Warning: Permanently added '10.128.1.28' (ECDSA) to the list of known hosts. 2021/09/09 14:00:42 parsed 1 programs 2021/09/09 14:00:42 executed programs: 0 syzkaller login: [ 1581.676403][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 1581.734318][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.743295][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.752531][ T6560] device bridge_slave_0 entered promiscuous mode [ 1581.761835][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.768908][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.776876][ T6560] device bridge_slave_1 entered promiscuous mode [ 1581.801928][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.813084][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.840445][ T6560] team0: Port device team_slave_0 added [ 1581.848101][ T6560] team0: Port device team_slave_1 added [ 1581.868913][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.876963][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.902884][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.915180][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.922454][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.948364][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.980526][ T6560] device hsr_slave_0 entered promiscuous mode [ 1581.987612][ T6560] device hsr_slave_1 entered promiscuous mode [ 1582.084467][ T6560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1582.095360][ T6560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1582.104507][ T6560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1582.114110][ T6560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1582.134465][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.141695][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.149127][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.156331][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.196476][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.208235][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1582.220012][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.228703][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.237237][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1582.249634][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.260096][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1582.268762][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.276470][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.286691][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1582.296730][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.303801][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.323325][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1582.332377][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1582.340765][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1582.352665][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1582.365273][ T6560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1582.376628][ T6560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1582.384893][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1582.401026][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1582.409036][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1582.420278][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.438342][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1582.457008][ T6560] device veth0_vlan entered promiscuous mode [ 1582.464063][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1582.472962][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1582.480448][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1582.494158][ T6560] device veth1_vlan entered promiscuous mode [ 1582.513452][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1582.521870][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1582.529853][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1582.540949][ T6560] device veth0_macvtap entered promiscuous mode [ 1582.550256][ T6560] device veth1_macvtap entered promiscuous mode [ 1582.567242][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.574836][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1582.584073][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1582.595229][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.603199][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1582.613490][ T6560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.624036][ T6560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.632926][ T6560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.642251][ T6560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.717713][ T6652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.732608][ T6652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.762393][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1582.772837][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.780787][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.790454][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1583.746245][ T1173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.992066][ T6560] syz-executor.0 (6560) used greatest stack depth: 22360 bytes left [ 1586.266326][ T1173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.307403][ T6932] chnl_net:caif_netlink_parms(): no params data found [ 1588.360553][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.368239][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.376507][ T6932] device bridge_slave_0 entered promiscuous mode [ 1588.386145][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.393743][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.401560][ T6932] device bridge_slave_1 entered promiscuous mode [ 1588.424383][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.436104][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.465753][ T6932] team0: Port device team_slave_0 added [ 1588.475356][ T6932] team0: Port device team_slave_1 added [ 1588.762749][ T1173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.782681][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.789691][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.816215][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.828387][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.835852][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.862507][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.172093][ T1173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.185634][ T6932] device hsr_slave_0 entered promiscuous mode [ 1589.192388][ T6932] device hsr_slave_1 entered promiscuous mode [ 1589.198868][ T6932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1589.206884][ T6932] Cannot create hsr debugfs directory [ 1589.279895][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.287006][ T6932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.294609][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.301886][ T6932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.313114][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.322980][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.462798][ T6932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.191650][ T6929] Bluetooth: hci0: command 0x0409 tx timeout [ 1590.210420][ T6932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.218844][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1590.227003][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1590.251113][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1590.260338][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1590.269021][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.276107][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.283815][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1590.293142][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1590.301454][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.308481][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.316037][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1590.324508][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1590.333053][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1590.342100][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1590.350260][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1590.358885][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1590.368022][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1590.605851][ T6932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1590.618254][ T6932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1590.629845][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1590.639597][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1590.648454][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1590.657366][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1590.666218][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1590.909069][ T6932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.918758][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1590.926285][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1591.213449][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1591.223994][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1591.237806][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1591.247464][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1591.257860][ T6932] device veth0_vlan entered promiscuous mode [ 1591.265182][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1591.273170][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1591.521249][ T6932] device veth1_vlan entered promiscuous mode [ 1591.530965][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1591.538758][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1591.556212][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1591.564976][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1591.805247][ T6932] device veth0_macvtap entered promiscuous mode [ 1591.814525][ T6932] device veth1_macvtap entered promiscuous mode [ 1591.830260][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1591.841511][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.852751][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.860257][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1591.868925][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1591.877185][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1591.885909][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1592.133580][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1592.144322][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.155214][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1592.166225][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1592.176104][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1592.271065][ T6929] Bluetooth: hci0: command 0x041b tx timeout [ 1592.701488][ T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.709415][ T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.734884][ T6930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.750745][ T6930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.995624][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1593.004399][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1593.925060][ T1173] device hsr_slave_0 left promiscuous mode [ 1593.931903][ T1173] device hsr_slave_1 left promiscuous mode [ 1593.938677][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1593.946430][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.955424][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1593.963379][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.972546][ T1173] device bridge_slave_1 left promiscuous mode [ 1593.979349][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.992169][ T1173] device bridge_slave_0 left promiscuous mode [ 1593.998316][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.013669][ T1173] device veth1_macvtap left promiscuous mode [ 1594.019790][ T1173] device veth0_macvtap left promiscuous mode [ 1594.026613][ T1173] device veth1_vlan left promiscuous mode [ 1594.032887][ T1173] device veth0_vlan left promiscuous mode [ 1598.031691][ T6594] Bluetooth: hci0: command 0x0409 tx timeout [ 1600.110902][ T6594] Bluetooth: hci0: command 