Warning: Permanently added '10.128.1.61' (ECDSA) to the list of known hosts. 2021/07/01 08:23:33 fuzzer started 2021/07/01 08:23:33 connecting to host at 10.128.0.169:42471 2021/07/01 08:23:33 checking machine... 2021/07/01 08:23:33 checking revisions... 2021/07/01 08:23:33 testing simple program... syzkaller login: [ 61.460503][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 61.496276][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.504677][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.512592][ T8459] device bridge_slave_0 entered promiscuous mode [ 61.521283][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.529526][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.537748][ T8459] device bridge_slave_1 entered promiscuous mode [ 61.553473][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.564636][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.586966][ T8459] team0: Port device team_slave_0 added [ 61.594462][ T8459] team0: Port device team_slave_1 added [ 61.607832][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.615148][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.641580][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.653320][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.660444][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.687110][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.708751][ T8459] device hsr_slave_0 entered promiscuous mode [ 61.715466][ T8459] device hsr_slave_1 entered promiscuous mode [ 61.780178][ T8459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.789067][ T8459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.802834][ T8459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.813067][ T8459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.831990][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.839070][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.846571][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.853613][ T8459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.884972][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.896780][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.905091][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.912818][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.921574][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 61.932455][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.942394][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.951759][ T4875] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.958855][ T4875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.974702][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.983144][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.990405][ T4875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.007652][ T8459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.020128][ T8459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.032668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.042047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.050831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.059439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.076526][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.084254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.091971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.100138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.108041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.125735][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.142832][ T8459] device veth0_vlan entered promiscuous mode [ 62.151289][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.160555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.168978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.180865][ T8459] device veth1_vlan entered promiscuous mode [ 62.188285][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.207711][ T8459] device veth0_macvtap entered promiscuous mode [ 62.214863][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.222781][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.232098][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.242710][ T8459] device veth1_macvtap entered promiscuous mode [ 62.257656][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.265864][ T3167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.278146][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.286816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.298105][ T8459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.309298][ T8459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.320681][ T8459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.331561][ T8459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.379683][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.391800][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.416308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.431106][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.441055][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.450445][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2021/07/01 08:23:35 building call list... [ 62.795196][ T25] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 64.402593][ T8436] BUG: sleeping function called from invalid context at mm/page_alloc.c:5179 [ 64.411565][ T8436] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 8436, name: syz-fuzzer [ 64.420780][ T8436] INFO: lockdep is turned off. [ 64.425526][ T8436] irq event stamp: 0 [ 64.429507][ T8436] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 64.436621][ T8436] hardirqs last disabled at (0): [] copy_process+0x1e1b/0x74c0 [ 