forked to background, child pid 3172 no interfaces have a carrier [ 21.649593][ T3173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.660270][ T3173] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.204' (ECDSA) to the list of known hosts. syzkaller login: [ 50.325737][ T3595] chnl_net:caif_netlink_parms(): no params data found [ 50.363765][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.371281][ T3595] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.379142][ T3595] device bridge_slave_0 entered promiscuous mode [ 50.388091][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.395828][ T3595] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.403676][ T3595] device bridge_slave_1 entered promiscuous mode [ 50.421867][ T3595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.432554][ T3595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.452620][ T3595] team0: Port device team_slave_0 added [ 50.459916][ T3595] team0: Port device team_slave_1 added [ 50.476373][ T3595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.483503][ T3595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.509644][ T3595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.521952][ T3595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.528923][ T3595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.554951][ T3595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.578420][ T3595] device hsr_slave_0 entered promiscuous mode [ 50.585056][ T3595] device hsr_slave_1 entered promiscuous mode [ 50.655406][ T3595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.665166][ T3595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.674202][ T3595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.682663][ T3595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.701853][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.709061][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.716937][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.724015][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.761400][ T3595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.772348][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.782897][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.791218][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.799213][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 50.811719][ T3595] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.821332][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.829794][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.837139][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.848660][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.858047][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.865089][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.888244][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.898382][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.907090][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.915627][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.923984][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.934029][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.952288][ T3595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.961852][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.969520][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.063800][ T3595] device veth0_vlan entered promiscuous mode [ 