Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts.
[  484.383928][ T6564] chnl_net:caif_netlink_parms(): no params data found
[  484.451869][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.460911][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.470057][ T6564] device bridge_slave_0 entered promiscuous mode
[  484.480811][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.488625][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.496358][ T6564] device bridge_slave_1 entered promiscuous mode
[  484.527537][ T6564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.539796][ T6564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.572762][ T6564] team0: Port device team_slave_0 added
[  484.580461][ T6564] team0: Port device team_slave_1 added
[  484.610261][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.617937][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.644908][ T6564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.657801][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.664743][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.691139][ T6564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.728658][ T6564] device hsr_slave_0 entered promiscuous mode
[  484.735928][ T6564] device hsr_slave_1 entered promiscuous mode
[  484.860372][ T6564] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  484.871686][ T6564] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  484.888960][ T6564] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  484.901464][ T6564] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  484.924845][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.932052][ T6564] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.939837][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.946973][ T6564] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.991173][ T6564] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.004847][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  485.016470][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.025404][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.034245][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  485.048743][ T6564] 8021q: adding VLAN 0 to HW filter on device team0
[  485.060856][ T6884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  485.070405][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.077500][ T6884] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.088799][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  485.097359][ T1292] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.104401][ T1292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.126880][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  485.135747][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  485.149451][ T6884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  485.166344][ T6564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  485.177338][ T6564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  485.191434][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  485.200603][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  485.209805][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  485.228442][ T6884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  485.235807][ T6884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  485.250524][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.270314][ T6884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  485.289367][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  485.299531][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  485.308408][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  485.319471][ T6564] device veth0_vlan entered promiscuous mode
[  485.332030][ T6564] device veth1_vlan entered promiscuous mode
[  485.353551][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  485.362362][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  485.371247][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  485.384473][ T6564] device veth0_macvtap entered promiscuous mode
[  485.394371][ T6564] device veth1_macvtap entered promiscuous mode
