syzkaller login: [ 96.054940][ T2047] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 96.098893][ T2047] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 96.139734][ T2047] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:64975' (ECDSA) to the list of known hosts. 1970/01/01 00:02:06 fuzzer started 1970/01/01 00:02:11 connecting to host at localhost:35525 1970/01/01 00:02:12 checking machine... 1970/01/01 00:02:12 checking revisions... 1970/01/01 00:02:14 testing simple program... [ 134.863114][ T2207] cgroup: Unknown subsys name 'net' [ 135.436178][ T2207] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program [ 141.984853][ T2210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.012741][ T2210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 144.725158][ T2210] device hsr_slave_0 entered promiscuous mode [ 144.794754][ T2210] device hsr_slave_1 entered promiscuous mode [ 146.596784][ T2210] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.670649][ T2210] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.751148][ T2210] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.868523][ T2210] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 148.953684][ T2210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.069190][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.092600][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.425095][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.433727][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.478841][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.485446][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.526244][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.589920][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready executing program [ 150.758929][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.764762][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.853768][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.864487][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.905400][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.002829][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.004866][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 154.649254][ T2208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.654393][ T2208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.901846][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.919915][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.973278][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.999975][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.054652][ T2210] device veth0_vlan entered promiscuous mode [ 156.190450][ T2210] device veth1_vlan entered promiscuous mode [ 156.473017][ T2208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.493966][ T2208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.541521][ T2210] device veth0_macvtap entered promiscuous mode [ 156.588577][ T2210] device veth1_macvtap entered promiscuous mode executing program [ 156.744013][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.756387][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.779621][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.786714][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.846320][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.854053][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.935737][ T2210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.951251][ T2210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.952033][ T2210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.952603][ T2210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.341357][ C1] ------------[ cut here ]------------ [ 157.342132][ C1] WARNING: CPU: 1 PID: 44 at include/linux/cpumask.h:110 wg_cpumask_next_online+0x1c0/0x2c0 [ 157.342793][ C1] Modules linked in: [ 157.343263][ C1] CPU: 1 PID: 44 Comm: kworker/u4:2 Tainted: G W 6.0.0-syzkaller-11331-gd465bff130bf #0 [ 157.343837][ C1] Hardware name: linux,dummy-virt (DT) [ 157.344486][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 157.345035][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 157.345814][ C1] pc : wg_cpumask_next_online+0x1c0/0x2c0 [ 157.346945][ C1] lr : wg_packet_receive+0x978/0x1560 [ 157.347735][ C1] sp : ffff800010ab7480 [ 157.348137][ C1] x29: ffff800010ab7480 x28: 0000000000000001 x27: 1fffe0000136a219 [ 157.348801][ C1] x26: 0000000000000000 x25: ffff80000de5c000 x24: 0000000000000000 [ 157.351652][ C1] x23: 0000000000000003 x22: ffff80000de5cb68 x21: 0000000000000001 [ 157.353967][ C1] x20: ffff000009b510c8 x19: ffff80000de5cd50 x18: 0000000046f7e927 [ 157.354885][ C1] x17: ffff80005cbe4000 x16: ffff800010ab8000 x15: ffff0000139baca8 [ 157.355566][ C1] x14: 1ffff00002156e68 x13: 0000000000000000 x12: ffff60000136a291 [ 157.356213][ C1] x11: 1fffe0000136a290 x10: ffff60000136a290 x9 : dfff800000000000 [ 157.356859][ C1] x8 : ffff000009b51483 x7 : 00009ffffec95d70 x6 : 0000000000000001 [ 157.357703][ C1] x5 : ffff000009b51480 x4 : ffff700001bcb9aa x3 : dfff800000000000 [ 157.358373][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 157.359019][ C1] Call trace: [ 157.359373][ C1] wg_cpumask_next_online+0x1c0/0x2c0 [ 157.359771][ C1] wg_packet_receive+0x978/0x1560 [ 157.360160][ C1] wg_receive+0x58/0xb0 [ 157.360518][ C1] udpv6_queue_rcv_one_skb+0x8f4/0x17c0 [ 157.360939][ C1] udpv6_queue_rcv_skb+0x134/0x7e0 [ 157.362000][ C1] udp6_unicast_rcv_skb+0xe8/0x270 [ 157.363307][ C1] __udp6_lib_rcv+0x8a4/0x2330 [ 157.364542][ C1] udpv6_rcv+0x1c/0x2c [ 157.365579][ C1] ip6_protocol_deliver_rcu+0x154/0x14f0 [ 157.366942][ C1] ip6_input_finish+0x108/0x220 [ 157.368635][ C1] ip6_input+0xbc/0x2b0 [ 157.368982][ C1] ipv6_rcv+0x39c/0x47c [ 157.370448][ C1] __netif_receive_skb_one_core+0xf4/0x170 [ 157.370966][ C1] __netif_receive_skb+0x24/0x184 [ 157.371366][ C1] process_backlog+0x24c/0x6b0 [ 157.371731][ C1] __napi_poll+0x94/0x3a4 [ 157.372178][ C1] net_rx_action+0x78c/0xb60 [ 157.372539][ C1] _stext+0x28c/0x107c [ 157.373587][ C1] ____do_softirq+0x10/0x20 [ 157.375098][ C1] call_on_irq_stack+0x2c/0x54 [ 157.375513][ C1] do_softirq_own_stack+0x1c/0x30 [ 157.375889][ C1] do_softirq.part.0+0xd0/0xf4 [ 157.376345][ C1] __local_bh_enable_ip+0x50c/0x5d0 [ 157.376744][ C1] _raw_read_unlock_bh+0x54/0x64 [ 157.377309][ C1] wg_socket_send_skb_to_peer+0xf0/0x190 [ 157.377738][ C1] wg_socket_send_buffer_to_peer+0x110/0x160 [ 157.378162][ C1] wg_packet_send_handshake_initiation+0x1a8/0x274 [ 157.378581][ C1] wg_packet_handshake_send_worker+0x1c/0x34 [ 157.378987][ C1] process_one_work+0x780/0x184c [ 157.379390][ C1] worker_thread+0x3cc/0xc40 [ 157.379753][ C1] kthread+0x23c/0x2a0 [ 157.380115][ C1] ret_from_fork+0x10/0x20 [ 157.380477][ C1] irq event stamp: 39239 [ 157.381564][ C1] hardirqs last enabled at (39238): [] __local_bh_enable_ip+0x1e4/0x5d0 [ 157.382024][ C1] hardirqs last disabled at (39239): [] el1_dbg+0x24/0x80 [ 157.382477][ C1] softirqs last enabled at (39230): [] wg_socket_send_skb_to_peer+0xf0/0x190 [ 157.383008][ C1] softirqs last disabled at (39231): [] ____do_softirq+0x10/0x20 [ 157.383527][ C1] ---[ end trace 0000000000000000 ]--- [ 157.455245][ T21] ------------[ cut here ]------------ [ 157.455962][ T21] WARNING: CPU: 1 PID: 21 at include/linux/cpumask.h:110 wg_packet_send_staged_packets+0xe38/0x1380 [ 157.456358][ T21] Modules linked in: [ 157.456658][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Tainted: G W 6.0.0-syzkaller-11331-gd465bff130bf #0 [ 157.457080][ T21] Hardware name: linux,dummy-virt (DT) [ 157.457366][ T21] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 157.457987][ T21] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 157.458397][ T21] pc : wg_packet_send_staged_packets+0xe38/0x1380 [ 157.458743][ T21] lr : wg_packet_send_staged_packets+0x524/0x1380 [ 157.459043][ T21] sp : ffff800010c57800 [ 157.459324][ T21] x29: ffff800010c57800 x28: ffff000011415c00 x27: 0000000000000001 [ 157.459818][ T21] x26: 0000000000000001 x25: 0000000000000002 x24: 1fffe00002617bbe [ 157.460337][ T21] x23: ffff0000130bdde8 x22: ffff80000de5cd50 x21: ffff000009f32ee0 [ 157.461589][ T21] x20: ffff0000130bddc0 x19: ffff0000137b8c40 x18: ffff00006a9eab88 [ 157.462158][ T21] x17: 00000000e09a4f32 x16: 00000000c23598c4 x15: ffff00006a9eabc4 [ 157.462706][ T21] x14: 1ffff0000218aece x13: 0000000000000000 x12: ffff6000013e65de [ 157.463290][ T21] x11: ffff700001bcb9aa x10: dfff800000000000 x9 : 0000000000000003 [ 157.463876][ T21] x8 : ffff80000de5c000 x7 : 1fffe000026f71b9 x6 : 0000000000000000 [ 157.464420][ T21] x5 : ffff0000137b8dc8 