[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.164' (ECDSA) to the list of known hosts. 2021/10/04 10:53:29 parsed 1 programs 2021/10/04 10:53:29 executed programs: 0 syzkaller login: [ 1584.497747][ T6564] chnl_net:caif_netlink_parms(): no params data found [ 1584.608116][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.615915][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.624505][ T6564] device bridge_slave_0 entered promiscuous mode [ 1584.635759][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.644377][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.652812][ T6564] device bridge_slave_1 entered promiscuous mode [ 1584.683005][ T6564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.694145][ T6564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.727596][ T6564] team0: Port device team_slave_0 added [ 1584.735183][ T6564] team0: Port device team_slave_1 added [ 1584.764526][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.772079][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.798058][ T6564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.811243][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.818194][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.846314][ T6564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.885809][ T6564] device hsr_slave_0 entered promiscuous mode [ 1584.893565][ T6564] device hsr_slave_1 entered promiscuous mode [ 1585.017763][ T6564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1585.031589][ T6564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1585.042717][ T6564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.052057][ T6564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1585.077792][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.085176][ T6564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.093384][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.100540][ T6564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.147055][ T6564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.164178][ T6564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.173419][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1585.184678][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.193812][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.202677][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1585.220942][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1585.230465][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.237504][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.245501][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1585.254780][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.262021][ T6715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.283856][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1585.292543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1585.306205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1585.318106][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1585.332378][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1585.343384][ T6564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1585.361528][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1585.370370][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1585.384459][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1585.403760][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1585.425832][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1585.434332][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1585.443003][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1585.453935][ T6564] device veth0_vlan entered promiscuous mode [ 1585.466573][ T6564] device veth1_vlan entered promiscuous mode [ 1585.480117][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1585.488093][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1585.506064][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1585.515554][ T6899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1585.528999][ T6564] device veth0_macvtap entered promiscuous mode [ 1585.541459][ T6564] device veth1_macvtap entered promiscuous mode [ 