[  485.411834][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.421538][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  485.430114][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  485.442172][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.450251][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  485.459111][ T6887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  485.471899][ T6564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.482361][ T6564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.491186][ T6564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.500297][ T6564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
executing program
[  485.549261][ T6889] netlink: 'syz-executor300': attribute type 4 has an invalid length.
[  716.154061][   T27] INFO: task syz-executor300:6889 can't die for more than 143 seconds.
[  716.162522][   T27] task:syz-executor300 state:D stack:23960 pid: 6889 ppid:  6564 flags:0x00004004
[  716.172935][   T27] Call Trace:
[  716.177549][   T27]  __schedule+0x949/0x2710
[  716.182063][   T27]  ? io_schedule_timeout+0x140/0x140
[  716.189139][   T27]  ? lock_chain_count+0x20/0x20
[  716.195796][   T27]  schedule+0xd3/0x290
[  716.199902][   T27]  schedule_timeout+0x1db/0x2a0
[  716.205025][   T27]  ? usleep_range+0x170/0x170
[  716.209713][   T27]  ? wait_for_completion+0x16e/0x280
[  716.215295][   T27]  ? mark_held_locks+0x9f/0xe0
[  716.220164][   T27]  ? rwlock_bug.part.0+0x90/0x90
[  716.225178][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  716.230391][   T27]  wait_for_completion+0x176/0x280
[  716.235567][   T27]  ? __flush_work+0x4e0/0xad0
[  716.240391][   T27]  ? bit_wait_io_timeout+0x160/0x160
[  716.245729][   T27]  ? lockdep_hardirqs_off+0x90/0xd0
[  716.250992][   T27]  __flush_work+0x50e/0xad0
[  716.255545][   T27]  ? debug_object_assert_init+0x246/0x2e0
[  716.261365][   T27]  ? queue_delayed_work_on+0x120/0x120
[  716.266928][   T27]  ? flush_workqueue_prep_pwqs+0x510/0x510
[  716.272779][   T27]  ? mark_held_locks+0x9f/0xe0
[  716.277625][   T27]  __cancel_work_timer+0x3f9/0x570
[  716.282749][   T27]  ? try_to_grab_pending+0xd0/0xd0
[  716.287994][   T27]  ? lock_release+0x720/0x720
[  716.292685][   T27]  tls_sk_proto_close+0x4a7/0xaf0
[  716.297840][   T27]  ? wait_on_pending_writer+0x430/0x430
[  716.303444][   T27]  ? ip_mc_drop_socket+0x16/0x260
[  716.308584][   T27]  inet_release+0x12e/0x280
[  716.313213][   T27]  inet6_release+0x4c/0x70
[  716.317724][   T27]  __sock_release+0xcd/0x280
[  716.322363][   T27]  sock_close+0x18/0x20
[  716.326619][   T27]  __fput+0x288/0x920
[  716.330684][   T27]  ? __sock_release+0x280/0x280
[  716.335616][   T27]  task_work_run+0xdd/0x1a0
[  716.340139][   T27]  exit_to_user_mode_prepare+0x27e/0x290
[  716.345875][   T27]  syscall_exit_to_user_mode+0x19/0x60
[  716.351348][   T27]  do_syscall_64+0x42/0xb0
[  716.355817][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  716.361742][   T27] RIP: 0033:0x405573
[  716.365681][   T27] RSP: 002b:00007fff61e247d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  716.374164][   T27] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000405573
[  716.382136][   T27] RDX: fffffffffffffe60 RSI: 00000000200005c0 RDI: 0000000000000005
[  716.390165][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffffffffffe60
[  716.398234][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff61e247f0
[  716.406274][   T27] R13: 00000000000f4240 R14: 00000000004b8018 R15: 00000000004004b8
[  716.414349][   T27] INFO: task syz-executor300:6889 blocked for more than 143 seconds.
[  716.422412][   T27]       Not tainted 5.14.0-rc4-next-20210806-syzkaller #0
[  716.429554][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  716.438280][   T27] task:syz-executor300 state:D stack:23960 pid: 6889 ppid:  6564 flags:0x00004004
[  716.447537][   T27] Call Trace:
[  716.450862][   T27]  __schedule+0x949/0x2710
[  716.455360][   T27]  ? io_schedule_timeout+0x140/0x140
[  716.460654][   T27]  ? lock_chain_count+0x20/0x20
[  716.465566][   T27]  schedule+0xd3/0x290
[  716.469641][   T27]  schedule_timeout+0x1db/0x2a0
