syzkaller login: [ 87.099742][ T2049] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 87.117983][ T2049] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 87.132991][ T2049] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:46577' (ECDSA) to the list of known hosts. 1970/01/01 00:02:14 fuzzer started 1970/01/01 00:02:18 connecting to host at localhost:40721 1970/01/01 00:02:18 checking machine... 1970/01/01 00:02:18 checking revisions... 1970/01/01 00:02:21 testing simple program... [ 141.640347][ T2209] cgroup: Unknown subsys name 'net' [ 142.134869][ T2209] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 147.677866][ T2212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.714632][ T2212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 150.077000][ T2212] device hsr_slave_0 entered promiscuous mode [ 150.148377][ T2212] device hsr_slave_1 entered promiscuous mode executing program [ 151.608304][ T2212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.708531][ T2212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.768566][ T2212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.837963][ T2212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.860601][ T2212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.961144][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.970064][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program [ 155.077301][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.090583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.144035][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.149566][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.187209][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.233638][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.359699][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.370042][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.411591][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.420956][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.483321][ T2212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.403808][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.405955][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 158.708079][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.716504][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.865514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.887726][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.905716][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.911883][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.938349][ T2212] device veth0_vlan entered promiscuous mode [ 160.018594][ T2212] device veth1_vlan entered promiscuous mode [ 160.207659][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready executing program [ 160.249976][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.299936][ T2212] device veth0_macvtap entered promiscuous mode [ 160.355650][ T2212] device veth1_macvtap entered promiscuous mode [ 160.500882][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.508385][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.527014][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.541034][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.599277][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.608414][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.658941][ T2212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.663911][ T2212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.664730][ T2212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.665266][ T2212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.981325][ C1] ------------[ cut here ]------------ [ 160.982111][ C1] WARNING: CPU: 1 PID: 1012 at include/linux/cpumask.h:110 wg_cpumask_next_online+0x1c0/0x2c0 [ 160.982560][ C1] Modules linked in: [ 160.983012][ C1] CPU: 1 PID: 1012 Comm: kworker/u4:6 Tainted: G W 6.0.0-syzkaller-10822-g60bb8154d1d7 #0 [ 160.983426][ C1] Hardware name: linux,dummy-virt (DT) [ 160.983872][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 160.984370][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 160.984719][ C1] pc : wg_cpumask_next_online+0x1c0/0x2c0 [ 160.985585][ C1] lr : wg_packet_receive+0x978/0x1560 [ 160.985846][ C1] sp : ffff800010ab7480 [ 160.986925][ C1] x29: ffff800010ab7480 x28: 0000000000000001 