[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 36.429454][ T7137] IPVS: ftp: loaded support on port[0] = 21 [ 36.687798][ T640] tipc: TX() has been purged, node left! [ 37.141474][ T7113] can: request_module (can-proto-0) failed. [ 39.556428][ T7113] can: request_module (can-proto-0) failed. [ 39.568033][ T7113] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. 2020/04/03 10:09:05 parsed 1 programs 2020/04/03 10:09:06 executed programs: 0 [ 47.757707][ T7267] IPVS: ftp: loaded support on port[0] = 21 [ 47.773079][ T7276] IPVS: ftp: loaded support on port[0] = 21 [ 47.783277][ T7271] IPVS: ftp: loaded support on port[0] = 21 [ 47.803749][ T7277] IPVS: ftp: loaded support on port[0] = 21 [ 47.803763][ T7272] IPVS: ftp: loaded support on port[0] = 21 [ 47.819571][ T7273] IPVS: ftp: loaded support on port[0] = 21 [ 47.975995][ T7276] chnl_net:caif_netlink_parms(): no params data found [ 48.230475][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.240093][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.248238][ T7276] device bridge_slave_0 entered promiscuous mode [ 48.288260][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 48.297527][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.308812][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.317070][ T7276] device bridge_slave_1 entered promiscuous mode [ 48.325221][ T7271] chnl_net:caif_netlink_parms(): no params data found [ 48.344013][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 48.391406][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.404708][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.430122][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 48.455672][ T7272] chnl_net:caif_netlink_parms(): no params data found [ 48.487740][ T7276] team0: Port device team_slave_0 added [ 48.554894][ T7276] team0: Port device team_slave_1 added [ 48.590756][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.602315][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.611046][ T7277] device bridge_slave_0 entered promiscuous mode [ 48.648906][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.660516][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.690340][ T7276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.713164][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.720587][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.731286][ T7277] device bridge_slave_1 entered promiscuous mode [ 48.751835][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.759055][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.785994][ T7276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.798046][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.808540][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.816731][ T7271] device bridge_slave_0 entered promiscuous mode [ 48.829054][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.836730][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.845320][ T7271] device bridge_slave_1 entered promiscuous mode [ 48.878645][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.887154][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.896145][ T7273] device bridge_slave_0 entered promiscuous mode [ 48.923888][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.931936][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.942743][ T7267] device bridge_slave_0 entered promiscuous mode [ 48.986343][ T7276] device hsr_slave_0 entered promiscuous mode [ 49.024398][ T7276] device hsr_slave_1 entered promiscuous mode [ 49.065901][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.075796][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.082858][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.091147][ T7273] device bridge_slave_1 entered promiscuous mode [ 49.102240][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.111667][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.120385][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.128234][ T7267] device bridge_slave_1 entered promiscuous mode [ 49.139468][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.161708][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.218242][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.233297][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.245958][ T7277] team0: Port device team_slave_0 added [ 49.251968][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.259223][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.267561][ T7272] device bridge_slave_0 entered promiscuous mode [ 49.281180][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.299287][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.312309][ T7277] team0: Port device team_slave_1 added [ 49.318298][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.326747][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.334942][ T7272] device bridge_slave_1 entered promiscuous mode [ 49.344425][ T7271] team0: Port device team_slave_0 added [ 49.391560][ T7271] team0: Port device team_slave_1 added [ 49.410786][ T7267] team0: Port device team_slave_0 added [ 49.422167][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.432491][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.459140][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.484974][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.499455][ T7267] team0: Port device team_slave_1 added [ 49.508044][ T7273] team0: Port device team_slave_0 added [ 49.515172][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.522127][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.548565][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.560096][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.567332][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.597496][ T7271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.610089][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.627976][ T7273] team0: Port device team_slave_1 added [ 49.647149][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.657176][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.683749][ T7271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.708281][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.715817][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.742297][ T7267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.759162][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.766280][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.792473][ T7267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.825887][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.832969][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.860352][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.882429][ T7272] team0: Port device team_slave_0 added [ 49.935967][ T7277] device hsr_slave_0 entered promiscuous mode [ 49.974256][ T7277] device hsr_slave_1 entered promiscuous mode [ 50.014160][ T7277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.022003][ T7277] Cannot create hsr debugfs directory [ 50.033599][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.041464][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.067914][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.091928][ T7272] team0: Port device team_slave_1 added [ 50.137549][ T7271] device hsr_slave_0 entered promiscuous mode [ 50.184571][ T7271] device hsr_slave_1 entered promiscuous mode [ 50.243996][ T7271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.251570][ T7271] Cannot create hsr debugfs directory [ 50.307012][ T7267] device hsr_slave_0 entered promiscuous mode [ 50.334120][ T7267] device hsr_slave_1 entered promiscuous mode [ 50.384083][ T7267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.391662][ T7267] Cannot create hsr debugfs directory [ 50.497344][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.504993][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.531349][ T7272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.576285][ T7273] device hsr_slave_0 entered promiscuous mode [ 50.605351][ T7273] device hsr_slave_1 entered promiscuous mode [ 50.653938][ T7273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.661685][ T7273] Cannot create hsr debugfs directory [ 50.683556][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.691268][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.719285][ T7272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.807796][ T7272] device hsr_slave_0 entered promiscuous mode [ 50.865345][ T7272] device hsr_slave_1 entered promiscuous mode [ 50.913848][ T7272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.921775][ T7272] Cannot create hsr debugfs directory [ 51.036630][ T7276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.113326][ T7276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.189848][ T7276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.238890][ T7276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.299837][ T7277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.349451][ T7277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.429546][ T7277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.479646][ T7277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.579615][ T7273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.631039][ T7273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.689850][ T7273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.747693][ T7273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.840976][ T7271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.868614][ T7271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.935909][ T7271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.995316][ T7271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.066965][ T7267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.122352][ T7267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.150479][ T7267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.214284][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.227232][ T7272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.278010][ T7272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.333269][ T7267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.381294][ T7272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.438047][ T7272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.510014][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.535654][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.552565][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.563821][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.575518][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.585125][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.594086][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.635758][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.647707][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.658684][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.668974][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.676203][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.684942][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.694116][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.703578][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.710736][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.718834][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.735684][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.744585][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.752982][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.760709][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.776256][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.799385][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