syzkaller login: [ 281.893608][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 281.959256][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 292.638351][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:54046' (ECDSA) to the list of known hosts. 1970/01/01 00:06:07 fuzzer started 1970/01/01 00:06:20 dialing manager at localhost:41559 [ 386.461384][ T2026] cgroup: Unknown subsys name 'net' [ 387.481689][ T2026] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:27 syscalls: 2918 1970/01/01 00:06:27 code coverage: enabled 1970/01/01 00:06:27 comparison tracing: enabled 1970/01/01 00:06:27 extra coverage: enabled 1970/01/01 00:06:27 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:27 setuid sandbox: enabled 1970/01/01 00:06:27 namespace sandbox: enabled 1970/01/01 00:06:27 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:27 fault injection: enabled 1970/01/01 00:06:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:27 net packet injection: enabled 1970/01/01 00:06:27 net device setup: enabled 1970/01/01 00:06:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:27 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:27 USB emulation: enabled 1970/01/01 00:06:27 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:27 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:27 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:27 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:32 fetching corpus: 50, signal 27426/30921 (executing program) 1970/01/01 00:06:34 fetching corpus: 100, signal 41295/46112 (executing program) 1970/01/01 00:06:38 fetching corpus: 150, signal 52922/58794 (executing program) 1970/01/01 00:06:41 fetching corpus: 198, signal 59709/66737 (executing program) 1970/01/01 00:06:44 fetching corpus: 248, signal 64888/73022 (executing program) 1970/01/01 00:06:47 fetching corpus: 298, signal 70839/79910 (executing program) 1970/01/01 00:06:49 fetching corpus: 348, signal 75746/85741 (executing program) 1970/01/01 00:06:52 fetching corpus: 397, signal 80201/91063 (executing program) 1970/01/01 00:06:55 fetching corpus: 446, signal 82965/94736 (executing program) 1970/01/01 00:06:58 fetching corpus: 496, signal 88335/100702 (executing program) 1970/01/01 00:07:01 fetching corpus: 546, signal 91267/104424 (executing program) 1970/01/01 00:07:05 fetching corpus: 596, signal 96006/109635 (executing program) 1970/01/01 00:07:07 fetching corpus: 646, signal 98999/113277 (executing program) 1970/01/01 00:07:11 fetching corpus: 694, signal 101561/116467 (executing program) 1970/01/01 00:07:13 fetching corpus: 743, signal 106232/121382 (executing program) 1970/01/01 00:07:16 fetching corpus: 793, signal 108425/124133 (executing program) 1970/01/01 00:07:19 fetching corpus: 843, signal 110244/126561 (executing program) 1970/01/01 00:07:25 fetching corpus: 892, signal 112953/129686 (executing program) 1970/01/01 00:07:28 fetching corpus: 942, signal 115513/132628 (executing program) 1970/01/01 00:07:31 fetching corpus: 989, signal 118924/136156 (executing program) 1970/01/01 00:07:33 fetching corpus: 1039, signal 120263/138086 (executing program) 1970/01/01 00:07:36 fetching corpus: 1087, signal 121675/139971 (executing program) 1970/01/01 00:07:38 fetching corpus: 1136, signal 123382/142088 (executing program) 1970/01/01 00:07:40 fetching corpus: 1186, signal 124690/143872 (executing program) 1970/01/01 00:07:42 fetching corpus: 1235, signal 126542/146032 (executing program) 1970/01/01 00:07:44 fetching corpus: 1285, signal 128316/148077 (executing program) 1970/01/01 00:07:46 fetching corpus: 1335, signal 129582/149777 (executing program) 1970/01/01 00:07:48 fetching corpus: 1384, signal 131242/151726 (executing program) 1970/01/01 00:07:52 fetching corpus: 1434, signal 132865/153602 (executing program) 1970/01/01 00:07:55 fetching corpus: 1483, signal 134344/155356 (executing program) 1970/01/01 00:07:59 fetching corpus: 1532, signal 135645/156909 (executing program) 1970/01/01 00:08:01 fetching corpus: 1582, signal 136567/158213 (executing program) 1970/01/01 00:08:04 fetching corpus: 1632, signal 138037/159879 (executing program) 1970/01/01 00:08:06 fetching corpus: 1681, signal 139143/161244 (executing program) 1970/01/01 00:08:09 fetching corpus: 1731, signal 140521/162700 (executing program) 1970/01/01 00:08:11 fetching corpus: 1781, signal 141772/164040 (executing program) 1970/01/01 00:08:14 fetching corpus: 1831, signal 143307/165585 (executing program) 1970/01/01 00:08:17 fetching corpus: 1880, signal 144829/167091 (executing program) 1970/01/01 00:08:20 fetching corpus: 1930, signal 146049/168368 (executing program) 1970/01/01 00:08:22 fetching corpus: 1979, signal 147038/169491 (executing program) 1970/01/01 00:08:25 fetching corpus: 2029, signal 148152/170640 (executing program) 1970/01/01 00:08:29 fetching corpus: 2079, signal 149171/171764 (executing program) 1970/01/01 00:08:32 fetching corpus: 2128, signal 149942/172740 (executing program) 1970/01/01 00:08:36 fetching corpus: 2176, signal 151016/173859 (executing program) 1970/01/01 00:08:40 fetching corpus: 2226, signal 152046/174913 (executing program) 1970/01/01 00:08:43 fetching corpus: 2275, signal 153188/176057 (executing program) 1970/01/01 00:08:46 fetching corpus: 2324, signal 154297/177092 (executing program) 1970/01/01 00:08:48 fetching corpus: 2373, signal 155676/178295 (executing program) 1970/01/01 00:08:50 fetching corpus: 2423, signal 156635/179252 (executing program) 1970/01/01 00:08:52 fetching corpus: 2471, signal 157660/180212 (executing program) 1970/01/01 00:08:55 fetching corpus: 2520, signal 158628/181144 (executing program) 1970/01/01 00:08:57 fetching corpus: 2569, signal 159482/181970 (executing program) 1970/01/01 00:09:00 fetching corpus: 2619, signal 160424/182811 (executing program) 1970/01/01 00:09:03 fetching corpus: 2669, signal 161248/183647 (executing program) 1970/01/01 00:09:06 fetching corpus: 2718, signal 161926/184372 (executing program) 1970/01/01 00:09:08 fetching corpus: 2767, signal 162690/185087 (executing program) 1970/01/01 00:09:10 fetching corpus: 2816, signal 163653/185872 (executing program) 1970/01/01 00:09:12 fetching corpus: 2865, signal 164301/186578 (executing program) 1970/01/01 00:09:16 fetching corpus: 2914, signal 165216/187361 (executing program) 1970/01/01 00:09:18 fetching corpus: 2964, signal 166017/188079 (executing program) 1970/01/01 00:09:21 fetching corpus: 3014, signal 167103/188864 (executing program) 1970/01/01 00:09:24 fetching corpus: 3064, signal 167898/189488 (executing program) 1970/01/01 00:09:27 fetching corpus: 3114, signal 168541/190079 (executing program) 1970/01/01 00:09:29 fetching corpus: 3164, signal 169123/190629 (executing program) 1970/01/01 00:09:31 fetching corpus: 3214, signal 170064/191292 (executing program) 1970/01/01 00:09:33 fetching corpus: 3264, signal 171589/192110 (executing program) 1970/01/01 00:09:35 fetching corpus: 3314, signal 172293/192633 (executing program) 1970/01/01 00:09:38 fetching corpus: 3364, signal 173285/193239 (executing program) 1970/01/01 00:09:41 fetching corpus: 3413, signal 174316/193846 (executing program) 1970/01/01 00:09:43 fetching corpus: 3463, signal 174899/194269 (executing program) 1970/01/01 00:09:46 fetching corpus: 3512, signal 175525/194720 (executing program) 1970/01/01 00:09:49 fetching corpus: 3561, signal 176522/195252 (executing program) 1970/01/01 00:09:52 fetching corpus: 3610, signal 177258/195718 (executing program) 1970/01/01 00:09:54 fetching corpus: 3660, signal 177950/196137 (executing program) 1970/01/01 00:09:56 fetching corpus: 3709, signal 178908/196628 (executing program) 1970/01/01 00:10:00 fetching corpus: 3759, signal 179607/197058 (executing program) 1970/01/01 00:10:02 fetching corpus: 3809, signal 180155/197439 (executing program) 1970/01/01 00:10:04 fetching corpus: 3857, signal 181052/197852 (executing program) 1970/01/01 00:10:09 fetching corpus: 3907, signal 181691/198213 (executing program) 1970/01/01 00:10:11 fetching corpus: 3954, signal 182325/198567 (executing program) 1970/01/01 00:10:13 fetching corpus: 4004, signal 183172/198932 (executing program) 1970/01/01 00:10:16 fetching corpus: 4054, signal 183750/199242 (executing program) 1970/01/01 00:10:19 fetching corpus: 4104, signal 184487/199537 (executing program) 1970/01/01 00:10:21 fetching corpus: 4152, signal 185146/199846 (executing