[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.329533][ T26] audit: type=1800 audit(1580092661.588:29): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.384810][ T7001] IPVS: ftp: loaded support on port[0] = 21 [ 38.874762][ T7006] can: request_module (can-proto-0) failed. [ 39.504136][ T7006] can: request_module (can-proto-0) failed. [ 39.513050][ T7006] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. 2020/01/27 02:38:01 parsed 1 programs 2020/01/27 02:38:02 executed programs: 0 [ 46.982782][ T7087] IPVS: ftp: loaded support on port[0] = 21 [ 46.990539][ T7089] IPVS: ftp: loaded support on port[0] = 21 [ 46.992867][ T7085] IPVS: ftp: loaded support on port[0] = 21 [ 47.023265][ T7091] IPVS: ftp: loaded support on port[0] = 21 [ 47.051324][ T7093] IPVS: ftp: loaded support on port[0] = 21 [ 47.058986][ T7094] IPVS: ftp: loaded support on port[0] = 21 [ 47.112497][ T7089] chnl_net:caif_netlink_parms(): no params data found [ 47.148769][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 47.175320][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.182798][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.190526][ T7085] device bridge_slave_0 entered promiscuous mode [ 47.209894][ T7087] chnl_net:caif_netlink_parms(): no params data found [ 47.221625][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.228736][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.236088][ T7085] device bridge_slave_1 entered promiscuous mode [ 47.250541][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.257596][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.265468][ T7089] device bridge_slave_0 entered promiscuous mode [ 47.274431][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.281533][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.289290][ T7089] device bridge_slave_1 entered promiscuous mode [ 47.302737][ T7091] chnl_net:caif_netlink_parms(): no params data found [ 47.314935][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.327180][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.340229][ T7089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.350373][ T7089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.370058][ T7085] team0: Port device team_slave_0 added [ 47.376961][ T7085] team0: Port device team_slave_1 added [ 47.393416][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.400670][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.408431][ T7091] device bridge_slave_0 entered promiscuous mode [ 47.415664][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.422931][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.430345][ T7091] device bridge_slave_1 entered promiscuous mode [ 47.449011][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.455969][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.482326][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.500599][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.509947][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.517005][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.543034][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.557186][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.564677][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.572295][ T7087] device bridge_slave_0 entered promiscuous mode [ 47.581002][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.588111][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.596092][ T7087] device bridge_slave_1 entered promiscuous mode [ 47.606632][ T7089] team0: Port device team_slave_0 added [ 47.613528][ T7089] team0: Port device team_slave_1 added [ 47.620718][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.637440][ T7091] team0: Port device team_slave_0 added [ 47.654061][ T7091] team0: Port device team_slave_1 added [ 47.660464][ T7087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.695182][ T7087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.704998][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.712946][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.739869][ T7089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.752318][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.759384][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.785348][ T7089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.839635][ T7085] device hsr_slave_0 entered promiscuous mode [ 47.878272][ T7085] device hsr_slave_1 entered promiscuous mode [ 47.923963][ T7093] chnl_net:caif_netlink_parms(): no params data found [ 47.936981][ T7094] chnl_net:caif_netlink_parms(): no params data found [ 47.945558][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.952588][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.978615][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.991457][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.998466][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.026243][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.042622][ T7087] team0: Port device team_slave_0 added [ 48.052082][ T7087] team0: Port device team_slave_1 added [ 48.119305][ T7089] device hsr_slave_0 entered promiscuous mode [ 48.158269][ T7089] device hsr_slave_1 entered promiscuous mode [ 48.232833][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.240155][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.247511][ T7093] device bridge_slave_0 entered promiscuous mode [ 48.260221][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.267293][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.274874][ T7093] device bridge_slave_1 entered promiscuous mode [ 48.281610][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.288824][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.296253][ T7094] device bridge_slave_0 entered promiscuous mode [ 48.304790][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.312143][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.319625][ T7094] device bridge_slave_1 entered promiscuous mode [ 48.335332][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.342490][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.368562][ T7087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.449714][ T7091] device hsr_slave_0 entered promiscuous mode [ 48.518172][ T7091] device hsr_slave_1 entered promiscuous mode [ 48.598424][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.605388][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.631496][ T7087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.644815][ T7094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.654855][ T7094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.664746][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.694931][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.726372][ T7094] team0: Port device team_slave_0 added [ 48.800398][ T7087] device hsr_slave_0 entered promiscuous mode [ 48.838306][ T7087] device hsr_slave_1 entered promiscuous mode [ 48.932498][ T7094] team0: Port device team_slave_1 added [ 48.980393][ T7093] team0: Port device team_slave_0 added [ 48.997378][ T7093] team0: Port device team_slave_1 added [ 49.082720][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.110213][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.197989][ T7094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.246515][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.262379][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.289759][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.378006][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.409094][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.416065][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.467979][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.483845][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.498596][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.527032][ T7094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.566603][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.604517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.626429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.717703][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.760801][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.790135][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.797201][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.870328][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.910152][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.951083][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.958250][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.030211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.058543][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.090189][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.118706][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.190227][ T7094] device hsr_slave_0 entered promiscuous mode [ 50.228848][ T7094] device hsr_slave_1 entered promiscuous mode [ 50.270140][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.279027][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.286669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.297202][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.306421][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.316978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.325408][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.335705][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.389948][ T7093] device hsr_slave_0 entered promiscuous mode [ 50.438658][ T7093] device hsr_slave_1 entered promiscuous mode [ 50.488708][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.544732][ T7089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.559592][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.567001][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.599701][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.623325][ T7089] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.649290][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.670822][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.704983][ T7087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.744830][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.769861][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.777592][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.818722][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.827147][ T3847] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.834266][ T3847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.888130][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.896672][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.948218][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.955306][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.979248][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.986921][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.003558][ T7087] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.022679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.032877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.042221][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.051758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.086126][ T7089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.117369][ T7089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.130122][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.162667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.230610][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.237678][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.269926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.299318][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.330010][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.337253][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.370814][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.390240][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.410357][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.430532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.446880][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.453997][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.466299][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.483118][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.491597][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.500297][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.508644][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.515817][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.523743][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.532370][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.540862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.549380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.558881][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.566994][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.575489][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.583962][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.592089][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.600366][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.609036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.616908][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.624654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.632896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.640953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.655227][ T7087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.665979][ T7087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.686693][ T7089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.694550][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.706621][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.719367][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.727635][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.736496][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.744985][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.753848][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.764738][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.773861][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.782290][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.790626][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.798926][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.807109][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.815388][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.822836][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.830621][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.838404][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.856114][ T7094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.871378][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.880462][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.889387][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.896799][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.908956][ T7091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.919160][ T7087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.934765][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.949508][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.967748][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.979188][ T7094] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.987840][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.996837][ T3847] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.030496][ T7085] device veth0_vlan entered promiscuous mode [ 52.044252][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.053965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.062726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.071292][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.078477][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.086595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.095373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.103747][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.110911][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.118682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.127095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.135625][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.144605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.153216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.161671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.170061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.178659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.186691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.195785][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.205310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.213667][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.226974][ T7094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.238875][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.252086][ T7085] device veth1_vlan entered promiscuous mode [ 52.261301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.269521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.279616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.287658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.295613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.304029][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.312395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.320700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.335230][ T7093] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.348042][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.356999][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.365970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.373971][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.386125][ T7094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.411117][ T7089] device veth0_vlan entered promiscuous mode [ 52.419193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.426825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.436042][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.445819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.454684][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.463702][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.472271][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.479456][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.487115][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.495979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.504695][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.512287][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.520089][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.528547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.536946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.545639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.554324][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.562853][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.571199][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.580065][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.589080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.596935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.604983][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.613645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.624439][ T7089] device veth1_vlan entered promiscuous mode [ 52.638570][ T7085] device veth0_macvtap entered promiscuous mode [ 52.646244][ T7093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.657045][ T7093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.671799][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.680427][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.688736][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.697097][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.708490][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.717229][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.726308][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.737777][ T7085] device veth1_macvtap entered promiscuous mode [ 52.764170][ T7087] device veth0_vlan entered promiscuous mode [ 52.777701][ T7089] device veth0_macvtap entered promiscuous mode [ 52.792849][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.803488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.813280][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.821912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.831006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.839527][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.848516][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.856552][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.864477][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.872179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.879852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.892391][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.902010][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.911462][ T7089] device veth1_macvtap entered promiscuous mode [ 52.922894][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.941566][ T7087] device veth1_vlan entered promiscuous mode [ 52.949650][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.957629][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.969173][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.978754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.988632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.997102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.005383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.013453][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.021906][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.031976][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.046949][ T7087] device veth0_macvtap entered promiscuous mode [ 53.060781][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 53.072122][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.082990][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.091643][ T7091] device veth0_vlan entered promiscuous mode [ 53.100686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.108692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.117444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.126415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.134776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.143477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.152035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.160628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.176799][ T7087] device veth1_macvtap entered promiscuous mode [ 53.188236][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 53.194308][ T7340] ================================================================== [ 53.202166][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.206728][ T7340] BUG: KASAN: slab-out-of-bounds in bitmap_ip_add+0xea/0x10a0 [ 53.206733][ T7340] Read of size 8 at addr ffff8880a5fbe880 by task syz-executor.3/7340 [ 53.206734][ T7340] [ 53.206743][ T7340] CPU: 1 PID: 7340 Comm: syz-executor.3 Not tainted 5.2.0-syzkaller #0 [ 53.218700][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.223968][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.223971][ T7340] Call Trace: [ 53.223984][ T7340] dump_stack+0x113/0x167 [ 53.223997][ T7340] print_address_description.cold.8+0x9/0x318 [ 53.239953][ T7091] device veth1_vlan entered promiscuous mode [ 53.242874][ T7340] ? bitmap_ip_add+0xea/0x10a0 [ 53.266291][ T7091] device veth0_macvtap entered promiscuous mode [ 53.267922][ T7340] __kasan_report.cold.9+0x1b/0x3f [ 53.267928][ T7340] ? bitmap_ip_add+0xea/0x10a0 [ 53.267933][ T7340] ? bitmap_ip_add+0xea/0x10a0 [ 53.267937][ T7340] kasan_report+0x12/0x20 [ 53.267941][ T7340] check_memory_region+0x13e/0x1b0 [ 53.267945][ T7340] kasan_check_read+0x11/0x20 [ 53.267948][ T7340] bitmap_ip_add+0xea/0x10a0 [ 53.267957][ T7340] ? bitmap_ip_del+0x310/0x310 [ 53.276393][ T7091] device veth1_macvtap entered promiscuous mode [ 53.280307][ T7340] bitmap_ip_uadt+0x611/0x940 [ 53.280311][ T7340] ? bitmap_ip_del+0x310/0x310 [ 53.280317][ T7340] ? bitmap_ip_kadt+0x6b0/0x6b0 [ 53.280321][ T7340] ? mark_held_locks+0x130/0x130 [ 53.280325][ T7340] ? lock_acquire+0x194/0x410 [ 53.280330][ T7340] ? do_raw_spin_lock+0x123/0x2d0 [ 53.280335][ T7340] ? rwlock_bug.part.2+0x90/0x90 [ 53.280342][ T7340] ? lock_acquire+0x194/0x410 [ 53.280350][ T7340] call_ad+0x178/0x560 [ 53.290844][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 53.291336][ T7340] ? memset+0x31/0x40 [ 53.296497][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.301202][ T7340] ? ip_set_destroy_set+0xd0/0xd0 [ 53.301209][ T7340] ? kasan_check_read+0x11/0x20 [ 53.301219][ T7340] ? nla_memcpy+0xa0/0xa0 [ 53.301226][ T7340] ip_set_ad.isra.27+0x411/0xb30 [ 53.301233][ T7340] ? ip_set_nfnl_get_byindex+0x320/0x320 [ 53.301236][ T7340] ? kasan_check_write+0x14/0x20 [ 53.301242][ T7340] ? nfnetlink_rcv_msg+0x310/0xc10 [ 53.301248][ T7340] ? rwlock_bug.part.2+0x90/0x90 [ 53.301259][ T7340] ? ip_set_udel+0x20/0x20 [ 53.301263][ T7340] ip_set_uadd+0x11/0x20 [ 53.301267][ T7340] nfnetlink_rcv_msg+0x946/0xc10 [ 53.301274][ T7340] ? __dev_queue_xmit+0x12ab/0x3040 [ 53.301282][ T7340] ? nfnetlink_bind+0x1f0/0x1f0 [ 53.301374][ T7340] ? netdev_core_pick_tx+0x2a0/0x2a0 [ 53.301379][ T7340] ? __netlink_lookup+0x317/0x5c0 [ 53.301384][ T7340] ? lock_downgrade+0x900/0x900 [ 53.301389][ T7340] ? apparmor_cred_prepare+0x5a0/0x5a0 [ 53.301395][ T7340] netlink_rcv_skb+0x13c/0x380 [ 53.301400][ T7340] ? nfnetlink_bind+0x1f0/0x1f0 [ 53.301404][ T7340] ? netlink_ack+0x970/0x970 [ 53.301412][ T7340] ? ns_capable+0xb/0x10 [ 53.301418][ T7340] ? __netlink_ns_capable+0xc3/0xf0 [ 53.301423][ T7340] nfnetlink_rcv+0x15d/0x3b0 [ 53.301427][ T7340] ? nfnetlink_rcv_batch+0x15b0/0x15b0 [ 53.301430][ T7340] ? netlink_deliver_tap+0x182/0xad0 [ 53.301436][ T7340] netlink_unicast+0x43b/0x640 [ 53.301441][ T7340] ? netlink_attachskb+0x6d0/0x6d0 [ 53.301447][ T7340] ? _copy_from_iter_full+0x19e/0x7f0 [ 53.301452][ T7340] ? kasan_check_read+0x11/0x20 [ 53.301456][ T7340] ? __check_object_size+0x1ff/0x30d [ 53.301460][ T7340] netlink_sendmsg+0x765/0xc50 [ 53.301464][ T7340] ? netlink_unicast+0x640/0x640 [ 53.301471][ T7340] ? apparmor_socket_sendmsg+0x1b/0x20 [ 53.301475][ T7340] ? netlink_unicast+0x640/0x640 [ 53.301479][ T7340] sock_sendmsg+0xb5/0xf0 [ 53.301483][ T7340] ___sys_sendmsg+0x647/0x950 [ 53.301486][ T7340] ? kasan_check_read+0x11/0x20 [ 53.301491][ T7340] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 53.301495][ T7340] ? lock_downgrade+0x900/0x900 [ 53.301500][ T7340] ? lock_acquire+0x194/0x410 [ 53.301504][ T7340] ? kmem_cache_alloc+0x2f8/0x720 [ 53.301511][ T7340] ? __fget+0x2b1/0x420 [ 53.301517][ T7340] ? ksys_dup3+0x2e0/0x2e0 [ 53.301524][ T7340] ? alloc_empty_file+0xa0/0x110 [ 53.301530][ T7340] ? __might_fault+0xf1/0x1b0 [ 53.301536][ T7340] ? __fget_light+0x179/0x1f0 [ 53.301539][ T7340] ? lock_acquire+0x194/0x410 [ 53.301544][ T7340] ? __fdget+0xe/0x10 [ 53.301550][ T7340] __sys_sendmsg+0xd9/0x180 [ 53.301554][ T7340] ? __ia32_sys_shutdown+0x70/0x70 [ 53.301558][ T7340] ? kasan_check_read+0x11/0x20 [ 53.301562][ T7340] ? _copy_to_user+0x91/0xb0 [ 53.301568][ T7340] ? put_timespec64+0xa9/0x100 [ 53.301572][ T7340] ? nsecs_to_jiffies+0x20/0x20 [ 53.301583][ T7340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.307207][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 53.310676][ T7340] __x64_sys_sendmsg+0x73/0xb0 [ 53.310684][ T7340] do_syscall_64+0xd0/0x540 [ 53.310691][ T7340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.310696][ T7340] RIP: 0033:0x45b159 [ 53.310701][ T7340] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.310704][ T7340] RSP: 002b:00007f289cad0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.310708][ T7340] RAX: ffffffffffffffda RBX: 00007f289cad16d4 RCX: 000000000045b159 [ 53.310710][ T7340] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 53.310712][ T7340] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 53.310714][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 53.310716][ T7340] R13: 00000000000008dc R14: 00000000004ca08f R15: 000000000075bf2c [ 53.310723][ T7340] [ 53.310726][ T7340] Allocated by task 7340: [ 53.310732][ T7340] save_stack+0x21/0x90 [ 53.310735][ T7340] __kasan_kmalloc.constprop.12+0xc7/0xd0 [ 53.310738][ T7340] kasan_kmalloc+0x9/0x10 [ 53.310741][ T7340] __kmalloc+0x15d/0x760 [ 53.310746][ T7340] ip_set_alloc+0x1b/0x30 [ 53.310749][ T7340] bitmap_ip_create+0x540/0xd00 [ 53.310753][ T7340] ip_set_create+0x5aa/0x1150 [ 53.310758][ T7340] nfnetlink_rcv_msg+0x946/0xc10 [ 53.310761][ T7340] netlink_rcv_skb+0x13c/0x380 [ 53.310764][ T7340] nfnetlink_rcv+0x15d/0x3b0 [ 53.310766][ T7340] netlink_unicast+0x43b/0x640 [ 53.310768][ T7340] netlink_sendmsg+0x765/0xc50 [ 53.310771][ T7340] sock_sendmsg+0xb5/0xf0 [ 53.310775][ T7340] ___sys_sendmsg+0x647/0x950 [ 53.310777][ T7340] __sys_sendmsg+0xd9/0x180 [ 53.310781][ T7340] __x64_sys_sendmsg+0x73/0xb0 [ 53.310784][ T7340] do_syscall_64+0xd0/0x540 [ 53.310787][ T7340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.310789][ T7340] [ 53.310790][ T7340] Freed by task 7182: [ 53.310793][ T7340] save_stack+0x21/0x90 [ 53.310796][ T7340] __kasan_slab_free+0x102/0x150 [ 53.310799][ T7340] kasan_slab_free+0xe/0x10 [ 53.310801][ T7340] kfree+0x108/0x2c0 [ 53.310805][ T7340] single_release+0x8b/0xc0 [ 53.310810][ T7340] __fput+0x25a/0x770 [ 53.310813][ T7340] ____fput+0x9/0x10 [ 53.310819][ T7340] task_work_run+0x108/0x180 [ 53.310823][ T7340] exit_to_usermode_loop+0x24e/0x2e0 [ 53.310826][ T7340] do_syscall_64+0x462/0x540 [ 53.310829][ T7340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.310830][ T7340] [ 53.310833][ T7340] The buggy address belongs to the object at ffff8880a5fbe880 [ 53.310833][ T7340] which belongs to the cache kmalloc-32 of size 32 [ 53.310836][ T7340] The buggy address is located 0 bytes inside of [ 53.310836][ T7340] 32-byte region [ffff8880a5fbe880, ffff8880a5fbe8a0) [ 53.310837][ T7340] The buggy address belongs to the page: [ 53.310841][ T7340] page:ffffea000297ef80 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff8880a5fbefc1 [ 53.310846][ T7340] flags: 0xfffe0000000200(slab) [ 53.310851][ T7340] raw: 00fffe0000000200 ffffea000297c888 ffffea000293ff88 ffff8880aa4001c0 [ 53.310856][ T7340] raw: ffff8880a5fbefc1 ffff8880a5fbe000 0000000100000039 0000000000000000 [ 53.310858][ T7340] page dumped because: kasan: bad access detected [ 53.310859][ T7340] [ 53.310860][ T7340] Memory state around the buggy address: [ 53.310866][ T7340] ffff8880a5fbe780: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 53.319891][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.320822][ T7340] ffff8880a5fbe800: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 53.326570][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.330288][ T7340] >ffff8880a5fbe880: 04 fc fc fc fc fc fc fc 00 05 fc fc fc fc fc fc [ 53.330290][ T7340] ^ [ 53.330293][ T7340] ffff8880a5fbe900: 00 00 fc fc fc fc fc fc 00 fc fc fc fc fc fc fc [ 53.330296][ T7340] ffff8880a5fbe980: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 53.330298][ T7340] ================================================================== [ 53.330337][ T7340] Kernel panic - not syncing: panic_on_warn set ... [ 53.330344][ T7340] CPU: 1 PID: 7340 Comm: syz-executor.3 Tainted: G B 5.2.0-syzkaller #0 [ 53.330347][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.330349][ T7340] Call Trace: [ 