.850045][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.859441][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.868777][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.879531][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.886642][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.895233][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.902862][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.910849][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.919522][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.928509][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.937234][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.946061][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.968356][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.988027][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.996823][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.007808][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.016271][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.023394][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.031310][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.040662][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.049452][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.058115][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.065233][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.072721][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.081487][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.090734][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.099230][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.107569][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.115382][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.123162][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.144686][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.153147][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.166040][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.177329][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.186876][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.195728][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.204750][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.222818][ T7271] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.236024][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.246343][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.255055][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.263636][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.286098][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.316363][ T7277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.327607][ T7277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.339832][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.348752][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.358208][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.367169][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.376166][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.383203][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.391133][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.400333][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.409406][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.416530][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.425103][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.434207][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.442561][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.451279][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.461363][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.470139][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.488950][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.500385][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.509362][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.532194][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.547892][ T7273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.559330][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.577439][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.588775][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.613868][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.626457][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.635031][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.647254][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.654810][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.662369][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.676250][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.687114][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.696299][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.707595][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.716343][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.729091][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.738417][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.774090][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.783186][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.794056][ T3107] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.801256][ T3107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.809151][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.816937][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.824807][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.832442][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.841848][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.849760][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.858725][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.866907][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.875824][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.898035][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.921873][ T7271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.941375][ T7271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.950386][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.959601][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.968246][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.975369][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.983595][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.992056][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.001540][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.010660][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.019482][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.028445][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.037165][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.044308][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.052286][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.061234][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.077664][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.102426][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.110089][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.120920][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.129880][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.139872][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.148735][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.158377][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.167036][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.176251][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.185090][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.192120][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.200375][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.209544][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.250527][ T7272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.262506][ T7272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.275114][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.284254][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.292719][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.301731][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.310626][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.319403][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.328019][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.336491][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.345196][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.352861][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.374505][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.386764][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.395537][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.406336][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.415003][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.423888][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.432229][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.441225][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.449820][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.457698][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.471587][ T7277] device veth0_vlan entered promiscuous mode [ 54.480367][ T7276] device veth0_vlan entered promiscuous mode [ 54.493967][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.506775][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.515220][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.524551][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.539038][ T7277] device veth1_vlan entered promiscuous mode [ 54.551164][ T7271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.569367][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.577670][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.588814][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.602702][ T7272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.631959][ T7276] device veth1_vlan entered promiscuous mode [ 54.646043][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.656272][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.664402][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.671825][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.680086][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.689260][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.708680][ T7277] device veth0_macvtap entered promiscuous mode [ 54.720257][ T7277] device veth1_macvtap entered promiscuous mode [ 54.743894][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.757135][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.767860][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.776841][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.784806][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.792848][ T3023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.810452][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.822391][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.835877][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.845195][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.854286][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.862809][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.889800][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.938636][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.947478][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.956976][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.966857][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.976413][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.984845][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.992698][ T7273] device