[ 279.225929][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 279.258711][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 279.301723][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 279.332871][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:35986' (ECDSA) to the list of known hosts. 1970/01/01 00:05:44 fuzzer started 1970/01/01 00:05:55 dialing manager at localhost:44711 [ 361.649730][ T2026] cgroup: Unknown subsys name 'net' [ 363.240782][ T2026] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:03 syscalls: 2918 1970/01/01 00:06:03 code coverage: enabled 1970/01/01 00:06:03 comparison tracing: ioctl(KCOV_DISABLE) failed: invalid argument 1970/01/01 00:06:03 extra coverage: enabled 1970/01/01 00:06:03 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:03 setuid sandbox: enabled 1970/01/01 00:06:03 namespace sandbox: enabled 1970/01/01 00:06:03 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:03 fault injection: enabled 1970/01/01 00:06:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:03 net packet injection: enabled 1970/01/01 00:06:03 net device setup: enabled 1970/01/01 00:06:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:03 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:03 USB emulation: enabled 1970/01/01 00:06:03 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:03 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:03 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:03 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:10 fetching corpus: 49, signal 32577/35797 (executing program) 1970/01/01 00:06:13 fetching corpus: 99, signal 47776/52093 (executing program) 1970/01/01 00:06:17 fetching corpus: 149, signal 56599/61926 (executing program) 1970/01/01 00:06:20 fetching corpus: 199, signal 64262/70516 (executing program) 1970/01/01 00:06:23 fetching corpus: 248, signal 71628/78582 (executing program) 1970/01/01 00:06:26 fetching corpus: 298, signal 76113/83869 (executing program) 1970/01/01 00:06:29 fetching corpus: 348, signal 82728/90932 (executing program) 1970/01/01 00:06:31 fetching corpus: 398, signal 88606/97167 (executing program) 1970/01/01 00:06:35 fetching corpus: 448, signal 91433/100641 (executing program) 1970/01/01 00:06:39 fetching corpus: 497, signal 93909/103750 (executing program) 1970/01/01 00:06:42 fetching corpus: 547, signal 97579/107789 (executing program) 1970/01/01 00:06:44 fetching corpus: 597, signal 100164/110858 (executing program) 1970/01/01 00:06:47 fetching corpus: 647, signal 102851/113929 (executing program) 1970/01/01 00:06:49 fetching corpus: 697, signal 105516/116879 (executing program) 1970/01/01 00:06:54 fetching corpus: 747, signal 108314/119967 (executing program) 1970/01/01 00:06:57 fetching corpus: 796, signal 110043/122095 (executing program) 1970/01/01 00:07:00 fetching corpus: 845, signal 112483/124710 (executing program) 1970/01/01 00:07:03 fetching corpus: 895, signal 114327/126860 (executing program) 1970/01/01 00:07:05 fetching corpus: 943, signal 115992/128807 (executing program) 1970/01/01 00:07:09 fetching corpus: 993, signal 117621/130718 (executing program) 1970/01/01 00:07:11 fetching corpus: 1043, signal 120822/133757 (executing program) 1970/01/01 00:07:14 fetching corpus: 1093, signal 123419/136254 (executing program) 1970/01/01 00:07:17 fetching corpus: 1142, signal 125435/138272 (executing program) 1970/01/01 00:07:19 fetching corpus: 1192, signal 126651/139687 (executing program) 1970/01/01 00:07:22 fetching corpus: 1242, signal 127946/141082 (executing program) 1970/01/01 00:07:24 fetching corpus: 1292, signal 129350/142512 (executing