DUID 00:04:99:cf:64:81:91:3a:f8:b3:88:a8:0e:05:2a:78:8a:13 forked to background, child pid 3185 [ 23.674718][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.685828][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.113' (ECDSA) to the list of known hosts. 2022/09/19 10:01:24 fuzzer started 2022/09/19 10:01:25 connecting to host at 10.128.0.169:42559 2022/09/19 10:01:25 checking machine... 2022/09/19 10:01:25 checking revisions... 2022/09/19 10:01:25 testing simple program... syzkaller login: [ 38.282581][ T3604] cgroup: Unknown subsys name 'net' [ 38.393834][ T3604] cgroup: Unknown subsys name 'rlimit' [ 39.595461][ T3610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.602775][ T3610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.610282][ T3610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.617663][ T3610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.625146][ T3610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.632357][ T3610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.640226][ T3608] Bluetooth: hci0: HCI_REQ-0x0c1a [ 39.694975][ T3608] chnl_net:caif_netlink_parms(): no params data found [ 39.726318][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.733581][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.741413][ T3608] device bridge_slave_0 entered promiscuous mode [ 39.749371][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.756682][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.764835][ T3608] device bridge_slave_1 entered promiscuous mode [ 39.781533][ T3608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.792486][ T3608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.810484][ T3608] team0: Port device team_slave_0 added [ 39.817970][ T3608] team0: Port device team_slave_1 added [ 39.832831][ T3608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.840369][ T3608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.866816][ T3608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.878580][ T3608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.885629][ T3608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.911856][ T3608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.937461][ T3608] device hsr_slave_0 entered promiscuous mode [ 39.944207][ T3608] device hsr_slave_1 entered promiscuous mode [ 39.997307][ T3608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.006059][ T3608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.014685][ T3608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.023159][ T3608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.032068][ T3608] ------------[ cut here ]------------ [ 40.037555][ T3608] memcpy: detected field-spanning write (size 28) of single field "&endpoint.addr" at drivers/net/wireguard/netlink.c:446 (size 16) [ 40.052123][ T3608] WARNING: CPU: 0 PID: 3608 at drivers/net/wireguard/netlink.c:446 set_peer+0x991/0x10c0 [ 40.062017][ T3608] Modules linked in: [ 40.065933][ T3608] CPU: 0 PID: 3608 Comm: syz-executor.0 Not tainted 6.0.0-rc6-next-20220919-syzkaller #0 [ 40.075977][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 40.086156][ T3608] RIP: 0010:set_peer+0x991/0x10c0 [ 40.091664][ T3608] Code: 00 e8 63 cd b2 fc b9 10 00 00 00 48 c7 c2 e0 5a 72 8a be 1c 00 00 00 48 c7 c7 40 5b 72 8a c6 05 12 a4 02 09 01 e8 f1 04 75 04 <0f> 0b e9 03 04 00 00 e8 33 cd b2 fc 89 ee 44 89 ef e8 79 c9 b2 fc [ 40.111636][ T3608] RSP: 0018:ffffc90003f0f540 EFLAGS: 00010282 [ 40.117826][ T3608] RAX: 0000000000000000 RBX: ffffc90003f0f6d8 RCX: 0000000000000000 [ 40.125907][ T3608] RDX: ffff8880226aba80 RSI: ffffffff81611eb8 RDI: fffff520007e1e9a [ 40.133934][ T3608] RBP: ffffc90003f0f5e8 R08: 0000000000000005 R09: 0000000000000000 [ 40.142004][ T3608] R10: 0000000080000000 R11: 7720676e696e6e6d R12: 000000000000001c [ 40.150019][ T3608] R13: 0000000000000000 R14: ffff88806fe88104 R15: ffff88806fe90960 [ 40.157976][ T3608] FS: 00005555558a9400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 40.166977][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.173628][ T3608] CR2: 00007f1c9b8d32c0 CR3: 0000000070631000 CR4: 00000000003506f0 [ 