Warning: Permanently added '10.128.0.95' (ECDSA) to the list of known hosts. 2022/03/17 09:12:05 fuzzer started 2022/03/17 09:12:05 connecting to host at 10.128.0.169:38713 2022/03/17 09:12:05 checking machine... 2022/03/17 09:12:05 checking revisions... 2022/03/17 09:12:05 testing simple program... syzkaller login: [ 46.697575][ T3601] cgroup: Unknown subsys name 'net' [ 46.803012][ T3601] cgroup: Unknown subsys name 'rlimit' [ 48.063769][ T3607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.072158][ T3607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.080015][ T3607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.088365][ T3607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.096036][ T3607] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.103707][ T3607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.191819][ T3604] chnl_net:caif_netlink_parms(): no params data found [ 48.235154][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.242916][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.251215][ T3604] device bridge_slave_0 entered promiscuous mode [ 48.261046][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.268353][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.276001][ T3604] device bridge_slave_1 entered promiscuous mode [ 48.297326][ T3604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.309023][ T3604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.331218][ T3604] team0: Port device team_slave_0 added [ 48.339077][ T3604] team0: Port device team_slave_1 added [ 48.356208][ T3604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.363331][ T3604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.390790][ T3604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.403783][ T3604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.410967][ T3604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.436988][ T3604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.463136][ T3604] device hsr_slave_0 entered promiscuous mode [ 48.470397][ T3604] device hsr_slave_1 entered promiscuous mode [ 48.548356][ T3604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.559620][ T3604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.569211][ T3604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.578449][ T3604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.599156][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.606739][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.614530][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.621785][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.666407][ T3604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.679393][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.690839][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.700781][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.709174][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.723096][ T3604] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.734351][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.743151][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.750255][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.763091][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.771598][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.778700][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.798428][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.807688][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.819381][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.828327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.841437][ T3604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.853648][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.861945][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.881210][ T3604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.889211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.897976][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.008522][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.017960][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.026382][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.034500][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.044557][ T3604] device veth0_vlan entered promiscuous mode [ 49.055352][ T3604] device veth1_vlan entered promiscuous mode [ 49.074545][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.083053][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.091422][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.102537][ T3604] device veth0_macvtap entered promiscuous mode [ 49.112874][ T3604] device veth1_macvtap entered promiscuous mode [ 49.130657][ T3604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.139358][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.149258][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.161109][ T3604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.170082][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.180693][ T3604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.191437][ T3604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.201519][ T3604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.211352][ T3604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.242094][ T3614] ------------[ cut here ]------------ [ 49.247639][ T3614] WARNING: CPU: 0 PID: 3614 at net/core/dev.c:4268 __napi_schedule+0xe2/0x440 [ 49.256533][ T3614] Modules linked in: [ 49.260420][ T3614] CPU: 0 PID: 3614 Comm: kworker/0:4 Not tainted 5.17.0-rc8-next-20220317-syzkaller #0 [ 49.270393][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.280712][ T3614] Workqueue: wg-crypt-wg0 wg_packet_decrypt_worker [ 49.287212][ T3614] RIP: 0010:__napi_schedule+0xe2/0x440 [ 49.292686][ T3614] Code: 74 4a e8 b1 5e 3c fa 31 ff 65 44 8b 25 77 25 c6 78 41 81 e4 00 ff 0f 00 44 89 e6 e8 b8 60 3c fa 45 85 e4 75 07 e8 8e 5e 3c fa <0f> 0b e8 87 5e 3c fa 65 44 8b 25 97 2f c6 78 31 ff 44 89 e6 e8 95 [ 49.312380][ T3614] RSP: 0018:ffffc900049ffc78 EFLAGS: 00010093 [ 49.318431][ T3614] RAX: 0000000000000000 RBX: ffff88801f340748 RCX: 0000000000000000 [ 49.326392][ T3614] RDX: ffff88807ffaba80 RSI: ffffffff873c4a62 RDI: 0000000000000003 [ 49.334356][ T3614] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000001 [ 49.342314][ T3614] R10: ffffffff873c4a58 R11: 0000000000000000 R12: 0000000000000000 [ 49.350284][ T3614] R13: ffff8880b9c00000 R14: 000000000003b100 R15: ffff88801e7e0ec0 [ 49.358248][ T3614] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 49.367170][ T3614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.373743][ T3614] CR2: 00007fa0828bf300 CR3: 000000006e91a000 CR4: 00000000003506f0 [ 49.381705][ T3614] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.389667][ T3614] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.397627][ T3614] Call Trace: [ 49.400892][ T3614] [ 49.403816][ T3614] wg_packet_decrypt_worker+0x408/0x5d0 [ 49.409368][ T3614] process_one_work+0x996/0x1610 [ 49.414304][ T3614] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 49.419674][ T3614] ? rwlock_bug.part.0+0x90/0x90 [ 49.424615][ T3614] ? _raw_spin_lock_irq+0x41/0x50 [ 49.429676][ T3614] worker_thread+0x665/0x1080 [ 49.434372][ T3614] ? __kthread_parkme+0x15f/0x220 [ 49.439430][ T3614] ? process_one_work+0x1610/0x1610 [ 49.444662][ T3614] kthread+0x2e9/0x3a0 [ 49.449181][ T3614] ? kthread_complete_and_exit+0x40/0x40 [ 49.454827][ T3614] ret_from_fork+0x1f/0x30 [ 49.459274][ T3614] [ 49.462286][ T3614] Kernel panic - not syncing: panic_on_warn set ... [ 49.468946][ T3614] CPU: 0 PID: 3614 Comm: kworker/0:4 Not tainted 5.17.0-rc8-next-20220317-syzkaller #0 [ 49.478741][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.488885][ T3614] Workqueue: wg-crypt-wg0 wg_packet_decrypt_worker [ 49.495564][ T3614] Call Trace: [ 49.498849][ T3614] [ 49.501861][ T3614] dump_stack_lvl+0xcd/0x134 [ 49.506481][ T3614] panic+0x2d7/0x636 [ 49.510502][ T3614] ? panic_print_sys_info.part.0+0x10b/0x10b [ 49.516492][ T3614] ? __warn.cold+0x1d1/0x2c5 [ 49.521520][ T3614] ? __napi_schedule+0xe2/0x440 [ 49.526493][ T3614] __warn.cold+0x1e2/0x2c5 [ 49.531085][ T3614] ? __napi_schedule+0xe2/0x440 [ 49.535943][ T3614] report_bug+0x1bd/0x210 [ 49.540276][ T3614] handle_bug+0x3c/0x60 [ 49.544515][ T3614] exc_invalid_op+0x14/0x40 [ 49.549037][ T3614] asm_exc_invalid_op+0x12/0x20 [ 49.553895][ T3614] RIP: 0010:__napi_schedule+0xe2/0x440 [ 49.559379][ T3614] Code: 74 4a e8 b1 5e 3c fa 31 ff 65 44 8b 25 77 25 c6 78 41 81 e4 00 ff 0f 00 44 89 e6 e8 b8 60 3c fa 45 85 e4 75 07 e8 8e 5e 3c fa <0f> 0b e8 87 5e 3c fa 65 44 8b 25 97 2f c6 78 31 ff 44 89 e6 e8 95 [ 49.579428][ T3614] RSP: 0018:ffffc900049ffc78 EFLAGS: 00010093 [ 49.585585][ T3614] RAX: 0000000000000000 RBX: ffff88801f340748 RCX: 0000000000000000 [ 49.593549][ T3614] RDX: ffff88807ffaba80 RSI: ffffffff873c4a62 RDI: 0000000000000003 [ 49.602044][ T3614] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000001 [ 49.610097][ T3614] R10: ffffffff873c4a58 R11: 0000000000000000 R12: 0000000000000000 [ 49.618505][ T3614] R13: ffff8880b9c00000 R14: 000000000003b100 R15: ffff88801e7e0ec0 [ 49.626740][ T3614] ? __napi_schedule+0xd8/0x440 [ 49.631600][ T3614] ? __napi_schedule+0xe2/0x440 [ 49.636633][ T3614] ? __napi_schedule+0xe2/0x440 [ 49.642834][ T3614] wg_packet_decrypt_worker+0x408/0x5d0 [ 49.648391][ T3614] process_one_work+0x996/0x1610 [ 49.653339][ T3614] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 49.658722][ T3614] ? rwlock_bug.part.0+0x90/0x90 [ 49.663657][ T3614] ? _raw_spin_lock_irq+0x41/0x50 [ 49.668713][ T3614] worker_thread+0x665/0x1080 [ 49.673391][ T3614] ? __kthread_parkme+0x15f/0x220 [ 49.678425][ T3614] ? process_one_work+0x1610/0x1610 [ 49.683617][ T3614] kthread+0x2e9/0x3a0 [ 49.687687][ T3614] ? kthread_complete_and_exit+0x40/0x40 [ 49.693331][ T3614] ret_from_fork+0x1f/0x30 [ 49.697761][ T3614] [ 49.701063][ T3614] Kernel Offset: disabled [ 49.705450][ T3614] Rebooting in 86400 seconds..