Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. 2021/09/09 21:28:33 parsed 1 programs 2021/09/09 21:28:34 executed programs: 0 [ 1251.441768][ T6598] chnl_net:caif_netlink_parms(): no params data found [ 1251.534836][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.543441][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.553211][ T6598] device bridge_slave_0 entered promiscuous mode [ 1251.563048][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.570719][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.579353][ T6598] device bridge_slave_1 entered promiscuous mode [ 1251.613648][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.625018][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.659422][ T6598] team0: Port device team_slave_0 added [ 1251.668610][ T6598] team0: Port device team_slave_1 added [ 1251.695317][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.702326][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.728818][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.743563][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.751528][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.778143][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.819641][ T6598] device hsr_slave_0 entered promiscuous mode [ 1251.826730][ T6598] device hsr_slave_1 entered promiscuous mode [ 1251.953269][ T6598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1251.963517][ T6598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1251.973205][ T6598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1251.983701][ T6598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1252.007175][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.014349][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.022036][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.029263][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.074968][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.089410][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1252.101351][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.110671][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.119805][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1252.132968][ T6598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.143960][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1252.153154][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.160255][ T6670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.171829][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1252.180978][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.188059][ T6932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.207800][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1252.217006][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1252.235689][ T6598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1252.247289][ T6598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1252.261015][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1252.269416][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1252.278463][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1252.287058][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1252.306529][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1252.313992][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1252.326558][ T6598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.347379][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1252.365515][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1252.373779][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1252.382269][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1252.393163][ T6598] device veth0_vlan entered promiscuous mode [ 1252.405308][ T6598] device veth1_vlan entered promiscuous mode [ 1252.426516][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1252.434382][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1252.444949][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1252.453649][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1252.465213][ T6598] device veth0_macvtap entered promiscuous mode [ 1252.476045][ T6598] device veth1_macvtap entered promiscuous mode [ 1252.494038][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.502379][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1252.510931][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1252.520350][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1252.529393][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1252.543147][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.552354][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1252.561171][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1252.572474][ T6598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.583277][ T6598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.592507][ T6598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.601427][ T6598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.699631][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.714338][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.736027][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1252.758166][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.766773][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.775600][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1253.287187][ T6670] Bluetooth: hci0: command 0x0409 tx timeout 2021/09/09 21:28:39 executed programs: 46 [ 1255.366321][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 1257.436616][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 1259.525912][ T6670] Bluetooth: hci0: command 0x0419 tx timeout 2021/09/09 21:28:44 executed programs: 150 [ 1261.951538][ T1407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.966846][ T6598] syz-executor.0 (6598) used greatest stack depth: 22360 bytes left [ 1262.306886][ T1407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.684109][ T1407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.116152][ T1407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.021101][ T7601] chnl_net:caif_netlink_parms(): no params data found [ 1265.362556][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.369959][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.380146][ T7601] device bridge_slave_0 entered promiscuous mode [ 1265.392139][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.399540][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.407974][ T7601] device bridge_slave_1 entered promiscuous mode [ 1265.439153][ T7601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.726319][ T7601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.760672][ T7601] team0: Port device team_slave_0 added [ 1265.768310][ T7601] team0: Port device team_slave_1 added [ 1266.079740][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.087535][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.116201][ T7601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.155400][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 1266.408652][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.415907][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1266.442000][ T7601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.764572][ T7601] device hsr_slave_0 entered promiscuous mode [ 1266.771260][ T7601] device hsr_slave_1 entered promiscuous mode [ 1266.778078][ T7601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1266.787717][ T7601] Cannot create hsr debugfs directory [ 1267.808452][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.821699][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1267.830597][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1267.842497][ T7601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.862704][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1267.880433][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1267.889628][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.896759][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.911621][ T1407] device hsr_slave_0 left promiscuous mode [ 1267.919143][ T1407] device hsr_slave_1 left promiscuous mode [ 1267.927628][ T1407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.935875][ T1407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.944846][ T1407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.952717][ T1407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.962482][ T1407] device bridge_slave_1 left promiscuous mode [ 1267.969261][ T1407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.983384][ T1407] device bridge_slave_0 left promiscuous mode [ 1267.990962][ T1407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.007677][ T1407] device veth1_macvtap left promiscuous mode [ 1268.013919][ T1407] device veth0_macvtap left promiscuous mode [ 1268.020920][ T1407] device veth1_vlan left promiscuous mode [ 1268.027588][ T1407] device veth0_vlan left promiscuous mode [ 1268.235266][ T7959] Bluetooth: hci0: command 0x041b tx timeout [ 1270.315102][ T7959] Bluetooth: hci0: command 0x040f tx timeout [ 1272.404870][ T7959] Bluetooth: hci0: command 0x0419 tx timeout [ 1281.671038][ T1407] team0 (unregistering): Port device team_slave_1 removed [ 1281.690517][ T1407] team0 (unregistering): Port device team_slave_0 removed [ 1281.707154][ T1407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.721582][ T1407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.773247][ T1407] bond0 (unregistering): Released all slaves [ 1281.827083][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1281.836520][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1281.846202][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1281.855692][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.862746][ T6934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.871236][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1281.880220][ T6934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1281.901409][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1281.919291][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1281.928128][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1281.937981][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1281.953073][ T7601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1281.963796][ T7601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1281.977497][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1281.985709][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1281.993883][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1282.004309][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1282.012577][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1282.022717][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1282.051468][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1282.059044][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1282.075348][ T7601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.165045][ T6762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1282.176347][ T6762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1282.205643][ T6762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1282.213956][ T6762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1282.226693][ T7601] device veth0_vlan entered promiscuous mode [ 1282.235291][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1282.243058][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1282.259734][ T7601] device veth1_vlan entered promiscuous mode [ 