[ 30.712445][ T4635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.722468][ T4635] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 49.387584][ T5070] can: request_module (can-proto-0) failed. [ 49.420408][ T5070] can: request_module (can-proto-0) failed. [ 49.450381][ T5070] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts. 2023/01/10 02:16:52 parsed 1 programs 2023/01/10 02:16:53 executed programs: 0 [ 68.266879][ T5137] chnl_net:caif_netlink_parms(): no params data found [ 68.312207][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.320142][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.329198][ T5137] device bridge_slave_0 entered promiscuous mode [ 68.338520][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.346798][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.354863][ T5137] device bridge_slave_1 entered promiscuous mode [ 68.375447][ T5137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.387682][ T5137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.408890][ T5137] team0: Port device team_slave_0 added [ 68.417022][ T5137] team0: Port device team_slave_1 added [ 68.435305][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.442287][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.468697][ T5137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.481548][ T5137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.489222][ T5137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.516645][ T5137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.542475][ T5137] device hsr_slave_0 entered promiscuous mode [ 68.549990][ T5137] device hsr_slave_1 entered promiscuous mode [ 68.643486][ T5137] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.654959][ T5137] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.665279][ T5137] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.675055][ T5137] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.697017][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.704479][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.712367][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.719589][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.766942][ T5137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.780283][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.792819][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.803388][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.812699][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.827720][ T5137] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.839519][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.848588][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.856001][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.877722][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.887120][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.894374][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.911243][ T5137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.925684][ T5137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.939013][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.948561][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.958351][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.975926][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.987971][ T2170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.995739][ T2170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.010722][ T5137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.193123][ T5137] device veth0_vlan entered promiscuous mode [ 69.201108][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.210611][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.219352][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.227457][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.238545][ T5137] device veth1_vlan entered promiscuous mode [ 69.247394][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.270095][ T5137] device veth0_macvtap entered promiscuous mode [ 69.278573][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.288146][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.298637][ T5137] device veth1_macvtap entered promiscuous mode [ 69.315477][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.325343][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.343049][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.351855][ T2170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.361752][ T2170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.376757][ T5137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.384860][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.393523][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.405984][ T5137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.415754][ T5137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.425632][ T5137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.434499][ T5137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.279262][ T7] cfg80211: failed to load regulatory.db [ 96.774301][ T4383] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2650 jiffies s: 773 root: 0x2/. [ 96.790675][ T4383] rcu: blocking rcu_node structures (internal RCU debug): [ 96.798069][ T4383] Sending NMI from CPU 0 to CPUs 1: [ 96.803286][ C1] NMI backtrace for cpu 1 [ 96.803294][ C1] CPU: 1 PID: 5154 Comm: syz-executor.0 Not tainted 6.2.0-rc3-syzkaller-00009-g5a41237ad1d4 #0 [ 96.803308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 96.803314][ C1] RIP: 0010:kasan_check_range+0x14/0x2e0 [ 96.803336][ C1] Code: c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 55 41 57 41 56 53 b0 01 48 85 f6 0f 84 ed 01 00 00 48 89 fd <48> 01 f5 0f 82 82 02 00 00 48 89 fd 48 c1 ed 2f 81 fd ff ff 01 00 [ 96.803345][ C1] RSP: 0018:ffffc900001e09a0 EFLAGS: 00000002 [ 96.803356][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff816ca9f6 [ 