no interfaces have a carrier [ 27.510824][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.522818][ T4642] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 53.381360][ T5055] can: request_module (can-proto-0) failed. [ 53.414656][ T5055] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.15.211' (ECDSA) to the list of known hosts. 2022/12/23 02:06:24 parsed 1 programs 2022/12/23 02:06:24 executed programs: 0 [ 74.530029][ T5132] chnl_net:caif_netlink_parms(): no params data found [ 74.610030][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.617968][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.626139][ T5132] device bridge_slave_0 entered promiscuous mode [ 74.648284][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.655968][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.664095][ T5132] device bridge_slave_1 entered promiscuous mode [ 74.686061][ T5132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.698619][ T5132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.748762][ T5136] chnl_net:caif_netlink_parms(): no params data found [ 74.780877][ T5132] team0: Port device team_slave_0 added [ 74.814141][ T5132] team0: Port device team_slave_1 added [ 74.828866][ T5141] chnl_net:caif_netlink_parms(): no params data found [ 74.860536][ T5133] chnl_net:caif_netlink_parms(): no params data found [ 74.887627][ T5132] device hsr_slave_0 entered promiscuous mode [ 74.894426][ T5132] device hsr_slave_1 entered promiscuous mode [ 74.953345][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.961200][ T5136] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.969886][ T5136] device bridge_slave_0 entered promiscuous mode [ 74.977861][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.985299][ T5136] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.993306][ T5136] device bridge_slave_1 entered promiscuous mode [ 75.027480][ T5138] chnl_net:caif_netlink_parms(): no params data found [ 75.047931][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.055219][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.062907][ T5141] device bridge_slave_0 entered promiscuous mode [ 75.070535][ T5140] chnl_net:caif_netlink_parms(): no params data found [ 75.093554][ T5136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.112949][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.120868][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.129245][ T5141] device bridge_slave_1 entered promiscuous mode [ 75.157836][ T5141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.167706][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.175396][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.183087][ T5133] device bridge_slave_0 entered promiscuous mode [ 75.191708][ T5136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.231699][ T5141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.241066][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.248586][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.256521][ T5133] device bridge_slave_1 entered promiscuous mode [ 75.272851][ T5136] team0: Port device team_slave_0 added [ 75.320291][ T5136] team0: Port device team_slave_1 added [ 75.334087][ T5141] team0: Port device team_slave_0 added [ 75.340176][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.347727][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.355789][ T5138] device bridge_slave_0 entered promiscuous mode [ 75.371709][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.379008][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.386635][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.393744][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.403962][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.411152][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.419687][ T5140] device bridge_slave_0 entered promiscuous mode [ 75.428832][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.437625][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.445698][ T5140] device bridge_slave_1 entered promiscuous mode [ 75.453922][ T5141] team0: Port device team_slave_1 added [ 75.459897][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.467148][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.476327][ T5138] device bridge_slave_1 entered promiscuous mode [ 75.484568][ T5133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.539302][ T5133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.550451][ T5138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.562251][ T5138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.586643][ T5140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.596480][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.605958][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.643003][ T5136] device hsr_slave_0 entered promiscuous mode [ 75.650086][ T5136] device hsr_slave_1 entered promiscuous mode [ 75.657685][ T5136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.665635][ T5136] Cannot create hsr debugfs directory [ 75.679213][ T5140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.707456][ T5133] team0: Port device team_slave_0 added [ 75.723512][ T5138] team0: Port device team_slave_0 added [ 75.731847][ T5141] device hsr_slave_0 entered promiscuous mode [ 75.739032][ T5141] device hsr_slave_1 entered promiscuous mode [ 75.745598][ T5141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.753647][ T5141] Cannot create hsr debugfs directory [ 75.762688][ T5140] team0: Port device team_slave_0 added [ 75.770968][ T5140] team0: Port device team_slave_1 added [ 75.774137][ T7] cfg80211: failed to load regulatory.db [ 75.793433][ T5133] team0: Port device team_slave_1 added [ 75.810130][ T5138] team0: Port device team_slave_1 added [ 75.837242][ T5140] device hsr_slave_0 entered promiscuous mode [ 75.844383][ T5140] device hsr_slave_1 entered promiscuous mode [ 75.850898][ T5140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.858845][ T5140] Cannot create hsr debugfs directory [ 75.874863][ T5133] device hsr_slave_0 entered promiscuous mode [ 75.881468][ T5133] device hsr_slave_1 entered promiscuous mode [ 75.888457][ T5133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.896252][ T5133] Cannot create hsr debugfs directory [ 75.930861][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.958245][ T5138] device hsr_slave_0 entered promiscuous mode [ 75.966189][ T5138] device hsr_slave_1 entered promiscuous mode [ 75.972643][ T5138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.980448][ T5138] Cannot create hsr debugfs directory [ 76.022778][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.032167][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.066977][ T5132] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.088422][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.097152][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.106203][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.113350][ T895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.121929][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.130580][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.139059][ T895] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.146261][ T895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.192513][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.206631][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.217649][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.243980][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.252044][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.270236][ T5132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.281964][ T5132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.297903][ T5136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.318716][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.331168][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.340436][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.349423][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.357873][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.365867][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.386642][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.411460][ T5141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.422688][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.441039][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.459670][ T5138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.470398][ T5136] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.485235][ T5140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.495792][ T5133] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.514334][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.522076][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.530962][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.545003][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.555446][ T5141] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.571524][ T5138] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.596560][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.606387][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.615240][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.622292][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.630052][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.637630][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.645523][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.654488][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.662744][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.669843][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.677826][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.686317][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.695969][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.703047][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.710707][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.719214][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.727646][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.734738][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.742396][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.751148][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.760140][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.768411][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.797888][ T5140] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.807323][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.818852][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.828579][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.837840][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.848036][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.856433][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.866557][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.875019][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.889967][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.898993][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.906066][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.914176][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.922820][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.931322][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.938442][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.946130][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.954937][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.962485][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.970254][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.978684][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.987148][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.994253][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.001882][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.009982][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.017989][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.039727][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.048455][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.061559][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.070343][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.079623][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.088329][ T895] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.095433][ T895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.102929][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.111451][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.137771][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.153850][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.161703][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.170748][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.179659][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.186786][ T895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.194647][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.203848][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.212548][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.221307][ T895] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.228588][ T895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.237294][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.245923][ C0] hrtimer: interrupt took 30510 ns [ 77.246319][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.259944][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.268222][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.282790][ T5133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.295441][ T5133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.327713][ T5138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.339521][ T5138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.353620][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.361464][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.369797][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.378417][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.387139][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.396023][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.404554][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.412805][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.421777][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.430431][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.439275][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.447587][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.456112][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.464515][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.472906][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.481542][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.490062][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.497818][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.505734][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.538678][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.547439][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.572362][ T5138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.599400][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.620364][ T5140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.634932][ T5140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.661289][ T5136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.678524][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.710138][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.740445][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.749272][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.758265][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.767182][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.801667][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.819678][ T5141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.846670][ T5140] 8021q: adding VLAN 0 to HW filter on device batadv0 2022/12/23 02:06:32 executed programs: 7 [ 83.050244][ T5241] ================================================================== [ 83.058351][ T5241] BUG: KASAN: use-after-free in nr_release+0x66/0x460 [ 83.065167][ T5241] Write of size 4 at addr ffff8880216a1080 by task syz-executor.3/5241 [ 83.073406][ T5241] [ 83.075725][ T5241] CPU: 1 PID: 5241 Comm: syz-executor.3 Not tainted 6.1.0-syzkaller-13272-g8395ae05cb5a #0 [ 83.085714][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 83.095776][ T5241] Call Trace: [ 83.099051][ T5241] [ 83.101983][ T5241] dump_stack_lvl+0xd1/0x138 [ 83.106585][ T5241] print_report+0x15e/0x45d [ 83.111104][ T5241] ? __phys_addr+0xc8/0x140 [ 83.115624][ T5241] ? nr_release+0x66/0x460 [ 83.120050][ T5241] kasan_report+0xbf/0x1f0 [ 83.124475][ T5241] ? nr_release+0x66/0x460 [ 83.128905][ T5241] kasan_check_range+0x141/0x190 [ 83.133851][ T5241] nr_release+0x66/0x460 [ 83.138103][ T5241] __sock_release+0xcd/0x280 [ 83.142712][ T5241] sock_close+0x1c/0x20 [ 83.146876][ T5241] __fput+0x27c/0xa90 [ 83.150871][ T5241] ? __sock_release+0x280/0x280 [ 83.155733][ T5241] task_work_run+0x16f/0x270 [ 83.160340][ T5241] ? task_work_cancel+0x30/0x30 [ 83.165212][ T5241] exit_to_user_mode_prepare+0x23c/0x250 [ 83.170853][ T5241] syscall_exit_to_user_mode+0x1d/0x50 [ 83.176318][ T5241] do_syscall_64+0x46/0xb0 [ 83.180746][ T5241] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.186644][ T5241] RIP: 0033:0x4146db [ 83.190535][ T5241] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 83.210143][ T5241] RSP: 002b:00007fff06c71100 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 83.218560][ T5241] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004146db [ 83.226533][ T5241] RDX: 0000000000000a0a RSI: 0000001b2c62012c RDI: 0000000000000005 [ 83.234684][ T5241] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c620134 [ 83.242744][ T5241] R10: 00007fff06cee090 R11: 0000000000000293 R12: 000000000052c980 [ 83.250725][ T5241] R13: 000000000052c980 R14: 000000000052bf00 R15: 000000000052c104 [ 83.258715][ T5241] [ 83.261736][ T5241] [ 83.264059][ T5241] Allocated by task 5245: [ 83.268384][ T5241] kasan_save_stack+0x22/0x40 [ 83.273076][ T5241] kasan_set_track+0x25/0x30 [ 83.277668][ T5241] __kasan_kmalloc+0xa5/0xb0 [ 83.282264][ T5241] __kmalloc+0x5a/0xd0 [ 83.286346][ T5241] sk_prot_alloc+0x140/0x290 [ 83.290939][ T5241] sk_alloc+0x3a/0x7a0 [ 83.295013][ T5241] nr_create+0xb6/0x5f0 [ 83.299176][ T5241] __sock_create+0x359/0x790 [ 83.303775][ T5241] __sys_socket+0x133/0x250 [ 83.308288][ T5241] __x64_sys_socket+0x73/0xb0 [ 83.312983][ T5241] do_syscall_64+0x39/0xb0 [ 83.317410][ T5241] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.323315][ T5241] [ 83.325636][ T5241] Freed by task 5241: [ 83.329611][ T5241] kasan_save_stack+0x22/0x40 [ 83.334294][ T5241] kasan_set_track+0x25/0x30 [ 83.338888][ T5241] kasan_save_free_info+0x2e/0x40 [ 83.344032][ T5241] ____kasan_slab_free+0x160/0x1c0 [ 83.349182][ T5241] slab_free_freelist_hook+0x8b/0x1c0 [ 83.354578][ T5241] __kmem_cache_free+0xaf/0x3b0 [ 83.359437][ T5241] __sk_destruct+0x5df/0x750 [ 83.364046][ T5241] __sk_free+0x175/0x460 [ 83.368293][ T5241] sk_free+0x7c/0xa0 [ 83.372198][ T5241] nr_release+0x39e/0x460 [ 83.376550][ T5241] __sock_release+0xcd/0x280 [ 83.381161][ T5241] sock_close+0x1c/0x20 [ 83.385330][ T5241] __fput+0x27c/0xa90 [ 83.389322][ T5241] task_work_run+0x16f/0x270 [ 83.393945][ T5241] exit_to_user_mode_prepare+0x23c/0x250 [ 83.399626][ T5241] syscall_exit_to_user_mode+0x1d/0x50 [ 83.405115][ T5241] do_syscall_64+0x46/0xb0 [ 83.409566][ T5241] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.415480][ T5241] [ 83.417805][ T5241] The buggy address belongs to the object at ffff8880216a1000 [ 83.417805][ T5241] which belongs to the cache kmalloc-2k of size 2048 [ 83.431874][ T5241] The buggy address is located 128 bytes inside of [ 83.431874][ T5241] 2048-byte region [ffff8880216a1000, ffff8880216a1800) [ 83.445256][ T5241] [ 83.447594][ T5241] The buggy address belongs to the physical page: [ 83.454028][ T5241] page:ffffea000085a800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x216a0 [ 83.464201][ T5241] head:ffffea000085a800 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 83.474283][ T5241] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 83.482288][ T5241] raw: 00fff00000010200 ffff888012442000 dead000000000122 0000000000000000 [ 83.490899][ T5241] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 83.499494][ T5241] page dumped because: kasan: bad access detected [ 83.505914][ T5241] page_owner tracks the page as allocated [ 83.511638][ T5241] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14, tgid 14 (kworker/0:1), ts 80323786929, free_ts 79504971982 [ 83.533984][ T5241] get_page_from_freelist+0x119c/0x2ce0 [ 83.539659][ T5241] __alloc_pages+0x1cb/0x5b0 [ 83.544281][ T5241] alloc_pages+0x1aa/0x270 [ 83.548720][ T5241] allocate_slab+0x25f/0x350 [ 83.553336][ T5241] ___slab_alloc+0xa91/0x1400 [ 83.558019][ T5241] __slab_alloc.constprop.0+0x56/0xa0 [ 83.563406][ T5241] __kmem_cache_alloc_node+0x1a4/0x430 [ 83.568889][ T5241] __kmalloc_node_track_caller+0x4b/0xc0 [ 83.574556][ T5241] __alloc_skb+0xe9/0x310 [ 83.578921][ T5241] alloc_skb_with_frags+0x97/0x6c0 [ 83.584077][ T5241] sock_alloc_send_pskb+0x7a7/0x930 [ 83.589301][ T5241] mld_newpack.isra.0+0x1b9/0x770 [ 83.594366][ T5241] add_grhead+0x295/0x340 [ 83.598732][ T5241] add_grec+0x1082/0x1560 [ 83.603091][ T5241] mld_send_initial_cr.part.0+0xf6/0x230 [ 83.608754][ T5241] mld_dad_work+0x1d7/0x680 [ 83.613263][ T5241] page last free stack trace: [ 83.617937][ T5241] free_pcp_prepare+0x65c/0xc00 [ 83.622810][ T5241] free_unref_page+0x1d/0x490 [ 83.627514][ T5241] __unfreeze_partials+0x17c/0x1a0 [ 83.632661][ T5241] qlist_free_all+0x6a/0x170 [ 83.637285][ T5241] kasan_quarantine_reduce+0x192/0x220 [ 83.642789][ T5241] __kasan_slab_alloc+0x66/0x90 [ 83.647663][ T5241] __kmem_cache_alloc_node+0x1ea/0x430 [ 83.653124][ T5241] kmalloc_trace+0x26/0x60 [ 83.657560][ T5241] kobject_uevent_env+0x234/0x1620 [ 83.662675][ T5241] __kobject_del+0x160/0x1f0 [ 83.667280][ T5241] kobject_put+0x2f1/0x4d0 [ 83.671727][ T5241] net_rx_queue_update_kobjects+0x3f7/0x510 [ 83.677667][ T5241] netdev_unregister_kobject+0x15c/0x280 [ 83.683313][ T5241] unregister_netdevice_many_notify+0xdfe/0x19e0 [ 83.689655][ T5241] sit_exit_batch_net+0x534/0x750 [ 83.694703][ T5241] ops_exit_list+0x125/0x170 [ 83.699306][ T5241] [ 83.701624][ T5241] Memory state around the buggy address: [ 83.707241][ T5241] ffff8880216a0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.715295][ T5241] ffff8880216a1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.723360][ T5241] >ffff8880216a1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.731423][ T5241] ^ [ 83.735490][ T5241] ffff8880216a1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.743552][ T5241] ffff8880216a1180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.751617][ T5241] ================================================================== [ 83.761431][ T5241] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.768653][ T5241] CPU: 1 PID: 5241 Comm: syz-executor.3 Not tainted 6.1.0-syzkaller-13272-g8395ae05cb5a #0 [ 83.778631][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 83.788680][ T5241] Call Trace: [ 83.791949][ T5241] [ 83.794866][ T5241] dump_stack_lvl+0xd1/0x138 [ 83.799454][ T5241] panic+0x2cc/0x626 [ 83.803342][ T5241] ? panic_print_sys_info.part.0+0x110/0x110 [ 83.809325][ T5241] ? preempt_schedule_thunk+0x1a/0x20 [ 83.814698][ T5241] ? preempt_schedule_common+0x59/0xc0 [ 83.820154][ T5241] check_panic_on_warn.cold+0x19/0x35 [ 83.825523][ T5241] end_report.part.0+0x36/0x73 [ 83.830368][ T5241] ? nr_release+0x66/0x460 [ 83.834774][ T5241] kasan_report.cold+0xa/0xf [ 83.839363][ T5241] ? nr_release+0x66/0x460 [ 83.843774][ T5241] kasan_check_range+0x141/0x190 [ 83.848706][ T5241] nr_release+0x66/0x460 [ 83.853024][ T5241] __sock_release+0xcd/0x280 [ 83.857606][ T5241] sock_close+0x1c/0x20 [ 83.861752][ T5241] __fput+0x27c/0xa90 [ 83.865811][ T5241] ? __sock_release+0x280/0x280 [ 83.870824][ T5241] task_work_run+0x16f/0x270 [ 83.875409][ T5241] ? task_work_cancel+0x30/0x30 [ 83.880252][ T5241] exit_to_user_mode_prepare+0x23c/0x250 [ 83.885873][ T5241] syscall_exit_to_user_mode+0x1d/0x50 [ 83.891324][ T5241] do_syscall_64+0x46/0xb0 [ 83.895735][ T5241] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.901624][ T5241] RIP: 0033:0x4146db [ 83.905505][ T5241] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 83.925105][ T5241] RSP: 002b:00007fff06c71100 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 83.933507][ T5241] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004146db [ 83.941472][ T5241] RDX: 0000000000000a0a RSI: 0000001b2c62012c RDI: 0000000000000005 [ 83.949438][ T5241] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c620134 [ 83.957395][ T5241] R10: 00007fff06cee090 R11: 0000000000000293 R12: 000000000052c980 [ 83.965355][ T5241] R13: 000000000052c980 R14: 000000000052bf00 R15: 000000000052c104 [ 83.973321][ T5241] [ 83.976947][ T5241] Kernel Offset: disabled [ 83.981267][ T5241] Rebooting in 86400 seconds..