Warning: Permanently added '10.128.1.60' (ECDSA) to the list of known hosts. 2021/09/07 18:03:50 parsed 1 programs 2021/09/07 18:03:50 executed programs: 0 [ 1085.930925][ T8463] chnl_net:caif_netlink_parms(): no params data found [ 1086.011508][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.020514][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.030059][ T8463] device bridge_slave_0 entered promiscuous mode [ 1086.040394][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.049415][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.058697][ T8463] device bridge_slave_1 entered promiscuous mode [ 1086.090084][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.101496][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.137558][ T8463] team0: Port device team_slave_0 added [ 1086.145577][ T8463] team0: Port device team_slave_1 added [ 1086.173755][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.182023][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.208843][ T8463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.222063][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.229350][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.256098][ T8463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.295524][ T8463] device hsr_slave_0 entered promiscuous mode [ 1086.302859][ T8463] device hsr_slave_1 entered promiscuous mode [ 1086.427609][ T8463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1086.438217][ T8463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1086.449806][ T8463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1086.462246][ T8463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1086.487534][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.495120][ T8463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.503445][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.510515][ T8463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.556206][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.570552][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1086.582100][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.591931][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.601202][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1086.615607][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.627314][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1086.636016][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.643676][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.664089][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1086.673196][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.681363][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.694061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1086.702743][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1086.725035][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1086.734209][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1086.743318][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1086.754846][ T8463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1086.773537][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1086.781583][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1086.797472][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.817417][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1086.837174][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1086.845779][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1086.854458][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1086.867241][ T8463] device veth0_vlan entered promiscuous mode [ 1086.878625][ T8463] device veth1_vlan entered promiscuous mode [ 1086.894205][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1086.902960][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1086.918738][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1086.928222][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1086.939817][ T8463] device veth0_macvtap entered promiscuous mode [ 1086.953028][ T8463] device veth1_macvtap entered promiscuous mode [ 1086.971689][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.980898][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1086.989780][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1086.998748][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1087.009064][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1087.021522][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.034569][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1087.046637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1087.060245][ T8463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.070366][ T8463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.079155][ T8463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.088280][ T8463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.191665][ T8700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.209479][ T8700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.225346][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1087.244310][ T8700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.254054][ T8700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.264706][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1087.701140][ T8700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.040657][ T8700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.172091][ T8834] chnl_net:caif_netlink_parms(): no params data found [ 1092.245894][ T8834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.254795][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.264876][ T8834] device bridge_slave_0 entered promiscuous mode [ 1092.369094][ T8700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.382330][ T8834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.390758][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.400251][ T8834] device bridge_slave_1 entered promiscuous mode [ 1092.432079][ T8834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.538709][ T8700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.552271][ T8834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.589293][ T8834] team0: Port device team_slave_0 added [ 1092.597813][ T8834] team0: Port device team_slave_1 added [ 1092.630775][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.642785][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.676179][ T8834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.706849][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.714192][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.740839][ T8834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.883815][ T8834] device hsr_slave_0 entered promiscuous mode [ 1092.901325][ T8834] device hsr_slave_1 entered promiscuous mode [ 1092.917624][ T8834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1092.932897][ T8834] Cannot create hsr debugfs directory [ 1093.775170][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.795523][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1093.805081][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1093.816196][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.913722][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1093.922398][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1093.932094][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.939580][ T8797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.947525][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1093.957097][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1093.965762][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.973175][ T8797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.980858][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1093.989772][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1093.999260][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1094.063482][ T8799] Bluetooth: hci0: command 0x0409 tx timeout [ 1094.102879][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1094.111760][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1094.121340][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1094.130628][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1094.142337][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1094.151333][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1094.160677][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1094.251085][ T8834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1094.263841][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1094.272080][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1094.376791][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1094.384501][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1094.398831][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.641511][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1094.650859][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1094.692068][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1094.702166][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1094.714762][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1094.723998][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1094.816321][ T8834] device veth0_vlan entered promiscuous mode [ 1094.829332][ T8834] device veth1_vlan entered promiscuous mode [ 1094.851382][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1094.860125][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1094.868754][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1094.877977][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1094.907826][ T8834] device veth0_macvtap entered promiscuous mode [ 1094.920100][ T8700] device hsr_slave_0 left promiscuous mode [ 1094.928724][ T8700] device hsr_slave_1 left promiscuous mode [ 1094.938276][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.948128][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.958526][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.966322][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.975791][ T8700] device bridge_slave_1 left promiscuous mode [ 1094.983066][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.997031][ T8700] device bridge_slave_0 left promiscuous mode [ 1095.003612][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.021328][ T8700] device veth1_macvtap left promiscuous mode [ 1095.028344][ T8700] device veth0_macvtap left promiscuous mode [ 1095.034688][ T8700] device veth1_vlan left promiscuous mode [ 1095.040856][ T8700] device veth0_vlan left promiscuous mode [ 1096.143635][ T8797] Bluetooth: hci0: command 0x041b tx timeout [ 