51.071174][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.080363][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.089273][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.097520][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.109859][ T3595] device veth1_vlan entered promiscuous mode [ 51.126197][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.134237][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.143247][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.152715][ T3595] device veth0_macvtap entered promiscuous mode [ 51.162095][ T3595] device veth1_macvtap entered promiscuous mode [ 51.176330][ T3595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.183792][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.193885][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.204389][ T3595] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program [ 51.213858][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.223623][ T3595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.232980][ T3595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.241850][ T3595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.250684][ T3595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.283560][ T3611] FAULT_INJECTION: forcing a failure. [ 51.283560][ T3611] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 51.297835][ T3611] CPU: 0 PID: 3611 Comm: syz-executor119 Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 51.308340][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.318417][ T3611] Call Trace: [ 51.321700][ T3611] [ 51.324617][ T3611] dump_stack_lvl+0xcd/0x134 [ 51.329230][ T3611] should_fail.cold+0x5/0xa [ 51.333726][ T3611] prepare_alloc_pages+0x17b/0x570 [ 51.338837][ T3611] __alloc_pages+0x12f/0x500 [ 51.343422][ T3611] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 51.350189][ T3611] ? ___slab_alloc+0x47e/0xf20 [ 51.354950][ T3611] alloc_pages+0x1aa/0x310 [ 51.359362][ T3611] allocate_slab+0x26c/0x3c0 [ 51.363946][ T3611] ___slab_alloc+0x8df/0xf20 [ 51.368530][ T3611] ? __build_skb+0x21/0x60 [ 51.372950][ T3611] ? __build_skb+0x21/0x60 [ 51.377359][ T3611] __slab_alloc.constprop.0+0x4d/0xa0 [ 51.382724][ T3611] ? __build_skb+0x21/0x60 [ 51.387138][ T3611] kmem_cache_alloc+0x360/0x3b0 [ 51.391990][ T3611] __build_skb+0x21/0x60 [ 51.396222][ T3611] build_skb+0x1e/0x280 [ 51.400618][ T3611] __tun_build_skb+0x2c/0x330 [ 51.405306][ T3611] tun_build_skb+0x5e3/0x1170 [ 51.409990][ T3611] ? tun_xdp_act+0xa30/0xa30 [ 51.414577][ T3611] ? __lock_acquire+0xbca/0x56c0 [ 51.419514][ T3611] tun_get_user+0x7ef/0x3e30 [ 51.424109][ T3611] ? tun_build_skb+0x1170/0x1170 [ 51.429050][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 51.433907][ T3611] tun_chr_write_iter+0xdb/0x200 [ 51.438838][ T3611] new_sync_write+0x38a/0x560 [ 51.443506][ T3611] ? new_sync_read+0x5f0/0x5f0 [ 51.448271][ T3611] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.454499][ T3611] ? security_file_permission+0xab/0xd0 [ 51.460039][ T3611] vfs_write+0x7c0/0xac0 [ 51.464276][ T3611] ksys_write+0x127/0x250 [ 51.468589][ T3611] ? __ia32_sys_read+0xb0/0xb0 [ 51.473339][ T3611] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.479229][ T3611] do_syscall_64+0x35/0xb0 [ 51.483639][ T3611] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.489529][ T3611] RIP: 0033:0x7faeeb3afd83 [ 51.493933][ T3611] Code: e9 0e ec ff ff bf 01 00 00 00 e8 a8 6f 00 00 0f 1f 84 00 00 00 00 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 51.513538][ T3611] RSP: 002b:00007fff57b81668 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.521951][ T3611] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007faeeb3afd83 [ 51.529916][ T3611] RDX: 000000000000000e RSI: 0000000020000100 RDI: 00000000000000c8 [ 51.537878][ T3611] RBP: 00007fff57b81690 R08: 0000000000000000 R09: 0000000000000001 [ 51.545837][ T3611] R10: 00007fff57b81407 R11: 0000000000000246 R12: 0000000000000003 [ 51.553884][ T3611] R13: 00007fff57b816b0 R14: 00007fff57b816a0 R15: 0000000000000003 [ 51.561866][ T3611] [ 51.576858][ T3611] device syz_tun entered promiscuous mode executing program [ 51.583736][ T3611] device batadv_slave_0 entered promiscuous mode [ 51.597532][ T3612] FAULT_INJECTION: forcing a failure. [ 51.597532][ T3612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 51.611175][ T3612] CPU: 0 PID: 3612 Comm: syz-executor119 Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 51.621676][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.631729][ T3612] Call Trace: [ 51.635002][ T3612] [ 51.637919][ T3612] dump_stack_lvl+0xcd/0x134 [ 51.642505][ T3612] should_fail.cold+0x5/0xa [ 51.647017][ T3612] prepare_alloc_pages+0x17b/0x570 [ 51.652154][ T3612] __alloc_pages+0x12f/0x500 [ 51.656743][ T3612] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 51.663512][ T3612] ? ___slab_alloc+0x47e/0xf20 [ 51.668271][ T3612] alloc_pages+0x1aa/0x310 [ 51.672679][ T3612] allocate_slab+0x26c/0x3c0 [ 51.677314][ T3612] ___slab_alloc+0x8df/0xf20 [ 51.681899][ T3612] ? __build_skb+0x21/0x60 [ 51.686316][ T3612] ? __build_skb+0x21/0x60 [ 51.690719][ T3612] __slab_alloc.constprop.0+0x4d/0xa0 [ 51.696078][ T3612] ? __build_skb+0x21/0x60 [ 51.700485][ T3612] kmem_cache_alloc+0x360/0x3b0 [ 51.705327][ T3612] __build_skb+0x21/0x60 [ 51.709559][ T3612] build_skb+0x1e/0x280 [ 51.713707][ T3612] __tun_build_skb+0x2c/0x330 [ 51.718380][ T3612] tun_build_skb+0x5e3/0x1170 [ 51.723054][ T3612] ? tun_xdp_act+0xa30/0xa30 [ 51.727635][ T3612] ? __lock_acquire+0xbca/0x56c0 [ 51.732570][ T3612] tun_get_user+0x7ef/0x3e30 [ 51.737159][ T3612] ? tun_build_skb+0x1170/0x1170 [ 51.742087][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 51.746936][ T3612] tun_chr_write_iter+0xdb/0x200 [ 51.751865][ T3612] new_sync_write+0x38a/0x560 [ 51.756529][ T3612] ? new_sync_read+0x5f0/0x5f0 [ 51.761291][ T3612] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.767514][ T3612] ? security_file_permission+0xab/0xd0 [ 51.773050][ T3612] vfs_write+0x7c0/0xac0 [ 51.777280][ T3612] ksys_write+0x127/0x250 [ 51.781742][ T3612] ? __ia32_sys_read+0xb0/0xb0 [ 51.786611][ T3612] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.793242][ T3612] do_syscall_64+0x35/0xb0 [ 51.797647][ T3612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.803528][ T3612] RIP: 0033:0x7faeeb3afd83 [ 51.807927][ T3612] Code: e9 0e ec ff ff bf 01 00 00 00 e8 a8 6f 00 00 0f 1f 84 00 00 00 00 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 51.827518][ T3612] RSP: 002b:00007fff57b81668 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.835919][ T3612] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007faeeb3afd83 [ 51.843874][ T3612] RDX: 000000000000000e RSI: 0000000020000100 RDI: 00000000000000c8 [ 51.851913][ T3612] RBP: 00007fff57b81690 R08: 0000000000000000 R09: 0000000000000001 [ 51.859953][ T3612] R10: 00007fff57b81407 R11: 0000000000000246 R12: 0000000000000003 [ 51.867907][ T3612] R13: 00007fff57b816b0 R14: 00007fff57b816a0 R15: 00007fff57b8167c [ 51.875874][ T3612] executing program [ 51.921067][ T3613] FAULT_INJECTION: forcing a failure. [ 51.921067][ T3613] name failslab, interval 1, probability 0, space 