veth0_vlan entered promiscuous mode [ 55.003797][ T7276] device veth0_macvtap entered promiscuous mode [ 55.018784][ T7276] device veth1_macvtap entered promiscuous mode [ 55.096369][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.105492][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.117527][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.126805][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.138157][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.146792][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.158933][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.167583][ T3107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.179703][ T7273] device veth1_vlan entered promiscuous mode [ 55.253314][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.266079][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.278938][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 2020/04/03 10:09:14 executed programs: 6 [ 55.297274][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.310584][ T7271] device veth0_vlan entered promiscuous mode [ 55.340214][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 55.353362][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.393495][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.421451][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.431599][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.445436][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.454093][ T8538] ================================================================== [ 55.454126][ T8538] BUG: KASAN: double-free or invalid-free in nf_tables_newset+0x1863/0x1e30 [ 55.454129][ T8538] [ 55.454136][ T8538] CPU: 0 PID: 8538 Comm: syz-executor.1 Not tainted 5.6.0-rc5-syzkaller #0 [ 55.454140][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.454143][ T8538] Call Trace: [ 55.454153][ T8538] dump_stack+0x128/0x182 [ 55.454166][ T8538] print_address_description.constprop.8.cold.10+0x9/0x317 [ 55.454171][ T8538] ? nf_tables_newset+0x1863/0x1e30 [ 55.454177][ T8538] kasan_report_invalid_free+0x60/0xa0 [ 55.454182][ T8538] ? nf_tables_newset+0x1863/0x1e30 [ 55.454187][ T8538] __kasan_slab_free+0x129/0x140 [ 55.454193][ T8538] ? nf_tables_newset+0x1863/0x1e30 [ 55.454197][ T8538] kfree+0x107/0x2b0 [ 55.454212][ T8538] nf_tables_newset+0x1863/0x1e30 [ 55.454227][ T8538] ? nft_set_elem_expr_alloc+0x1e0/0x1e0 [ 55.454235][ T8538] ? nf_tables_valid_genid+0x1a/0x70 [ 55.454242][ T8538] ? lock_downgrade+0x7b0/0x7b0 [ 55.454249][ T8538] ? mutex_lock_io_nested+0x12e0/0x12e0 [ 55.454256][ T8538] ? memset+0x1f/0x40 [ 55.454264][ T8538] ? __nla_validate_parse+0x9a/0x19d0 [ 55.454272][ T8538] ? __mutex_unlock_slowpath+0xd2/0x650 [ 55.454278][ T8538] ? kmem_cache_alloc+0x358/0x740 [ 55.454291][ T8538] nfnetlink_rcv_batch+0x854/0x1370 [ 55.454304][ T8538] ? nfnetlink_subsys_register+0x290/0x290 [ 55.454318][ T8538] ? __lock_acquire+0x8da/0x4370 [ 55.454332][ T8538] ? apparmor_task_alloc+0x2e0/0x2e0 [ 55.454335][ T8538] ? memcpy+0x34/0x50 [ 55.454343][ T8538] ? nla_memcpy+0x90/0x90 [ 55.454351][ T8538] ? security_capable+0x4c/0x90 [ 55.454361][ T8538] nfnetlink_rcv+0x2bc/0x340 [ 55.454365][ T8538] ? nfnetlink_rcv_batch+0x1370/0x1370 [ 55.454371][ T8538] ? netlink_deliver_tap+0x165/0xa00 [ 55.454381][ T8538] netlink_unicast+0x434/0x630 [ 55.454387][ T8538] ? netlink_attachskb+0x6b0/0x6b0 [ 55.454396][ T8538] ? __check_object_size+0x1f5/0x2c8 [ 55.454403][ T8538] netlink_sendmsg+0x714/0xc60 [ 55.454411][ T8538] ? netlink_unicast+0x630/0x630 [ 55.454421][ T8538] ? netlink_unicast+0x630/0x630 [ 55.454431][ T8538] sock_sendmsg+0xac/0xe0 [ 55.454438][ T8538] ____sys_sendmsg+0x54e/0x750 [ 55.454443][ T8538] ? get_compat_msghdr+0x1ec/0x340 [ 55.454450][ T8538] ? kernel_sendmsg+0x30/0x30 [ 55.454460][ T8538] ? find_held_lock+0x33/0x1c0 [ 55.464382][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.471437][ T8538] ___sys_sendmsg+0xe4/0x160 [ 55.475022][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.482559][ T8538] ? sendmsg_copy_msghdr+0x30/0x30 [ 55.494549][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.496448][ T8538] ? __fget_files+0x27e/0x3d0 [ 55.508258][ T7267] device veth0_vlan entered promiscuous mode [ 55.508304][ T8538] ? ksys_dup3+0x2e0/0x2e0 [ 55.508315][ T8538] ? lock_downgrade+0x7b0/0x7b0 [ 55.524279][ T7271] device veth1_vlan entered promiscuous mode [ 55.524720][ T8538] ? __fget_light+0x19f/0x220 [ 55.524736][ T8538] ? sockfd_lookup_light+0x17/0x140 [ 55.536511][ T7273] device veth0_macvtap entered promiscuous mode [ 55.539557][ T8538] __sys_sendmsg+0xce/0x170 [ 55.539565][ T8538] ? __sys_sendmsg_sock+0xa0/0xa0 [ 55.553618][ T7273] device veth1_macvtap entered promiscuous mode [ 55.555650][ T8538] ? put_old_timespec32+0xbd/0x180 [ 55.555656][ T8538] ? get_old_timespec32+0x1a0/0x1a0 [ 55.555674][ T8538] ? do_fast_syscall_32+0xca/0xb9f [ 55.555682][ T8538] do_fast_syscall_32+0x231/0xb9f [ 55.576014][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 55.581014][ T8538] entry_SYSENTER_compat+0x70/0x7f [ 55.581027][ T8538] [ 55.589648][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.591261][ T8538] Allocated by task 8538: [ 55.591271][ T8538] save_stack+0x19/0x80 [ 55.591276][ T8538] __kasan_kmalloc.constprop.17+0xc1/0xd0 [ 55.591280][ T8538] __kmalloc_track_caller+0x15c/0x7a0 [ 55.591287][ T8538] kvasprintf+0xa7/0x120 [ 55.598405][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 55.602274][ T8538] kasprintf+0x96/0xc0 [ 55.602280][ T8538] nf_tables_newset+0x1110/0x1e30 [ 55.602285][ T8538] nfnetlink_rcv_batch+0x854/0x1370 [ 55.602288][ T8538] nfnetlink_rcv+0x2bc/0x340 [ 55.602292][ T8538] netlink_unicast+0x434/0x630 [ 55.602296][ T8538] netlink_sendmsg+0x714/0xc60 [ 55.602301][ T8538] sock_sendmsg+0xac/0xe0 [ 55.602307][ T8538] ____sys_sendmsg+0x54e/0x750 [ 55.612052][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.616266][ T8538] ___sys_sendmsg+0xe4/0x160 [ 55.616271][ T8538] __sys_sendmsg+0xce/0x170 [ 55.616278][ T8538] do_fast_syscall_32+0x231/0xb9f [ 55.616284][ T8538] entry_SYSENTER_compat+0x70/0x7f [ 55.616287][ T8538] [ 55.616290][ T8538] Freed by task 8538: [ 55.616297][ T8538] save_stack+0x19/0x80 [ 55.616301][ T8538] __kasan_slab_free+0xf7/0x140 [ 55.616304][ T8538] kfree+0x107/0x2b0 [ 55.616309][ T8538] nf_tables_newset+0x18cd/0x1e30 [ 55.616314][ T8538] nfnetlink_rcv_batch+0x854/0x1370 [ 55.616317][ T8538] nfnetlink_rcv+0x2bc/0x340 [ 55.616321][ T8538] netlink_unicast+0x434/0x630 [ 55.616325][ T8538] netlink_sendmsg+0x714/0xc60 [ 55.616329][ T8538] sock_sendmsg+0xac/0xe0 [ 55.616332][ T8538] ____sys_sendmsg+0x54e/0x750 [ 55.616336][ T8538] ___sys_sendmsg+0xe4/0x160 [ 55.616339][ T8538] __sys_sendmsg+0xce/0x170 [ 55.616343][ T8538] do_fast_syscall_32+0x231/0xb9f [ 55.616347][ T8538] entry_SYSENTER_compat+0x70/0x7f [ 55.616349][ T8538] [ 55.616353][ T8538] The buggy address belongs to the object at ffff8880a7ddd140 [ 55.616353][ T8538] which belongs to the cache kmalloc-32 of size 32 [ 55.616357][ T8538] The buggy address is located 0 bytes inside of [ 55.616357][ T8538] 32-byte region [ffff8880a7ddd140, ffff8880a7ddd160) [ 55.616360][ T8538] The buggy address belongs to the page: [ 55.616366][ T8538] page:ffffea00029f7740 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff8880a7dddfc1 [ 55.616370][ T8538] flags: 0xfffe0000000200(slab) [ 55.616376][ T8538] raw: 00fffe0000000200 ffffea00028e8d48 ffffea0002684448 ffff8880aa4001c0 [ 55.638242][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.641921][ T8538] raw: ffff8880a7dddfc1 ffff8880a7ddd000 000000010000003f 0000000000000000 [ 55.641926][ T8538] page dumped because: kasan: bad access detected [ 55.641928][ T8538] [ 55.641930][ T8538] Memory state around the buggy address: [ 55.641935][ T8538] ffff8880a7ddd000: fb fb fb fb fc fc fc fc 00 02 fc fc fc fc fc fc [ 55.641938][ T8538] ffff8880a7ddd080: 06 fc fc fc fc fc fc fc 00 00 00 03 fc fc fc fc [ 55.641941][ T8538] >ffff8880a7ddd100: 06 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 55.641944][ T8538] ^ [ 55.641947][ T8538] ffff8880a7ddd180: fb fb fb fb fc fc fc fc 06 fc fc fc fc fc fc fc [ 55.641950][ T8538] ffff8880a7ddd200: 00 05 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 55.641953][ T8538] ================================================================== [ 55.641955][ T8538] Disabling lock debugging due to kernel taint [ 55.641958][ T8538] Kernel panic - not syncing: panic_on_warn set ... [ 55.641964][ T8538] CPU: 0 PID: 8538 Comm: syz-executor.1 Tainted: G B 5.6.0-rc5-syzkaller #0 [ 55.641970][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.666669][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 55.667723][ T8538] Call Trace: [ 55.667738][ T8538] dump_stack+0x128/0x182 [ 55.667746][ T8538] panic+0x22a/0x4e3 [ 55.667754][ T8538] ? add_taint.cold.7+0x11/0x11 [ 55.674441][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.677184][ T8538] ? kmsg_dump_rewind_nolock+0xd4/0xd4 [ 55.677194][ T8538] ? print_shadow_for_address+0xba/0x117 [ 55.677203][ T8538] ? nf_tables_newset+0x1863/0x1e30 [ 55.694046][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.700709][ T8538] end_report+0x43/0x49 [ 55.700717][ T8538] kasan_report_invalid_free+0x7c/0xa0 [ 55.700726][ T8538] ? nf_tables_newset+0x1863/0x1e30 [ 56.284694][ T8538] __kasan_slab_free+0x129/0x140 [ 56.290024][ T8538] ? nf_tables_newset+0x1863/0x1e30 [ 56.295528][ T8538] kfree+0x107/0x2b0 [ 56.299811][ T8538] nf_tables_newset+0x1863/0x1e30 [ 56.305031][ T8538] ? nft_set_elem_expr_alloc+0x1e0/0x1e0 [ 56.310860][ T8538] ? nf_tables_valid_genid+0x1a/0x70 [ 56.316482][ T8538] ? lock_downgrade+0x7b0/0x7b0 [ 56.321583][ T8538] ? mutex_lock_io_nested+0x12e0/0x12e0 [ 56.327242][ T8538] ? memset+0x1f/0x40 [ 56.331209][ T8538] ? __nla_validate_parse+0x9a/0x19d0 [ 56.336884][ T8538] ? __mutex_unlock_slowpath+0xd2/0x650 [ 56.342550][ T8538] ? kmem_cache_alloc+0x358/0x740 [ 56.347732][ T8538] nfnetlink_rcv_batch+0x854/0x1370 [ 56.353016][ T8538] ? nfnetlink_subsys_register+0x290/0x290 [ 56.359279][ T8538] ? __lock_acquire+0x8da/0x4370 [ 56.364301][ T8538] ? apparmor_task_alloc+0x2e0/0x2e0 [ 56.369644][ T8538] ? memcpy+0x34/0x50 [ 56.373696][ T8538] ? nla_memcpy+0x90/0x90 [ 56.378081][ T8538] ? security_capable+0x4c/0x90 [ 56.382918][ T8538] nfnetlink_rcv+0x2bc/0x340 [ 56.387840][ T8538] ? nfnetlink_rcv_batch+0x1370/0x1370 [ 56.393296][ T8538] ? netlink_deliver_tap+0x165/0xa00 [ 56.398712][ T8538] netlink_unicast+0x434/0x630 [ 56.403580][ T8538] ? netlink_attachskb+0x6b0/0x6b0 [ 56.409354][ T8538] ? __check_object_size+0x1f5/0x2c8 [ 56.414627][ T8538] netlink_sendmsg+0x714/0xc60 [ 56.419372][ T8538] ? netlink_unicast+0x630/0x630 [ 56.424296][ T8538] ? netlink_unicast+0x630/0x630 [ 56.429245][ T8538] sock_sendmsg+0xac/0xe0 [ 56.433560][ T8538] ____sys_sendmsg+0x54e/0x750 [ 56.438308][ T8538] ? get_compat_msghdr+0x1ec/0x340 [ 56.443845][ T8538] ? kernel_sendmsg+0x30/0x30 [ 56.449040][ T8538] ? find_held_lock+0x33/0x1c0 [ 56.453800][ T8538] ___sys_sendmsg+0xe4/0x160 [ 56.458829][ T8538] ? sendmsg_copy_msghdr+0x30/0x30 [ 56.464084][ T8538] ? __fget_files+0x27e/0x3d0 [ 56.468891][ T8538] ? ksys_dup3+0x2e0/0x2e0 [ 56.473405][ T8538] ? lock_downgrade+0x7b0/0x7b0 [ 56.478499][ T8538] ? __fget_light+0x19f/0x220 [ 56.483341][ T8538] ? sockfd_lookup_light+0x17/0x140 [ 56.488852][ T8538] __sys_sendmsg+0xce/0x170 [ 56.493575][ T8538] ? __sys_sendmsg_sock+0xa0/0xa0 [ 56.498855][ T8538] ? put_old_timespec32+0xbd/0x180 [ 56.504018][ T8538] ? get_old_timespec32+0x1a0/0x1a0 [ 56.509357][ T8538] ? do_fast_syscall_32+0xca/0xb9f [ 56.514500][ T8538] do_fast_syscall_32+0x231/0xb9f [ 56.519509][ T8538] entry_SYSENTER_compat+0x70/0x7f [ 56.526463][ T8538] Kernel Offset: disabled [ 56.530798][ T8538] Rebooting in 86400 seconds..