Warning: Permanently added '10.128.1.211' (ECDSA) to the list of known hosts. 2021/10/25 17:24:53 parsed 1 programs [ 70.808207][ T6542] cgroup: Unknown subsys name 'net' [ 70.820963][ T6542] cgroup: Unknown subsys name 'rlimit' [ 71.018639][ T1196] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.025153][ T1196] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/25 17:24:53 executed programs: 0 [ 72.467101][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 72.540814][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.548292][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.556673][ T6554] device bridge_slave_0 entered promiscuous mode [ 72.566349][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.573483][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.581783][ T6554] device bridge_slave_1 entered promiscuous mode [ 72.613773][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.624655][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.658399][ T6554] team0: Port device team_slave_0 added [ 72.665985][ T6554] team0: Port device team_slave_1 added [ 72.690860][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.697854][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.723871][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.736920][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.743878][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.769868][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.805049][ T6554] device hsr_slave_0 entered promiscuous mode [ 72.812331][ T6554] device hsr_slave_1 entered promiscuous mode [ 72.929796][ T6554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.940452][ T6554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.950551][ T6554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.961078][ T6554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.981641][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.988795][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.996538][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.003934][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.049429][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.062998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.074385][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.084895][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.093573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 73.106497][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.117702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.126435][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.133522][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.156517][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.164789][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.171894][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.180209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.189232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.198688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.210336][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.224482][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.235643][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.244087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.265754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.273145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.284119][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.302631][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.322009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.330665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.338563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.350153][ T6554] device veth0_vlan entered promiscuous mode [ 73.363337][ T6554] device veth1_vlan entered promiscuous mode [ 73.385358][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.393234][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.401514][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.413528][ T6554] device veth0_macvtap entered promiscuous mode [ 73.423661][ T6554] device veth1_macvtap entered promiscuous mode [ 73.440911][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.449997][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.460485][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.471469][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.479445][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.488123][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.501546][ T6554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.510605][ T6554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.519421][ T6554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.528265][ T6554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.616944][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.624928][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.645660][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.660087][ T941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.668331][ T941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.694146][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.296644][ T2933] Bluetooth: hci0: command 0x0409 tx timeout 2021/10/25 17:24:58 executed programs: 42 [ 76.375272][ T20] Bluetooth: hci0: command 0x041b tx timeout [ 78.465787][ T20] Bluetooth: hci0: command 0x040f tx timeout [ 80.535339][ T2933] Bluetooth: hci0: command 0x0419 tx timeout 2021/10/25 17:25:04 executed programs: 124 [ 82.908902][ T7527] ================================================================== [ 82.917498][ T7527] BUG: KASAN: slab-out-of-bounds in copy_data+0xf3/0x2e0 [ 82.924556][ T7527] Read of size 64 at addr ffff88801a5b8d80 by task syz-executor.0/7527 [ 82.932805][ T7527] [ 82.935133][ T7527] CPU: 1 PID: 7527 Comm: syz-executor.0 Not tainted 5.15.0-rc6-next-20211025-syzkaller #0 [ 82.945033][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.955092][ T7527] Call Trace: [ 82.958460][ T7527] [ 82.961396][ T7527] dump_stack_lvl+0xcd/0x134 [ 82.966020][ T7527] print_address_description.constprop.0.cold+0x8d/0x320 [ 82.973065][ T7527] ? copy_data+0xf3/0x2e0 [ 82.977410][ T7527] ? copy_data+0xf3/0x2e0 [ 82.981755][ T7527] kasan_report.cold+0x83/0xdf [ 82.986544][ T7527] ? copy_data+0xf3/0x2e0 [ 82.990900][ T7527] kasan_check_range+0x13d/0x180 [ 82.995944][ T7527] memcpy+0x20/0x60 [ 82.999743][ T7527] copy_data+0xf3/0x2e0 [ 83.003889][ T7527] ? virtrng_restore+0x140/0x140 [ 83.008813][ T7527] ? mutex_lock_io_nested+0x1150/0x1150 [ 83.014365][ T7527] virtio_read+0x1e0/0x230 [ 83.018773][ T7527] rng_dev_read+0x400/0x660 [ 83.023263][ T7527] ? copy_data+0x2e0/0x2e0 [ 83.027676][ T7527] ? enable_best_rng+0xc0/0xc0 [ 83.032423][ T7527] vfs_read+0x1b5/0x600 [ 83.036566][ T7527] ksys_read+0x12d/0x250 [ 83.040795][ T7527] ? vfs_write+0xae0/0xae0 [ 83.045207][ T7527] ? syscall_enter_from_user_mode+0x21/0x70 [ 83.051102][ T7527] do_syscall_64+0x35/0xb0 [ 83.055519][ T7527] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.061407][ T7527] RIP: 0033:0x7f9994c67a39 [ 83.065815][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 83.085410][ T7527] RSP: 002b:00007f99943dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.093809][ T7527] RAX: ffffffffffffffda RBX: 00007f9994d6af60 RCX: 00007f9994c67a39 [ 83.101905][ T7527] RDX: 0000000000001000 RSI: 0000000020000440 RDI: 0000000000000003 [ 83.109885][ T7527] RBP: 00007f9994cc1e8f R08: 0000000000000000 R09: 0000000000000000 [ 83.117850][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.125823][ T7527] R13: 00007ffc2657c33f R14: 00007f99943dd300 R15: 0000000000022000 [ 83.133795][ T7527] [ 83.136802][ T7527] [ 83.139112][ T7527] Allocated by task 1: [ 83.143168][ T7527] kasan_save_stack+0x1e/0x50 [ 83.148177][ T7527] __kasan_kmalloc+0xa9/0xd0 [ 83.152762][ T7527] probe_common+0xaa/0x5b0 [ 83.157163][ T7527] virtio_dev_probe+0x44e/0x760 [ 83.161996][ T7527] really_probe+0x245/0xcc0 [ 83.166502][ T7527] __driver_probe_device+0x338/0x4d0 [ 83.171774][ T7527] driver_probe_device+0x4c/0x1a0 [ 83.176783][ T7527] __driver_attach+0x22d/0x4e0 [ 83.181558][ T7527] bus_for_each_dev+0x147/0x1d0 [ 83.186391][ T7527] bus_add_driver+0x41d/0x630 [ 83.191054][ T7527] driver_register+0x220/0x3a0 [ 83.195810][ T7527] do_one_initcall+0x103/0x650 [ 83.200591][ T7527] kernel_init_freeable+0x6b1/0x73a [ 83.205784][ T7527] kernel_init+0x1a/0x1d0 [ 83.210105][ T7527] ret_from_fork+0x1f/0x30 [ 83.214513][ T7527] [ 83.216818][ T7527] The buggy address belongs to the object at ffff88801a5b8c00 [ 83.216818][ T7527] which belongs to the cache kmalloc-512 of size 512 [ 83.230872][ T7527] The buggy address is located 384 bytes inside of [ 83.230872][ T7527] 512-byte region [ffff88801a5b8c00, ffff88801a5b8e00) [ 83.244842][ T7527] The buggy address belongs to the page: [ 83.250455][ T7527] page:ffffea0000696e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801a5b8800 pfn:0x1a5b8 [ 83.261892][ T7527] head:ffffea0000696e00 order:2 compound_mapcount:0 compound_pincount:0 [ 83.270197][ T7527] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 83.278180][ T7527] raw: 00fff00000010200 ffffea0001f0fd08 ffffea0001e09f08 ffff888010c41c80 [ 83.286862][ T7527] raw: ffff88801a5b8800 000000000010000a 