forked to background, child pid 4646 [ 29.779980][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.791956][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 53.847747][ T5063] can: request_module (can-proto-0) failed. [ 53.878504][ T5063] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. 2022/12/17 19:55:15 parsed 1 programs 2022/12/17 19:55:16 executed programs: 0 [ 75.386196][ T5139] chnl_net:caif_netlink_parms(): no params data found [ 75.435928][ T5142] chnl_net:caif_netlink_parms(): no params data found [ 75.454620][ T5138] chnl_net:caif_netlink_parms(): no params data found [ 75.526057][ T5147] chnl_net:caif_netlink_parms(): no params data found [ 75.565003][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.573423][ T5139] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.581831][ T5139] device bridge_slave_0 entered promiscuous mode [ 75.590050][ T5145] chnl_net:caif_netlink_parms(): no params data found [ 75.622945][ T5146] chnl_net:caif_netlink_parms(): no params data found [ 75.635119][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.645080][ T5139] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.653027][ T5139] device bridge_slave_1 entered promiscuous mode [ 75.665556][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.674188][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.682971][ T5142] device bridge_slave_0 entered promiscuous mode [ 75.691711][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.699627][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.707437][ T5142] device bridge_slave_1 entered promiscuous mode [ 75.729766][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.736954][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.744765][ T5138] device bridge_slave_0 entered promiscuous mode [ 75.795348][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.803448][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.812047][ T5138] device bridge_slave_1 entered promiscuous mode [ 75.820806][ T5142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.837333][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.844503][ T5147] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.852698][ T5147] device bridge_slave_0 entered promiscuous mode [ 75.874932][ T5139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.892172][ T5142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.908394][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.915724][ T5147] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.923829][ T5147] device bridge_slave_1 entered promiscuous mode [ 75.931120][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.938193][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.946511][ T5146] device bridge_slave_0 entered promiscuous mode [ 75.955093][ T5139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.994949][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.005584][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.013522][ T5146] device bridge_slave_1 entered promiscuous mode [ 76.028607][ T5138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.030711][ T898] cfg80211: failed to load regulatory.db [ 76.055112][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.062379][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.070980][ T5145] device bridge_slave_0 entered promiscuous mode [ 76.080225][ T5147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.105663][ T5138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.117088][ T5142] team0: Port device team_slave_0 added [ 76.123160][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.130491][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.138115][ T5145] device bridge_slave_1 entered promiscuous mode [ 76.146346][ T5147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.166155][ T5139] team0: Port device team_slave_0 added [ 76.179704][ T5142] team0: Port device team_slave_1 added [ 76.200872][ T5146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.210999][ T5139] team0: Port device team_slave_1 added [ 76.226442][ T5138] team0: Port device team_slave_0 added [ 76.248725][ T5146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.259435][ T5138] team0: Port device team_slave_1 added [ 76.274387][ T5145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.285308][ T5147] team0: Port device team_slave_0 added [ 76.302405][ T5147] team0: Port device team_slave_1 added [ 76.326279][ T5145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.365015][ T5142] device hsr_slave_0 entered promiscuous mode [ 76.371698][ T5142] device hsr_slave_1 entered promiscuous mode [ 76.391276][ T5139] device hsr_slave_0 entered promiscuous mode [ 76.397883][ T5139] device hsr_slave_1 entered promiscuous mode [ 76.404567][ T5139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.415909][ T5139] Cannot create hsr debugfs directory [ 76.429851][ T5146] team0: Port device team_slave_0 added [ 76.445918][ T5138] device hsr_slave_0 entered promiscuous mode [ 76.452565][ T5138] device hsr_slave_1 entered promiscuous mode [ 76.458923][ T5138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.469794][ T5138] Cannot create hsr debugfs directory [ 76.486867][ T5145] team0: Port device team_slave_0 added [ 76.493839][ T5146] team0: Port device team_slave_1 added [ 76.503288][ T5147] device hsr_slave_0 entered