syzkaller login: [ 106.756889][ T2050] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 106.799561][ T2050] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 106.830362][ T2050] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 106.858789][ T2050] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:53301' (ECDSA) to the list of known hosts. 1970/01/01 00:02:39 fuzzer started 1970/01/01 00:02:45 connecting to host at localhost:33877 1970/01/01 00:02:45 checking machine... 1970/01/01 00:02:45 checking revisions... 1970/01/01 00:02:48 testing simple program... executing program [ 169.406229][ T2218] cgroup: Unknown subsys name 'net' [ 169.957750][ T2218] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 177.157748][ T2221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.192711][ T2221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 180.032337][ T2221] device hsr_slave_0 entered promiscuous mode [ 180.080364][ T2221] device hsr_slave_1 entered promiscuous mode executing program [ 182.127005][ T2221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.200222][ T2221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.272369][ T2221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.350837][ T2221] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 184.535530][ T2221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.641587][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.666360][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.838568][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.851059][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.908800][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.922585][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.988183][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.061179][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.201736][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.210310][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.258207][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.271479][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.356565][ T2221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 187.530688][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.532619][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 190.200786][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.227735][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.612435][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.636709][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.649746][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.659060][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.729176][ T2221] device veth0_vlan entered promiscuous mode [ 191.869326][ T2221] device veth1_vlan entered promiscuous mode [ 192.181991][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.199578][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.261293][ T2221] device veth0_macvtap entered promiscuous mode [ 192.314726][ T2221] device veth1_macvtap entered promiscuous mode [ 192.518914][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.535430][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.541552][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.549378][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.640654][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.658375][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.742705][ T2221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.750043][ T2221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.750712][ T2221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.751222][ T2221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.087361][ C1] ------------[ cut here ]------------ [ 193.088406][ C1] WARNING: CPU: 1 PID: 51 at include/linux/cpumask.h:110 wg_cpumask_next_online+0x1c0/0x2c0 [ 193.088929][ C1] Modules linked in: [ 193.089350][ C1] CPU: 1 PID: 51 Comm: kworker/u4:3 Tainted: G W 6.0.0-syzkaller-10109-gaa512c115a09 #0 [ 193.089814][ C1] Hardware name: linux,dummy-virt (DT) [ 193.090595][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 193.091146][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 193.093181][ C1] pc : wg_cpumask_next_online+0x1c0/0x2c0 [ 193.093713][ C1] lr : wg_packet_receive+0x978/0x1560 [ 193.100842][ C1] sp : ffff800010a77480 [ 193.101256][ C1] x29: