syzkaller login: [ 99.603420][ T2049] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 99.633598][ T2049] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 99.647172][ T2049] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:7292' (ECDSA) to the list of known hosts. 1970/01/01 00:02:04 fuzzer started 1970/01/01 00:02:09 connecting to host at localhost:37295 1970/01/01 00:02:09 checking machine... 1970/01/01 00:02:09 checking revisions... executing program 1970/01/01 00:02:12 testing simple program... [ 133.974545][ T2209] cgroup: Unknown subsys name 'net' [ 134.530237][ T2209] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 141.009391][ T2211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.056220][ T2211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 143.719710][ T2211] device hsr_slave_0 entered promiscuous mode [ 143.792671][ T2211] device hsr_slave_1 entered promiscuous mode executing program [ 145.794585][ T2211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.874621][ T2211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.936873][ T2211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.017142][ T2211] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 148.073543][ T2211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.192570][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.214998][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.399388][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.405941][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.527484][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.544604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.601313][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.662098][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.790750][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.794923][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.833354][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.841133][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.895697][ T2211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 150.947039][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.951072][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.297108][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.336517][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready executing program [ 154.554268][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.565167][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.593147][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.606942][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.644124][ T2211] device veth0_vlan entered promiscuous mode [ 154.776404][ T2211] device veth1_vlan entered promiscuous mode [ 155.059069][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.067255][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.151861][ T2211] device veth0_macvtap entered promiscuous mode [ 155.227323][ T2211] device veth1_macvtap entered promiscuous mode [ 155.463492][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.483664][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.497360][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.506965][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.603850][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.623553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.693691][ T2211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.699601][ T2211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.700474][ T2211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.701097][ T2211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.093769][ C1] ------------[ cut here ]------------ [ 156.094634][ C1] WARNING: CPU: 1 PID: 9 at include/linux/cpumask.h:110 wg_cpumask_next_online+0x1c0/0x2c0 [ 156.095097][ C1] Modules linked in: [ 156.095452][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W 6.0.0-syzkaller-10822-g60bb8154d1d7 #0 [ 156.095890][ C1] Hardware name: linux,dummy-virt (DT) [ 156.096401][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 156.096982][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 156.097681][ C1] pc : wg_cpumask_next_online+0x1c0/0x2c0 [ 156.099498][ C1] lr : wg_packet_receive+0x978/0x1560 [ 156.099871][ C1] sp : ffff800010ab7480 [ 156.100236][ C1] x29: ffff800010ab7480 x28: 0000000000000001 x27: 1fffe00001ca4219 [ 156.100833][ C1] x26: 