forked to background, child pid 3182
no interfaces have a carrier
[   21.872852][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0
[   21.884488][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts.
2022/08/08 01:02:36 fuzzer started
2022/08/08 01:02:36 connecting to host at 10.128.0.169:46023
2022/08/08 01:02:36 checking machine...
2022/08/08 01:02:36 checking revisions...
2022/08/08 01:02:36 testing simple program...
syzkaller login: [   37.627029][ T3609] cgroup: Unknown subsys name 'net'
[   37.724143][ T3609] cgroup: Unknown subsys name 'rlimit'
[   38.959156][ T3616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   38.967247][ T3616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   38.975377][ T3616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   38.983654][ T3616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   38.991425][ T3616] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   38.998691][ T3616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   39.071585][ T3613] chnl_net:caif_netlink_parms(): no params data found
[   39.107820][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.115499][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.123506][ T3613] device bridge_slave_0 entered promiscuous mode
[   39.131840][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.138902][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.146700][ T3613] device bridge_slave_1 entered promiscuous mode
[   39.164296][ T3613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.174905][ T3613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.194178][ T3613] team0: Port device team_slave_0 added
[   39.201096][ T3613] team0: Port device team_slave_1 added
[   39.216098][ T3613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.223432][ T3613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.250612][ T3613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.263069][ T3613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.270142][ T3613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.297375][ T3613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.320801][ T3613] device hsr_slave_0 entered promiscuous mode
[   39.327420][ T3613] device hsr_slave_1 entered promiscuous mode
[   39.392452][ T3613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.402622][ T3613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.411563][ T3613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.421032][ T3613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.439069][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.446325][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.454195][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.461436][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.501550][ T3613] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.513310][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.522781][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.530934][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.538554][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   39.550721][ T3613] 8021q: adding VLAN 0 to HW filter on device team0
[   39.560928][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.570808][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.577881][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.601101][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.609606][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.616831][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.625257][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   39.634243][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   39.643101][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.653170][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   39.662868][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.674382][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   39.688770][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   39.696446][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   39.709803][ T3613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.811994][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.825163][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   39.833660][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   39.841912][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   39.851818][ T3613] device veth0_vlan entered promiscuous mode
[   39.862260][ T3613] device veth1_vlan entered promiscuous mode
[   39.877987][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   39.886094][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   39.894312][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.905077][ T3613] device veth0_macvtap entered promiscuous mode
[   39.914015][ T3613] device veth1_macvtap entered promiscuous mode
