[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 58.234252][ T8529] IPVS: ftp: loaded support on port[0] = 21 [ 58.531661][ T78] tipc: TX() has been purged, node left! [ 59.286954][ T8514] can: request_module (can-proto-0) failed. [ 61.502321][ T8514] can: request_module (can-proto-0) failed. [ 61.514188][ T8514] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.21' (ECDSA) to the list of known hosts. 2020/03/15 08:11:10 parsed 1 programs 2020/03/15 08:11:10 executed programs: 0 [ 69.677087][ T8615] IPVS: ftp: loaded support on port[0] = 21 [ 69.691132][ T8613] IPVS: ftp: loaded support on port[0] = 21 [ 69.727734][ T8618] IPVS: ftp: loaded support on port[0] = 21 [ 69.757883][ T8620] IPVS: ftp: loaded support on port[0] = 21 [ 69.757938][ T8622] IPVS: ftp: loaded support on port[0] = 21 [ 69.786613][ T8623] IPVS: ftp: loaded support on port[0] = 21 [ 69.926809][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 69.990076][ T8623] chnl_net:caif_netlink_parms(): no params data found [ 70.006589][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 70.038599][ T8615] chnl_net:caif_netlink_parms(): no params data found [ 70.167775][ T8620] chnl_net:caif_netlink_parms(): no params data found [ 70.176245][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.183957][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.191491][ T8613] device bridge_slave_0 entered promiscuous mode [ 70.199412][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 70.223438][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.230518][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.238762][ T8613] device bridge_slave_1 entered promiscuous mode [ 70.283795][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.293055][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.300160][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.308248][ T8623] device bridge_slave_0 entered promiscuous mode [ 70.328204][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.335306][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.343007][ T8622] device bridge_slave_0 entered promiscuous mode [ 70.354701][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.361806][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.369441][ T8622] device bridge_slave_1 entered promiscuous mode [ 70.377581][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.402773][ T8613] team0: Port device team_slave_0 added [ 70.408733][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.416175][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.426467][ T8623] device bridge_slave_1 entered promiscuous mode [ 70.456705][ T8613] team0: Port device team_slave_1 added [ 70.475213][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.490797][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.503433][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.510512][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.520820][ T8615] device bridge_slave_0 entered promiscuous mode [ 70.529147][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.543611][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.563493][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.570565][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.578399][ T8615] device bridge_slave_1 entered promiscuous mode [ 70.620501][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.627746][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.653909][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.670100][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.677121][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.703070][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.725766][ T8622] team0: Port device team_slave_0 added [ 70.739948][ T8615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.750966][ T8623] team0: Port device team_slave_0 added [ 70.770989][ T8622] team0: Port device team_slave_1 added [ 70.776964][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.784461][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.793474][ T8618] device bridge_slave_0 entered promiscuous mode [ 70.800811][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.808045][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.816187][ T8620] device bridge_slave_0 entered promiscuous mode [ 70.824500][ T8615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.837218][ T8623] team0: Port device team_slave_1 added [ 70.883805][ T8613] device hsr_slave_0 entered promiscuous mode [ 70.922287][ T8613] device hsr_slave_1 entered promiscuous mode [ 70.965983][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.973268][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.980786][ T8618] device bridge_slave_1 entered promiscuous mode [ 70.987976][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.997674][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.005416][ T8620] device bridge_slave_1 entered promiscuous mode [ 71.079603][ T8615] team0: Port device team_slave_0 added [ 71.087993][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.095122][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.125566][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.141932][ T8620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.152742][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.162323][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.169294][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.195429][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.207462][ T8615] team0: Port device team_slave_1 added [ 71.216331][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.223324][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.249279][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.263564][ T8620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.273659][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.286422][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.293471][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.319528][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.364626][ T8618] team0: Port device team_slave_0 added [ 71.377346][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.384451][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.410357][ T8615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.426210][ T8615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.433314][ T8615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.459489][ T8615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.533397][ T8623] device hsr_slave_0 entered promiscuous mode [ 71.602022][ T8623] device hsr_slave_1 entered promiscuous mode [ 71.641703][ T8623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.649444][ T8623] Cannot create hsr debugfs directory [ 71.658920][ T8618] team0: Port device team_slave_1 added [ 71.677366][ T8620] team0: Port device team_slave_0 added [ 71.685713][ T8620] team0: Port device team_slave_1 added [ 71.754839][ T8622] device hsr_slave_0 entered promiscuous mode [ 71.792262][ T8622] device hsr_slave_1 entered promiscuous mode [ 71.861755][ T8622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.869323][ T8622] Cannot create hsr debugfs directory [ 