Warning: Permanently added '10.128.1.75' (ECDSA) to the list of known hosts. syzkaller login: [ 49.249066][ T3597] chnl_net:caif_netlink_parms(): no params data found [ 49.290107][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.297695][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.305773][ T3597] device bridge_slave_0 entered promiscuous mode [ 49.315047][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.322448][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.330097][ T3597] device bridge_slave_1 entered promiscuous mode [ 49.350042][ T3597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.360935][ T3597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.384329][ T3597] team0: Port device team_slave_0 added [ 49.391871][ T3597] team0: Port device team_slave_1 added [ 49.408328][ T3597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.415324][ T3597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.441442][ T3597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.454983][ T3597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.461949][ T3597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.488142][ T3597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.515134][ T3597] device hsr_slave_0 entered promiscuous mode [ 49.521913][ T3597] device hsr_slave_1 entered promiscuous mode [ 49.606549][ T3597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.618000][ T3597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.627196][ T3597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.636200][ T3597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.658260][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.665451][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.673417][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.680480][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.724842][ T3597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.738461][ T917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.748575][ T917] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.759155][ T917] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.767387][ T917] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 49.780388][ T3597] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.791043][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.800300][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.807403][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.817927][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.827637][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.834733][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.853046][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.865537][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.873482][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.887953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.900669][ T3597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.913695][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.921471][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.939601][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.947303][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.959027][ T3597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.073811][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.083077][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.091357][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.099369][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.110395][ T3597] device veth0_vlan entered promiscuous mode [ 50.121464][ T3597] device veth1_vlan entered promiscuous mode [ 50.139536][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.147600][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.156458][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.167770][ T3597] device veth0_macvtap entered promiscuous mode [ 50.177286][ T3597] device veth1_macvtap entered promiscuous mode [ 50.191428][ T3597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.200967][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.210168][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.221363][ T3597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.228922][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.240661][ T3597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.249666][ T3597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.259433][ T3597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.269087][ T3597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 50.316603][ T3597] FAULT_INJECTION: forcing a failure. [ 50.316603][ T3597] name failslab, interval 1, probability 0, space 0, times 1 [ 50.329331][ T3597] CPU: 0 PID: 3597 Comm: syz-executor998 Not tainted 5.17.0-rc4-syzkaller-00192-gef527f968ae0 #0 [ 50.339834][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.349874][ T3597] Call Trace: [ 50.353151][ T3597] [ 50.356067][ T3597] dump_stack_lvl+0xcd/0x134 [ 50.360662][ T3597] should_fail.cold+0x5/0xa [ 50.365152][ T3597] should_failslab+0x5/0x10 [ 50.369650][ T3597] __kmalloc_node_track_caller+0x7d/0x470 [ 50.375354][ T3597] ? __napi_alloc_skb+0x70/0x310 [ 50.380285][ T3597] __alloc_skb+0xde/0x340 [ 50.384603][ T3597] __napi_alloc_skb+0x70/0x310 [ 50.389352][ T3597] napi_get_frags+0x5e/0x140 [ 50.393930][ T3597] tun_get_user+0x1cb3/0x3720 [ 50.398604][ T3597] ? tun_build_skb+0x1010/0x1010 [ 50.403545][ T3597] ? lock_downgrade+0x6e0/0x6e0 [ 50.408503][ T3597] tun_chr_write_iter+0xdd/0x1a0 [ 50.413428][ T3597] new_sync_write+0x431/0x660 [ 50.418105][ T3597] ? new_sync_read+0x6e0/0x6e0 [ 50.422879][ T3597] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 50.429111][ T3597] ? security_file_permission+0xab/0xd0 [ 50.434660][ T3597] vfs_write+0x7cd/0xae0 [ 50.438889][ T3597] ksys_write+0x12d/0x250 [ 50.443208][ T3597] ? __ia32_sys_read+0xb0/0xb0 [ 50.447957][ T3597] ? syscall_enter_from_user_mode+0x21/0x70 [ 50.453840][ T3597] do_syscall_64+0x35/0xb0 [ 50.458245][ T3597] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.464123][ T3597] RIP: 0033:0x7efe89ac43d9 [ 50.468528][ T3597] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.488148][ T3597] RSP: 002b:00007ffde0a9e8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.496565][ T3597] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007efe89ac43d9 [ 50.504523][ T3597] RDX: 000000002000fd85 RSI: 0000000020000040 RDI: 0000000000000003 [ 50.512476][ T3597] RBP: 00007ffde0a9e900 R08: 0000000000000001 R09: 0000000000000000 [ 50.520428][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.528379][ T3597] R13: 00007ffde0a9e920 R14: 0000000000000003 R15: 0000000000000000 [ 50.536345][ T3597] [ 50.543437][ T3597] ------------[ cut here ]------------ [ 50.548921][ T3597] WARNING: CPU: 0 PID: 3597 at mm/page_alloc.c:5364 __alloc_pages+0x45d/0x500 [ 50.558013][ T3597] Modules linked in: [ 50.562192][ T3597] CPU: 0 PID: 3597 Comm: syz-executor998 Not tainted 5.17.0-rc4-syzkaller-00192-gef527f968ae0 #0 [ 50.573166][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.583350][ T3597] RIP: 0010:__alloc_pages+0x45d/0x500 [ 50.588739][ T3597] Code: be c9 00 00 00 48 c7 c7 00 db b7 89 c6 05 88 6b c8 0b 01 e8 5c 6c 53 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ee 74 ff ff e9 [ 50.608695][ T3597] RSP: 0018:ffffc90001f5f8f0 EFLAGS: 00010246 [ 50.617143][ T3597] RAX: 0000000000000000 RBX: 1ffff920003ebf1f RCX: dffffc0000000000 [ 50.625367][ T3597] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000060a20 [ 50.633515][ T3597] RBP: 0000000000000000 R08: 00000000000a2a20 R09: 0000000000000001 [ 50.641576][ T3597] R10: ffffffff872b2125 R11: 0000000000000000 R12: 000000002000ff00 [ 50.649569][ T3597] R13: 0000000000060a20 R14: 0000000000000000 R15: 0000000000000000 [ 50.657646][ T3597] FS: 0000555556f39300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 50.666931][ T3597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.673723][ T3597] CR2: 00007efe89b3c150 CR3: 00000000711aa000 CR4: 00000000003506f0 [ 50.682257][ T3597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.690267][ T3597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.698340][ T3597] Call Trace: [ 50.701738][ T3597] [ 50.704661][ T3597] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 50.711429][ T3597] ? __schedule+0xa9c/0x4910 [ 50.716140][ T3597] ? dump_stack_lvl+0x120/0x134 [ 50.721007][ T3597] ? dump_stack_lvl+0x12a/0x134 [ 50.726204][ T3597] kmalloc_large_node+0x62/0x130 [ 50.731170][ T3597] __kmalloc_node_track_caller+0x35a/0x470 [ 50.738035][ T3597] ? tun_get_user+0x194b/0x3720 [ 50.743058][ T3597] pskb_expand_head+0xf5b/0x1060 [ 50.748026][ T3597] tun_get_user+0x194b/0x3720 [ 50.752833][ T3597] ? tun_build_skb+0x1010/0x1010 [ 50.757786][ T3597] ? lock_downgrade+0x6e0/0x6e0 [ 50.763229][ T3597] tun_chr_write_iter+0xdd/0x1a0 [ 50.768197][ T3597] new_sync_write+0x431/0x660 [ 50.774316][ T3597] ? new_sync_read+0x6e0/0x6e0 [ 50.779118][ T3597] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 