Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2022/08/07 20:26:49 fuzzer started 2022/08/07 20:26:49 connecting to host at 10.128.0.169:44903 2022/08/07 20:26:49 checking machine... 2022/08/07 20:26:49 checking revisions... 2022/08/07 20:26:50 testing simple program... syzkaller login: [ 50.006125][ T3605] cgroup: Unknown subsys name 'net' [ 50.142117][ T3605] cgroup: Unknown subsys name 'rlimit' [ 51.433573][ T3608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.442360][ T3608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.450931][ T3608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.459057][ T3608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.468071][ T3608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.476352][ T3608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.574897][ T3613] chnl_net:caif_netlink_parms(): no params data found [ 51.621826][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.629786][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.638321][ T3613] device bridge_slave_0 entered promiscuous mode [ 51.648077][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.655555][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.663666][ T3613] device bridge_slave_1 entered promiscuous mode [ 51.684993][ T3613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.697436][ T3613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.720878][ T3613] team0: Port device team_slave_0 added [ 51.729678][ T3613] team0: Port device team_slave_1 added [ 51.750226][ T3613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.757400][ T3613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.783812][ T3613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.796436][ T3613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.803571][ T3613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.830484][ T3613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.858414][ T3613] device hsr_slave_0 entered promiscuous mode [ 51.865151][ T3613] device hsr_slave_1 entered promiscuous mode [ 51.952247][ T3613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.962707][ T3613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.972630][ T3613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.982687][ T3613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.005119][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.012393][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.020572][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.027782][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.076126][ T3613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.089320][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.099762][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.110108][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.118338][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.132260][ T3613] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.143822][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.153490][ T921] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.160615][ T921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.173148][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.181997][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.189153][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.210012][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.219017][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.230105][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.240249][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.253111][ T3613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.265731][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.273699][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.293252][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.301528][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.313534][ T3613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.330846][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.350700][ T3613] device veth0_vlan entered promiscuous mode [ 52.359382][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.368613][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.377808][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.392409][ T3613] device veth1_vlan entered promiscuous mode [ 52.411481][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.421593][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.430310][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.442056][ T3613] device veth0_macvtap entered promiscuous mode [ 52.452713][ T3613] device veth1_macvtap entered promiscuous mode [ 52.471467][ T3613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.479340][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.489303][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.501445][ T3613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.510565][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.521458][ T3613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.530970][ T3613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.540506][ T3613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.549416][ T3613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 52.616190][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.624206][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.634844][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.659216][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.669010][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.678355][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2022/08/07 20:26:53 building call list... [ 52.884627][ T3613] ------------[ cut here ]------------ [ 52.890783][ T3613] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 52.900992][ T3613] WARNING: CPU: 0 PID: 3613 at lib/debugobjects.c:502 debug_print_object+0x16e/0x250 [ 52.910613][ T3613] Modules linked in: [ 52.914604][ T3613] CPU: 0 PID: 3613 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-12689-g3bc1bc0b59d0 #0 [ 52.924950][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 52.935297][ T3613] RIP: 0010:debug_print_object+0x16e/0x250 [ 52.941236][ T3613] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd e0 d3 28 8a 4c 89 ee 48 c7 c7 c0 c7 28 8a e8 af 4f 37 05 <0f> 0b 83 05 05 13 be 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 52.961328][ T3613] RSP: 0018:ffffc900038df6c0 EFLAGS: 00010086 [ 52.967519][ T3613] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 52.975782][ T3613] RDX: ffff88807ee93b00 RSI: ffffffff81617d78 RDI: fffff5200071beca [ 52.983972][ T3613] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 52.992143][ T3613] R10: 0000000080000000 R11: 0000000000000001 R12: ffffffff89cefa80 [ 53.000328][ T3613] R13: ffffffff8a28ce40 R14: ffffffff816a8410 R15: 1ffff9200071bee3 [ 53.008554][ T3613] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 53.017683][ T3613] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 53.024302][ T3613] CR2: 000000c0006bd010 CR3: 00000000254bb000 CR4: 00000000003506f0 [ 53.032338][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.040366][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.048925][ T3613] Call Trace: [ 53.052236][ T3613] [ 53.055187][ T3613] ? do_raw_spin_unlock+0x171/0x230 [ 53.060493][ T3613] debug_object_assert_init+0x1f4/0x2e0 [ 53.066070][ T3613] ? debug_object_init_on_stack+0x20/0x20 [ 53.072096][ T3613] ? mark_held_locks+0x9f/0xe0 [ 53.076893][ T3613] ? kasan_quarantine_put+0xf5/0x210 [ 53.082212][ T3613] ? kasan_quarantine_put+0xf5/0x210 [ 53.087730][ T3613] del_timer+0x6d/0x110 [ 53.091931][ T3613] ? detach_if_pending+0x480/0x480 [ 53.097172][ T3613] ? try_to_grab_pending+0xbd/0xd0 [ 53.102330][ T3613] ? lockdep_hardirqs_off+0x90/0xd0 [ 53.107568][ T3613] try_to_grab_pending+0x6d/0xd0 [ 53.112541][ T3613] __cancel_work_timer+0xa6/0x570 [ 53.117602][ T3613] ? cancel_delayed_work+0x20/0x20 [ 53.122751][ T3613] ? mgmt_send_event_skb+0x2fe/0x470 [ 53.128064][ T3613] ? mgmt_send_event+0x13c/0x180 [ 53.133050][ T3613] mgmt_index_removed+0x187/0x2e0 [ 53.138189][ T3613] ? mgmt_index_added+0x290/0x290 [ 53.143252][ T3613] hci_unregister_dev+0x45d/0x550 [ 53.148303][ T3613] vhci_release+0x7c/0xf0 [ 53.152656][ T3613] __fput+0x277/0x9d0 [ 53.156670][ T3613] ? vhci_close_dev+0x50/0x50 [ 53.161401][ T3613] task_work_run+0xdd/0x1a0 [ 53.165943][ T3613] do_exit+0xaca/0x29c0 [ 53.170121][ T3613] ? find_held_lock+0x2d/0x110 [ 53.174930][ T3613] ? mm_update_next_owner+0x7a0/0x7a0 [ 53.180339][ T3613] ? lock_downgrade+0x6e0/0x6e0 [ 53.185221][ T3613] do_group_exit+0xd2/0x2f0 [ 53.189768][ T3613] get_signal+0x2542/0x2600 [ 53.194295][ T3613] ? tcp_getsockopt+0x8e/0xd0 [ 53.198996][ T3613] ? exit_signals+0x8b0/0x8b0 [ 53.203728][ T3613] ? sock_def_destruct+0x10/0x10 [ 53.208704][ T3613] ? __sys_getsockopt+0x31d/0x690 [ 53.213859][ T3613] arch_do_signal_or_restart+0x82/0x2300 [ 53.219545][ T3613] ? get_sigframe_size+0x10/0x10 [ 53.224521][ T3613] ? of_get_ethdev_address+0xd0/0xd0 [ 53.229941][ T3613] ? exit_to_user_mode_prepare+0x137/0x250 [ 53.235861][ T3613] exit_to_user_mode_prepare+0x15f/0x250 [ 53.241541][ T3613] syscall_exit_to_user_mode+0x19/0x50 [ 53.247148][ T3613] __do_fast_syscall_32+0x72/0xf0 [ 53.252305][ T3613] do_fast_syscall_32+0x2f/0x70 [ 53.257201][ T3613] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 53.263758][ T3613] RIP: 0023:0xf7fd0549 [ 53.267853][ T3613] Code: Unable to access opcode bytes at RIP 0xf7fd051f. [ 53.274966][ T3613] RSP: 002b:00000000f748f670 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 53.283413][ T3613] RAX: 0000000000000000 RBX: 000000000000000f RCX: 00000000f748f688 [ 53.291416][ T3613] RDX: 