Warning: Permanently added '[localhost]:26569' (ED25519) to the list of known hosts. syzkaller login: [ 466.245784][ T3197] ================================================================== [ 466.247412][ T3197] BUG: KASAN: global-out-of-bounds in memcmp+0xc0/0xca [ 466.250269][ T3197] Read of size 1 at addr ffffffff89804b80 by task syz-executor359/3197 [ 466.251149][ T3197] executing program [ 466.253962][ T3197] CPU: 1 UID: 0 PID: 3197 Comm: syz-executor359 Not tainted 6.14.0-rc1-syzkaller-g2014c95afece #0 [ 466.254868][ T3197] Hardware name: riscv-virtio,qemu (DT) [ 466.255625][ T3197] Call Trace: [ 466.256092][ T3197] [] dump_backtrace+0x2e/0x3c [ 466.256743][ T3197] [] show_stack+0x30/0x3c [ 466.257236][ T3197] [] dump_stack_lvl+0x12e/0x1a6 [ 466.257795][ T3197] [] print_report+0x28e/0x5aa [ 466.258264][ T3197] [] kasan_report+0xf0/0x214 [ 466.258759][ T3197] [] __asan_report_load1_noabort+0x12/0x1a [ 466.259378][ T3197] [] memcmp+0xc0/0xca [ 466.259908][ T3197] [] __hw_addr_add_ex+0xee/0x676 [ 466.260331][ T3197] [] dev_mc_add+0xac/0x108 [ 466.260802][ T3197] [] mrp_init_applicant+0xe8/0x56e [ 466.261253][ T3197] [] vlan_mvrp_init_applicant+0x26/0x30 [ 466.261721][ T3197] [] register_vlan_dev+0x1b4/0x922 [ 466.262319][ T3197] [] vlan_newlink+0x3ca/0x5fa [ 466.262752][ T3197] [] rtnl_newlink+0xbb4/0x1acc [ 466.263348][ T3197] [] rtnetlink_rcv_msg+0x9e2/0xdbe [ 466.263958][ T3197] [] netlink_rcv_skb+0x216/0x3dc [ 466.264408][ T3197] [] rtnetlink_rcv+0x26/0x30 [ 466.264967][ T3197] [] netlink_unicast+0x4f0/0x82c [ 466.265445][ T3197] [] netlink_sendmsg+0x864/0xdc6 [ 466.266207][ T3197] [] __sock_sendmsg+0xcc/0x160 [ 466.266805][ T3197] [] ____sys_sendmsg+0x5ce/0x79e [ 466.267396][ T3197] [] ___sys_sendmsg+0x144/0x1e6 [ 466.267793][ T3197] [] __sys_sendmsg+0x188/0x22a [ 466.268167][ T3197] [] __riscv_sys_sendmsg+0x70/0xa2 [ 466.268564][ T3197] [] syscall_handler+0x94/0x118 [ 466.269027][ T3197] [] do_trap_ecall_u+0x1aa/0x216 [ 466.269508][ T3197] [] handle_exception+0x146/0x152 [ 466.270394][ T3197] [ 466.290713][ T3197] The buggy address belongs to the variable: [ 466.291284][ T3197] vlan_mrp_app+0x60/0x3e80 [ 466.291988][ T3197] [ 466.292454][ T3197] The buggy address belongs to the physical page: [ 466.293458][ T3197] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x89a04 [ 466.294326][ T3197] flags: 0xffe000000002000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 466.296144][ T3197] raw: 0ffe000000002000 ff1c000000268108 ff1c000000268108 0000000000000000 [ 466.297105][ T3197] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 466.297986][ T3197] page dumped because: kasan: bad access detected [ 466.298887][ T3197] page_owner info is not present (never set?) [ 466.299504][ T3197] [ 466.299950][ T3197] Memory state around the buggy address: [ 466.300895][ T3197] ffffffff89804a80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.301596][ T3197] ffffffff89804b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.302262][ T3197] >ffffffff89804b80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.302886][ T3197] ^ [ 466.303495][ T3197] ffffffff89804c00: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 466.304152][ T3197] ffffffff89804c80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 466.304919][ T3197] ================================================================== [ 466.307177][ T3197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 466.308537][ T3197] CPU: 1 UID: 0 PID: 3197 Comm: syz-executor359 Not tainted 6.14.0-rc1-syzkaller-g2014c95afece #0 [ 466.309497][ T3197] Hardware name: riscv-virtio,qemu (DT) [ 466.310063][ T3197] Call Trace: [ 466.310545][ T3197] [] dump_backtrace+0x2e/0x3c [ 466.311307][ T3197] [] show_stack+0x30/0x3c [ 466.311999][ T3197] [] dump_stack_lvl+0x110/0x1a6 [ 466.312807][ T3197] [] dump_stack+0x1c/0x24 [ 466.313602][ T3197] [] panic+0x38c/0x870 [ 466.314318][ T3197] [] check_panic_on_warn+0xc0/0xe4 [ 466.315089][ T3197] [] end_report.part.0+0x4e/0xae [ 466.315863][ T3197] [] kasan_report+0x13a/0x214 [ 466.316644][ T3197] [] __asan_report_load1_noabort+0x12/0x1a [ 466.317522][ T3197] [] memcmp+0xc0/0xca [ 466.318342][ T3197] [] __hw_addr_add_ex+0xee/0x676 [ 466.319056][ T3197] [] dev_mc_add+0xac/0x108 [ 466.319748][ T3197] [] mrp_init_applicant+0xe8/0x56e [ 466.320456][ T3197] [] vlan_mvrp_init_applicant+0x26/0x30 [ 466.321216][ T3197] [] register_vlan_dev+0x1b4/0x922 [ 466.322014][ T3197] [] vlan_newlink+0x3ca/0x5fa [ 466.322699][ T3197] [] rtnl_newlink+0xbb4/0x1acc [ 466.323493][ T3197] [] rtnetlink_rcv_msg+0x9e2/0xdbe [ 466.324426][ T3197] [] netlink_rcv_skb+0x216/0x3dc [ 466.325293][ T3197] [] rtnetlink_rcv+0x26/0x30 [ 466.326110][ T3197] [] netlink_unicast+0x4f0/0x82c [ 466.326995][ T3197] [] netlink_sendmsg+0x864/0xdc6 [ 466.327815][ T3197] [] __sock_sendmsg+0xcc/0x160 [ 466.328792][ T3197] [] ____sys_sendmsg+0x5ce/0x79e [ 466.329679][ T3197] [] ___sys_sendmsg+0x144/0x1e6 [ 466.330412][ T3197] [] __sys_sendmsg+0x188/0x22a [ 466.331144][ T3197] [] __riscv_sys_sendmsg+0x70/0xa2 [ 466.331901][ T3197] [] syscall_handler+0x94/0x118 [ 466.332705][ T3197] [] do_trap_ecall_u+0x1aa/0x216 [ 466.333516][ T3197] [] handle_exception+0x146/0x152 [ 466.334628][ T3197] SMP: stopping secondary CPUs [ 466.337086][ T3197] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:47:44 Registers: info registers vcpu 0 CPU#0 V = 0 pc 000055558c62bd80 mhartid 0000000000000000 mstatus 8000000a000060a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861d40a4 vstvec 0000000000000000 mepc ffffffff800846e6 sepc 00007fff929eb564 vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000008 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch ff6000001a5bcec0 satp a013300000094eb3 x0/zero 0000000000000000 x1/ra 000055558c629838 x2/sp 00007ffff70ad900 x3/gp 000055558c6a1a78 x4/tp 00007fff928c6800 x5/t0 0000000000000000 x6/t1 0000000000000000 x7/t2 0000000000000000 x8/s0 000055558c6a47b0 x9/s1 0000000000000004 x10/a0 0000000000000004 x11/a1 0000000000000004 x12/a2 0000000000000000 x13/a3 0000000000000000 x14/a4 0000000000000000 x15/a5 0000000000000000 x16/a6 0000000000000000 x17/a7 00000000000000ac x18/s2 0000000000000000 x19/s3 00007fff92db1ce8 x20/s4 000055558c6a47b0 x21/s5 00005555cb73bda0 x22/s6 0000000000000004 x23/s7 000000000000005e x24/s8 0000000000000000 x25/s9 0000000000000004 x26/s10 00007ffff70ad920 x27/s11 000000000000001c x28/t3 00007fff929cf590 x29/t4 0000000000000000 x30/t5 0000000000000000 x31/t6 0000000000000000 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8617ffb2 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861d40a4 vstvec 0000000000000000 mepc ffffffff802ddcd2 sepc ffffffff802c3382 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp a013a000000a01a4 x0/zero 0000000000000000 x1/ra ffffffff8617ffb2 x2/sp ff20000007656b40 x3/gp ffffffff899f8ea0 x4/tp ff6000001ad6b480 x5/t0 ff20000007656934 x6/t1 fffffffef1340340 x7/t2 7320666f20646165 x8/s0 ff20000007656b80 x9/s1 ff20000007656bc0 x10/a0 ffffffff89b662c0 x11/a1 ffffffff8662714c x12/a2 0000000000000002 x13/a3 ffffffff8617ffb2 x14/a4 0000000000000000 x15/a5 ff6000001ad6c480 x16/a6 0000000000000003 x17/a7 0000000000000003 x18/s2 000000000000000b x19/s3 0000000000000000 x20/s4 000000000000000c x21/s5 0000000000000000 x22/s6 000000000000000c x23/s7 ffffffff89aff640 x24/s8 ff20000007656c20 x25/s9 0000000000000004 x26/s10 0000000000000000 x27/s11 ff6000001b5683c8 x28/t3 ffffffff802c492c x29/t4 fffffffef1340340 x30/t5 fffffffef1340341 x31/t6 ffffffff89b662cc fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000