DUID 00:04:87:e9:86:9c:37:5a:86:1a:3e:7a:33:57:0c:76:7d:1a
forked to background, child pid 4657
[ 35.992461][ T4658] 8021q: adding VLAN 0 to HW filter on device bond0
[ 36.023717][ T4658] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.94' (ECDSA) to the list of known hosts.
2023/03/14 00:55:52 fuzzer started
2023/03/14 00:55:52 connecting to host at 10.128.0.169:32975
2023/03/14 00:55:52 checking machine...
2023/03/14 00:55:52 checking revisions...
2023/03/14 00:55:52 testing simple program...
syzkaller login: [ 58.977608][ T5089] cgroup: Unknown subsys name 'net'
[ 59.152150][ T5089] cgroup: Unknown subsys name 'rlimit'
[ 59.251837][ T5083] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5083 'syz-fuzzer'
[ 59.373498][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 59.382464][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 59.390955][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 59.399245][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 59.407082][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 59.414583][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 59.536128][ T5091] chnl_net:caif_netlink_parms(): no params data found
[ 59.559246][ T5091]
[ 59.561638][ T5091] =============================
[ 59.567200][ T5091] WARNING: suspicious RCU usage
[ 59.572240][ T5091] 6.3.0-rc1-syzkaller-00150-g512dd354718b #0 Not tainted
[ 59.579663][ T5091] -----------------------------
[ 59.584609][ T5091] drivers/net/veth.c:1265 suspicious rcu_dereference_check() usage!
[ 59.592820][ T5091]
[ 59.592820][ T5091] other info that might help us debug this:
[ 59.592820][ T5091]
[ 59.603231][ T5091]
[ 59.603231][ T5091] rcu_scheduler_active = 2, debug_locks = 1
[ 59.611536][ T5091] 1 lock held by syz-executor.0/5091:
[ 59.617080][ T5091] #0: ffffffff8e102ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50
[ 59.626966][ T5091]
[ 59.626966][ T5091] stack backtrace:
[ 59.633061][ T5091] CPU: 1 PID: 5091 Comm: syz-executor.0 Not tainted 6.3.0-rc1-syzkaller-00150-g512dd354718b #0
[ 59.643560][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 59.653927][ T5091] Call Trace:
[ 59.657518][ T5091] <TASK>
[ 59.660934][ T5091] dump_stack_lvl+0x136/0x150
[ 59.665809][ T5091] lockdep_rcu_suspicious+0x208/0x3a0
[ 59.671298][ T5091] veth_set_xdp_features+0x1c7/0x250
[ 59.676614][ T5091] veth_newlink+0x729/0x9d0
[ 59.681146][ T5091] ? veth_set_features+0x1e0/0x1e0
[ 59.686635][ T5091] ? __rtnl_newlink+0xfd4/0x1840
[ 59.691580][ T5091] ? rtnl_newlink+0x68/0xa0
[ 59.696170][ T5091] ? rtnetlink_rcv_msg+0x43d/0xd50
[ 59.701279][ T5091] ? netlink_rcv_skb+0x165/0x440
[ 59.706414][ T5091] ? netlink_unicast+0x547/0x7f0
[ 59.711416][ T5091] ? netlink_sendmsg+0x925/0xe30
[ 59.716450][ T5091] ? sock_sendmsg+0xde/0x190
[ 59.721045][ T5091] ? __sys_sendto+0x23a/0x340
[ 59.725723][ T5091] ? __x64_sys_sendto+0xe1/0x1b0
[ 59.730678][ T5091] ? do_syscall_64+0x39/0xb0
[ 59.735280][ T5091] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.741391][ T5091] ? find_held_lock+0x2d/0x110
[ 59.746170][ T5091] ? __kmem_cache_alloc_node+0x48/0x320
[ 59.751730][ T5091] ? kvmalloc_node+0xa2/0x1a0
[ 59.756401][ T5091] ? rcu_read_lock_sched_held+0x3e/0x70
[ 59.762359][ T5091] ? trace_kmalloc+0xb4/0x110
[ 59.767060][ T5091] ? __kmalloc_node+0x77/0xd0
[ 59.771823][ T5091] ? __xdp_rxq_info_reg+0x18d/0x340
[ 59.777609][ T5091] ? alloc_netdev_mqs+0xdce/0x1250
[ 59.782840][ T5091] ? rtnl_create_link+0x9d8/0xee0
[ 59.787919][ T5091] ? veth_set_features+0x1e0/0x1e0
[ 59.793136][ T5091] __rtnl_newlink+0x10c2/0x1840
[ 59.798039][ T5091] ? find_held_lock+0x2d/0x110
[ 59.803040][ T5091] ? rtnl_link_unregister+0x250/0x250
[ 59.808965][ T5091] ? __kmem_cache_alloc_node+0x48/0x320
[ 59.814567][ T5091] rtnl_newlink+0x68/0xa0
[ 59.819046][ T5091] ? __rtnl_newlink+0x1840/0x1840
[ 59.824100][ T5091] rtnetlink_rcv_msg+0x43d/0xd50
[ 59.829437][ T5091] ? rtnl_stats_set+0x4d0/0x4d0
[ 59.834361][ T5091] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 59.840458][ T5091] ? do_syscall_64+0x39/0xb0
[ 59.845155][ T5091] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.851335][ T5091] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 59.857461][ T5091] netlink_rcv_skb+0x165/0x440
[ 59.862238][ T5091] ? rtnl_stats_set+0x4d0/0x4d0
[ 59.867098][ T5091] ? netlink_ack+0x1360/0x1360
[ 59.871916][ T5091] ? netlink_deliver_tap+0x1b1/0xcf0
[ 59.877328][ T5091] netlink_unicast+0x547/0x7f0
[ 59.882173][ T5091] ? netlink_attachskb+0x890/0x890
[ 59.887896][ T5091] ? __virt_addr_valid+0x61/0x2e0
[ 59.892954][ T5091] ? __phys_addr_symbol+0x30/0x70
[ 59.898113][ T5091] ? __check_object_size+0x333/0x6e0
[ 59.903498][ T5091] netlink_sendmsg+0x925/0xe30
[ 59.908294][ T5091] ? netlink_unicast+0x7f0/0x7f0
[ 59.913277][ T5091] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 59.918872][ T5091] ? netlink_unicast+0x7f0/0x7f0
[ 59.923859][ T5091] sock_sendmsg+0xde/0x190
[ 59.928401][ T5091] __sys_sendto+0x23a/0x340
[ 59.933044][ T5091] ? __ia32_sys_getpeername+0xb0/0xb0
[ 59.938536][ T5091] ? restore_fpregs_from_fpstate+0xc1/0x1c0
[ 59.944481][ T5091] __x64_sys_sendto+0xe1/0x1b0
[ 59.949557][ T5091] ? syscall_enter_from_user_mode+0x26/0xb0
[ 59.955488][ T5091] do_syscall_64+0x39/0xb0
[ 59.960009][ T5091] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.965912][ T5091] RIP: 0033:0x7f7d9b63e12c
[ 59.970346][ T5091] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 59.990329][ T5091] RSP: 002b:00007fffbc143ef0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 59.998851][ T5091] RAX: ffffffffffffffda RBX: 00007f7d9c2d4620 RCX: 00007f7d9b63e12c
[ 60.007142][ T5091] RDX: 000000000000002c RSI: 00007f7d9c2d4670 RDI: 0000000000000003
[ 60.015149][ T5091] RBP: 0000000000000000 R08: 00007fffbc143f44 R09: 000000000000000c
[ 60.023478][ T5091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 60.031466][ T5091] R13: 00007f7d9c2d4670 R14: 0000000000000003 R15: 0000000000000000
[ 60.039475][ T5091] </TASK>
[ 60.070448][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.078266][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.086137][ T5091] bridge_slave_0: entered allmulticast mode