00000001ffffffff 0000000000000000 [ 83.295428][ T7527] page dumped because: kasan: bad access detected [ 83.301825][ T7527] page_owner tracks the page as allocated [ 83.307520][ T7527] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 751, ts 7348238753, free_ts 7345038390 [ 83.326343][ T7527] get_page_from_freelist+0xa72/0x2f50 [ 83.331798][ T7527] __alloc_pages+0x1b2/0x500 [ 83.336387][ T7527] alloc_pages+0x1a7/0x300 [ 83.340794][ T7527] new_slab+0x32d/0x4a0 [ 83.344937][ T7527] ___slab_alloc+0x918/0xfe0 [ 83.349510][ T7527] __slab_alloc.constprop.0+0x4d/0xa0 [ 83.354882][ T7527] kmem_cache_alloc_trace+0x289/0x2c0 [ 83.360240][ T7527] alloc_bprm+0x51/0x8f0 [ 83.364467][ T7527] kernel_execve+0x55/0x460 [ 83.368958][ T7527] call_usermodehelper_exec_async+0x2e3/0x580 [ 83.375013][ T7527] ret_from_fork+0x1f/0x30 [ 83.379418][ T7527] page last free stack trace: [ 83.384091][ T7527] free_pcp_prepare+0x374/0x870 [ 83.388951][ T7527] free_unref_page+0x19/0x690 [ 83.393614][ T7527] __stack_depot_save+0x16d/0x4f0 [ 83.398625][ T7527] kasan_save_stack+0x38/0x50 [ 83.403288][ T7527] __kasan_slab_alloc+0x90/0xc0 [ 83.408121][ T7527] kmem_cache_alloc+0x202/0x3a0 [ 83.412963][ T7527] __kernfs_new_node+0xd4/0x8b0 [ 83.417800][ T7527] kernfs_new_node+0x93/0x120 [ 83.422471][ T7527] __kernfs_create_file+0x51/0x350 [ 83.427568][ T7527] sysfs_add_file_mode_ns+0x20f/0x3f0 [ 83.432923][ T7527] sysfs_create_file_ns+0x127/0x1c0 [ 83.438103][ T7527] device_create_file+0xea/0x1d0 [ 83.443030][ T7527] device_add+0xf35/0x1ee0 [ 83.447433][ T7527] device_create_groups_vargs+0x203/0x280 [ 83.453156][ T7527] device_create_with_groups+0xe3/0x120 [ 83.458685][ T7527] misc_register+0x20a/0x690 [ 83.463279][ T7527] [ 83.465586][ T7527] Memory state around the buggy address: [ 83.471198][ T7527] ffff88801a5b8c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.479239][ T7527] ffff88801a5b8d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.487296][ T7527] >ffff88801a5b8d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.495339][ T7527] ^ [ 83.499387][ T7527] ffff88801a5b8e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.507428][ T7527] ffff88801a5b8e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.515469][ T7527] ================================================================== [ 83.523519][ T7527] Disabling lock debugging due to kernel taint [ 83.530187][ T7527] Kernel panic - not syncing: panic_on_warn set ... [ 83.536774][ T7527] CPU: 1 PID: 7527 Comm: syz-executor.0 Tainted: G B 5.15.0-rc6-next-20211025-syzkaller #0 [ 83.548078][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.558132][ T7527] Call Trace: [ 83.561401][ T7527] [ 83.564324][ T7527] dump_stack_lvl+0xcd/0x134 [ 83.568917][ T7527] panic+0x2b0/0x6dd [ 83.572811][ T7527] ? __warn_printk+0xf3/0xf3 [ 83.577400][ T7527] ? copy_data+0xf3/0x2e0 [ 83.581726][ T7527] ? trace_hardirqs_on+0x38/0x1c0 [ 83.586756][ T7527] ? trace_hardirqs_on+0x51/0x1c0 [ 83.591782][ T7527] ? copy_data+0xf3/0x2e0 [ 83.596105][ T7527] ? copy_data+0xf3/0x2e0 [ 83.600434][ T7527] end_report.cold+0x63/0x6f [ 83.605023][ T7527] kasan_report.cold+0x71/0xdf [ 83.609795][ T7527] ? copy_data+0xf3/0x2e0 [ 83.614123][ T7527] kasan_check_range+0x13d/0x180 [ 83.619065][ T7527] memcpy+0x20/0x60 [ 83.622876][ T7527] copy_data+0xf3/0x2e0 [ 83.627028][ T7527] ? virtrng_restore+0x140/0x140 [ 83.631977][ T7527] ? mutex_lock_io_nested+0x1150/0x1150 [ 83.637800][ T7527] virtio_read+0x1e0/0x230 [ 83.642218][ T7527] rng_dev_read+0x400/0x660 [ 83.646717][ T7527] ? copy_data+0x2e0/0x2e0 [ 83.651131][ T7527] ? enable_best_rng+0xc0/0xc0 [ 83.655890][ T7527] vfs_read+0x1b5/0x600 [ 83.660049][ T7527] ksys_read+0x12d/0x250 [ 83.664293][ T7527] ? vfs_write+0xae0/0xae0 [ 83.668709][ T7527] ? syscall_enter_from_user_mode+0x21/0x70 [ 83.674603][ T7527] do_syscall_64+0x35/0xb0 [ 83.679025][ T7527] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.684920][ T7527] RIP: 0033:0x7f9994c67a39 [ 83.689329][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 83.708942][ T7527] RSP: 002b:00007f99943dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.717346][ T7527] RAX: ffffffffffffffda RBX: 00007f9994d6af60 RCX: 00007f9994c67a39 [ 83.725323][ T7527] RDX: 0000000000001000 RSI: 0000000020000440 RDI: 0000000000000003 [ 83.733286][ T7527] RBP: 00007f9994cc1e8f R08: 0000000000000000 R09: 0000000000000000 [ 83.741249][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.749297][ T7527] R13: 00007ffc2657c33f R14: 00007f99943dd300 R15: 0000000000022000 [ 83.757268][ T7527] [ 83.760509][ T7527] Kernel Offset: disabled [ 83.764816][ T7527] Rebooting in 86400 seconds..