1585.558917][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.566386][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1585.575951][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1585.584163][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1585.593382][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1585.604505][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.614297][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1585.622986][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1585.634617][ T6564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.643871][ T6564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.652894][ T6564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.662159][ T6564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.753932][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.769916][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.779589][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1585.822763][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.831261][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.841930][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1586.361098][ T7] Bluetooth: hci0: command 0x0409 tx timeout 2021/10/04 10:53:34 executed programs: 60 [ 1588.450004][ T6899] Bluetooth: hci0: command 0x041b tx timeout [ 1590.528716][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 1592.608511][ T7] Bluetooth: hci0: command 0x0419 tx timeout 2021/10/04 10:53:39 executed programs: 202 2021/10/04 10:53:44 executed programs: 343 [ 1599.319373][ C1] ------------[ cut here ]------------ [ 1599.325075][ C1] Illegal XDP return value 14950656, expect packet loss! [ 1599.332961][ C1] WARNING: CPU: 1 PID: 6715 at net/core/filter.c:8186 bpf_warn_invalid_xdp_action+0x6f/0x80 [ 1599.343363][ C1] Modules linked in: [ 1599.347279][ C1] CPU: 1 PID: 6715 Comm: kworker/1:0 Not tainted 5.15.0-rc3-syzkaller #0 [ 1599.355774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1599.365906][ C1] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 1599.372577][ C1] RIP: 0010:bpf_warn_invalid_xdp_action+0x6f/0x80 [ 1599.379151][ C1] Code: 80 b2 8c 8a 41 83 fc 04 48 c7 c6 c0 b2 8c 8a 48 0f 46 ee e8 33 52 4d fa 44 89 e2 48 c7 c7 00 b3 8c 8a 48 89 ee e8 a8 68 ca 01 <0f> 0b 5b 5d 41 5c e9 16 52 4d fa 66 0f 1f 44 00 00 41 57 41 56 49 [ 1599.398848][ C1] RSP: 0018:ffffc90000dc09b0 EFLAGS: 00010286 [ 1599.404944][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1599.412973][ C1] RDX: ffff888077741c80 RSI: ffffffff815dbbc8 RDI: fffff520001b8128 [ 1599.421133][ C1] RBP: ffffffff8a8cb280 R08: 0000000000000000 R09: 0000000000000000 [ 1599.429281][ C1] R10: ffffffff815d596e R11: 0000000000000000 R12: 0000000000e42100 [ 1599.437275][ C1] R13: ffffc90000dc0a48 R14: 0000000000e42100 R15: ffff8880720bb0b6 [ 1599.445326][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1599.454353][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1599.461022][ C1] CR2: 0000000000000000 CR3: 000000001ace6000 CR4: 00000000003506e0 [ 1599.469073][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1599.477296][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1599.485349][ C1] Call Trace: [ 1599.488723][ C1] [ 1599.491594][ C1] veth_xdp_rcv_skb+0x691/0x1ba0 [ 1599.496680][ C1] ? veth_xdp_rcv_one+0xee0/0xee0 [ 1599.501785][ C1] ? mark_lock+0xef/0x17b0 [ 1599.506316][ C1] ? lock_chain_count+0x20/0x20 [ 1599.511280][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 1599.516586][ C1] veth_xdp_rcv+0x3ac/0x810 [ 1599.521234][ C1] ? veth_xdp_rcv_skb+0x1ba0/0x1ba0 [ 1599.526560][ C1] ? __lock_acquire+0x162f/0x54a0 [ 1599.531670][ C1] ? mark_lock+0xef/0x17b0 [ 1599.536106][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1599.542253][ C1] veth_poll+0x134/0x850 [ 1599.546530][ C1] ? veth_xdp_rcv+0x810/0x810 [ 1599.551330][ C1] ? process_backlog+0x3be/0x6c0 [ 1599.556387][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1599.561367][ C1] ? mark_held_locks+0x9f/0xe0 [ 1599.566189][ C1] __napi_poll+0xaf/0x440 [ 1599.570648][ C1] net_rx_action+0x801/0xb40 [ 1599.575356][ C1] ? napi_threaded_poll+0x520/0x520 [ 1599.581112][ C1] __do_softirq+0x29b/0x9c2 [ 1599.585720][ C1] do_softirq.part.0+0xde/0x130 [ 1599.590735][ C1] [ 1599.593678][ C1] ? wg_packet_encrypt_worker+0x274/0xbc0 [ 1599.599488][ C1] __local_bh_enable_ip+0x102/0x120 [ 1599.604708][ C1] wg_packet_encrypt_worker+0x274/0xbc0 [ 1599.610332][ C1] ? lock_release+0x720/0x720 [ 1599.615036][ C1] ? wg_packet_tx_worker+0x720/0x720 [ 1599.620438][ C1] process_one_work+0x9bf/0x16b0 [ 1599.625486][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1599.631033][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 1599.636085][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 1599.641203][ C1] worker_thread+0x658/0x11f0 [ 1599.645899][ C1] ? process_one_work+0x16b0/0x16b0 [ 1599.651170][ C1] kthread+0x3e5/0x4d0 [ 1599.655338][ C1] ? set_kthread_struct+0x130/0x130 [ 1599.660622][ C1] ret_from_fork+0x1f/0x30 [ 1599.665188][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 1599.671761][ C1] CPU: 1 PID: 6715 Comm: kworker/1:0 Not tainted 5.15.0-rc3-syzkaller #0 [ 1599.680182][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1599.690228][ C1] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 1599.696724][ C1] Call Trace: [ 1599.699989][ C1] [ 1599.702836][ C1] dump_stack_lvl+0xcd/0x134 [ 1599.707486][ C1] panic+0x2b0/0x6dd [ 1599.711395][ C1] ? __warn_printk+0xf3/0xf3 [ 1599.715985][ C1] ? __warn.cold+0x1a/0x44 [ 1599.720413][ C1] ? bpf_warn_invalid_xdp_action+0x6f/0x80 [ 1599.726240][ C1] __warn.cold+0x35/0x44 [ 1599.730470][ C1] ? wake_up_klogd.part.0+0x8e/0xd0 [ 1599.735673][ C1] ? bpf_warn_invalid_xdp_action+0x6f/0x80 [ 1599.741498][ C1] report_bug+0x1bd/0x210 [ 1599.745912][ C1] handle_bug+0x3c/0x60 [ 1599.750061][ C1] exc_invalid_op+0x14/0x40 [ 1599.754557][ C1] asm_exc_invalid_op+0x12/0x20 [ 1599.759404][ C1] RIP: 0010:bpf_warn_invalid_xdp_action+0x6f/0x80 [ 1599.765827][ C1] Code: 80 b2 8c 8a 41 83 fc 04 48 c7 c6 c0 b2 8c 8a 48 0f 46 ee e8 33 52 4d fa 44 89 e2 48 c7 c7 00 b3 8c 8a 48 89 ee e8 a8 68 ca 01 <0f> 0b 5b 5d 41 5c e9 16 52 4d fa 66 0f 1f 44 00 00 41 57 41 56 49 [ 1599.785437][ C1] RSP: 0018:ffffc90000dc09b0 EFLAGS: 00010286 [ 1599.791499][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1599.799461][ C1] RDX: ffff888077741c80 RSI: ffffffff815dbbc8 RDI: fffff520001b8128 [ 1599.807420][ C1] RBP: ffffffff8a8cb280 R08: 0000000000000000 R09: 0000000000000000 [ 1599.815379][ C1] R10: ffffffff815d596e R11: 0000000000000000 R12: 0000000000e42100 [ 1599.823369][ C1] R13: ffffc90000dc0a48 R14: 0000000000e42100 R15: ffff8880720bb0b6 [ 1599.831359][ C1] ? wake_up_klogd.part.0+0x8e/0xd0 [ 1599.836554][ C1] ? vprintk+0x88/0x90 [ 1599.840681][ C1] veth_xdp_rcv_skb+0x691/0x1ba0 [ 1599.845629][ C1] ? veth_xdp_rcv_one+0xee0/0xee0 [ 1599.850654][ C1] ? mark_lock+0xef/0x17b0 [ 1599.855070][ C1] ? lock_chain_count+0x20/0x20 [ 1599.859921][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 1599.865124][ C1] veth_xdp_rcv+0x3ac/0x810 [ 1599.869645][ C1] ? veth_xdp_rcv_skb+0x1ba0/0x1ba0 [ 1599.874877][ C1] ? __lock_acquire+0x162f/0x54a0 [ 1599.879940][ C1] ? mark_lock+0xef/0x17b0 [ 1599.884364][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1599.890358][ C1] veth_poll+0x134/0x850 [ 1599.894602][ C1] ? veth_xdp_rcv+0x810/0x810 [ 1599.899281][ C1] ? process_backlog+0x3be/0x6c0 [ 1599.904213][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1599.909055][ C1] ? mark_held_locks+0x9f/0xe0 [ 1599.913839][ C1] __napi_poll+0xaf/0x440 [ 1599.918167][ C1] net_rx_action+0x801/0xb40 [ 1599.922759][ C1] ? napi_threaded_poll+0x520/0x520 [ 1599.928087][ C1] __do_softirq+0x29b/0x9c2 [ 1599.932604][ C1] do_softirq.part.0+0xde/0x130 [ 1599.937460][ C1] [ 1599.940384][ C1] ? wg_packet_encrypt_worker+0x274/0xbc0 [ 1599.946098][ C1] __local_bh_enable_ip+0x102/0x120 [ 1599.951291][ C1] wg_packet_encrypt_worker+0x274/0xbc0 [ 1599.956832][ C1] ? lock_release+0x720/0x720 [ 1599.961539][ C1] ? wg_packet_tx_worker+0x720/0x720 [ 1599.966831][ C1] process_one_work+0x9bf/0x16b0 [ 1599.971767][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1599.977128][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 1599.982054][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 1599.987073][ C1] worker_thread+0x658/0x11f0 [ 1599.991747][ C1] ? process_one_work+0x16b0/0x16b0 [ 1599.996934][ C1] kthread+0x3e5/0x4d0 [ 1600.000991][ C1] ? set_kthread_struct+0x130/0x130 [ 1600.006184][ C1] ret_from_fork+0x1f/0x30 [ 1600.010952][ C1] Kernel Offset: disabled [ 1600.015345][ C1] Rebooting in 86400 seconds..