syzkaller login: [ 103.148997][ T2053] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 103.187365][ T2053] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 103.205519][ T2053] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:16122' (ECDSA) to the list of known hosts. 1970/01/01 00:02:34 fuzzer started 1970/01/01 00:02:38 connecting to host at localhost:36163 1970/01/01 00:02:39 checking machine... 1970/01/01 00:02:39 checking revisions... 1970/01/01 00:02:41 testing simple program... [ 162.159726][ T2213] cgroup: Unknown subsys name 'net' executing program [ 162.911065][ T2213] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 169.811833][ T2215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.875844][ T2215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 172.399603][ T2215] device hsr_slave_0 entered promiscuous mode [ 172.462340][ T2215] device hsr_slave_1 entered promiscuous mode [ 174.261629][ T2215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.355757][ T2215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.431748][ T2215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.522674][ T2215] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 176.939226][ T2215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.082838][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.102178][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program [ 178.448805][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.459974][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.505933][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.512055][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.600909][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.660413][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.823073][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.831741][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.893172][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.901743][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.957218][ T2215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.040088][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.042224][ T2526] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 182.893668][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.900770][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready executing program [ 184.266899][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.273743][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.309255][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.318872][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.369631][ T2215] device veth0_vlan entered promiscuous mode [ 184.461115][ T2215] device veth1_vlan entered promiscuous mode [ 184.695732][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.702126][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.779920][ T2215] device veth0_macvtap entered promiscuous mode [ 184.829796][ T2215] device veth1_macvtap entered promiscuous mode [ 184.993692][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.002325][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.016753][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.021541][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.091857][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.116813][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.212304][ T2215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.213643][ T2215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.215892][ T2215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.216481][ T2215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.532907][ C1] ------------[ cut here ]------------ [ 185.534258][ C1] WARNING: CPU: 1 PID: 27 at include/linux/cpumask.h:110 wg_cpumask_next_online+0x1c0/0x2c0 [ 185.534980][ C1] Modules linked in: [ 185.535336][ C1] CPU: 1 PID: 27 Comm: kworker/u4:1 Tainted: G W 6.0.0-syzkaller-11990-g9c9155a3509a #0 [ 185.535731][ C1] Hardware name: linux,dummy-virt (DT) [ 185.536292][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 185.536796][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 185.537636][ C1] pc : wg_cpumask_next_online+0x1c0/0x2c0 [ 185.538365][ C1] lr : wg_packet_receive+0x978/0x1560 [ 185.539023][ C1] sp : ffff800010ab7480 [ 185.539348][ C1] x29: ffff800010ab7480 x28: 