program) 1970/01/01 00:10:23 fetching corpus: 4202, signal 185761/200137 (executing program) 1970/01/01 00:10:25 fetching corpus: 4252, signal 186359/200400 (executing program) 1970/01/01 00:10:28 fetching corpus: 4302, signal 187269/200691 (executing program) 1970/01/01 00:10:31 fetching corpus: 4351, signal 188273/200955 (executing program) 1970/01/01 00:10:34 fetching corpus: 4401, signal 189037/201204 (executing program) 1970/01/01 00:10:37 fetching corpus: 4451, signal 189525/201396 (executing program) 1970/01/01 00:10:40 fetching corpus: 4500, signal 190068/201590 (executing program) 1970/01/01 00:10:43 fetching corpus: 4550, signal 190675/201783 (executing program) 1970/01/01 00:10:45 fetching corpus: 4600, signal 191577/201982 (executing program) 1970/01/01 00:10:47 fetching corpus: 4650, signal 192185/202139 (executing program) 1970/01/01 00:10:50 fetching corpus: 4700, signal 192585/202278 (executing program) 1970/01/01 00:10:52 fetching corpus: 4748, signal 193122/202404 (executing program) 1970/01/01 00:10:54 fetching corpus: 4797, signal 193750/202511 (executing program) 1970/01/01 00:10:57 fetching corpus: 4846, signal 194213/202624 (executing program) 1970/01/01 00:11:00 fetching corpus: 4896, signal 194796/202712 (executing program) 1970/01/01 00:11:03 fetching corpus: 4946, signal 195394/202800 (executing program) 1970/01/01 00:11:04 fetching corpus: 4994, signal 195787/202832 (executing program) 1970/01/01 00:11:06 fetching corpus: 5044, signal 196247/202832 (executing program) 1970/01/01 00:11:09 fetching corpus: 5094, signal 196977/202832 (executing program) 1970/01/01 00:11:11 fetching corpus: 5144, signal 197752/202832 (executing program) 1970/01/01 00:11:14 fetching corpus: 5194, signal 198310/202998 (executing program) 1970/01/01 00:11:15 fetching corpus: 5243, signal 198666/203040 (executing program) 1970/01/01 00:11:17 fetching corpus: 5293, signal 199269/203040 (executing program) 1970/01/01 00:11:20 fetching corpus: 5343, signal 199879/203040 (executing program) 1970/01/01 00:11:23 fetching corpus: 5393, signal 200387/203041 (executing program) 1970/01/01 00:11:26 fetching corpus: 5443, signal 201049/203041 (executing program) 1970/01/01 00:11:27 fetching corpus: 5465, signal 201243/203041 (executing program) 1970/01/01 00:11:27 fetching corpus: 5465, signal 201243/203041 (executing program) 1970/01/01 00:13:13 starting 2 fuzzer processes 00:13:13 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect(r0, &(0x7f0000000240)=@un=@file={0x0, './file0\x00'}, 0x80) 00:13:13 executing program 1: semget(0x2, 0x4, 0x0) [ 822.470831][ T2042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.191080][ T2042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.290823][ T2040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.423394][ T2040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.519778][ T2042] device hsr_slave_0 entered promiscuous mode [ 836.562878][ T2042] device hsr_slave_1 entered promiscuous mode [ 838.669606][ T2040] device hsr_slave_0 entered promiscuous mode [ 838.700725][ T2040] device hsr_slave_1 entered promiscuous mode [ 838.739873][ T2040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 838.743000][ T2040] Cannot create hsr debugfs directory [ 846.668540][ T2042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 846.837666][ T2042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 846.973780][ T2042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 847.237933][ T2042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 848.429398][ T2040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 848.791053][ T2040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 849.103187][ T2040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 849.683767][ T2040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 857.801613][ T2042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.999006][ T2377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 859.068641][ T2377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 861.500573][ T2040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.822431][ T2040] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 861.825958][ T2040] CPU: 0 