forked to background, child pid 3179 no interfaces have a carrier [ 20.978121][ T3180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 20.985684][ T3180] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 70.615002][ T6] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. 2022/05/29 02:37:58 parsed 1 programs [ 1234.758922][ T3669] cgroup: Unknown subsys name 'net' [ 1234.877319][ T3669] cgroup: Unknown subsys name 'rlimit' 2022/05/29 02:37:58 executed programs: 0 [ 1236.156182][ T3702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1236.157035][ T3701] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1236.157163][ T3702] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1236.157788][ T3702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1236.157845][ T3701] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1236.158552][ T3701] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1236.158617][ T3702] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1236.159166][ T3702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1236.159318][ T3702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1236.159644][ T3702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1236.159698][ T3702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1236.160163][ T3702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1236.160467][ T3702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1236.160602][ T3702] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1236.160794][ T3702] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1236.160848][ T3702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1236.161564][ T3702] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1236.161613][ T3702] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1236.161854][ T3702] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1236.162405][ T3701] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1236.163096][ T3701] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1236.163271][ T3701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1236.177654][ T3700] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1236.177709][ T3700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1236.177772][ T3700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1236.186539][ T3691] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1236.187114][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1236.187303][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1236.200036][ T3691] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1236.207343][ T3691] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1236.249836][ T3699] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1236.265712][ T3699] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1236.273340][ T3699] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1236.308725][ T3699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1236.336847][ T3699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1236.357845][ T3699] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1236.479606][ T3686] chnl_net:caif_netlink_parms(): no params data found [ 1236.515047][ T3685] chnl_net:caif_netlink_parms(): no params data found [ 1236.566623][ T3684] chnl_net:caif_netlink_parms(): no params data found [ 1236.626943][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.626990][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.627812][ T3685] device bridge_slave_0 entered promiscuous mode [ 1236.655537][ T3682] chnl_net:caif_netlink_parms(): no params data found [ 1236.657546][ T3687] chnl_net:caif_netlink_parms(): no params data found [ 1236.664844][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.664881][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.665523][ T3685] device bridge_slave_1 entered promiscuous mode [ 1236.749516][ T3685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.749660][ T3686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.749702][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.750476][ T3686] device bridge_slave_0 entered promiscuous mode [ 1236.752856][ T3685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.783326][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.783408][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.784223][ T3684] device bridge_slave_0 entered promiscuous mode [ 1236.785929][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.785976][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.786761][ T3684] device bridge_slave_1 entered promiscuous mode [ 1236.816994][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.817035][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.817671][ T3686] device bridge_slave_1 entered promiscuous mode [ 1236.880237][ T3686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.890220][ T3685] team0: Port device team_slave_0 added [ 1236.891564][ T3684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.893386][ T3684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.923406][ T3686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.930030][ T3685] team0: Port device team_slave_1 added [ 1236.991161][ T3684] team0: Port device team_slave_0 added [ 1237.001966][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.002010][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.002820][ T3682] device bridge_slave_0 entered promiscuous mode [ 1237.003496][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.003553][ T3687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.004350][ T3687] device bridge_slave_0 entered promiscuous mode [ 1237.005860][ T3685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.005871][ T3685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.005892][ T3685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.006805][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.006848][ T3687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.007682][ T3687] device bridge_slave_1 entered promiscuous mode [ 1237.033201][ T3684] team0: Port device team_slave_1 added [ 1237.035493][ T3686] team0: Port device