96.803363][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90970180 [ 96.803370][ C1] RBP: ffffffff90970180 R08: dffffc0000000000 R09: fffffbfff212e032 [ 96.803377][ C1] R10: fffffbfff212e032 R11: 1ffffffff212e031 R12: 1ffff11004a9fc3d [ 96.803385][ C1] R13: 68311c083b7d4aba R14: ffff8880254fe1e8 R15: 0000000000000000 [ 96.803392][ C1] FS: 00007fa92e16f700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 96.803402][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.803410][ C1] CR2: 00007fff44abb078 CR3: 000000002252a000 CR4: 00000000003506e0 [ 96.803420][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.803427][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.803433][ C1] Call Trace: [ 96.803437][ C1] [ 96.803442][ C1] __lock_acquire+0x1206/0x1f60 [ 96.803461][ C1] lock_acquire+0x1a7/0x400 [ 96.803472][ C1] ? debug_object_activate+0x96/0x6e0 [ 96.803485][ C1] ? read_lock_is_recursive+0x10/0x10 [ 96.803500][ C1] ? read_lock_is_recursive+0x10/0x10 [ 96.803512][ C1] ? do_raw_spin_lock+0x147/0x3a0 [ 96.803525][ C1] ? __lock_acquire+0x1f60/0x1f60 [ 96.803538][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 96.803553][ C1] ? debug_object_activate+0x96/0x6e0 [ 96.803563][ C1] ? _raw_spin_lock+0x40/0x40 [ 96.803580][ C1] debug_object_activate+0x96/0x6e0 [ 96.803593][ C1] __hrtimer_run_queues+0x595/0xa60 [ 96.803610][ C1] ? taprio_free_sched_cb+0x1c0/0x1c0 [ 96.803635][ C1] ? hrtimer_interrupt+0xfd0/0xfd0 [ 96.803647][ C1] ? ktime_get_update_offsets_now+0x449/0x460 [ 96.803663][ C1] hrtimer_interrupt+0x3a6/0xfd0 [ 96.803683][ C1] __sysvec_apic_timer_interrupt+0xf9/0x280 [ 96.803699][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 96.803714][ C1] [ 96.803717][ C1] [ 96.803721][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 96.803736][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 96.803751][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 82 f6 14 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 47 cc 90 f6 65 8b 05 58 0e 34 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 96.803759][ C1] RSP: 0018:ffffc900057c6d00 EFLAGS: 00000206 [ 96.803769][ C1] RAX: 99ccf1899877dc00 RBX: 1ffff92000af8da4 RCX: ffffffff816cfaea [ 96.803776][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0d9960 RDI: 0000000000000001 [ 96.803783][ C1] RBP: ffffc900057c6d90 R08: dffffc0000000000 R09: fffffbfff212e048 [ 96.803791][ C1] R10: fffffbfff212e048 R11: 1ffffffff212e047 R12: dffffc0000000000 [ 96.803798][ C1] R13: 1ffff92000af8da0 R14: ffffc900057c6d20 R15: 0000000000000246 [ 96.803808][ C1] ? mark_lock+0x9a/0x350 [ 96.803822][ C1] ? _raw_spin_unlock+0x40/0x40 [ 96.803835][ C1] ? ktime_mono_to_any+0xee/0x120 [ 96.803850][ C1] taprio_change+0x44d8/0x5520 [ 96.803871][ C1] ? taprio_destroy+0x4a0/0x4a0 [ 96.803884][ C1] ? qdisc_create+0x769/0xfe0 [ 96.803900][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 96.803913][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 96.803926][ C1] ? qdisc_peek_head+0x40/0x40 [ 96.803942][ C1] ? mutex_is_locked+0xe/0x40 [ 96.803958][ C1] ? taprio_peek+0x510/0x510 [ 96.803971][ C1] qdisc_create+0x769/0xfe0 [ 96.803987][ C1] ? qdisc_notify+0x370/0x370 [ 96.804003][ C1] tc_modify_qdisc+0x9cf/0x1a70 [ 96.804021][ C1] ? rcu_lock_release+0x20/0x20 [ 96.804040][ C1] ? rcu_lock_release+0x20/0x20 [ 96.804053][ C1] rtnetlink_rcv_msg+0x7ca/0xec0 [ 96.804065][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 96.804079][ C1] ? rtnetlink_bind+0x80/0x80 [ 96.804089][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 96.804101][ C1] ? trace_lock_release+0x95/0x220 [ 96.804112][ C1] ? print_irqtrace_events+0x220/0x220 [ 96.804126][ C1] ? __local_bh_enable_ip+0x163/0x1f0 [ 96.804137][ C1] ? lockdep_hardirqs_on+0x95/0x140 [ 96.804150][ C1] ? __local_bh_enable_ip+0x163/0x1f0 [ 96.804160][ C1] ? local_bh_enable+0x5/0x20 [ 96.804173][ C1] ? _local_bh_enable+0xa0/0xa0 [ 96.804186][ C1] ? __dev_queue_xmit+0x1eff/0x3af0 [ 96.804205][ C1] ? rcu_lock_release+0x5/0x20 [ 96.804217][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 96.804229][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 96.804242][ C1] netlink_rcv_skb+0x1f0/0x470 [ 96.804254][ C1] ? rtnetlink_bind+0x80/0x80 [ 96.804265][ C1] ? netlink_ack+0x1290/0x1290 [ 96.804285][ C1] netlink_unicast+0x7e7/0x9c0 [ 96.804298][ C1] ? netlink_detachskb+0xa0/0xa0 [ 96.804310][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 96.804323][ C1] ? 0xffffffff81000000 [ 96.804331][ C1] ? __check_object_size+0x15a/0x210 [ 96.804345][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 96.804357][ C1] netlink_sendmsg+0x9b3/0xcd0 [ 96.804372][ C1] ? netlink_getsockopt+0x9c0/0x9c0 [ 96.804385][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 96.804396][ C1] ? security_socket_sendmsg+0x9d/0xb0 [ 96.804411][ C1] ? netlink_getsockopt+0x9c0/0x9c0 [ 96.804423][ C1] ____sys_sendmsg+0x597/0x8e0 [ 96.804441][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 96.804461][ C1] __sys_sendmsg+0x28e/0x390 [ 96.804476][ C1] ? ____sys_sendmsg+0x8e0/0x8e0 [ 96.804500][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 96.804516][ C1] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 96.804530][ C1] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 96.804543][ C1] do_syscall_64+0x2b/0x70 [ 96.804553][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.804566][ C1] RIP: 0033:0x4645a9 [ 96.804575][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 96.804583][ C1] RSP: 002b:00007fa92e16f198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.804593][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004645a9 [ 96.804600][ C1] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 96.804606][ C1] RBP: 000000000051b720 R08: 0000000000000000 R09: 0000000000000000 [ 96.804613][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000055bf00 [ 96.804620][ C1] R13: 00007fa92e16f6bc R14: 00000000ffffffff R15: 0000000000000003 [ 96.804635][ C1]