promiscuous mode [ 76.510269][ T5147] device hsr_slave_1 entered promiscuous mode [ 76.516750][ T5147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.526828][ T5147] Cannot create hsr debugfs directory [ 76.543326][ T5145] team0: Port device team_slave_1 added [ 76.566626][ T5146] device hsr_slave_0 entered promiscuous mode [ 76.573249][ T5146] device hsr_slave_1 entered promiscuous mode [ 76.583293][ T5146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.591126][ T5146] Cannot create hsr debugfs directory [ 76.657103][ T5145] device hsr_slave_0 entered promiscuous mode [ 76.664041][ T5145] device hsr_slave_1 entered promiscuous mode [ 76.671793][ T5145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.680912][ T5145] Cannot create hsr debugfs directory [ 76.774517][ T5139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.796337][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.835687][ T5139] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.849596][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.857893][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.867631][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.875405][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.887833][ T5142] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.925505][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.934055][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.943660][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.951095][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.962013][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.980866][ T5147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.021413][ T5146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.041839][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.050868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.059098][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.066229][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.074586][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.083150][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.091639][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.098778][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.107021][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.115933][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.124813][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.132658][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.155185][ T5138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.166989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.176197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.185354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.194374][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.201606][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.209242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.217929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.226429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.235022][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.244129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.265490][ T5147] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.280953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.289869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.297500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.306178][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.314577][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.323017][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.331381][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.339983][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.348237][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.355339][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.362928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.371928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.380413][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.387475][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.398845][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.412488][ T5146] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.422148][ T5145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.437141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.446499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.455508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.463545][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.471382][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.478914][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.496947][ T5142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.514947][ T5138] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.533444][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.547683][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.557407][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.566256][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.573404][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.581649][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.590486][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.598960][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.606117][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.614406][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.623545][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.632257][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.658951][ T5145] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.690794][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.698845][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.707677][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.726572][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.736640][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.753491][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.766283][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.778136][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.786505][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.796219][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.805027][ T4732] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.812148][ T4732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.819969][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.828837][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.837403][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.845905][ T4732] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.853022][ T4732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.860819][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.869401][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.877535][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.886514][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.895018][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.907108][ T5147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.918741][ T5147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.933175][ T5139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.947442][ T5146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.966607][ T5146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.008058][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.016701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.026787][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.036063][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.052102][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.059260][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.067709][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.076666][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.085332][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.095210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.103544][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.112031][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.120870][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.129222][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.136273][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.143960][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.152973][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.161741][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.172567][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.180758][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.188255][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.196035][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.216836][ T5147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.238867][ T5145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.289677][ T5145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.314906][ T5138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.343391][ T5138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.375649][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.386599][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.403629][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.418141][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.433549][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.445984][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.454547][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.463743][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.472330][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.480970][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.489279][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.500075][ T5146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.520394][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.530774][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.567782][ T5138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.621106][ T5145] 8021q: adding VLAN 0 to HW filter on device batadv0 2022/12/17 19:55:22 executed programs: 6 2022/12/17 19:55:27 executed programs: 12 2022/12/17 19:55:32 executed programs: 18 2022/12/17 19:55:37 executed programs: 25 2022/12/17 19:55:43 executed programs: 31 2022/12/17 19:55:51 executed programs: 39 2022/12/17 19:55:56 executed programs: 47 2022/12/17 19:56:03 executed programs: 55 2022/12/17 19:56:08 executed programs: 63 2022/12/17 19:56:13 executed programs: 70 2022/12/17 19:56:18 executed programs: 77 2022/12/17 19:56:25 executed programs: 84 2022/12/17 19:56:30 executed programs: 90 2022/12/17 19:56:36 executed programs: 97 2022/12/17 19:56:41 executed programs: 104 2022/12/17 19:56:48 executed programs: 111 2022/12/17 19:56:53 