0000000000000001 x27: 1fffe00001492219 [ 185.539954][ C1] x26: 0000000000000000 x25: ffff80000de5c000 x24: 0000000000000000 [ 185.540531][ C1] x23: 0000000000000003 x22: ffff80000de5cb68 x21: 0000000000000001 [ 185.541104][ C1] x20: ffff00000a4910c8 x19: ffff80000de5cd50 x18: 00000000e93b8bd8 [ 185.541699][ C1] x17: ffff80005cbe4000 x16: ffff800010ab8000 x15: ffff00000f17a8e8 [ 185.542277][ C1] x14: 1ffff00002156e68 x13: 0000000000000000 x12: ffff600001492291 [ 185.542845][ C1] x11: 1fffe00001492290 x10: ffff600001492290 x9 : dfff800000000000 [ 185.543422][ C1] x8 : ffff00000a491483 x7 : 00009ffffeb6dd70 x6 : 0000000000000001 [ 185.543992][ C1] x5 : ffff00000a491480 x4 : ffff700001bcb9aa x3 : dfff800000000000 [ 185.544664][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 185.545944][ C1] Call trace: [ 185.546840][ C1] wg_cpumask_next_online+0x1c0/0x2c0 [ 185.548247][ C1] wg_packet_receive+0x978/0x1560 [ 185.548575][ C1] wg_receive+0x58/0xb0 [ 185.548946][ C1] udpv6_queue_rcv_one_skb+0x8f4/0x17c0 [ 185.549326][ C1] udpv6_queue_rcv_skb+0x134/0x7e0 [ 185.549697][ C1] udp6_unicast_rcv_skb+0xe8/0x270 [ 185.550056][ C1] __udp6_lib_rcv+0x8a4/0x2330 [ 185.550391][ C1] udpv6_rcv+0x1c/0x2c [ 185.550705][ C1] ip6_protocol_deliver_rcu+0x154/0x14f0 [ 185.551078][ C1] ip6_input_finish+0x108/0x220 [ 185.551421][ C1] ip6_input+0xbc/0x2b0 [ 185.551733][ C1] ipv6_rcv+0x39c/0x47c [ 185.552064][ C1] __netif_receive_skb_one_core+0xf4/0x170 [ 185.553132][ C1] __netif_receive_skb+0x24/0x184 [ 185.553493][ C1] process_backlog+0x24c/0x6b0 [ 185.554560][ C1] __napi_poll+0x94/0x3a4 [ 185.555836][ C1] net_rx_action+0x78c/0xb60 [ 185.557404][ C1] _stext+0x28c/0x107c [ 185.557704][ C1] ____do_softirq+0x10/0x20 [ 185.558018][ C1] call_on_irq_stack+0x2c/0x54 [ 185.558354][ C1] do_softirq_own_stack+0x1c/0x30 [ 185.558698][ C1] do_softirq.part.0+0xd0/0xf4 [ 185.559047][ C1] __local_bh_enable_ip+0x50c/0x5d0 [ 185.559367][ C1] _raw_read_unlock_bh+0x54/0x64 [ 185.559671][ C1] wg_socket_send_skb_to_peer+0xf0/0x190 [ 185.560019][ C1] wg_socket_send_buffer_to_peer+0x110/0x160 [ 185.560361][ C1] wg_packet_send_handshake_initiation+0x1a8/0x274 [ 185.560726][ C1] wg_packet_handshake_send_worker+0x1c/0x34 [ 185.561094][ C1] process_one_work+0x780/0x184c [ 185.561456][ C1] worker_thread+0x3cc/0xc40 [ 185.561767][ C1] kthread+0x23c/0x2a0 [ 185.562087][ C1] ret_from_fork+0x10/0x20 [ 185.562411][ C1] irq event stamp: 327447 [ 185.562705][ C1] hardirqs last enabled at (327446): [] __local_bh_enable_ip+0x1e4/0x5d0 [ 185.563172][ C1] hardirqs last disabled at (327447): [] el1_dbg+0x24/0x80 [ 185.563592][ C1] softirqs last enabled at (327438): [] wg_socket_send_skb_to_peer+0xf0/0x190 [ 185.564055][ C1] softirqs last disabled at (327439): [] ____do_softirq+0x10/0x20 [ 185.564696][ C1] ---[ end trace 0000000000000000 ]--- [ 185.656705][ C1] ------------[ cut here ]------------ [ 185.657419][ C1] WARNING: CPU: 1 PID: 20 at include/linux/cpumask.h:110 wg_packet_send_staged_packets+0xe38/0x1380 [ 185.657938][ C1] Modules linked in: [ 185.658295][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G W 6.0.0-syzkaller-11990-g9c9155a3509a #0 [ 185.660379][ C1] Hardware name: linux,dummy-virt (DT) [ 185.661519][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 185.662818][ C1] pc : wg_packet_send_staged_packets+0xe38/0x1380 [ 185.663400][ C1] lr : wg_packet_send_staged_packets+0x524/0x1380 [ 185.664894][ C1] sp : ffff800010c47700 [ 185.665309][ C1] x29: ffff800010c47700 x28: ffff00000f14c800 x27: 0000000000000001 [ 185.667692][ C1] x26: 0000000000000001 x25: 0000000000000002 x24: 1fffe00002b7edbe [ 185.669333][ C1] x23: ffff000015bf6de8 x22: ffff80000de5cd50 x21: ffff00000fd80960 [ 185.671575][ C1] x20: ffff000015bf6dc0 x19: ffff00000a490c40 x18: ffff00006a9eab88 [ 185.673233][ C1] x17: 0000000000000000 x16: 0000000000000000 x15: ffff00006a9eabc4 [ 185.673786][ C1] x14: 1ffff00002188eae x13: 1fffe0000125b141 x12: ffff600001fb012e [ 185.674463][ C1] x11: ffff700001bcb9aa x10: dfff800000000000 x9 : 0000000000000003 [ 185.684405][ C1] x8 : ffff80000de5c000 x7 : 1fffe000014921b9 x6 : 0000000000000000 [ 185.685023][ C1] x5 : ffff00000a490dc8 x4 : ffff80000de5cb68 x3 : ffff800009f2c4b4 [ 185.685601][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 185.686173][ C1] Call trace: [ 185.686447][ C1] wg_packet_send_staged_packets+0xe38/0x1380 [ 185.686819][ C1] wg_packet_rx_poll+0xd94/0x1580 [ 185.687161][ C1] __napi_poll+0x94/0x3a4 [ 185.687479][ C1] net_rx_action+0x78c/0xb60 [ 185.687783][ C1] _stext+0x28c/0x107c [ 185.688098][ C1] run_ksoftirqd+0xa4/0xec [ 185.688384][ C1] smpboot_thread_fn+0x4d4/0x950 [ 185.688726][ C1] kthread+0x23c/0x2a0 [ 185.689054][ C1] ret_from_fork+0x10/0x20 [ 185.689396][ C1] irq event stamp: 17723 [ 185.689695][ C1] hardirqs last enabled at (17722): [] seqcount_lockdep_reader_access.constprop.0+0xc4/0xe0 [ 185.690198][ C1] hardirqs last disabled at (17723): [] el1_dbg+0x24/0x80 [ 185.690638][ C1] softirqs last enabled at (17678): [] _stext+0x9d4/0x107c [ 185.691080][ C1] softirqs last disabled at (17683): [] run_ksoftirqd+0xa4/0xec [ 185.691514][ C1] ---[ end trace 0000000000000000 ]--- executing program 1970/01/01 00:03:06 building call list... [ 187.456980][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.710886][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.979883][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.247898][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 191.825481][ T44] device hsr_slave_0 left promiscuous mode [ 191.889601][ T44] device hsr_slave_1 left promiscuous mode [ 192.086528][ T44] device veth1_macvtap left promiscuous mode [ 192.090128][ T44] device veth0_macvtap left promiscuous mode [ 192.107932][ T44] device veth1_vlan left promiscuous mode [ 192.110512][ T44] device veth0_vlan left promiscuous mode executing program executing program [ 195.721383][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.886932][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.737845][ T44] bond0 (unregistering): Released all slaves executing program executing program executing program [ 206.696153][ T2211] can: request_module (can-proto-0) failed. [ 206.989138][ T2211] can: request_module (can-proto-0) failed. [ 207.281593][ T2211] can: request_module (can-proto-0) failed. executing program executing program executing program VM DIAGNOSIS: 05:35:30 Registers: info registers vcpu 0 PC=ffff80000b45fcb8 X00=ffff80000b45fcb0 X01=0000000000000000 X02=ffff00000a5c5ba0 X03=1ffff00001bcbf6e X04=1fffe000014b8a39 X05=ffff800011126a30 X06=0000000000000001 X07=0000000000000004 X08=ffff800011126a33 X09=dfff800000000000 X10=ffff700002224d46 X11=1ffff00002224d46 X12=ffff700002224d47 X13=0000000000000000 X14=1ffff00002224d1c X15=ffff00006a9cbbc4 X16=ffff800009f2ddfc X17=ffff800009f2f100 X18=ffff00006a9cbb88 X19=ffff80000e071db0 X20=0000000000000000 X21=0000000000000003 X22=0000000000000028 X23=ffff80000e071e40 X24=dfff800000000000 X25=ffff80000e071d80 X26=0000000000000004 X27=ffff80000e071db0 X28=ffff00000a5c5c98 X29=ffff8000111269b0 X30=ffff800008391808 SP=ffff8000111269b0 PSTATE=600000c5 -ZC- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=000063657363616d:007061747663616d Q02=0000000064252e30:322e30322e323731 Q03=ffff000000000000:ff00000000000000 Q04=ffffffff00000000:0000000000000000 Q05=4010000000000000:4000000000000000 Q06=4010040100100000:0000000000000000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=5510000050004000:5510000050004000 Q17=000000ff00ff00ff:000000ff00ff00ff Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff80000829a470 X00=ffff0000093b1b40 X01=ffff0000093b25f0 X02=0000000000000004 X03=1fffe0000d53d531 X04=0000000000000001 X05=dfff800000000000 X06=1fffe000012764bd X07=ffff80000de0698c X08=0000000000000000 X09=00000000000000c8 X10=ffff0000093b250c X11=0000000000000007 X12=1fffe000012764a1 X13=1fffe000012764c2 X14=1ffff00002156d38 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=00000000e93b8bd8 X19=0000000000000000 X20=ffff800010777d60 X21=ffff0000093b25f0 X22=ffff0000093b1b40 X23=ffff80005cbe4000 X24=0000000000000000 X25=00000000000c213a X26=000000000000013a X27=ffff80000f3d3a40 X28=000000000000003a X29=ffff800010ab6880 X30=ffff80000829d53c SP=ffff800010ab6880 PSTATE=100003c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=30253a3a30386566:000a2e6574656c70 Q02=388e9c6c4fa85ca0:0000000000007832 Q03=0000000000000000:ff00000000000000 Q04=0000000000000000:ffffffffffff0000 Q05=0010000000000000:4000000000000000 Q06=0000000000000000:4010040140100000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000555010004000:0000555010004000 Q17=000000ff00ff00ff:000000ff00ff00ff Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000