forked to background, child pid 4646 [ 36.660834][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.681932][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 56.630760][ T5065] can: request_module (can-proto-0) failed. [ 56.668717][ T5065] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.143' (ECDSA) to the list of known hosts. 2022/12/17 16:34:27 parsed 1 programs 2022/12/17 16:34:28 executed programs: 0 [ 77.824332][ T5140] chnl_net:caif_netlink_parms(): no params data found [ 77.865907][ T5146] chnl_net:caif_netlink_parms(): no params data found [ 78.019825][ T5143] chnl_net:caif_netlink_parms(): no params data found [ 78.031044][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.039016][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.047577][ T5140] device bridge_slave_0 entered promiscuous mode [ 78.059325][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.067159][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.077078][ T5140] device bridge_slave_1 entered promiscuous mode [ 78.085162][ T5150] chnl_net:caif_netlink_parms(): no params data found [ 78.096788][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.104259][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.113012][ T5146] device bridge_slave_0 entered promiscuous mode [ 78.134110][ T5149] chnl_net:caif_netlink_parms(): no params data found [ 78.156083][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.163924][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.172950][ T5146] device bridge_slave_1 entered promiscuous mode [ 78.227135][ T5148] chnl_net:caif_netlink_parms(): no params data found [ 78.252591][ T5146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.273203][ T5140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.310507][ T5146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.331941][ T5140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.384835][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.393025][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.402052][ T5143] device bridge_slave_0 entered promiscuous mode [ 78.433869][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.442112][ T5150] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.450855][ T5150] device bridge_slave_0 entered promiscuous mode [ 78.476375][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.484257][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.492936][ T5143] device bridge_slave_1 entered promiscuous mode [ 78.508712][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.516147][ T5149] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.525245][ T5149] device bridge_slave_0 entered promiscuous mode [ 78.536564][ T5146] team0: Port device team_slave_0 added [ 78.544662][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.552697][ T5150] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.563117][ T5150] device bridge_slave_1 entered promiscuous mode [ 78.574751][ T5140] team0: Port device team_slave_0 added [ 78.606928][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.615295][ T5149] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.630851][ T5149] device bridge_slave_1 entered promiscuous mode [ 78.647006][ T5146] team0: Port device team_slave_1 added [ 78.672919][ T5140] team0: Port device team_slave_1 added [ 78.693333][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.701875][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.710880][ T5148] device bridge_slave_0 entered promiscuous mode [ 78.748563][ T5150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.760464][ T5143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.770621][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.780351][ T5148] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.788800][ T5148] device bridge_slave_1 entered promiscuous mode [ 78.808931][ T5149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.829940][ T5150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.858286][ T5143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.891259][ T5149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.911096][ T5150] team0: Port device team_slave_0 added [ 78.938471][ T5148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.963159][ T5140] device hsr_slave_0 entered promiscuous mode [ 78.976658][ T5140] device hsr_slave_1 entered promiscuous mode [ 78.985926][ T5150] team0: Port device team_slave_1 added [ 79.004532][ T5146] device hsr_slave_0 entered promiscuous mode [ 79.011748][ T5146] device hsr_slave_1 entered promiscuous mode [ 79.020056][ T5146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.028602][ T5146] Cannot create hsr debugfs directory [ 79.042644][ T5148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.073273][ T5148] team0: Port device team_slave_0 added [ 79.082579][ T5143] team0: Port device team_slave_0 added [ 79.092703][ T5143] team0: Port device team_slave_1 added [ 79.102367][ T5149] team0: Port device team_slave_0 added [ 79.113011][ T5149] team0: Port device team_slave_1 added [ 79.140139][ T5148] team0: Port device team_slave_1 added [ 79.160185][ T5150] device hsr_slave_0 entered promiscuous mode [ 79.167799][ T5150] device hsr_slave_1 entered promiscuous mode [ 79.175024][ T5150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.183177][ T5150] Cannot create hsr debugfs directory [ 79.237122][ T5149] device hsr_slave_0 entered promiscuous mode [ 79.247158][ T5149] device hsr_slave_1 entered promiscuous mode [ 79.255685][ T5149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.266920][ T5149] Cannot create hsr debugfs directory [ 79.280885][ T5143] device hsr_slave_0 entered promiscuous mode [ 79.289029][ T5143] device hsr_slave_1 entered promiscuous mode [ 79.296110][ T5143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.303756][ T5143] Cannot create hsr debugfs directory [ 79.357592][ T5148] device hsr_slave_0 entered promiscuous mode [ 79.365116][ T5148] device hsr_slave_1 entered promiscuous mode [ 79.372339][ T5148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.385049][ T5148] Cannot create hsr debugfs directory [ 79.592477][ T5143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.610510][ T5140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.630217][ T5150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.679455][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.690332][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.700178][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.708959][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.722176][ T5143] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.732088][ T5140] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.757248][ T5146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.790695][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.801049][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.811908][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.819646][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.828306][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.836183][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.844005][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.852833][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.861442][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.868646][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.877131][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.885917][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.897249][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.906153][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.915013][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.922184][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.945662][ T5150] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.954923][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.965132][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.974231][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.981737][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.992990][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.001955][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.011531][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.021542][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.033489][ T5149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.046544][ T5146] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.083096][ T5148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.093773][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.103696][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.113383][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.124423][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.134021][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.143573][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.153810][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.161611][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.170225][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.179332][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.188355][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.196176][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.204240][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.214037][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.223270][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.233250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.241863][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.276427][ T5149] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.285156][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.294018][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.303433][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.313297][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.323203][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.331112][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.340280][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.351015][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.360964][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.371275][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.381164][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.389683][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.398793][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.408784][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.419887][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.433797][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.445192][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.455911][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.465237][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.486710][ T5143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.500963][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.529858][ T5148] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.551704][ T5140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.563252][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.572337][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.581990][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.591720][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.600470][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.609308][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.618899][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.628858][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.638204][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.646601][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.657441][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.666627][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.674065][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.681956][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.690839][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.699505][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.706767][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.714959][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.724182][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.733068][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.740320][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.748827][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.758443][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.769810][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.778225][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.786305][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.805964][ T5150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.817931][ T5150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.844845][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.855786][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.865051][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.874543][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.883538][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.892739][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.902508][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.910265][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.918512][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.927760][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.940037][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.948714][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.974875][ T5143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.998781][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.008574][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.018612][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.034727][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.049499][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.070360][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.080807][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.116895][ T5150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.136131][ T5146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.155392][ T5146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.196223][ T5148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.217862][ T5148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.239395][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.268418][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.288135][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.297202][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.314227][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.324930][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.334741][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.343855][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.353515][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.362027][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.374889][ T5149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.386417][ T5149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.404602][ T5140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.419495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.438935][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.458868][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.467809][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.476967][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.516525][ T5146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.544168][ T5148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.571586][ T5149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.590079][ T1113] cfg80211: failed to load regulatory.db [ 82.822603][ T5236] Zero length message leads to an empty skb 2022/12/17 16:34:39 executed programs: 7 2022/12/17 16:34:44 executed programs: 15 2022/12/17 16:34:50 executed programs: 22 2022/12/17 16:34:55 executed programs: 27 2022/12/17 16:35:00 executed programs: 33 2022/12/17 16:35:06 executed programs: 39 2022/12/17 16:35:12 executed programs: 46 2022/12/17 16:35:18 executed programs: 53 2022/12/17 16:35:23 executed programs: 61 2022/12/17 16:35:29 executed programs: 67 2022/12/17 16:35:35 executed programs: 74 2022/12/17 16:35:40 executed programs: 80 2022/12/17 16:35:46 executed programs: 86 2022/12/17 16:35:52 executed programs: 93 2022/12/17 16:35:57 executed programs: 99 2022/12/17 16:36:02 executed programs: 104 2022/12/17 16:36:08 executed programs: 111 2022/12/17 16:36:14 executed programs: 118 2022/12/17 16:36:21 executed programs: 126 2022/12/17 16:36:26 executed programs: 133 2022/12/17 16:36:32 executed programs: 140 2022/12/17 16:36:38 executed programs: 147 [ 208.853683][ T6319] ================================================================== [ 208.861958][ T6319] BUG: KASAN: use-after-free in nr_release+0x66/0x460 [ 208.869002][ T6319] Write of size 4 at addr ffff88807d4b9080 by task syz-executor.2/6319 [ 208.877344][ T6319] [ 208.879674][ T6319] CPU: 0 PID: 6319 Comm: syz-executor.2 Not tainted 6.1.0-next-20221216-syzkaller-15278-gca39c4daa6f7 #0 [ 208.891095][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 208.901255][ T6319] Call Trace: [ 208.904541][ T6319] [ 208.907482][ T6319] dump_stack_lvl+0xd1/0x138 [ 208.912101][ T6319] print_report+0x15e/0x45d [ 208.916799][ T6319] ? __phys_addr+0xc8/0x140 [ 208.921323][ T6319] ? nr_release+0x66/0x460 [ 208.925838][ T6319] kasan_report+0xc0/0xf0 [ 208.930444][ T6319] ? nr_release+0x66/0x460 [ 208.934965][ T6319] kasan_check_range+0x141/0x190 [ 208.939980][ T6319] nr_release+0x66/0x460 [ 208.944336][ T6319] __sock_release+0xcd/0x280 [ 208.948950][ T6319] sock_close+0x1c/0x20 [ 208.953141][ T6319] __fput+0x27c/0xa90 [ 208.957140][ T6319] ? __sock_release+0x280/0x280 [ 208.962446][ T6319] task_work_run+0x16f/0x270 [ 208.967165][ T6319] ? task_work_cancel+0x30/0x30 [ 208.972154][ T6319] exit_to_user_mode_prepare+0x23c/0x250 [ 208.977982][ T6319] syscall_exit_to_user_mode+0x1d/0x50 [ 208.983564][ T6319] do_syscall_64+0x46/0xb0 [ 208.988209][ T6319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 208.994213][ T6319] RIP: 0033:0x4147ab [ 208.998296][ T6319] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 209.018845][ T6319] RSP: 002b:00007fff253369b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 209.027796][ T6319] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004147ab [ 209.037450][ T6319] RDX: 0000000000000a0a RSI: 0000000000000000 RDI: 0000000000000004 [ 209.046263][ T6319] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2d2200e0 [ 209.054871][ T6319] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000052c980 [ 209.063530][ T6319] R13: 000000000052c980 R14: 000000000052bf00 R15: 000000000052c104 [ 209.071813][ T6319] [ 209.074852][ T6319] [ 209.077190][ T6319] Allocated by task 6320: [ 209.081534][ T6319] kasan_save_stack+0x22/0x40 [ 209.086415][ T6319] kasan_set_track+0x25/0x30 [ 209.091186][ T6319] __kasan_kmalloc+0xa5/0xb0 [ 209.096503][ T6319] __kmalloc+0x5a/0xd0 [ 209.100806][ T6319] sk_prot_alloc+0x140/0x290 [ 209.105523][ T6319] sk_alloc+0x3a/0x7a0 [ 209.109613][ T6319] nr_create+0xb6/0x5f0 [ 209.113781][ T6319] __sock_create+0x359/0x790 [ 209.118376][ T6319] __sys_socket+0x133/0x250 [ 209.123052][ T6319] __x64_sys_socket+0x73/0xb0 [ 209.127822][ T6319] do_syscall_64+0x39/0xb0 [ 209.132601][ T6319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 209.138617][ T6319] [ 209.141006][ T6319] Freed by task 6319: [ 209.145079][ T6319] kasan_save_stack+0x22/0x40 [ 209.149762][ T6319] kasan_set_track+0x25/0x30 [ 209.154534][ T6319] kasan_save_free_info+0x2e/0x40 [ 209.160597][ T6319] ____kasan_slab_free+0x160/0x1c0 [ 209.166350][ T6319] slab_free_freelist_hook+0x8b/0x1c0 [ 209.171759][ T6319] __kmem_cache_free+0xaf/0x3b0 [ 209.176708][ T6319] __sk_destruct+0x5df/0x750 [ 209.181397][ T6319] __sk_free+0x175/0x460 [ 209.185722][ T6319] sk_free+0x7c/0xa0 [ 209.189728][ T6319] nr_release+0x39e/0x460 [ 209.194067][ T6319] __sock_release+0xcd/0x280 [ 209.198844][ T6319] sock_close+0x1c/0x20 [ 209.203100][ T6319] __fput+0x27c/0xa90 [ 209.207091][ T6319] task_work_run+0x16f/0x270 [ 209.211973][ T6319] exit_to_user_mode_prepare+0x23c/0x250 [ 209.217783][ T6319] syscall_exit_to_user_mode+0x1d/0x50 [ 209.223332][ T6319] do_syscall_64+0x46/0xb0 [ 209.228013][ T6319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 209.234319][ T6319] [ 209.236654][ T6319] The buggy address belongs to the object at ffff88807d4b9000 [ 209.236654][ T6319] which belongs to the cache kmalloc-2k of size 2048 [ 209.251243][ T6319] The buggy address is located 128 bytes inside of [ 209.251243][ T6319] 2048-byte region [ffff88807d4b9000, ffff88807d4b9800) [ 209.264810][ T6319] [ 209.267285][ T6319] The buggy address belongs to the physical