0000000000000000 x25: ffff80000de5c000 x24: 0000000000000000 [ 156.101386][ C1] x23: 0000000000000003 x22: ffff80000de5cb68 x21: 0000000000000001 [ 156.102058][ C1] x20: ffff00000e5210c8 x19: ffff80000de5cd50 x18: 000000008a3cb441 [ 156.102673][ C1] x17: ffff80005cbe4000 x16: ffff800010ab8000 x15: ffff000014ab8ca8 [ 156.103219][ C1] x14: 1ffff00002156e68 x13: 0000000000000000 x12: ffff600001ca4291 [ 156.103780][ C1] x11: 1fffe00001ca4290 x10: ffff600001ca4290 x9 : dfff800000000000 [ 156.104362][ C1] x8 : ffff00000e521483 x7 : 00009ffffe35bd70 x6 : 0000000000000001 [ 156.104912][ C1] x5 : ffff00000e521480 x4 : ffff700001bcb9aa x3 : dfff800000000000 [ 156.105475][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 156.106033][ C1] Call trace: [ 156.106305][ C1] wg_cpumask_next_online+0x1c0/0x2c0 [ 156.106642][ C1] wg_packet_receive+0x978/0x1560 [ 156.106973][ C1] wg_receive+0x58/0xb0 [ 156.107306][ C1] udpv6_queue_rcv_one_skb+0x8f4/0x17c0 [ 156.107796][ C1] udpv6_queue_rcv_skb+0x134/0x7e0 [ 156.109423][ C1] udp6_unicast_rcv_skb+0xe8/0x270 [ 156.111119][ C1] __udp6_lib_rcv+0x8a4/0x2330 [ 156.112849][ C1] udpv6_rcv+0x1c/0x2c [ 156.113268][ C1] ip6_protocol_deliver_rcu+0x154/0x14f0 [ 156.113656][ C1] ip6_input_finish+0x108/0x220 [ 156.113997][ C1] ip6_input+0xbc/0x2b0 [ 156.114323][ C1] ipv6_rcv+0x39c/0x47c [ 156.114654][ C1] __netif_receive_skb_one_core+0xf4/0x170 [ 156.115064][ C1] __netif_receive_skb+0x24/0x184 [ 156.115404][ C1] process_backlog+0x24c/0x6b0 [ 156.115766][ C1] __napi_poll+0x94/0x3a4 [ 156.116098][ C1] net_rx_action+0x78c/0xb60 [ 156.116441][ C1] _stext+0x28c/0x107c [ 156.116780][ C1] ____do_softirq+0x10/0x20 [ 156.117089][ C1] call_on_irq_stack+0x2c/0x54 [ 156.117559][ C1] do_softirq_own_stack+0x1c/0x30 [ 156.118002][ C1] do_softirq.part.0+0xd0/0xf4 [ 156.118412][ C1] __local_bh_enable_ip+0x50c/0x5d0 [ 156.118782][ C1] _raw_read_unlock_bh+0x54/0x64 [ 156.119139][ C1] wg_socket_send_skb_to_peer+0xf0/0x190 [ 156.119516][ C1] wg_socket_send_buffer_to_peer+0x110/0x160 [ 156.119899][ C1] wg_packet_send_handshake_initiation+0x1a8/0x274 [ 156.120295][ C1] wg_packet_handshake_send_worker+0x1c/0x34 [ 156.120666][ C1] process_one_work+0x780/0x184c [ 156.121009][ C1] worker_thread+0x3cc/0xc40 [ 156.121367][ C1] kthread+0x23c/0x2a0 [ 156.121706][ C1] ret_from_fork+0x10/0x20 [ 156.122048][ C1] irq event stamp: 229395 [ 156.122353][ C1] hardirqs last enabled at (229394): [] __local_bh_enable_ip+0x1e4/0x5d0 [ 156.122852][ C1] hardirqs last disabled at (229395): [] el1_dbg+0x24/0x80 [ 156.123287][ C1] softirqs last enabled at (229386): [] wg_socket_send_skb_to_peer+0xf0/0x190 [ 156.123782][ C1] softirqs last disabled at (229387): [] ____do_softirq+0x10/0x20 [ 156.124231][ C1] ---[ end trace 0000000000000000 ]--- [ 156.182343][ T21] ------------[ cut here ]------------ [ 156.183105][ T21] WARNING: CPU: 1 PID: 21 at include/linux/cpumask.h:110 wg_packet_send_staged_packets+0xe38/0x1380 [ 156.183591][ T21] Modules linked in: [ 156.184052][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Tainted: G W 6.0.0-syzkaller-10822-g60bb8154d1d7 #0 [ 156.184440][ T21] Hardware name: linux,dummy-virt (DT) [ 156.184652][ T21] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 156.184996][ T21] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 156.185425][ T21] pc : wg_packet_send_staged_packets+0xe38/0x1380 [ 156.185855][ T21] lr : wg_packet_send_staged_packets+0x524/0x1380 [ 156.186214][ T21] sp : ffff800010c57800 [ 156.186668][ T21] x29: ffff800010c57800 x28: ffff000011a01c00 x27: 0000000000000001 [ 156.187218][ T21] x26: 0000000000000001 x25: 0000000000000002 x24: 1fffe0000295716e [ 156.188089][ T21] x23: ffff000014ab8b68 x22: ffff80000de5cd50 x21: ffff000009bda580 [ 156.188738][ T21] x20: ffff000014ab8b40 x19: ffff00000e320c40 x18: 000000003827d166 [ 156.189339][ T21] x17: 00000000202d0b97 x16: 00000000627546ab x15: 0000000000000000 [ 156.190004][ T21] x14: 1ffff0000218aece x13: 0000000000000000 x12: ffff60000137b4b2 [ 156.190460][ T21] x11: ffff700001bcb9aa x10: dfff800000000000 x9 : 0000000000000003 [ 156.191304][ T21] x8 : ffff80000de5c000 x7 : 1fffe00001c641b9 x6 : 0000000000000000 [ 156.191911][ T21] x5 : ffff00000e320dc8 x4 : ffff80000de5cb68 x3 : ffff800009f2ac94 [ 156.192472][ T21] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 156.193047][ T21] Call trace: [ 156.193330][ T21] wg_packet_send_staged_packets+0xe38/0x1380 [ 156.193616][ T21] wg_packet_send_keepalive+0x40/0x2a0 [ 156.193855][ T21] wg_receive_handshake_packet+0x2c8/0x7c0 [ 156.194222][ T21] wg_packet_handshake_receive_worker+0xd8/0x2ec [ 156.194611][ T21] process_one_work+0x780/0x184c [ 156.194956][ T21] worker_thread+0x3cc/0xc40 [ 156.195251][ T21] kthread+0x23c/0x2a0 [ 156.195469][ T21] ret_from_fork+0x10/0x20 [ 156.195705][ T21] irq event stamp: 22933 [ 156.196001][ T21] hardirqs last enabled at (22931): [] seqcount_lockdep_reader_access.constprop.0+0xc4/0xe0 [ 156.196521][ T21] hardirqs last disabled at (22933): [] el1_dbg+0x24/0x80 [ 156.196977][ T21] softirqs last enabled at (22928): [] wg_packet_send_staged_packets+0x20c/0x1380 [ 156.197425][ T21] softirqs last disabled at (22932): [] wg_packet_send_staged_packets+0x460/0x1380 [ 156.198314][ T21] ---[ end trace 0000000000000000 ]--- executing program 1970/01/01 00:02:37 building call list... [ 157.924297][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.177353][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.446930][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.724752][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 161.888632][ T9] device hsr_slave_0 left promiscuous mode [ 161.931248][ T9] device hsr_slave_1 left promiscuous mode [ 162.100030][ T9] device veth1_macvtap left promiscuous mode [ 162.102648][ T9] device veth0_macvtap left promiscuous mode [ 162.105149][ T9] device veth1_vlan left promiscuous mode [ 162.106774][ T9] device veth0_vlan left promiscuous mode executing program executing program [ 166.510552][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.694996][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.686122][ T9] bond0 (unregistering): Released all slaves executing program executing program executing program executing program executing program [ 182.991412][ T2202] can: request_module (can-proto-0) failed. [ 183.224391][ T2202] can: request_module (can-proto-0) failed. [ 183.482523][ T2202] can: request_module (can-proto-0) failed. executing program VM DIAGNOSIS: 04:10:10 Registers: info registers vcpu 0 PC=ffff8000083524f8 X00=ffff8000110c64a0 X01=ffff80000ba748f4 X02=0000000000000000 X03=0000000000000003 X04=1ffff00002218c94 X05=0000000000000000 X06=ffff8000110c6510 X07=fcfcfcfcfcfcfcfc X08=ffff600003206140 X09=0000000000000000 X10=ffff60000272ffd3 X11=1fffe0000272ffd3 X12=ffff60000272ffd4 X13=1fffe0000234381b X14=1ffff00002218cda X15=ffff8000110c6de4 X16=0000000000000000 X17=1ffff00002218dc4 X18=0000000000000000 X19=ffff8000110c6490 X20=ffff8000110c7120 X21=ffff8000083524c0 X22=ffff8000110c6490 X23=ffff8000110c6438 X24=ffff000011a1b680 X25=ffff8000110c8000 X26=ffff00001397fe3e X27=0000000000000018 X28=ffff00001397fdc0 X29=ffff8000110c6370 X30=ffff800008030448 SP=ffff8000110c6370 PSTATE=10000005 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=30253a3a30386566:000a2e6574656c70 Q02=388e9c6c4fa85ca0:0000000000007832 Q03=0000000000000000:ff00000000000000 Q04=0000000000000000:ffffffffffff0000 Q05=0010000000000000:4000000000000000 Q06=0000000000000000:4010040140100000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000555010004000:0000555010004000 Q17=000000ff00ff00ff:000000ff00ff00ff Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000096ada30 X00=0000000000000002 X01=0000000000000000 X02=0000000000000002 X03=1fffe0000135da2e X04=0000000000000000 X05=0000000000000002 X06=1fffe0000135da2e X07=0000000000000030 X08=ffff800010ab6a73 X09=dfff800000000000 X10=ffff700002156d4e X11=1ffff00002156d4e X12=ffff700002156d4f X13=0000000000000000 X14=1ffff00002156d24 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=000000008a3cb441 X19=ffff000009aed080 X20=ffff80000e5722e0 X21=ffff800010aad000 X22=0000000000000020 X23=dfff800000000000 X24=ffff8000107757df X25=0000000000000003 X26=ffff000009aed080 X27=dfff800000000000 X28=000000000000003f X29=ffff800010ab6a50 X30=ffff8000096ada30 SP=ffff800010ab6a50 PSTATE=800003c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=30253a3a30386566:000a2e6574656c70 Q02=388e9c6c4fa85ca0:0000000000007832 Q03=0000000000000000:ff00000000000000 Q04=0000000000000000:ffffffffffff0000 Q05=0010000000000000:4000000000000000 Q06=0000000000000000:4010040140100000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000555010004000:0000555010004000 Q17=000000ff00ff00ff:000000ff00ff00ff Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000