Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. 2021/01/23 07:31:37 fuzzer started 2021/01/23 07:31:37 connecting to host at 10.128.0.26:46145 2021/01/23 07:31:37 checking machine... 2021/01/23 07:31:37 checking revisions... 2021/01/23 07:31:37 testing simple program... syzkaller login: [ 72.859954][ T8497] IPVS: ftp: loaded support on port[0] = 21 [ 73.040106][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 73.095566][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.103633][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.111757][ T8497] device bridge_slave_0 entered promiscuous mode [ 73.122724][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.130125][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.138799][ T8497] device bridge_slave_1 entered promiscuous mode [ 73.160152][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.171954][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.196354][ T8497] team0: Port device team_slave_0 added [ 73.204629][ T8497] team0: Port device team_slave_1 added [ 73.223915][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.231249][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.258216][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.271520][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.278589][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.306664][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.336034][ T8497] device hsr_slave_0 entered promiscuous mode [ 73.343128][ T8497] device hsr_slave_1 entered promiscuous mode [ 73.456317][ T8497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.467390][ T8497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.478649][ T8497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.490916][ T8497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.519849][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.528289][ T8497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.537070][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.544563][ T8497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.596224][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.610415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.624052][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.632959][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.641097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 73.657563][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.668920][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.678839][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.686580][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.707783][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.718058][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.725441][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.745030][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.754462][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.763867][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.777644][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.791979][ T8497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.806077][ T8497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.815126][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.836690][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.844527][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.860069][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.880938][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.902721][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.911580][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.920560][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.935117][ T8497] device veth0_vlan entered promiscuous mode [ 73.948445][ T8497] device veth1_vlan entered promiscuous mode [ 73.973117][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.981432][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.991558][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.005001][ T8497] device veth0_macvtap entered promiscuous mode [ 74.013917][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.026104][ T8497] device veth1_macvtap entered promiscuous mode [ 74.046569][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.055703][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.066126][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.079887][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.088166][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.097768][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.110902][ T8497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.120724][ T8497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.129579][ T8497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.143808][ T8497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.244525][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.253743][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.285970][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.286486][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.305735][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.317708][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program 2021/01/23 07:31:40 building call list... [ 75.124947][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.399900][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.640004][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.875126][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 77.847022][ T8483] can: request_module (can-proto-0) failed. [ 78.527695][ T47] device hsr_slave_0 left promiscuous mode [ 78.535293][ T47] device hsr_slave_1 left promiscuous mode [ 78.545079][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.553850][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.565281][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.573740][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.583506][ T47] device bridge_slave_1 left promiscuous mode [ 78.590616][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.605643][ T47] device bridge_slave_0 left promiscuous mode [ 78.612621][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.629105][ T47] device veth1_macvtap left promiscuous mode [ 78.636639][ T47] device veth0_macvtap left promiscuous mode [ 78.643944][ T47] device veth1_vlan left promiscuous mode [ 78.650377][ T47] device veth0_vlan left promiscuous mode executing program [ 82.205720][ T47] ------------[ cut here ]------------ [ 82.211305][ T47] WARNING: CPU: 0 PID: 47 at net/wireless/core.c:1455 cfg80211_netdev_notifier_call+0xd48/0x1460 [ 82.223785][ T47] Modules linked in: [ 82.227728][ T47] CPU: 0 PID: 47 Comm: kworker/u4:2 Not tainted 5.11.0-rc4-next-20210122-syzkaller #0 [ 82.237645][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.247922][ T47] Workqueue: netns cleanup_net [ 82.254905][ T47] RIP: 0010:cfg80211_netdev_notifier_call+0xd48/0x1460 [ 82.262113][ T47] Code: be e4 3c f9 49 8d 7d 68 be ff ff ff ff e8 a0 cd c6 00 31 ff 89 c3 89 c6 e8 25 ec 3c f9 85 db 0f 85 64 f9 ff ff e8 98 e4 3c f9 <0f> 0b e9 58 f9 ff ff e8 8c e4 3c f9 49 8d 7d 68 be ff ff ff ff e8 [ 82.282741][ T47] RSP: 0018:ffffc90000eef720 EFLAGS: 00010293 [ 82.288912][ T47] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 82.297314][ T47] RDX: ffff8880110a1c00 RSI: ffffffff883638c8 RDI: 0000000000000003 [ 82.305564][ T47] RBP: ffff888011549000 R08: 0000000000000000 R09: ffffffff88362cdd [ 82.314799][ T47] R10: ffffffff883638bb R11: 0000000000000006 R12: 1ffff920001ddee9 [ 82.323836][ T47] R13: ffff88801ac0c580 R14: ffff88801ae32000 R15: 0000000000000002 [ 82.332138][ T47] FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 82.341325][ T47] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.348092][ T47] CR2: 0000000000c6137c CR3: 000000002924c000 CR4: 00000000001506f0 [ 82.356430][ T47] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.366332][ T47] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.374951][ T47] Call Trace: [ 82.378313][ T47] ? mark_lock+0xef/0x17b0 [ 82.383193][ T47] ? cfg80211_register_wdev+0x320/0x320 [ 82.389002][ T47] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 82.395830][ T47] ? lock_chain_count+0x20/0x20 [ 82.400881][ T47] ? find_held_lock+0x2d/0x110 [ 82.405954][ T47] ? rt_flush_dev+0x1c9/0x260 [ 82.410750][ T47] ? mark_held_locks+0x9f/0xe0 [ 82.416032][ T47] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 82.421887][ T47] ? _find_next_bit.constprop.0+0x1a0/0x200 [ 82.428168][ T47] ? cpumask_next+0x3c/0x40 [ 82.432850][ T47] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 82.438827][ T47] ? rt_flush_dev+0x88/0x260 [ 82.444414][ T47] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 82.451005][ T47] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 82.458619][ T47] ? ipmr_device_event+0x1ab/0x220 [ 82.466850][ T47] notifier_call_chain+0xb5/0x200 [ 82.472101][ T47] call_netdevice_notifiers_info+0xb5/0x130 [ 82.478409][ T47] unregister_netdevice_many+0x943/0x1750 [ 82.484294][ T47] ? net_tx_action+0xbf0/0xbf0 [ 82.489323][ T47] ? unregister_netdevice_many+0x1750/0x1750 [ 82.495828][ T47] ? sysfs_remove_group+0xc2/0x170 [ 82.501093][ T47] ? br_dev_delete+0x112/0x190 [ 82.506278][ T47] default_device_exit_batch+0x2fa/0x3c0 [ 82.512075][ T47] ? unregister_netdev+0x20/0x20 [ 82.517113][ T47] ? __init_waitqueue_head+0xd0/0xd0 [ 82.522605][ T47] ? cfg802154_switch_netns+0x440/0x440 [ 82.528356][ T47] ? unregister_netdev+0x20/0x20 [ 82.533394][ T47] ? dev_change_net_namespace+0x1200/0x1200 [ 82.539387][ T47] ops_exit_list+0x10d/0x160 [ 82.544360][ T47] cleanup_net+0x4ea/0xb10 [ 82.549107][ T47] ? ops_free_list.part.0+0x3d0/0x3d0 [ 82.554959][ T47] process_one_work+0x98d/0x15f0 [ 82.560041][ T47] ? pwq_dec_nr_in_flight+0x320/0x320 [ 82.565748][ T47] ? rwlock_bug.part.0+0x90/0x90 [ 82.570849][ T47] ? _raw_spin_lock_irq+0x41/0x50 [ 82.576965][ T47] worker_thread+0x64c/0x1120 [ 82.583422][ T47] ? __kthread_parkme+0x13f/0x1e0 [ 82.589058][ T47] ? process_one_work+0x15f0/0x15f0 [ 82.595052][ T47] kthread+0x3b1/0x4a0 [ 82.599427][ T47] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 82.605528][ T47] ret_from_fork+0x1f/0x30 [ 82.610235][ T47] Kernel panic - not syncing: panic_on_warn set ... [ 82.616834][ T47] CPU: 0 PID: 47 Comm: kworker/u4:2 Not tainted 5.11.0-rc4-next-20210122-syzkaller #0 [ 82.626737][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.636818][ T47] Workqueue: netns cleanup_net [ 82.641595][ T47] Call Trace: [ 82.645053][ T47] dump_stack+0x107/0x163 [ 82.649389][ T47] panic+0x306/0x73d [ 82.653376][ T47] ? __warn_printk+0xf3/0xf3 [ 82.658152][ T47] ? __warn.cold+0x1a/0x44 [ 82.662772][ T47] ? cfg80211_netdev_notifier_call+0xd48/0x1460 [ 82.669115][ T47] __warn.cold+0x35/0x44 [ 82.673525][ T47] ? cfg80211_netdev_notifier_call+0xd48/0x1460 [ 82.680317][ T47] report_bug+0x1bd/0x210 [ 82.684780][ T47] handle_bug+0x3c/0x60 [ 82.688933][ T47] exc_invalid_op+0x14/0x40 [ 82.693435][ T47] asm_exc_invalid_op+0x12/0x20 [ 82.698331][ T47] RIP: 0010:cfg80211_netdev_notifier_call+0xd48/0x1460 [ 82.705408][ T47] Code: be e4 3c f9 49 8d 7d 68 be ff ff ff ff e8 a0 cd c6 00 31 ff 89 c3 89 c6 e8 25 ec 3c f9 85 db 0f 85 64 f9 ff ff e8 98 e4 3c f9 <0f> 0b e9 58 f9 ff ff e8 8c e4 3c f9 49 8d 7d 68 be ff ff ff ff e8 [ 82.725152][ T47] RSP: 0018:ffffc90000eef720 EFLAGS: 00010293 [ 82.731214][ T47] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 82.739178][ T47] RDX: ffff8880110a1c00 RSI: ffffffff883638c8 RDI: 0000000000000003 [ 82.747350][ T47] RBP: ffff888011549000 R08: 0000000000000000 R09: ffffffff88362cdd [ 82.755317][ T47] R10: ffffffff883638bb R11: 0000000000000006 R12: 1ffff920001ddee9 [ 82.763300][ T47] R13: ffff88801ac0c580 R14: ffff88801ae32000 R15: 0000000000000002 [ 82.771271][ T47] ? cfg80211_netdev_notifier_call+0xd3b/0x1460 [ 82.777507][ T47] ? cfg80211_netdev_notifier_call+0x15d/0x1460 [ 82.783741][ T47] ? cfg80211_netdev_notifier_call+0xd48/0x1460 [ 82.789977][ T47] ? mark_lock+0xef/0x17b0 [ 82.794386][ T47] ? cfg80211_register_wdev+0x320/0x320 [ 82.799943][ T47] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 82.805922][ T47] ? lock_chain_count+0x20/0x20 [ 82.810769][ T47] ? find_held_lock+0x2d/0x110 [ 82.815522][ T47] ? rt_flush_dev+0x1c9/0x260 [ 82.820188][ T47] ? mark_held_locks+0x9f/0xe0 [ 82.824944][ T47] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 82.830917][ T47] ? _find_next_bit.constprop.0+0x1a0/0x200 [ 82.836885][ T47] ? cpumask_next+0x3c/0x40 [ 82.841539][ T47] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 82.847285][ T47] ? rt_flush_dev+0x88/0x260 [ 82.852057][ T47] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 82.858309][ T47] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 82.864545][ T47] ? ipmr_device_event+0x1ab/0x220 [ 82.869749][ T47] notifier_call_chain+0xb5/0x200 [ 82.874781][ T47] call_netdevice_notifiers_info+0xb5/0x130 [ 82.880980][ T47] unregister_netdevice_many+0x943/0x1750 [ 82.886839][ T47] ? net_tx_action+0xbf0/0xbf0 [ 82.891598][ T47] ? unregister_netdevice_many+0x1750/0x1750 [ 82.897579][ T47] ? sysfs_remove_group+0xc2/0x170 [ 82.902695][ T47] ? br_dev_delete+0x112/0x190 [ 82.907468][ T47] default_device_exit_batch+0x2fa/0x3c0 [ 82.913366][ T47] ? unregister_netdev+0x20/0x20 [ 82.918572][ T47] ? __init_waitqueue_head+0xd0/0xd0 [ 82.924059][ T47] ? cfg802154_switch_netns+0x440/0x440 [ 82.929944][ T47] ? unregister_netdev+0x20/0x20 [ 82.934895][ T47] ? dev_change_net_namespace+0x1200/0x1200 [ 82.940896][ T47] ops_exit_list+0x10d/0x160 [ 82.945491][ T47] cleanup_net+0x4ea/0xb10 [ 82.949922][ T47] ? ops_free_list.part.0+0x3d0/0x3d0 [ 82.955306][ T47] process_one_work+0x98d/0x15f0 [ 82.960455][ T47] ? pwq_dec_nr_in_flight+0x320/0x320 [ 82.965927][ T47] ? rwlock_bug.part.0+0x90/0x90 [ 82.970877][ T47] ? _raw_spin_lock_irq+0x41/0x50 [ 82.975990][ T47] worker_thread+0x64c/0x1120 [ 82.980848][ T47] ? __kthread_parkme+0x13f/0x1e0 [ 82.985876][ T47] ? process_one_work+0x15f0/0x15f0 [ 82.991198][ T47] kthread+0x3b1/0x4a0 [ 82.995703][ T47] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 83.002011][ T47] ret_from_fork+0x1f/0x30 [ 83.008273][ T47] Kernel Offset: disabled [ 83.013014][ T47] Rebooting in 86400 seconds..