64.446017][ T8436] softirqs last enabled at (0): [] copy_process+0x1e5c/0x74c0 [ 64.455462][ T8436] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 64.462673][ T8436] CPU: 1 PID: 8436 Comm: syz-fuzzer Tainted: G W 5.13.0-syzkaller #0 [ 64.472571][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.482826][ T8436] Call Trace: [ 64.486192][ T8436] dump_stack_lvl+0xcd/0x134 [ 64.490777][ T8436] ___might_sleep.cold+0x1f1/0x237 [ 64.495881][ T8436] prepare_alloc_pages+0x3da/0x580 [ 64.500992][ T8436] ? do_syscall_64+0x35/0xb0 [ 64.505578][ T8436] __alloc_pages+0x12f/0x500 [ 64.510177][ T8436] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 64.517052][ T8436] ? __unwind_start+0x51b/0x800 [ 64.521997][ T8436] ? __kernel_text_address+0x9/0x30 [ 64.527379][ T8436] alloc_pages+0x18c/0x2a0 [ 64.531797][ T8436] stack_depot_save+0x39d/0x4e0 [ 64.536644][ T8436] save_stack+0x15e/0x1e0 [ 64.540992][ T8436] ? register_early_stack+0xb0/0xb0 [ 64.546208][ T8436] ? lock_release+0x720/0x720 [ 64.551234][ T8436] ? __alloc_pages_bulk+0x8b9/0x1870 [ 64.556520][ T8436] ? __vmalloc_node_range+0x39d/0x960 [ 64.561914][ T8436] ? vzalloc+0x67/0x80 [ 64.565973][ T8436] ? n_tty_open+0x16/0x170 [ 64.570555][ T8436] ? tty_ldisc_open+0x9b/0x110 [ 64.575307][ T8436] ? tty_ldisc_setup+0x43/0x100 [ 64.580145][ T8436] ? tty_init_dev.part.0+0x1f4/0x610 [ 64.585417][ T8436] ? tty_open+0xb16/0x1000 [ 64.589822][ T8436] ? chrdev_open+0x266/0x770 [ 64.594496][ T8436] ? do_dentry_open+0x4c8/0x11c0 [ 64.599433][ T8436] ? path_openat+0x1c0e/0x27e0 [ 64.604184][ T8436] ? do_filp_open+0x190/0x3d0 [ 64.608850][ T8436] ? do_sys_openat2+0x16d/0x420 [ 64.613688][ T8436] ? __x64_sys_openat+0x13f/0x1f0 [ 64.618703][ T8436] ? do_syscall_64+0x35/0xb0 [ 64.623280][ T8436] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.629348][ T8436] ? preempt_count_add+0x74/0x140 [ 64.634457][ T8436] __set_page_owner+0x50/0x290 [ 64.639216][ T8436] ? post_alloc_hook+0x145/0x1e0 [ 64.644142][ T8436] __alloc_pages_bulk+0x8b9/0x1870 [ 64.649248][ T8436] ? __alloc_pages+0x500/0x500 [ 64.654098][ T8436] ? rwlock_bug.part.0+0x90/0x90 [ 64.659130][ T8436] ? trace_kmalloc_node+0x32/0xf0 [ 64.664143][ T8436] ? trace_kmalloc_node+0x32/0xf0 [ 64.669153][ T8436] __vmalloc_node_range+0x39d/0x960 [ 64.674347][ T8436] ? vfree_atomic+0xe0/0xe0 [ 64.678933][ T8436] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 64.684740][ T8436] ? __ldsem_down_read_nested+0x850/0x850 [ 64.690464][ T8436] ? __wake_up_common+0x650/0x650 [ 64.695479][ T8436] ? n_tty_open+0x16/0x170 [ 64.699884][ T8436] vzalloc+0x67/0x80 [ 64.703770][ T8436] ? n_tty_open+0x16/0x170 [ 64.708176][ T8436] n_tty_open+0x16/0x170 [ 64.712507][ T8436] ? n_tty_set_termios+0x1010/0x1010 [ 64.717895][ T8436] tty_ldisc_open+0x9b/0x110 [ 64.722476][ T8436] tty_ldisc_setup+0x43/0x100 [ 64.727144][ T8436] tty_init_dev.part.0+0x1f4/0x610 [ 64.732250][ T8436] tty_open+0xb16/0x1000 [ 64.736481][ T8436] ? tty_init_dev+0x80/0x80 [ 64.740969][ T8436] ? rwlock_bug.part.0+0x90/0x90 [ 64.745898][ T8436] ? tty_init_dev+0x80/0x80 [ 64.750918][ T8436] chrdev_open+0x266/0x770 [ 64.755586][ T8436] ? cdev_device_add+0x210/0x210 [ 64.760609][ T8436] ? security_file_open+0x205/0x4f0 [ 64.765884][ T8436] do_dentry_open+0x4c8/0x11c0 [ 64.770640][ T8436] ? cdev_device_add+0x210/0x210 [ 64.775580][ T8436] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 64.781910][ T8436] ? may_open+0x1f6/0x420 [ 64.786232][ T8436] path_openat+0x1c0e/0x27e0 [ 64.791001][ T8436] ? __kprobes_text_end+0x1d3fc8/0x1d3fc8 [ 64.796710][ T8436] ? arch_stack_walk+0x93/0xe0 [ 64.801481][ T8436] ? path_lookupat+0x850/0x850 [ 64.806251][ T8436] ? stack_trace_save+0x8c/0xc0 [ 64.811178][ T8436] ? stack_trace_consume_entry+0x160/0x160 [ 64.816985][ T8436] do_filp_open+0x190/0x3d0 [ 64.821475][ T8436] ? may_open_dev+0xf0/0xf0 [ 64.825979][ T8436] ? do_raw_spin_lock+0x120/0x2b0 [ 64.831162][ T8436] ? rwlock_bug.part.0+0x90/0x90 [ 64.836344][ T8436] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 64.842569][ T8436] ? _find_next_bit+0x1e3/0x260 [ 64.847448][ T8436] ? _raw_spin_unlock+0x24/0x40 [ 64.852380][ T8436] ? alloc_fd+0x2e6/0x660 [ 64.856704][ T8436] do_sys_openat2+0x16d/0x420 [ 64.861371][ T8436] ? lock_acquire+0x442/0x510 [ 64.866035][ T8436] ? security_file_free+0xa4/0xd0 [ 64.871312][ T8436] ? build_open_flags+0x6f0/0x6f0 [ 64.876322][ T8436] ? lock_acquire+0x442/0x510 [ 64.880985][ T8436] ? lock_release+0x522/0x720 [ 64.885823][ T8436] ? __context_tracking_exit+0xb8/0xe0 [ 64.891276][ T8436] ? lock_downgrade+0x6e0/0x6e0 [ 64.896125][ T8436] __x64_sys_openat+0x13f/0x1f0 [ 64.901060][ T8436] ? __ia32_sys_open+0x1c0/0x1c0 [ 64.905987][ T8436] ? syscall_enter_from_user_mode+0x21/0x70 [ 64.911868][ T8436] do_syscall_64+0x35/0xb0 [ 64.916359][ T8436] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.922245][ T8436] RIP: 0033:0x4af20a [ 64.926130][ T8436] Code: e8 3b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 64.945811][ T8436] RSP: 002b:000000c0003293f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000101 [ 64.954388][ T8436] RAX: ffffffffffffffda RBX: 000000c00001e800 RCX: 00000000004af20a [ 64.962450][ T8436] RDX: 0000000000000000 RSI: 000000c0001a5a50 RDI: ffffffffffffff9c [ 64.970407][ T8436] RBP: 000000c000329470 R08: 0000000000000000 R09: 0000000000000000 [ 64.978465][ T8436] R10: 0000000000000000 R11: 0000000000000216 R12: 00000000000001a6 [ 64.986423][ T8436] R13: 00000000000001a5 R14: 0000000000000200 R15: 000000c00029c280 [ 65.094079][ T8436] can: request_module (can-proto-0) failed. [ 65.105108][ T8436] can: request_module (can-proto-0) failed. [ 65.116208][ T8436] can: request_module (can-proto-0) failed.