53.330362][ T7340] dump_stack+0x113/0x167 [ 53.340056][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 53.341795][ T7340] ? bitmap_ip_add+0x30/0x10a0 [ 53.347276][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.352129][ T7340] panic+0x223/0x4dc [ 53.352136][ T7340] ? add_taint.cold.7+0x11/0x11 [ 53.352142][ T7340] ? do_raw_spin_unlock+0x54/0x260 [ 53.352149][ T7340] ? bitmap_ip_add+0xea/0x10a0 [ 53.352155][ T7340] end_report+0x47/0x4f [ 53.352159][ T7340] __kasan_report.cold.9+0xe/0x3f [ 53.352162][ T7340] ? bitmap_ip_add+0xea/0x10a0 [ 53.352166][ T7340] ? bitmap_ip_add+0xea/0x10a0 [ 53.352170][ T7340] kasan_report+0x12/0x20 [ 53.352174][ T7340] check_memory_region+0x13e/0x1b0 [ 53.352178][ T7340] kasan_check_read+0x11/0x20 [ 53.352181][ T7340] bitmap_ip_add+0xea/0x10a0 [ 53.352185][ T7340] ? bitmap_ip_del+0x310/0x310 [ 53.352189][ T7340] bitmap_ip_uadt+0x611/0x940 [ 53.352193][ T7340] ? bitmap_ip_del+0x310/0x310 [ 53.352198][ T7340] ? bitmap_ip_kadt+0x6b0/0x6b0 [ 53.352202][ T7340] ? mark_held_locks+0x130/0x130 [ 53.352206][ T7340] ? lock_acquire+0x194/0x410 [ 53.352212][ T7340] ? do_raw_spin_lock+0x123/0x2d0 [ 53.352216][ T7340] ? rwlock_bug.part.2+0x90/0x90 [ 53.352219][ T7340] ? lock_acquire+0x194/0x410 [ 53.352226][ T7340] call_ad+0x178/0x560 [ 53.352231][ T7340] ? memset+0x31/0x40 [ 53.352234][ T7340] ? ip_set_destroy_set+0xd0/0xd0 [ 53.352238][ T7340] ? kasan_check_read+0x11/0x20 [ 53.352248][ T7340] ? nla_memcpy+0xa0/0xa0 [ 53.352254][ T7340] ip_set_ad.isra.27+0x411/0xb30 [ 53.352260][ T7340] ? ip_set_nfnl_get_byindex+0x320/0x320 [ 53.352263][ T7340] ? kasan_check_write+0x14/0x20 [ 53.352268][ T7340] ? nfnetlink_rcv_msg+0x310/0xc10 [ 53.352272][ T7340] ? rwlock_bug.part.2+0x90/0x90 [ 53.352283][ T7340] ? ip_set_udel+0x20/0x20 [ 53.352286][ T7340] ip_set_uadd+0x11/0x20 [ 53.352290][ T7340] nfnetlink_rcv_msg+0x946/0xc10 [ 53.352296][ T7340] ? __dev_queue_xmit+0x12ab/0x3040 [ 53.352304][ T7340] ? nfnetlink_bind+0x1f0/0x1f0 [ 53.360638][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 53.362016][ T7340] ? netdev_core_pick_tx+0x2a0/0x2a0 [ 53.362026][ T7340] ? __netlink_lookup+0x317/0x5c0 [ 53.367066][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.372089][ T7340] ? lock_downgrade+0x900/0x900 [ 53.372096][ T7340] ? apparmor_cred_prepare+0x5a0/0x5a0 [ 53.372102][ T7340] netlink_rcv_skb+0x13c/0x380 [ 53.372107][ T7340] ? nfnetlink_bind+0x1f0/0x1f0 [ 53.372111][ T7340] ? netlink_ack+0x970/0x970 [ 53.372117][ T7340] ? ns_capable+0xb/0x10 [ 53.372123][ T7340] ? __netlink_ns_capable+0xc3/0xf0 [ 53.372128][ T7340] nfnetlink_rcv+0x15d/0x3b0 [ 53.372132][ T7340] ? nfnetlink_rcv_batch+0x15b0/0x15b0 [ 53.372136][ T7340] ? netlink_deliver_tap+0x182/0xad0 [ 53.372141][ T7340] netlink_unicast+0x43b/0x640 [ 53.372146][ T7340] ? netlink_attachskb+0x6d0/0x6d0 [ 53.372171][ T7340] ? _copy_from_iter_full+0x19e/0x7f0 [ 53.372180][ T7340] ? kasan_check_read+0x11/0x20 [ 53.384274][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.391451][ T7340] ? __check_object_size+0x1ff/0x30d [ 53.391458][ T7340] netlink_sendmsg+0x765/0xc50 [ 53.391464][ T7340] ? netlink_unicast+0x640/0x640 [ 53.391472][ T7340] ? apparmor_socket_sendmsg+0x1b/0x20 [ 53.391475][ T7340] ? netlink_unicast+0x640/0x640 [ 53.391480][ T7340] sock_sendmsg+0xb5/0xf0 [ 53.391484][ T7340] ___sys_sendmsg+0x647/0x950 [ 53.391490][ T7340] ? kasan_check_read+0x11/0x20 [ 53.391494][ T7340] ? copy_msghdr_from_user+0x3e0/0x3e0 [ 53.391498][ T7340] ? lock_downgrade+0x900/0x900 [ 53.391503][ T7340] ? lock_acquire+0x194/0x410 [ 53.391506][ T7340] ? kmem_cache_alloc+0x2f8/0x720 [ 53.391514][ T7340] ? __fget+0x2b1/0x420 [ 53.391519][ T7340] ? ksys_dup3+0x2e0/0x2e0 [ 53.391529][ T7340] ? alloc_empty_file+0xa0/0x110 [ 53.447156][ T7093] device veth0_vlan entered promiscuous mode [ 53.449381][ T7340] ? __might_fault+0xf1/0x1b0 [ 53.449389][ T7340] ? __fget_light+0x179/0x1f0 [ 53.449393][ T7340] ? lock_acquire+0x194/0x410 [ 53.449397][ T7340] ? __fdget+0xe/0x10 [ 53.449404][ T7340] __sys_sendmsg+0xd9/0x180 [ 53.449408][ T7340] ? __ia32_sys_shutdown+0x70/0x70 [ 53.449416][ T7340] ? kasan_check_read+0x11/0x20 [ 53.457183][ T7093] device veth1_vlan entered promiscuous mode [ 53.458733][ T7340] ? _copy_to_user+0x91/0xb0 [ 53.458741][ T7340] ? put_timespec64+0xa9/0x100 [ 53.458745][ T7340] ? nsecs_to_jiffies+0x20/0x20 [ 53.458754][ T7340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.458762][ T7340] __x64_sys_sendmsg+0x73/0xb0 [ 53.458768][ T7340] do_syscall_64+0xd0/0x540 [ 53.458775][ T7340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.458783][ T7340] RIP: 0033:0x45b159 [ 53.474131][ T7093] device veth0_macvtap entered promiscuous mode [ 53.479061][ T7340] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.479064][ T7340] RSP: 002b:00007f289cad0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.479069][ T7340] RAX: ffffffffffffffda RBX: 00007f289cad16d4 RCX: 000000000045b159 [ 53.479071][ T7340] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 53.479073][ T7340] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 53.479075][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 53.479077][ T7340] R13: 00000000000008dc R14: 00000000004ca08f R15: 000000000075bf2c [ 53.480605][ T7340] Kernel Offset: disabled [ 54.667362][ T7340] Rebooting in 86400 seconds..