Warning: Permanently added '[localhost]:58496' (ED25519) to the list of known hosts. 1970/01/01 00:08:36 fuzzer started 1970/01/01 00:08:46 dialing manager at localhost:30004 syzkaller login: [ 531.750481][ T3005] cgroup: Unknown subsys name 'net' [ 532.970364][ T3005] cgroup: Unknown subsys name 'rlimit' [ 587.365048][ T3005] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:09:46 syscalls: 211 1970/01/01 00:09:46 code coverage: enabled 1970/01/01 00:09:46 comparison tracing: enabled 1970/01/01 00:09:46 extra coverage: enabled 1970/01/01 00:09:46 delay kcov mmap: enabled 1970/01/01 00:09:46 setuid sandbox: enabled 1970/01/01 00:09:46 namespace sandbox: enabled 1970/01/01 00:09:46 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:09:46 fault injection: enabled 1970/01/01 00:09:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:09:46 net packet injection: enabled 1970/01/01 00:09:46 net device setup: enabled 1970/01/01 00:09:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:09:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:09:46 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:09:46 USB emulation: enabled 1970/01/01 00:09:46 hci packet injection: /dev/vhci does not exist 1970/01/01 00:09:46 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:09:46 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:09:46 swap file: enabled 1970/01/01 00:09:47 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:09:49 fetching corpus: 49, signal 24747/27080 (executing program) 1970/01/01 00:09:55 fetching corpus: 99, signal 30585/33487 (executing program) 1970/01/01 00:09:58 fetching corpus: 149, signal 32895/36430 (executing program) 1970/01/01 00:10:00 fetching corpus: 199, signal 35087/39137 (executing program) 1970/01/01 00:10:04 fetching corpus: 249, signal 37067/41521 (executing program) 1970/01/01 00:10:07 fetching corpus: 299, signal 39708/44309 (executing program) 1970/01/01 00:10:10 fetching corpus: 349, signal 40893/45874 (executing program) 1970/01/01 00:10:12 fetching corpus: 399, signal 42079/47321 (executing program) 1970/01/01 00:10:15 fetching corpus: 449, signal 43264/48682 (executing program) 1970/01/01 00:10:18 fetching corpus: 498, signal 44447/49991 (executing program) 1970/01/01 00:10:21 fetching corpus: 548, signal 45364/51026 (executing program) 1970/01/01 00:10:24 fetching corpus: 597, signal 47445/52688 (executing program) 1970/01/01 00:10:26 fetching corpus: 647, signal 48359/53594 (executing program) 1970/01/01 00:10:30 fetching corpus: 696, signal 48952/54249 (executing program) 1970/01/01 00:10:32 fetching corpus: 746, signal 49568/54881 (executing program) 1970/01/01 00:10:37 fetching corpus: 796, signal 50252/55483 (executing program) 1970/01/01 00:10:39 fetching corpus: 846, signal 50639/55972 (executing program) 1970/01/01 00:10:42 fetching corpus: 896, signal 51285/56486 (executing program) 1970/01/01 00:10:45 fetching corpus: 946, signal 51826/56954 (executing program) 1970/01/01 00:10:50 fetching corpus: 996, signal 52249/57308 (executing program) 1970/01/01 00:10:53 fetching corpus: 1046, signal 52555/57637 (executing program) 1970/01/01 00:10:56 fetching corpus: 1095, signal 53009/57960 (executing program) 1970/01/01 00:10:58 fetching corpus: 1145, signal 53386/58240 (executing program) 1970/01/01 00:11:00 fetching corpus: 1195, signal 53821/58495 (executing program) 1970/01/01 00:11:03 fetching corpus: 1245, signal 54251/58725 (executing program) 1970/01/01 00:11:05 fetching corpus: 1295, signal 54643/58927 (executing program) 1970/01/01 00:11:10 fetching corpus: 1345, signal 55175/59127 (executing program) 1970/01/01 00:11:13 fetching corpus: 1395, signal 55686/59272 (executing program) 1970/01/01 00:11:17 fetching corpus: 1444, signal 56053/59355 (executing program) 1970/01/01 00:11:19 fetching corpus: 1494, signal 56506/59355 (executing program) 1970/01/01 00:11:22 fetching corpus: 1544, signal 56991/59355 (executing program) 1970/01/01 00:11:24 fetching corpus: 1594, signal 57243/59355 (executing program) 1970/01/01 00:11:27 fetching corpus: 1644, signal 57515/59355 (executing program) 1970/01/01 00:11:29 fetching