x27: 1fffe00002673219 [ 160.987967][ C1] x26: 0000000000000000 x25: ffff80000de5c000 x24: 0000000000000000 [ 160.988694][ C1] x23: 0000000000000003 x22: ffff80000de5cb68 x21: 0000000000000001 [ 160.989288][ C1] x20: ffff0000133990c8 x19: ffff80000de5cd50 x18: 00000000ce345049 [ 160.989893][ C1] x17: ffff80005cbe4000 x16: ffff800010ab8000 x15: ffff000015b542a8 [ 160.990550][ C1] x14: 1ffff00002156e68 x13: 0000000000000000 x12: ffff600002673291 [ 160.991172][ C1] x11: 1fffe00002673290 x10: ffff600002673290 x9 : dfff800000000000 [ 160.991787][ C1] x8 : ffff000013399483 x7 : 00009ffffd98cd70 x6 : 0000000000000001 [ 160.992610][ C1] x5 : ffff000013399480 x4 : ffff700001bcb9aa x3 : dfff800000000000 [ 160.993317][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 160.993891][ C1] Call trace: [ 160.994190][ C1] wg_cpumask_next_online+0x1c0/0x2c0 [ 160.994611][ C1] wg_packet_receive+0x978/0x1560 [ 160.994994][ C1] wg_receive+0x58/0xb0 [ 160.995350][ C1] udpv6_queue_rcv_one_skb+0x8f4/0x17c0 [ 160.995744][ C1] udpv6_queue_rcv_skb+0x134/0x7e0 [ 160.996134][ C1] udp6_unicast_rcv_skb+0xe8/0x270 [ 160.996497][ C1] __udp6_lib_rcv+0x8a4/0x2330 [ 160.996852][ C1] udpv6_rcv+0x1c/0x2c [ 160.997196][ C1] ip6_protocol_deliver_rcu+0x154/0x14f0 [ 160.997581][ C1] ip6_input_finish+0x108/0x220 [ 160.997946][ C1] ip6_input+0xbc/0x2b0 [ 160.998287][ C1] ipv6_rcv+0x39c/0x47c [ 160.998632][ C1] __netif_receive_skb_one_core+0xf4/0x170 [ 160.999004][ C1] __netif_receive_skb+0x24/0x184 [ 160.999338][ C1] process_backlog+0x24c/0x6b0 [ 160.999675][ C1] __napi_poll+0x94/0x3a4 [ 161.000017][ C1] net_rx_action+0x78c/0xb60 [ 161.000405][ C1] _stext+0x28c/0x107c [ 161.000752][ C1] ____do_softirq+0x10/0x20 [ 161.001087][ C1] call_on_irq_stack+0x2c/0x54 [ 161.001426][ C1] do_softirq_own_stack+0x1c/0x30 [ 161.001769][ C1] do_softirq.part.0+0xd0/0xf4 [ 161.002258][ C1] __local_bh_enable_ip+0x50c/0x5d0 [ 161.002730][ C1] _raw_read_unlock_bh+0x54/0x64 [ 161.003090][ C1] wg_socket_send_skb_to_peer+0xf0/0x190 [ 161.003442][ C1] wg_socket_send_buffer_to_peer+0x110/0x160 [ 161.003788][ C1] wg_packet_send_handshake_initiation+0x1a8/0x274 [ 161.004197][ C1] wg_packet_handshake_send_worker+0x1c/0x34 [ 161.004560][ C1] process_one_work+0x780/0x184c [ 161.004904][ C1] worker_thread+0x3cc/0xc40 [ 161.005233][ C1] kthread+0x23c/0x2a0 [ 161.005563][ C1] ret_from_fork+0x10/0x20 [ 161.005905][ C1] irq event stamp: 263835 [ 161.006217][ C1] hardirqs last enabled at (263834): [] __local_bh_enable_ip+0x1e4/0x5d0 [ 161.006630][ C1] hardirqs last disabled at (263835): [] el1_dbg+0x24/0x80 [ 161.007071][ C1] softirqs last enabled at (263826): [] wg_socket_send_skb_to_peer+0xf0/0x190 [ 161.007542][ C1] softirqs last disabled at (263827): [] ____do_softirq+0x10/0x20 [ 161.007957][ C1] ---[ end trace 0000000000000000 ]--- [ 161.047977][ T2512] ------------[ cut here ]------------ [ 161.048797][ T2512] WARNING: CPU: 1 PID: 2512 at include/linux/cpumask.h:110 wg_packet_send_staged_packets+0xe38/0x1380 [ 161.049304][ T2512] Modules linked in: [ 161.049695][ T2512] CPU: 1 PID: 2512 Comm: kworker/1:3 Tainted: G W 6.0.0-syzkaller-10822-g60bb8154d1d7 #0 [ 161.050129][ T2512] Hardware name: linux,dummy-virt (DT) [ 161.050465][ T2512] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 161.050919][ T2512] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 161.051307][ T2512] pc : wg_packet_send_staged_packets+0xe38/0x1380 [ 161.051695][ T2512] lr : wg_packet_send_staged_packets+0x524/0x1380 [ 161.052334][ T2512] sp : ffff800011937800 [ 161.052697][ T2512] x29: ffff800011937800 x28: ffff0000103ffc00 x27: 0000000000000001 [ 161.053422][ T2512] x26: 0000000000000001 x25: 0000000000000002 x24: 1fffe00002b6a8a6 [ 161.054153][ T2512] x23: ffff000015b54528 x22: ffff80000de5cd50 x21: ffff00000f2d2ee0 [ 161.054809][ T2512] x20: ffff000015b54500 x19: ffff00000e610c40 x18: 0000000053983bf7 [ 161.055523][ T2512] x17: 000000007ce2ab04 x16: 00000000736e0a73 x15: 0000000000000000 [ 161.056178][ T2512] x14: 1ffff00002326ece x13: 0000000000000000 x12: ffff600001e5a5de [ 161.056770][ T2512] x11: ffff700001bcb9aa x10: dfff800000000000 x9 : 0000000000000003 [ 161.057577][ T2512] x8 : ffff80000de5c000 x7 : 1fffe00001cc21b9 x6 : 0000000000000000 [ 161.058309][ T2512] x5 : ffff00000e610dc8 x4 : ffff80000de5cb68 x3 : ffff800009f2ac94 [ 161.059051][ T2512] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 161.059828][ T2512] Call trace: [ 161.060173][ T2512] wg_packet_send_staged_packets+0xe38/0x1380 [ 161.060622][ T2512] wg_packet_send_keepalive+0x40/0x2a0 [ 161.061009][ T2512] wg_receive_handshake_packet+0x2c8/0x7c0 [ 161.061450][ T2512] wg_packet_handshake_receive_worker+0xd8/0x2ec [ 161.062177][ T2512] process_one_work+0x780/0x184c [ 161.062508][ T2512] worker_thread+0x3cc/0xc40 [ 161.063359][ T2512] kthread+0x23c/0x2a0 [ 161.063917][ T2512] ret_from_fork+0x10/0x20 [ 161.064354][ T2512] irq event stamp: 125 [ 161.064714][ T2512] hardirqs last enabled at (123): [] seqcount_lockdep_reader_access.constprop.0+0xc4/0xe0 [ 161.065337][ T2512] hardirqs last disabled at (125): [] el1_dbg+0x24/0x80 [ 161.065948][ T2512] softirqs last enabled at (120): [] wg_packet_send_staged_packets+0x20c/0x1380 [ 161.066693][ T2512] softirqs last disabled at (124): [] wg_packet_send_staged_packets+0x460/0x1380 [ 161.067292][ T2512] ---[ end trace 0000000000000000 ]--- [ 162.831900][ T1012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.087405][ T1012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:02:42 building call list... executing program [ 163.303594][ T1012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.460238][ T1012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.214391][ T1012] device hsr_slave_0 left promiscuous mode executing program [ 166.296523][ T1012] device hsr_slave_1 left promiscuous mode [ 166.470322][ T1012] device veth1_macvtap left promiscuous mode [ 166.471832][ T1012] device veth0_macvtap left promiscuous mode [ 166.481386][ T1012] device veth1_vlan left promiscuous mode [ 166.487049][ T1012] device veth0_vlan left promiscuous mode [ 169.271204][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.517995][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface executing program [ 170.284370][ T1012] bond0 (unregistering): Released all slaves executing program executing program executing program executing program executing program [ 185.540169][ T2593] can: request_module (can-proto-0) failed. [ 185.769716][ T2593] can: request_module (can-proto-0) failed. [ 185.937769][ T2593] can: request_module (can-proto-0) failed. executing program executing program VM DIAGNOSIS: 14:50:45 Registers: info registers vcpu 0 PC=ffff800008295e04 X00=0000000000000001 X01=dfff800000000000 X02=0000000000000003 X03=0000000000000003 X04=0000000000000001 X05=0000000000000000 X06=ffff800009f3c270 X07=ffff80000de0698c X08=ffff0000093b2598 X09=0000000000000050 X10=ffff0000093b250c X11=1ffff00001d058f0 X12=ffff700001d058f1 X13=0000000000000000 X14=1ffff000021aef30 X15=ffff00006a9cbbc4 X16=0000000000000001 X17=0000000000000000 X18=ffff00006a9cbb88 X19=0000000000000000 X20=0000000000000002 X21=ffff80000e03ca80 X22=0000000000000000 X23=0000000000000001 X24=ffff80000e82c798 X25=ffff80000c991e40 X26=00000000ffffffff X27=ffff800009f3c270 X28=ffff800009f3c270 X29=ffff800010d77840 X30=ffff8000082a3e8c SP=ffff800010d77840 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000010 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:00000000447a0000 Q02=746963696c6f7320:3a732500656c6261 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:000000ff00000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000040100000000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000050000000000:0000050000000000 Q17=a00a0000a00a0000:aa00aa00aa82a000 Q18=8020080200000000:8020080200000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000096ac860 X00=0000000000000002 X01=0000000000000002 X02=ffff000009ae5172 X03=dfff800000000000 X04=1fffe0000135ca2e X05=0000000000000002 X06=1fffe0000135ca2e X07=0000000000000030 X08=ffff800010ab6a73 X09=dfff800000000000 X10=ffff700002156d4e X11=1ffff00002156d4e X12=ffff700002156d4f X13=0000000000000000 X14=1ffff00002156d24 X15=3a37327820313030 X16=3030656666663120 X17=3132333736323030 X18=00000000ce345049 X19=ffff000009ae5080 X20=ffff800010aad018 X21=ffff80000e5722e0 X22=0000000000000030 X23=dfff800000000000 X24=ffff8000107757f9 X25=0000000000000002 X26=ffff000009ae5080 X27=dfff800000000000 X28=0000000000000059 X29=ffff800010ab6a10 X30=ffff8000096ada30 SP=ffff800010ab6a10 PSTATE=800003c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:0000000000000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000