Warning: Permanently added '10.128.10.20' (ECDSA) to the list of known hosts. 2022/05/24 19:35:19 parsed 1 programs 2022/05/24 19:35:19 executed programs: 0 [ 65.077781][ T3987] cgroup: Unknown subsys name 'net' [ 65.088858][ T3987] cgroup: Unknown subsys name 'rlimit' [ 66.290976][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.297468][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.288917][ T3597] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 70.375584][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.384095][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.391941][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.400100][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.407660][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.414979][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.482010][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 70.516951][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.524351][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.532461][ T4049] device bridge_slave_0 entered promiscuous mode [ 70.540848][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.547986][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.556518][ T4049] device bridge_slave_1 entered promiscuous mode [ 70.577737][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.588813][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.609901][ T4049] team0: Port device team_slave_0 added [ 70.616787][ T4049] team0: Port device team_slave_1 added [ 70.632296][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.639506][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.666185][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.678123][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.685509][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.711825][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.735526][ T4049] device hsr_slave_0 entered promiscuous mode [ 70.742170][ T4049] device hsr_slave_1 entered promiscuous mode [ 70.794237][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.801319][ T4049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.808938][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.816086][ T4049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.850709][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.862762][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.870584][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.877885][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.886319][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.897898][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.907758][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.916442][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.923526][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.934875][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.943601][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.950763][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.973890][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.982422][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.991404][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.999753][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.007852][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.019381][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.035976][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.044856][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.053086][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.206579][ T4049] device veth0_vlan entered promiscuous mode [ 71.214585][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.223839][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.232836][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.241129][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.252696][ T4049] device veth1_vlan entered promiscuous mode [ 71.268145][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.276495][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.284739][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.296094][ T4049] device veth0_macvtap entered promiscuous mode [ 71.304841][ T4049] device veth1_macvtap entered promiscuous mode [ 71.318353][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.325779][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.336183][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.347936][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.357213][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.398977][ T327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.406900][ T327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.419413][ T6] cfg80211: failed to load regulatory.db [ 71.436868][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.454672][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.464416][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.475807][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.519940][ T4068] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 71.529601][ T4068] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.539612][ T4068] [ 71.542641][ T4068] ============================= [ 71.547737][ T4068] WARNING: suspicious RCU usage [ 71.553943][ T4068] 5.18.0-syzkaller #0 Not tainted [ 71.560826][ T4068] ----------------------------- [ 71.565753][ T4068] net/hsr/hsr_framereg.c:41 suspicious rcu_dereference_check() usage! [ 71.583866][ T4068] [ 71.583866][ T4068] other info that might help us debug this: [ 71.583866][ T4068] [ 71.596246][ T4068] [ 71.596246][ T4068] rcu_scheduler_active = 2, debug_locks = 1 [ 71.604607][ T4068] 3 locks held by syz-executor.0/4068: [ 71.611556][ T4068] #0: ffffffff8c73b2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x10/0x30 [ 71.621243][ T4068] #1: ffffffff8c73b3a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x315/0x4a0 [ 71.632434][ T4068] #2: ffffffff8af78ae0 (rcu_read_lock){....