0x041b tx timeout [ 1602.190906][ T6897] Bluetooth: hci0: command 0x040f tx timeout [ 1604.270876][ T6594] Bluetooth: hci0: command 0x0419 tx timeout [ 1605.365399][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 1605.378775][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 1605.393086][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.406375][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.452619][ T1173] bond0 (unregistering): Released all slaves [ 1605.579138][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 1605.653662][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.663390][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.674789][ T7331] device bridge_slave_0 entered promiscuous mode [ 1605.684293][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.692944][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.701771][ T7331] device bridge_slave_1 entered promiscuous mode [ 1605.733428][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.744506][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.773657][ T7331] team0: Port device team_slave_0 added [ 1605.783257][ T7331] team0: Port device team_slave_1 added [ 1605.808995][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.816011][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.847048][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.861714][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.868678][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.896377][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.943212][ T7331] device hsr_slave_0 entered promiscuous mode [ 1605.953667][ T7331] device hsr_slave_1 entered promiscuous mode [ 1606.074156][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.081427][ T7331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.089109][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.096298][ T7331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.160380][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.177650][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1606.187774][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.196323][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.209907][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.223453][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1606.232006][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.239047][ T6894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.261583][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1606.269882][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.277064][ T6894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.302214][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1606.312158][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1606.321439][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1606.329704][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1606.339644][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1606.348989][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1606.373723][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1606.382176][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1606.395109][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.477975][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1606.507128][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1606.517648][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1606.528629][ T7331] device veth0_vlan entered promiscuous mode [ 1606.536868][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1606.546434][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1606.562978][ T7331] device veth1_vlan entered promiscuous mode [ 1606.593533][ T1356] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.600077][ T1356] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.605578][ T7331] device veth0_macvtap entered promiscuous mode [ 1606.631853][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1606.643672][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1606.651728][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1606.660107][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1606.674327][ T7331] device veth1_macvtap entered promiscuous mode [ 1606.710975][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1606.711379][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1606.730320][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1606.760918][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.782031][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.791352][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1606.799730][ T6894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1606.812354][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1606.830885][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.861747][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.870048][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1606.879479][ T6535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1607.029117][ T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.053872][ T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.092382][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1607.127682][ T256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.139158][ T256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.172803][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1611.020030][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 1611.537494][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.546088][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.554707][ T7689] device bridge_slave_0 entered promiscuous mode [ 1611.564382][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.572527][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.581957][ T7689] device bridge_slave_1 entered promiscuous mode [ 1612.075431][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.090652][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.430923][ T6594] Bluetooth: hci0: command 0x0409 tx timeout [ 1612.594131][ T7689] team0: Port device team_slave_0 added [ 1612.602638][ T7689] team0: Port