DUID 00:04:e3:a1:4c:5b:a4:47:39:93:9a:5d:f6:69:14:97:a9:57 forked to background, child pid 3183 [ 30.157298][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.167538][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 81.405028][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts. 2021/12/21 01:53:09 parsed 1 programs [ 1095.075430][ T3671] cgroup: Unknown subsys name 'net' [ 1095.190898][ T3671] cgroup: Unknown subsys name 'rlimit' 2021/12/21 01:53:10 executed programs: 0 [ 1098.522779][ T46] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1102.682754][ T46] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1106.842741][ T46] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1111.002777][ T46] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1113.087553][ T3679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1113.095809][ T3679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1113.103703][ T3679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1113.111973][ T3679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1113.120020][ T3679] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1113.127564][ T3679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1113.214275][ T3688] chnl_net:caif_netlink_parms(): no params data found [ 1113.260165][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.267760][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.275838][ T3688] device bridge_slave_0 entered promiscuous mode [ 1113.285607][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.292901][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.300603][ T3688] device bridge_slave_1 entered promiscuous mode [ 1113.321925][ T3688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.334227][ T3688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.356417][ T3688] team0: Port device team_slave_0 added [ 1113.363891][ T3688] team0: Port device team_slave_1 added [ 1113.381595][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.388617][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.414610][ T3688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.426917][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.433951][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.459876][ T3688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.485247][ T3688] device hsr_slave_0 entered promiscuous mode [ 1113.491815][ T3688] device hsr_slave_1 entered promiscuous mode [ 1113.572502][ T3688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1113.584387][ T3688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1113.593216][ T3688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1113.603008][ T3688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1113.625041][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.632359][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.640222][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.647314][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.690287][ T3688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.705405][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1113.716424][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.726539][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.735487][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1113.749465][ T3688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.760177][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1113.769624][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.776789][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.789447][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1113.797948][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.805206][ T3672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.825931][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1113.834612][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1113.843328][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1113.855390][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1113.868699][ T3688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.879918][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1113.888949][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1113.911394][ T3688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.918915][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1113.926455][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1113.944762][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1113.962464][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1113.971698][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1113.979699][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1113.990587][ T3688] device veth0_vlan entered promiscuous mode [ 1114.002298][ T3688] device veth1_vlan entered promiscuous mode [ 1114.020318][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1114.029812][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1114.038284][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1114.051274][ T3688] device