DUID 00:04:99:cf:64:81:91:3a:f8:b3:88:a8:0e:05:2a:78:8a:13 forked to background, child pid 3185 [ 34.055255][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.064792][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2022/09/12 10:25:10 fuzzer started 2022/09/12 10:25:11 connecting to host at 10.128.0.169:33895 2022/09/12 10:25:11 checking machine... 2022/09/12 10:25:11 checking revisions... 2022/09/12 10:25:11 testing simple program... syzkaller login: [ 50.968742][ T3613] cgroup: Unknown subsys name 'net' [ 51.098290][ T3613] cgroup: Unknown subsys name 'rlimit' [ 52.313492][ T3618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.320936][ T3618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.328369][ T3618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.336350][ T3618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.344299][ T3618] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.351803][ T3618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.360169][ T3615] Bluetooth: hci0: HCI_REQ-0x0c1a [ 52.435505][ T3615] chnl_net:caif_netlink_parms(): no params data found [ 52.473233][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.480620][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.488747][ T3615] device bridge_slave_0 entered promiscuous mode [ 52.497304][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.504701][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.512373][ T3615] device bridge_slave_1 entered promiscuous mode [ 52.531573][ T3615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.543052][ T3615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.562718][ T3615] team0: Port device team_slave_0 added [ 52.570448][ T3615] team0: Port device team_slave_1 added [ 52.586813][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.594052][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.620659][ T3615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.632509][ T3615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.639945][ T3615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.667598][ T3615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.695019][ T3615] device hsr_slave_0 entered promiscuous mode [ 52.701965][ T3615] device hsr_slave_1 entered promiscuous mode [ 52.771802][ T3615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.781110][ T3615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.790862][ T3615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.799688][ T3615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.809682][ T3615] ------------[ cut here ]------------ [ 52.815494][ T3615] memcpy: detected field-spanning write (size 28) of single field "&endpoint.addr" at drivers/net/wireguard/netlink.c:446 (size 16) [ 52.830109][ T3615] WARNING: CPU: 1 PID: 3615 at drivers/net/wireguard/netlink.c:446 set_peer+0x991/0x10c0 [ 52.840147][ T3615] Modules linked in: [ 52.844153][ T3615] CPU: 0 PID: 3615 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220912-syzkaller #0 [ 52.854079][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 52.864645][ T3615] RIP: 0010:set_peer+0x991/0x10c0 [ 52.869688][ T3615] Code: 00 e8 53 99 b3 fc b9 10 00 00 00 48 c7 c2 00 45 72 8a be 1c 00 00 00 48 c7 c7 60 45 72 8a c6 05 d9 31 03 09 01 e8 d1 cc 74 04 <0f> 0b e9 03 04 00 00 e8 23 99 b3 fc 89 ee 44 89 ef e8 69 95 b3 fc [ 52.889548][ T3615] RSP: 0018:ffffc90003dbf540 EFLAGS: 00010282 [ 52.895714][ T3615] RAX: 0000000000000000 RBX: ffffc90003dbf6d8 RCX: 0000000000000000 [ 52.903741][ T3615] RDX: ffff888076890000 RSI: ffffffff81611eb8 RDI: fffff520007b7e9a [ 52.911744][ T3615] RBP: ffffc90003dbf5e8 R08: 0000000000000005 R09: 0000000000000000 [ 52.919964][ T3615] R10: 0000000080000000 R11: 7720676e696e6e6d R12: 000000000000001c [ 52.928008][ T3615] R13: 0000000000000000 R14: ffff888072ae0104 R15: ffff8880244d8960 [ 52.936059][ T3615] FS: 0000555556b4e400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 52.945189][ T3615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.951809][ T3615] CR2: 00007f1f510d32c0 CR3: 000000006eaf5000 CR4: 00000000003506f0 [ 52.960301][ T3615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.968522][ T3615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.977363][ T3615] Call Trace: [ 52.980658][ T3615] [ 52.983663][ T3615] ? wg_get_device_done+0x110/0x110 [ 52.988920][ T3615] ? nla_get_range_signed+0x520/0x520 [ 52.994765][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 52.999694][ T3615] ? __nla_parse+0x3d/0x50 [ 53.004409][ T3615] wg_set_device+0x8d7/0x11b0 [ 53.009254][ T3615] ? dql_completed+0x5b1/0x6a0 [ 53.014185][ T3615] ? set_peer+0x10c0/0x10c0 [ 53.018828][ T3615] ? __nla_parse+0x3d/0x50 [ 53.023258][ T3615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 53.030760][ T3615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 53.038523][ T3615] genl_family_rcv_msg_doit+0x228/0x320 [ 53.044131][ T3615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 53.051528][ T3615] ? ns_capable+0xd9/0x100 [ 53.056295][ T3615] genl_rcv_msg+0x3b7/0x630 [ 53.060844][ T3615] ? genl_get_cmd+0x480/0x480 [ 53.065821][ T3615] ? __alloc_skb+0xd9/0x2f0 [ 53.070626][ T3615] ? netlink_sendmsg+0x9a2/0xe10 [ 53.075851][ T3615] ? sock_sendmsg+0xcf/0x120 [ 53.080484][ T3615] ? set_peer+0x10c0/0x10c0 [ 53.085283][ T3615] ? rcu_read_unlock+0x40/0x40 [ 53.090145][ T3615] ? rcu_read_lock_sched_held+0xd/0x70 [ 53.095893][ T3615] netlink_rcv_skb+0x153/0x420 [ 53.100671][ T3615] ? genl_get_cmd+0x480/0x480 [ 53.105674][ T3615] ? netlink_ack+0xd50/0xd50 [ 53.110272][ T3615] ? netlink_deliver_tap+0x1b1/0xc40 [ 53.115904][ T3615] genl_rcv+0x24/0x40 [ 53.119917][ T3615] netlink_unicast+0x543/0x7f0 [ 53.124766][ T3615] ? netlink_attachskb+0x880/0x880 [ 53.129978][ T3615] ? __virt_addr_valid+0x5d/0x2d0 [ 53.135449][ T3615] ? __phys_addr_symbol+0x2c/0x70 [ 53.140513][ T3615] ? __check_object_size+0x2de/0x5a0 [ 53.145914][ T3615] netlink_sendmsg+0x917/0xe10 [ 53.150707][ T3615] ? netlink_unicast+0x7f0/0x7f0 [ 53.155766][ T3615] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 53.161116][ T3615] ? netlink_unicast+0x7f0/0x7f0 [ 53.166135][ T3615] sock_sendmsg+0xcf/0x120 [ 53.170585][ T3615] __sys_sendto+0x236/0x340 [ 53.175307][ T3615] ? __ia32_sys_getpeername+0xb0/0xb0 [ 53.180721][ T3615] ? lock_release+0x560/0x780 [ 53.185659][ T3615] ? lock_release+0x560/0x780 [ 53.190371][ T3615] ? __ct_user_exit+0xff/0x150 [ 53.195552][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 53.200649][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 53.205734][ T3615] ? fd_install+0x1f9/0x640 [ 53.210320][ T3615] ? vtime_user_exit+0x218/0x6c0 [ 53.215386][ T3615] __x64_sys_sendto+0xdd/0x1b0 [ 53.220193][ T3615] ? syscall_enter_from_user_mode+0x22/0xb0 [ 53.226254][ T3615] do_syscall_64+0x35/0xb0 [ 53.230697][ T3615] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.236871][ T3615] RIP: 0033:0x7f1f5003c18c [ 53.241401][ T3615] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 53.261086][ T3615] RSP: 002b:00007fff2fa6c2b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 53.269564][ T3615] RAX: ffffffffffffffda RBX: 00007f1f510d4320 RCX: 00007f1f5003c18c [ 53.277764][ T3615] RDX: 0000000000000170 RSI: 00007f1f510d4370 RDI: 0000000000000005 [ 53.285825][ T3615] RBP: 0000000000000000 R08: 00007fff2fa6c304 R09: 000000000000000c [ 53.293931][ T3615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 53.301928][ T3615] R13: 00007f1f510d4370 R14: 0000000000000005 R15: 0000000000000000 [ 53.310799][ T3615] [ 53.314328][ T3615] Kernel panic - not syncing: panic_on_warn set ... [ 53.320930][ T3615] CPU: 1 PID: 3615 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220912-syzkaller #0 [ 53.330738][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 53.340834][ T3615] Call Trace: [ 53.344110][ T3615] [ 53.347042][ T3615] dump_stack_lvl+0xcd/0x134 [ 53.351641][ T3615] panic+0x2c8/0x622 [ 53.356027][ T3615] ? panic_print_sys_info.part.0+0x110/0x110 [ 53.362138][ T3615] ? __warn.cold+0x248/0x2c4 [ 53.366755][ T3615] ? set_peer+0x991/0x10c0 [ 53.371189][ T3615] __warn.cold+0x259/0x2c4 [ 53.376051][ T3615] ? __wake_up_klogd.part.0+0x99/0xf0 [ 53.381437][ T3615] ? set_peer+0x991/0x10c0 [ 53.385879][ T3615] report_bug+0x1bc/0x210 [ 53.390238][ T3615] handle_bug+0x3c/0x60 [ 53.394389][ T3615] exc_invalid_op+0x14/0x40 [ 