corpus: 1694, signal 57854/59355 (executing program) 1970/01/01 00:11:33 fetching corpus: 1744, signal 58211/59355 (executing program) 1970/01/01 00:11:37 fetching corpus: 1793, signal 58504/59355 (executing program) 1970/01/01 00:11:41 fetching corpus: 1843, signal 58728/59355 (executing program) 1970/01/01 00:11:44 fetching corpus: 1893, signal 59062/59355 (executing program) 1970/01/01 00:11:45 fetching corpus: 1916, signal 59274/59355 (executing program) 1970/01/01 00:11:45 fetching corpus: 1916, signal 59275/59355 (executing program) 1970/01/01 00:11:45 fetching corpus: 1916, signal 59275/59355 (executing program) 1970/01/01 00:13:37 starting 2 fuzzer processes [ 853.372568][ T3020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.500788][ T3020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.349778][ T3019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.726991][ T3019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.952207][ T3020] hsr_slave_0: entered promiscuous mode [ 870.035963][ T3020] hsr_slave_1: entered promiscuous mode [ 876.312775][ T3019] hsr_slave_0: entered promiscuous mode [ 876.356562][ T3019] hsr_slave_1: entered promiscuous mode [ 876.411810][ T3019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.416306][ T3019] Cannot create hsr debugfs directory [ 886.202064][ T3020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 886.941325][ T3020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 887.615919][ T3020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 888.057968][ T3020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 895.923085][ T3019] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 896.114439][ T3019] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 896.320416][ T3019] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 896.542660][ T3019] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 914.854723][ T3020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.545581][ T3019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.957934][ T3020] veth0_vlan: entered promiscuous mode [ 990.917182][ T3020] veth1_vlan: entered promiscuous mode [ 993.955754][ T3020] veth0_macvtap: entered promiscuous mode [ 994.753307][ T3020] veth1_macvtap: entered promiscuous mode [ 994.847058][ T3019] veth0_vlan: entered promiscuous mode [ 995.956296][ T3019] veth1_vlan: entered promiscuous mode [ 997.744080][ T3020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.747891][ T3020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.772551][ T3020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.776549][ T3020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.315225][ T3308] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.656751][ T3308] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.886953][ T3308] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.137955][ T3308] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.391056][ T3308] hsr_slave_0: left promiscuous mode [ 1053.614397][ T3308] hsr_slave_1: left promiscuous mode [ 1054.307721][ T3308] veth1_macvtap: left promiscuous mode [ 1054.360257][ T3308] veth0_macvtap: left promiscuous mode [ 1054.367902][ T3308] veth1_vlan: left promiscuous mode [ 1054.394891][ T3308] veth0_vlan: left promiscuous mode [ 1092.005367][ T3308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.148206][ T3308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1097.822664][ T3308] bond0 (unregistering): Released all slaves [ 1124.059136][ C0] Insufficient stack space to handle exception! [ 1124.060347][ C0] Task stack: [0xff200000000d8000..0xff200000000dc000] [ 1124.061228][ C0] Overflow stack: [0xff6000007cce8070..0xff6000007cce9070] [ 1124.062270][ C0] CPU: 0 PID: 25 Comm: kworker/u5:0 Not tainted 6.8.0-rc1-syzkaller-00017-gd82f32202e0d #0 [ 1124.063675][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1124.065184][ C0] Workqueue: events_unbound call_usermodehelper_exec_work [ 1124.067152][ C0] epc : mark_lock+0x2/0x1ad2 [ 1124.068501][ C0] ra : __lock_acquire+0x1af6/0x784c [ 1124.069707][ C0] epc : ffffffff8021225a ra : ffffffff802161bc sp : ff1ffffffffffe50 [ 1124.070873][ C0] gp : ffffffff8863e360 tp : 0000000000000000 t0 : 77e4a15b2291b39a [ 1124.072002][ C0] t1 : ff6000000c6d26b0 t2 : ff6000000c6d24f8 s0 : ff200000000001c0 [ 1124.073158][ C0] s1 : ffffffff8866b780 a0 : ff6000000c6d1a00 a1 : ff6000000c6d26b0 [ 1124.074313][ C0] a2 : 0000000000000000 a3 : 0000000000000000 a4 : 0000000000000000 [ 1124.075424][ C0] a5 : 0000000000000001 a6 : ffffffff89a752a0 a7 : ffffffff85c4d444 [ 1124.076552][ C0] s2 : 000000000000000b s3 : ff6000007cce9444 s4 : 0000000000000000 [ 1124.077682][ C0] s5 : 1fec0000018da49e s6 : ffffffff8864aec0 s7 : ffffffff886acca0 [ 1124.079293][ C0] s8 : ff6000000c6d24dc s9 : 0000000000000001 s10: 0000000000000002 [ 1124.080248][ C0] s11: ff6000000c6d1a00 t3 : 0000000000000004 t4 : 1fec0000018da49b [ 1124.080865][ C0] t5 : 0000000000000002 t6 : 1fec0000018da4da [ 1124.081459][ C0] status: 0000000200000100 badaddr: ff1ffffffffffff0 cause: 000000000000000f [ 1124.082427][ C0] Kernel panic - not syncing: Kernel stack overflow [ 1124.083617][ C0] CPU: 0 PID: 25 Comm: kworker/u5:0 Not tainted 6.8.0-rc1-syzkaller-00017-gd82f32202e0d #0 [ 1124.085050][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1124.086530][ C0] Workqueue: events_unbound call_usermodehelper_exec_work [ 1124.087984][ C0] Call Trace: [ 1124.088632][ C0] [] dump_backtrace+0x2e/0x3c [ 1124.089938][ C0] [] show_stack+0x34/0x40 [ 1124.091293][ C0] [] dump_stack_lvl+0xe8/0x154 [ 1124.092447][ C0] [] dump_stack+0x1c/0x24 [ 1124.093553][ C0] [] panic+0x33c/0x77a [ 1124.094482][ C0] [] handle_bad_stack+0xe0/0xf4 [ 1124.095567][ C0] [] __lock_acquire+0x1af6/0x784c [ 1124.097030][ C0] SMP: stopping secondary CPUs [ 1124.099410][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:58:58 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff819373e2 mhartid 0000000000000000 mstatus 0000000a00000180 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff85929260 vstvec 0000000000000000 mepc ffffffff8001d200 sepc ffffffff8021225a vsepc 0000000000000000 mcause 0000000000000009 scause 000000000000000f vscause 0000000000000000 mtval 0000000000000000 stval ff1ffffffffffff0 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080036000 sscratch 0000000000000000 satp a01c6000000b0d71 x0/zero 0000000000000000 x1/ra ffffffff819373e2 x2/sp ff6000007cce8750 x3/gp ffffffff8863e360 x4/tp ff6000000c6d1a00 x5/t0 2000000000000000 x6/t1 0000000000000000 x7/t2 2065726177647261 x8/s0 ff6000007cce8770 x9/s1 0000000000000001 x10/a0 ff20000000095001 x11/a1 0000000000000001 x12/a2 0000000000000001 x13/a3 ffffffff819373e2 x14/a4 0000000000000000 x15/a5 0000000000000000 x16/a6 0000000000ff0100 x17/a7 fffffffff3f3f3f3 x18/s2 ffffffff8a4c79c0 x19/s3 ff6000007cce8860 x20/s4 ffffffff8a4c79c0 x21/s5 1ffffffff1498f42 x22/s6 0000000000000001 x23/s7 ffffffff8a4c7a10 x24/s8 0000000000000001 x25/s9 dfffffff00000000 x26/s10 ffffffff87b021c0 x27/s11 ff6000007cce8a20 x28/t3 ffffffff8021dd6a x29/t4 ffebffff0f99d0d8 x30/t5 ffebffff0f99d0d9 x31/t6 ffffffff8a3116d7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff80224f38 mhartid 0000000000000001 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff85929260 vstvec 0000000000000000 mepc ffffffff81316372 sepc ffffffff80224f38 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080034000 sscratch 0000000000000000 satp a012500000095e4c x0/zero 0000000000000000 x1/ra ffffffff80224edc x2/sp ff200000041a3770 x3/gp ffffffff8863e360 x4/tp ff6000000e73b400 x5/t0 25d22bcab663c3c0 x6/t1 ffebffff02b9e633 x7/t2 ff6000000e73bef8 x8/s0 ff200000041a37d0 x9/s1 ff60000015cf3198 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 0000000000000001 x13/a3 ffffffff80224edc x14/a4 0000000000000000 x15/a5 ffffffffffffffff x16/a6 ffebffff02b9e634 x17/a7 ff60000015cf319b x18/s2 ffebffff02b9e633 x19/s3 ff60000015cf31a8 x20/s4 0000000000000000 x21/s5 ff60000015cf31a0 x22/s6 1fec000002b9e635 x23/s7 0000000000000003 x24/s8 0000000000001f6b x25/s9 1fec000002b9e634 x26/s10 1fec000002b9e633 x27/s11 ffffffff869db840 x28/t3 0000000000000004 x29/t4 ffebffff02b9e633 x30/t5 ffebffff02b9e634 x31/t6 1fec000001ce77e8 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000