program) 1970/01/01 00:07:27 fetching corpus: 1341, signal 130615/143857 (executing program) 1970/01/01 00:07:31 fetching corpus: 1391, signal 132701/145675 (executing program) 1970/01/01 00:07:34 fetching corpus: 1440, signal 134015/147011 (executing program) 1970/01/01 00:07:35 fetching corpus: 1490, signal 135720/148550 (executing program) 1970/01/01 00:07:38 fetching corpus: 1540, signal 136917/149684 (executing program) 1970/01/01 00:07:40 fetching corpus: 1590, signal 138594/151084 (executing program) 1970/01/01 00:07:43 fetching corpus: 1640, signal 140143/152411 (executing program) 1970/01/01 00:07:45 fetching corpus: 1690, signal 141992/153858 (executing program) 1970/01/01 00:07:49 fetching corpus: 1740, signal 143047/154834 (executing program) 1970/01/01 00:07:52 fetching corpus: 1790, signal 144760/156157 (executing program) 1970/01/01 00:07:57 fetching corpus: 1840, signal 145732/156991 (executing program) 1970/01/01 00:08:00 fetching corpus: 1890, signal 147088/158024 (executing program) 1970/01/01 00:08:02 fetching corpus: 1940, signal 148071/158868 (executing program) 1970/01/01 00:08:05 fetching corpus: 1989, signal 148851/159542 (executing program) 1970/01/01 00:08:08 fetching corpus: 2039, signal 150182/160488 (executing program) 1970/01/01 00:08:11 fetching corpus: 2089, signal 151321/161315 (executing program) 1970/01/01 00:08:14 fetching corpus: 2138, signal 152621/162141 (executing program) 1970/01/01 00:08:16 fetching corpus: 2188, signal 153646/162814 (executing program) 1970/01/01 00:08:18 fetching corpus: 2238, signal 154484/163424 (executing program) 1970/01/01 00:08:21 fetching corpus: 2288, signal 155668/164160 (executing program) 1970/01/01 00:08:24 fetching corpus: 2338, signal 156478/164668 (executing program) 1970/01/01 00:08:27 fetching corpus: 2388, signal 157714/165329 (executing program) 1970/01/01 00:08:29 fetching corpus: 2438, signal 159028/166023 (executing program) 1970/01/01 00:08:32 fetching corpus: 2488, signal 159608/166360 (executing program) 1970/01/01 00:08:34 fetching corpus: 2537, signal 160443/166816 (executing program) 1970/01/01 00:08:37 fetching corpus: 2587, signal 161528/167354 (executing program) 1970/01/01 00:08:40 fetching corpus: 2636, signal 162302/167753 (executing program) 1970/01/01 00:08:44 fetching corpus: 2686, signal 163405/168220 (executing program) 1970/01/01 00:08:47 fetching corpus: 2736, signal 164226/168575 (executing program) 1970/01/01 00:08:50 fetching corpus: 2785, signal 164985/168902 (executing program) 1970/01/01 00:08:52 fetching corpus: 2835, signal 165983/169316 (executing program) 1970/01/01 00:08:55 fetching corpus: 2885, signal 167546/169873 (executing program) 1970/01/01 00:08:58 fetching corpus: 2935, signal 168258/170144 (executing program) 1970/01/01 00:09:00 fetching corpus: 2960, signal 168929/170361 (executing program) 1970/01/01 00:09:00 fetching corpus: 2960, signal 168929/170381 (executing program) 1970/01/01 00:09:00 fetching corpus: 2960, signal 168929/170407 (executing program) 1970/01/01 00:09:00 fetching corpus: 2960, signal 168929/170424 (executing program) 1970/01/01 00:09:00 fetching corpus: 2960, signal 168929/170455 (executing program) 1970/01/01 00:09:00 fetching corpus: 2960, signal 168929/170478 (executing program) 1970/01/01 00:09:01 fetching corpus: 2960, signal 168929/170508 (executing program) 1970/01/01 00:09:01 fetching corpus: 2960, signal 168929/170538 (executing program) 1970/01/01 00:09:01 fetching corpus: 2960, signal 168929/170562 (executing program) 1970/01/01 00:09:01 fetching corpus: 2960, signal 168929/170585 (executing program) 1970/01/01 