0000000000726574 RSI: 0000000000000003 RDI: 00000000f748fd50 [ 53.299479][ T3613] RBP: 00000000f748f72c R08: 0000000000000000 R09: 0000000000000000 [ 53.307481][ T3613] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 53.315553][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.323559][ T3613] [ 53.326588][ T3613] Kernel panic - not syncing: panic_on_warn set ... [ 53.333202][ T3613] CPU: 0 PID: 3613 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-12689-g3bc1bc0b59d0 #0 [ 53.343317][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 53.353395][ T3613] Call Trace: [ 53.356694][ T3613] [ 53.359635][ T3613] dump_stack_lvl+0xcd/0x134 [ 53.364259][ T3613] panic+0x2d7/0x636 [ 53.368183][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b [ 53.374202][ T3613] ? __warn.cold+0x248/0x2c4 [ 53.378817][ T3613] ? debug_print_object+0x16e/0x250 [ 53.384039][ T3613] __warn.cold+0x259/0x2c4 [ 53.388709][ T3613] ? __wake_up_klogd.part.0+0x99/0xf0 [ 53.394113][ T3613] ? debug_print_object+0x16e/0x250 [ 53.399638][ T3613] report_bug+0x1bc/0x210 [ 53.403998][ T3613] handle_bug+0x3c/0x60 [ 53.408177][ T3613] exc_invalid_op+0x14/0x40 [ 53.412702][ T3613] asm_exc_invalid_op+0x16/0x20 [ 53.417581][ T3613] RIP: 0010:debug_print_object+0x16e/0x250 [ 53.423429][ T3613] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd e0 d3 28 8a 4c 89 ee 48 c7 c7 c0 c7 28 8a e8 af 4f 37 05 <0f> 0b 83 05 05 13 be 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 53.444017][ T3613] RSP: 0018:ffffc900038df6c0 EFLAGS: 00010086 [ 53.450109][ T3613] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 53.458138][ T3613] RDX: ffff88807ee93b00 RSI: ffffffff81617d78 RDI: fffff5200071beca [ 53.466481][ T3613] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 53.474566][ T3613] R10: 0000000080000000 R11: 0000000000000001 R12: ffffffff89cefa80 [ 53.482572][ T3613] R13: ffffffff8a28ce40 R14: ffffffff816a8410 R15: 1ffff9200071bee3 [ 53.490579][ T3613] ? calc_wheel_index+0x3d0/0x3d0 [ 53.495638][ T3613] ? vprintk+0x88/0x90 [ 53.499749][ T3613] ? do_raw_spin_unlock+0x171/0x230 [ 53.504992][ T3613] debug_object_assert_init+0x1f4/0x2e0 [ 53.510565][ T3613] ? debug_object_init_on_stack+0x20/0x20 [ 53.516399][ T3613] ? mark_held_locks+0x9f/0xe0 [ 53.521195][ T3613] ? kasan_quarantine_put+0xf5/0x210 [ 53.526525][ T3613] ? kasan_quarantine_put+0xf5/0x210 [ 53.531898][ T3613] del_timer+0x6d/0x110 [ 53.536084][ T3613] ? detach_if_pending+0x480/0x480 [ 53.541238][ T3613] ? try_to_grab_pending+0xbd/0xd0 [ 53.546390][ T3613] ? lockdep_hardirqs_off+0x90/0xd0 [ 53.551835][ T3613] try_to_grab_pending+0x6d/0xd0 [ 53.557071][ T3613] __cancel_work_timer+0xa6/0x570 [ 53.562125][ T3613] ? cancel_delayed_work+0x20/0x20 [ 53.567267][ T3613] ? mgmt_send_event_skb+0x2fe/0x470 [ 53.572580][ T3613] ? mgmt_send_event+0x13c/0x180 [ 53.577829][ T3613] mgmt_index_removed+0x187/0x2e0 [ 53.582921][ T3613] ? mgmt_index_added+0x290/0x290 [ 53.587983][ T3613] hci_unregister_dev+0x45d/0x550 [ 53.593137][ T3613] vhci_release+0x7c/0xf0 [ 53.597489][ T3613] __fput+0x277/0x9d0 [ 53.601495][ T3613] ? vhci_close_dev+0x50/0x50 [ 53.606225][ T3613] task_work_run+0xdd/0x1a0 [ 53.610754][ T3613] do_exit+0xaca/0x29c0 [ 53.615041][ T3613] ? find_held_lock+0x2d/0x110 [ 53.619838][ T3613] ? mm_update_next_owner+0x7a0/0x7a0 [ 53.625352][ T3613] ? lock_downgrade+0x6e0/0x6e0 [ 53.630265][ T3613] do_group_exit+0xd2/0x2f0 [ 53.634811][ T3613] get_signal+0x2542/0x2600 [ 53.639362][ T3613] ? tcp_getsockopt+0x8e/0xd0 [ 53.644084][ T3613] ? exit_signals+0x8b0/0x8b0 [ 53.648793][ T3613] ? sock_def_destruct+0x10/0x10 [ 53.653809][ T3613] ? __sys_getsockopt+0x31d/0x690 [ 53.658893][ T3613] arch_do_signal_or_restart+0x82/0x2300 [ 53.664784][ T3613] ? get_sigframe_size+0x10/0x10 [ 53.670107][ T3613] ? of_get_ethdev_address+0xd0/0xd0 [ 53.675521][ T3613] ? exit_to_user_mode_prepare+0x137/0x250 [ 53.681444][ T3613] exit_to_user_mode_prepare+0x15f/0x250 [ 53.687098][ T3613] syscall_exit_to_user_mode+0x19/0x50 [ 53.692661][ T3613] __do_fast_syscall_32+0x72/0xf0 [ 53.697714][ T3613] do_fast_syscall_32+0x2f/0x70 [ 53.702585][ T3613] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 53.708943][ T3613] RIP: 0023:0xf7fd0549 [ 53.713035][ T3613] Code: Unable to access opcode bytes at RIP 0xf7fd051f. [ 53.720113][ T3613] RSP: 002b:00000000f748f670 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 53.728595][ T3613] RAX: 0000000000000000 RBX: 000000000000000f RCX: 00000000f748f688 [ 53.736849][ T3613] RDX: 0000000000726574 RSI: 0000000000000003 RDI: 00000000f748fd50 [ 53.744841][ T3613] RBP: 00000000f748f72c R08: 0000000000000000 R09: 0000000000000000 [ 53.752839][ T3613] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 53.760926][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.769021][ T3613] [ 53.772531][ T3613] Kernel Offset: disabled [ 53.776994][ T3613] Rebooting in 86400 seconds..