device team_slave_1 added [ 1612.628427][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.636389][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1612.669802][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.149214][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.157546][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.185159][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1613.679195][ T7689] device hsr_slave_0 entered promiscuous mode [ 1613.686352][ T7689] device hsr_slave_1 entered promiscuous mode [ 1613.694426][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1613.703834][ T7689] Cannot create hsr debugfs directory [ 1614.327346][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.511354][ T6895] Bluetooth: hci0: command 0x041b tx timeout [ 1614.597563][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1614.605377][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1614.614987][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1614.636868][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1614.652389][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1614.662458][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.669510][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1614.677593][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1614.686496][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1614.695065][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.702147][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1614.951230][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1614.959538][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1614.969545][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1614.984228][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1614.993486][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1615.019479][ T1173] device hsr_slave_0 left promiscuous mode [ 1615.028957][ T1173] device hsr_slave_1 left promiscuous mode [ 1615.037722][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.047871][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.058007][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.065840][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.075460][ T1173] device bridge_slave_1 left promiscuous mode [ 1615.081907][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.091210][ T1173] device bridge_slave_0 left promiscuous mode [ 1615.097931][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.110162][ T1173] device hsr_slave_0 left promiscuous mode [ 1615.117188][ T1173] device hsr_slave_1 left promiscuous mode [ 1615.124152][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.131742][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.139913][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.147469][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.155709][ T1173] device bridge_slave_1 left promiscuous mode [ 1615.162301][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.170344][ T1173] device bridge_slave_0 left promiscuous mode [ 1615.176934][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.189558][ T1173] device veth1_macvtap left promiscuous mode [ 1615.195823][ T1173] device veth0_macvtap left promiscuous mode [ 1615.202083][ T1173] device veth1_vlan left promiscuous mode [ 1615.207838][ T1173] device veth0_vlan left promiscuous mode [ 1615.214661][ T1173] device veth1_macvtap left promiscuous mode [ 1615.220654][ T1173] device veth0_macvtap left promiscuous mode [ 1615.227335][ T1173] device veth1_vlan left promiscuous mode [ 1615.233231][ T1173] device veth0_vlan left promiscuous mode [ 1616.590898][ T6929] Bluetooth: hci0: command 0x040f tx timeout [ 1618.670919][ T6929] Bluetooth: hci0: command 0x0419 tx timeout [ 1638.028950][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 1638.045066][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 1638.055800][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.068268][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.113906][ T1173] bond0 (unregistering): Released all slaves [ 1638.161425][ T22] ================================================================== [ 1638.169802][ T22] BUG: KASAN: use-after-free in __d_alloc+0x19a/0x950 [ 1638.176661][ T22] Read of size 5 at addr ffff88801a59b320 by task kdevtmpfs/22 [ 1638.184277][ T22] [ 1638.186580][ T22] CPU: 1 PID: 22 Comm: kdevtmpfs Not tainted 5.14.0-syzkaller #0 [ 1638.194273][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.204396][ T22] Call Trace: [ 1638.207658][ T22] dump_stack_lvl+0xcd/0x134 [ 1638.212241][ T22] print_address_description.constprop.0.cold+0x6c/0x309 [ 1638.219262][ T22] ? __d_alloc+0x19a/0x950 [ 1638.223661][ T22] ? __d_alloc+0x19a/0x950 [ 1638.228144][ T22] kasan_report.cold+0x83/0xdf [ 1638.232889][ T22] ? __d_alloc+0x19a/0x950 [ 1638.237285][ T22] kasan_check_range+0x13d/0x180 [ 1638.242207][ T22] memcpy+0x20/0x60 [ 1638.246245][ T22] __d_alloc+0x19a/0x950 [ 1638.250497][ T22] d_alloc+0x4a/0x230 [ 1638.254479][ T22] __lookup_hash+0xc8/0x180 [ 1638.258969][ T22] kern_path_locked+0x17e/0x320 [ 1638.263954][ T22] ? filename_lookup+0x80/0x80 [ 1638.268717][ T22] handle_remove+0xa2/0x5fe [ 1638.273209][ T22] ? cacheinfo_cpu_online.cold+0x3e/0x3e [ 1638.278831][ T22] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1638.284795][ T22] ? finish_task_switch.isra.0+0x232/0xa50 [ 1638.290607][ T22] ? find_held_lock+0x2d/0x110 [ 1638.295352][ T22] ? devtmpfsd+0xaa/0x2a3 [ 1638.299662][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 1638.304492][ T22] ? do_raw_spin_lock+0x120/0x2b0 [ 1638.309497][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 1638.314506][ T22] devtmpfsd+0x1b9/0x2a3 [ 1638.318730][ T22] ? dmar_validate_one_drhd+0x24d/0x24d [ 1638.324262][ T22] kthread+0x3e5/0x4d0 [ 1638.328316][ T22] ? set_kthread_struct+0x130/0x130 [ 1638.333496][ T22] ret_from_fork+0x1f/0x30 [ 1638.337921][ T22] [ 1638.340225][ T22] Allocated by task 22: [ 1638.344594][ T22] kasan_save_stack+0x1b/0x40 [ 1638.349261][ T22] __kasan_slab_alloc+0x83/0xb0 [ 1638.354195][ T22] kmem_cache_alloc+0x209/0x390 [ 1638.359028][ T22] getname_kernel+0x4e/0x370 [ 1638.363686][ T22] kern_path_locked+0x71/0x320 [ 1638.368438][ T22] handle_remove+0xa2/0x5fe [ 1638.372921][ T22] devtmpfsd+0x1b9/0x2a3 [ 1638.377168][ T22] kthread+0x3e5/0x4d0 [ 1638.381220][ T22] ret_from_fork+0x1f/0x30 [ 1638.385731][ T22] [ 1638.388034][ T22] Freed by task 22: [ 1638.391815][ T22] kasan_save_stack+0x1b/0x40 [ 1638.397517][ T22] kasan_set_track+0x1c/0x30 [ 1638.402093][ T22] kasan_set_free_info+0x20/0x30 [ 1638.407026][ T22] __kasan_slab_free+0xff/0x130 [ 1638.412117][ T22] slab_free_freelist_hook+0x81/0x190 [ 1638.417556][ T22] kmem_cache_free+0x8a/0x5b0 [ 1638.423256][ T22] putname.part.0+0xe1/0x120 [ 1638.427944][ T22] kern_path_locked+0xc2/0x320 [ 1638.433223][ T22] handle_remove+0xa2/0x5fe [ 1638.437804][ T22] devtmpfsd+0x1b9/0x2a3 [ 1638.442029][ T22] kthread+0x3e5/0x4d0 [ 1638.446094][ T22] ret_from_fork+0x1f/0x30 [ 1638.450492][ T22] [ 1638.452902][ T22] The buggy address belongs to the object at ffff88801a59b300 [ 1638.452902][ T22] which belongs to the cache names_cache of size 4096 [ 1638.467053][ T22] The buggy address is located 32 bytes inside of [ 1638.467053][ T22] 4096-byte region [ffff88801a59b300, ffff88801a59c300) [ 1638.481615][ T22] The buggy address belongs to the page: [ 1638.487234][ T22] page:ffffea0000696600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a598 [ 1638.497803][ T22] head:ffffea0000696600 order:3 compound_mapcount:0 compound_pincount:0 [ 1638.510832][ T22] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1638.519088][ T22] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888010dc53c0 [ 1638.527656][ T22] raw: 0000000000000000 0000000080070007 00000001ffffffff 0000000000000000 [ 1638.536219][ T22] page dumped because: kasan: bad access detected [ 1638.542615][ T22] page_owner tracks the page as allocated [ 1638.548313][ T22] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2964, ts 1581633487538, free_ts 1581615088307 [ 1638.567755][ T22] get_page_from_freelist+0xa72/0x2f80 [ 1638.573200][ T22] __alloc_pages+0x1b2/0x500 [ 1638.577769][ T22] alloc_pages+0x1a7/0x300 [ 1638.582164][ T22] new_slab+0x319/0x490 [ 1638.586331][ T22] ___slab_alloc+0x921/0xfe0 [ 1638.590902][ T22] __slab_alloc.constprop.0+0x4d/0xa0 [ 1638.596256][ T22] kmem_cache_alloc+0x365/0x390 [ 1638.601094][ T22] getname_flags.part.0+0x50/0x4f0 [ 1638.606308][ T22] getname_flags+0x9a/0xe0 [ 1638.610704][ T22] user_path_at_empty+0x2b/0x90 [ 1638.615534][ T22] do_faccessat+0x127/0x850 [ 1638.620018][ T22] do_syscall_64+0x35/0xb0 [ 1638.624413][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1638.630287][ T22] page last free stack trace: [ 1638.634932][ T22] free_pcp_prepare+0x2c5/0x780 [ 1638.639760][ T22] free_unref_page+0x19/0x690 [ 1638.644414][ T22] __unfreeze_partials+0x340/0x360 [ 1638.649514][ T22] qlist_free_all+0x5a/0xc0 [ 1638.654160][ T22] kasan_quarantine_reduce+0x180/0x200 [ 1638.659602][ T22] __kasan_slab_alloc+0x95/0xb0 [ 1638.664433][ T22] kmem_cache_alloc+0x209/0x390 [ 1638.669265][ T22] security_file_alloc+0x34/0x170 [ 1638.674270][ T22] __alloc_file+0xd8/0x280 [ 1638.678666][ T22] alloc_empty_file+0x6d/0x170 [ 1638.683408][ T22] path_openat+0xe4/0x2740 [ 1638.687806][ T22] do_filp_open+0x1aa/0x400 [ 1638.692286][ T22] do_sys_openat2+0x16d/0x4d0 [ 1638.696940][ T22] __x64_sys_open+0x119/0x1c0 [ 1638.701683][ T22] do_syscall_64+0x35/0xb0 [ 1638.706352][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1638.712231][ T22] [ 1638.714538][ T22] Memory state around the buggy address: [ 1638.720163][ T22] ffff88801a59b200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1638.728200][ T22] ffff88801a59b280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1638.736244][ T22] >ffff88801a59b300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1638.744277][ T22] ^ [ 1638.749403][ T22] ffff88801a59b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1638.757444][ T22] ffff88801a59b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1638.765482][ T22] ================================================================== [ 1638.773517][ T22] Disabling lock debugging due to kernel taint [ 1638.783282][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 1638.789867][ T22] CPU: 0 PID: 22 Comm: kdevtmpfs Tainted: G B 5.14.0-syzkaller #0 [ 1638.798967][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.809072][ T22] Call Trace: [ 1638.812330][ T22] dump_stack_lvl+0xcd/0x134 [ 1638.816901][ T22] panic+0x2b0/0x6dd [ 1638.820773][ T22] ? __warn_printk+0xf3/0xf3 [ 1638.825340][ T22] ? preempt_schedule_common+0x59/0xc0 [ 1638.830777][ T22] ? __d_alloc+0x19a/0x950 [ 1638.835175][ T22] ? preempt_schedule_thunk+0x16/0x18 [ 1638.840914][ T22] ? trace_hardirqs_on+0x38/0x1c0 [ 1638.845918][ T22] ? trace_hardirqs_on+0x51/0x1c0 [ 1638.850944][ T22] ? __d_alloc+0x19a/0x950 [ 1638.855361][ T22] ? __d_alloc+0x19a/0x950 [ 1638.859754][ T22] end_report.cold+0x63/0x6f [ 1638.864322][ T22] kasan_report.cold+0x71/0xdf [ 1638.869068][ T22] ? __d_alloc+0x19a/0x950 [ 1638.873481][ T22] kasan_check_range+0x13d/0x180 [ 1638.878397][ T22] memcpy+0x20/0x60 [ 1638.882181][ T22] __d_alloc+0x19a/0x950 [ 1638.886401][ T22] d_alloc+0x4a/0x230 [ 1638.890361][ T22] __lookup_hash+0xc8/0x180 [ 1638.894844][ T22] kern_path_locked+0x17e/0x320 [ 1638.899672][ T22] ? filename_lookup+0x80/0x80 [ 1638.904502][ T22] handle_remove+0xa2/0x5fe [ 1638.908985][ T22] ? cacheinfo_cpu_online.cold+0x3e/0x3e [ 1638.914596][ T22] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1638.920554][ T22] ? finish_task_switch.isra.0+0x232/0xa50 [ 1638.926512][ T22] ? find_held_lock+0x2d/0x110 [ 1638.931256][ T22] ? devtmpfsd+0xaa/0x2a3 [ 1638.935564][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 1638.940391][ T22] ? do_raw_spin_lock+0x120/0x2b0 [ 1638.945392][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 1638.950308][ T22] devtmpfsd+0x1b9/0x2a3 [ 1638.954529][ T22] ? dmar_validate_one_drhd+0x24d/0x24d [ 1638.960052][ T22] kthread+0x3e5/0x4d0 [ 1638.964116][ T22] ? set_kthread_struct+0x130/0x130 [ 1638.969291][ T22] ret_from_fork+0x1f/0x30 [ 1638.974976][ T22] Kernel Offset: disabled [ 1638.979286][ T22] Rebooting in 86400 seconds..