ffff800010a77480 x28: 0000000000000001 x27: 1fffe00002b0e219 [ 193.101964][ C1] x26: 0000000000000000 x25: ffff80000de2c000 x24: 0000000000000000 [ 193.102578][ C1] x23: 0000000000000003 x22: ffff80000de2cb68 x21: 0000000000000001 [ 193.103344][ C1] x20: ffff0000158710c8 x19: ffff80000de2cd50 x18: 00000000133bae39 [ 193.104242][ C1] x17: ffff80005cc1c000 x16: ffff800010a78000 x15: ffff00000e6b7668 [ 193.104949][ C1] x14: 1ffff0000214ee68 x13: 0000000000000000 x12: ffff600002b0e291 [ 193.105555][ C1] x11: 1fffe00002b0e290 x10: ffff600002b0e290 x9 : dfff800000000000 [ 193.106216][ C1] x8 : ffff000015871483 x7 : 00009ffffd4f1d70 x6 : 0000000000000001 [ 193.106862][ C1] x5 : ffff000015871480 x4 : ffff700001bc59aa x3 : dfff800000000000 [ 193.108638][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 193.110788][ C1] Call trace: [ 193.111501][ C1] wg_cpumask_next_online+0x1c0/0x2c0 [ 193.111875][ C1] wg_packet_receive+0x978/0x1560 [ 193.112188][ C1] wg_receive+0x58/0xb0 [ 193.112461][ C1] udpv6_queue_rcv_one_skb+0x8f4/0x17c0 [ 193.112751][ C1] udpv6_queue_rcv_skb+0x134/0x7e0 [ 193.113188][ C1] udp6_unicast_rcv_skb+0xe8/0x270 [ 193.113558][ C1] __udp6_lib_rcv+0x8a4/0x2330 [ 193.113829][ C1] udpv6_rcv+0x1c/0x2c [ 193.114160][ C1] ip6_protocol_deliver_rcu+0x154/0x14f0 [ 193.114479][ C1] ip6_input_finish+0x108/0x220 [ 193.114857][ C1] ip6_input+0xbc/0x2b0 [ 193.115294][ C1] ipv6_rcv+0x39c/0x47c [ 193.115672][ C1] __netif_receive_skb_one_core+0xf4/0x170 [ 193.116045][ C1] __netif_receive_skb+0x24/0x184 [ 193.116382][ C1] process_backlog+0x24c/0x6b0 [ 193.116718][ C1] __napi_poll+0x94/0x3a4 [ 193.117063][ C1] net_rx_action+0x78c/0xb60 [ 193.117397][ C1] _stext+0x28c/0x107c [ 193.117757][ C1] ____do_softirq+0x10/0x20 [ 193.118117][ C1] call_on_irq_stack+0x2c/0x54 [ 193.118482][ C1] do_softirq_own_stack+0x1c/0x30 [ 193.118861][ C1] do_softirq.part.0+0xd0/0xf4 [ 193.119216][ C1] __local_bh_enable_ip+0x50c/0x5d0 [ 193.119584][ C1] _raw_read_unlock_bh+0x54/0x64 [ 193.119972][ C1] wg_socket_send_skb_to_peer+0xf0/0x190 [ 193.120327][ C1] wg_socket_send_buffer_to_peer+0x110/0x160 [ 193.120701][ C1] wg_packet_send_handshake_initiation+0x1a8/0x274 [ 193.121096][ C1] wg_packet_handshake_send_worker+0x1c/0x34 [ 193.121486][ C1] process_one_work+0x780/0x184c [ 193.121837][ C1] worker_thread+0x3cc/0xc40 [ 193.122181][ C1] kthread+0x23c/0x2a0 [ 193.122548][ C1] ret_from_fork+0x10/0x20 [ 193.123046][ C1] irq event stamp: 491317 [ 193.123396][ C1] hardirqs last enabled at (491316): [] __local_bh_enable_ip+0x1e4/0x5d0 [ 193.124054][ C1] hardirqs last disabled at (491317): [] el1_dbg+0x24/0x80 [ 193.124524][ C1] softirqs last enabled at (491308): [] wg_socket_send_skb_to_peer+0xf0/0x190 [ 193.124998][ C1] softirqs last disabled at (491309): [] ____do_softirq+0x10/0x20 [ 193.125580][ C1] ---[ end trace 0000000000000000 ]--- executing program [ 193.207435][ C1] ------------[ cut here ]------------ [ 193.208263][ C1] WARNING: CPU: 1 PID: 20 at include/linux/cpumask.h:110 wg_packet_send_staged_packets+0xe38/0x1380 [ 193.208735][ C1] Modules linked in: [ 193.209097][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G W 6.0.0-syzkaller-10109-gaa512c115a09 #0 [ 193.209509][ C1] Hardware name: linux,dummy-virt (DT) [ 193.209856][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 193.210234][ C1] pc : wg_packet_send_staged_packets+0xe38/0x1380 [ 193.210607][ C1] lr : wg_packet_send_staged_packets+0x524/0x1380 [ 193.210898][ C1] sp : ffff800010c07700 [ 193.211123][ C1] x29: ffff800010c07700 x28: ffff000010b86c00 x27: 0000000000000001 [ 193.211590][ C1] x26: 0000000000000001 x25: 0000000000000002 x24: 1fffe000025fe0ce [ 193.212047][ C1] x23: ffff000012ff0668 x22: ffff80000de2cd50 x21: ffff000014aa0960 [ 193.212471][ C1] x20: ffff000012ff0640 x19: ffff000015870c40 x18: ffff00006a9f1b88 [ 193.212942][ C1] x17: 0000000000000000 x16: 0000000000000003 x15: ffff00006a9f1bc4 [ 193.213376][ C1] x14: 1ffff00002180eae x13: 1fffe0000125b146 x12: ffff60000295412e [ 193.213958][ C1] x11: ffff700001bc59aa x10: dfff800000000000 x9 : 0000000000000003 [ 193.214422][ C1] x8 : ffff80000de2c000 x7 : 1fffe00002b0e1b9 x6 : 0000000000000000 [ 193.214959][ C1] x5 : ffff000015870dc8 x4 : ffff80000de2cb68 x3 : ffff800009f2bfa4 [ 193.215383][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 193.215847][ C1] Call trace: [ 193.216075][ C1] wg_packet_send_staged_packets+0xe38/0x1380 [ 193.216489][ C1] wg_packet_rx_poll+0xd94/0x1580 [ 193.216759][ C1] __napi_poll+0x94/0x3a4 [ 193.217045][ C1] net_rx_action+0x78c/0xb60 [ 193.217372][ C1] _stext+0x28c/0x107c [ 193.217724][ C1] run_ksoftirqd+0xa4/0xec [ 193.218064][ C1] smpboot_thread_fn+0x4d4/0x950 [ 193.218417][ C1] kthread+0x23c/0x2a0 [ 193.218788][ C1] ret_from_fork+0x10/0x20 [ 193.219144][ C1] irq event stamp: 17035 [ 193.219443][ C1] hardirqs last enabled at (17034): [] seqcount_lockdep_reader_access.constprop.0+0xc4/0xe0 [ 193.219937][ C1] hardirqs last disabled at (17035): [] el1_dbg+0x24/0x80 [ 193.220343][ C1] softirqs last enabled at (17008): [] _stext+0x9d4/0x107c [ 193.220756][ C1] softirqs last disabled at (17013): [] run_ksoftirqd+0xa4/0xec [ 193.221181][ C1] ---[ end trace 0000000000000000 ]--- 1970/01/01 00:03:14 building call list... [ 195.209812][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.509285][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.748473][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.998523][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program executing program [ 199.334669][ T51] device hsr_slave_0 left promiscuous mode [ 199.406699][ T51] device hsr_slave_1 left promiscuous mode [ 199.620470][ T51] device veth1_macvtap left promiscuous mode [ 199.623920][ T51] device veth0_macvtap left promiscuous mode [ 199.635743][ T51] device veth1_vlan left promiscuous mode [ 199.638201][ T51] device veth0_vlan left promiscuous mode executing program [ 202.944688][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.077649][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.904798][ T51] bond0 (unregistering): Released all slaves executing program executing program executing program executing program executing program [ 219.484595][ T2214] can: request_module (can-proto-0) failed. [ 219.787322][ T2214] can: request_module (can-proto-0) failed. [ 220.018200][ T2214] can: request_module (can-proto-0) failed. executing program VM DIAGNOSIS: 21:50:52 Registers: info registers vcpu 0 PC=ffff800008030468 X00=ffff8000110079e0 X01=0000000000000003 X02=0000000000000003 X03=ffff00000afa9b40 X04=ffff700002200ede X05=00000000f2f2f200 X06=00000000f3f3f3f3 X07=1fffe000015f54bd X08=ffff8000110079f0 X09=dfff800000000000 X10=ffff700002200f3d X11=1fffe000027534c2 X12=ffff6000027534c3 X13=0000000000000000 X14=1ffff00002200f1e X15=ffff00006a9d2bc4 X16=00000000000014e4 X17=00000000000014e0 X18=ffff00006a9d2b88 X19=0000000000000004 X20=ffff00000afa9b40 X21=0000000000000006 X22=ffff00000afa9b40 X23=0000000000000000 X24=ffff00001067a00e X25=0000000000000008 X26=ffff00000ef58b40 X27=ffff80000d0031fc X28=dfff800000000000 X29=ffff8000110079b0 X30=ffff80000c8bf640 SP=ffff800011007990 PSTATE=700000c5 -ZCV EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=000063657363616d:007061747663616d Q02=0000000064252e30:322e30322e323731 Q03=ffff000000000000:ff00000000000000 Q04=ffffffff00000000:0000000000000000 Q05=4010000000000000:4000000000000000 Q06=4010040100100000:0000000000000000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=5510000050004000:5510000050004000 Q17=000000ff00ff00ff:000000ff00ff00ff Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000082920fc X00=00000000000003c0 X01=00000000000003c0 X02=0000000000000003 X03=1fffe000014e8369 X04=00000000f204f1f1 X05=ffff70000214ed9a X06=dfff800000000000 X07=00000000f1f1f1f1 X08=ffff800010a76d03 X09=dfff800000000000 X10=ffff70000214eda0 X11=1ffff0000214eda0 X12=ffff70000214eda1 X13=0000000000000000 X14=1ffff0000214ed76 X15=ffff80000f277200 X16=0000000000000003 X17=0000000000000000 X18=00000000133bae39 X19=0000000000000000 X20=ffff00000a7425f0 X21=ffff80000e00c700 X22=0000000000000028 X23=ffff00000a742550 X24=ffff80000ddd5c48 X25=ffff80000c961d40 X26=00000000ffffffff X27=00000000000003c0 X28=ffff00000a741b40 X29=ffff800010a76be0 X30=ffff80000c8be4e4 SP=ffff800010a76be0 PSTATE=100003c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=30253a3a30386566:000a2e6574656c70 Q02=388e9c6c4fa85ca0:0000000000007832 Q03=0000000000000000:ff00000000000000 Q04=0000000000000000:ffffffffffff0000 Q05=0010000000000000:4000000000000000 Q06=0000000000000000:4010040140100000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000555010004000:0000555010004000 Q17=000000ff00ff00ff:000000ff00ff00ff Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000