[   39.928138][ T3613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.937238][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.946237][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   39.956960][ T3613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.964743][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.975494][ T3613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.984625][ T3613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.993766][ T3613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.002828][ T3613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.052321][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.067162][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.078871][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   40.088076][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.096917][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.106787][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2022/08/08 01:02:39 building call list...
[   40.261326][ T3613] ------------[ cut here ]------------
[   40.266951][ T3613] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0
[   40.277101][ T3613] WARNING: CPU: 1 PID: 3613 at lib/debugobjects.c:502 debug_print_object+0x16e/0x250
[   40.286592][ T3613] Modules linked in:
[   40.290493][ T3613] CPU: 1 PID: 3613 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-12716-g4e23eeebb2e5 #0
[   40.300582][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[   40.310653][ T3613] RIP: 0010:debug_print_object+0x16e/0x250
[   40.316485][ T3613] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 20 e8 48 8a 4c 89 ee 48 c7 c7 c0 db 48 8a e8 e3 21 38 05 <0f> 0b 83 05 e5 b5 dd 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3
[   40.336123][ T3613] RSP: 0018:ffffc90003ebf6e0 EFLAGS: 00010086
[   40.342201][ T3613] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000
[   40.350176][ T3613] RDX: ffff888077b79d80 RSI: ffffffff8161ec38 RDI: fffff520007d7ece
[   40.358154][ T3613] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[   40.366140][ T3613] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff89eeff00
[   40.374124][ T3613] R13: ffffffff8a48e280 R14: ffffffff816b1c00 R15: 1ffff920007d7ee7
[   40.382091][ T3613] FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[   40.391103][ T3613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   40.397677][ T3613] CR2: 000000c000746000 CR3: 000000007420c000 CR4: 0000000000350ee0
[   40.405821][ T3613] Call Trace:
[   40.409267][ T3613]  <TASK>
[   40.412190][ T3613]  ? do_raw_spin_unlock+0x171/0x230
[   40.417387][ T3613]  debug_object_assert_init+0x1f4/0x2e0
[   40.422932][ T3613]  ? debug_object_init_on_stack+0x20/0x20
[   40.428677][ T3613]  ? mark_held_locks+0x9f/0xe0
[   40.433439][ T3613]  ? kasan_quarantine_put+0xf5/0x210
[   40.438896][ T3613]  ? kasan_quarantine_put+0xf5/0x210
[   40.444183][ T3613]  del_timer+0x6d/0x110
[   40.448336][ T3613]  ? detach_if_pending+0x480/0x480
[   40.453439][ T3613]  ? try_to_grab_pending+0xbd/0xd0
[   40.458549][ T3613]  ? lockdep_hardirqs_off+0x90/0xd0
[   40.463744][ T3613]  try_to_grab_pending+0x6d/0xd0
[   40.468680][ T3613]  __cancel_work_timer+0xa6/0x570
[   40.473701][ T3613]  ? cancel_delayed_work+0x20/0x20
[   40.478814][ T3613]  ? mgmt_send_event_skb+0x2fe/0x470
[   40.484100][ T3613]  ? mgmt_send_event+0x13c/0x180
[   40.489066][ T3613]  mgmt_index_removed+0x187/0x2e0
[   40.494088][ T3613]  ? mgmt_index_added+0x290/0x290
[   40.499115][ T3613]  hci_unregister_dev+0x34f/0x4e0
[   40.504144][ T3613]  vhci_release+0x7c/0xf0
[   40.508476][ T3613]  __fput+0x277/0x9d0
[   40.512461][ T3613]  ? vhci_close_dev+0x50/0x50
[   40.517138][ T3613]  task_work_run+0xdd/0x1a0
[   40.521638][ T3613]  do_exit+0xad5/0x29b0
[   40.525792][ T3613]  ? find_held_lock+0x2d/0x110
[   40.530552][ T3613]  ? mm_update_next_owner+0x7a0/0x7a0
[   40.535916][ T3613]  ? lock_downgrade+0x6e0/0x6e0
[   40.540785][ T3613]  do_group_exit+0xd2/0x2f0
[   40.545283][ T3613]  get_signal+0x238c/0x2610
[   40.549775][ T3613]  ? debug_object_active_state+0x260/0x350
[   40.555576][ T3613]  ? exit_signals+0x8b0/0x8b0
[   40.560242][ T3613]  ? _raw_spin_unlock_irqrestore+0x50/0x70
[   40.566044][ T3613]  ? lockdep_hardirqs_on+0x79/0x100
[   40.571234][ T3613]  arch_do_signal_or_restart+0x82/0x2300
[   40.576863][ T3613]  ? debug_object_destroy+0x210/0x210
[   40.582233][ T3613]  ? security_file_free+0xa4/0xd0
[   40.587259][ T3613]  ? get_sigframe_size+0x10/0x10
[   40.592193][ T3613]  ? blkcg_maybe_throttle_current+0x566/0xc00
[   40.598261][ T3613]  ? __blkcg_punt_bio_submit+0x1d0/0x1d0
[   40.603891][ T3613]  ? unlock_page_memcg+0x2c0/0x2c0
[   40.608999][ T3613]  ? exit_to_user_mode_prepare+0x137/0x250
[   40.614810][ T3613]  exit_to_user_mode_prepare+0x15f/0x250
[   40.620445][ T3613]  syscall_exit_to_user_mode+0x19/0x50
[   40.625935][ T3613]  do_syscall_64+0x42/0xb0
[   40.630348][ T3613]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   40.636236][ T3613] RIP: 0033:0x7fa0e9c3bebb
[   40.640641][ T3613] Code: Unable to access opcode bytes at RIP 0x7fa0e9c3be91.
[   40.647991][ T3613] RSP: 002b:00007fff3a7227a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[   40.656405][ T3613] RAX: 0000000000000000 RBX: 00007fff3a722840 RCX: 00007fa0e9c3bebb
[   40.664368][ T3613] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
[   40.672335][ T3613] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fff3a722650
[   40.680299][ T3613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[   40.688264][ T3613] R13: 0000000000009cca R14: 0000000000000003 R15: 00007fff3a722880
[   40.696241][ T3613]  </TASK>
[   40.699258][ T3613] Kernel panic - not syncing: panic_on_warn set ...