1282.289947][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1282.299831][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1282.308196][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1282.316763][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1282.328283][ T7601] device veth0_macvtap entered promiscuous mode [ 1282.341256][ T7601] device veth1_macvtap entered promiscuous mode [ 1282.366228][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.373547][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1282.383159][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1282.391647][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1282.400836][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1282.413636][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.422425][ T6762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1282.433068][ T6762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1282.538356][ T7953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.553311][ T7953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.585076][ T6670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1282.621740][ T7953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.657439][ T7953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.676041][ T6931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2021/09/09 21:29:06 executed programs: 167 2021/09/09 21:29:12 executed programs: 252 2021/09/09 21:29:17 executed programs: 358 2021/09/09 21:29:22 executed programs: 462 [ 1299.753883][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.760624][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 2021/09/09 21:29:27 executed programs: 570 2021/09/09 21:29:32 executed programs: 679 2021/09/09 21:29:37 executed programs: 789 2021/09/09 21:29:42 executed programs: 895 2021/09/09 21:29:47 executed programs: 1005 [ 1328.839030][T11350] chnl_net:caif_netlink_parms(): no params data found [ 1329.471107][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.478272][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.488539][T11350] device bridge_slave_0 entered promiscuous mode [ 1329.498152][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.507292][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.515568][T11350] device bridge_slave_1 entered promiscuous mode [ 1329.565919][T11350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.867817][T11350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.903676][T11350] team0: Port device team_slave_0 added [ 1329.913735][T11350] team0: Port device team_slave_1 added [ 1329.966087][ T1407] device hsr_slave_0 left promiscuous mode [ 1329.972720][ T1407] device hsr_slave_1 left promiscuous mode [ 1329.978966][ T1407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.987477][ T1407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.997421][ T1407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.007568][ T1407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.016523][ T1407] device bridge_slave_1 left promiscuous mode [ 1330.024257][ T1407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.033441][ T1407] device bridge_slave_0 left promiscuous mode [ 1330.039619][ T1407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.052394][ T1407] device veth1_macvtap left promiscuous mode [ 1330.058427][ T1407] device veth0_macvtap left promiscuous mode [ 1330.064941][ T1407] device veth1_vlan left promiscuous mode [ 1330.070723][ T1407] device veth0_vlan left promiscuous mode [ 1330.076814][ T6762] Bluetooth: hci0: command 0x0409 tx timeout [ 1332.153658][ T6934] Bluetooth: hci0: command 0x041b tx timeout [ 1334.230679][ T6934] Bluetooth: hci0: command 0x040f tx timeout [ 1336.313551][ T6934] Bluetooth: hci0: command 0x0419 tx timeout [ 1343.463475][ T22] ================================================================== [ 1343.471710][ T22] BUG: KASAN: use-after-free in __d_alloc+0x19a/0x950 [ 1343.478569][ T22] Read of size 5 at addr ffff88807428e620 by task kdevtmpfs/22 [ 1343.486100][ T22] [ 1343.488417][ T22] CPU: 0 PID: 22 Comm: kdevtmpfs Not tainted 5.14.0-syzkaller #0 [ 1343.496132][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.506182][ T22] Call Trace: [ 1343.509458][ T22] dump_stack_lvl+0xcd/0x134 [ 1343.514104][ T22] print_address_description.constprop.0.cold+0x6c/0x309 [ 1343.521161][ T22] ? __d_alloc+0x19a/0x950 [ 1343.525578][ T22] ? __d_alloc+0x19a/0x950 [ 1343.529993][ T22] kasan_report.cold+0x83/0xdf [ 1343.534758][ T22] ? __d_alloc+0x19a/0x950 [ 1343.539177][ T22] kasan_check_range+0x13d/0x180 [ 1343.544155][ T22] memcpy+0x20/0x60 [ 1343.547986][ T22] __d_alloc+0x19a/0x950 [ 1343.552234][ T22] d_alloc+0x4a/0x230 [ 1343.556217][ T22] __lookup_hash+0xc8/0x180 [ 1343.560722][ T22] kern_path_locked+0x17e/0x320 [ 1343.565580][ T22] ? filename_lookup+0x80/0x80 [ 1343.570360][ T22] handle_remove+0xa2/0x5fe [ 1343.574921][ T22] ? cacheinfo_cpu_online.cold+0x3e/0x3e [ 1343.580566][ T22] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1343.586575][ T22] ? finish_task_switch.isra.0+0x232/0xa50 [ 1343.592415][ T22] ? find_held_lock+0x2d/0x110 [ 1343.597201][ T22] ? devtmpfsd+0xaa/0x2a3 [ 1343.601558][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 1343.606408][ T22] ? do_raw_spin_lock+0x120/0x2b0 [ 1343.611436][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 1343.616388][ T22] devtmpfsd+0x1b9/0x2a3 [ 1343.620637][ T22] ? dmar_validate_one_drhd+0x24d/0x24d [ 1343.626189][ T22] kthread+0x3e5/0x4d0 [ 1343.630308][ T22] ? set_kthread_struct+0x130/0x130 [ 1343.635512][ T22] ret_from_fork+0x1f/0x30 [ 1343.639959][ T22] [ 1343.642275][ T22] Allocated by task 22: [ 1343.646417][ T22] kasan_save_stack+0x1b/0x40 [ 1343.651125][ T22] __kasan_slab_alloc+0x83/0xb0 [ 1343.655972][ T22] kmem_cache_alloc+0x209/0x390 [ 1343.660825][ T22] getname_kernel+0x4e/0x370 [ 1343.665413][ T22] kern_path_locked+0x71/0x320 [ 1343.670176][ T22] handle_remove+0xa2/0x5fe [ 1343.674680][ T22] devtmpfsd+0x1b9/0x2a3 [ 1343.678920][ T22] kthread+0x3e5/0x4d0 [ 1343.682991][ T22] ret_from_fork+0x1f/0x30 [ 1343.687406][ T22] [ 1343.689718][ T22] Freed by task 22: [ 1343.693516][ T22] kasan_save_stack+0x1b/0x40 [ 1343.698194][ T22] kasan_set_track+0x1c/0x30 [ 1343.702783][ T22] kasan_set_free_info+0x20/0x30 [ 1343.707720][ T22] __kasan_slab_free+0xff/0x130 [ 1343.712570][ T22] slab_free_freelist_hook+0x81/0x190 [ 1343.717942][ T22] kmem_cache_free+0x8a/0x5b0 [ 1343.722618][ T22] putname.part.0+0xe1/0x120 [ 1343.727208][ T22] kern_path_locked+0xc2/0x320 [ 1343.732029][ T22] handle_remove+0xa2/0x5fe [ 1343.736567][ T22] devtmpfsd+0x1b9/0x2a3 [ 1343.740838][ T22] kthread+0x3e5/0x4d0 [ 1343.744931][ T22] ret_from_fork+0x1f/0x30 [ 1343.749347][ T22] [ 1343.751661][ T22] The buggy address belongs to the object at ffff88807428e600 [ 1343.751661][ T22] which belongs to the cache names_cache of size 4096 [ 1343.765797][ T22] The buggy address is located 32 bytes inside of [ 1343.765797][ T22] 4096-byte region [ffff88807428e600, ffff88807428f600) [ 1343.779069][ T22] The buggy address belongs to the page: [ 1343.784685][ T22] page:ffffea0001d0a200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74288 [ 1343.794845][ T22] head:ffffea0001d0a200 order:3 compound_mapcount:0 compound_pincount:0 [ 1343.803162][ T22] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1343.811150][ T22] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888010dc53c0 [ 1343.819746][ T22] raw: 0000000000000000 0000000080070007 00000001ffffffff 0000000000000000 [ 1343.828334][ T22] page dumped because: kasan: bad access detected [ 1343.834754][ T22] page_owner tracks the page as allocated [ 1343.840462][ T22] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3054, ts 23264225668, free_ts 13815952594 [ 1343.859567][ T22] get_page_from_freelist+0xa72/0x2f80 [ 1343.865197][ T22] __alloc_pages+0x1b2/0x500 [ 1343.869828][ T22] alloc_pages+0x1a7/0x300 [ 1343.874679][ T22] new_slab+0x319/0x490 [ 1343.878841][ T22] ___slab_alloc+0x921/0xfe0 [ 1343.883432][ T22] __slab_alloc.constprop.0+0x4d/0xa0 [ 1343.888808][ T22] kmem_cache_alloc+0x365/0x390 [ 1343.893660][ T22] getname_flags.part.0+0x50/0x4f0 [ 1343.898771][ T22] getname+0x8e/0xd0 [ 1343.902747][ T22] do_sys_openat2+0xf5/0x4d0 [ 1343.907441][ T22] __x64_sys_open+0x119/0x1c0 [ 1343.912187][ T22] do_syscall_64+0x35/0xb0 [ 1343.916667][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1343.922597][ T22] page last free stack trace: [ 1343.927274][ T22] free_pcp_prepare+0x2c5/0x780 [ 1343.932136][ T22] free_unref_page+0x19/0x690 [ 1343.936822][ T22] free_contig_range+0xa8/0xf0 [ 1343.941591][ T22] destroy_args+0xa8/0x646 [ 1343.946066][ T22] debug_vm_pgtable+0x295b/0x29ed [ 1343.951092][ T22] do_one_initcall+0x103/0x650 [ 1343.955861][ T22] kernel_init_freeable+0x6b1/0x73a [ 1343.961056][ T22] kernel_init+0x1a/0x1d0 [ 1343.965383][ T22] ret_from_fork+0x1f/0x30 [ 1343.969800][ T22] [ 1343.972116][ T22] Memory state around the buggy address: [ 1343.977736][ T22] ffff88807428e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1343.985793][ T22] ffff88807428e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1343.993854][ T22] >ffff88807428e600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1344.001909][ T22] ^ [ 1344.007005][ T22] ffff88807428e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1344.015060][ T22] ffff88807428e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1344.023112][ T22] ================================================================== [ 1344.031161][ T22] Disabling lock debugging due to kernel taint [ 1344.039940][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 1344.046537][ T22] CPU: 1 PID: 22 Comm: kdevtmpfs Tainted: G B 5.14.0-syzkaller #0 [ 1344.055693][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.065746][ T22] Call Trace: [ 1344.069027][ T22] dump_stack_lvl+0xcd/0x134 [ 1344.073628][ T22] panic+0x2b0/0x6dd [ 1344.077532][ T22] ? __warn_printk+0xf3/0xf3 [ 1344.082105][ T22] ? preempt_schedule_common+0x59/0xc0 [ 1344.087551][ T22] ? __d_alloc+0x19a/0x950 [ 1344.091952][ T22] ? preempt_schedule_thunk+0x16/0x18 [ 1344.097307][ T22] ? trace_hardirqs_on+0x38/0x1c0 [ 1344.102360][ T22] ? trace_hardirqs_on+0x51/0x1c0 [ 1344.107369][ T22] ? __d_alloc+0x19a/0x950 [ 1344.111767][ T22] ? __d_alloc+0x19a/0x950 [ 1344.116166][ T22] end_report.cold+0x63/0x6f [ 1344.120740][ T22] kasan_report.cold+0x71/0xdf [ 1344.125485][ T22] ? __d_alloc+0x19a/0x950 [ 1344.129884][ T22] kasan_check_range+0x13d/0x180 [ 1344.134819][ T22] memcpy+0x20/0x60 [ 1344.138608][ T22] __d_alloc+0x19a/0x950 [ 1344.142834][ T22] d_alloc+0x4a/0x230 [ 1344.146800][ T22] __lookup_hash+0xc8/0x180 [ 1344.151290][ T22] kern_path_locked+0x17e/0x320 [ 1344.156124][ T22] ? filename_lookup+0x80/0x80 [ 1344.160873][ T22] handle_remove+0xa2/0x5fe [ 1344.165364][ T22] ? cacheinfo_cpu_online.cold+0x3e/0x3e [ 1344.170980][ T22] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1344.176944][ T22] ? finish_task_switch.isra.0+0x232/0xa50 [ 1344.182735][ T22] ? find_held_lock+0x2d/0x110 [ 1344.187482][ T22] ? devtmpfsd+0xaa/0x2a3 [ 1344.191793][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 1344.196639][ T22] ? do_raw_spin_lock+0x120/0x2b0 [ 1344.201649][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 1344.206572][ T22] devtmpfsd+0x1b9/0x2a3 [ 1344.210812][ T22] ? dmar_validate_one_drhd+0x24d/0x24d [ 1344.216342][ T22] kthread+0x3e5/0x4d0 [ 1344.220408][ T22] ? set_kthread_struct+0x130/0x130 [ 1344.225603][ T22] ret_from_fork+0x1f/0x30 [ 1344.230245][ T22] Kernel Offset: disabled [ 1344.234567][ T22] Rebooting in 86400 seconds..