71.898865][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.905971][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.932197][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.948590][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.955642][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.981629][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.064532][ T8615] device hsr_slave_0 entered promiscuous mode [ 72.101957][ T8615] device hsr_slave_1 entered promiscuous mode [ 72.141650][ T8615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.149489][ T8615] Cannot create hsr debugfs directory [ 72.175567][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.182614][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.208558][ T8620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.246296][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.253950][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.283278][ T8620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.334269][ T8618] device hsr_slave_0 entered promiscuous mode [ 72.372703][ T8618] device hsr_slave_1 entered promiscuous mode [ 72.411741][ T8618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.419313][ T8618] Cannot create hsr debugfs directory [ 72.500720][ T8613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.573363][ T8620] device hsr_slave_0 entered promiscuous mode [ 72.631965][ T8620] device hsr_slave_1 entered promiscuous mode [ 72.671663][ T8620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.679245][ T8620] Cannot create hsr debugfs directory [ 72.706466][ T8613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.754253][ T8613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.796298][ T8613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.973766][ T8623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.044653][ T8623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.094107][ T8623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.156293][ T8623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.238242][ T8618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.266737][ T8618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.343847][ T8618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.399948][ T8618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.493588][ T8615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.525135][ T8615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.589962][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.614637][ T8615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.677058][ T8615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.760845][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.778894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.788249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.796592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.806319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.814914][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.822096][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.852316][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.867122][ T8620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.903642][ T8620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.985324][ T8622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.043559][ T8620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.094445][ T8620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.136732][ T8622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.197303][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.204736][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.213603][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.222697][ T2725] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.229730][ T2725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.240141][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.260982][ T8622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.310396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.318377][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.326419][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.334949][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.343600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.351315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.359597][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.368221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.376797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.385650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.398255][ T8623] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.406765][ T8622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.445138][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.463447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.471099][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.479670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.489101][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.496184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.503897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.512476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.520700][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.527776][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.557518][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.565681][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.576081][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.586837][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.593926][ T2725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.603348][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.611985][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.620069][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.628488][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.636965][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.672604][ T8615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.679845][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.690355][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.699243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.707789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.714867][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.723641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.732560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.740909][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.749900][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.777647][ T8618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.788243][ T8618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.802886][ T8613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.811026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.819169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.827969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.837410][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.846642][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.855452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.863831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.872867][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.881330][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.890266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.898767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.907197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.916138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.924223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.940527][ T8623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.952957][ T8623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.975103][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.986269][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.994649][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.003570][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.012034][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.028690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.036965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.057534][ T8615] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.080659][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.089508][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.098358][ T2726] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.105453][ T2726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.114111][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.121634][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.129715][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.158662][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.170804][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.180280][ T2726] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.187399][ T2726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.195649][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.203345][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.210737][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.218498][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.232634][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.269641][ T8620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.279965][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.297129][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.333286][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.340596][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.349216][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.361427][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.370254][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.379140][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.387828][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.396580][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.418574][ T8613] device veth0_vlan entered promiscuous mode [ 75.436724][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.446823][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.455496][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.464067][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.472553][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.480682][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.489275][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.498149][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.506800][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.514823][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.529779][ T8615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.543880][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.562201][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.570756][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.581327][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.593105][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.601291][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.609628][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.617283][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.634096][ T8613] device veth1_vlan entered promiscuous mode [ 75.644460][ T8620] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.655922][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.665280][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.673984][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.682793][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.691137][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.698502][ T2725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.707505][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.715918][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.724586][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.733009][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.740042][ T2725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.763256][ T8615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.777096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.785524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.794342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.802976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.811917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.820455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.829148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.837836][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.844957][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.852874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.860451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.873637][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.882409][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.890760][ T2726] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.897866][ T2726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.905674][ T8618] device veth0_vlan entered promiscuous mode [ 75.922315][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.950972][ T8623] device veth0_vlan entered promiscuous mode [ 75.980029][ T8613] device veth0_macvtap entered promiscuous mode [ 76.000187][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.013184][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.021491][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.030331][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.039897][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.048855][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.057355][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.065856][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.074819][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.083820][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.092944][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.101314][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.109884][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.121208][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.129104][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.136847][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.145413][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.163266][ T8618] device veth1_vlan entered promiscuous mode [ 76.173171][ T8613] device veth1_macvtap entered promiscuous mode [ 76.186382][ T8623] device veth1_vlan entered promiscuous mode [ 