[   40.705831][ T3613] CPU: 1 PID: 3613 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-12716-g4e23eeebb2e5 #0
[   40.715887][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[   40.726030][ T3613] Call Trace:
[   40.729304][ T3613]  <TASK>
[   40.732225][ T3613]  dump_stack_lvl+0xcd/0x134
[   40.736815][ T3613]  panic+0x2c8/0x627
[   40.740701][ T3613]  ? panic_print_sys_info.part.0+0x10b/0x10b
[   40.746688][ T3613]  ? __warn.cold+0x248/0x2c4
[   40.751531][ T3613]  ? debug_print_object+0x16e/0x250
[   40.756812][ T3613]  __warn.cold+0x259/0x2c4
[   40.761311][ T3613]  ? __wake_up_klogd.part.0+0x99/0xf0
[   40.766687][ T3613]  ? debug_print_object+0x16e/0x250
[   40.771885][ T3613]  report_bug+0x1bc/0x210
[   40.776216][ T3613]  handle_bug+0x3c/0x60
[   40.780384][ T3613]  exc_invalid_op+0x14/0x40
[   40.784885][ T3613]  asm_exc_invalid_op+0x16/0x20
[   40.789821][ T3613] RIP: 0010:debug_print_object+0x16e/0x250
[   40.795708][ T3613] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 20 e8 48 8a 4c 89 ee 48 c7 c7 c0 db 48 8a e8 e3 21 38 05 <0f> 0b 83 05 e5 b5 dd 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3
[   40.815311][ T3613] RSP: 0018:ffffc90003ebf6e0 EFLAGS: 00010086
[   40.821460][ T3613] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000
[   40.829520][ T3613] RDX: ffff888077b79d80 RSI: ffffffff8161ec38 RDI: fffff520007d7ece
[   40.837513][ T3613] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[   40.845667][ T3613] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff89eeff00
[   40.853923][ T3613] R13: ffffffff8a48e280 R14: ffffffff816b1c00 R15: 1ffff920007d7ee7
[   40.861895][ T3613]  ? calc_wheel_index+0x3d0/0x3d0
[   40.867099][ T3613]  ? vprintk+0x88/0x90
[   40.871170][ T3613]  ? do_raw_spin_unlock+0x171/0x230
[   40.876367][ T3613]  debug_object_assert_init+0x1f4/0x2e0
[   40.881910][ T3613]  ? debug_object_init_on_stack+0x20/0x20
[   40.887648][ T3613]  ? mark_held_locks+0x9f/0xe0
[   40.892705][ T3613]  ? kasan_quarantine_put+0xf5/0x210
[   40.897994][ T3613]  ? kasan_quarantine_put+0xf5/0x210
[   40.903284][ T3613]  del_timer+0x6d/0x110
[   40.907437][ T3613]  ? detach_if_pending+0x480/0x480
[   40.912543][ T3613]  ? try_to_grab_pending+0xbd/0xd0
[   40.917655][ T3613]  ? lockdep_hardirqs_off+0x90/0xd0
[   40.922853][ T3613]  try_to_grab_pending+0x6d/0xd0
[   40.927792][ T3613]  __cancel_work_timer+0xa6/0x570
[   40.932814][ T3613]  ? cancel_delayed_work+0x20/0x20
[   40.937926][ T3613]  ? mgmt_send_event_skb+0x2fe/0x470
[   40.943213][ T3613]  ? mgmt_send_event+0x13c/0x180
[   40.948149][ T3613]  mgmt_index_removed+0x187/0x2e0
[   40.953168][ T3613]  ? mgmt_index_added+0x290/0x290
[   40.958190][ T3613]  hci_unregister_dev+0x34f/0x4e0
[   40.963210][ T3613]  vhci_release+0x7c/0xf0
[   40.967540][ T3613]  __fput+0x277/0x9d0
[   40.971517][ T3613]  ? vhci_close_dev+0x50/0x50
[   40.976193][ T3613]  task_work_run+0xdd/0x1a0
[   40.980699][ T3613]  do_exit+0xad5/0x29b0
[   40.984848][ T3613]  ? find_held_lock+0x2d/0x110
[   40.989611][ T3613]  ? mm_update_next_owner+0x7a0/0x7a0
[   40.995061][ T3613]  ? lock_downgrade+0x6e0/0x6e0
[   40.999910][ T3613]  do_group_exit+0xd2/0x2f0
[   41.004408][ T3613]  get_signal+0x238c/0x2610
[   41.008905][ T3613]  ? debug_object_active_state+0x260/0x350
[   41.014713][ T3613]  ? exit_signals+0x8b0/0x8b0
[   41.019384][ T3613]  ? _raw_spin_unlock_irqrestore+0x50/0x70
[   41.025189][ T3613]  ? lockdep_hardirqs_on+0x79/0x100
[   41.030380][ T3613]  arch_do_signal_or_restart+0x82/0x2300
[   41.036014][ T3613]  ? debug_object_destroy+0x210/0x210
[   41.041472][ T3613]  ? security_file_free+0xa4/0xd0
[   41.046497][ T3613]  ? get_sigframe_size+0x10/0x10
[   41.051432][ T3613]  ? blkcg_maybe_throttle_current+0x566/0xc00
[   41.057502][ T3613]  ? __blkcg_punt_bio_submit+0x1d0/0x1d0
[   41.063138][ T3613]  ? unlock_page_memcg+0x2c0/0x2c0
[   41.068246][ T3613]  ? exit_to_user_mode_prepare+0x137/0x250
[   41.074061][ T3613]  exit_to_user_mode_prepare+0x15f/0x250
[   41.079696][ T3613]  syscall_exit_to_user_mode+0x19/0x50
[   41.085151][ T3613]  do_syscall_64+0x42/0xb0
[   41.089568][ T3613]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   41.095458][ T3613] RIP: 0033:0x7fa0e9c3bebb
[   41.099864][ T3613] Code: Unable to access opcode bytes at RIP 0x7fa0e9c3be91.
[   41.107249][ T3613] RSP: 002b:00007fff3a7227a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[   41.115663][ T3613] RAX: 0000000000000000 RBX: 00007fff3a722840 RCX: 00007fa0e9c3bebb
[   41.123715][ T3613] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
[   41.131703][ T3613] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fff3a722650
[   41.139683][ T3613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[   41.147647][ T3613] R13: 0000000000009cca R14: 0000000000000003 R15: 00007fff3a722880
[   41.155817][ T3613]  </TASK>
[   41.159465][ T3613] Kernel Offset: disabled
[   41.163882][ T3613] Rebooting in 86400 seconds..