no interfaces have a carrier [ 23.050278][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.060136][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 41.547056][ T3602] can: request_module (can-proto-0) failed. [ 41.567784][ T3602] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. 2022/09/14 00:08:14 parsed 1 programs 2022/09/14 00:08:15 executed programs: 0 [ 62.344568][ T3674] chnl_net:caif_netlink_parms(): no params data found [ 62.393502][ T3676] chnl_net:caif_netlink_parms(): no params data found [ 62.466913][ T3680] chnl_net:caif_netlink_parms(): no params data found [ 62.475641][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.483274][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.490849][ T3674] device bridge_slave_0 entered promiscuous mode [ 62.500927][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.508519][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.516401][ T3674] device bridge_slave_1 entered promiscuous mode [ 62.524138][ T3684] chnl_net:caif_netlink_parms(): no params data found [ 62.549837][ T3683] chnl_net:caif_netlink_parms(): no params data found [ 62.593059][ T3679] chnl_net:caif_netlink_parms(): no params data found [ 62.628588][ T3674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.644620][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.651851][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.659489][ T3676] device bridge_slave_0 entered promiscuous mode [ 62.683365][ T3674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.706318][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.713831][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.721597][ T3676] device bridge_slave_1 entered promiscuous mode [ 62.728470][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.735747][ T3680] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.743463][ T3680] device bridge_slave_0 entered promiscuous mode [ 62.777855][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.786212][ T3680] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.794150][ T3680] device bridge_slave_1 entered promiscuous mode [ 62.816114][ T3674] team0: Port device team_slave_0 added [ 62.822363][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.829663][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.838106][ T3684] device bridge_slave_0 entered promiscuous mode [ 62.857978][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.865416][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.873714][ T3683] device bridge_slave_0 entered promiscuous mode [ 62.887417][ T3674] team0: Port device team_slave_1 added [ 62.893446][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.900689][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.909440][ T3684] device bridge_slave_1 entered promiscuous mode [ 62.917796][ T3676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.935367][ T3680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.945120][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.952341][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.960170][ T3683] device bridge_slave_1 entered promiscuous mode [ 62.967708][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.975031][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.983602][ T3679] device bridge_slave_0 entered promiscuous mode [ 62.991487][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.998717][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.007438][ T3679] device bridge_slave_1 entered promiscuous mode [ 63.020122][ T3676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.030781][ T3680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.079139][ T3680] team0: Port device team_slave_0 added [ 63.104585][ T3684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.121415][ T3680] team0: Port device team_slave_1 added [ 63.128920][ T3683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.145060][ T3679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.155901][ T3684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.167079][ T3676] team0: Port device team_slave_0 added [ 63.181019][ T3683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.193474][ T3674] device hsr_slave_0 entered promiscuous mode [ 63.200033][ T3674] device hsr_slave_1 entered promiscuous mode [ 63.208103][ T3679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.223048][ T3676] team0: Port device team_slave_1 added [ 63.260828][ T3684] team0: Port device team_slave_0 added [ 63.276620][ T3680] device hsr_slave_0 entered promiscuous mode [ 63.283359][ T3680] device hsr_slave_1 entered promiscuous mode [ 63.289751][ T3680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.297875][ T3680] Cannot create hsr debugfs directory [ 63.305860][ T3683] team0: Port device team_slave_0 added [ 63.319232][ T3684] team0: Port device team_slave_1 added [ 63.327267][ T3679] team0: Port device team_slave_0 added [ 63.334841][ T3679] team0: Port device team_slave_1 added [ 63.342740][ T3683] team0: Port device team_slave_1 added [ 63.384167][ T3676] device hsr_slave_0 entered promiscuous mode [ 63.390962][ T3676] device hsr_slave_1 entered promiscuous mode [ 63.399309][ T3676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.407008][ T3676] Cannot create hsr debugfs directory [ 63.431440][ T3684] device hsr_slave_0 entered promiscuous mode [ 63.438513][ T3684] device hsr_slave_1 entered promiscuous mode [ 63.445520][ T3684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.453192][ T3684] Cannot create hsr debugfs directory [ 63.479934][ T3679] device hsr_slave_0 entered promiscuous mode [ 63.486982][ T3679] device hsr_slave_1 entered promiscuous mode [ 63.493606][ T3679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.501154][ T3679] Cannot create hsr debugfs directory [ 63.553288][ T3683] device hsr_slave_0 entered promiscuous mode [ 63.559919][ T3683] device hsr_slave_1 entered promiscuous mode [ 63.567613][ T3683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.575567][ T3683] Cannot create hsr debugfs directory [ 63.687325][ T3680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.703387][ T3676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.733255][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.745850][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.755335][ T3676] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.768612][ T3680] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.787356][ T3674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.795974][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.804365][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.833982][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.845975][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.855347][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.862541][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.870717][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.879977][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.888769][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.895886][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.903517][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.912243][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.921353][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.930227][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.937632][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.945801][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.954897][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.962912][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.980458][ T3683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.996091][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.004937][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.014110][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.021177][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.029571][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.038191][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.048060][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.055886][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.071185][ T3679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.083051][ T3684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.104508][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.113681][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.122935][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.132638][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.141133][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.149749][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.158447][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.167112][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.174705][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.189893][ T3683] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.204568][ T3674] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.216462][ T3679] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.231350][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.239687][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.248065][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.256070][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.263820][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.272283][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.280450][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.288682][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.296372][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.304110][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.312562][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.320815][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.327914][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.335460][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.344064][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.352578][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.359654][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.369552][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.380888][ T3684] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.389567][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.402911][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.411133][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.419176][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.427964][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.436659][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.445295][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.453800][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.460926][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.469328][ T3326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.507868][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.520426][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.529151][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.536347][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.544166][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.553825][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.565633][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.572975][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.580621][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.589854][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.598768][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.607228][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.615875][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.624219][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.632762][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.640904][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.649583][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.657953][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.665077][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.672880][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.681438][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.691070][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.698284][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.706233][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.716057][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.725056][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.733708][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.742271][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.749351][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.757344][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.766177][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.774858][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.798510][ T3683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.809089][ T3683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.831058][ T3684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.843495][ T3684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.859674][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.867874][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.876276][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.884619][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.892918][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.901296][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.909884][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.918416][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.927042][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.935414][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.944083][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.952777][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.961306][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.969710][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.977947][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.986125][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.994335][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.003200][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.011703][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.020298][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.028823][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.037199][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.045817][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.054086][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.062994][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.071431][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.080872][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.089411][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.098248][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.107132][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.138005][ T3676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.149591][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.159585][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.173210][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.180975][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.189099][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.198110][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.212739][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.225521][ T3683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.243054][ T3684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.256011][ T3680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.276044][ T3679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.289951][ T3674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.613393][ C0] hrtimer: interrupt took 32360 ns 2022/09/14 00:08:22 executed programs: 7 [ 70.649300][ T26] cfg80211: failed to load regulatory.db 2022/09/14 00:08:27 executed programs: 16 2022/09/14 00:08:33 executed programs: 25 2022/09/14 00:08:38 executed programs: 35 2022/09/14 00:08:43 executed programs: 48 2022/09/14 00:08:48 executed programs: 59 2022/09/14 00:08:53 executed programs: 67 2022/09/14 00:09:00 executed programs: 77 2022/09/14 00:09:07 executed programs: 88 2022/09/14 00:09:12 executed programs: 97 2022/09/14 00:09:18 executed programs: 106 2022/09/14 00:09:23 executed programs: 115 2022/09/14 00:09:28 executed programs: 122 2022/09/14 00:09:33 executed programs: 134 2022/09/14 00:09:38 executed programs: 145 2022/09/14 00:09:43 executed programs: 152 2022/09/14 00:09:49 executed programs: 163 2022/09/14 00:09:54 executed programs: 174 2022/09/14 00:10:00 executed programs: 186 [ 168.093736][ T4860] ================================================================== [ 168.101937][ T4860] BUG: KASAN: use-after-free in nr_release+0x62/0x450 [ 168.108714][ T4860] Write of size 4 at addr ffff8880632b4080 by task syz-executor.1/4860 [ 168.117138][ T4860] [ 168.119470][ T4860] CPU: 0 PID: 4860 Comm: syz-executor.1 Not tainted 6.0.0-rc5-syzkaller-00738-gd1221cea11fc #0 [ 168.129806][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 168.139869][ T4860] Call Trace: [ 168.143157][ T4860] [ 168.146091][ T4860] dump_stack_lvl+0xcd/0x134 [ 168.150702][ T4860] print_report.cold+0x2ba/0x719 [ 168.155657][ T4860] ? nr_release+0x62/0x450 [ 168.160092][ T4860] kasan_report+0xb1/0x1e0 [ 168.164526][ T4860] ? nr_release+0x62/0x450 [ 168.168952][ T4860] kasan_check_range+0x13d/0x180 [ 168.173906][ T4860] nr_release+0x62/0x450 [ 168.178160][ T4860] __sock_release+0xcd/0x280 [ 168.182847][ T4860] sock_close+0x18/0x20 [ 168.187009][ T4860] __fput+0x277/0x9d0 [ 168.191012][ T4860] ? __sock_release+0x280/0x280 [ 168.195871][ T4860] task_work_run+0xdd/0x1a0 [ 168.200383][ T4860] exit_to_user_mode_prepare+0x23c/0x250 [ 168.206029][ T4860] syscall_exit_to_user_mode+0x19/0x50 [ 168.211504][ T4860] do_syscall_64+0x42/0xb0 [ 168.216013][ T4860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 168.221913][ T4860] RIP: 0033:0x4146db [ 168.225812][ T4860] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 168.245520][ T4860] RSP: 002b:00007ffcc42613c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 168.254032][ T4860] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004146db [ 168.262007][ T4860] RDX: 0000000000000a0a RSI: 0000000000000000 RDI: 0000000000000005 [ 168.269983][ T4860] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31a20134 [ 168.277957][ T4860] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000052c980 [ 168.285931][ T4860] R13: 000000000052c980 R14: 000000000052bf00 R15: 000000000052c104 [ 168.293915][ T4860] [ 168.296942][ T4860] [ 168.299265][ T4860] Allocated by task 4861: [ 168.303788][ T4860] kasan_save_stack+0x1e/0x40 [ 168.308742][ T4860] __kasan_kmalloc+0xa9/0xd0 [ 168.313342][ T4860] sk_prot_alloc+0x143/0x290 [ 168.317941][ T4860] sk_alloc+0x36/0x770 [ 168.322014][ T4860] nr_create+0xb2/0x5f0 [ 168.326177][ T4860] __sock_create+0x355/0x790 [ 168.330785][ T4860] __sys_socket+0x12f/0x240 [ 168.335299][ T4860] __x64_sys_socket+0x6f/0xb0 [ 168.340009][ T4860] do_syscall_64+0x35/0xb0 [ 168.344441][ T4860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 168.350342][ T4860] [ 168.352671][ T4860] Freed by task 4860: [ 168.356647][ T4860] kasan_save_stack+0x1e/0x40 [ 168.361418][ T4860] kasan_set_track+0x21/0x30 [ 168.366176][ T4860] kasan_set_free_info+0x20/0x30 [ 168.371372][ T4860] ____kasan_slab_free+0x166/0x1c0 [ 168.376501][ T4860] slab_free_freelist_hook+0x8b/0x1c0 [ 168.381859][ T4860] kfree+0xe2/0x580 [ 168.385654][ T4860] __sk_destruct+0x5e0/0x710 [ 168.390242][ T4860] __sk_free+0x175/0x460 [ 168.394478][ T4860] sk_free+0x78/0xa0 [ 168.398355][ T4860] nr_release+0x39a/0x450 [ 168.402673][ T4860] __sock_release+0xcd/0x280 [ 168.407252][ T4860] sock_close+0x18/0x20 [ 168.411393][ T4860] __fput+0x277/0x9d0 [ 168.415366][ T4860] task_work_run+0xdd/0x1a0 [ 168.419870][ T4860] exit_to_user_mode_prepare+0x23c/0x250 [ 168.425499][ T4860] syscall_exit_to_user_mode+0x19/0x50 [ 168.430959][ T4860] do_syscall_64+0x42/0xb0 [ 168.435370][ T4860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 168.441267][ T4860] [ 168.443577][ T4860] The buggy address belongs to the object at ffff8880632b4000 [ 168.443577][ T4860] which belongs to the cache kmalloc-2k of size 2048 [ 168.457621][ T4860] The buggy address is located 128 bytes inside of [ 168.457621][ T4860] 2048-byte region [ffff8880632b4000, ffff8880632b4800) [ 168.470989][ T4860] [ 168.473316][ T4860] The buggy address belongs to the physical page: [ 168.479709][ T4860] page:ffffea00018cac00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x632b0 [ 168.489848][ T4860] head:ffffea00018cac00 order:3 compound_mapcount:0 compound_pincount:0 [ 168.498425][ T4860] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 168.506403][ T4860] raw: 00fff00000010200 ffffea0001dc5200 dead000000000002 ffff888011842000 [ 168.514982][ T4860] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 168.523642][ T4860] page dumped because: kasan: bad access detected [ 168.530042][ T4860] page_owner tracks the page as allocated [ 168.535826][ T4860] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3821, tgid 3803 (syz-executor.0), ts 72061280050, free_ts 9815630310 [ 168.558657][ T4860] get_page_from_freelist+0x109b/0x2ce0 [ 168.564207][ T4860] __alloc_pages+0x1c7/0x510 [ 168.568821][ T4860] alloc_pages+0x1a6/0x270 [ 168.573234][ T4860] allocate_slab+0x27e/0x3d0 [ 168.577850][ T4860] ___slab_alloc+0x7f1/0xe10 [ 168.582435][ T4860] __slab_alloc.constprop.0+0x4d/0xa0 [ 168.587801][ T4860] __kmalloc+0x32b/0x340 [ 168.592034][ T4860] sk_prot_alloc+0x143/0x290 [ 168.596614][ T4860] sk_alloc+0x36/0x770 [ 168.600670][ T4860] __netlink_create+0x63/0x380 [ 168.605425][ T4860] __netlink_kernel_create+0x110/0x850 [ 168.610873][ T4860] rdma_nl_net_init+0xb0/0x180 [ 168.615626][ T4860] rdma_dev_init_net+0x184/0x4b0 [ 168.620554][ T4860] ops_init+0xaf/0x470 [ 168.624614][ T4860] setup_net+0x5d1/0xc50 [ 168.628851][ T4860] copy_net_ns+0x318/0x760 [ 168.633262][ T4860] page last free stack trace: [ 168.637916][ T4860] free_pcp_prepare+0x5e4/0xd20 [ 168.642769][ T4860] free_unref_page+0x19/0x4d0 [ 168.647460][ T4860] free_contig_range+0xb1/0x180 [ 168.652303][ T4860] destroy_args+0xa8/0x646 [ 168.656706][ T4860] debug_vm_pgtable+0x2945/0x29d6 [ 168.661723][ T4860] do_one_initcall+0xfe/0x650 [ 168.666490][ T4860] kernel_init_freeable+0x6b1/0x73a [ 168.671710][ T4860] kernel_init+0x1a/0x1d0 [ 168.676061][ T4860] ret_from_fork+0x1f/0x30 [ 168.680556][ T4860] [ 168.682867][ T4860] Memory state around the buggy address: [ 168.688483][ T4860] ffff8880632b3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 168.696532][ T4860] ffff8880632b4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.704580][ T4860] >ffff8880632b4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.712624][ T4860] ^ [ 168.716674][ T4860] ffff8880632b4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.724720][ T4860] ffff8880632b4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.732770][ T4860] ================================================================== [ 168.749691][ T4860] Kernel panic - not syncing: panic_on_warn set ... [ 168.756334][ T4860] CPU: 0 PID: 4860 Comm: syz-executor.1 Not tainted 6.0.0-rc5-syzkaller-00738-gd1221cea11fc #0 [ 168.766672][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 168.776721][ T4860] Call Trace: [ 168.779994][ T4860] [ 168.783004][ T4860] dump_stack_lvl+0xcd/0x134 [ 168.787595][ T4860] panic+0x2c8/0x627 [ 168.791500][ T4860] ? panic_print_sys_info.part.0+0x10b/0x10b [ 168.797481][ T4860] ? preempt_schedule_common+0x59/0xc0 [ 168.802936][ T4860] ? preempt_schedule_thunk+0x16/0x18 [ 168.808480][ T4860] ? nr_release+0x62/0x450 [ 168.812890][ T4860] end_report.part.0+0x3f/0x7c [ 168.817651][ T4860] kasan_report.cold+0xa/0xf [ 168.822234][ T4860] ? nr_release+0x62/0x450 [ 168.826641][ T4860] kasan_check_range+0x13d/0x180 [ 168.831590][ T4860] nr_release+0x62/0x450 [ 168.835825][ T4860] __sock_release+0xcd/0x280 [ 168.840407][ T4860] sock_close+0x18/0x20 [ 168.844574][ T4860] __fput+0x277/0x9d0 [ 168.848550][ T4860] ? __sock_release+0x280/0x280 [ 168.853482][ T4860] task_work_run+0xdd/0x1a0 [ 168.857977][ T4860] exit_to_user_mode_prepare+0x23c/0x250 [ 168.863608][ T4860] syscall_exit_to_user_mode+0x19/0x50 [ 168.869068][ T4860] do_syscall_64+0x42/0xb0 [ 168.873482][ T4860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 168.879388][ T4860] RIP: 0033:0x4146db [ 168.883275][ T4860] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 168.902876][ T4860] RSP: 002b:00007ffcc42613c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 168.911288][ T4860] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004146db [ 168.919338][ T4860] RDX: 0000000000000a0a RSI: 0000000000000000 RDI: 0000000000000005 [ 168.927310][ T4860] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31a20134 [ 168.935294][ T4860] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000052c980 [ 168.943255][ T4860] R13: 000000000052c980 R14: 000000000052bf00 R15: 000000000052c104 [ 168.951222][ T4860] [ 168.954895][ T4860] Kernel Offset: disabled [ 168.959216][ T4860] Rebooting in 86400 seconds..