76.193448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.202712][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.211097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.219563][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.228391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.237080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.245557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.254587][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.269757][ T8622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.282566][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.299650][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.309670][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.318994][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.327851][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.337605][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.345973][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.354737][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.363496][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.372139][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.380650][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.391017][ T8620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.425254][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.437631][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.447806][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.456669][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.465355][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.473830][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.489365][ T8615] device veth0_vlan entered promiscuous mode [ 76.510761][ T8623] device veth0_macvtap entered promiscuous mode [ 76.527055][ T8623] device veth1_macvtap entered promiscuous mode [ 76.543487][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.552091][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.560579][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.569684][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.578309][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.586833][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.594647][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.602726][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.615700][ T8615] device veth1_vlan entered promiscuous mode [ 76.639961][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.650926][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.664598][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.676207][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.687267][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.698277][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.767560][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.776614][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.784120][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.795462][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.804336][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.813362][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.835746][ T8620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.854873][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.914041][ T8615] device veth0_macvtap entered promiscuous mode [ 76.921268][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.929713][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.938344][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.947593][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.957245][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.965681][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.978355][ T8618] device veth0_macvtap entered promiscuous mode [ 77.025352][ T8615] device veth1_macvtap entered promiscuous mode [ 77.043079][ T8618] device veth1_macvtap entered promiscuous mode [ 77.072084][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.080005][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.092071][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.099917][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.108305][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.117201][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.229887][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.242490][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.255162][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.266032][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.278830][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.299998][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.311959][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.322898][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.341595][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.360104][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.371006][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.383704][ T8615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.387302][ T8661] ================================================================== [ 77.399083][ T8661] BUG: KASAN: use-after-free in sctp_wfree+0x463/0x710 [ 77.402081][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.405925][ T8661] Read of size 8 at addr ffff8880a181f5a8 by task syz-executor.2/8661 [ 77.417121][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.427490][ T8661] [ 77.427502][ T8661] CPU: 1 PID: 8661 Comm: syz-executor.2 Not tainted 5.6.0-rc5-syzkaller #0 [ 77.427507][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.427510][ T8661] Call Trace: [ 77.427525][ T8661] dump_stack+0x1e9/0x30e [ 77.427542][ T8661] print_address_description+0x74/0x5c0 [ 77.427556][ T8661] ? printk+0x62/0x83 [ 77.427566][ T8661] ? vprintk_emit+0x2e6/0x3b0 [ 77.427581][ T8661] __kasan_report+0x14b/0x1c0 [ 77.427593][ T8661] ? rcu_read_lock_sched_held+0x30/0x170 [ 77.427600][ T8661] ? sctp_wfree+0x463/0x710 [ 77.427614][ T8661] kasan_report+0x25/0x50 [ 77.427625][ T8661] sctp_wfree+0x463/0x710 [ 77.427644][ T8661] skb_release_head_state+0xfb/0x210 [ 77.427659][ T8661] __kfree_skb+0x22/0x1c0 [ 77.427671][ T8661] sctp_chunk_put+0x17b/0x200 [ 77.427683][ T8661] sctp_datamsg_put+0x438/0x570 [ 77.427695][ T8661] ? __genradix_ptr+0x350/0x3d0 [ 77.427711][ T8661] sctp_chunk_free+0x46/0x60 [ 77.427720][ T8661] __sctp_outq_teardown+0x80a/0x9d0 [ 77.427732][ T8661] sctp_association_free+0x21e/0x7c0 [ 77.427740][ T8661] ? sctp_do_sm+0x2e2a/0x5560 [ 77.427750][ T8661] sctp_do_sm+0x3c01/0x5560 [ 77.427765][ T8661] ? rcu_read_lock_sched_held+0x106/0x170 [ 77.427783][ T8661] ? _sctp_make_chunk+0x10c/0x3e0 [ 77.427790][ T8661] ? rcu_read_lock_sched_held+0x106/0x170 [ 77.427798][ T8661] ? trace_kmem_cache_alloc+0xcb/0x120 [ 77.427807][ T8661] ? _sctp_make_chunk+0x10c/0x3e0 [ 77.427815][ T8661] ? sctp_auth_send_cid+0x60/0x250 [ 77.427842][ T8661] sctp_primitive_ABORT+0x93/0xc0 [ 77.427857][ T8661] sctp_close+0x231/0x770 [ 77.427877][ T8661] ? ip_mc_drop_socket+0x267/0x280 [ 77.427893][ T8661] inet_release+0x135/0x180 [ 77.427906][ T8661] sock_close+0xd8/0x260 [ 77.427918][ T8661] ? sock_mmap+0x90/0x90 [ 77.427927][ T8661] __fput+0x2d8/0x730 [ 77.427953][ T8661] task_work_run+0x176/0x1b0 [ 77.427973][ T8661] prepare_exit_to_usermode+0x48e/0x600 [ 77.427983][ T8661] ? syscall_return_slowpath+0xf9/0x420 [ 77.428036][ T8661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.428046][ T8661] RIP: 0033:0x416041 [ 77.428055][ T8661] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 77.428060][ T8661] RSP: 002b:00007ffdc88e28b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 77.428068][ T8661] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000416041 [ 77.428073][ T8661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 77.428078][ T8661] RBP: 0000000000000001 R08: 00ffffffffffffff R09: 00ffffffffffffff [ 77.428083][ T8661] R10: 00007ffdc88e2990 R11: 0000000000000293 R12: 000000000076bf20 [ 77.428089][ T8661] R13: 0000000000770850 R14: 0000000000012e64 R15: 000000000076bf2c [ 77.428114][ T8661] [ 77.428118][ T8661] Allocated by task 8662: [ 77.428128][ T8661] __kasan_kmalloc+0x118/0x1c0 [ 77.428135][ T8661] kmem_cache_alloc+0x1f5/0x2d0 [ 77.428142][ T8661] sk_prot_alloc+0x58/0x2b0 [ 77.428148][ T8661] sk_alloc+0x35/0x990 [ 77.428156][ T8661] inet_create+0x576/0xc80 [ 77.428165][ T8661] __sock_create+0x5c9/0x8d0 [ 77.428172][ T8661] __sys_socket+0xde/0x2d0 [ 77.428180][ T8661] __x64_sys_socket+0x76/0x80 [ 77.428187][ T8661] do_syscall_64+0xf3/0x1b0 [ 77.428196][ T8661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.428198][ T8661] [ 77.428203][ T8661] Freed by task 8661: [ 77.428211][ T8661] __kasan_slab_free+0x12e/0x1e0 [ 77.428217][ T8661] kmem_cache_free+0x7e/0xf0 [ 77.428224][ T8661] __sk_destruct+0x60e/0x740 [ 77.428230][ T8661] sctp_wfree+0x3af/0x710 [ 77.428238][ T8661] skb_release_head_state+0xfb/0x210 [ 77.428246][ T8661] __kfree_skb+0x22/0x1c0 [ 77.428252][ T8661] sctp_chunk_put+0x17b/0x200 [ 77.428260][ T8661] sctp_datamsg_put+0x438/0x570 [ 77.428267][ T8661] sctp_chunk_free+0x46/0x60 [ 77.428274][ T8661] __sctp_outq_teardown+0x80a/0x9d0 [ 77.428280][ T8661] sctp_association_free+0x21e/0x7c0 [ 77.428288][ T8661] sctp_do_sm+0x3c01/0x5560 [ 77.428295][ T8661] sctp_primitive_ABORT+0x93/0xc0 [ 77.428302][ T8661] sctp_close+0x231/0x770 [ 77.428309][ T8661] inet_release+0x135/0x180 [ 77.428316][ T8661] sock_close+0xd8/0x260 [ 77.428322][ T8661] __fput+0x2d8/0x730 [ 77.428329][ T8661] task_work_run+0x176/0x1b0 [ 77.428337][ T8661] prepare_exit_to_usermode+0x48e/0x600 [ 77.428345][ T8661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.428347][ T8661] [ 77.428354][ T8661] The buggy address belongs to the object at ffff8880a181f040 [ 77.428354][ T8661] which belongs to the cache SCTP of size 1800 [ 77.428362][ T8661] The buggy address is located 1384 bytes inside of [ 77.428362][ T8661] 1800-byte region [ffff8880a181f040, ffff8880a181f748) [ 77.428365][ T8661] The buggy address belongs to the page: [ 77.428375][ T8661] page:ffffea00028607c0 refcount:1 mapcount:0 mapping:ffff888099725000 index:0x0 [ 77.428382][ T8661] flags: 0xfffe0000000200(slab) [ 77.428393][ T8661] raw: 00fffe0000000200 ffff8880995ded48 ffff8880995ded48 ffff888099725000 [ 77.428402][ T8661] raw: 0000000000000000 ffff8880a181f040 0000000100000002 0000000000000000 [ 77.428406][ T8661] page dumped because: kasan: bad access detected [ 77.428409][ T8661] [ 77.428412][ T8661] Memory state around the buggy address: [ 77.428418][ T8661] ffff8880a181f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.428424][ T8661] ffff8880a181f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.428430][ T8661] >ffff8880a181f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.428434][ T8661] ^ [ 77.428439][ T8661] ffff8880a181f600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.428445][ T8661] ffff8880a181f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.428449][ T8661] ================================================================== [ 77.428452][ T8661] Disabling lock debugging due to kernel taint [ 77.443945][ T8661] Kernel panic - not syncing: panic_on_warn set ... [ 77.452060][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.457609][ T8661] CPU: 1 PID: 8661 Comm: syz-executor.2 Tainted: G B 5.6.0-rc5-syzkaller #0 [ 77.461282][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.478460][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.478463][ T8661] Call Trace: [ 77.478480][ T8661] dump_stack+0x1e9/0x30e [ 77.478491][ T8661] panic+0x264/0x7a0 [ 77.478500][ T8661] ? trace_hardirqs_on+0x30/0x70 [ 77.478512][ T8661] __kasan_report+0x1bc/0x1c0 [ 77.478522][ T8661] ? rcu_read_lock_sched_held+0x30/0x170 [ 77.478528][ T8661] ? sctp_wfree+0x463/0x710 [ 77.478537][ T8661] kasan_report+0x25/0x50 [ 77.478544][ T8661] sctp_wfree+0x463/0x710 [ 77.478556][ T8661] skb_release_head_state+0xfb/0x210 [ 77.478566][ T8661] __kfree_skb+0x22/0x1c0 [ 77.478576][ T8661] sctp_chunk_put+0x17b/0x200 [ 77.478585][ T8661] sctp_datamsg_put+0x438/0x570 [ 77.478594][ T8661] ? __genradix_ptr+0x350/0x3d0 [ 77.478605][ T8661] sctp_chunk_free+0x46/0x60 [ 77.478613][ T8661] __sctp_outq_teardown+0x80a/0x9d0 [ 77.478623][ T8661] sctp_association_free+0x21e/0x7c0 [ 77.478632][ T8661] ? sctp_do_sm+0x2e2a/0x5560 [ 77.478640][ T8661] sctp_do_sm+0x3c01/0x5560 [ 77.478651][ T8661] ? rcu_read_lock_sched_held+0x106/0x170 [ 77.478664][ T8661] ? _sctp_make_chunk+0x10c/0x3e0 [ 77.478670][ T8661] ? rcu_read_lock_sched_held+0x106/0x170 [ 77.478682][ T8661] ? trace_kmem_cache_alloc+0xcb/0x120 [ 77.486898][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.488177][ T8661] ? _sctp_make_chunk+0x10c/0x3e0 [ 77.493586][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.498204][ T8661] ? sctp_auth_send_cid+0x60/0x250 [ 77.505073][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.508308][ T8661] sctp_primitive_ABORT+0x93/0xc0 [ 77.514258][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.517075][ T8661] sctp_close+0x231/0x770 [ 77.523603][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.526647][ T8661] ? ip_mc_drop_socket+0x267/0x280 [ 77.536227][ T8622] device veth0_vlan entered promiscuous mode [ 77.540958][ T8661] inet_release+0x135/0x180 [ 77.552665][ T8622] device veth1_vlan entered promiscuous mode [ 77.556076][ T8661] sock_close+0xd8/0x260 [ 77.575795][ T8622] device veth0_macvtap entered promiscuous mode [ 77.576174][ T8661] ? sock_mmap+0x90/0x90 [ 77.584765][ T8622] device veth1_macvtap entered promiscuous mode [ 77.587315][ T8661] __fput+0x2d8/0x730 [ 77.601041][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.602418][ T8661] task_work_run+0x176/0x1b0 [ 77.602432][ T8661] prepare_exit_to_usermode+0x48e/0x600 [ 77.602441][ T8661] ? syscall_return_slowpath+0xf9/0x420 [ 77.602454][ T8661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 77.602465][ T8661] RIP: 0033:0x416041 [ 77.606786][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.611857][ T8661] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 77.611862][ T8661] RSP: 002b:00007ffdc88e28b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 77.611869][ T8661] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000416041 [ 77.611873][ T8661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 77.611878][ T8661] RBP: 0000000000000001 R08: 00ffffffffffffff R09: 00ffffffffffffff [ 77.611882][ T8661] R10: 00007ffdc88e2990 R11: 0000000000000293 R12: 000000000076bf20 [ 77.611886][ T8661] R13: 0000000000770850 R14: 0000000000012e64 R15: 000000000076bf2c [ 77.613225][ T8661] Kernel Offset: disabled [ 78.409185][ T8661] Rebooting in 86400 seconds..