syzbot

infiniband syz2: set active
infiniband syz0: set active
==================================================================
BUG: KASAN: null-ptr-deref in __seqprop_raw_spinlock_sequence include/linux/seqlock.h:274 [inline]
BUG: KASAN: null-ptr-deref in hrtimer_active+0x4e/0xf8 kernel/time/hrtimer.c:1614
Read of size 4 at addr 0000000000000010 by task syz-executor.0/16762

CPU: 1 PID: 16762 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-g533925cb7604 #0
Hardware name: riscv-virtio,qemu (DT)
Call Trace:
[<ffffffff8000a660>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:121
[<ffffffff834fe364>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:127
[<ffffffff8353e58a>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff8353e58a>] dump_stack_lvl+0xe0/0x14c lib/dump_stack.c:106
[<ffffffff835056ae>] print_report+0x4e2/0x4fe mm/kasan/report.c:478
[<ffffffff80540136>] kasan_report+0xbc/0x182 mm/kasan/report.c:588
[<ffffffff805412a6>] check_region_inline mm/kasan/generic.c:180 [inline]
[<ffffffff805412a6>] __asan_load4+0x80/0xa8 mm/kasan/generic.c:258
[<ffffffff801b2404>] __seqprop_raw_spinlock_sequence include/linux/seqlock.h:274 [inline]
[<ffffffff801b2404>] hrtimer_active+0x4e/0xf8 kernel/time/hrtimer.c:1614
[<ffffffff801b448c>] hrtimer_try_to_cancel kernel/time/hrtimer.c:1331 [inline]
[<ffffffff801b448c>] hrtimer_cancel+0x18/0x60 kernel/time/hrtimer.c:1446
[<ffffffff829d0b08>] napi_disable+0x138/0x1ba net/core/dev.c:6386
[<ffffffff81a3fa12>] veth_napi_del_range+0xa2/0x45e drivers/net/veth.c:1107
[<ffffffff81a40768>] veth_napi_del drivers/net/veth.c:1127 [inline]
[<ffffffff81a40768>] veth_set_features drivers/net/veth.c:1589 [inline]
[<ffffffff81a40768>] veth_set_features+0x146/0x232 drivers/net/veth.c:1567
[<ffffffff829f762c>] __netdev_update_features+0x582/0x1370 net/core/dev.c:9713
[<ffffffff829f849a>] netdev_update_features+0x80/0xee net/core/dev.c:9787
[<ffffffff81a4258e>] veth_xdp_set drivers/net/veth.c:1690 [inline]
[<ffffffff81a4258e>] veth_xdp+0x3a6/0x554 drivers/net/veth.c:1703
[<ffffffff8196d422>] bond_xdp_set drivers/net/bonding/bond_main.c:5624 [inline]
[<ffffffff8196d422>] bond_xdp+0x22c/0x632 drivers/net/bonding/bond_main.c:5670
[<ffffffff829d1156>] dev_xdp_install+0xe8/0x20e net/core/dev.c:9103
[<ffffffff829d8790>] dev_xdp_attach+0x576/0xa46 net/core/dev.c:9255
[<ffffffff829f700c>] dev_change_xdp_fd+0x21e/0x2bc net/core/dev.c:9501
[<ffffffff82a1fbe6>] do_setlink+0x215a/0x23ee net/core/rtnetlink.c:3089
[<ffffffff82a2c62e>] rtnl_group_changelink net/core/rtnetlink.c:3409 [inline]
[<ffffffff82a2c62e>] __rtnl_newlink+0xa3c/0xfdc net/core/rtnetlink.c:3665
[<ffffffff82a2cc2e>] rtnl_newlink+0x60/0x8c net/core/rtnetlink.c:3702
[<ffffffff82a212ce>] rtnetlink_rcv_msg+0x35e/0xb3c net/core/rtnetlink.c:6424
[<ffffffff82c092b8>] netlink_rcv_skb+0x100/0x2ce net/netlink/af_netlink.c:2549
[<ffffffff82a17ed2>] rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:6442
[<ffffffff82c07b78>] netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]
[<ffffffff82c07b78>] netlink_unicast+0x410/0x600 net/netlink/af_netlink.c:1365
[<ffffffff82c0828c>] netlink_sendmsg+0x524/0x9f6 net/netlink/af_netlink.c:1914
[<ffffffff8297b406>] sock_sendmsg_nosec net/socket.c:725 [inline]
[<ffffffff8297b406>] sock_sendmsg+0xa0/0xf2 net/socket.c:748
[<ffffffff8297bc58>] ____sys_sendmsg+0x51e/0x558 net/socket.c:2494
[<ffffffff82982794>] ___sys_sendmsg+0x124/0x1b6 net/socket.c:2548
[<ffffffff829829e0>] __sys_sendmsg+0xfc/0x1a8 net/socket.c:2577
[<ffffffff82982ab8>] __do_sys_sendmsg net/socket.c:2586 [inline]
[<ffffffff82982ab8>] sys_sendmsg+0x2c/0x3a net/socket.c:2584
[<ffffffff800096ec>] syscall_handler+0xfa/0x148 arch/riscv/include/asm/syscall.h:90
[<ffffffff8353fb16>] do_trap_ecall_u+0xea/0xec arch/riscv/kernel/traps.c:302
[<ffffffff80005a10>] ret_from_exception+0x0/0x64 arch/riscv/kernel/entry.S:102
==================================================================