executed programs: 118 2022/12/17 19:56:58 executed programs: 124 2022/12/17 19:57:03 executed programs: 132 2022/12/17 19:57:09 executed programs: 138 2022/12/17 19:57:14 executed programs: 145 2022/12/17 19:57:19 executed programs: 151 2022/12/17 19:57:24 executed programs: 158 2022/12/17 19:57:30 executed programs: 164 2022/12/17 19:57:35 executed programs: 172 2022/12/17 19:57:40 executed programs: 177 2022/12/17 19:57:46 executed programs: 183 2022/12/17 19:57:51 executed programs: 191 [ 235.502194][ T6609] ================================================================== [ 235.510315][ T6609] BUG: KASAN: use-after-free in nr_release+0x66/0x460 [ 235.517199][ T6609] Write of size 4 at addr ffff888021847080 by task syz-executor.2/6609 [ 235.525453][ T6609] [ 235.527784][ T6609] CPU: 0 PID: 6609 Comm: syz-executor.2 Not tainted 6.1.0-next-20221216-syzkaller-15278-gca39c4daa6f7 #0 [ 235.538991][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 235.549063][ T6609] Call Trace: [ 235.552355][ T6609] [ 235.555300][ T6609] dump_stack_lvl+0xd1/0x138 [ 235.559931][ T6609] print_report+0x15e/0x45d [ 235.564469][ T6609] ? __phys_addr+0xc8/0x140 [ 235.568971][ T6609] ? nr_release+0x66/0x460 [ 235.573385][ T6609] kasan_report+0xc0/0xf0 [ 235.577853][ T6609] ? nr_release+0x66/0x460 [ 235.582259][ T6609] kasan_check_range+0x141/0x190 [ 235.587188][ T6609] nr_release+0x66/0x460 [ 235.591428][ T6609] __sock_release+0xcd/0x280 [ 235.596054][ T6609] sock_close+0x1c/0x20 [ 235.600201][ T6609] __fput+0x27c/0xa90 [ 235.604218][ T6609] ? __sock_release+0x280/0x280 [ 235.609068][ T6609] task_work_run+0x16f/0x270 [ 235.613755][ T6609] ? task_work_cancel+0x30/0x30 [ 235.618607][ T6609] do_exit+0xb17/0x2a70 [ 235.622762][ T6609] ? find_held_lock+0x2d/0x110 [ 235.627578][ T6609] ? get_signal+0x8a0/0x2450 [ 235.632159][ T6609] ? mm_update_next_owner+0x7b0/0x7b0 [ 235.637537][ T6609] do_group_exit+0xd4/0x2a0 [ 235.642046][ T6609] get_signal+0x21c3/0x2450 [ 235.646637][ T6609] ? kmem_cache_free+0xee/0x5c0 [ 235.651482][ T6609] ? exit_signals+0x8b0/0x8b0 [ 235.656148][ T6609] ? create_new_namespaces+0x5b0/0xb20 [ 235.661701][ T6609] arch_do_signal_or_restart+0x79/0x5c0 [ 235.667239][ T6609] ? get_sigframe_size+0x10/0x10 [ 235.672169][ T6609] ? ksys_unshare+0x2b1/0x920 [ 235.676847][ T6609] exit_to_user_mode_prepare+0x15f/0x250 [ 235.682525][ T6609] syscall_exit_to_user_mode+0x1d/0x50 [ 235.687990][ T6609] do_syscall_64+0x46/0xb0 [ 235.692401][ T6609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 235.698321][ T6609] RIP: 0033:0x4610d9 [ 235.702205][ T6609] Code: Unable to access opcode bytes at 0x4610af. [ 235.708699][ T6609] RSP: 002b:00007f3a6c7a31a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 235.717103][ T6609] RAX: fffffffffffffffc RBX: 000000000052bfa8 RCX: 00000000004610d9 [ 235.725068][ T6609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 235.733024][ T6609] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 235.740982][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 235.748941][ T6609] R13: 00000000004f8d70 R14: 00000000004b4d76 R15: 00007f3a6c7a36bc [ 235.756919][ T6609] [ 235.759926][ T6609] [ 235.762234][ T6609] Allocated by task 6608: [ 235.766548][ T6609] kasan_save_stack+0x22/0x40 [ 235.771271][ T6609] kasan_set_track+0x25/0x30 [ 235.775850][ T6609] __kasan_kmalloc+0xa5/0xb0 [ 235.780428][ T6609] __kmalloc+0x5a/0xd0 [ 235.784539][ T6609] sk_prot_alloc+0x140/0x290 [ 235.789329][ T6609] sk_alloc+0x3a/0x7a0 [ 235.793393][ T6609] nr_create+0xb6/0x5f0 [ 235.797533][ T6609] __sock_create+0x359/0x790 [ 235.802118][ T6609] __sys_socket+0x133/0x250 [ 235.806783][ T6609] __x64_sys_socket+0x73/0xb0 [ 235.811450][ T6609] do_syscall_64+0x39/0xb0 [ 235.815868][ T6609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 235.821765][ T6609] [ 235.824072][ T6609] Freed by task 9: [ 235.827772][ T6609] kasan_save_stack+0x22/0x40 [ 235.832444][ T6609] kasan_set_track+0x25/0x30 [ 235.837110][ T6609] kasan_save_free_info+0x2e/0x40 [ 235.842125][ T6609] ____kasan_slab_free+0x160/0x1c0 [ 235.847328][ T6609] slab_free_freelist_hook+0x8b/0x1c0 [ 235.852723][ T6609] __kmem_cache_free+0xaf/0x3b0 [ 235.857562][ T6609] __sk_destruct+0x5df/0x750 [ 235.862145][ T6609] __sk_free+0x175/0x460 [ 235.866372][ T6609] sk_free+0x7c/0xa0 [ 235.870272][ T6609] nr_heartbeat_expiry+0x1d7/0x460 [ 235.875398][ T6609] call_timer_fn+0x1da/0x7c0 [ 235.880057][ T6609] expire_timers+0x234/0x330 [ 235.884646][ T6609] run_timer_softirq+0x326/0x910 [ 235.889576][ T6609] __do_softirq+0x1fb/0xadc [ 235.894107][ T6609] [ 235.896417][ T6609] The buggy address belongs to the object at ffff888021847000 [ 235.896417][ T6609] which belongs to the cache kmalloc-2k of size 2048 [ 235.910459][ T6609] The buggy address is located 128 bytes inside of [ 235.910459][ T6609] 2048-byte region [ffff888021847000, ffff888021847800) [ 235.923807][ T6609] [ 235.926120][ T6609] The buggy address belongs to the physical page: [ 235.932517][ T6609] page:ffffea0000861000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21840 [ 235.942668][ T6609] head:ffffea0000861000 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 235.952735][ T6609] anon flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 235.961151][ T6609] raw: 00fff00000010200 ffff888012442000 0000000000000000 dead000000000001 [ 235.969724][ T6609] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 235.978291][ T6609] page dumped because: kasan: bad access detected [ 235.984700][ T6609] page_owner tracks the page as allocated [ 235.990418][ T6609] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5300, tgid 5298 (syz-executor.1), ts 89705666801, free_ts 89466493447 [ 236.013350][ T6609] get_page_from_freelist+0x119e/0x2a80 [ 236.018920][ T6609] __alloc_pages+0x1cb/0x5b0 [ 236.023505][ T6609] alloc_pages+0x1aa/0x270 [ 236.027911][ T6609] allocate_slab+0x25f/0x350 [ 236.032584][ T6609] ___slab_alloc+0xa91/0x1400 [ 236.037249][ T6609] __slab_alloc.constprop.0+0x56/0xa0 [ 236.042609][ T6609] __kmem_cache_alloc_node+0x1a4/0x430 [ 236.048075][ T6609] __kmalloc+0x4a/0xd0 [ 236.052145][ T6609] sk_prot_alloc+0x140/0x290 [ 236.056732][ T6609] sk_alloc+0x3a/0x7a0 [ 236.060788][ T6609] __netlink_create+0x63/0x380 [ 236.065621][ T6609] __netlink_kernel_create+0x114/0x860 [ 236.071107][ T6609] diag_net_init+0xc0/0x140 [ 236.075759][ T6609] ops_init+0xb9/0x680 [ 236.079825][ T6609] setup_net+0x793/0xe60 [ 236.084061][ T6609] copy_net_ns+0x31b/0x6b0 [ 236.088473][ T6609] page last free stack trace: [ 236.093143][ T6609] free_pcp_prepare+0x4d0/0x9e0 [ 236.097993][ T6609] free_unref_page+0x1d/0x490 [ 236.102667][ T6609] __unfreeze_partials+0x17c/0x1a0 [ 236.107786][ T6609] qlist_free_all+0x6a/0x170 [ 236.112372][ T6609] kasan_quarantine_reduce+0x192/0x220 [ 236.117913][ T6609] __kasan_slab_alloc+0x66/0x90 [ 236.122757][ T6609] __kmem_cache_alloc_node+0x1ea/0x430 [ 236.128215][ T6609] __kmalloc+0x4a/0xd0 [ 236.132292][ T6609] ops_init+0x241/0x680 [ 236.136440][ T6609] setup_net+0x793/0xe60 [ 236.140671][ T6609] copy_net_ns+0x31b/0x6b0 [ 236.145076][ T6609] create_new_namespaces+0x3f6/0xb20 [ 236.150356][ T6609] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 236.155983][ T6609] ksys_unshare+0x449/0x920 [ 236.160479][ T6609] __x64_sys_unshare+0x31/0x40 [ 236.165235][ T6609] do_syscall_64+0x39/0xb0 [ 236.169646][ T6609] [ 236.171956][ T6609] Memory state around the buggy address: [ 236.177569][ T6609] ffff888021846f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.185616][ T6609] ffff888021847000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.193664][ T6609] >ffff888021847080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.201709][ T6609] ^ [ 236.205763][ T6609] ffff888021847100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.213844][ T6609] ffff888021847180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.221892][ T6609] ================================================================== [ 236.240316][ T6609] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 236.247548][ T6609] CPU: 1 PID: 6609 Comm: syz-executor.2 Not tainted 6.1.0-next-20221216-syzkaller-15278-gca39c4daa6f7 #0 [ 236.258747][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 236.268895][ T6609] Call Trace: [ 236.272183][ T6609] [ 236.275135][ T6609] dump_stack_lvl+0xd1/0x138 [ 236.279747][ T6609] panic+0x2cc/0x626 [ 236.283696][ T6609] ? panic_print_sys_info.part.0+0x110/0x110 [ 236.289701][ T6609] ? preempt_schedule_thunk+0x1a/0x20 [ 236.295097][ T6609] ? preempt_schedule_common+0x59/0xc0 [ 236.300577][ T6609] check_panic_on_warn.cold+0x19/0x35 [ 236.305967][ T6609] end_report.part.0+0x36/0x73 [ 236.310757][ T6609] ? nr_release+0x66/0x460 [ 236.315181][ T6609] kasan_report.cold+0xa/0xf [ 236.319789][ T6609] ? nr_release+0x66/0x460 [ 236.324220][ T6609] kasan_check_range+0x141/0x190 [ 236.329179][ T6609] nr_release+0x66/0x460 [ 236.333434][ T6609] __sock_release+0xcd/0x280 [ 236.338043][ T6609] sock_close+0x1c/0x20 [ 236.342300][ T6609] __fput+0x27c/0xa90 [ 236.346306][ T6609] ? __sock_release+0x280/0x280 [ 236.351170][ T6609] task_work_run+0x16f/0x270 [ 236.355862][ T6609] ? task_work_cancel+0x30/0x30 [ 236.360827][ T6609] do_exit+0xb17/0x2a70 [ 236.365003][ T6609] ? find_held_lock+0x2d/0x110 [ 236.369963][ T6609] ? get_signal+0x8a0/0x2450 [ 236.374560][ T6609] ? mm_update_next_owner+0x7b0/0x7b0 [ 236.379956][ T6609] do_group_exit+0xd4/0x2a0 [ 236.384565][ T6609] get_signal+0x21c3/0x2450 [ 236.389093][ T6609] ? kmem_cache_free+0xee/0x5c0 [ 236.393968][ T6609] ? exit_signals+0x8b0/0x8b0 [ 236.398656][ T6609] ? create_new_namespaces+0x5b0/0xb20 [ 236.404136][ T6609] arch_do_signal_or_restart+0x79/0x5c0 [ 236.409696][ T6609] ? get_sigframe_size+0x10/0x10 [ 236.414658][ T6609] ? ksys_unshare+0x2b1/0x920 [ 236.419446][ T6609] exit_to_user_mode_prepare+0x15f/0x250 [ 236.425098][ T6609] syscall_exit_to_user_mode+0x1d/0x50 [ 236.430578][ T6609] do_syscall_64+0x46/0xb0 [ 236.435017][ T6609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 236.440921][ T6609] RIP: 0033:0x4610d9 [ 236.444827][ T6609] Code: Unable to access opcode bytes at 0x4610af. [ 236.451319][ T6609] RSP: 002b:00007f3a6c7a31a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.459743][ T6609] RAX: fffffffffffffffc RBX: 000000000052bfa8 RCX: 00000000004610d9 [ 236.467717][ T6609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 236.475699][ T6609] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 236.483683][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 236.491666][ T6609] R13: 00000000004f8d70 R14: 00000000004b4d76 R15: 00007f3a6c7a36bc [ 236.499657][ T6609] [ 236.502816][ T6609] Kernel Offset: disabled [ 236.507130][ T6609] Rebooting in 86400 seconds..