DUID 00:04:dc:6c:a8:75:19:b8:f7:30:df:f1:e8:1e:24:9d:66:1e forked to background, child pid 3174 [ 27.050527][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.061834][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 76.329280][ T139] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.20' (ECDSA) to the list of known hosts. [ 88.261075][ T3593] cgroup: Unknown subsys name 'net' [ 88.383532][ T3593] cgroup: Unknown subsys name 'rlimit' [ 89.536743][ T3599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.545511][ T3599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.553305][ T3599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.561615][ T3599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.569462][ T3599] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.576841][ T3599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.659932][ T3600] chnl_net:caif_netlink_parms(): no params data found [ 89.703083][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.710942][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.719258][ T3600] device bridge_slave_0 entered promiscuous mode [ 89.728237][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.735365][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.743261][ T3600] device bridge_slave_1 entered promiscuous mode [ 89.764083][ T3600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.774788][ T3600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.797469][ T3600] team0: Port device team_slave_0 added [ 89.805289][ T3600] team0: Port device team_slave_1 added [ 89.830365][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.837542][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.863871][ T3600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.876763][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.884655][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.911011][ T3600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.937259][ T3600] device hsr_slave_0 entered promiscuous mode [ 89.944615][ T3600] device hsr_slave_1 entered promiscuous mode [ 90.027642][ T3600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.038989][ T3600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.047742][ T3600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.056836][ T3600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.078494][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.085713][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.093557][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.100743][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.151454][ T3600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.164273][ T917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.174477][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.183968][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.192403][ T917] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 90.205734][ T3600] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.216849][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.226259][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.233554][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.245408][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.254208][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.261356][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.280078][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.288938][ T1131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.301722][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.313813][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.326553][ T3600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.339165][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.347363][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.364355][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.372141][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.384263][ T3600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.400514][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.420488][ T917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.429672][ T917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.437666][ T917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.448602][ T3600] device veth0_vlan entered promiscuous mode [ 90.460283][ T3600] device veth1_vlan entered promiscuous mode [ 90.478835][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.487731][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.495806][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.506826][ T3600] device veth0_macvtap entered promiscuous mode [ 90.517513][ T3600] device veth1_macvtap entered promiscuous mode [ 90.534841][ T3600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.542579][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.552056][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.564595][ T3600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.572494][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.584004][ T3600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.593875][ T3600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.602648][ T3600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.612197][ T3600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.673874][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.682189][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.704971][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.718698][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.726709][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.741077][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program executing program executing program [ 90.812089][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.820760][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.838725][ T10] ------------[ cut here ]------------ [ 90.844359][ T10] WARNING: CPU: 0 PID: 10 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x495/0x530 [ 90.854438][ T10] Modules linked in: [ 90.858786][ T10] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 5.17.0-rc5-syzkaller-00004-g038101e6b2cd #0 [ 90.869263][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.879679][ T10] Workqueue: cfg80211 cfg80211_event_work [ 90.885431][ T10] RIP: 0010:__cfg80211_ibss_joined+0x495/0x530 [ 90.892498][ T10] Code: 0f 0b e9 06 fe ff ff e8 09 64 36 f9 e9 33 fc ff ff e8 df 63 36 f9 e9 77 fc ff ff e8 f5 63 36 f9 e9 0a ff ff ff e8 0b d2 ee f8 <0f> 0b e9 78 fc ff ff e8 ff d1 ee f8 0f 0b e8 e8 63 36 f9 e9 d6 fb [ 90.912938][ T10] RSP: 0018:ffffc90000cf7bd8 EFLAGS: 00010293 [ 90.919593][ T10] RAX: 0000000000000000 RBX: ffff88807100ccd0 RCX: 0000000000000000 [ 90.927860][ T10] RDX: ffff888010e81d00 RSI: ffffffff888a1985 RDI: 0000000000000000 [ 90.935906][ T10] RBP: ffff88807100c000 R08: 0000000000000001 R09: ffffffff8ffc29af [ 90.944632][ T10] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200019ef7d [ 90.952772][ T10] R13: ffff888017ba8b18 R14: 0000000000000000 R15: 0000000000000006 [ 90.960857][ T10] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 90.970338][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.977103][ T10] CR2: 00007f901a751c18 CR3: 000000000b88e000 CR4: 00000000003506e0 [ 90.985086][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.993217][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.001374][ T10] Call Trace: [ 91.004650][ T10] [ 91.007704][ T10] ? cfg80211_ibss_joined+0x650/0x650 [ 91.013098][ T10] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 91.023180][ T10] cfg80211_process_wdev_events+0x3db/0x5b0 [ 91.030322][ T10] cfg80211_process_rdev_events+0x9b/0x120 [ 91.036326][ T10] cfg80211_event_work+0x27/0x40 [ 91.041552][ T10] process_one_work+0x9ac/0x1650 [ 91.046525][ T10] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 91.052227][ T10] ? rwlock_bug.part.0+0x90/0x90 [ 91.057238][ T10] ? _raw_spin_lock_irq+0x41/0x50 [ 91.062288][ T10] worker_thread+0x657/0x1110 [ 91.067047][ T10] ? process_one_work+0x1650/0x1650 [ 91.072258][ T10] kthread+0x2e9/0x3a0 [ 91.076330][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 91.082087][ T10] ret_from_fork+0x1f/0x30 [ 91.086527][ T10] [ 91.089649][ T10] Kernel panic - not syncing: panic_on_warn set ... [ 91.096229][ T10] CPU: 1 PID: 10 Comm: kworker/u4:1 Not tainted 5.17.0-rc5-syzkaller-00004-g038101e6b2cd #0 [ 91.106277][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.116328][ T10] Workqueue: cfg80211 cfg80211_event_work [ 91.122051][ T10] Call Trace: [ 91.125318][ T10] [ 91.128241][ T10] dump_stack_lvl+0xcd/0x134 [ 91.132845][ T10] panic+0x2b0/0x6dd [ 91.136734][ T10] ? __warn_printk+0xf3/0xf3 [ 91.141319][ T10] ? __warn.cold+0x1d1/0x2cf [ 91.145922][ T10] ? __cfg80211_ibss_joined+0x495/0x530 [ 91.151478][ T10] __warn.cold+0x1ec/0x2cf [ 91.155919][ T10] ? __cfg80211_ibss_joined+0x495/0x530 [ 91.161457][ T10] report_bug+0x1bd/0x210 [ 91.165793][ T10] handle_bug+0x3c/0x60 [ 91.169945][ T10] exc_invalid_op+0x14/0x40 [ 91.174638][ T10] asm_exc_invalid_op+0x12/0x20 [ 91.179507][ T10] RIP: 0010:__cfg80211_ibss_joined+0x495/0x530 [ 91.185690][ T10] Code: 0f 0b e9 06 fe ff ff e8 09 64 36 f9 e9 33 fc ff ff e8 df 63 36 f9 e9 77 fc ff ff e8 f5 63 36 f9 e9 0a ff ff ff e8 0b d2 ee f8 <0f> 0b e9 78 fc ff ff e8 ff d1 ee f8 0f 0b e8 e8 63 36 f9 e9 d6 fb [ 91.205832][ T10] RSP: 0018:ffffc90000cf7bd8 EFLAGS: 00010293 [ 91.212091][ T10] RAX: 0000000000000000 RBX: ffff88807100ccd0 RCX: 0000000000000000 [ 91.220078][ T10] RDX: ffff888010e81d00 RSI: ffffffff888a1985 RDI: 0000000000000000 [ 91.228159][ T10] RBP: ffff88807100c000 R08: 0000000000000001 R09: ffffffff8ffc29af [ 91.236144][ T10] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200019ef7d [ 91.244111][ T10] R13: ffff888017ba8b18 R14: 0000000000000000 R15: 0000000000000006 [ 91.252088][ T10] ? __cfg80211_ibss_joined+0x495/0x530 [ 91.257648][ T10] ? __cfg80211_ibss_joined+0x495/0x530 [ 91.263195][ T10] ? cfg80211_ibss_joined+0x650/0x650 [ 91.268566][ T10] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 91.274388][ T10] cfg80211_process_wdev_events+0x3db/0x5b0 [ 91.280301][ T10] cfg80211_process_rdev_events+0x9b/0x120 [ 91.286894][ T10] cfg80211_event_work+0x27/0x40 [ 91.291844][ T10] process_one_work+0x9ac/0x1650 [ 91.296794][ T10] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 91.302300][ T10] ? rwlock_bug.part.0+0x90/0x90 [ 91.307286][ T10] ? _raw_spin_lock_irq+0x41/0x50 [ 91.312425][ T10] worker_thread+0x657/0x1110 [ 91.317110][ T10] ? process_one_work+0x1650/0x1650 [ 91.322305][ T10] kthread+0x2e9/0x3a0 [ 91.326372][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 91.334007][ T10] ret_from_fork+0x1f/0x30 [ 91.338465][ T10] [ 91.341823][ T10] Kernel Offset: disabled [ 91.346315][ T10] Rebooting in 86400 seconds..