1098.222251][ T8797] Bluetooth: hci0: command 0x040f tx timeout [ 1098.617885][ T8700] team0 (unregistering): Port device team_slave_1 removed [ 1098.635158][ T8700] team0 (unregistering): Port device team_slave_0 removed [ 1098.649456][ T8700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.665076][ T8700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.719983][ T8700] bond0 (unregistering): Released all slaves [ 1098.798789][ T8834] device veth1_macvtap entered promiscuous mode [ 1098.814540][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1098.823169][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1098.850361][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.858349][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1098.867647][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1098.881386][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.889994][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1098.899151][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1098.996646][ T8922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.009702][ T8922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.058291][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1099.070952][ T8922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.084358][ T8922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.097435][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1101.768610][ T8700] device hsr_slave_0 left promiscuous mode [ 1101.804318][ T8700] device hsr_slave_1 left promiscuous mode [ 1101.822123][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1101.831998][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.857947][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.874088][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.884433][ T8700] device bridge_slave_1 left promiscuous mode [ 1101.890821][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.900772][ T8700] device bridge_slave_0 left promiscuous mode [ 1101.908537][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.919504][ T8700] device veth1_macvtap left promiscuous mode [ 1101.926502][ T8700] device veth0_macvtap left promiscuous mode [ 1101.932770][ T8700] device veth1_vlan left promiscuous mode [ 1101.938522][ T8700] device veth0_vlan left promiscuous mode [ 1103.821749][ T8797] Bluetooth: hci0: command 0x0409 tx timeout [ 1105.314321][ T22] ================================================================== [ 1105.322765][ T22] BUG: KASAN: use-after-free in __d_alloc+0x19a/0x950 [ 1105.329628][ T22] Read of size 5 at addr ffff88807e87e620 by task kdevtmpfs/22 [ 1105.337354][ T22] [ 1105.339669][ T22] CPU: 0 PID: 22 Comm: kdevtmpfs Not tainted 5.14.0-syzkaller #0 [ 1105.347377][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.357603][ T22] Call Trace: [ 1105.360963][ T22] dump_stack_lvl+0xcd/0x134 [ 1105.365854][ T22] print_address_description.constprop.0.cold+0x6c/0x309 [ 1105.372999][ T22] ? __d_alloc+0x19a/0x950 [ 1105.377404][ T22] ? __d_alloc+0x19a/0x950 [ 1105.381824][ T22] kasan_report.cold+0x83/0xdf [ 1105.386578][ T22] ? __d_alloc+0x19a/0x950 [ 1105.390998][ T22] kasan_check_range+0x13d/0x180 [ 1105.396081][ T22] memcpy+0x20/0x60 [ 1105.399894][ T22] __d_alloc+0x19a/0x950 [ 1105.404134][ T22] d_alloc+0x4a/0x230 [ 1105.408103][ T22] __lookup_hash+0xc8/0x180 [ 1105.412683][ T22] kern_path_locked+0x17e/0x320 [ 1105.417558][ T22] ? filename_lookup+0x80/0x80 [ 1105.422412][ T22] handle_remove+0xa2/0x5fe [ 1105.426968][ T22] ? cacheinfo_cpu_online.cold+0x3e/0x3e [ 1105.432600][ T22] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1105.438615][ T22] ? finish_task_switch.isra.0+0x232/0xa50 [ 1105.444724][ T22] ? find_held_lock+0x2d/0x110 [ 1105.449502][ T22] ? devtmpfsd+0xaa/0x2a3 [ 1105.454146][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 1105.459001][ T22] ? do_raw_spin_lock+0x120/0x2b0 [ 1105.464016][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 1105.468947][ T22] devtmpfsd+0x1b9/0x2a3 [ 1105.473438][ T22] ? dmar_validate_one_drhd+0x24d/0x24d [ 1105.479125][ T22] kthread+0x3e5/0x4d0 [ 1105.483343][ T22] ? set_kthread_struct+0x130/0x130 [ 1105.488533][ T22] ret_from_fork+0x1f/0x30 [ 1105.492973][ T22] [ 1105.495279][ T22] Allocated by task 22: [ 1105.499412][ T22] kasan_save_stack+0x1b/0x40 [ 1105.504116][ T22] __kasan_slab_alloc+0x83/0xb0 [ 1105.508960][ T22] kmem_cache_alloc+0x285/0x4a0 [ 1105.513793][ T22] getname_kernel+0x4e/0x370 [ 1105.518367][ T22] kern_path_locked+0x71/0x320 [ 1105.523115][ T22] handle_remove+0xa2/0x5fe [ 1105.527615][ T22] devtmpfsd+0x1b9/0x2a3 [ 1105.531845][ T22] kthread+0x3e5/0x4d0 [ 1105.535922][ T22] ret_from_fork+0x1f/0x30 [ 1105.540508][ T22] [ 1105.542887][ T22] Freed by task 22: [ 1105.546695][ T22] kasan_save_stack+0x1b/0x40 [ 1105.551374][ T22] kasan_set_track+0x1c/0x30 [ 1105.555957][ T22] kasan_set_free_info+0x20/0x30 [ 1105.560883][ T22] __kasan_slab_free+0xff/0x130 [ 1105.565910][ T22] slab_free_freelist_hook+0xe3/0x250 [ 1105.571872][ T22] kmem_cache_free+0x8a/0x5b0 [ 1105.576654][ T22] putname.part.0+0xe1/0x120 [ 1105.581541][ T22] kern_path_locked+0xc2/0x320 [ 1105.586587][ T22] handle_remove+0xa2/0x5fe [ 1105.591090][ T22] devtmpfsd+0x1b9/0x2a3 [ 1105.595320][ T22] kthread+0x3e5/0x4d0 [ 1105.599377][ T22] ret_from_fork+0x1f/0x30 [ 1105.603868][ T22] [ 1105.606192][ T22] The buggy address belongs to the object at ffff88807e87e600 [ 1105.606192][ T22] which belongs to the cache names_cache of size 4096 [ 1105.621747][ T22] The buggy address is located 32 bytes inside of [ 1105.621747][ T22] 4096-byte region [ffff88807e87e600, ffff88807e87f600) [ 1105.635692][ T22] The buggy address belongs to the page: [ 1105.641975][ T22] page:ffffea0001fa1e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e878 [ 1105.652464][ T22] head:ffffea0001fa1e00 order:3 compound_mapcount:0 compound_pincount:0 [ 1105.660959][ T22] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1105.669124][ T22] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888010dc63c0 [ 1105.677784][ T22] raw: 0000000000000000 0000000080070007 00000001ffffffff 0000000000000000 [ 1105.687130][ T22] page dumped because: kasan: bad access detected [ 1105.693527][ T22] page_owner tracks the page as allocated [ 1105.699393][ T22] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 65460044152, free_ts 65445823297 [ 1105.718308][ T22] get_page_from_freelist+0xa72/0x2f80 [ 1105.723806][ T22] __alloc_pages+0x1b2/0x500 [ 1105.728401][ T22] alloc_pages+0x1a7/0x300 [ 1105.732911][ T22] allocate_slab+0x32e/0x4b0 [ 1105.737672][ T22] ___slab_alloc+0x473/0x7b0 [ 1105.742259][ T22] __slab_alloc.constprop.0+0xa7/0xf0 [ 1105.747624][ T22] kmem_cache_alloc+0x3e1/0x4a0 [ 1105.752556][ T22] getname_flags.part.0+0x50/0x4f0 [ 1105.757739][ T22] getname_flags+0x9a/0xe0 [ 1105.762289][ T22] user_path_at_empty+0x2b/0x90 [ 1105.767228][ T22] vfs_statx+0x142/0x390 [ 1105.771470][ T22] __do_sys_newlstat+0x91/0x110 [ 1105.776492][ T22] do_syscall_64+0x35/0xb0 [ 1105.780968][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.786894][ T22] page last free stack trace: [ 1105.791558][ T22] free_pcp_prepare+0x2c5/0x780 [ 1105.796402][ T22] free_unref_page+0x19/0x690 [ 1105.801080][ T22] unfreeze_partials+0x16c/0x1b0 [ 1105.806006][ T22] put_cpu_partial+0x13d/0x230 [ 1105.810840][ T22] qlist_free_all+0x5a/0xc0 [ 1105.815330][ T22] kasan_quarantine_reduce+0x180/0x200 [ 1105.821136][ T22] __kasan_slab_alloc+0x95/0xb0 [ 1105.826162][ T22] kmem_cache_alloc+0x285/0x4a0 [ 1105.831745][ T22] getname_flags.part.0+0x50/0x4f0 [ 1105.836941][ T22] getname_flags+0x9a/0xe0 [ 1105.841371][ T22] user_path_at_empty+0x2b/0x90 [ 1105.846230][ T22] do_readlinkat+0xcd/0x2f0 [ 1105.850740][ T22] __x64_sys_readlinkat+0x93/0xf0 [ 1105.855782][ T22] do_syscall_64+0x35/0xb0 [ 1105.860197][ T22] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1105.866533][ T22] [ 1105.868841][ T22] Memory state around the buggy address: [ 1105.874458][ T22] ffff88807e87e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1105.882961][ T22] ffff88807e87e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1105.891019][ T22] >ffff88807e87e600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1105.899081][ T22] ^ [ 1105.904296][ T22] ffff88807e87e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1105.912592][ T22] ffff88807e87e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1105.920654][ T22] ================================================================== [ 1105.928729][ T22] Disabling lock debugging due to kernel taint [ 1105.937824][ T8831] Bluetooth: hci0: command 0x041b tx timeout [ 1105.945529][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 1105.952137][ T22] CPU: 0 PID: 22 Comm: kdevtmpfs Tainted: G B 5.14.0-syzkaller #0 [ 1105.961938][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.972310][ T22] Call Trace: [ 1105.975602][ T22] dump_stack_lvl+0xcd/0x134 [ 1105.980207][ T22] panic+0x2b0/0x6dd [ 1105.984193][ T22] ? __warn_printk+0xf3/0xf3 [ 1105.988766][ T22] ? preempt_schedule_common+0x59/0xc0 [ 1105.994216][ T22] ? __d_alloc+0x19a/0x950 [ 1105.998703][ T22] ? preempt_schedule_thunk+0x16/0x18 [ 1106.004060][ T22] ? trace_hardirqs_on+0x38/0x1c0 [ 1106.009382][ T22] ? trace_hardirqs_on+0x51/0x1c0 [ 1106.014393][ T22] ? __d_alloc+0x19a/0x950 [ 1106.018792][ T22] ? __d_alloc+0x19a/0x950 [ 1106.023202][ T22] end_report.cold+0x63/0x6f [ 1106.027783][ T22] kasan_report.cold+0x71/0xdf [ 1106.032545][ T22] ? __d_alloc+0x19a/0x950 [ 1106.036955][ T22] kasan_check_range+0x13d/0x180 [ 1106.041911][ T22] memcpy+0x20/0x60 [ 1106.045743][ T22] __d_alloc+0x19a/0x950 [ 1106.049994][ T22] d_alloc+0x4a/0x230 [ 1106.054025][ T22] __lookup_hash+0xc8/0x180 [ 1106.058559][ T22] kern_path_locked+0x17e/0x320 [ 1106.063495][ T22] ? filename_lookup+0x80/0x80 [ 1106.068316][ T22] handle_remove+0xa2/0x5fe [ 1106.072827][ T22] ? cacheinfo_cpu_online.cold+0x3e/0x3e [ 1106.078492][ T22] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1106.084463][ T22] ? finish_task_switch.isra.0+0x232/0xa50 [ 1106.090358][ T22] ? find_held_lock+0x2d/0x110 [ 1106.095106][ T22] ? devtmpfsd+0xaa/0x2a3 [ 1106.099445][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 1106.104292][ T22] ? do_raw_spin_lock+0x120/0x2b0 [ 1106.109316][ T22] ? rwlock_bug.part.0+0x90/0x90 [ 1106.114251][ T22] devtmpfsd+0x1b9/0x2a3 [ 1106.118527][ T22] ? dmar_validate_one_drhd+0x24d/0x24d [ 1106.124085][ T22] kthread+0x3e5/0x4d0 [ 1106.128275][ T22] ? set_kthread_struct+0x130/0x130 [ 1106.133468][ T22] ret_from_fork+0x1f/0x30 [ 1106.139309][ T22] Kernel Offset: disabled [ 1106.143627][ T22] Rebooting in 86400 seconds..