Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.37' (ECDSA) to the list of known hosts. syzkaller login: [ 65.093602][ T6886] IPVS: ftp: loaded support on port[0] = 21 [ 65.197224][ T6886] chnl_net:caif_netlink_parms(): no params data found [ 65.251670][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.259251][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.268029][ T6886] device bridge_slave_0 entered promiscuous mode [ 65.277818][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.285521][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.293705][ T6886] device bridge_slave_1 entered promiscuous mode [ 65.314975][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.326670][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.350569][ T6886] team0: Port device team_slave_0 added [ 65.358450][ T6886] team0: Port device team_slave_1 added [ 65.376848][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.383982][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.410107][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.423021][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.430145][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.456782][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.485469][ T6886] device hsr_slave_0 entered promiscuous mode [ 65.492204][ T6886] device hsr_slave_1 entered promiscuous mode [ 65.577007][ T6886] debugfs: Directory 'ethtool' with parent 'netdevsim0' already present! [ 65.592858][ T6886] debugfs: Directory 'ethtool' with parent 'netdevsim0' already present! [ 65.605316][ T6886] debugfs: Directory 'ethtool' with parent 'netdevsim0' already present! [ 65.622006][ T6886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.633697][ T6886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.644449][ T6886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.654710][ T6886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.678939][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.686135][ T6886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.694196][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.701344][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.753840][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.767480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.779035][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.788550][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.796924][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.812039][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.825036][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.833958][ T2667] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.841080][ T2667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.854390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.863201][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.870345][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.891389][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.901301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.912996][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.927535][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.940219][ T6886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.952811][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.962289][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.981042][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.992005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.007816][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.028893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.051083][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.059518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.068971][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.082070][ T6886] device veth0_vlan entered promiscuous mode [ 66.094364][ T6886] device veth1_vlan entered promiscuous mode [ 66.117968][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.127482][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.137092][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.149116][ T6886] device veth0_macvtap entered promiscuous mode [ 66.163217][ T6886] device veth1_macvtap entered promiscuous mode [ 66.172970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.192398][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.201701][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.212198][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.226250][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.234534][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.244154][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.256046][ T6886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.265268][ T6886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.274117][ T6886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.282973][ T6886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 66.343618][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.352972][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.360523][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.371249][ C1] ------------[ cut here ]------------ [ 66.376830][ C1] Illegal XDP return value 4294967274, expect packet loss! [ 66.384557][ C1] WARNING: CPU: 1 PID: 16 at net/core/filter.c:7522 bpf_warn_invalid_xdp_action+0x6f/0x80 [ 66.394521][ C1] Modules linked in: [ 