DUID 00:04:c5:78:79:07:21:f0:b3:e0:09:b6:1a:d6:4d:97:86:4f forked to background, child pid 3183 [ 25.470482][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.480123][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 76.192318][ T5] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. [ 76.555650][ T3600] chnl_net:caif_netlink_parms(): no params data found [ 76.598857][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.606416][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.614488][ T3600] device bridge_slave_0 entered promiscuous mode [ 76.623336][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.630823][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.638534][ T3600] device bridge_slave_1 entered promiscuous mode [ 76.659305][ T3600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.670090][ T3600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.693365][ T3600] team0: Port device team_slave_0 added [ 76.701038][ T3600] team0: Port device team_slave_1 added [ 76.717344][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.724321][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.750265][ T3600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.763305][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.770294][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.796208][ T3600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.822531][ T3600] device hsr_slave_0 entered promiscuous mode [ 76.829656][ T3600] device hsr_slave_1 entered promiscuous mode [ 76.908068][ T3600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.919507][ T3600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.929127][ T3600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.938204][ T3600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.960090][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.967304][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.975154][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.982246][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.025002][ T3600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.037585][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.047959][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.056437][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.065461][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 77.078494][ T3600] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.093234][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.101679][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.108853][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.116777][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.125424][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.132578][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.150870][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.163598][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.171939][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.184247][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.197587][ T3600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.209133][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.217574][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.234764][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.242214][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.255295][ T3600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.370559][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.387485][ T3600] device veth0_vlan entered promiscuous mode [ 77.395506][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.404631][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.412481][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.425266][ T3600] device veth1_vlan entered promiscuous mode [ 77.433475][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.453040][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.461649][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.472904][ T3600] device veth0_macvtap entered promiscuous mode [ 77.482650][ T3600] device veth1_macvtap entered promiscuous mode [ 77.498764][ T3600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.506420][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.516434][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.527950][ T3600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.535558][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.546645][ T3600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.555854][ T3600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.566015][ T3600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.575196][ T3600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.641392][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.649403][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.664800][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.678509][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 77.687175][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.696351][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 77.895553][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found executing program [ 78.079144][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found executing program executing program [ 78.454888][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found executing program [ 78.640692][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 78.652297][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880776d5c00: rx timeout, send abort executing program [ 78.838306][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 78.845111][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073bbc000: rx timeout, send abort [ 78.854265][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888018757400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.869149][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880211c5800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.869169][ C0] vcan0: j1939_xtp_rx_dat_one: 0xffff8880211c5800: last 00 [ 78.869723][ C0] vcan0: j1939_xtp_rx_dat_one: 0xffff8880211c5800: last 00 [ 78.883482][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801bcc3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.890779][ C0] vcan0: j1939_xtp_rx_dat_one: 0xffff8880211c5c00: last 00 [ 78.925776][ C0] vcan0: j1939_xtp_rx_dat_one: 0xffff88806f9ec400: last 15 [ 78.944476][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880211c5c00: 0x00000: (5) Maximal retransmit request limit reached [ 78.955954][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880211c6000: 0x00000: (5) Maximal retransmit request limit reached [ 78.967489][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806f9ec400: 0x00000: (5) Maximal retransmit request limit reached [ 78.979005][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880211c6400: 0x00000: (5) Maximal retransmit request limit reached [ 78.990496][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880211c6800: 0x00000: (5) Maximal retransmit request limit reached [ 79.002089][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880211c6c00: 0x00000: (5) Maximal retransmit request limit reached [ 79.013597][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880211c7000: 0x00000: (5) Maximal retransmit request limit reached [ 79.161025][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880776d5c00: abort rx timeout. Force session deactivation [ 79.211425][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020779800: rx timeout, send abort [ 79.219727][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888074610800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 79.234077][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888074610c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 79.249010][ C1] ------------[ cut here ]------------ [ 79.254601][ C1] WARNING: CPU: 1 PID: 19 at net/can/j1939/transport.c:1090 j1939_session_deactivate+0xaf/0xd0 [ 79.264942][ C1] Modules linked in: [ 79.268823][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-syzkaller #0 [ 79.276716][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.286799][ C1] RIP: 0010:j1939_session_deactivate+0xaf/0xd0 [ 79.293031][ C1] Code: fd 01 76 21 e8 d2 90 4f f9 48 89 ef e8 2a fc ff ff 4c 89 e7 41 89 c5 e8 cf 22 27 01 44 89 e8 5d 41 5c 41 5d c3 e8 b1 90 4f f9 <0f> 0b eb d6 4c 89 ef e8 45 c9 96 f9 eb b5 48 89 ef e8 4b c9 96 f9 [ 79.312647][ C1] RSP: 0018:ffffc90000d979a0 EFLAGS: 00010246 [ 79.318708][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000100 [ 79.326687][ C1] RDX: ffff8880119fd700 RSI: ffffffff8828bc2f RDI: 0000000000000003 [ 79.334665][ C1] RBP: ffff888074610c00 R08: 0000000000000001 R09: ffff888074610c2b [ 79.342646][ C1] R10: ffffffff8828bc03 R11: 0000000000000001 R12: ffff888022601070 [ 79.350641][ C1] R13: 0000000000000001 R14: ffff8880792bb418 R15: ffffffff8ac3eaa0 [ 79.358695][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 79.367636][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.374227][ C1] CR2: 00007fb7585fb048 CR3: 000000007397e000 CR4: 00000000003506e0 [ 79.382245][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.390226][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.398195][ C1] Call Trace: [ 79.401481][ C1] [ 79.404405][ C1] j1939_session_deactivate_activate_next+0x12/0x35 [ 79.411010][ C1] j1939_xtp_rx_abort_one.cold+0x20b/0x33c [ 79.416896][ C1] j1939_tp_recv+0xb3d/0xcb0 [ 79.421588][ C1] j1939_can_recv+0x6ff/0x9a0 [ 79.426256][ C1] ? j1939_netdev_notify+0x1d0/0x1d0 [ 79.431553][ C1] ? j1939_netdev_notify+0x1d0/0x1d0 [ 79.436997][ C1] can_rcv_filter+0x5d4/0x8d0 [ 79.441703][ C1] can_receive+0x31d/0x580 [ 79.446113][ C1] can_rcv+0x120/0x1c0 [ 79.450204][ C1] ? can_receive+0x580/0x580 [ 79.454799][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 79.460704][ C1] ? __netif_receive_skb_core+0x3850/0x3850 [ 79.466604][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 79.471642][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 79.476572][ C1] __netif_receive_skb+0x24/0x1b0 [ 79.481607][ C1] process_backlog+0x2a5/0x6c0 [ 79.486364][ C1] __napi_poll+0xaf/0x440 [ 79.490722][ C1] net_rx_action+0x801/0xb40 [ 79.495332][ C1] ? napi_threaded_poll+0x520/0x520 [ 79.500554][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 79.505417][ C1] __do_softirq+0x29b/0x9c2 [ 79.509922][ C1] ? __irq_exit_rcu+0x180/0x180 [ 79.514798][ C1] run_ksoftirqd+0x2d/0x60 [ 79.519213][ C1] smpboot_thread_fn+0x645/0x9c0 [ 79.524175][ C1] ? __smpboot_create_thread.part.0+0x370/0x370 [ 79.530431][ C1] kthread+0x2e9/0x3a0 [ 79.534502][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 79.540125][ C1] ret_from_fork+0x1f/0x30 [ 79.544568][ C1] [ 79.547577][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 79.554156][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-syzkaller #0 [ 79.562042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.572089][ C1] Call Trace: [ 79.575420][ C1] [ 79.578350][ C1] dump_stack_lvl+0xcd/0x134 [ 79.582938][ C1] panic+0x2b0/0x6dd [ 79.586821][ C1] ? __warn_printk+0xf3/0xf3 [ 79.591416][ C1] ? __warn.cold+0x1d1/0x2cf [ 79.596042][ C1] ? j1939_session_deactivate+0xaf/0xd0 [ 79.601586][ C1] __warn.cold+0x1ec/0x2cf [ 79.605991][ C1] ? j1939_session_deactivate+0xaf/0xd0 [ 79.611531][ C1] report_bug+0x1bd/0x210 [ 79.615853][ C1] handle_bug+0x3c/0x60 [ 79.619999][ C1] exc_invalid_op+0x14/0x40 [ 79.624536][ C1] asm_exc_invalid_op+0x12/0x20 [ 79.630067][ C1] RIP: 0010:j1939_session_deactivate+0xaf/0xd0 [ 79.636211][ C1] Code: fd 01 76 21 e8 d2 90 4f f9 48 89 ef e8 2a fc ff ff 4c 89 e7 41 89 c5 e8 cf 22 27 01 44 89 e8 5d 41 5c 41 5d c3 e8 b1 90 4f f9 <0f> 0b eb d6 4c 89 ef e8 45 c9 96 f9 eb b5 48 89 ef e8 4b c9 96 f9 [ 79.655803][ C1] RSP: 0018:ffffc90000d979a0 EFLAGS: 00010246 [ 79.661858][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000100 [ 79.669816][ C1] RDX: ffff8880119fd700 RSI: ffffffff8828bc2f RDI: 0000000000000003 [ 79.677789][ C1] RBP: ffff888074610c00 R08: 0000000000000001 R09: ffff888074610c2b [ 79.685747][ C1] R10: ffffffff8828bc03 R11: 0000000000000001 R12: ffff888022601070 [ 79.693704][ C1] R13: 0000000000000001 R14: ffff8880792bb418 R15: ffffffff8ac3eaa0 [ 79.701665][ C1] ? j1939_session_deactivate+0x83/0xd0 [ 79.707205][ C1] ? j1939_session_deactivate+0xaf/0xd0 [ 79.713269][ C1] j1939_session_deactivate_activate_next+0x12/0x35 [ 79.719890][ C1] j1939_xtp_rx_abort_one.cold+0x20b/0x33c [ 79.725688][ C1] j1939_tp_recv+0xb3d/0xcb0 [ 79.730279][ C1] j1939_can_recv+0x6ff/0x9a0 [ 79.734957][ C1] ? j1939_netdev_notify+0x1d0/0x1d0 [ 79.740239][ C1] ? j1939_netdev_notify+0x1d0/0x1d0 [ 79.745534][ C1] can_rcv_filter+0x5d4/0x8d0 [ 79.750229][ C1] can_receive+0x31d/0x580 [ 79.754661][ C1] can_rcv+0x120/0x1c0 [ 79.758721][ C1] ? can_receive+0x580/0x580 [ 79.763305][ C1] __netif_receive_skb_one_core+0x114/0x180 [ 79.769195][ C1] ? __netif_receive_skb_core+0x3850/0x3850 [ 79.775083][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 79.780102][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 79.785037][ C1] __netif_receive_skb+0x24/0x1b0 [ 79.790090][ C1] process_backlog+0x2a5/0x6c0 [ 79.794884][ C1] __napi_poll+0xaf/0x440 [ 79.799205][ C1] net_rx_action+0x801/0xb40 [ 79.803786][ C1] ? napi_threaded_poll+0x520/0x520 [ 79.808974][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 79.813818][ C1] __do_softirq+0x29b/0x9c2 [ 79.818312][ C1] ? __irq_exit_rcu+0x180/0x180 [ 79.823152][ C1] run_ksoftirqd+0x2d/0x60 [ 79.827556][ C1] smpboot_thread_fn+0x645/0x9c0 [ 79.832483][ C1] ? __smpboot_create_thread.part.0+0x370/0x370 [ 79.838714][ C1] kthread+0x2e9/0x3a0 [ 79.842777][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 79.848401][ C1] ret_from_fork+0x1f/0x30 [ 79.852820][ C1] [ 79.856204][ C1] Kernel Offset: disabled [ 79.860605][ C1] Rebooting in 86400 seconds..