00:09:01 fetching corpus: 2960, signal 168929/170607 (executing program) 1970/01/01 00:09:01 fetching corpus: 2960, signal 168929/170630 (executing program) 1970/01/01 00:09:01 fetching corpus: 2960, signal 168929/170646 (executing program) 1970/01/01 00:09:02 fetching corpus: 2960, signal 168929/170664 (executing program) 1970/01/01 00:09:02 fetching corpus: 2960, signal 168929/170692 (executing program) 1970/01/01 00:09:02 fetching corpus: 2960, signal 168929/170718 (executing program) 1970/01/01 00:09:02 fetching corpus: 2960, signal 168929/170747 (executing program) 1970/01/01 00:09:02 fetching corpus: 2960, signal 168929/170765 (executing program) 1970/01/01 00:09:02 fetching corpus: 2960, signal 168929/170789 (executing program) 1970/01/01 00:09:02 fetching corpus: 2960, signal 168929/170822 (executing program) 1970/01/01 00:09:02 fetching corpus: 2960, signal 168929/170845 (executing program) 1970/01/01 00:09:03 fetching corpus: 2960, signal 168929/170864 (executing program) 1970/01/01 00:09:03 fetching corpus: 2960, signal 168929/170888 (executing program) 1970/01/01 00:09:03 fetching corpus: 2960, signal 168929/170906 (executing program) 1970/01/01 00:09:03 fetching corpus: 2960, signal 168929/170930 (executing program) 1970/01/01 00:09:03 fetching corpus: 2960, signal 168929/170945 (executing program) 1970/01/01 00:09:03 fetching corpus: 2960, signal 168929/170945 (executing program) 1970/01/01 00:11:15 starting 2 fuzzer processes 00:11:15 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x402c5342, &(0x7f0000000540)={{}, 'port0\x00'}) 00:11:15 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r0, 0x0, 0x38, 0x1061, 0x0, 0x0) [ 701.776552][ T2046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.403662][ T2046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.528344][ T2045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.075834][ T2045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.372573][ T2046] device hsr_slave_0 entered promiscuous mode [ 715.401703][ T2046] device hsr_slave_1 entered promiscuous mode [ 716.131569][ T2045] device hsr_slave_0 entered promiscuous mode [ 716.268625][ T2045] device hsr_slave_1 entered promiscuous mode [ 716.318958][ T2045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.322972][ T2045] Cannot create hsr debugfs directory [ 725.376024][ T2046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 725.691371][ T2046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 725.942752][ T2046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 726.409210][ T2046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 728.257521][ T2045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 728.598686][ T2045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 728.852184][ T2045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 729.092277][ T2045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 748.700289][ T2045] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 748.710179][ T2045] CPU: 0 PID: 2045 Comm: syz-executor.0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 748.713596][ T2045] Hardware name: riscv-virtio,qemu (DT) [ 748.715311][ T2045] Call Trace: [ 748.716824][ T2045] [] dump_backtrace+0x2e/0x3c [ 748.718285][ T2045] [] show_stack+0x34/0x40 [ 748.719544][ T2045] [] dump_stack_lvl+0xe4/0x150 [ 748.720851][ T2045] [] dump_stack+0x1c/0x24 [ 748.722070][ T2045] [] panic+0x24a/0x634 [ 748.723253][ T2045] [] schedule+0x0/0x14c [ 748.725028][ T2045] [] preempt_schedule_common+0x4e/0xde [ 748.727091][ T2045] [] preempt_schedule+0x34/0x36 [ 748.728431][ T2045] [] _raw_spin_unlock_irqrestore+0x8c/0x98 [ 748.729808][ T2045] [] pcpu_alloc+0x7ca/0x1278 [ 748.731156][ T2045] [] __alloc_percpu_gfp+0x28/0x36 [ 748.732505][ T2045] [] fib_nh_common_init+0xa8/0x22e [ 748.733766][ T2045] [] fib_nh_init+0x6e/0x1fc [ 748.735543][ T2045] [] fib_create_info+0x1dc4/0x2d8e [ 748.736934][ T2045] [] fib_table_insert+0x1a0/0xebe [ 748.738684][ T2045] [] fib_magic+0x3f4/0x438 [ 748.740037][ T2045] [] fib_add_ifaddr+0x2be/0x2e2 [ 748.741441][ T2045] [] fib_netdev_event+0x362/0x4b0 [ 748.742688][ T2045] [] notifier_call_chain+0xb8/0x188 [ 748.744161][ T2045] [] raw_notifier_call_chain+0x2a/0x38 [ 748.745867][ T2045] [] call_netdevice_notifiers_info+0x9e/0x10c [ 748.747157][ T2045] [] __dev_notify_flags+0x108/0x1fa [ 748.748485][ T2045] [] dev_change_flags+0x9c/0xba [ 748.749748][ T2045] [] do_setlink+0x5d6/0x21c4 [ 748.751102][ T2045] [] __rtnl_newlink+0x99e/0xfa0 [ 748.752407][ T2045] [] rtnl_newlink+0x60/0x8c [ 748.753663][ T2045] [] rtnetlink_rcv_msg+0x338/0x9a0 [ 748.755417][ T2045] [] netlink_rcv_skb+0xf8/0x2be [ 748.756622][ T2045] [] rtnetlink_rcv+0x26/0x30 [ 748.757824][ T2045] [] netlink_unicast+0x40e/0x5fe [ 748.759021][ T2045] [] netlink_sendmsg+0x4e0/0x994 [ 748.760179][ T2045] [] sock_sendmsg+0xa0/0xc4 [ 748.761385][ T2045] [] __sys_sendto+0x1f2/0x2e0 [ 748.762517][ T2045] [] sys_sendto+0x3e/0x52 [ 748.763789][ T2045] [] ret_from_syscall+0x0/0x2 [ 748.766099][ T2045] SMP: stopping secondary CPUs [ 748.768779][ T2045] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:00:07 Registers: info registers vcpu 0 pc ffffffff8011dac4 mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80475786 sepc ffffffff831afd22 mcause 8000000000000007 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8011dac4 x2/sp ffffaf801078e0f0 x3/gp ffffffff85863ac0 x4/tp ffffaf800ecf6100 x5/t0 ffffffff86bcb657 x6/t1 fffffffef0b0caa0 x7/t2 0000000000000000 x8/s0 ffffaf801078e130 x9/s1 0000000000000000 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 0000000000000001 x13/a3 ffffffff8011dac4 x14/a4 0000000000000003 x15/a5 0000000000000004 x16/a6 ffffffff85865500 x17/a7 ffffffff85865503 x18/s2 ffffffff838d2e20 x19/s3 0000000000000000 x20/s4 ffffffffffffffff x21/s5 ffffaf801078e1e0 x22/s6 ffffffff83623360 x23/s7 ffffffff8344cc80 x24/s8 ffffffff831a6b00 x25/s9 ffffaf801078c000 x26/s10 00000000000000c0 x27/s11 ffffaf800d5e7e60 x28/t3 fffffffff3f3f300 x29/t4 fffffffef0b0caa0 x30/t5 fffffffef0b0caa1 x31/t6 ffffaf801078dc78 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80475986 mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc 00000000000836f8 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80c25a6e x2/sp ffffaf800ed77c80 x3/gp ffffffff85863ac0 x4/tp ffffaf800ba61840 x5/t0 0000000000046000 x6/t1 882840441e6feb00 x7/t2 0000000000000000 x8/s0 ffffaf800ed77d30 x9/s1 ffffaf805a9f4d40 x10/a0 ffffaf805a9f4c98 x11/a1 ffffaf800ba62840 x12/a2 0000000000000002 x13/a3 0000000000000000 x14/a4 0000000000000000 x15/a5 ffffaf800bc599c0 x16/a6 0000000000f00000 x17/a7 00000000015b9e3c x18/s2 0000000000000319 x19/s3 00000000000003eb x20/s4 000000000000b997 x21/s5 0000000002d7a23c x22/s6 000000000000b5e3 x23/s7 0000000000005f01 x24/s8 ffffffff86c1a620 x25/s9 0000000000000001 x26/s10 ffffaf800bc59840 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f001daef48 x31/t6 0000000000083418 f0/ft0 0000000000000000 f1/ft1 40834140935f4855 f2/ft2 412702a000000000 f3/ft3 41c475b93a000000 f4/ft4 4101228000000000 f5/ft5 4038646eea247c5c f6/ft6 3fe0000000000000 f7/ft7 3fc27656d82eaa60 f8/fs0 3fee051307b4c826 f9/fs1 3fcd7c34ad3d1fd8 f10/fa0 bfb2658ef69d74fa f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000