[ 45.844683][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.855183][ T41] device veth1_macvtap left promiscuous mode [ 45.861438][ T41] device veth0_macvtap left promiscuous mode [ 45.867719][ T41] device veth1_vlan left promiscuous mode [ 45.873610][ T41] device veth0_vlan left promiscuous mode [ 45.962846][ T41] team0 (unregistering): Port device team_slave_1 removed [ 45.972886][ T41] team0 (unregistering): Port device team_slave_0 removed [ 45.983108][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.994347][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.030117][ T41] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. 2023/02/18 09:27:04 ignoring optional flag "sandboxArg"="0" 2023/02/18 09:27:04 parsed 1 programs 2023/02/18 09:27:04 executed programs: 0 [ 60.212920][ T4390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.220931][ T4390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.228578][ T4390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.236278][ T4390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.243893][ T4390] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.251103][ T4390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.328004][ T5517] chnl_net:caif_netlink_parms(): no params data found [ 60.370427][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.377633][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.385346][ T5517] device bridge_slave_0 entered promiscuous mode [ 60.394585][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.401890][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.410828][ T5517] device bridge_slave_1 entered promiscuous mode [ 60.432995][ T5517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.444709][ T5517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.479601][ T5517] team0: Port device team_slave_0 added [ 60.489686][ T5517] team0: Port device team_slave_1 added [ 60.529631][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.537960][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.576978][ T5517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.598565][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.605508][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.637053][ T5517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.727602][ T5517] device hsr_slave_0 entered promiscuous mode [ 60.746064][ T5517] device hsr_slave_1 entered promiscuous mode [ 61.514570][ T5517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.524296][ T5517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.534103][ T5517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.543063][ T5517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.595320][ T5517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.606850][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.615639][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.627294][ T5517] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.637720][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.646275][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.655344][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.662787][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.684021][ T5517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.695602][ T5517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.707812][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.715626][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.725001][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.734718][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.741845][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.750316][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.759199][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.768016][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.776822][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.785575][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.794417][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.803054][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.811578][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.820129][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.828922][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.840062][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.848766][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.976742][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.985388][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.994998][ T5517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.012507][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.022983][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.044426][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.053142][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.064068][ T5517] device veth0_vlan entered promiscuous mode [ 62.073431][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.082518][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.093150][ T5517] device veth1_vlan entered promiscuous mode [ 62.113497][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.122791][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.131284][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.141286][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.151987][ T5517] device veth0_macvtap entered promiscuous