0, times 1 [ 51.933776][ T3613] CPU: 1 PID: 3613 Comm: syz-executor119 Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 51.944666][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.954995][ T3613] Call Trace: [ 51.958259][ T3613] [ 51.961171][ T3613] dump_stack_lvl+0xcd/0x134 [ 51.965751][ T3613] should_fail.cold+0x5/0xa [ 51.970237][ T3613] should_failslab+0x5/0x10 [ 51.974722][ T3613] kmem_cache_alloc_lru+0x65/0x720 [ 51.979815][ T3613] ? sock_alloc_inode+0x23/0x1d0 [ 51.984738][ T3613] sock_alloc_inode+0x23/0x1d0 [ 51.989484][ T3613] ? sock_free_inode+0x20/0x20 [ 51.994235][ T3613] alloc_inode+0x61/0x230 [ 51.998554][ T3613] new_inode_pseudo+0x14/0xe0 [ 52.003221][ T3613] sock_alloc+0x3c/0x260 [ 52.007452][ T3613] __sock_create+0xb9/0x790 [ 52.011944][ T3613] __sys_socket+0xef/0x200 [ 52.016552][ T3613] ? compat_sock_ioctl+0x660/0x660 [ 52.021659][ T3613] __x64_sys_socket+0x6f/0xb0 [ 52.026323][ T3613] ? syscall_enter_from_user_mode+0x21/0x70 [ 52.032201][ T3613] do_syscall_64+0x35/0xb0 [ 52.036604][ T3613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.042485][ T3613] RIP: 0033:0x7faeeb3ee4f9 [ 52.046885][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.066482][ T3613] RSP: 002b:00007fff57b81668 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 52.074884][ T3613] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007faeeb3ee4f9 [ 52.082841][ T3613] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 52.090795][ T3613] RBP: 00007fff57b81690 R08: 0000000000000001 R09: 000000000000000a [ 52.098749][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 52.106700][ T3613] R13: 00007fff57b816b0 R14: 00007fff57b816a0 R15: 00007fff57b8167c [ 52.114666][ T3613] executing program [ 52.122536][ T3613] socket: no more sockets [ 52.129911][ T3614] FAULT_INJECTION: forcing a failure. [ 52.129911][ T3614] name failslab, interval 1, probability 0, space 0, times 0 [ 52.142575][ T3614] CPU: 0 PID: 3614 Comm: syz-executor119 Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 52.153072][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.163121][ T3614] Call Trace: [ 52.166726][ T3614] [ 52.169635][ T3614] dump_stack_lvl+0xcd/0x134 [ 52.174211][ T3614] should_fail.cold+0x5/0xa [ 52.178698][ T3614] should_failslab+0x5/0x10 [ 52.183183][ T3614] kmem_cache_alloc_lru+0x65/0x720 [ 52.188277][ T3614] ? sock_alloc_inode+0x23/0x1d0 [ 52.193220][ T3614] sock_alloc_inode+0x23/0x1d0 [ 52.197965][ T3614] ? sock_free_inode+0x20/0x20 [ 52.202719][ T3614] alloc_inode+0x61/0x230 [ 52.207210][ T3614] new_inode_pseudo+0x14/0xe0 [ 52.211988][ T3614] sock_alloc+0x3c/0x260 [ 52.216219][ T3614] __sock_create+0xb9/0x790 [ 52.220727][ T3614] __sys_socket+0xef/0x200 [ 52.225129][ T3614] ? compat_sock_ioctl+0x660/0x660 [ 52.230239][ T3614] __x64_sys_socket+0x6f/0xb0 [ 52.234999][ T3614] ? syscall_enter_from_user_mode+0x21/0x70 [ 52.240880][ T3614] do_syscall_64+0x35/0xb0 [ 52.245285][ T3614] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.251170][ T3614] RIP: 0033:0x7faeeb3ee4f9 [ 52.255573][ T3614] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.275177][ T3614] RSP: 002b:00007fff57b81668 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 52.283581][ T3614] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007faeeb3ee4f9 [ 52.291550][ T3614] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 52.299861][ T3614] RBP: 00007fff57b81690 R08: 0000000000000001 R09: 000000000000000a [ 52.307834][ T3614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 executing program [ 52.315818][ T3614] R13: 00007fff57b816b0 R14: 00007fff57b816a0 R15: 00007fff57b8167c [ 52.323801][ T3614] [ 52.329844][ T3614] socket: no more sockets [ 52.338737][ T3615] FAULT_INJECTION: forcing a failure. [ 52.338737][ T3615] name failslab, interval 1, probability 0, space 0, times 0 [ 52.351465][ T3615] CPU: 1 PID: 3615 Comm: syz-executor119 Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 52.362710][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.372773][ T3615] Call Trace: [ 52.376039][ T3615] [ 52.378955][ T3615] dump_stack_lvl+0xcd/0x134 [ 52.383536][ T3615] should_fail.cold+0x5/0xa [ 52.388031][ T3615] should_failslab+0x5/0x10 [ 52.392872][ T3615] kmem_cache_alloc_node+0x65/0x3f0 [ 52.398052][ T3615] ? __alloc_skb+0x215/0x340 [ 52.402632][ T3615] __alloc_skb+0x215/0x340 [ 52.407046][ T3615] __pskb_copy_fclone+0xf8/0xe50 [ 52.411999][ T3615] hsr_get_untagged_frame+0x113/0x5a0 [ 52.417361][ T3615] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 52.423604][ T3615] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 52.429828][ T3615] ? hsr_register_frame_out+0x1da/0x2a0 [ 52.435361][ T3615] hsr_forward_skb+0xc78/0x1c60 [ 52.440200][ T3615] ? prp_drop_frame+0x150/0x150 [ 52.445043][ T3615] ? prp_fill_frame_info+0x6b0/0x6b0 [ 52.450325][ T3615] ? rcu_read_lock_bh_held+0x25/0x60 [ 52.455625][ T3615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 52.461859][ T3615] ? hsr_node_get_first+0x50/0xe0 [ 52.466878][ T3615] hsr_handle_frame+0x565/0x790 [ 52.471715][ T3615] ? hsr_handle_frame+0x740/0x790 [ 52.476724][ T3615] ? hsr_nl_nodedown+0x3b0/0x3b0 [ 52.481646][ T3615] __netif_receive_skb_core+0xa8c/0x3a60 [ 52.487267][ T3615] ? __lock_acquire+0xbca/0x56c0 [ 52.492195][ T3615] ? generic_xdp_tx+0x6d0/0x6d0 [ 52.497038][ T3615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 52.503093][ T3615] ? find_held_lock+0x2d/0x110 [ 52.507851][ T3615] __netif_receive_skb_one_core+0xae/0x180 [ 52.513662][ T3615] ? __netif_receive_skb_core+0x3a60/0x3a60 [ 52.519544][ T3615] ? ktime_get_with_offset+0x3f2/0x500 [ 52.525005][ T3615] ? lockdep_hardirqs_on+0x79/0x100 [ 52.530233][ T3615] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 52.535936][ T3615] ? ktime_get_with_offset+0x36d/0x500 [ 52.541388][ T3615] __netif_receive_skb+0x24/0x1b0 [ 52.546406][ T3615] netif_receive_skb+0x13e/0x8e0 [ 52.551333][ T3615] ? __netif_receive_skb+0x1b0/0x1b0 [ 52.556610][ T3615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 52.562867][ T3615] ? skb_set_owner_w+0x269/0x420 [ 52.567800][ T3615] tun_rx_batched.isra.0+0x460/0x720 [ 52.573083][ T3615] ? tun_xdp+0x460/0x460 [ 52.577318][ T3615] ? lock_release+0x720/0x720 [ 52.581984][ T3615] ? tun_get_user+0x26b6/0x3e30 [ 52.586827][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 52.591684][ T3615] ? eth_type_trans+0x29e/0x640 [ 52.596525][ T3615] ? __local_bh_enable_ip+0xa0/0x120 [ 52.601809][ T3615] tun_get_user+0x28b7/0x3e30 [ 52.606508][ T3615] ? tun_build_skb+0x1170/0x1170 [ 52.611458][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 52.616331][ T3615] tun_chr_write_iter+0xdb/0x200 [ 52.621277][ T3615] new_sync_write+0x38a/0x560 [ 52.625978][ T3615] ? new_sync_read+0x5f0/0x5f0 [ 52.630755][ T3615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 52.636987][ T3615] ? security_file_permission+0xab/0xd0 [ 52.642543][ T3615] vfs_write+0x7c0/0xac0 [ 52.646778][ T3615] ksys_write+0x127/0x250 [ 52.651105][ T3615] ? __ia32_sys_read+0xb0/0xb0 [ 52.655862][ T3615] ? syscall_enter_from_user_mode+0x21/0x70 [ 52.661761][ T3615] do_syscall_64+0x35/0xb0 [ 52.666189][ T3615] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.672078][ T3615] RIP: 0033:0x7faeeb3afd83 [ 52.676487][ T3615] Code: e9 0e ec ff ff bf 01 00 00 00 e8 a8 6f 00 00 0f 1f 84 00 00 00 00 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 52.696110][ T3615] RSP: 002b:00007fff57b81668 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.704520][ T3615] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007faeeb3afd83 [ 52.712483][ T3615] RDX: 000000000000000e RSI: 0000000020000100 RDI: 00000000000000c8 [ 52.720445][ T3615] RBP: 00007fff57b81690 R08: 0000000000000000 R09: 0000000000000001 [ 52.728421][ T3615] R10: 00007fff57b81407 R11: 0000000000000246 R12: 0000000000000003 [ 52.736401][ T3615] R13: 00007fff57b816b0 R14: 00007fff57b816a0 R15: 00007fff57b8167c [ 52.744387][ T3615] [ 52.747692][ T3615] general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] PREEMPT SMP KASAN [ 52.759410][ T3615] KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] [ 52.767809][ T3615] CPU: 1 PID: 3615 Comm: syz-executor119 Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 52.778296][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.788345][ T3615] RIP: 0010:skb_clone+0x107/0x3c0 [ 52.793378][ T3615] Code: 00 00 49 8b 5c 24 28 48 85 db 0f 85 ec 00 00 00 e8 2e 9d 40 fa 4c 8d 7d 7e 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 <0f> b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 d3 01 00 00 [ 52.812977][ T3615] RSP: 0018:ffffc9000389f488 EFLAGS: 00010217 [ 52.819035][ T3615] RAX: dffffc0000000000 RBX: ffffc9000389f598 RCX: 0000000000000000 [ 52.826996][ T3615] RDX: 000000000000000f RSI: ffffffff87388592 RDI: 0000000000000000 [ 52.834961][ T3615] RBP: 0000000000000000 R08: 0000000000000140 R09: ffffffff8bed9373 [ 52.842927][ T3615] R10: fffffbfff17db26e R11: 0000000000000000 R12: ffff8880247e6c80 [ 52.850890][ T3615] R13: 0000000000000a20 R14: ffff8880247e6d48 R15: 000000000000007e [ 52.858864][ T3615] FS: 00005555569b1300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 52.867787][ T3615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.874537][ T3615] CR2: 00007faeeb423dd0 CR3: 00000000247e4000 CR4: 0000000000350ee0 [ 52.882503][ T3615] Call Trace: [ 52.885765][ T3615] [ 52.888850][ T3615] hsr_get_untagged_frame+0x4e/0x5a0 [ 52.894117][ T3615] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 52.900343][ T3615] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 52.906563][ T3615] ? hsr_register_frame_out+0x1da/0x2a0 [ 52.912114][ T3615] hsr_forward_skb+0xc78/0x1c60 [ 52.916964][ T3615] ? prp_drop_frame+0x150/0x150 [ 52.921888][ T3615] ? prp_fill_frame_info+0x6b0/0x6b0 [ 52.927161][ T3615] ? rcu_read_lock_bh_held+0x25/0x60 [ 52.932425][ T3615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 52.938639][ T3615] ? hsr_node_get_first+0x50/0xe0 [ 52.943660][ T3615] hsr_handle_frame+0x565/0x790 [ 52.948490][ T3615] ? hsr_handle_frame+0x740/0x790 [ 52.954032][ T3615] ? hsr_nl_nodedown+0x3b0/0x3b0 [ 52.958955][ T3615] __netif_receive_skb_core+0xa8c/0x3a60 [ 52.964721][ T3615] ? __lock_acquire+0xbca/0x56c0 [ 52.969870][ T3615] ? generic_xdp_tx+0x6d0/0x6d0 [ 52.974717][ T3615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 52.980699][ T3615] ? find_held_lock+0x2d/0x110 [ 52.985447][ T3615] __netif_receive_skb_one_core+0xae/0x180 [ 52.991237][ T3615] ? __netif_receive_skb_core+0x3a60/0x3a60 [ 52.997117][ T3615] ? ktime_get_with_offset+0x3f2/0x500 [ 53.002564][ T3615] ? lockdep_hardirqs_on+0x79/0x100 [ 53.007760][ T3615] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 53.013474][ T3615] ? ktime_get_with_offset+0x36d/0x500 [ 53.018931][ T3615] __netif_receive_skb+0x24/0x1b0 [ 53.023938][ T3615] netif_receive_skb+0x13e/0x8e0 [ 53.028855][ T3615] ? __netif_receive_skb+0x1b0/0x1b0 [ 53.034119][ T3615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.040356][ T3615] ? skb_set_owner_w+0x269/0x420 [ 53.045280][ T3615] tun_rx_batched.isra.0+0x460/0x720 [ 53.050569][ T3615] ? tun_xdp+0x460/0x460 [ 53.054805][ T3615] ? lock_release+0x720/0x720 [ 53.059463][ T3615] ? tun_get_user+0x26b6/0x3e30 [ 53.064296][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 53.069127][ T3615] ? eth_type_trans+0x29e/0x640 [ 53.073959][ T3615] ? __local_bh_enable_ip+0xa0/0x120 [ 53.079240][ T3615] tun_get_user+0x28b7/0x3e30 [ 53.083918][ T3615] ? tun_build_skb+0x1170/0x1170 [ 53.088852][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 53.093683][ T3615] tun_chr_write_iter+0xdb/0x200 [ 53.098601][ T3615] new_sync_write+0x38a/0x560 [ 53.103255][ T3615] ? new_sync_read+0x5f0/0x5f0 [ 53.108000][ T3615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.114222][ T3615] ? security_file_permission+0xab/0xd0 [ 53.119752][ T3615] vfs_write+0x7c0/0xac0 [ 53.124004][ T3615] ksys_write+0x127/0x250 [ 53.128316][ T3615] ? __ia32_sys_read+0xb0/0xb0 [ 53.133060][ T3615] ? syscall_enter_from_user_mode+0x21/0x70 [ 53.138960][ T3615] do_syscall_64+0x35/0xb0 [ 53.143367][ T3615] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.149250][ T3615] RIP: 0033:0x7faeeb3afd83 [ 53.153649][ T3615] Code: e9 0e ec ff ff bf 01 00 00 00 e8 a8 6f 00 00 0f 1f 84 00 00 00 00 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 53.173245][ T3615] RSP: 002b:00007fff57b81668 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.181649][ T3615] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007faeeb3afd83 [ 53.189606][ T3615] RDX: 000000000000000e RSI: 0000000020000100 RDI: 00000000000000c8 [ 53.197566][ T3615] RBP: 00007fff57b81690 R08: 0000000000000000 R09: 0000000000000001 [ 53.205530][ T3615] R10: 00007fff57b81407 R11: 0000000000000246 R12: 0000000000000003 [ 53.213494][ T3615] R13: 00007fff57b816b0 R14: 00007fff57b816a0 R15: 00007fff57b8167c [ 53.221637][ T3615] [ 53.224638][ T3615] Modules linked in: [ 53.228557][ T3615] ---[ end trace 0000000000000000 ]--- [ 53.233997][ T3615] RIP: 0010:skb_clone+0x107/0x3c0 [ 53.239045][ T3615] Code: 00 00 49 8b 5c 24 28 48 85 db 0f 85 ec 00 00 00 e8 2e 9d 40 fa 4c 8d 7d 7e 48 b8 00 00 00 00 00 fc ff df 4c 89 fa 48 c1 ea 03 <0f> b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 d3 01 00 00 [ 53.258674][ T3615] RSP: 0018:ffffc9000389f488 EFLAGS: 00010217 [ 53.264734][ T3615] RAX: dffffc0000000000 RBX: ffffc9000389f598 RCX: 0000000000000000 [ 53.272743][ T3615] RDX: 000000000000000f RSI: ffffffff87388592 RDI: 0000000000000000 [ 53.280735][ T3615] RBP: 0000000000000000 R08: 0000000000000140 R09: ffffffff8bed9373 [ 53.288716][ T3615] R10: fffffbfff17db26e R11: 0000000000000000 R12: ffff8880247e6c80 [ 53.296693][ T3615] R13: 0000000000000a20 R14: ffff8880247e6d48 R15: 000000000000007e [ 53.304680][ T3615] FS: 00005555569b1300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 53.313628][ T3615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.320219][ T3615] CR2: 00007faeeb423dd0 CR3: 00000000247e4000 CR4: 0000000000350ee0 [ 53.328206][ T3615] Kernel panic - not syncing: Fatal exception in interrupt [ 53.335451][ T3615] Kernel Offset: disabled [ 53.340117][ T3615] Rebooting in 86400 seconds..