x4 : ffff80000de5cb68 x3 : ffff800009f2d9f4 [ 157.464985][ T21] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 157.465583][ T21] Call trace: [ 157.465892][ T21] wg_packet_send_staged_packets+0xe38/0x1380 [ 157.466268][ T21] wg_packet_send_keepalive+0x40/0x2a0 [ 157.466618][ T21] wg_receive_handshake_packet+0x2c8/0x7c0 [ 157.467036][ T21] wg_packet_handshake_receive_worker+0xd8/0x2ec [ 157.467472][ T21] process_one_work+0x780/0x184c [ 157.467966][ T21] worker_thread+0x3cc/0xc40 [ 157.468315][ T21] kthread+0x23c/0x2a0 [ 157.468704][ T21] ret_from_fork+0x10/0x20 [ 157.469091][ T21] irq event stamp: 35809 [ 157.469436][ T21] hardirqs last enabled at (35807): [] seqcount_lockdep_reader_access.constprop.0+0xc4/0xe0 [ 157.470004][ T21] hardirqs last disabled at (35809): [] el1_dbg+0x24/0x80 [ 157.470443][ T21] softirqs last enabled at (35804): [] wg_packet_send_staged_packets+0x20c/0x1380 [ 157.470940][ T21] softirqs last disabled at (35808): [] wg_packet_send_staged_packets+0x460/0x1380 [ 157.471500][ T21] ---[ end trace 0000000000000000 ]--- 1970/01/01 00:02:39 building call list... executing program [ 159.956620][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.296395][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.599934][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.928233][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 164.539754][ T44] device hsr_slave_0 left promiscuous mode [ 164.591156][ T44] device hsr_slave_1 left promiscuous mode [ 164.748516][ T44] device veth1_macvtap left promiscuous mode [ 164.750961][ T44] device veth0_macvtap left promiscuous mode [ 164.754498][ T44] device veth1_vlan left promiscuous mode [ 164.756292][ T44] device veth0_vlan left promiscuous mode executing program [ 168.444175][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.585030][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface executing program [ 169.376601][ T44] bond0 (unregistering): Released all slaves executing program executing program executing program executing program executing program [ 184.682802][ T2200] can: request_module (can-proto-0) failed. [ 185.054750][ T2200] can: request_module (can-proto-0) failed. [ 185.364763][ T2200] can: request_module (can-proto-0) failed. executing program VM DIAGNOSIS: 23:17:18 Registers: info registers vcpu 0 PC=ffff8000087e0350 X00=ffff8000083524c0 X01=ffff80000b9b6eb0 X02=0000000000000007 X03=0000000000000000 X04=1ffff00002222d19 X05=ffff000069ec8ac0 X06=ffff00006a3acde8 X07=0000000000000080 X08=ffff600002091910 X09=0000000000000000 X10=ffff6000026f70b8 X11=1ffff00002222d16 X12=ffff700002222d17 X13=0000000000000000 X14=1ffff00002222cec X15=ffff800011116de4 X16=0000000000000000 X17=1ffff00002222dc4 X18=0000000000000000 X19=ffff000012eb8000 X20=ffff80000c992380 X21=ffff0000137b8578 X22=ffff00000ae0d5a8 X23=0000000000000a20 X24=ffff800011116dd4 X25=ffff800011116db0 X26=ffff0000116b1ca8 X27=0000000000000000 X28=0000000000000078 X29=ffff800011116c70 X30=ffff80000c910420 SP=ffff800011116ad0 PSTATE=80000005 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:0000000000000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000096b0790 X00=0000000000000002 X01=0000000000000000 X02=0000000000000002 X03=1fffe0000135662e X04=0000000000000000 X05=0000000000000002 X06=1fffe0000135662e X07=0000000000000030 X08=ffff800010ab6a73 X09=dfff800000000000 X10=ffff700002156d4e X11=1ffff00002156d4e X12=ffff700002156d4f X13=0000000000000000 X14=1ffff00002156d24 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000046f7e927 X19=ffff000009ab3080 X20=ffff80000e573720 X21=ffff800010aad000 X22=0000000000000020 X23=dfff800000000000 X24=ffff8000107777db X25=0000000000000001 X26=ffff000009ab3080 X27=dfff800000000000 X28=000000000000003b X29=ffff800010ab6a50 X30=ffff8000096b0790 SP=ffff800010ab6a50 PSTATE=800003c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=0000000000000000:0000000000000000 Q02=0000000000000000:0000000000000000 Q03=0000000000000000:0000000000000000 Q04=0000000000000000:0000000000000000 Q05=0000000000000000:0000000000000000 Q06=0000000000000000:0000000000000000 Q07=0000000000000000:0000000000000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000000000:0000000000000000 Q17=0000000000000000:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000