syzkaller login: [ 94.994196][ T2051] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 95.017969][ T2051] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 95.023372][ T2051] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:54341' (ECDSA) to the list of known hosts. 1970/01/01 00:02:21 fuzzer started 1970/01/01 00:02:26 connecting to host at localhost:36175 1970/01/01 00:02:26 checking machine... 1970/01/01 00:02:26 checking revisions... 1970/01/01 00:02:28 testing simple program... [ 149.166134][ T2212] cgroup: Unknown subsys name 'net' [ 149.666185][ T2212] cgroup: Unknown subsys name 'rlimit' executing program executing program [ 155.314299][ T2215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.342371][ T2215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program [ 158.105083][ T2215] device hsr_slave_0 entered promiscuous mode [ 158.195808][ T2215] device hsr_slave_1 entered promiscuous mode executing program [ 160.240852][ T2215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.468387][ T2215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.553465][ T2215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.635251][ T2215] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program [ 162.581145][ T2215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.674950][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.695801][ T1689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.958981][ T2213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.965493][ T2213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.032720][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.045087][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.110987][ T2213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.161415][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.269157][ T2213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.274419][ T2213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.338712][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.345708][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.393089][ T2215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 165.411050][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.412956][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program [ 168.059643][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.092827][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.302698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.312104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.356021][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.362195][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.373853][ T2215] device veth0_vlan entered promiscuous mode [ 169.501182][ T2215] device veth1_vlan entered promiscuous mode [ 169.744881][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.752054][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.799649][ T2215] device veth0_macvtap entered promiscuous mode [ 169.861080][ T2215] device veth1_macvtap entered promiscuous mode [ 170.035710][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.046094][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.059987][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.071716][ T2532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.198502][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.220830][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.269224][ T2215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.270993][ T2215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.271571][ T2215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.272092][ T2215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.611428][ C1] ------------[ cut here ]------------ [ 170.612091][ C1] WARNING: CPU: 1 PID: 27 at include/linux/cpumask.h:110 wg_cpumask_next_online+0x1c0/0x2c0 [ 170.612565][ C1] Modules linked in: [ 170.612840][ C1] CPU: 1 PID: 27 Comm: kworker/u4:1 Tainted: G W 6.0.0-syzkaller-11161-g041bc24d867a #0 [ 170.613124][ C1] Hardware name: linux,dummy-virt (DT) [ 170.613502][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 170.614013][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 170.614286][ C1] pc : wg_cpumask_next_online+0x1c0/0x2c0 [ 170.614649][ C1] lr : wg_packet_receive+0x978/0x1560 [ 170.616318][ C1] sp : ffff800010ab7480 [ 170.617110][ C1] x29: ffff800010ab7480 x28: 0000000000000001 x27: 1fffe000026e7219 [ 170.618155][ C1] x26: 0000000000000000 x25: ffff80000de5c000 x24: 0000000000000000 [ 170.619033][ C1] x23: 