team_slave_0 added [ 1237.037095][ T3686] team0: Port device team_slave_1 added [ 1237.044595][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.044637][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.045322][ T3682] device bridge_slave_1 entered promiscuous mode [ 1237.046093][ T3685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.046102][ T3685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.046119][ T3685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.067222][ T3688] chnl_net:caif_netlink_parms(): no params data found [ 1237.157634][ T3687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.159310][ T3687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.230295][ T3684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.230307][ T3684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.230325][ T3684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.231657][ T3684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.231666][ T3684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.231683][ T3684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.232958][ T3686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.232967][ T3686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.232985][ T3686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.234439][ T3686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.234448][ T3686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.234466][ T3686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.328863][ T3682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.330742][ T3682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.439426][ T3685] device hsr_slave_0 entered promiscuous mode [ 1237.439849][ T3685] device hsr_slave_1 entered promiscuous mode [ 1237.471802][ T3687] team0: Port device team_slave_0 added [ 1237.490703][ T3686] device hsr_slave_0 entered promiscuous mode [ 1237.491245][ T3686] device hsr_slave_1 entered promiscuous mode [ 1237.491592][ T3686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.491661][ T3686] Cannot create hsr debugfs directory [ 1237.494813][ T3682] team0: Port device team_slave_0 added [ 1237.495630][ T3687] team0: Port device team_slave_1 added [ 1237.522297][ T3684] device hsr_slave_0 entered promiscuous mode [ 1237.526248][ T3684] device hsr_slave_1 entered promiscuous mode [ 1237.532453][ T3684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.532475][ T3684] Cannot create hsr debugfs directory [ 1237.564973][ T3682] team0: Port device team_slave_1 added [ 1237.619233][ T3682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.619246][ T3682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.619266][ T3682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.622871][ T3687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.622880][ T3687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.622898][ T3687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.624329][ T3687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.624338][ T3687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.624355][ T3687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.701406][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.701456][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.702273][ T3688] device bridge_slave_0 entered promiscuous mode [ 1237.704083][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.704119][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.704740][ T3688] device bridge_slave_1 entered promiscuous mode [ 1237.723259][ T3682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.723271][ T3682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.723289][ T3682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.797386][ T3687] device hsr_slave_0 entered promiscuous mode [ 1237.802834][ T3687] device hsr_slave_1 entered promiscuous mode [ 1237.803235][ T3687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.803254][ T3687] Cannot create hsr debugfs directory [ 1237.849597][ T3688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.851285][ T3688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.923726][ T3682] device hsr_slave_0 entered promiscuous mode [ 1237.924208][ T3682] device hsr_slave_1 entered promiscuous mode [ 1237.924543][ T3682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.924556][ T3682] Cannot create hsr debugfs directory [ 1237.965598][ T3688] team0: Port device team_slave_0 added [ 1237.974886][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.974973][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.990003][ T3688] team0: Port device team_slave_1 added [ 1238.079327][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.079341][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.079363][ T3688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.147876][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.147888][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.147908][ T3688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.222280][ T3706] Bluetooth: hci1: command 0x0409 tx timeout [ 1238.222602][ T3706] Bluetooth: hci0: command 0x0409 tx timeout [ 1238.222680][ T3670] Bluetooth: hci4: command 0x0409 tx timeout [ 1238.292042][ T3670] Bluetooth: hci3: command 0x0409 tx timeout [ 1238.292080][ T3670] Bluetooth: hci2: command 0x0409 tx timeout [ 1238.313765][ T3688] device hsr_slave_0 entered promiscuous mode [ 1238.332250][ T3688] device hsr_slave_1 entered promiscuous mode [ 1238.351856][ T3688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1238.351877][ T3688] Cannot create hsr debugfs directory [ 1238.447690][ T3685] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1238.450985][ T3685] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1238.452096][ T3706] Bluetooth: hci5: command 0x0409 tx timeout [ 1238.498771][ T3685] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1238.500814][ T3685] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1238.585189][ T3684] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1238.587519][ T3684] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1238.626116][ T3684] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1238.628085][ T3684] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1238.668389][ T3687] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1238.686083][ T3687] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1238.689019][ T3687] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1238.695565][ T3685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.696336][ T3686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1238.721198][ T3687] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1238.729729][ T3685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.736677][ T3686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1238.740685][ T3686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1238.764763][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1238.766171][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1238.766880][ T3686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1238.809601][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1238.810010][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1238.810515][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.810598][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.817798][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1238.832117][ T3682] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1238.847675][ T3682] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1238.873951][ T3682] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1238.876848][ T3682] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1238.900059][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1238.900560][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1238.901102][ T3720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.901141][ T3720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.943874][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1238.944581][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1238.945085][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1238.945639][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1238.946038][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1238.946712][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1238.947154][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1238.947465][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1238.947781][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1238.948114][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1238.951138][ T3688] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1238.958382][ T3688] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1238.971106][ T3684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.979959][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1238.987621][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.010704][ T3684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.012034][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.012398][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.015119][ T3688] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1239.043443][ T3685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.045266][ T3688] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1239.070876][ T3687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.073446][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.073597][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1239.073687][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.074177][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.074572][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.074618][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.075066][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1239.114654][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1239.115413][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1239.115705][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.115753][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.116044][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1239.116648][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1239.117219][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.117219][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.117831][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.129291][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.129829][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1239.130319][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.141464][ T3686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.154782][ T3686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.160936][ T3684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1239.160953][ T3684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1239.190641][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.191163][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.191592][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.192316][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.193603][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1239.194031][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.197144][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1239.197648][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1239.200406][ T3687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.245663][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1239.246350][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.246822][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.247528][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.247630][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.248099][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.248575][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.248916][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.248965][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.249366][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1239.249831][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1239.250178][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.250222][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.250564][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1239.251220][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1239.253836][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.254460][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.256043][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1239.256500][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1239.256906][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.257394][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1239.257758][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1239.258045][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.258083][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.276239][ T3682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.301076][ T3684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.301564][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1239.302693][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.303176][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1239.303567][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.303935][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1239.304304][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1239.304733][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1239.305422][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.305517][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1239.305594][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1239.306155][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.307175][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.307878][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.316397][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1239.378685][ T3688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.380877][ T3682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.384008][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.384510][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.399055][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1239.400098][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.400627][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1239.401078][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.401520][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1239.403442][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1239.410451][ T3687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.425640][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1239.429435][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.429559][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1239.429654][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.430090][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.430510][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.430892][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.431189][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.431234][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.431545][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1239.433225][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1239.433515][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.433552][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.433852][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1239.434402][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1239.435345][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1239.458288][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1239.458691][ T3720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1239.460067][ T3688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.494640][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.495075][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.495378][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.495428][ T3738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.495724][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1239.496096][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1239.496377][ T3738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.496413][ T3738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.496707][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1239.497116][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1239.497847][ T3685] device veth0_vlan entered promiscuous mode [ 1239.510914][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1239.511346][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1239.512379][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1239.512780][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.513435][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.513905][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1239.514406][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.514866][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.514972][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1239.515049][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1239.520735][ T3686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.528395][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.528953][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1239.529527][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.530273][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.531243][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.539249][ T3682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1239.539269][ T3682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1239.550174][ T3685] device veth1_vlan entered promiscuous mode [ 1239.554903][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1239.555313][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1239.555693][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.556235][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1239.556667][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1239.557235][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1239.579824][ T3682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.588965][ T3688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1239.588986][ T3688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1239.590353][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1239.593286][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.593869][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.593976][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1239.594086][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.594660][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1239.610783][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1239.611346][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1239.645978][ T3685] device veth0_macvtap entered promiscuous mode [ 1239.648485][ T3685] device veth1_macvtap entered promiscuous mode [ 1239.652483][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1239.652607][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1239.652717][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1239.653292][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1239.653762][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1239.661166][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1239.698972][ T3685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.701581][ T3685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.704649][ T3688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.710418][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1239.710976][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1239.711406][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1239.719883][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1239.736751][ T3685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.736786][ T3685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.736813][ T3685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.736840][ T3685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.824051][ T3768] ================================================================== [ 1239.824062][ T3768] BUG: KASAN: use-after-free in nf_confirm+0x575/0x5b0 [ 1239.824114][ T3768] Read of size 1 at addr ffff88801d5e1904 by task kworker/u4:7/3768 [ 1239.824130][ T3768] [ 1239.824134][ T3768] CPU: 1 PID: 3768 Comm: kworker/u4:7 Not tainted 5.18.0-syzkaller-10643-g9d004b2f4fea #0 [ 1239.824152][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.824162][ T3768] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1239.824187][ T3768] Call Trace: [ 1239.824192][ T3768] [ 1239.824199][ T3768] dump_stack_lvl+0xcd/0x134 [ 1239.824218][ T3768] print_address_description.constprop.0.cold+0xeb/0x495 [ 1239.824240][ T3768] ? nf_confirm+0x575/0x5b0 [ 1239.824256][ T3768] kasan_report.cold+0xf4/0x1c6 [ 1239.824274][ T3768] ? nf_confirm+0x575/0x5b0 [ 1239.824291][ T3768] nf_confirm+0x575/0x5b0 [ 1239.824308][ T3768] ipv4_confirm+0x17a/0x390 [ 1239.824326][ T3768] nf_hook_slow+0xc5/0x1f0 [ 1239.824345][ T3768] nf_hook+0x1cb/0x5b0 [ 1239.824362][ T3768] ? __ip_finish_output+0x650/0x650 [ 1239.824380][ T3768] ? dst_output+0x170/0x170 [ 1239.824398][ T3768] ? __ip_finish_output+0x650/0x650 [ 1239.824416][ T3768] ? xfrm_lookup_with_ifid+0xa6b/0x2240 [ 1239.824441][ T3768] ip_output+0x21f/0x310 [ 1239.824458][ T3768] ? __ip_finish_output+0x650/0x650 [ 1239.824477][ T3768] ip_local_out+0xaf/0x1a0 [ 1239.824495][ T3768] iptunnel_xmit+0x67a/0xa40 [ 1239.824519][ T3768] send4+0x426/0xe60 [ 1239.824539][ T3768] ? lock_release+0x780/0x780 [ 1239.824561][ T3768] ? wg_receive+0xb0/0xb0 [ 1239.824583][ T3768] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1239.824609][ T3768] wg_socket_send_skb_to_peer+0x192/0x220 [ 1239.824634][ T3768] wg_socket_send_buffer_to_peer+0x11e/0x170 [ 1239.824658][ T3768] wg_packet_send_handshake_initiation+0x212/0x340 [ 1239.824682][ T3768] ? wg_prev_queue_dequeue+0x260/0x260 [ 1239.824711][ T3768] ? lockdep_hardirqs_on+0x79/0x100 [ 1239.824744][ T3768] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1239.824770][ T3768] wg_packet_handshake_send_worker+0x18/0x30 [ 1239.824793][ T3768] process_one_work+0x996/0x1610 [ 1239.824816][ T3768] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1239.824838][ T3768] ? rwlock_bug.part.0+0x90/0x90 [ 1239.824858][ T3768] ? _raw_spin_lock_irq+0x41/0x50 [ 1239.824882][ T3768] worker_thread+0x665/0x1080 [ 1239.824904][ T3768] ? __kthread_parkme+0x15f/0x220 [ 1239.824927][ T3768] ? process_one_work+0x1610/0x1610 [ 1239.824947][ T3768] kthread+0x2e9/0x3a0 [ 1239.824962][ T3768] ? kthread_complete_and_exit+0x40/0x40 [ 1239.824981][ T3768] ret_from_fork+0x1f/0x30 [ 1239.825007][ T3768] [ 1239.825013][ T3768] [ 1239.825015][ T3768] Allocated by task 0: [ 1239.825022][ T3768] (stack is not available) [ 1239.825025][ T3768] [ 1239.825028][ T3768] Freed by task 3768: [ 1239.825034][ T3768] kasan_save_stack+0x1e/0x40 [ 1239.825056][ T3768] kasan_set_track+0x21/0x30 [ 1239.825075][ T3768] kasan_set_free_info+0x20/0x30 [ 1239.825091][ T3768] ____kasan_slab_free+0x166/0x1a0 [ 1239.825111][ T3768] slab_free_freelist_hook+0x8b/0x1c0 [ 1239.825131][ T3768] kfree+0xd6/0x4d0 [ 1239.825148][ T3768] nf_conntrack_free+0x100/0x630 [ 1239.825167][ T3768] nf_ct_destroy+0x1be/0x320 [ 1239.825185][ T3768] __nf_ct_resolve_clash+0x624/0x785 [ 1239.825202][ T3768] nf_ct_resolve_clash+0x14a/0xa23 [ 1239.825217][ T3768] __nf_conntrack_confirm.cold+0x16/0x23e [ 1239.825233][ T3768] nf_confirm+0x4ce/0x5b0 [ 1239.825247][ T3768] ipv4_confirm+0x17a/0x390 [ 1239.825262][ T3768] nf_hook_slow+0xc5/0x1f0 [ 1239.825276][ T3768] nf_hook+0x1cb/0x5b0 [ 1239.825289][ T3768] ip_output+0x21f/0x310 [ 1239.825303][ T3768] ip_local_out+0xaf/0x1a0 [ 1239.825318][ T3768] iptunnel_xmit+0x67a/0xa40 [ 1239.825337][ T3768] send4+0x426/0xe60 [ 1239.825354][ T3768] wg_socket_send_skb_to_peer+0x192/0x220 [ 1239.825374][ T3768] wg_socket_send_buffer_to_peer+0x11e/0x170 [ 1239.825395][ T3768] wg_packet_send_handshake_initiation+0x212/0x340 [ 1239.825414][ T3768] wg_packet_handshake_send_worker+0x18/0x30 [ 1239.825433][ T3768] process_one_work+0x996/0x1610 [ 1239.825450][ T3768] worker_thread+0x665/0x1080 [ 1239.825466][ T3768] kthread+0x2e9/0x3a0 [ 1239.825480][ T3768] ret_from_fork+0x1f/0x30 [ 1239.825497][ T3768] [ 1239.825500][ T3768] The buggy address belongs to the object at ffff88801d5e1900 [ 1239.825500][ T3768] which belongs to the cache kmalloc-128 of size 128 [ 1239.825513][ T3768] The buggy address is located 4 bytes inside of [ 1239.825513][ T3768] 128-byte region [ffff88801d5e1900, ffff88801d5e1980) [ 1239.825530][ T3768] [ 1239.825532][ T3768] The buggy address belongs to the physical page: [ 1239.825539][ T3768] page:ffffea0000757840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d5e1 [ 1239.825557][ T3768] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1239.825581][ T3768] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888010c418c0 [ 1239.825598][ T3768] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1239.825607][ T3768] page dumped because: kasan: bad access detected [ 1239.825613][ T3768] page_owner tracks the page as allocated [ 1239.825618][ T3768] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 3740, tgid 3740 (kworker/1:5), ts 1239735641535, free_ts 1239266820075 [ 1239.825644][ T3768] get_page_from_freelist+0x1290/0x3b70 [ 1239.825660][ T3768] __alloc_pages+0x1c7/0x510 [ 1239.825675][ T3768] alloc_pages+0x1aa/0x310 [ 1239.825693][ T3768] allocate_slab+0x26c/0x3c0 [ 1239.825711][ T3768] ___slab_alloc+0x985/0xd90 [ 1239.825736][ T3768] __slab_alloc.constprop.0+0x4d/0xa0 [ 1239.825756][ T3768] kmem_cache_alloc_trace+0x310/0x3f0 [ 1239.825776][ T3768] __hw_addr_add_ex+0x22d/0x7e0 [ 1239.825796][ T3768] dev_mc_add+0xbd/0x110 [ 1239.825814][ T3768] igmp6_group_added+0x4f0/0x5b0 [ 1239.825832][ T3768] __ipv6_dev_mc_inc+0x847/0xec0 [ 1239.825850][ T3768] addrconf_dad_work+0xc5f/0x12d0 [ 1239.825870][ T3768] process_one_work+0x996/0x1610 [ 1239.825886][ T3768] worker_thread+0x665/0x1080 [ 1239.825901][ T3768] kthread+0x2e9/0x3a0 [ 1239.825914][ T3768] ret_from_fork+0x1f/0x30 [ 1239.825931][ T3768] page last free stack trace: [ 1239.825934][ T3768] free_pcp_prepare+0x549/0xd20 [ 1239.825949][ T3768] free_unref_page+0x19/0x6a0 [ 1239.825963][ T3768] qlist_free_all+0x6a/0x170 [ 1239.825978][ T3768] kasan_quarantine_reduce+0x180/0x200 [ 1239.825996][ T3768] __kasan_slab_alloc+0xa2/0xc0 [ 1239.826016][ T3768] kmem_cache_alloc_lru+0x31a/0x720 [ 1239.826035][ T3768] __d_alloc+0x32/0x960 [ 1239.826052][ T3768] d_alloc_pseudo+0x19/0x70 [ 1239.826066][ T3768] alloc_file_pseudo+0xc6/0x250 [ 1239.826083][ T3768] sock_alloc_file+0x4f/0x190 [ 1239.826100][ T3768] __sys_socket+0x1a4/0x240 [ 1239.826119][ T3768] __x64_sys_socket+0x6f/0xb0 [ 1239.826139][ T3768] do_syscall_64+0x35/0xb0 [ 1239.826155][ T3768] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1239.826172][ T3768] [ 1239.826175][ T3768] Memory state around the buggy address: [ 1239.826182][ T3768] ffff88801d5e1800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1239.826194][ T3768] ffff88801d5e1880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1239.826206][ T3768] >ffff88801d5e1900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1239.826215][ T3768] ^ [ 1239.826221][ T3768] ffff88801d5e1980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1239.826232][ T3768] ffff88801d5e1a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1239.826241][ T3768] ================================================================== [ 1239.826257][ T3768] Kernel panic - not syncing: panic_on_warn set ... [ 1239.826266][ T3768] CPU: 1 PID: 3768 Comm: kworker/u4:7 Not tainted 5.18.0-syzkaller-10643-g9d004b2f4fea #0 [ 1239.826286][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.826297][ T3768] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1239.826321][ T3768] Call Trace: [ 1239.826325][ T3768] [ 1239.826332][ T3768] dump_stack_lvl+0xcd/0x134 [ 1239.826350][ T3768] panic+0x2d7/0x636 [ 1239.826367][ T3768] ? panic_print_sys_info.part.0+0x10b/0x10b [ 1239.826392][ T3768] ? nf_confirm+0x575/0x5b0 [ 1239.826410][ T3768] ? nf_confirm+0x575/0x5b0 [ 1239.826424][ T3768] end_report.part.0+0x3f/0x7c [ 1239.826437][ T3768] kasan_report.cold+0x93/0x1c6 [ 1239.826451][ T3768] ? nf_confirm+0x575/0x5b0 [ 1239.826465][ T3768] nf_confirm+0x575/0x5b0 [ 1239.826479][ T3768] ipv4_confirm+0x17a/0x390 [ 1239.826493][ T3768] nf_hook_slow+0xc5/0x1f0 [ 1239.826508][ T3768] nf_hook+0x1cb/0x5b0 [ 1239.826521][ T3768] ? __ip_finish_output+0x650/0x650 [ 1239.826535][ T3768] ? dst_output+0x170/0x170 [ 1239.826549][ T3768] ? __ip_finish_output+0x650/0x650 [ 1239.826563][ T3768] ? xfrm_lookup_with_ifid+0xa6b/0x2240 [ 1239.826583][ T3768] ip_output+0x21f/0x310 [ 1239.826596][ T3768] ? __ip_finish_output+0x650/0x650 [ 1239.826611][ T3768] ip_local_out+0xaf/0x1a0 [ 1239.826625][ T3768] iptunnel_xmit+0x67a/0xa40 [ 1239.826644][ T3768] send4+0x426/0xe60 [ 1239.826661][ T3768] ? lock_release+0x780/0x780 [ 1239.826678][ T3768] ? wg_receive+0xb0/0xb0 [ 1239.826695][ T3768] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1239.826714][ T3768] wg_socket_send_skb_to_peer+0x192/0x220 [ 1239.826739][ T3768] wg_socket_send_buffer_to_peer+0x11e/0x170 [ 1239.826758][ T3768] wg_packet_send_handshake_initiation+0x212/0x340 [ 1239.826776][ T3768] ? wg_prev_queue_dequeue+0x260/0x260 [ 1239.826796][ T3768] ? lockdep_hardirqs_on+0x79/0x100 [ 1239.826813][ T3768] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1239.826834][ T3768] wg_packet_handshake_send_worker+0x18/0x30 [ 1239.826851][ T3768] process_one_work+0x996/0x1610 [ 1239.826869][ T3768] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1239.826885][ T3768] ? rwlock_bug.part.0+0x90/0x90 [ 1239.826898][ T3768] ? _raw_spin_lock_irq+0x41/0x50 [ 1239.826917][ T3768] worker_thread+0x665/0x1080 [ 1239.826935][ T3768] ? __kthread_parkme+0x15f/0x220 [ 1239.826952][ T3768] ? process_one_work+0x1610/0x1610 [ 1239.826968][ T3768] kthread+0x2e9/0x3a0 [ 1239.826980][ T3768] ? kthread_complete_and_exit+0x40/0x40 [ 1239.826995][ T3768] ret_from_fork+0x1f/0x30 [ 1239.827015][ T3768] [ 1239.827686][ T3768] Kernel Offset: disabled