forked to background, child pid 3182 no interfaces have a carrier [ 26.461706][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.467266][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts. 2022/05/26 22:16:47 parsed 1 programs syzkaller login: [ 67.807779][ T3603] cgroup: Unknown subsys name 'net' [ 67.941948][ T3603] cgroup: Unknown subsys name 'rlimit' 2022/05/26 22:16:48 executed programs: 0 [ 69.272325][ T3633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.272330][ T3634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.272983][ T3634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.273404][ T3633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.273616][ T3634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.273869][ T3633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.276274][ T3634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.276464][ T3634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.276624][ T3634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.276908][ T3634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.277213][ T3634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.277735][ T3634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.278021][ T3634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.279237][ T3634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.279364][ T3634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.280270][ T3634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.280392][ T3634] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.280728][ T3634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.280968][ T3634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.282812][ T3631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.283839][ T3631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.283912][ T3631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.298285][ T3631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.298971][ T3631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.299041][ T3631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.299164][ T3633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.299789][ T3631] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.300061][ T3631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.300132][ T3632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.300885][ T3633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.301923][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.302176][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.302306][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.303069][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.331923][ T3633] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.333375][ T3633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.683437][ T3616] chnl_net:caif_netlink_parms(): no params data found [ 69.827310][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.827436][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.828695][ T3616] device bridge_slave_0 entered promiscuous mode [ 69.832886][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.832941][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.834041][ T3616] device bridge_slave_1 entered promiscuous mode [ 69.854620][ T3619] chnl_net:caif_netlink_parms(): no params data found [ 69.896815][ T3615] chnl_net:caif_netlink_parms(): no params data found [ 69.921544][ T3617] chnl_net:caif_netlink_parms(): no params data found [ 69.948686][ T3616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.954738][ T3616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.029379][ T3620] chnl_net:caif_netlink_parms(): no params data found [ 70.053118][ T3616] team0: Port device team_slave_0 added [ 70.081208][ T3616] team0: Port device team_slave_1 added [ 70.098508][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.098630][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.099664][ T3619] device bridge_slave_0 entered promiscuous mode [ 70.104540][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.104599][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.105889][ T3619] device bridge_slave_1 entered promiscuous mode [ 70.147613][ T3618] chnl_net:caif_netlink_parms(): no params data found [ 70.188443][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.188504][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.189629][ T3615] device bridge_slave_0 entered promiscuous mode [ 70.191824][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.191881][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.192882][ T3615] device bridge_slave_1 entered promiscuous mode [ 70.194268][ T3616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.194280][ T3616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.194306][ T3616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.299750][ T3616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.299766][ T3616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.299793][ T3616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.352131][ T3619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.375470][ T3615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.375879][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.376024][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.377089][ T3620] device bridge_slave_0 entered promiscuous mode [ 70.379830][ T3619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.413545][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.413602][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.414622][ T3617] device bridge_slave_0 entered promiscuous mode [ 70.416848][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.416902][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.417842][ T3617] device bridge_slave_1 entered promiscuous mode [ 70.459881][ T3615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.476500][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.476534][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.477154][ T3620] device bridge_slave_1 entered promiscuous mode [ 70.552977][ T3616] device hsr_slave_0 entered promiscuous mode [ 70.553726][ T3616] device hsr_slave_1 entered promiscuous mode [ 70.557546][ T3620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.559773][ T3619] team0: Port device team_slave_0 added [ 70.562568][ T3617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.566401][ T3617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.581236][ T3615] team0: Port device team_slave_0 added [ 70.607081][ T3619] team0: Port device team_slave_1 added [ 70.626410][ T3620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.646628][ T3615] team0: Port device team_slave_1 added [ 70.676528][ T3617] team0: Port device team_slave_0 added [ 70.697955][ T3619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.697970][ T3619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.697998][ T3619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.700319][ T3619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.700331][ T3619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.700358][ T3619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.803365][ T3617] team0: Port device team_slave_1 added [ 70.811775][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.811833][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.812782][ T3618] device bridge_slave_0 entered promiscuous mode [ 70.837098][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.837112][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.837139][ T3615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.838326][ T3617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.838339][ T3617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.838366][ T3617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.839677][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.839689][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.839716][ T3615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.841537][ T3617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.841550][ T3617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.841577][ T3617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.945754][ T3620] team0: Port device team_slave_0 added [ 70.949578][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.949645][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.950681][ T3618] device bridge_slave_1 entered promiscuous mode [ 71.014660][ T3620] team0: Port device team_slave_1 added [ 71.024331][ T3619] device hsr_slave_0 entered promiscuous mode [ 71.051237][ T3619] device hsr_slave_1 entered promiscuous mode [ 71.061106][ T3619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.061246][ T3619] Cannot create hsr debugfs directory [ 71.088919][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.089031][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.159741][ T3615] device hsr_slave_0 entered promiscuous mode [ 71.160193][ T3615] device hsr_slave_1 entered promiscuous mode [ 71.160523][ T3615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.160538][ T3615] Cannot create hsr debugfs directory [ 71.187622][ T3618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.190239][ T3618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.217076][ T3617] device hsr_slave_0 entered promiscuous mode [ 71.217747][ T3617] device hsr_slave_1 entered promiscuous mode [ 71.218294][ T3617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.218317][ T3617] Cannot create hsr debugfs directory [ 71.248587][ T3620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.248602][ T3620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.248628][ T3620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.250889][ T3620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.250901][ T3620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.250927][ T3620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.322841][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 71.323212][ T26] Bluetooth: hci5: command 0x0409 tx timeout [ 71.325198][ T14] Bluetooth: hci0: command 0x0409 tx timeout [ 71.395172][ T26] Bluetooth: hci4: command 0x0409 tx timeout [ 71.395221][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 71.395306][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 71.432334][ T3618] team0: Port device team_slave_0 added [ 71.450502][ T3620] device hsr_slave_0 entered promiscuous mode [ 71.451130][ T3620] device hsr_slave_1 entered promiscuous mode [ 71.451521][ T3620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.451536][ T3620] Cannot create hsr debugfs directory [ 71.459105][ T3618] team0: Port device team_slave_1 added [ 71.537392][ T3618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.537406][ T3618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.537433][ T3618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.541692][ T3618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.541705][ T3618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.541732][ T3618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.668104][ T3618] device hsr_slave_0 entered promiscuous mode [ 71.668851][ T3618] device hsr_slave_1 entered promiscuous mode [ 71.669398][ T3618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.669420][ T3618] Cannot create hsr debugfs directory [ 71.777945][ T3616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.782871][ T3616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.826117][ T3616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.858340][ T3616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.886473][ T3619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.912085][ T3619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.916369][ T3619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.937430][ T3619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.038407][ T3615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.073761][ T3616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.077361][ T3615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.082671][ T3615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.112613][ T3616] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.118669][ T3615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.129854][ T3617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.139095][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.142023][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.155717][ T3617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.173411][ T3617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.207460][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.208006][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.208733][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.208853][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.213859][ T3620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.217020][ T3617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.264039][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.264654][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.266323][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.267041][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.267105][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.267560][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.268433][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.269270][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.270486][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.273289][ T3620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.309402][ T3620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.326340][ T3620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.339778][ T3619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.351553][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.352334][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.353054][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.398454][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.399054][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.400349][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.400978][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.418917][ T3619] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.423400][ T3616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.424111][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.483657][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.484294][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.484819][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.485925][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.486336][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.486394][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.487032][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.517477][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.518164][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.518607][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.518664][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.519141][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.519309][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.529023][ T3618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.551134][ T3615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.555338][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.556291][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.564464][ T3618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.573419][ T3616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.573710][ T3618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.587455][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.588383][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.589144][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.621437][ T3615] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.626957][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.627785][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.628463][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.628993][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.629574][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.630100][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.630603][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.631120][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.649279][ T3618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.678129][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.678731][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.679184][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.679242][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.679965][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.681800][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.710911][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.711580][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.712024][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.712081][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.721990][ T3617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.723829][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.735800][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.736668][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.736668][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.737721][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.738395][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.739091][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.741386][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.769679][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.769866][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.796648][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.797259][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.797835][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.798377][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.800356][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.872413][ T3619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.881595][ T3617] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.898739][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.899462][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.900034][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.900166][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.900307][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.900911][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.902420][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.902475][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.904707][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.944031][ T3615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.961666][ T3620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.976972][ T3618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.977967][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.978562][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.978991][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.979044][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.979474][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.017991][ T3620] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.020032][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.020918][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.021872][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.022569][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.023100][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.023758][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.037651][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.038249][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.038719][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.038784][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.039247][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.039924][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.040362][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.040418][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.040876][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.041681][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.051796][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.052435][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.053018][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.053871][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.054468][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.067481][ T3618] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.074853][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.075584][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.076130][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.080687][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.098702][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.099394][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.099900][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.099959][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.100437][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.101458][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.122337][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.123010][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.123510][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.123574][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.134847][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.136451][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.137504][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.153201][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.186223][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.187083][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.187820][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.188399][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.189037][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.189762][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.190347][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.190479][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.190608][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.191538][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.192925][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.193687][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.194496][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.203476][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.206674][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.221036][ T3617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.230659][ T3618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.230684][ T3618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.252694][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.253867][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.254672][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.255331][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.255984][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.265487][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.265626][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.295866][ T3620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.296470][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.296626][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.315258][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.315888][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.340684][ T3618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.386765][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.387433][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.389161][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.389730][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.393836][ T3616] device veth0_vlan entered promiscuous mode [ 73.396032][ T3643] Bluetooth: hci0: command 0x041b tx timeout [ 73.396092][ T3643] Bluetooth: hci5: command 0x041b tx timeout [ 73.396183][ T3643] Bluetooth: hci2: command 0x041b tx timeout [ 73.419912][ T3616] device veth1_vlan entered promiscuous mode [ 73.475344][ T3643] Bluetooth: hci4: command 0x041b tx timeout [ 73.476136][ T3668] Bluetooth: hci3: command 0x041b tx timeout [ 73.476242][ T3668] Bluetooth: hci1: command 0x041b tx timeout [ 73.501514][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.502175][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.502771][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.503425][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.508081][ T3616] device veth0_macvtap entered promiscuous mode [ 73.523908][ T3616] device veth1_macvtap entered promiscuous mode [ 73.605467][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.606205][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.607255][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.607893][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.612418][ T3616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.612702][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.613404][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.630358][ T3616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.630515][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.631241][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.643651][ T3616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.643694][ T3616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.643729][ T3616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.643763][ T3616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.693281][ T3619] device veth0_vlan entered promiscuous mode [ 73.741452][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.742217][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.773323][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.774063][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.777013][ T3619] device veth1_vlan entered promiscuous mode [ 73.794348][ T930] ================================================================== [ 73.794360][ T930] BUG: KASAN: use-after-free in nf_confirm+0x575/0x5b0 [ 73.794404][ T930] Read of size 1 at addr ffff888019d85d04 by task kworker/u4:4/930 [ 73.794420][ T930] [ 73.794424][ T930] CPU: 0 PID: 930 Comm: kworker/u4:4 Not tainted 5.18.0-syzkaller-03023-g7e062cda7d90 #0 [ 73.794444][ T930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.794456][ T930] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 73.794486][ T930] Call Trace: [ 73.794492][ T930] [ 73.794507][ T930] dump_stack_lvl+0xcd/0x134 [ 73.794532][ T930] print_address_description.constprop.0.cold+0xeb/0x495 [ 73.794564][ T930] ? nf_confirm+0x575/0x5b0 [ 73.794587][ T930] kasan_report.cold+0xf4/0x1c6 [ 73.794612][ T930] ? nf_confirm+0x575/0x5b0 [ 73.794637][ T930] nf_confirm+0x575/0x5b0 [ 73.794662][ T930] ipv4_confirm+0x17a/0x390 [ 73.794687][ T930] nf_hook_slow+0xc5/0x1f0 [ 73.794712][ T930] nf_hook+0x1cb/0x5b0 [ 73.794736][ T930] ? __ip_finish_output+0x650/0x650 [ 73.794762][ T930] ? dst_output+0x170/0x170 [ 73.794787][ T930] ? __ip_finish_output+0x650/0x650 [ 73.794811][ T930] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 73.794839][ T930] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.794865][ T930] ? xfrm_lookup_with_ifid+0xa6b/0x2240 [ 73.794892][ T930] ip_output+0x21f/0x310 [ 73.794916][ T930] ? __ip_finish_output+0x650/0x650 [ 73.794943][ T930] ip_local_out+0xaf/0x1a0 [ 73.794963][ T930] iptunnel_xmit+0x67a/0xa40 [ 73.794988][ T930] send4+0x426/0xe60 [ 73.795007][ T930] ? lock_release+0x780/0x780 [ 73.795032][ T930] ? wg_receive+0xb0/0xb0 [ 73.795053][ T930] ? rcu_read_lock_sched_held+0x3a/0x70 [ 73.795084][ T930] wg_socket_send_skb_to_peer+0x192/0x220 [ 73.795110][ T930] wg_socket_send_buffer_to_peer+0x11e/0x170 [ 73.795135][ T930] wg_packet_send_handshake_initiation+0x212/0x340 [ 73.795169][ T930] ? wg_prev_queue_dequeue+0x260/0x260 [ 73.795204][ T930] ? lockdep_hardirqs_on+0x79/0x100 [ 73.795230][ T930] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.795259][ T930] wg_packet_handshake_send_worker+0x18/0x30 [ 73.795284][ T930] process_one_work+0x996/0x1610 [ 73.795308][ T930] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 73.795332][ T930] ? rwlock_bug.part.0+0x90/0x90 [ 73.795357][ T930] ? _raw_spin_lock_irq+0x41/0x50 [ 73.795381][ T930] worker_thread+0x665/0x1080 [ 73.795407][ T930] ? process_one_work+0x1610/0x1610 [ 73.795431][ T930] kthread+0x2e9/0x3a0 [ 73.795449][ T930] ? kthread_complete_and_exit+0x40/0x40 [ 73.795472][ T930] ret_from_fork+0x1f/0x30 [ 73.795508][ T930] [ 73.795516][ T930] [ 73.795520][ T930] Allocated by task 0: [ 73.795528][ T930] (stack is not available) [ 73.795532][ T930] [ 73.795535][ T930] Freed by task 930: [ 73.795544][ T930] kasan_save_stack+0x1e/0x40 [ 73.795569][ T930] kasan_set_track+0x21/0x30 [ 73.795593][ T930] kasan_set_free_info+0x20/0x30 [ 73.795611][ T930] ____kasan_slab_free+0x166/0x1a0 [ 73.795650][ T930] slab_free_freelist_hook+0x8b/0x1c0 [ 73.795673][ T930] kfree+0xd6/0x4d0 [ 73.795692][ T930] nf_conntrack_free+0x100/0x630 [ 73.795718][ T930] nf_ct_destroy+0x1be/0x320 [ 73.795742][ T930] __nf_ct_resolve_clash+0x624/0x785 [ 73.795764][ T930] nf_ct_resolve_clash+0x14a/0xa23 [ 73.795785][ T930] __nf_conntrack_confirm.cold+0x16/0x23e [ 73.795805][ T930] nf_confirm+0x4ce/0x5b0 [ 73.795823][ T930] ipv4_confirm+0x17a/0x390 [ 73.795842][ T930] nf_hook_slow+0xc5/0x1f0 [ 73.795861][ T930] nf_hook+0x1cb/0x5b0 [ 73.795881][ T930] ip_output+0x21f/0x310 [ 73.795899][ T930] ip_local_out+0xaf/0x1a0 [ 73.795916][ T930] iptunnel_xmit+0x67a/0xa40 [ 73.795934][ T930] send4+0x426/0xe60 [ 73.795951][ T930] wg_socket_send_skb_to_peer+0x192/0x220 [ 73.795971][ T930] wg_socket_send_buffer_to_peer+0x11e/0x170 [ 73.795991][ T930] wg_packet_send_handshake_initiation+0x212/0x340 [ 73.796021][ T930] wg_packet_handshake_send_worker+0x18/0x30 [ 73.796048][ T930] process_one_work+0x996/0x1610 [ 73.796069][ T930] worker_thread+0x665/0x1080 [ 73.796090][ T930] kthread+0x2e9/0x3a0 [ 73.796109][ T930] ret_from_fork+0x1f/0x30 [ 73.796128][ T930] [ 73.796132][ T930] The buggy address belongs to the object at ffff888019d85d00 [ 73.796132][ T930] which belongs to the cache kmalloc-128 of size 128 [ 73.796147][ T930] The buggy address is located 4 bytes inside of [ 73.796147][ T930] 128-byte region [ffff888019d85d00, ffff888019d85d80) [ 73.796164][ T930] [ 73.796166][ T930] The buggy address belongs to the physical page: [ 73.796173][ T930] page:ffffea0000676140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19d85 [ 73.796192][ T930] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 73.796219][ T930] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888010c418c0 [ 73.796237][ T930] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 73.796247][ T930] page dumped because: kasan: bad access detected [ 73.796255][ T930] page_owner tracks the page as allocated [ 73.796260][ T930] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 6, tgid 6 (kworker/0:0), ts 73614081740, free_ts 73517094625 [ 73.796291][ T930] get_page_from_freelist+0xba2/0x3e00 [ 73.796313][ T930] __alloc_pages+0x1b2/0x500 [ 73.796329][ T930] alloc_pages+0x1aa/0x310 [ 73.796350][ T930] allocate_slab+0x26c/0x3c0 [ 73.796367][ T930] ___slab_alloc+0x985/0xd90 [ 73.796387][ T930] __slab_alloc.constprop.0+0x4d/0xa0 [ 73.796408][ T930] kmem_cache_alloc_trace+0x310/0x3f0 [ 73.796431][ T930] __hw_addr_add_ex+0x22d/0x7e0 [ 73.796451][ T930] dev_mc_add+0xbd/0x110 [ 73.796467][ T930] igmp6_group_added+0x4f0/0x5b0 [ 73.796492][ T930] __ipv6_dev_mc_inc+0x847/0xec0 [ 73.796523][ T930] addrconf_dad_work+0xc5f/0x12d0 [ 73.796543][ T930] process_one_work+0x996/0x1610 [ 73.796563][ T930] worker_thread+0x665/0x1080 [ 73.796583][ T930] kthread+0x2e9/0x3a0 [ 73.796600][ T930] ret_from_fork+0x1f/0x30 [ 73.796623][ T930] page last free stack trace: [ 73.796628][ T930] free_pcp_prepare+0x549/0xd20 [ 73.796653][ T930] free_unref_page+0x19/0x6a0 [ 73.796672][ T930] qlist_free_all+0x6a/0x170 [ 73.796691][ T930] kasan_quarantine_reduce+0x180/0x200 [ 73.796712][ T930] __kasan_slab_alloc+0xa2/0xc0 [ 73.796736][ T930] kmem_cache_alloc_node+0x255/0x3f0 [ 73.796759][ T930] __alloc_skb+0x215/0x340 [ 73.796777][ T930] alloc_skb_with_frags+0x93/0x730 [ 73.796798][ T930] sock_alloc_send_pskb+0x793/0x920 [ 73.796823][ T930] mld_newpack.isra.0+0x1c3/0x740 [ 73.796846][ T930] add_grhead+0x283/0x360 [ 73.796868][ T930] add_grec+0x106a/0x1530 [ 73.796891][ T930] mld_ifc_work+0x452/0xdc0 [ 73.796913][ T930] process_one_work+0x996/0x1610 [ 73.796935][ T930] worker_thread+0x665/0x1080 [ 73.796956][ T930] kthread+0x2e9/0x3a0 [ 73.796973][ T930] [ 73.796976][ T930] Memory state around the buggy address: [ 73.796983][ T930] ffff888019d85c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 73.796995][ T930] ffff888019d85c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.797008][ T930] >ffff888019d85d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.797017][ T930] ^ [ 73.797024][ T930] ffff888019d85d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.797036][ T930] ffff888019d85e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.797045][ T930] ================================================================== [ 73.797100][ T930] Kernel panic - not syncing: panic_on_warn set ... [ 73.797110][ T930] CPU: 0 PID: 930 Comm: kworker/u4:4 Not tainted 5.18.0-syzkaller-03023-g7e062cda7d90 #0 [ 73.797130][ T930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.797142][ T930] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 73.797168][ T930] Call Trace: [ 73.797174][ T930] [ 73.797180][ T930] dump_stack_lvl+0xcd/0x134 [ 73.797200][ T930] panic+0x2d7/0x636 [ 73.797218][ T930] ? panic_print_sys_info.part.0+0x10b/0x10b [ 73.797238][ T930] ? nf_confirm+0x575/0x5b0 [ 73.797260][ T930] ? nf_confirm+0x575/0x5b0 [ 73.797278][ T930] end_report.part.0+0x3f/0x7c [ 73.797297][ T930] kasan_report.cold+0x93/0x1c6 [ 73.797317][ T930] ? nf_confirm+0x575/0x5b0 [ 73.797336][ T930] nf_confirm+0x575/0x5b0 [ 73.797355][ T930] ipv4_confirm+0x17a/0x390 [ 73.797373][ T930] nf_hook_slow+0xc5/0x1f0 [ 73.797393][ T930] nf_hook+0x1cb/0x5b0 [ 73.797411][ T930] ? __ip_finish_output+0x650/0x650 [ 73.797430][ T930] ? dst_output+0x170/0x170 [ 73.797449][ T930] ? __ip_finish_output+0x650/0x650 [ 73.797468][ T930] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 73.797489][ T930] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 73.797514][ T930] ? xfrm_lookup_with_ifid+0xa6b/0x2240 [ 73.797534][ T930] ip_output+0x21f/0x310 [ 73.797552][ T930] ? __ip_finish_output+0x650/0x650 [ 73.797572][ T930] ip_local_out+0xaf/0x1a0 [ 73.797591][ T930] iptunnel_xmit+0x67a/0xa40 [ 73.797612][ T930] send4+0x426/0xe60 [ 73.797630][ T930] ? lock_release+0x780/0x780 [ 73.797650][ T930] ? wg_receive+0xb0/0xb0 [ 73.797668][ T930] ? rcu_read_lock_sched_held+0x3a/0x70 [ 73.797692][ T930] wg_socket_send_skb_to_peer+0x192/0x220 [ 73.797712][ T930] wg_socket_send_buffer_to_peer+0x11e/0x170 [ 73.797732][ T930] wg_packet_send_handshake_initiation+0x212/0x340 [ 73.797758][ T930] ? wg_prev_queue_dequeue+0x260/0x260 [ 73.797785][ T930] ? lockdep_hardirqs_on+0x79/0x100 [ 73.797807][ T930] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.797832][ T930] wg_packet_handshake_send_worker+0x18/0x30 [ 73.797856][ T930] process_one_work+0x996/0x1610 [ 73.797877][ T930] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 73.797898][ T930] ? rwlock_bug.part.0+0x90/0x90 [ 73.797919][ T930] ? _raw_spin_lock_irq+0x41/0x50 [ 73.797938][ T930] worker_thread+0x665/0x1080 [ 73.797960][ T930] ? process_one_work+0x1610/0x1610 [ 73.797979][ T930] kthread+0x2e9/0x3a0 [ 73.797994][ T930] ? kthread_complete_and_exit+0x40/0x40 [ 73.798014][ T930] ret_from_fork+0x1f/0x30 [ 73.798038][ T930] [ 73.798258][ T930] Kernel Offset: disabled