page: [ 209.273945][ T6319] page:ffffea0001f52e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d4b8 [ 209.284617][ T6319] head:ffffea0001f52e00 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 209.294863][ T6319] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 209.302947][ T6319] raw: 00fff00000010200 ffff888012442000 ffffea0001a3ac00 dead000000000002 [ 209.311815][ T6319] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 209.321161][ T6319] page dumped because: kasan: bad access detected [ 209.327850][ T6319] page_owner tracks the page as allocated [ 209.333768][ T6319] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5386, tgid 5384 (syz-executor.0), ts 99547492629, free_ts 99512927828 [ 209.357853][ T6319] get_page_from_freelist+0x119e/0x2a80 [ 209.363619][ T6319] __alloc_pages+0x1cb/0x5b0 [ 209.368221][ T6319] alloc_pages+0x1aa/0x270 [ 209.372913][ T6319] allocate_slab+0x25f/0x350 [ 209.377697][ T6319] ___slab_alloc+0xa91/0x1400 [ 209.382864][ T6319] __slab_alloc.constprop.0+0x56/0xa0 [ 209.388712][ T6319] __kmem_cache_alloc_node+0x1a4/0x430 [ 209.394726][ T6319] __kmalloc+0x4a/0xd0 [ 209.398897][ T6319] ops_init+0x241/0x680 [ 209.403244][ T6319] setup_net+0x793/0xe60 [ 209.407573][ T6319] copy_net_ns+0x31b/0x6b0 [ 209.412025][ T6319] create_new_namespaces+0x3f6/0xb20 [ 209.417572][ T6319] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 209.423293][ T6319] ksys_unshare+0x449/0x920 [ 209.428006][ T6319] __x64_sys_unshare+0x31/0x40 [ 209.432785][ T6319] do_syscall_64+0x39/0xb0 [ 209.437382][ T6319] page last free stack trace: [ 209.442475][ T6319] free_pcp_prepare+0x4d0/0x9e0 [ 209.447438][ T6319] free_unref_page+0x1d/0x490 [ 209.452209][ T6319] __unfreeze_partials+0x17c/0x1a0 [ 209.457408][ T6319] qlist_free_all+0x6a/0x170 [ 209.462008][ T6319] kasan_quarantine_reduce+0x192/0x220 [ 209.467699][ T6319] __kasan_slab_alloc+0x66/0x90 [ 209.472637][ T6319] kmem_cache_alloc_node+0x1f1/0x460 [ 209.478185][ T6319] __alloc_skb+0x216/0x310 [ 209.482715][ T6319] alloc_uevent_skb+0x7b/0x210 [ 209.487584][ T6319] kobject_uevent_env+0x10f3/0x1620 [ 209.493060][ T6319] netdev_queue_update_kobjects+0x3d5/0x4f0 [ 209.499400][ T6319] netdev_register_kobject+0x334/0x400 [ 209.504877][ T6319] register_netdevice+0xd77/0x1640 [ 209.510880][ T6319] __ip_tunnel_create+0x398/0x570 [ 209.516039][ T6319] ip_tunnel_init_net+0x2ec/0x9f0 [ 209.521064][ T6319] ops_init+0xb9/0x680 [ 209.525135][ T6319] [ 209.527735][ T6319] Memory state around the buggy address: [ 209.533788][ T6319] ffff88807d4b8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.542108][ T6319] ffff88807d4b9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.550162][ T6319] >ffff88807d4b9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.558212][ T6319] ^ [ 209.562282][ T6319] ffff88807d4b9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.570868][ T6319] ffff88807d4b9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.579011][ T6319] ================================================================== [ 209.667917][ T6319] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.675183][ T6319] CPU: 1 PID: 6319 Comm: syz-executor.2 Not tainted 6.1.0-next-20221216-syzkaller-15278-gca39c4daa6f7 #0 [ 209.686749][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 209.697077][ T6319] Call Trace: [ 209.700632][ T6319] [ 209.703658][ T6319] dump_stack_lvl+0xd1/0x138 [ 209.708452][ T6319] panic+0x2cc/0x626 [ 209.712552][ T6319] ? panic_print_sys_info.part.0+0x110/0x110 [ 209.718582][ T6319] ? preempt_schedule_thunk+0x1a/0x20 [ 209.724503][ T6319] ? preempt_schedule_common+0x59/0xc0 [ 209.730428][ T6319] check_panic_on_warn.cold+0x19/0x35 [ 209.736103][ T6319] end_report.part.0+0x36/0x73 [ 209.741160][ T6319] ? nr_release+0x66/0x460 [ 209.745608][ T6319] kasan_report.cold+0xa/0xf [ 209.750386][ T6319] ? nr_release+0x66/0x460 [ 209.754923][ T6319] kasan_check_range+0x141/0x190 [ 209.760067][ T6319] nr_release+0x66/0x460 [ 209.764335][ T6319] __sock_release+0xcd/0x280 [ 209.768971][ T6319] sock_close+0x1c/0x20 [ 209.773333][ T6319] __fput+0x27c/0xa90 [ 209.777474][ T6319] ? __sock_release+0x280/0x280 [ 209.782788][ T6319] task_work_run+0x16f/0x270 [ 209.788107][ T6319] ? task_work_cancel+0x30/0x30 [ 209.793002][ T6319] exit_to_user_mode_prepare+0x23c/0x250 [ 209.798701][ T6319] syscall_exit_to_user_mode+0x1d/0x50 [ 209.804263][ T6319] do_syscall_64+0x46/0xb0 [ 209.809099][ T6319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 209.815010][ T6319] RIP: 0033:0x4147ab [ 209.818922][ T6319] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 209.839685][ T6319] RSP: 002b:00007fff253369b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 209.848137][ T6319] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004147ab [ 209.856218][ T6319] RDX: 0000000000000a0a RSI: 0000000000000000 RDI: 0000000000000004 [ 209.864738][ T6319] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2d2200e0 [ 209.872740][ T6319] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000052c980 [ 209.881171][ T6319] R13: 000000000052c980 R14: 000000000052bf00 R15: 000000000052c104 [ 209.889519][ T6319] [ 209.892816][ T6319] Kernel Offset: disabled [ 209.897216][ T6319] Rebooting in 86400 seconds..