PID: 2040 Comm: syz-executor.0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 861.827410][ T2040] Hardware name: riscv-virtio,qemu (DT) [ 861.829770][ T2040] Call Trace: [ 861.830797][ T2040] [] dump_backtrace+0x2e/0x3c [ 861.831991][ T2040] [] show_stack+0x34/0x40 [ 861.833025][ T2040] [] dump_stack_lvl+0xe4/0x150 [ 861.834433][ T2040] [] dump_stack+0x1c/0x24 [ 861.835915][ T2040] [] panic+0x24a/0x634 [ 861.837060][ T2040] [] schedule+0x0/0x14c [ 861.838194][ T2040] [] preempt_schedule_common+0x4e/0xde [ 861.839437][ T2040] [] preempt_schedule+0x34/0x36 [ 861.840617][ T2040] [] _raw_spin_unlock_irqrestore+0x8c/0x98 [ 861.842538][ T2040] [] __stack_depot_save+0x384/0x4b2 [ 861.844903][ T2040] [] kasan_save_stack+0x40/0x58 [ 861.847079][ T2040] [] __kasan_slab_alloc+0x8e/0x98 [ 861.848587][ T2040] [] kmem_cache_alloc+0x338/0x3de [ 861.849977][ T2040] [] fill_pool+0x24a/0x35c [ 861.851309][ T2040] [] __debug_object_init+0x8e/0x7b8 [ 861.852635][ T2040] [] debug_object_activate+0x286/0x29a [ 861.853917][ T2040] [] call_rcu+0x3c/0x4ce [ 861.855775][ T2040] [] tnode_free+0x92/0xee [ 861.857149][ T2040] [] replace+0xc0/0x320 [ 861.858348][ T2040] [] resize+0xb04/0x18d2 [ 861.859575][ T2040] [] fib_insert_alias+0x63c/0x750 [ 861.860878][ T2040] [] fib_table_insert+0x3a8/0xebe [ 861.862210][ T2040] [] fib_magic+0x3f4/0x438 [ 861.863517][ T2040] [] fib_add_ifaddr+0xd2/0x2e2 [ 861.865756][ T2040] [] fib_inetaddr_event+0xfe/0x19e [ 861.867797][ T2040] [] notifier_call_chain+0xb8/0x188 [ 861.869234][ T2040] [] blocking_notifier_call_chain+0x50/0x78 [ 861.870614][ T2040] [] __inet_insert_ifa+0x6ca/0x7e4 [ 861.871965][ T2040] [] inet_rtm_newaddr+0x7c2/0xbc2 [ 861.873297][ T2040] [] rtnetlink_rcv_msg+0x338/0x9a0 [ 861.875357][ T2040] [] netlink_rcv_skb+0xf8/0x2be [ 861.877443][ T2040] [] rtnetlink_rcv+0x26/0x30 [ 861.878822][ T2040] [] netlink_unicast+0x40e/0x5fe [ 861.880077][ T2040] [] netlink_sendmsg+0x4e0/0x994 [ 861.881428][ T2040] [] sock_sendmsg+0xa0/0xc4 [ 861.882761][ T2040] [] __sys_sendto+0x1f2/0x2e0 [ 861.883969][ T2040] [] sys_sendto+0x3e/0x52 [ 861.886140][ T2040] [] ret_from_syscall+0x0/0x2 [ 861.887829][ T2040] SMP: stopping secondary CPUs [ 861.890494][ T2040] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:12:40 Registers: info registers vcpu 0 pc ffffffff831a195c mhartid 0000000000000000 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff803ecc6a mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8011649e x2/sp ffffaf8010083880 x3/gp ffffffff85863ac0 x4/tp ffffaf80114748c0 x5/t0 fffff5ef023cc807 x6/t1 8674e5e54f96a700 x7/t2 fffffffffffff000 x8/s0 ffffaf80100838e0 x9/s1 0000000000000002 x10/a0 ffffffff866d0770 x11/a1 0000000000000007 x12/a2 0000000000000008 x13/a3 ffffffff8011289a x14/a4 0000000000000000 x15/a5 ffffaf8011475328 x16/a6 ffffffff866d0598 x17/a7 ffffffff803e861e x18/s2 ffffffff866d0720 x19/s3 ffffffff86650390 x20/s4 ffffaf80114758c0 x21/s5 ffffffff831a2658 x22/s6 0000000000000000 x23/s7 ffffaf80114748c0 x24/s8 ffffffff803e861e x25/s9 ffffffff85889780 x26/s10 ffffaf800f14c650 x27/s11 00007fffb0b67000 x28/t3 fffffffff3f3f300 x29/t4 fffff5ef00eccd27 x30/t5 fffff5ef00eccd28 x31/t6 0000000000000006 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80c2c5c6 mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80475986 sepc ffffffff831afd22 mcause 8000000000000007 scause 8000000000000001 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80c2d4dc x2/sp ffffaf800f019a70 x3/gp ffffffff85863ac0 x4/tp ffffaf80074048c0 x5/t0 ffffffff86bd9460 x6/t1 fffff5ef01e03378 x7/t2 0000000000000000 x8/s0 ffffaf800f019b60 x9/s1 ffffffff8362ffc1 x10/a0 0000000000000000 x11/a1 ffffaf80074058c0 x12/a2 0000000000000003 x13/a3 ffffffff80c2d72c x14/a4 0000000000000003 x15/a5 0000000000000003 x16/a6 0000000000f00000 x17/a7 ffffaf800f019bc7 x18/s2 fffffffffffffffe x19/s3 ffffaf800f019c00 x20/s4 ffffffff80c38886 x21/s5 ffffffff8362ffc2 x22/s6 ffffaf800f019d50 x23/s7 1ffff5f001e03350 x24/s8 ffffffff85889780 x25/s9 0000000000000003 x26/s10 0000000000ffffff x27/s11 ffffffff838d6d80 x28/t3 1ffff5f001e03394 x29/t4 fffff5ef01e03378 x30/t5 fffff5ef01e03379 x31/t6 ffffaf800f019ebe f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000