40.181738][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.189961][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.197958][ T3608] Call Trace: [ 40.201784][ T3608] [ 40.204827][ T3608] ? wg_get_device_done+0x110/0x110 [ 40.210528][ T3608] ? nla_get_range_signed+0x520/0x520 [ 40.216546][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 40.221815][ T3608] ? __nla_parse+0x3d/0x50 [ 40.226254][ T3608] wg_set_device+0x8d7/0x11b0 [ 40.231383][ T3608] ? dql_completed+0x5b1/0x6a0 [ 40.236166][ T3608] ? set_peer+0x10c0/0x10c0 [ 40.240927][ T3608] ? __nla_parse+0x3d/0x50 [ 40.245346][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 40.253266][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 40.260920][ T3608] genl_family_rcv_msg_doit+0x228/0x320 [ 40.266781][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 40.274575][ T3608] ? ns_capable+0xd9/0x100 [ 40.279111][ T3608] genl_rcv_msg+0x3b7/0x630 [ 40.283655][ T3608] ? genl_get_cmd+0x480/0x480 [ 40.289084][ T3608] ? __alloc_skb+0xd9/0x2f0 [ 40.294039][ T3608] ? netlink_sendmsg+0x9a2/0xe10 [ 40.299025][ T3608] ? sock_sendmsg+0xcf/0x120 [ 40.303657][ T3608] ? set_peer+0x10c0/0x10c0 [ 40.308196][ T3608] ? lock_release+0x780/0x780 [ 40.312920][ T3608] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.318404][ T3608] netlink_rcv_skb+0x153/0x420 [ 40.323224][ T3608] ? genl_get_cmd+0x480/0x480 [ 40.327922][ T3608] ? netlink_ack+0xd50/0xd50 [ 40.333026][ T3608] ? netlink_deliver_tap+0x1b1/0xc40 [ 40.338366][ T3608] genl_rcv+0x24/0x40 [ 40.342519][ T3608] netlink_unicast+0x543/0x7f0 [ 40.347404][ T3608] ? netlink_attachskb+0x880/0x880 [ 40.352578][ T3608] ? __virt_addr_valid+0x5d/0x2d0 [ 40.357624][ T3608] ? __phys_addr_symbol+0x2c/0x70 [ 40.362703][ T3608] ? __check_object_size+0x2de/0x5a0 [ 40.368070][ T3608] netlink_sendmsg+0x917/0xe10 [ 40.372881][ T3608] ? netlink_unicast+0x7f0/0x7f0 [ 40.377943][ T3608] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 40.383280][ T3608] ? netlink_unicast+0x7f0/0x7f0 [ 40.388230][ T3608] sock_sendmsg+0xcf/0x120 [ 40.393114][ T3608] __sys_sendto+0x236/0x340 [ 40.397639][ T3608] ? __ia32_sys_getpeername+0xb0/0xb0 [ 40.403086][ T3608] ? lock_release+0x560/0x780 [ 40.407775][ T3608] ? lock_release+0x560/0x780 [ 40.412507][ T3608] ? __ct_user_exit+0xff/0x150 [ 40.417300][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 40.422203][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 40.427065][ T3608] ? fd_install+0x1f9/0x640 [ 40.431634][ T3608] ? vtime_user_exit+0x218/0x6c0 [ 40.436601][ T3608] __x64_sys_sendto+0xdd/0x1b0 [ 40.441437][ T3608] ? syscall_enter_from_user_mode+0x22/0xb0 [ 40.447377][ T3608] do_syscall_64+0x35/0xb0 [ 40.451911][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.457989][ T3608] RIP: 0033:0x7f1c9a83c1cc [ 40.462445][ T3608] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 40.482202][ T3608] RSP: 002b:00007fff555fe950 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 40.490666][ T3608] RAX: ffffffffffffffda RBX: 00007f1c9b8d4320 RCX: 00007f1c9a83c1cc [ 40.498764][ T3608] RDX: 0000000000000170 RSI: 00007f1c9b8d4370 RDI: 0000000000000005 [ 40.506729][ T3608] RBP: 0000000000000000 R08: 00007fff555fe9a4 R09: 000000000000000c [ 40.514753][ T3608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 40.522798][ T3608] R13: 00007f1c9b8d4370 R14: 0000000000000005 R15: 0000000000000000 [ 40.530846][ T3608] [ 40.533889][ T3608] Kernel panic - not syncing: panic_on_warn set ... [ 40.540458][ T3608] CPU: 1 PID: 3608 Comm: syz-executor.0 Not tainted 6.0.0-rc6-next-20220919-syzkaller #0 [ 40.550276][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 40.560335][ T3608] Call Trace: [ 40.563607][ T3608] [ 40.566536][ T3608] dump_stack_lvl+0xcd/0x134 [ 40.571123][ T3608] panic+0x2c8/0x622 [ 40.575024][ T3608] ? panic_print_sys_info.part.0+0x110/0x110 [ 40.581011][ T3608] ? __warn.cold+0x248/0x2c4 [ 40.585625][ T3608] ? set_peer+0x991/0x10c0 [ 40.590047][ T3608] __warn.cold+0x259/0x2c4 [ 40.594468][ T3608] ? __wake_up_klogd.part.0+0x99/0xf0 [ 40.599837][ T3608] ? set_peer+0x991/0x10c0 [ 40.604257][ T3608] report_bug+0x1bc/0x210 [ 40.608597][ T3608] handle_bug+0x3c/0x60 [ 40.612772][ T3608] exc_invalid_op+0x14/0x40 [ 40.617281][ T3608] asm_exc_invalid_op+0x16/0x20 [ 40.622140][ T3608] RIP: 0010:set_peer+0x991/0x10c0 [ 40.627165][ T3608] Code: 00 e8 63 cd b2 fc b9 10 00 00 00 48 c7 c2 e0 5a 72 8a be 1c 00 00 00 48 c7 c7 40 5b 72 8a c6 05 12 a4 02 09 01 e8 f1 04 75 04 <0f> 0b e9 03 04 00 00 e8 33 cd b2 fc 89 ee 44 89 ef e8 79 c9 b2 fc [ 40.647028][ T3608] RSP: 0018:ffffc90003f0f540 EFLAGS: 00010282 [ 40.653088][ T3608] RAX: 0000000000000000 RBX: ffffc90003f0f6d8 RCX: 0000000000000000 [ 40.661226][ T3608] RDX: ffff8880226aba80 RSI: ffffffff81611eb8 RDI: fffff520007e1e9a [ 40.669191][ T3608] RBP: ffffc90003f0f5e8 R08: 0000000000000005 R09: 0000000000000000 [ 40.677164][ T3608] R10: 0000000080000000 R11: 7720676e696e6e6d R12: 000000000000001c [ 40.685148][ T3608] R13: 0000000000000000 R14: ffff88806fe88104 R15: ffff88806fe90960 [ 40.693205][ T3608] ? vprintk+0x88/0x90 [ 40.697281][ T3608] ? wg_get_device_done+0x110/0x110 [ 40.702484][ T3608] ? nla_get_range_signed+0x520/0x520 [ 40.707871][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 40.712820][ T3608] ? __nla_parse+0x3d/0x50 [ 40.717244][ T3608] wg_set_device+0x8d7/0x11b0 [ 40.721924][ T3608] ? dql_completed+0x5b1/0x6a0 [ 40.726685][ T3608] ? set_peer+0x10c0/0x10c0 [ 40.731300][ T3608] ? __nla_parse+0x3d/0x50 [ 40.735715][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 40.743176][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 40.750555][ T3608] genl_family_rcv_msg_doit+0x228/0x320 [ 40.756106][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 40.763567][ T3608] ? ns_capable+0xd9/0x100 [ 40.768007][ T3608] genl_rcv_msg+0x3b7/0x630 [ 40.772511][ T3608] ? genl_get_cmd+0x480/0x480 [ 40.777201][ T3608] ? __alloc_skb+0xd9/0x2f0 [ 40.781700][ T3608] ? netlink_sendmsg+0x9a2/0xe10 [ 40.786637][ T3608] ? sock_sendmsg+0xcf/0x120 [ 40.791223][ T3608] ? set_peer+0x10c0/0x10c0 [ 40.795731][ T3608] ? lock_release+0x780/0x780 [ 40.800407][ T3608] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.805875][ T3608] netlink_rcv_skb+0x153/0x420 [ 40.810636][ T3608] ? genl_get_cmd+0x480/0x480 [ 40.815382][ T3608] ? netlink_ack+0xd50/0xd50 [ 40.819972][ T3608] ? netlink_deliver_tap+0x1b1/0xc40 [ 40.825257][ T3608] genl_rcv+0x24/0x40 [ 40.829237][ T3608] netlink_unicast+0x543/0x7f0 [ 40.834000][ T3608] ? netlink_attachskb+0x880/0x880 [ 40.839118][ T3608] ? __virt_addr_valid+0x5d/0x2d0 [ 40.844149][ T3608] ? __phys_addr_symbol+0x2c/0x70 [ 40.849191][ T3608] ? __check_object_size+0x2de/0x5a0 [ 40.854507][ T3608] netlink_sendmsg+0x917/0xe10 [ 40.859270][ T3608] ? netlink_unicast+0x7f0/0x7f0 [ 40.864222][ T3608] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 40.869519][ T3608] ? netlink_unicast+0x7f0/0x7f0 [ 40.874461][ T3608] sock_sendmsg+0xcf/0x120 [ 40.878875][ T3608] __sys_sendto+0x236/0x340 [ 40.885142][ T3608] ? __ia32_sys_getpeername+0xb0/0xb0 [ 40.890614][ T3608] ? lock_release+0x560/0x780 [ 40.895313][ T3608] ? lock_release+0x560/0x780 [ 40.899987][ T3608] ? __ct_user_exit+0xff/0x150 [ 40.904756][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 40.909634][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 40.914494][ T3608] ? fd_install+0x1f9/0x640 [ 40.919013][ T3608] ? vtime_user_exit+0x218/0x6c0 [ 40.924043][ T3608] __x64_sys_sendto+0xdd/0x1b0 [ 40.928910][ T3608] ? syscall_enter_from_user_mode+0x22/0xb0 [ 40.934817][ T3608] do_syscall_64+0x35/0xb0 [ 40.939234][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.945145][ T3608] RIP: 0033:0x7f1c9a83c1cc [ 40.949815][ T3608] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 40.969504][ T3608] RSP: 002b:00007fff555fe950 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 40.978360][ T3608] RAX: ffffffffffffffda RBX: 00007f1c9b8d4320 RCX: 00007f1c9a83c1cc [ 40.986325][ T3608] RDX: 0000000000000170 RSI: 00007f1c9b8d4370 RDI: 0000000000000005 [ 40.994306][ T3608] RBP: 0000000000000000 R08: 00007fff555fe9a4 R09: 000000000000000c [ 41.002535][ T3608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 41.010499][ T3608] R13: 00007f1c9b8d4370 R14: 0000000000000005 R15: 0000000000000000 [ 41.018470][ T3608] [ 41.021644][ T3608] Kernel Offset: disabled [ 41.025955][ T3608] Rebooting in 86400 seconds..