[ 60.092848][ T5091] bridge_slave_0: entered promiscuous mode
[ 60.102240][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.109912][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.117290][ T5091] bridge_slave_1: entered allmulticast mode
[ 60.123870][ T5091] bridge_slave_1: entered promiscuous mode
[ 60.146615][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 60.157983][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 60.181306][ T5091] team0: Port device team_slave_0 added
[ 60.190340][ T5091] team0: Port device team_slave_1 added
[ 60.209884][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 60.216983][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.243319][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 60.256215][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 60.263289][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.289604][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 60.320294][ T5091] hsr_slave_0: entered promiscuous mode
[ 60.327029][ T5091] hsr_slave_1: entered promiscuous mode
[ 60.417895][ T5091] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 60.429005][ T5091] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 60.438280][ T5091] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 60.448329][ T5091] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 60.471305][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.478718][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 60.486853][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.494325][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 60.546083][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0
[ 60.560267][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 60.572417][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.581611][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.590186][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 60.603884][ T5091] 8021q: adding VLAN 0 to HW filter on device team0
[ 60.615043][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 60.623854][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 60.632697][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.640045][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 60.656926][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 60.665923][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 60.674580][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.681915][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 60.690208][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 60.698844][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 60.711525][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 60.721414][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 60.732476][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 60.749154][ T5091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 60.760080][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 60.772582][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 60.781392][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 60.790419][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 60.799010][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 60.808089][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 60.817572][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 60.826285][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 60.958038][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 60.967129][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 60.979767][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 60.996981][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 61.005963][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 61.026143][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 61.034524][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 61.045898][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 61.053768][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 61.062596][ T5091] veth0_vlan: entered promiscuous mode
[ 61.077808][ T5091] veth1_vlan: entered promiscuous mode
[ 61.097657][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 61.106683][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 61.115472][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 61.124087][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 61.135465][ T5091] veth0_macvtap: entered promiscuous mode
[ 61.143869][ T5091] veth1_macvtap: entered promiscuous mode
[ 61.160885][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 61.168857][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 61.176992][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 61.185561][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 61.195467][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 61.208020][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 61.216677][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 61.225774][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 61.238225][ T5091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.247317][ T5091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.256623][ T5091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.266466][ T5091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.334167][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 61.351161][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 61.363464][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 61.365174][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 61.372235][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 61.389249][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2023/03/14 00:55:55 building call list...
[ 61.455576][ T5092] Bluetooth: hci0: command 0x0409 tx timeout
executing program
[ 63.351123][ T5087] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[ 63.532257][ T5087] can: request_module (can-proto-0) failed.
[ 63.568935][ T5087] can: request_module (can-proto-0) failed.
[ 63.602952][ T5087] can: request_module (can-proto-0) failed.
[ 64.270320][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
executing program