754880][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 51.765413][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.773492][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.784294][ T7171] device bridge_slave_0 entered promiscuous mode [ 51.803130][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.825814][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.833878][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.842428][ T7171] device bridge_slave_1 entered promiscuous mode [ 51.857226][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.940582][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.963353][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.971457][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.980679][ T7207] device bridge_slave_0 entered promiscuous mode [ 51.997173][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.004240][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.012785][ T7207] device bridge_slave_1 entered promiscuous mode [ 52.027354][ T7168] team0: Port device team_slave_0 added [ 52.033384][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.040827][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.049987][ T7200] device bridge_slave_0 entered promiscuous mode [ 52.060946][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.079133][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.086514][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.094091][ T7169] device bridge_slave_0 entered promiscuous mode [ 52.109168][ T7168] team0: Port device team_slave_1 added [ 52.125322][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.132746][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.141801][ T7200] device bridge_slave_1 entered promiscuous mode [ 52.163290][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.171237][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.179233][ T7209] device bridge_slave_0 entered promiscuous mode [ 52.194745][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.201965][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.210641][ T7169] device bridge_slave_1 entered promiscuous mode [ 52.242679][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.263134][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.270982][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.279726][ T7209] device bridge_slave_1 entered promiscuous mode [ 52.293200][ T7171] team0: Port device team_slave_0 added [ 52.301120][ T7169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.321903][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.349370][ T7171] team0: Port device team_slave_1 added [ 52.364981][ T7169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.375648][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.389571][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.417505][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.438364][ T7200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.455950][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.474387][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.484126][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.492695][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.519142][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.537328][ T7200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.587228][ T7169] team0: Port device team_slave_0 added [ 52.595325][ T7207] team0: Port device team_slave_0 added [ 52.604525][ T7200] team0: Port device team_slave_0 added [ 52.613361][ T7200] team0: Port device team_slave_1 added [ 52.621175][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.630773][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.658108][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.678638][ T7169] team0: Port device team_slave_1 added [ 52.695328][ T7207] team0: Port device team_slave_1 added [ 52.708138][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.715078][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.741287][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.755027][ T7209] team0: Port device team_slave_0 added [ 52.841224][ T7168] device hsr_slave_0 entered promiscuous mode [ 52.886166][ T7168] device hsr_slave_1 entered promiscuous mode [ 52.937695][ T7209] team0: Port device team_slave_1 added [ 52.943896][ T7169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.950878][ T7169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.977356][ T7169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.989736][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.997521][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.023517][ T7200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.035114][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.045662][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.072156][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.084690][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.092191][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.118624][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.137864][ T7169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.144801][ T7169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.171493][ T7169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.189545][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.196614][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.224009][ T7200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.286678][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.293645][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.321352][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.369013][ T7171] device hsr_slave_0 entered promiscuous mode [ 53.415916][ T7171] device hsr_slave_1 entered promiscuous mode [ 53.495613][ T7171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.503738][ T7171] Cannot create hsr debugfs directory [ 53.570222][ T7200] device hsr_slave_0 entered promiscuous mode [ 53.625989][ T7200] device hsr_slave_1 entered promiscuous mode [ 53.675852][ T7200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.683411][ T7200] Cannot create hsr debugfs directory [ 53.690095][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.698068][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.724398][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.829883][ T7207] device hsr_slave_0 entered promiscuous mode [ 53.886033][ T7207] device hsr_slave_1 entered promiscuous mode [ 53.925598][ T7207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.933301][ T7207] Cannot create hsr debugfs directory [ 53.987920][ T7209] device hsr_slave_0 entered promiscuous mode [ 54.036150][ T7209] device hsr_slave_1 entered promiscuous mode [ 54.075664][ T7209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.083268][ T7209] Cannot create hsr debugfs directory [ 54.138877][ T7169] device hsr_slave_0 entered promiscuous mode [ 54.199027][ T7169] device hsr_slave_1 entered promiscuous mode [ 54.265417][ T7169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.272973][ T7169] Cannot create hsr debugfs directory [ 54.664234][ T7168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.700775][ T7168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.738162][ T7168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.783896][ T7168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.868192][ T7209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.933403][ T7209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.978361][ T7171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.047119][ T7171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.108753][ T7209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.172353][ T7171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.207475][ T7171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.258221][ T7209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.371733][ T7207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.412300][ T7207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.495553][ T7207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.550717][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.571820][ T7207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.662182][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.678871][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.691450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.701150][ T7200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.729358][ T7200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.842167][ T7200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.868291][ T7200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.939631][ T7169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.998385][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.008360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.017373][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.024512][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.033685][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.056064][ T7169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.088200][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.097684][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.107014][ T2733] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.114048][ T2733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.139816][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.149113][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.158323][ T7169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.188524][ T7169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.280512][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.290699][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.306272][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.314050][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.325660][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.337275][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.374425][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.402355][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.410698][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.423484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.432290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.440237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.457604][ T7168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.470462][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.506681][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.514502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.524574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.533261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.541320][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.549521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.558795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.567504][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.574536][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.629907][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.638152][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.646847][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.654219][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.663377][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.672625][ T2804] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.679762][ T2804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.687870][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.697119][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.706503][ T2804] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.713824][ T2804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.721961][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.730884][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.739670][ T2804] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.746810][ T2804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.754369][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.766361][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.775412][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.803490][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.813316][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.822276][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.848124][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.857548][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.866866][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.900031][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.907964][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.917135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.933060][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.944333][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.970086][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.977837][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.986905][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.996193][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.004598][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.014000][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.029172][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.037958][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.047505][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.056553][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.065189][ T2804] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.072230][ T2804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.093780][ T7171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.118238][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.126511][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.134224][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.143091][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.151683][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.160857][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.169933][ T2804] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.177035][ T2804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.191798][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.213628][ T7169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.236773][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.249113][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.258165][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.270871][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.280243][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.291804][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.301233][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.341645][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.349415][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.357591][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.367514][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.376370][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.388989][ T2732] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.396060][ T2732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.403652][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.418266][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.427323][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.438842][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.448045][ T2732] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.455206][ T2732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.466505][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.475620][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.483840][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.492637][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.501000][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.509351][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.517144][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.529184][ T7209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.542516][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.555173][ T7168] device veth0_vlan entered promiscuous mode [ 57.573548][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.581428][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.589646][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.601233][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.609990][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.617949][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.626509][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.635069][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.647144][ T7169] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.672738][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.708838][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.719476][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.731340][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.739947][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.749190][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.757956][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.767443][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.775867][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.784074][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.792407][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.801154][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.810122][ T2734] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.817244][ T2734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.825915][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.833746][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.846738][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.870291][ T7168] device veth1_vlan entered promiscuous mode [ 57.880228][ T7207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.893078][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.905101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.913144][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.922074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.930445][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.939263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.948096][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.955211][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.962598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.978384][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.027012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.038733][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.046912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.054252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.062463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.070567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.079402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.088207][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.096775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.110623][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.145076][ T7168] device veth0_macvtap entered promiscuous mode [ 58.154311][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.164342][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.176210][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.185904][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.215841][ T7168] device veth1_macvtap entered promiscuous mode [ 58.236071][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.243906][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.253995][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.263199][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.271860][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.317953][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.329174][ T7169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.340938][ T7169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.352925][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.361629][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.371028][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.379601][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.388525][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.397426][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.406838][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.415833][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.432384][ T7209] device veth0_vlan entered promiscuous mode [ 58.441586][ T7171] device veth0_vlan entered promiscuous mode [ 58.458106][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.488574][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.496175][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.503719][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.515527][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.523544][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.535329][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.543695][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.560261][ T7209] device veth1_vlan entered promiscuous mode [ 58.580035][ T7171] device veth1_vlan entered promiscuous mode [ 58.591939][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.609310][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.617874][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.627061][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.636073][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.643930][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.653246][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.662207][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.671059][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.698733][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.708559][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.717040][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.724491][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.755530][ T7169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.786783][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.796619][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.808353][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.816806][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.825754][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.834023][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.936663][ T7209] device veth0_macvtap entered promiscuous mode [ 58.944715][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.952408][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.961313][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.969606][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.978671][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.988143][ T7200] device veth0_vlan entered promiscuous mode [ 59.000339][ T7207] device veth0_vlan entered promiscuous mode [ 59.014256][ T7209] device veth1_macvtap entered promiscuous mode [ 59.025239][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.033206][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.044524][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.052090][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.063869][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.072692][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.085882][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.100728][ T7200] device veth1_vlan entered promiscuous mode [ 59.218845][ T7171] device veth0_macvtap entered promiscuous mode [ 59.236238][ T7207] device veth1_vlan entered promiscuous mode [ 59.252962][ T7169] device veth0_vlan entered promiscuous mode [ 59.273797][ T7209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.277265][ T8433] ================================================================== [ 59.289185][ T7209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.292431][ T8433] BUG: KASAN: use-after-free in userfaultfd_release+0x56d/0x6e0 [ 59.292437][ T8433] Read of size 8 at addr ffff8880a6af7f88 by task syz-executor.2/8433 [ 59.292440][ T8433] [ 59.292446][ T8433] CPU: 1 PID: 8433 Comm: syz-executor.2 Not tainted 5.7.0-syzkaller #0 [ 59.292454][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.306578][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.309867][ T8433] Call Trace: [ 59.309881][ T8433] dump_stack+0x128/0x182 [ 59.309893][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.309905][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.335086][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.338588][ T8433] print_address_description.constprop.8.cold.10+0x9/0x41e [ 59.338605][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.338612][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.347173][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.349063][ T8433] __kasan_report.cold.11+0x20/0x38 [ 59.349074][ T8433] ? __x64_sys_userfaultfd+0x310/0x430 [ 59.349079][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.349087][ T8433] kasan_report+0x32/0x50 [ 59.354022][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.358655][ T8433] userfaultfd_release+0x56d/0x6e0 [ 59.358665][ T8433] ? debug_check_no_obj_freed+0x205/0x45a [ 59.358676][ T8433] ? userfaultfd_event_wait_completion+0x920/0x920 [ 59.358685][ T8433] ? fsnotify_first_mark+0x120/0x120 [ 59.358692][ T8433] ? fcntl_setlk+0xaa0/0xaa0 [ 59.358709][ T8433] __fput+0x2a4/0x7a0 [ 59.358721][ T8433] task_work_run+0xc2/0x160 [ 59.366146][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.371416][ T8433] exit_to_usermode_loop+0x23d/0x2d0 [ 59.371426][ T8433] do_syscall_64+0x52a/0x620 [ 59.371437][ T8433] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.384945][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.389123][ T8433] RIP: 0033:0x45cba9 [ 59.389131][ T8433] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.389134][ T8433] RSP: 002b:00007fd64969fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 59.389140][ T8433] RAX: ffffffffffffffe8 RBX: 000000000050c520 RCX: 000000000045cba9 [ 59.389144][ T8433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.389149][ T8433] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 59.397624][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.401921][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 59.401925][ T8433] R13: 0000000000000cab R14: 00000000004cf0b7 R15: 00007fd6496a06d4 [ 59.401943][ T8433] [ 59.401948][ T8433] Allocated by task 8433: [ 59.401958][ T8433] save_stack+0x19/0x40 [ 59.413397][ T2804] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.416950][ T8433] __kasan_kmalloc.constprop.17+0xc1/0xd0 [ 59.416957][ T8433] kmem_cache_alloc+0x11b/0x750 [ 59.416965][ T8433] __x64_sys_userfaultfd+0x90/0x430 [ 59.416972][ T8433] do_syscall_64+0xc6/0x620 [ 59.416979][ T8433] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.416982][ T8433] [ 59.416986][ T8433] Freed by task 8433: [ 59.416991][ T8433] save_stack+0x19/0x40 [ 59.416995][ T8433] __kasan_slab_free+0xf7/0x140 [ 59.417000][ T8433] kmem_cache_free+0x7f/0x320 [ 59.417005][ T8433] __x64_sys_userfaultfd+0x36e/0x430 [ 59.417012][ T8433] do_syscall_64+0xc6/0x620 [ 59.464407][ T7171] device veth1_macvtap entered promiscuous mode [ 59.468099][ T8433] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.468103][ T8433] [ 59.468109][ T8433] The buggy address belongs to the object at ffff8880a6af7e00 [ 59.468109][ T8433] which belongs to the cache userfaultfd_ctx_cache of size 408 [ 59.488276][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.491892][ T8433] The buggy address is located 392 bytes inside of [ 59.491892][ T8433] 408-byte region [ffff8880a6af7e00, ffff8880a6af7f98) [ 59.491895][ T8433] The buggy address belongs to the page: [ 59.491902][ T8433] page:ffffea00029abdc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880a7c37b00 [ 59.491907][ T8433] flags: 0xfffe0000000200(slab) [ 59.491914][ T8433] raw: 00fffe0000000200 ffff8880a49d1950 ffff8880a49d1950 ffff88821978d700 [ 59.491919][ T8433] raw: ffff8880a7c37b00 ffff8880a6af7000 0000000100000008 0000000000000000 [ 59.491925][ T8433] page dumped because: kasan: bad access detected [ 59.495903][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.515417][ T8433] [ 59.515420][ T8433] Memory state around the buggy address: [ 59.515427][ T8433] ffff8880a6af7e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.515431][ T8433] ffff8880a6af7f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.515435][ T8433] >ffff8880a6af7f80: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.515438][ T8433] ^ [ 59.515442][ T8433] ffff8880a6af8000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.515446][ T8433] ffff8880a6af8080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.515449][ T8433] ================================================================== [ 59.515451][ T8433] Disabling lock debugging due to kernel taint [ 59.800305][ T8433] Kernel panic - not syncing: panic_on_warn set ... [ 59.807402][ T7171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 59.809880][ T8433] CPU: 1 PID: 8433 Comm: syz-executor.2 Tainted: G B 5.7.0-syzkaller #0 [ 59.817950][ T7171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.824038][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.831873][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.840981][ T8433] Call Trace: [ 59.840994][ T8433] dump_stack+0x128/0x182 [ 59.841003][ T8433] ? userfaultfd_release+0x4e0/0x6e0 [ 59.841006][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.841012][ T8433] panic+0x22a/0x4e3 [ 59.841019][ T8433] ? add_taint.cold.7+0x11/0x11 [ 59.904352][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.909603][ T8433] ? preempt_schedule_thunk+0x16/0x18 [ 59.914938][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.920184][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.925432][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.930681][ T8433] end_report+0x4d/0x53 [ 59.934802][ T8433] __kasan_report.cold.11+0xd/0x38 [ 59.939887][ T8433] ? __x64_sys_userfaultfd+0x310/0x430 [ 59.945319][ T8433] ? userfaultfd_release+0x56d/0x6e0 [ 59.950567][ T8433] kasan_report+0x32/0x50 [ 59.954871][ T8433] userfaultfd_release+0x56d/0x6e0 [ 59.960206][ T8433] ? debug_check_no_obj_freed+0x205/0x45a [ 59.965901][ T8433] ? userfaultfd_event_wait_completion+0x920/0x920 [ 59.972384][ T8433] ? fsnotify_first_mark+0x120/0x120 [ 59.977644][ T8433] ? fcntl_setlk+0xaa0/0xaa0 [ 59.982201][ T8433] __fput+0x2a4/0x7a0 [ 59.986156][ T8433] task_work_run+0xc2/0x160 [ 59.990647][ T8433] exit_to_usermode_loop+0x23d/0x2d0 [ 59.995897][ T8433] do_syscall_64+0x52a/0x620 [ 60.000450][ T8433] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.006306][ T8433] RIP: 0033:0x45cba9 [ 60.010163][ T8433] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.029743][ T8433] RSP: 002b:00007fd64969fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 60.038141][ T8433] RAX: ffffffffffffffe8 RBX: 000000000050c520 RCX: 000000000045cba9 [ 60.046107][ T8433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.054042][ T8433] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 60.061990][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 60.069938][ T8433] R13: 0000000000000cab R14: 00000000004cf0b7 R15: 00007fd6496a06d4 [ 60.078865][ T8433] Kernel Offset: disabled [ 60.083171][ T8433] Rebooting in 86400 seconds..