53.398896][ T3615] asm_exc_invalid_op+0x16/0x20 [ 53.403777][ T3615] RIP: 0010:set_peer+0x991/0x10c0 [ 53.408967][ T3615] Code: 00 e8 53 99 b3 fc b9 10 00 00 00 48 c7 c2 00 45 72 8a be 1c 00 00 00 48 c7 c7 60 45 72 8a c6 05 d9 31 03 09 01 e8 d1 cc 74 04 <0f> 0b e9 03 04 00 00 e8 23 99 b3 fc 89 ee 44 89 ef e8 69 95 b3 fc [ 53.428576][ T3615] RSP: 0018:ffffc90003dbf540 EFLAGS: 00010282 [ 53.434643][ T3615] RAX: 0000000000000000 RBX: ffffc90003dbf6d8 RCX: 0000000000000000 [ 53.442633][ T3615] RDX: ffff888076890000 RSI: ffffffff81611eb8 RDI: fffff520007b7e9a [ 53.450685][ T3615] RBP: ffffc90003dbf5e8 R08: 0000000000000005 R09: 0000000000000000 [ 53.458682][ T3615] R10: 0000000080000000 R11: 7720676e696e6e6d R12: 000000000000001c [ 53.466679][ T3615] R13: 0000000000000000 R14: ffff888072ae0104 R15: ffff8880244d8960 [ 53.474667][ T3615] ? vprintk+0x88/0x90 [ 53.478754][ T3615] ? wg_get_device_done+0x110/0x110 [ 53.484041][ T3615] ? nla_get_range_signed+0x520/0x520 [ 53.489405][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 53.494248][ T3615] ? __nla_parse+0x3d/0x50 [ 53.498654][ T3615] wg_set_device+0x8d7/0x11b0 [ 53.503325][ T3615] ? dql_completed+0x5b1/0x6a0 [ 53.508088][ T3615] ? set_peer+0x10c0/0x10c0 [ 53.512593][ T3615] ? __nla_parse+0x3d/0x50 [ 53.516999][ T3615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 53.524367][ T3615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 53.531749][ T3615] genl_family_rcv_msg_doit+0x228/0x320 [ 53.537292][ T3615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 53.544743][ T3615] ? ns_capable+0xd9/0x100 [ 53.549158][ T3615] genl_rcv_msg+0x3b7/0x630 [ 53.553739][ T3615] ? genl_get_cmd+0x480/0x480 [ 53.558422][ T3615] ? __alloc_skb+0xd9/0x2f0 [ 53.562947][ T3615] ? netlink_sendmsg+0x9a2/0xe10 [ 53.567890][ T3615] ? sock_sendmsg+0xcf/0x120 [ 53.572481][ T3615] ? set_peer+0x10c0/0x10c0 [ 53.576982][ T3615] ? rcu_read_unlock+0x40/0x40 [ 53.581863][ T3615] ? rcu_read_lock_sched_held+0xd/0x70 [ 53.587348][ T3615] netlink_rcv_skb+0x153/0x420 [ 53.592158][ T3615] ? genl_get_cmd+0x480/0x480 [ 53.596986][ T3615] ? netlink_ack+0xd50/0xd50 [ 53.601617][ T3615] ? netlink_deliver_tap+0x1b1/0xc40 [ 53.606907][ T3615] genl_rcv+0x24/0x40 [ 53.610883][ T3615] netlink_unicast+0x543/0x7f0 [ 53.615641][ T3615] ? netlink_attachskb+0x880/0x880 [ 53.620743][ T3615] ? __virt_addr_valid+0x5d/0x2d0 [ 53.625766][ T3615] ? __phys_addr_symbol+0x2c/0x70 [ 53.630789][ T3615] ? __check_object_size+0x2de/0x5a0 [ 53.636230][ T3615] netlink_sendmsg+0x917/0xe10 [ 53.640996][ T3615] ? netlink_unicast+0x7f0/0x7f0 [ 53.646034][ T3615] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 53.651336][ T3615] ? netlink_unicast+0x7f0/0x7f0 [ 53.656356][ T3615] sock_sendmsg+0xcf/0x120 [ 53.660857][ T3615] __sys_sendto+0x236/0x340 [ 53.665358][ T3615] ? __ia32_sys_getpeername+0xb0/0xb0 [ 53.670730][ T3615] ? lock_release+0x560/0x780 [ 53.675412][ T3615] ? lock_release+0x560/0x780 [ 53.680102][ T3615] ? __ct_user_exit+0xff/0x150 [ 53.685166][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 53.690019][ T3615] ? lock_downgrade+0x6e0/0x6e0 [ 53.694861][ T3615] ? fd_install+0x1f9/0x640 [ 53.699461][ T3615] ? vtime_user_exit+0x218/0x6c0 [ 53.704397][ T3615] __x64_sys_sendto+0xdd/0x1b0 [ 53.709171][ T3615] ? syscall_enter_from_user_mode+0x22/0xb0 [ 53.715060][ T3615] do_syscall_64+0x35/0xb0 [ 53.719576][ T3615] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.725472][ T3615] RIP: 0033:0x7f1f5003c18c [ 53.729972][ T3615] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 53.749936][ T3615] RSP: 002b:00007fff2fa6c2b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 53.758353][ T3615] RAX: ffffffffffffffda RBX: 00007f1f510d4320 RCX: 00007f1f5003c18c [ 53.766364][ T3615] RDX: 0000000000000170 RSI: 00007f1f510d4370 RDI: 0000000000000005 [ 53.774417][ T3615] RBP: 0000000000000000 R08: 00007fff2fa6c304 R09: 000000000000000c [ 53.782402][ T3615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 53.790492][ T3615] R13: 00007f1f510d4370 R14: 0000000000000005 R15: 0000000000000000 [ 53.798471][ T3615] [ 53.801720][ T3615] Kernel Offset: disabled [ 53.806043][ T3615] Rebooting in 86400 seconds..