veth0_macvtap entered promiscuous mode [ 1114.060726][ T3688] device veth1_macvtap entered promiscuous mode [ 1114.076640][ T3688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.084573][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1114.094233][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1114.106512][ T3688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.114376][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1114.125794][ T3688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.135215][ T3688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.145014][ T3688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.154064][ T3688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.215724][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.224195][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.239006][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1114.252470][ T3694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.261469][ T3694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.271871][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2021/12/21 01:53:29 executed programs: 1 [ 1114.552962][ C0] hrtimer: interrupt took 36909 ns [ 1115.163736][ T3672] Bluetooth: hci0: command 0x0409 tx timeout [ 1115.654923][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.661514][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.370053][ T3694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.674558][ T3688] syz-executor.0 (3688) used greatest stack depth: 22328 bytes left [ 1119.690134][ T3694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.749336][ T3694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.809575][ T3694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.677813][ T3694] device hsr_slave_0 left promiscuous mode [ 1120.684936][ T3694] device hsr_slave_1 left promiscuous mode [ 1120.691770][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.702087][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.714083][ T3694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.721490][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.733805][ T3694] device bridge_slave_1 left promiscuous mode [ 1120.740917][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.769419][ T3694] device bridge_slave_0 left promiscuous mode [ 1120.775823][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.800756][ T3694] device veth1_macvtap left promiscuous mode [ 1120.809784][ T3694] device veth0_macvtap left promiscuous mode [ 1120.816780][ T3694] device veth1_vlan left promiscuous mode [ 1120.824606][ T3694] device veth0_vlan left promiscuous mode [ 1121.061489][ T3694] team0 (unregistering): Port device team_slave_1 removed [ 1121.077149][ T3694] team0 (unregistering): Port device team_slave_0 removed [ 1121.094630][ T3694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.112040][ T3694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.195740][ T3694] bond0 (unregistering): Released all slaves [ 1121.308720][ T3694] leaked reference. [ 1121.312841][ T3694] ethnl_default_notify+0x148/0x640 [ 1121.318217][ T3694] ethtool_notify+0xbd/0x1f0 [ 1121.322832][ T3694] ethnl_netdev_event+0x56/0x70 [ 1121.327714][ T3694] notifier_call_chain+0xb5/0x200 [ 1121.332886][ T3694] call_netdevice_notifiers_info+0xb5/0x130 [ 1121.338888][ T3694] netdev_update_features+0xc4/0xd0 [ 1121.344519][ T3694] hsr_add_port+0x4a5/0x7b0 [ 1121.349142][ T3694] hsr_dev_finalize+0x46c/0x750 [ 1121.354001][ T3694] hsr_newlink+0x315/0x730 [ 1121.358423][ T3694] __rtnl_newlink+0x106d/0x1750 [ 1121.363293][ T3694] rtnl_newlink+0x64/0xa0 [ 1121.367722][ T3694] rtnetlink_rcv_msg+0x413/0xb80 [ 1121.372659][ T3694] netlink_rcv_skb+0x153/0x420 [ 1121.377857][ T3694] netlink_unicast+0x533/0x7d0 [ 1121.382877][ T3694] netlink_sendmsg+0x904/0xdf0 [ 1121.387641][ T3694] sock_sendmsg+0xcf/0x120 [ 1121.409945][ T3694] ------------[ cut here ]------------ [ 1121.416320][ T3694] WARNING: CPU: 0 PID: 3694 at lib/ref_tracker.c:38 ref_tracker_dir_exit.cold+0x137/0x1e3 [ 1121.426670][ T3694] Modules linked in: [ 1121.430631][ T3694] CPU: 0 PID: 3694 Comm: kworker/u4:1 Not tainted 5.16.0-rc5-next-20211220-syzkaller #0 [ 1121.440761][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.451127][ T3694] Workqueue: netns cleanup_net [ 1121.456195][ T3694] RIP: 0010:ref_tracker_dir_exit.cold+0x137/0x1e3 [ 1121.462951][ T3694] Code: 4c 89 ef e8 05 51 a0 f8 4c 8b 3c 24 4c 39 fd 49 8b 07 0f 85 b5 00 00 00 e8 90 42 55 f8 48 8b 74 24 10 4c 89 e7 e8 c3 42 36 00 <0f> 0b e9 bf 9e e8 fa 4c 89 ff e8 d4 50 a0 f8 e9 d4 fe ff ff e8 ba [ 1121.483034][ T3694] RSP: 0018:ffffc9000289f970 EFLAGS: 00010246 [ 1121.489123][ T3694] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1121.497441][ T3694] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 1121.505652][ T3694] RBP: ffff888015f1c600 R08: 0000000000000001 R09: ffffffff8ffaf94f [ 1121.515154][ T3694] R10: 0000000000000001 R11: 0000000000088077 R12: ffff888015f1c5b8 [ 1121.523362][ T3694] R13: ffff888015f1c600 R14: ffff888015f1c600 R15: ffff888015f1c600 [ 1121.531531][ T3694] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1121.540634][ T3694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1121.549095][ T3694] CR2: 00007fc5293b5950 CR3: 000000007f61f000 CR4: 00000000003506e0 [ 1121.557259][ T3694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1121.575409][ T3694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1121.585476][ T3694] Call Trace: [ 1121.588785][ T3694] [ 1121.591742][ T3694] free_netdev+0x32a/0x5b0 [ 1121.597809][ T3694] netdev_run_todo+0x8a0/0xaa0 [ 1121.602807][ T3694] ? generic_xdp_install+0x4a0/0x4a0 [ 1121.608307][ T3694] ? default_device_exit+0x2d0/0x2d0 [ 1121.615588][ T3694] ? unregister_netdevice_many+0x1850/0x1850 [ 1121.621613][ T3694] ? sysfs_remove_group+0xc2/0x170 [ 1121.626983][ T3694] ? br_dev_delete+0x112/0x190 [ 1121.632032][ T3694] default_device_exit_batch+0x2ff/0x3c0 [ 1121.639336][ T3694] ? unregister_netdev+0x20/0x20 [ 1121.644623][ T3694] ? __init_waitqueue_head+0xd0/0xd0 [ 1121.650008][ T3694] ? cfg802154_switch_netns+0x440/0x440 [ 1121.657225][ T3694] ? unregister_netdev+0x20/0x20 [ 1121.662192][ T3694] ? __dev_change_net_namespace+0x1330/0x1330 [ 1121.668411][ T3694] ops_exit_list+0x10d/0x160 [ 1121.674655][ T3694] cleanup_net+0x4ea/0xb00 [ 1121.679117][ T3694] ? unregister_pernet_device+0x70/0x70 [ 1121.684810][ T3694] process_one_work+0x9ac/0x1680 [ 1121.690049][ T3694] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1121.697004][ T3694] ? rwlock_bug.part.0+0x90/0x90 [ 1121.702109][ T3694] ? _raw_spin_lock_irq+0x41/0x50 [ 1121.707427][ T3694] worker_thread+0x652/0x11c0 [ 1121.712348][ T3694] ? process_one_work+0x1680/0x1680 [ 1121.719289][ T3694] kthread+0x405/0x4f0 [ 1121.724001][ T3694] ? set_kthread_struct+0x130/0x130 [ 1121.729250][ T3694] ret_from_fork+0x1f/0x30 [ 1121.735201][ T3694] [ 1121.738243][ T3694] Kernel panic - not syncing: panic_on_warn set ... [ 1121.744829][ T3694] CPU: 1 PID: 3694 Comm: kworker/u4:1 Not tainted 5.16.0-rc5-next-20211220-syzkaller #0 [ 1121.754646][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1121.764715][ T3694] Workqueue: netns cleanup_net [ 1121.769517][ T3694] Call Trace: [ 1121.772804][ T3694] [ 1121.775747][ T3694] dump_stack_lvl+0xcd/0x134 [ 1121.780358][ T3694] panic+0x2b0/0x6dd [ 1121.784337][ T3694] ? __warn_printk+0xf3/0xf3 [ 1121.788966][ T3694] ? __warn.cold+0x1d1/0x2cf [ 1121.793584][ T3694] ? ref_tracker_dir_exit.cold+0x137/0x1e3 [ 1121.799433][ T3694] __warn.cold+0x1ec/0x2cf [ 1121.803879][ T3694] ? ref_tracker_dir_exit.cold+0x137/0x1e3 [ 1121.809719][ T3694] report_bug+0x1bd/0x210 [ 1121.814174][ T3694] handle_bug+0x3c/0x60 [ 1121.818417][ T3694] exc_invalid_op+0x14/0x40 [ 1121.822953][ T3694] asm_exc_invalid_op+0x12/0x20 [ 1121.827826][ T3694] RIP: 0010:ref_tracker_dir_exit.cold+0x137/0x1e3 [ 1121.834273][ T3694] Code: 4c 89 ef e8 05 51 a0 f8 4c 8b 3c 24 4c 39 fd 49 8b 07 0f 85 b5 00 00 00 e8 90 42 55 f8 48 8b 74 24 10 4c 89 e7 e8 c3 42 36 00 <0f> 0b e9 bf 9e e8 fa 4c 89 ff e8 d4 50 a0 f8 e9 d4 fe ff ff e8 ba [ 1121.853895][ T3694] RSP: 0018:ffffc9000289f970 EFLAGS: 00010246 [ 1121.859984][ T3694] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1121.867971][ T3694] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 1121.875959][ T3694] RBP: ffff888015f1c600 R08: 0000000000000001 R09: ffffffff8ffaf94f [ 1121.883946][ T3694] R10: 0000000000000001 R11: 0000000000088077 R12: ffff888015f1c5b8 [ 1121.891946][ T3694] R13: ffff888015f1c600 R14: ffff888015f1c600 R15: ffff888015f1c600 [ 1121.900056][ T3694] free_netdev+0x32a/0x5b0 [ 1121.904514][ T3694] netdev_run_todo+0x8a0/0xaa0 [ 1121.909339][ T3694] ? generic_xdp_install+0x4a0/0x4a0 [ 1121.914659][ T3694] ? default_device_exit+0x2d0/0x2d0 [ 1121.919977][ T3694] ? unregister_netdevice_many+0x1850/0x1850 [ 1121.925988][ T3694] ? sysfs_remove_group+0xc2/0x170 [ 1121.931134][ T3694] ? br_dev_delete+0x112/0x190 [ 1121.935926][ T3694] default_device_exit_batch+0x2ff/0x3c0 [ 1121.941589][ T3694] ? unregister_netdev+0x20/0x20 [ 1121.946560][ T3694] ? __init_waitqueue_head+0xd0/0xd0 [ 1121.951928][ T3694] ? cfg802154_switch_netns+0x440/0x440 [ 1121.957697][ T3694] ? unregister_netdev+0x20/0x20 [ 1121.962667][ T3694] ? __dev_change_net_namespace+0x1330/0x1330 [ 1121.968776][ T3694] ops_exit_list+0x10d/0x160 [ 1121.973397][ T3694] cleanup_net+0x4ea/0xb00 [ 1121.977839][ T3694] ? unregister_pernet_device+0x70/0x70 [ 1121.983422][ T3694] process_one_work+0x9ac/0x1680 [ 1121.988398][ T3694] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1121.993798][ T3694] ? rwlock_bug.part.0+0x90/0x90 [ 1121.998762][ T3694] ? _raw_spin_lock_irq+0x41/0x50 [ 1122.003823][ T3694] worker_thread+0x652/0x11c0 [ 1122.008541][ T3694] ? process_one_work+0x1680/0x1680 [ 1122.013763][ T3694] kthread+0x405/0x4f0 [ 1122.017888][ T3694] ? set_kthread_struct+0x130/0x130 [ 1122.023121][ T3694] ret_from_fork+0x1f/0x30 [ 1122.027582][ T3694] [ 1122.031089][ T3694] Kernel Offset: disabled [ 1122.035559][ T3694] Rebooting in 86400 seconds..