0000000000000003 x22: ffff80000de5cb68 x21: 0000000000000001 [ 170.619602][ C1] x20: ffff0000137390c8 x19: ffff80000de5cd50 x18: 00000000f5d4b806 [ 170.620161][ C1] x17: ffff80005cbe4000 x16: ffff800010ab8000 x15: ffff000013959a28 [ 170.620734][ C1] x14: 1ffff00002156e68 x13: 0000000000000000 x12: ffff6000026e7291 [ 170.621330][ C1] x11: 1fffe000026e7290 x10: ffff6000026e7290 x9 : dfff800000000000 [ 170.622150][ C1] x8 : ffff000013739483 x7 : 00009ffffd918d70 x6 : 0000000000000001 [ 170.622771][ C1] x5 : ffff000013739480 x4 : ffff700001bcb9aa x3 : dfff800000000000 [ 170.623341][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 170.623962][ C1] Call trace: [ 170.624905][ C1] wg_cpumask_next_online+0x1c0/0x2c0 [ 170.625590][ C1] wg_packet_receive+0x978/0x1560 [ 170.625956][ C1] wg_receive+0x58/0xb0 [ 170.626727][ C1] udpv6_queue_rcv_one_skb+0x8f4/0x17c0 [ 170.627516][ C1] udpv6_queue_rcv_skb+0x134/0x7e0 [ 170.628096][ C1] udp6_unicast_rcv_skb+0xe8/0x270 [ 170.628450][ C1] __udp6_lib_rcv+0x8a4/0x2330 [ 170.628806][ C1] udpv6_rcv+0x1c/0x2c [ 170.629143][ C1] ip6_protocol_deliver_rcu+0x154/0x14f0 [ 170.629501][ C1] ip6_input_finish+0x108/0x220 [ 170.629885][ C1] ip6_input+0xbc/0x2b0 [ 170.630219][ C1] ipv6_rcv+0x39c/0x47c [ 170.630552][ C1] __netif_receive_skb_one_core+0xf4/0x170 [ 170.630920][ C1] __netif_receive_skb+0x24/0x184 [ 170.631267][ C1] process_backlog+0x24c/0x6b0 [ 170.631602][ C1] __napi_poll+0x94/0x3a4 [ 170.631922][ C1] net_rx_action+0x78c/0xb60 [ 170.632265][ C1] _stext+0x28c/0x107c [ 170.632596][ C1] ____do_softirq+0x10/0x20 [ 170.632982][ C1] call_on_irq_stack+0x2c/0x54 [ 170.633320][ C1] do_softirq_own_stack+0x1c/0x30 [ 170.633693][ C1] do_softirq.part.0+0xd0/0xf4 [ 170.634036][ C1] __local_bh_enable_ip+0x50c/0x5d0 [ 170.634373][ C1] _raw_read_unlock_bh+0x54/0x64 [ 170.635389][ C1] wg_socket_send_skb_to_peer+0xf0/0x190 [ 170.635765][ C1] wg_socket_send_buffer_to_peer+0x110/0x160 [ 170.636126][ C1] wg_packet_send_handshake_initiation+0x1a8/0x274 [ 170.636632][ C1] wg_packet_handshake_send_worker+0x1c/0x34 [ 170.637060][ C1] process_one_work+0x780/0x184c [ 170.637432][ C1] worker_thread+0x3cc/0xc40 [ 170.637796][ C1] kthread+0x23c/0x2a0 [ 170.638129][ C1] ret_from_fork+0x10/0x20 [ 170.638462][ C1] irq event stamp: 288791 [ 170.638773][ C1] hardirqs last enabled at (288790): [] __local_bh_enable_ip+0x1e4/0x5d0 [ 170.639194][ C1] hardirqs last disabled at (288791): [] el1_dbg+0x24/0x80 [ 170.639607][ C1] softirqs last enabled at (288782): [] wg_socket_send_skb_to_peer+0xf0/0x190 [ 170.640036][ C1] softirqs last disabled at (288783): [] ____do_softirq+0x10/0x20 [ 170.640458][ C1] ---[ end trace 0000000000000000 ]--- [ 170.702204][ C1] ------------[ cut here ]------------ [ 170.703019][ C1] WARNING: CPU: 1 PID: 21 at include/linux/cpumask.h:110 wg_packet_send_staged_packets+0xe38/0x1380 [ 170.703885][ C1] Modules linked in: [ 170.704402][ C1] CPU: 1 PID: 21 Comm: kworker/1:0 Tainted: G W 6.0.0-syzkaller-11161-g041bc24d867a #0 [ 170.705870][ C1] Hardware name: linux,dummy-virt (DT) [ 170.706310][ C1] Workqueue: wg-crypt-wg0 wg_packet_decrypt_worker [ 170.706754][ C1] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 170.707248][ C1] pc : wg_packet_send_staged_packets+0xe38/0x1380 [ 170.707624][ C1] lr : wg_packet_send_staged_packets+0x524/0x1380 [ 170.707990][ C1] sp : ffff800010ab7960 [ 170.708305][ C1] x29: ffff800010ab7960 x28: ffff0000143c2000 x27: 0000000000000001 [ 170.708907][ C1] x26: 0000000000000001 x25: 0000000000000002 x24: 1fffe0000261e91e [ 170.709485][ C1] x23: ffff0000130f48e8 x22: ffff80000de5cd50 x21: ffff000015320960 [ 170.710080][ C1] x20: ffff0000130f48c0 x19: ffff000013738c40 x18: ffff00006a9eab88 [ 170.710675][ C1] x17: ffff80005cbe4000 x16: ffff800010ab8000 x15: 0000000000008000 [ 170.711226][ C1] x14: 1ffff00002156efa x13: 1fffe0000125b4b3 x12: ffff600002a6412e [ 170.712549][ C1] x11: ffff700001bcb9aa x10: dfff800000000000 x9 : 0000000000000003 [ 170.713141][ C1] x8 : ffff80000de5c000 x7 : 1fffe000026e71b9 x6 : 0000000000000000 [ 170.713874][ C1] x5 : ffff000013738dc8 x4 : ffff80000de5cb68 x3 : ffff800009f2d9f4 [ 170.714531][ C1] x2 : 0000000000000002 x1 : 0000000000000002 x0 : 0000000000000001 [ 170.715100][ C1] Call trace: [ 170.715402][ C1] wg_packet_send_staged_packets+0xe38/0x1380 [ 170.715799][ C1] wg_packet_rx_poll+0xd94/0x1580 [ 170.716524][ C1] __napi_poll+0x94/0x3a4 [ 170.716923][ C1] net_rx_action+0x78c/0xb60 [ 170.717343][ C1] _stext+0x28c/0x107c [ 170.717813][ C1] ____do_softirq+0x10/0x20 [ 170.718216][ C1] call_on_irq_stack+0x2c/0x54 [ 170.718649][ C1] do_softirq_own_stack+0x1c/0x30 [ 170.719725][ C1] do_softirq.part.0+0xd0/0xf4 [ 170.720267][ C1] __local_bh_enable_ip+0x50c/0x5d0 [ 170.721487][ C1] _raw_spin_unlock_bh+0x54/0x64 [ 170.722695][ C1] wg_packet_decrypt_worker+0x210/0x3c0 [ 170.723907][ C1] process_one_work+0x780/0x184c [ 170.724627][ C1] worker_thread+0x3cc/0xc40 [ 170.724969][ C1] kthread+0x23c/0x2a0 [ 170.725305][ C1] ret_from_fork+0x10/0x20 [ 170.725678][ C1] irq event stamp: 297 [ 170.725991][ C1] hardirqs last enabled at (296): [] seqcount_lockdep_reader_access.constprop.0+0xc4/0xe0 [ 170.726978][ C1] hardirqs last disabled at (297): [] el1_dbg+0x24/0x80 [ 170.727458][ C1] softirqs last enabled at (274): [] wg_packet_decrypt_worker+0x210/0x3c0 [ 170.727905][ C1] softirqs last disabled at (275): [] ____do_softirq+0x10/0x20 [ 170.728323][ C1] ---[ end trace 0000000000000000 ]--- executing program 1970/01/01 00:02:51 building call list... [ 172.361589][ T27] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.641759][ T27] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.828141][ T27] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.085332][ T27] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 176.252837][ T27] device hsr_slave_0 left promiscuous mode [ 176.330038][ T27] device hsr_slave_1 left promiscuous mode [ 176.507107][ T27] device veth1_macvtap left promiscuous mode [ 176.511249][ T27] device veth0_macvtap left promiscuous mode [ 176.514756][ T27] device veth1_vlan left promiscuous mode [ 176.533674][ T27] device veth0_vlan left promiscuous mode executing program executing program [ 180.002837][ T27] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.220859][ T27] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.898805][ T27] bond0 (unregistering): Released all slaves executing program executing program executing program executing program executing program [ 194.898913][ T2209] can: request_module (can-proto-0) failed. [ 195.212307][ T2209] can: request_module (can-proto-0) failed. [ 195.511748][ T2209] can: request_module (can-proto-0) failed. executing program VM DIAGNOSIS: 18:33:33 Registers: info registers vcpu 0 PC=ffff80000b45ea58 X00=ffff80000b45ea50 X01=0000000000000000 X02=0000000000000000 X03=ffff000009223680 X04=dfff800000000000 X05=00000000f3f3f300 X06=1fffe000012446d2 X07=ffff70000216cf76 X08=00000000f1f1f1f1 X09=1ffff0000216cf76 X10=ffff6000012446d0 X11=1fffe000012446d0 X12=ffff6000012446d1 X13=1fffe00001244811 X14=1ffff0000216cf4a X15=ffff00006a9eabc4 X16=0000000000000002 X17=0000000000000000 X18=ffff00006a9eab88 X19=ffff80000e071e30 X20=0000000000000000 X21=0000000000000003 X22=0000000000000028 X23=ffff80000e071ec0 X24=dfff800000000000 X25=ffff80000e071e00 X26=0000000000000004 X27=ffff80000e071e30 X28=ffff000009223da0 X29=ffff800010b67ac0 X30=ffff800008392d88 SP=ffff800010b67ac0 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=30253a3a30386566:000a2e6574656c70 Q02=388e9c6c4fa85ca0:0000000000007832 Q03=0000000000000000:ff00000000000000 Q04=0000000000000000:ffffffffffff0000 Q05=0010000000000000:4000000000000000 Q06=0000000000000000:4010040140100000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000555010004000:0000555010004000 Q17=000000ff00ff00ff:000000ff00ff00ff Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff80000b45ea58 X00=ffff80000b45ea50 X01=0000000000000000 X02=1fffe0000d53d58f X03=0000000000000001 X04=ffff800010ab6e50 X05=ffff700002156d96 X06=ffff0000093b1b40 X07=00000000f2f2f2f2 X08=00000000f3f3f300 X09=00000000f2000000 X10=00000000f204f204 X11=00000000f3f3f3f3 X12=00000000f1f1f1f1 X13=0000000000000000 X14=1ffff00002156d5c X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=00000000f5d4b806 X19=ffff80000e071e30 X20=0000000000000000 X21=0000000000000003 X22=0000000000000028 X23=ffff80000e071ec0 X24=dfff800000000000 X25=ffff80000e071e00 X26=0000000000000004 X27=ffff80000e071e30 X28=ffff800008031404 X29=ffff800010ab6b90 X30=ffff800008392d88 SP=ffff800010ab6b90 PSTATE=800003c5 N--- EL1h FPCR=00000000 FPSR=00000000 Q00=0000000000000000:0000000000000000 Q01=30253a3a30386566:000a2e6574656c70 Q02=388e9c6c4fa85ca0:0000000000007832 Q03=0000000000000000:ff00000000000000 Q04=0000000000000000:ffffffffffff0000 Q05=0010000000000000:4000000000000000 Q06=0000000000000000:4010040140100000 Q07=4010040140100401:4010040140100401 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000555010004000:0000555010004000 Q17=000000ff00ff00ff:000000ff00ff00ff Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000