}-{1:2}, at: hsr_get_node_list+0xc1/0x8f0 [ 71.642728][ T4068] [ 71.642728][ T4068] stack backtrace: [ 71.649058][ T4068] CPU: 1 PID: 4068 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller #0 [ 71.657385][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.667528][ T4068] Call Trace: [ 71.670803][ T4068] [ 71.673728][ T4068] dump_stack_lvl+0x57/0x7d [ 71.678222][ T4068] hsr_node_get_first+0x76/0xa0 [ 71.683064][ T4068] hsr_get_next_node+0x1b3/0x330 [ 71.687995][ T4068] hsr_get_node_list+0x2c2/0x8f0 [ 71.693033][ T4068] ? hsr_get_node_status+0xba0/0xba0 [ 71.698316][ T4068] ? __nla_parse+0x22/0x30 [ 71.702991][ T4068] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x159/0x230 [ 71.710394][ T4068] genl_family_rcv_msg_doit+0x1e4/0x2f0 [ 71.716125][ T4068] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x230/0x230 [ 71.723652][ T4068] ? mutex_lock_io_nested+0x1150/0x1150 [ 71.729196][ T4068] ? genl_op_from_small+0x1e/0x3c0 [ 71.734386][ T4068] genl_rcv_msg+0x27a/0x4a0 [ 71.738875][ T4068] ? genl_get_cmd+0x3c0/0x3c0 [ 71.743645][ T4068] ? lock_acquire+0x1ab/0x510 [ 71.748306][ T4068] ? hsr_get_node_status+0xba0/0xba0 [ 71.753569][ T4068] ? lock_release+0x720/0x720 [ 71.758229][ T4068] ? ref_tracker_dir_exit+0x3b0/0x3b0 [ 71.763584][ T4068] netlink_rcv_skb+0x118/0x370 [ 71.768323][ T4068] ? genl_get_cmd+0x3c0/0x3c0 [ 71.772973][ T4068] ? netlink_ack+0x940/0x940 [ 71.777549][ T4068] ? netlink_deliver_tap+0x135/0xac0 [ 71.782900][ T4068] genl_rcv+0x1f/0x30 [ 71.786856][ T4068] netlink_unicast+0x433/0x710 [ 71.791598][ T4068] ? netlink_attachskb+0x740/0x740 [ 71.796709][ T4068] netlink_sendmsg+0x782/0xc30 [ 71.801482][ T4068] ? netlink_unicast+0x710/0x710 [ 71.807012][ T4068] ? netlink_unicast+0x710/0x710 [ 71.811927][ T4068] sock_sendmsg+0xab/0xe0 [ 71.816235][ T4068] ____sys_sendmsg+0x5c2/0x7a0 [ 71.820973][ T4068] ? kernel_sendmsg+0x30/0x30 [ 71.825626][ T4068] ? do_recvmmsg+0x550/0x550 [ 71.830187][ T4068] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.836252][ T4068] ? try_to_wake_up+0xa04/0x1800 [ 71.841187][ T4068] ___sys_sendmsg+0xd3/0x150 [ 71.845930][ T4068] ? sendmsg_copy_msghdr+0x110/0x110 [ 71.851280][ T4068] ? __fget_files+0x1b9/0x3c0 [ 71.856022][ T4068] ? lock_downgrade+0x6e0/0x6e0 [ 71.860874][ T4068] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.866848][ T4068] ? __fget_files+0x1d1/0x3c0 [ 71.871505][ T4068] ? __fget_light+0xbe/0x220 [ 71.876122][ T4068] __sys_sendmsg+0xb9/0x150 [ 71.880606][ T4068] ? __sys_sendmsg_sock+0x10/0x10 [ 71.885699][ T4068] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 71.893224][ T4068] ? syscall_enter_from_user_mode+0x21/0x70 [ 71.899091][ T4068] ? lockdep_hardirqs_on+0x79/0x100 [ 71.904373][ T4068] do_syscall_64+0x35/0xb0 [ 71.908767][ T4068] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 71.914791][ T4068] RIP: 0033:0x7f809ba890e9 [ 71.919180][ T4068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.939289][ T4068] RSP: 002b:00007f809ccc8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.947673][ T4068] RAX: ffffffffffffffda RBX: 00007f809bb9bf60 RCX: 00007f809ba890e9 [ 71.955706][ T4068] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 71.963648][ T4068] RBP: 00007f809bae308d R08: 0000000000000000 R09: 0000000000000000 2022/05/24 19:35:26 executed programs: 1 [ 71.971591][ T4068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.979626][ T4068] R13: 00007ffd7bceafff R14: 00007f809ccc8300 R15: 0000000000022000 [ 71.987603][ T4068] [ 72.028497][ T4070] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.037947][ T4070] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.070330][ T4072] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.078481][ T4072] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.107954][ T4074] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.117588][ T4074] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.147435][ T4076] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.155931][ T4076] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.184234][ T4078] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.194665][ T4078] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.225248][ T4080] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.234298][ T4080] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.258173][ T4082] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.266657][ T4082] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.296206][ T4084] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.305122][ T4084] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.331159][ T4086] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 72.339375][ T4086] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.450004][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 74.529746][ T14] Bluetooth: hci0: command 0x041b tx timeout [ 76.540415][ T4690] validate_nla: 301 callbacks suppressed [ 76.540423][ T4690] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.554906][ T4690] __nla_validate_parse: 301 callbacks suppressed [ 76.554914][ T4690] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.583198][ T4692] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.591762][ T4692] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.609220][ T1130] Bluetooth: hci0: command 0x040f tx timeout [ 76.619549][ T4694] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.627932][ T4694] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.652750][ T4696] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.661845][ T4696] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.682055][ T4698] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.690933][ T4698] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.712629][ T4700] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.721177][ T4700] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.742679][ T4702] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.750933][ T4702] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.776190][ T4704] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.784461][ T4704] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.805545][ T4706] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.813989][ T4706] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.835461][ T4708] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.843970][ T4708] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'. 2022/05/24 19:35:31 executed programs: 335 [ 78.689092][ T1130] Bluetooth: hci0: command 0x0419 tx timeout