50.785796][ T3597] ? security_file_permission+0xab/0xd0 [ 50.791392][ T3597] vfs_write+0x7cd/0xae0 [ 50.796254][ T3597] ksys_write+0x12d/0x250 [ 50.800610][ T3597] ? __ia32_sys_read+0xb0/0xb0 [ 50.805939][ T3597] ? syscall_enter_from_user_mode+0x21/0x70 [ 50.812031][ T3597] do_syscall_64+0x35/0xb0 [ 50.816477][ T3597] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.822795][ T3597] RIP: 0033:0x7efe89ac43d9 [ 50.827225][ T3597] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.848237][ T3597] RSP: 002b:00007ffde0a9e8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.856862][ T3597] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007efe89ac43d9 [ 50.864991][ T3597] RDX: 000000002000fd85 RSI: 0000000020000040 RDI: 0000000000000003 [ 50.873114][ T3597] RBP: 00007ffde0a9e900 R08: 0000000000000001 R09: 0000000000000000 [ 50.881077][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.889441][ T3597] R13: 00007ffde0a9e920 R14: 0000000000000003 R15: 0000000000000000 [ 50.897637][ T3597] [ 50.900663][ T3597] Kernel panic - not syncing: panic_on_warn set ... [ 50.907249][ T3597] CPU: 0 PID: 3597 Comm: syz-executor998 Not tainted 5.17.0-rc4-syzkaller-00192-gef527f968ae0 #0 [ 50.917749][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.927784][ T3597] Call Trace: [ 50.931048][ T3597] [ 50.933966][ T3597] dump_stack_lvl+0xcd/0x134 [ 50.938562][ T3597] panic+0x2b0/0x6dd [ 50.942447][ T3597] ? __warn_printk+0xf3/0xf3 [ 50.947027][ T3597] ? __warn.cold+0x1d1/0x2cf [ 50.951604][ T3597] ? __alloc_pages+0x45d/0x500 [ 50.956353][ T3597] __warn.cold+0x1ec/0x2cf [ 50.960758][ T3597] ? __alloc_pages+0x45d/0x500 [ 50.965505][ T3597] report_bug+0x1bd/0x210 [ 50.969824][ T3597] handle_bug+0x3c/0x60 [ 50.973963][ T3597] exc_invalid_op+0x14/0x40 [ 50.978449][ T3597] asm_exc_invalid_op+0x12/0x20 [ 50.983296][ T3597] RIP: 0010:__alloc_pages+0x45d/0x500 [ 50.988655][ T3597] Code: be c9 00 00 00 48 c7 c7 00 db b7 89 c6 05 88 6b c8 0b 01 e8 5c 6c 53 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ee 74 ff ff e9 [ 51.008245][ T3597] RSP: 0018:ffffc90001f5f8f0 EFLAGS: 00010246 [ 51.014727][ T3597] RAX: 0000000000000000 RBX: 1ffff920003ebf1f RCX: dffffc0000000000 [ 51.022678][ T3597] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000060a20 [ 51.030650][ T3597] RBP: 0000000000000000 R08: 00000000000a2a20 R09: 0000000000000001 [ 51.038601][ T3597] R10: ffffffff872b2125 R11: 0000000000000000 R12: 000000002000ff00 [ 51.046554][ T3597] R13: 0000000000060a20 R14: 0000000000000000 R15: 0000000000000000 [ 51.054511][ T3597] ? pskb_expand_head+0xf35/0x1060 [ 51.059622][ T3597] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 51.066376][ T3597] ? __schedule+0xa9c/0x4910 [ 51.070952][ T3597] ? dump_stack_lvl+0x120/0x134 [ 51.075787][ T3597] ? dump_stack_lvl+0x12a/0x134 [ 51.080628][ T3597] kmalloc_large_node+0x62/0x130 [ 51.085552][ T3597] __kmalloc_node_track_caller+0x35a/0x470 [ 51.091357][ T3597] ? tun_get_user+0x194b/0x3720 [ 51.096201][ T3597] pskb_expand_head+0xf5b/0x1060 [ 51.101151][ T3597] tun_get_user+0x194b/0x3720 [ 51.105822][ T3597] ? tun_build_skb+0x1010/0x1010 [ 51.110763][ T3597] ? lock_downgrade+0x6e0/0x6e0 [ 51.115608][ T3597] tun_chr_write_iter+0xdd/0x1a0 [ 51.120549][ T3597] new_sync_write+0x431/0x660 [ 51.125214][ T3597] ? new_sync_read+0x6e0/0x6e0 [ 51.129971][ T3597] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 51.136267][ T3597] ? security_file_permission+0xab/0xd0 [ 51.141810][ T3597] vfs_write+0x7cd/0xae0 [ 51.146041][ T3597] ksys_write+0x12d/0x250 [ 51.150370][ T3597] ? __ia32_sys_read+0xb0/0xb0 [ 51.155122][ T3597] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.161004][ T3597] do_syscall_64+0x35/0xb0 [ 51.165430][ T3597] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.171309][ T3597] RIP: 0033:0x7efe89ac43d9 [ 51.175708][ T3597] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.195295][ T3597] RSP: 002b:00007ffde0a9e8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.203688][ T3597] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007efe89ac43d9 [ 51.211659][ T3597] RDX: 000000002000fd85 RSI: 0000000020000040 RDI: 0000000000000003 [ 51.219609][ T3597] RBP: 00007ffde0a9e900 R08: 0000000000000001 R09: 0000000000000000 [ 51.227564][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.235533][ T3597] R13: 00007ffde0a9e920 R14: 0000000000000003 R15: 0000000000000000 [ 51.243498][ T3597] [ 51.246769][ T3597] Kernel Offset: disabled [ 51.251186][ T3597] Rebooting in 86400 seconds..