forked to background, child pid 3177 [ 28.538488][ T3178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.553605][ T3178] eql: remember to turn off Van-Jacobson compression on your slave devices [ 28.726415][ T3262] ssh-keygen (3262) used greatest stack depth: 22600 bytes left Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.65' (ECDSA) to the list of known hosts. 2022/03/17 22:45:57 fuzzer started 2022/03/17 22:45:58 connecting to host at 10.128.0.169:35251 2022/03/17 22:45:58 checking machine... 2022/03/17 22:45:58 checking revisions... 2022/03/17 22:45:58 testing simple program... syzkaller login: [ 44.706612][ T3598] cgroup: Unknown subsys name 'net' [ 44.828232][ T3598] cgroup: Unknown subsys name 'rlimit' [ 46.091987][ T3601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.100378][ T3601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.108694][ T3601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.117685][ T3601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.126269][ T3601] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 46.134030][ T3601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.229432][ T3600] chnl_net:caif_netlink_parms(): no params data found [ 46.276680][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.284664][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.293509][ T3600] device bridge_slave_0 entered promiscuous mode [ 46.303148][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.310689][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.319142][ T3600] device bridge_slave_1 entered promiscuous mode [ 46.341780][ T3600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.352954][ T3600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.376966][ T3600] team0: Port device team_slave_0 added [ 46.384446][ T3600] team0: Port device team_slave_1 added [ 46.403177][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.410685][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.438142][ T3600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.452216][ T3600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.459769][ T3600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.488055][ T3600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.516258][ T3600] device hsr_slave_0 entered promiscuous mode [ 46.523777][ T3600] device hsr_slave_1 entered promiscuous mode [ 46.610020][ T3600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.621388][ T3600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.630385][ T3600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.640473][ T3600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.663635][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.671367][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.679216][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.686548][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.737453][ T3600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.752192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.763895][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.775106][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.783810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 46.796811][ T3600] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.809069][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.819183][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.826651][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.845506][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.854334][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.861698][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.878341][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.887978][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.907466][ T3600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.919289][ T3600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.932595][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.942360][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.952588][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.961516][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.980139][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.988188][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.999564][ T3600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.113507][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.123026][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.132865][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.140626][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.152137][ T3600] device veth0_vlan entered promiscuous mode [ 47.164104][ T3600] device veth1_vlan entered promiscuous mode [ 47.183602][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.192795][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.201930][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.214039][ T3600] device veth0_macvtap entered promiscuous mode [ 47.225109][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.235165][ T3600] device veth1_macvtap entered promiscuous mode [ 47.252080][ T3600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.260025][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.269084][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.288733][ T3600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.297521][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.307249][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.318861][ T3600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.328303][ T3600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.337631][ T3600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.347134][ T3600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.376842][ T3611] ------------[ cut here ]------------ [ 47.382525][ T3611] WARNING: CPU: 0 PID: 3611 at net/core/dev.c:4268 __napi_schedule+0xe2/0x440 [ 47.391413][ T3611] Modules linked in: [ 47.395390][ T3611] CPU: 0 PID: 3611 Comm: kworker/0:5 Not tainted 5.17.0-rc8-syzkaller-02397-ge243f39685af #0 [ 47.405666][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.415904][ T3611] Workqueue: wg-crypt-wg0 wg_packet_decrypt_worker [ 47.423628][ T3611] RIP: 0010:__napi_schedule+0xe2/0x440 [ 47.429097][ T3611] Code: 74 4a e8 31 16 47 fa 31 ff 65 44 8b 25 47 c5 d0 78 41 81 e4 00 ff 0f 00 44 89 e6 e8 98 19 47 fa 45 85 e4 75 07 e8 0e 16 47 fa <0f> 0b e8 07 16 47 fa 65 44 8b 25 5f cf d0 78 31 ff 44 89 e6 e8 75 [ 47.449117][ T3611] RSP: 0018:ffffc9000475fc88 EFLAGS: 00010093 [ 47.455393][ T3611] RAX: 0000000000000000 RBX: ffff888077d58748 RCX: 0000000000000000 [ 47.463373][ T3611] RDX: ffff888017741d00 RSI: ffffffff8731aa92 RDI: 0000000000000003 [ 47.471771][ T3611] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000001 [ 47.479752][ T3611] R10: ffffffff8731aa88 R11: 0000000000000000 R12: 0000000000000000 [ 47.487962][ T3611] R13: ffff8880b9c00000 R14: 000000000003adc0 R15: ffff88801bad4ec0 [ 47.496263][ T3611] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 47.505194][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.511863][ T3611] CR2: 00007f22d47dc300 CR3: 000000006fa69000 CR4: 00000000003506f0 [ 47.519829][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.527798][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.535829][ T3611] Call Trace: [ 47.539135][ T3611] [ 47.542291][ T3611] wg_packet_decrypt_worker+0x408/0x5d0 [ 47.547955][ T3611] process_one_work+0x9ac/0x1650 [ 47.552895][ T3611] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 47.558268][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 47.563399][ T3611] ? _raw_spin_lock_irq+0x41/0x50 [ 47.568524][ T3611] worker_thread+0x657/0x1110 [ 47.573391][ T3611] ? process_one_work+0x1650/0x1650 [ 47.578617][ T3611] kthread+0x2e9/0x3a0 [ 47.582679][ T3611] ? kthread_complete_and_exit+0x40/0x40 [ 47.588431][ T3611] ret_from_fork+0x1f/0x30 [ 47.593154][ T3611] [ 47.596165][ T3611] Kernel panic - not syncing: panic_on_warn set ... [ 47.602870][ T3611] CPU: 0 PID: 3611 Comm: kworker/0:5 Not tainted 5.17.0-rc8-syzkaller-02397-ge243f39685af #0 [ 47.613225][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.623482][ T3611] Workqueue: wg-crypt-wg0 wg_packet_decrypt_worker [ 47.630217][ T3611] Call Trace: [ 47.633601][ T3611] [ 47.636617][ T3611] dump_stack_lvl+0xcd/0x134 [ 47.641296][ T3611] panic+0x2b0/0x6dd [ 47.645302][ T3611] ? __warn_printk+0xf3/0xf3 [ 47.649888][ T3611] ? __warn.cold+0x1d1/0x2cf [ 47.654624][ T3611] ? __napi_schedule+0xe2/0x440 [ 47.659677][ T3611] __warn.cold+0x1ec/0x2cf [ 47.664300][ T3611] ? __napi_schedule+0xe2/0x440 [ 47.669315][ T3611] report_bug+0x1bd/0x210 [ 47.673655][ T3611] handle_bug+0x3c/0x60 [ 47.678064][ T3611] exc_invalid_op+0x14/0x40 [ 47.682562][ T3611] asm_exc_invalid_op+0x12/0x20 [ 47.687550][ T3611] RIP: 0010:__napi_schedule+0xe2/0x440 [ 47.693196][ T3611] Code: 74 4a e8 31 16 47 fa 31 ff 65 44 8b 25 47 c5 d0 78 41 81 e4 00 ff 0f 00 44 89 e6 e8 98 19 47 fa 45 85 e4 75 07 e8 0e 16 47 fa <0f> 0b e8 07 16 47 fa 65 44 8b 25 5f cf d0 78 31 ff 44 89 e6 e8 75 [ 47.712981][ T3611] RSP: 0018:ffffc9000475fc88 EFLAGS: 00010093 [ 47.719132][ T3611] RAX: 0000000000000000 RBX: ffff888077d58748 RCX: 0000000000000000 [ 47.727478][ T3611] RDX: ffff888017741d00 RSI: ffffffff8731aa92 RDI: 0000000000000003 [ 47.735470][ T3611] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000001 [ 47.743720][ T3611] R10: ffffffff8731aa88 R11: 0000000000000000 R12: 0000000000000000 [ 47.751691][ T3611] R13: ffff8880b9c00000 R14: 000000000003adc0 R15: ffff88801bad4ec0 [ 47.759750][ T3611] ? __napi_schedule+0xd8/0x440 [ 47.764732][ T3611] ? __napi_schedule+0xe2/0x440 [ 47.769870][ T3611] ? __napi_schedule+0xe2/0x440 [ 47.774815][ T3611] wg_packet_decrypt_worker+0x408/0x5d0 [ 47.780736][ T3611] process_one_work+0x9ac/0x1650 [ 47.785830][ T3611] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 47.791402][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 47.796669][ T3611] ? _raw_spin_lock_irq+0x41/0x50 [ 47.801720][ T3611] worker_thread+0x657/0x1110 [ 47.806423][ T3611] ? process_one_work+0x1650/0x1650 [ 47.811615][ T3611] kthread+0x2e9/0x3a0 [ 47.815682][ T3611] ? kthread_complete_and_exit+0x40/0x40 [ 47.821493][ T3611] ret_from_fork+0x1f/0x30 [ 47.825924][ T3611] [ 47.829230][ T3611] Kernel Offset: disabled [ 47.833646][ T3611] Rebooting in 86400 seconds..