Warning: Permanently added '10.128.1.68' (ECDSA) to the list of known hosts. 2021/07/19 22:06:06 fuzzer started 2021/07/19 22:06:07 connecting to host at 10.128.0.169:37555 2021/07/19 22:06:07 checking machine... 2021/07/19 22:06:07 checking revisions... 2021/07/19 22:06:07 testing simple program... syzkaller login: [ 62.720786][ T8461] chnl_net:caif_netlink_parms(): no params data found [ 62.758083][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.766233][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.774261][ T8461] device bridge_slave_0 entered promiscuous mode [ 62.781722][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.789288][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.797008][ T8461] device bridge_slave_1 entered promiscuous mode [ 62.812945][ T8461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.824252][ T8461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.841020][ T8461] team0: Port device team_slave_0 added [ 62.848163][ T8461] team0: Port device team_slave_1 added [ 62.861965][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.870104][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.896456][ T8461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.908537][ T8461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.915922][ T8461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.942850][ T8461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.964928][ T8461] device hsr_slave_0 entered promiscuous mode [ 62.971456][ T8461] device hsr_slave_1 entered promiscuous mode [ 63.036873][ T8461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.046207][ T8461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.055706][ T8461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.064933][ T8461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.082653][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.089857][ T8461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.097195][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.104388][ T8461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.134769][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.146408][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.155254][ T3190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.162848][ T3190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.171501][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 63.181547][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.191598][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.200376][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.207504][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.217853][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.227038][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.234202][ T8680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.254594][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.263082][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.271567][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.279923][ T8680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.289693][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.298346][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.313780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.321259][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.331400][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.346496][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.364031][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.372167][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.380753][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.388939][ T8461] device veth0_vlan entered promiscuous mode [ 63.399710][ T8461] device veth1_vlan entered promiscuous mode [ 63.416851][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.424855][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.432856][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.444031][ T8461] device veth0_macvtap entered promiscuous mode [ 63.452418][ T8461] device veth1_macvtap entered promiscuous mode [ 63.467722][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.475707][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.484837][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.495889][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.503604][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.515124][ T8461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.524183][ T8461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.532938][ T8461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.541737][ T8461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.582011][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.603204][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.617998][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.639049][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.648065][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.656167][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2021/07/19 22:06:09 building call list... [ 64.030892][ T133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 65.654256][ T8450] BUG: sleeping function called from invalid context at mm/page_alloc.c:5167 [ 65.663028][ T8450] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 8450, name: syz-fuzzer [ 65.672055][ T8450] INFO: lockdep is turned off. [ 65.676841][ T8450] irq event stamp: 0 [ 65.680712][ T8450] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 65.687800][ T8450] hardirqs last disabled at (0): [] copy_process+0x1dcd/0x74d0 [ 65.697053][ T8450] softirqs last enabled at (0): [] copy_process+0x1e0e/0x74d0 [ 65.706253][ T8450] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 65.713355][ T8450] CPU: 1 PID: 8450 Comm: syz-fuzzer Tainted: G W 5.14.0-rc1-syzkaller #0 [ 65.723073][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.733115][ T8450] Call Trace: [ 65.736383][ T8450] dump_stack_lvl+0xcd/0x134 [ 65.740970][ T8450] ___might_sleep.cold+0x1f1/0x237 [ 65.746085][ T8450] prepare_alloc_pages+0x3da/0x580 [ 65.751192][ T8450] ? do_syscall_64+0x35/0xb0 [ 65.755772][ T8450] __alloc_pages+0x12f/0x500 [ 65.760352][ T8450] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 65.767292][ T8450] ? __unwind_start+0x51b/0x800 [ 65.772138][ T8450] ? __kernel_text_address+0x9/0x30 [ 65.777330][ T8450] alloc_pages+0x18c/0x2a0 [ 65.781916][ T8450] stack_depot_save+0x39d/0x4e0 [ 65.786757][ T8450] save_stack+0x15e/0x1e0 [ 65.791076][ T8450] ? register_early_stack+0xb0/0xb0 [ 65.796261][ T8450] ? lock_release+0x720/0x720 [ 65.801105][ T8450] ? __alloc_pages_bulk+0x8b9/0x1870 [ 65.806467][ T8450] ? __vmalloc_node_range+0x39d/0x960 [ 65.811828][ T8450] ? vzalloc+0x67/0x80 [ 65.815884][ T8450] ? n_tty_open+0x16/0x170 [ 65.820287][ T8450] ? tty_ldisc_open+0x9b/0x110 [ 65.825036][ T8450] ? tty_ldisc_setup+0x43/0x100 [ 65.829870][ T8450] ? tty_init_dev.part.0+0x1f4/0x610 [ 65.835162][ T8450] ? tty_open+0xb16/0x1000 [ 65.839565][ T8450] ? chrdev_open+0x266/0x770 [ 65.844140][ T8450] ? do_dentry_open+0x4c8/0x11d0 [ 65.849063][ T8450] ? path_openat+0x1c23/0x27f0 [ 65.853824][ T8450] ? do_filp_open+0x1aa/0x400 [ 65.858577][ T8450] ? do_sys_openat2+0x16d/0x420 [ 65.863413][ T8450] ? __x64_sys_openat+0x13f/0x1f0 [ 65.868425][ T8450] ? do_syscall_64+0x35/0xb0 [ 65.873023][ T8450] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.879108][ T8450] ? preempt_count_add+0x74/0x140 [ 65.884147][ T8450] __set_page_owner+0x50/0x290 [ 65.889002][ T8450] ? post_alloc_hook+0x145/0x1e0 [ 65.893932][ T8450] __alloc_pages_bulk+0x8b9/0x1870 [ 65.899037][ T8450] ? __alloc_pages+0x500/0x500 [ 65.903810][ T8450] ? rwlock_bug.part.0+0x90/0x90 [ 65.908737][ T8450] ? trace_kmalloc_node+0x32/0x100 [ 65.913848][ T8450] ? rcu_read_lock_sched_held+0xd/0x70 [ 65.919748][ T8450] ? trace_kmalloc_node+0x32/0x100 [ 65.924934][ T8450] __vmalloc_node_range+0x39d/0x960 [ 65.930124][ T8450] ? vfree_atomic+0xe0/0xe0 [ 65.934803][ T8450] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 65.940602][ T8450] ? __ldsem_down_read_nested+0x850/0x850 [ 65.946415][ T8450] ? __wake_up_common+0x650/0x650 [ 65.951444][ T8450] ? n_tty_open+0x16/0x170 [ 65.955860][ T8450] vzalloc+0x67/0x80 [ 65.959773][ T8450] ? n_tty_open+0x16/0x170 [ 65.964182][ T8450] n_tty_open+0x16/0x170 [ 65.968416][ T8450] ? n_tty_set_termios+0x1010/0x1010 [ 65.973691][ T8450] tty_ldisc_open+0x9b/0x110 [ 65.978275][ T8450] tty_ldisc_setup+0x43/0x100 [ 65.982937][ T8450] tty_init_dev.part.0+0x1f4/0x610 [ 65.988040][ T8450] tty_open+0xb16/0x1000 [ 65.992272][ T8450] ? tty_init_dev+0x80/0x80 [ 65.996761][ T8450] ? rwlock_bug.part.0+0x90/0x90 [ 66.001689][ T8450] ? tty_init_dev+0x80/0x80 [ 66.006180][ T8450] chrdev_open+0x266/0x770 [ 66.010588][ T8450] ? cdev_device_add+0x210/0x210 [ 66.015524][ T8450] ? security_file_open+0x205/0x4f0 [ 66.020798][ T8450] do_dentry_open+0x4c8/0x11d0 [ 66.025549][ T8450] ? cdev_device_add+0x210/0x210 [ 66.030498][ T8450] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 66.036810][ T8450] ? may_open+0x1f6/0x420 [ 66.041124][ T8450] path_openat+0x1c23/0x27f0 [ 66.045702][ T8450] ? i8237A_resume+0x30/0x90 [ 66.050279][ T8450] ? path_lookupat+0x860/0x860 [ 66.055037][ T8450] ? stack_trace_save+0x8c/0xc0 [ 66.059972][ T8450] ? stack_trace_consume_entry+0x160/0x160 [ 66.065770][ T8450] do_filp_open+0x1aa/0x400 [ 66.070280][ T8450] ? may_open_dev+0xf0/0xf0 [ 66.074972][ T8450] ? rwlock_bug.part.0+0x90/0x90 [ 66.079910][ T8450] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 66.086142][ T8450] ? _find_next_bit+0x1e3/0x260 [ 66.090991][ T8450] ? _raw_spin_unlock+0x24/0x40 [ 66.095832][ T8450] ? alloc_fd+0x2f0/0x670 [ 66.100152][ T8450] do_sys_openat2+0x16d/0x420 [ 66.104905][ T8450] ? lock_acquire+0x442/0x510 [ 66.109564][ T8450] ? security_file_free+0xa4/0xd0 [ 66.114574][ T8450] ? build_open_flags+0x6f0/0x6f0 [ 66.119597][ T8450] ? lock_acquire+0x442/0x510 [ 66.124264][ T8450] ? lock_release+0x522/0x720 [ 66.128942][ T8450] ? __context_tracking_exit+0xb8/0xe0 [ 66.134388][ T8450] ? lock_downgrade+0x6e0/0x6e0 [ 66.139224][ T8450] __x64_sys_openat+0x13f/0x1f0 [ 66.144201][ T8450] ? __ia32_sys_open+0x1c0/0x1c0 [ 66.149125][ T8450] ? syscall_enter_from_user_mode+0x21/0x70 [ 66.155009][ T8450] do_syscall_64+0x35/0xb0 [ 66.159433][ T8450] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.165319][ T8450] RIP: 0033:0x4af20a [ 66.169215][ T8450] Code: e8 3b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 66.188808][ T8450] RSP: 002b:000000c0004d33f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000101 [ 66.197228][ T8450] RAX: ffffffffffffffda RBX: 000000c00001e800 RCX: 00000000004af20a [ 66.205183][ T8450] RDX: 0000000000000000 RSI: 000000c0001b5a70 RDI: ffffffffffffff9c [ 66.213920][ T8450] RBP: 000000c0004d3470 R08: 0000000000000000 R09: 0000000000000000 [ 66.221877][ T8450] R10: 0000000000000000 R11: 0000000000000216 R12: 00000000000001a8 [ 66.229918][ T8450] R13: 00000000000001a7 R14: 0000000000000200 R15: 000000c0005230e0 [ 66.277015][ T8450] can: request_module (can-proto-0) failed. [ 66.287831][ T8450] can: request_module (can-proto-0) failed. [ 66.298321][ T8450] can: request_module (can-proto-0) failed.