[  716.474566][   T27]  ? usleep_range+0x170/0x170
[  716.479252][   T27]  ? wait_for_completion+0x16e/0x280
[  716.484611][   T27]  ? mark_held_locks+0x9f/0xe0
[  716.489389][   T27]  ? rwlock_bug.part.0+0x90/0x90
[  716.494378][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  716.499604][   T27]  wait_for_completion+0x176/0x280
[  716.504786][   T27]  ? __flush_work+0x4e0/0xad0
[  716.509469][   T27]  ? bit_wait_io_timeout+0x160/0x160
[  716.515010][   T27]  ? lockdep_hardirqs_off+0x90/0xd0
[  716.520217][   T27]  __flush_work+0x50e/0xad0
[  716.524782][   T27]  ? debug_object_assert_init+0x246/0x2e0
[  716.530545][   T27]  ? queue_delayed_work_on+0x120/0x120
[  716.536079][   T27]  ? flush_workqueue_prep_pwqs+0x510/0x510
[  716.541921][   T27]  ? mark_held_locks+0x9f/0xe0
[  716.546754][   T27]  __cancel_work_timer+0x3f9/0x570
[  716.551870][   T27]  ? try_to_grab_pending+0xd0/0xd0
[  716.557128][   T27]  ? lock_release+0x720/0x720
[  716.561819][   T27]  tls_sk_proto_close+0x4a7/0xaf0
[  716.566906][   T27]  ? wait_on_pending_writer+0x430/0x430
[  716.572464][   T27]  ? ip_mc_drop_socket+0x16/0x260
[  716.577558][   T27]  inet_release+0x12e/0x280
[  716.582072][   T27]  inet6_release+0x4c/0x70
[  716.586533][   T27]  __sock_release+0xcd/0x280
[  716.591141][   T27]  sock_close+0x18/0x20
[  716.595358][   T27]  __fput+0x288/0x920
[  716.599344][   T27]  ? __sock_release+0x280/0x280
[  716.604270][   T27]  task_work_run+0xdd/0x1a0
[  716.608788][   T27]  exit_to_user_mode_prepare+0x27e/0x290
[  716.614511][   T27]  syscall_exit_to_user_mode+0x19/0x60
[  716.619985][   T27]  do_syscall_64+0x42/0xb0
[  716.624454][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  716.630379][   T27] RIP: 0033:0x405573
[  716.634348][   T27] RSP: 002b:00007fff61e247d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  716.642767][   T27] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000405573
[  716.650989][   T27] RDX: fffffffffffffe60 RSI: 00000000200005c0 RDI: 0000000000000005
[  716.659133][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffffffffffe60
[  716.667183][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff61e247f0
[  716.675359][   T27] R13: 00000000000f4240 R14: 00000000004b8018 R15: 00000000004004b8
[  716.683427][   T27] 
[  716.683427][   T27] Showing all locks held in the system:
[  716.691192][   T27] 3 locks held by kworker/0:1/7:
[  716.696193][   T27]  #0: ffff888010864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x871/0x1630
[  716.706659][   T27]  #1: ffffc90000cc7db0 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1630
[  716.719796][   T27]  #2: ffff88807d66e8d8 (&ctx->tx_lock){+.+.}-{3:3}, at: tx_work_handler+0x127/0x190
[  716.729364][   T27] 1 lock held by khungtaskd/27:
[  716.734370][   T27]  #0: ffffffff8b97f140 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  716.744373][   T27] 1 lock held by syz-executor300/6889:
[  716.749863][   T27]  #0: ffff88807677d610 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: __sock_release+0x86/0x280
[  716.760460][   T27] 
[  716.762778][   T27] =============================================
[  716.762778][   T27] 
[  716.771227][   T27] NMI backtrace for cpu 1
[  716.775551][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.14.0-rc4-next-20210806-syzkaller #0
[  716.784904][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  716.794955][   T27] Call Trace:
[  716.798226][   T27]  dump_stack_lvl+0xcd/0x134
[  716.802891][   T27]  nmi_cpu_backtrace.cold+0x47/0x144
[  716.808177][   T27]  ? lapic_can_unplug_cpu+0x80/0x80
[  716.813418][   T27]  nmi_trigger_cpumask_backtrace+0x1ae/0x220
[  716.819453][   T27]  watchdog+0xcb7/0xed0
[  716.823654][   T27]  ? trace_sched_process_hang+0x280/0x280
[  716.829469][   T27]  kthread+0x3e5/0x4d0
[  716.833536][   T27]  ? set_kthread_struct+0x130/0x130
[  716.838750][   T27]  ret_from_fork+0x1f/0x30
[  716.843394][   T27] Sending NMI from CPU 1 to CPUs 0:
[  716.848651][    C0] NMI backtrace for cpu 0
[  716.848661][    C0] CPU: 0 PID: 2976 Comm: systemd-journal Not tainted 5.14.0-rc4-next-20210806-syzkaller #0