66.398437][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.9.0-rc6-next-20200924-syzkaller #0 [ 66.407861][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.418012][ C1] RIP: 0010:bpf_warn_invalid_xdp_action+0x6f/0x80 [ 66.424668][ C1] Code: a0 22 68 89 41 83 fc 04 48 c7 c6 e0 22 68 89 48 0f 46 ee e8 e3 fc 10 fb 44 89 e2 48 c7 c7 20 23 68 89 48 89 ee e8 9c 89 b1 01 <0f> 0b 5b 5d 41 5c e9 c6 fc 10 fb 66 0f 1f 44 00 00 41 57 41 56 49 [ 66.444358][ C1] RSP: 0018:ffffc90000d7fa40 EFLAGS: 00010282 [ 66.450532][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 66.458524][ C1] RDX: ffff8880a96e8440 RSI: ffffffff815e0005 RDI: fffff520001aff3a [ 66.466619][ C1] RBP: ffffffff896822a0 R08: 0000000000000001 R09: ffff8880ae5319a7 [ 66.474693][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffea [ 66.482778][ C1] R13: ffff8880a753a000 R14: ffffc90000d7fb70 R15: dffffc0000000000 [ 66.490843][ C1] FS: 0000000000000000(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 66.499850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.506434][ C1] CR2: 000000002062b000 CR3: 000000000a28e000 CR4: 00000000001506e0 [ 66.514462][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.522532][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.530565][ C1] Call Trace: [ 66.533859][ C1] veth_poll+0x1307/0x3120 [ 66.538274][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 66.544335][ C1] ? veth_xmit+0x880/0x880 [ 66.548773][ C1] ? lock_is_held_type+0xbb/0xf0 [ 66.555254][ C1] ? lock_downgrade+0x830/0x830 [ 66.560201][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 66.565226][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 66.570225][ C1] ? lockdep_hardirqs_on+0x53/0x100 [ 66.575468][ C1] ? process_backlog+0x65b/0x8e0 [ 66.580466][ C1] ? lock_is_held_type+0xbb/0xf0 [ 66.585431][ C1] net_rx_action+0x587/0x1320 [ 66.590193][ C1] ? napi_complete_done+0x940/0x940 [ 66.595405][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 66.600309][ C1] ? lock_is_held_type+0xbb/0xf0 [ 66.605260][ C1] __do_softirq+0x203/0xab6 [ 66.609832][ C1] ? __local_bh_disable_ip+0x190/0x190 [ 66.615299][ C1] run_ksoftirqd+0xcf/0x170 [ 66.619859][ C1] smpboot_thread_fn+0x655/0x9e0 [ 66.624820][ C1] ? __smpboot_create_thread.part.0+0x360/0x360 [ 66.631121][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 66.636155][ C1] ? __smpboot_create_thread.part.0+0x360/0x360 [ 66.642456][ C1] kthread+0x3af/0x4a0 [ 66.646547][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 66.651727][ C1] ret_from_fork+0x1f/0x30 [ 66.656149][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 66.662722][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.9.0-rc6-next-20200924-syzkaller #0 [ 66.672063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.682096][ C1] Call Trace: [ 66.685369][ C1] dump_stack+0x198/0x1fb [ 66.689684][ C1] panic+0x382/0x7fb [ 66.693559][ C1] ? __warn_printk+0xf3/0xf3 [ 66.698130][ C1] ? __warn.cold+0x1d/0xbb [ 66.702525][ C1] ? __warn.cold+0x14/0xbb [ 66.706923][ C1] ? bpf_warn_invalid_xdp_action+0x6f/0x80 [ 66.712706][ C1] __warn.cold+0x38/0xbb [ 66.717897][ C1] ? bpf_warn_invalid_xdp_action+0x6f/0x80 [ 66.723694][ C1] report_bug+0x1bd/0x210 [ 66.728014][ C1] handle_bug+0x38/0x90 [ 66.732149][ C1] ? __warn_printk+0xc6/0xf3 [ 66.736737][ C1] exc_invalid_op+0x14/0x40 [ 66.741218][ C1] asm_exc_invalid_op+0x12/0x20 [ 66.746046][ C1] RIP: 0010:bpf_warn_invalid_xdp_action+0x6f/0x80 [ 66.752433][ C1] Code: a0 22 68 89 41 83 fc 04 48 c7 c6 e0 22 68 89 48 0f 46 ee e8 e3 fc 10 fb 44 89 e2 48 c7 c7 20 23 68 89 48 89 ee e8 9c 89 b1 01 <0f> 0b 5b 5d 41 5c e9 c6 fc 10 fb 66 0f 1f 44 00 00 41 57 41 56 49 [ 66.772027][ C1] RSP: 0018:ffffc90000d7fa40 EFLAGS: 00010282 [ 66.778072][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 66.786030][ C1] RDX: ffff8880a96e8440 RSI: ffffffff815e0005 RDI: fffff520001aff3a [ 66.794412][ C1] RBP: ffffffff896822a0 R08: 0000000000000001 R09: ffff8880ae5319a7 [ 66.802360][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffea [ 66.810306][ C1] R13: ffff8880a753a000 R14: ffffc90000d7fb70 R15: dffffc0000000000 [ 66.818963][ C1] ? vprintk_func+0x95/0x1e0 [ 66.823547][ C1] veth_poll+0x1307/0x3120 [ 66.827959][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 66.833927][ C1] ? veth_xmit+0x880/0x880 [ 66.838343][ C1] ? lock_is_held_type+0xbb/0xf0 [ 66.843271][ C1] ? lock_downgrade+0x830/0x830 [ 66.848100][ C1] ? do_raw_spin_lock+0x120/0x2b0 [ 66.853105][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 66.858024][ C1] ? lockdep_hardirqs_on+0x53/0x100 [ 66.863218][ C1] ? process_backlog+0x65b/0x8e0 [ 66.868143][ C1] ? lock_is_held_type+0xbb/0xf0 [ 66.873060][ C1] net_rx_action+0x587/0x1320 [ 66.877729][ C1] ? napi_complete_done+0x940/0x940 [ 66.882908][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 66.887751][ C1] ? lock_is_held_type+0xbb/0xf0 [ 66.892686][ C1] __do_softirq+0x203/0xab6 [ 66.897188][ C1] ? __local_bh_disable_ip+0x190/0x190 [ 66.902641][ C1] run_ksoftirqd+0xcf/0x170 [ 66.907137][ C1] smpboot_thread_fn+0x655/0x9e0 [ 66.912070][ C1] ? __smpboot_create_thread.part.0+0x360/0x360 [ 66.918302][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 66.923307][ C1] ? __smpboot_create_thread.part.0+0x360/0x360 [ 66.929528][ C1] kthread+0x3af/0x4a0 [ 66.933578][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 66.938672][ C1] ret_from_fork+0x1f/0x30 [ 66.944215][ C1] Kernel Offset: disabled [ 66.948605][ C1] Rebooting in 86400 seconds..