DUID 00:04:44:5a:cc:c9:49:7a:03:7b:0e:36:9f:1a:c7:8d:92:7d forked to background, child pid 3175 [ 28.426513][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.440155][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts. 2022/03/15 20:19:31 fuzzer started 2022/03/15 20:19:32 connecting to host at 10.128.0.169:45967 2022/03/15 20:19:32 checking machine... 2022/03/15 20:19:32 checking revisions... 2022/03/15 20:19:32 testing simple program... syzkaller login: [ 50.149902][ T3603] cgroup: Unknown subsys name 'net' [ 50.316212][ T3603] cgroup: Unknown subsys name 'rlimit' [ 51.568937][ T3608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.578088][ T3608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.586202][ T3608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.594616][ T3608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.603452][ T3608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.611269][ T3608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.702033][ T3605] chnl_net:caif_netlink_parms(): no params data found [ 51.746713][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.754728][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.763808][ T3605] device bridge_slave_0 entered promiscuous mode [ 51.773349][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.781264][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.789112][ T3605] device bridge_slave_1 entered promiscuous mode [ 51.810117][ T3605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.822881][ T3605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.847154][ T3605] team0: Port device team_slave_0 added [ 51.854916][ T3605] team0: Port device team_slave_1 added [ 51.872426][ T3605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.879640][ T3605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.906659][ T3605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.920360][ T3605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.928138][ T3605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.956403][ T3605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.984471][ T3605] device hsr_slave_0 entered promiscuous mode [ 51.991997][ T3605] device hsr_slave_1 entered promiscuous mode [ 52.073907][ T3605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.084654][ T3605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.095104][ T3605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.103982][ T3605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.124754][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.132226][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.140531][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.147789][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.193771][ T3605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.206683][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.217773][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.226604][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.235358][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.251302][ T3605] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.262909][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.272206][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.279805][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.292084][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.300872][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.308384][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.332531][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.341573][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.350790][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.362988][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.376138][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.387323][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.404801][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.413282][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.425531][ T3605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.531579][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.551448][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.561612][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.570324][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.581665][ T3605] device veth0_vlan entered promiscuous mode [ 52.594573][ T3605] device veth1_vlan entered promiscuous mode [ 52.614134][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.622345][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.631089][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.642655][ T3605] device veth0_macvtap entered promiscuous mode [ 52.652934][ T3605] device veth1_macvtap entered promiscuous mode [ 52.669018][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.679141][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.689531][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.702933][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.711497][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.721081][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.732834][ T3605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.742100][ T3605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.752200][ T3605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.764189][ T3605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.795173][ T3615] ------------[ cut here ]------------ [ 52.801096][ T3615] WARNING: CPU: 0 PID: 3615 at net/core/dev.c:4268 __napi_schedule+0xe2/0x440 [ 52.810310][ T3615] Modules linked in: [ 52.814453][ T3615] CPU: 0 PID: 3615 Comm: kworker/0:3 Not tainted 5.17.0-rc7-syzkaller-02471-g72f56fdb97b2 #0 [ 52.824697][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.835371][ T3615] Workqueue: wg-crypt-wg0 wg_packet_decrypt_worker [ 52.841984][ T3615] RIP: 0010:__napi_schedule+0xe2/0x440 [ 52.847443][ T3615] Code: 74 4a e8 51 1f 47 fa 31 ff 65 44 8b 25 67 ce d0 78 41 81 e4 00 ff 0f 00 44 89 e6 e8 b8 22 47 fa 45 85 e4 75 07 e8 2e 1f 47 fa <0f> 0b e8 27 1f 47 fa 65 44 8b 25 7f d8 d0 78 31 ff 44 89 e6 e8 95 [ 52.867610][ T3615] RSP: 0018:ffffc90003d1fc88 EFLAGS: 00010093 [ 52.873840][ T3615] RAX: 0000000000000000 RBX: ffff88801e708748 RCX: 0000000000000000 [ 52.882336][ T3615] RDX: ffff888022b6ba00 RSI: ffffffff8731a172 RDI: 0000000000000003 [ 52.890322][ T3615] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000001 [ 52.898773][ T3615] R10: ffffffff8731a168 R11: 0000000000000000 R12: 0000000000000000 [ 52.907282][ T3615] R13: ffff8880b9c00000 R14: 000000000003adc0 R15: ffff888023900ec0 [ 52.915955][ T3615] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 52.925234][ T3615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.932012][ T3615] CR2: 00007fcb2ebda300 CR3: 000000006f227000 CR4: 00000000003506f0 [ 52.941027][ T3615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.949430][ T3615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.958037][ T3615] Call Trace: [ 52.961400][ T3615] [ 52.964336][ T3615] wg_packet_decrypt_worker+0x408/0x5d0 [ 52.969899][ T3615] process_one_work+0x9ac/0x1650 [ 52.974925][ T3615] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 52.980661][ T3615] ? rwlock_bug.part.0+0x90/0x90 [ 52.986057][ T3615] ? _raw_spin_lock_irq+0x41/0x50 [ 52.991090][ T3615] worker_thread+0x657/0x1110 [ 52.996027][ T3615] ? process_one_work+0x1650/0x1650 [ 53.001309][ T3615] kthread+0x2e9/0x3a0 [ 53.005455][ T3615] ? kthread_complete_and_exit+0x40/0x40 [ 53.011352][ T3615] ret_from_fork+0x1f/0x30 [ 53.015948][ T3615] [ 53.019310][ T3615] Kernel panic - not syncing: panic_on_warn set ... [ 53.026517][ T3615] CPU: 0 PID: 3615 Comm: kworker/0:3 Not tainted 5.17.0-rc7-syzkaller-02471-g72f56fdb97b2 #0 [ 53.037489][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.047654][ T3615] Workqueue: wg-crypt-wg0 wg_packet_decrypt_worker [ 53.054668][ T3615] Call Trace: [ 53.057947][ T3615] [ 53.060864][ T3615] dump_stack_lvl+0xcd/0x134 [ 53.065445][ T3615] panic+0x2b0/0x6dd [ 53.069465][ T3615] ? __warn_printk+0xf3/0xf3 [ 53.074262][ T3615] ? __warn.cold+0x1d1/0x2cf [ 53.078951][ T3615] ? __napi_schedule+0xe2/0x440 [ 53.083904][ T3615] __warn.cold+0x1ec/0x2cf [ 53.088507][ T3615] ? __napi_schedule+0xe2/0x440 [ 53.094233][ T3615] report_bug+0x1bd/0x210 [ 53.098828][ T3615] handle_bug+0x3c/0x60 [ 53.102981][ T3615] exc_invalid_op+0x14/0x40 [ 53.107495][ T3615] asm_exc_invalid_op+0x12/0x20 [ 53.112518][ T3615] RIP: 0010:__napi_schedule+0xe2/0x440 [ 53.118760][ T3615] Code: 74 4a e8 51 1f 47 fa 31 ff 65 44 8b 25 67 ce d0 78 41 81 e4 00 ff 0f 00 44 89 e6 e8 b8 22 47 fa 45 85 e4 75 07 e8 2e 1f 47 fa <0f> 0b e8 27 1f 47 fa 65 44 8b 25 7f d8 d0 78 31 ff 44 89 e6 e8 95 [ 53.138732][ T3615] RSP: 0018:ffffc90003d1fc88 EFLAGS: 00010093 [ 53.144913][ T3615] RAX: 0000000000000000 RBX: ffff88801e708748 RCX: 0000000000000000 [ 53.153529][ T3615] RDX: ffff888022b6ba00 RSI: ffffffff8731a172 RDI: 0000000000000003 [ 53.162219][ T3615] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000001 [ 53.171132][ T3615] R10: ffffffff8731a168 R11: 0000000000000000 R12: 0000000000000000 [ 53.179446][ T3615] R13: ffff8880b9c00000 R14: 000000000003adc0 R15: ffff888023900ec0 [ 53.187789][ T3615] ? __napi_schedule+0xd8/0x440 [ 53.192695][ T3615] ? __napi_schedule+0xe2/0x440 [ 53.197937][ T3615] ? __napi_schedule+0xe2/0x440 [ 53.203292][ T3615] wg_packet_decrypt_worker+0x408/0x5d0 [ 53.209303][ T3615] process_one_work+0x9ac/0x1650 [ 53.215379][ T3615] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 53.221412][ T3615] ? rwlock_bug.part.0+0x90/0x90 [ 53.226748][ T3615] ? _raw_spin_lock_irq+0x41/0x50 [ 53.232234][ T3615] worker_thread+0x657/0x1110 [ 53.237576][ T3615] ? process_one_work+0x1650/0x1650 [ 53.243202][ T3615] kthread+0x2e9/0x3a0 [ 53.247365][ T3615] ? kthread_complete_and_exit+0x40/0x40 [ 53.254580][ T3615] ret_from_fork+0x1f/0x30 [ 53.259765][ T3615] [ 53.263786][ T3615] Kernel Offset: disabled [ 53.268647][ T3615] Rebooting in 86400 seconds..