[  716.848686][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  716.848698][    C0] RIP: 0010:lockdep_hardirqs_off+0x3a/0xd0
[  716.848732][    C0] Code: 05 bb b6 d3 76 a9 00 00 f0 00 55 53 48 89 fb 74 49 8b 15 49 bf f4 06 85 d2 74 0e 65 8b 05 fa bd d3 76 85 c0 75 4e 5b 5d c3 9c <58> f6 c4 02 74 eb e8 ab d9 a3 fa 85 c0 74 ed 8b 05 a9 77 3f 04 85
[  716.848753][    C0] RSP: 0018:ffffc90002bcfaf8 EFLAGS: 00000046
[  716.848770][    C0] RAX: 0000000000000000 RBX: ffffffff8930ebbe RCX: 0000000000000001
[  716.848784][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  716.848796][    C0] RBP: ffffffff90436a78 R08: 0000000000000001 R09: 0000000000000001
[  716.848810][    C0] R10: ffffffff817bee18 R11: 0000000000000000 R12: 0000000000000a06
[  716.848824][    C0] R13: 0000000000000000 R14: dead000000000100 R15: dffffc0000000000
[  716.848839][    C0] FS:  00007efdd503e8c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  716.848858][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  716.848873][    C0] CR2: 00007efdd241c000 CR3: 000000001b8bf000 CR4: 00000000001506f0
[  716.848887][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  716.848900][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  716.848913][    C0] Call Trace:
[  716.848920][    C0]  trace_hardirqs_off+0x13/0x1b0
[  716.848978][    C0]  _raw_spin_lock_irqsave+0x4e/0x50
[  716.849006][    C0]  debug_check_no_obj_freed+0xc7/0x420
[  716.849038][    C0]  ? free_tail_pages_check+0x180/0x2d0
[  716.849067][    C0]  free_pcp_prepare+0x2ae/0x860
[  716.849090][    C0]  free_unref_page+0x19/0x690
[  716.849113][    C0]  __unfreeze_partials+0x1bc/0x210
[  716.849180][    C0]  ? put_cpu_partial+0x18b/0x230
[  716.849204][    C0]  ? lockdep_hardirqs_on+0x79/0x100
[  716.849230][    C0]  ? qlist_free_all+0x5a/0xc0
[  716.849268][    C0]  qlist_free_all+0x5a/0xc0
[  716.849290][    C0]  kasan_quarantine_reduce+0x180/0x200
[  716.849315][    C0]  __kasan_slab_alloc+0x8e/0xa0
[  716.849343][    C0]  kmem_cache_alloc+0x20d/0x390
[  716.849370][    C0]  getname_flags.part.0+0x50/0x4f0
[  716.849397][    C0]  getname_flags+0x9a/0xe0
[  716.849421][    C0]  do_mkdirat+0x8d/0x310
[  716.849445][    C0]  ? user_path_create+0xf0/0xf0
[  716.849471][    C0]  ? __secure_computing+0x104/0x360
[  716.849499][    C0]  do_syscall_64+0x35/0xb0
[  716.849527][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  716.849556][    C0] RIP: 0033:0x7efdd42f9687
[  716.849572][    C0] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48
[  716.849592][    C0] RSP: 002b:00007ffd0a4d58f8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053
[  716.849612][    C0] RAX: ffffffffffffffda RBX: 00007ffd0a4d8810 RCX: 00007efdd42f9687
[  716.849627][    C0] RDX: 00007efdd4d6aa00 RSI: 00000000000001ed RDI: 000055eec83958a0
[  716.849641][    C0] RBP: 00007ffd0a4d5930 R08: 0000000000000000 R09: 0000000000000000
[  716.849655][    C0] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000
[  716.849668][    C0] R13: 0000000000000000 R14: 00007ffd0a4d8810 R15: 00007ffd0a4d5e20
[  716.849691][    C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.041 msecs
[  716.852042][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  717.182084][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.14.0-rc4-next-20210806-syzkaller #0
[  717.191449][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  717.201494][   T27] Call Trace:
[  717.204764][   T27]  dump_stack_lvl+0xcd/0x134
[  717.209359][   T27]  panic+0x2b0/0x6dd
[  717.213252][   T27]  ? __warn_printk+0xf3/0xf3
[  717.217845][   T27]  ? lapic_can_unplug_cpu+0x80/0x80
[  717.223042][   T27]  ? preempt_schedule_thunk+0x16/0x18
[  717.228414][   T27]  ? nmi_trigger_cpumask_backtrace+0x191/0x220
[  717.234580][   T27]  ? watchdog.cold+0x1b9/0x1de
[  717.239379][   T27]  watchdog.cold+0x1ca/0x1de
[  717.243973][   T27]  ? trace_sched_process_hang+0x280/0x280
[  717.249706][   T27]  kthread+0x3e5/0x4d0
[  717.253775][   T27]  ? set_kthread_struct+0x130/0x130
[  717.258984][   T27]  ret_from_fork+0x1f/0x30
[  717.264898][   T27] Kernel Offset: disabled
[  717.269219][   T27] Rebooting in 86400 seconds..