mode [ 62.163262][ T5517] device veth1_macvtap entered promiscuous mode [ 62.178027][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.185373][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.194743][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.203835][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.212758][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.224403][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.233615][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.242468][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.252562][ T5517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.262458][ T5517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.271368][ T5517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.280538][ T5517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.297443][ T5075] Bluetooth: hci0: command 0x0409 tx timeout [ 62.330587][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.348004][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.350847][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.358575][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.372468][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.382312][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.377748][ T5075] Bluetooth: hci0: command 0x041b tx timeout 2023/02/18 09:27:09 executed programs: 11 [ 66.467321][ T5075] Bluetooth: hci0: command 0x040f tx timeout [ 68.282236][ T9] ================================================================== [ 68.290332][ T9] BUG: KASAN: vmalloc-out-of-bounds in ebt_unregister_table+0xc08/0xcf0 [ 68.298667][ T9] Read of size 4 at addr ffffc90003173000 by task kworker/u4:0/9 [ 68.306381][ T9] [ 68.308699][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.2.0-rc8-syzkaller-00083-g3ac88fa4605e-dirty #0 [ 68.319106][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 68.329158][ T9] Workqueue: netns cleanup_net [ 68.333925][ T9] Call Trace: [ 68.337206][ T9] [ 68.340137][ T9] dump_stack_lvl+0xd1/0x138 [ 68.344735][ T9] print_report+0x15e/0x45d [ 68.349251][ T9] ? ebt_unregister_table+0xc08/0xcf0 [ 68.354629][ T9] kasan_report+0xbf/0x1f0 [ 68.359062][ T9] ? ebt_unregister_table+0xc08/0xcf0 [ 68.364438][ T9] ebt_unregister_table+0xc08/0xcf0 [ 68.369639][ T9] ? lockdep_hardirqs_on+0x7d/0x100 [ 68.374840][ T9] ? __ebt_find_table+0x320/0x320 [ 68.379872][ T9] ? frame_filter_table_init+0x30/0x30 [ 68.385340][ T9] ops_exit_list+0xb0/0x170 [ 68.389854][ T9] cleanup_net+0x4ee/0xb10 [ 68.394278][ T9] ? unregister_pernet_device+0x80/0x80 [ 68.399834][ T9] process_one_work+0x9bf/0x1710 [ 68.404801][ T9] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 68.410182][ T9] ? rwlock_bug.part.0+0x90/0x90 [ 68.415128][ T9] ? _raw_spin_lock_irq+0x45/0x50 [ 68.420166][ T9] worker_thread+0x669/0x1090 [ 68.424852][ T9] ? process_one_work+0x1710/0x1710 [ 68.430060][ T9] kthread+0x2e8/0x3a0 [ 68.434128][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 68.439852][ T9] ret_from_fork+0x1f/0x30 [ 68.444286][ T9] [ 68.447327][ T9] [ 68.449651][ T9] Memory state around the buggy address: [ 68.455303][ T9] ffffc90003172f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 68.463373][ T9] ffffc90003172f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 68.471603][ T9] >ffffc90003173000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 68.479655][ T9] ^ [ 68.483717][ T9] ffffc90003173080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 68.491778][ T9] ffffc90003173100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 68.499838][ T9] ================================================================== [ 68.521343][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.528578][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.2.0-rc8-syzkaller-00083-g3ac88fa4605e-dirty #0 [ 68.539033][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 68.549203][ T9] Workqueue: netns cleanup_net [ 68.554000][ T9] Call Trace: [ 68.557283][ T9] [ 68.560220][ T9] dump_stack_lvl+0xd1/0x138 [ 68.564824][ T9] panic+0x2cc/0x626 [ 68.568727][ T9] ? panic_print_sys_info.part.0+0x110/0x110 [ 68.574732][ T9] ? preempt_schedule_thunk+0x1a/0x20 [ 68.580120][ T9] ? preempt_schedule_common+0x59/0xc0 [ 68.585599][ T9] check_panic_on_warn.cold+0x19/0x35 [ 68.590985][ T9] end_report.part.0+0x36/0x73 [ 68.595760][ T9] ? ebt_unregister_table+0xc08/0xcf0 [ 68.601152][ T9] kasan_report.cold+0xa/0xf [ 68.605775][ T9] ? ebt_unregister_table+0xc08/0xcf0 [ 68.611176][ T9] ebt_unregister_table+0xc08/0xcf0 [ 68.616393][ T9] ? lockdep_hardirqs_on+0x7d/0x100 [ 68.621608][ T9] ? __ebt_find_table+0x320/0x320 [ 68.626656][ T9] ? frame_filter_table_init+0x30/0x30 [ 68.632130][ T9] ops_exit_list+0xb0/0x170 [ 68.636653][ T9] cleanup_net+0x4ee/0xb10 [ 68.641086][ T9] ? unregister_pernet_device+0x80/0x80 [ 68.646643][ T9] process_one_work+0x9bf/0x1710 [ 68.651596][ T9] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 68.656986][ T9] ? rwlock_bug.part.0+0x90/0x90 [ 68.661931][ T9] ? _raw_spin_lock_irq+0x45/0x50 [ 68.666965][ T9] worker_thread+0x669/0x1090 [ 68.671651][ T9] ? process_one_work+0x1710/0x1710 [ 68.676854][ T9] kthread+0x2e8/0x3a0 [ 68.680926][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 68.686578][ T9] ret_from_fork+0x1f/0x30 [ 68.691021][ T9] [ 68.694713][ T9] Kernel Offset: disabled [ 68.699114][ T9] Rebooting in 86400 seconds..