syzkaller login: [ 257.301051][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 266.135007][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 266.175020][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 296.261013][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:41919' (ECDSA) to the list of known hosts. 1970/01/01 00:05:58 fuzzer started 1970/01/01 00:06:10 dialing manager at localhost:40427 1970/01/01 00:06:12 checking machine... 1970/01/01 00:06:12 checking revisions... executing program executing program 1970/01/01 00:06:18 testing simple program... [ 380.256364][ T2040] cgroup: Unknown subsys name 'net' [ 381.271109][ T2040] cgroup: Unknown subsys name 'rlimit' executing program executing program executing program executing program executing program executing program executing program [ 402.205936][ T2045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.280075][ T2045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link executing program executing program executing program [ 411.715299][ T2045] device hsr_slave_0 entered promiscuous mode [ 411.756628][ T2045] device hsr_slave_1 entered promiscuous mode executing program executing program [ 416.868149][ T2045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.004770][ T2045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.149200][ T2045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.275509][ T2045] netdevsim netdevsim0 netdevsim3: renamed from eth3 executing program executing program executing program [ 425.231830][ T2045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.504146][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.548070][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program [ 430.236072][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready executing program [ 430.304356][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.545942][ T2042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 430.598205][ T2042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.741725][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 430.941038][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.499440][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.540697][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.736718][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.785159][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.930876][ T2045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 435.999723][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.007413][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready executing program executing program executing program executing program [ 446.735714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.779494][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready executing program executing program [ 451.938737][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.989239][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.061983][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.086522][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.205380][ T2045] device veth0_vlan entered promiscuous mode [ 452.554626][ T2045] device veth1_vlan entered promiscuous mode [ 453.551186][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 453.626031][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.777775][ T2045] device veth0_macvtap entered promiscuous mode [ 453.918904][ T2045] device veth1_macvtap entered promiscuous mode [ 454.036392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 454.081680][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready executing program [ 454.801010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 454.830555][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 454.991410][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 455.040374][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 455.288680][ T2045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.295445][ T2045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.297338][ T2045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.299001][ T2045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program executing program 1970/01/01 00:07:39 building call list... executing program executing program [ 468.398730][ T991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program [ 469.628456][ T991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.305121][ T991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.478761][ T991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program executing program [ 483.899706][ T991] device hsr_slave_0 left promiscuous mode [ 483.969322][ T991] device hsr_slave_1 left promiscuous mode executing program [ 484.319855][ T991] device veth1_macvtap left promiscuous mode [ 484.331557][ T991] device veth0_macvtap left promiscuous mode [ 484.406094][ T991] device veth1_vlan left promiscuous mode [ 484.412269][ T991] device veth0_vlan left promiscuous mode executing program executing program executing program executing program executing program [ 504.387245][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.941664][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface executing program executing program executing program [ 508.589969][ T991] bond0 (unregistering): Released all slaves executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 563.668877][ T2039] can: request_module (can-proto-0) failed. [ 565.046695][ T2039] can: request_module (can-proto-0) failed. executing program [ 566.091185][ T2039] can: request_module (can-proto-0) failed. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 611.548172][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 611.595912][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 611.659405][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 611.691066][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program 1970/01/01 00:10:42 syscalls: 2918 1970/01/01 00:10:42 code coverage: enabled 1970/01/01 00:10:42 comparison tracing: enabled 1970/01/01 00:10:42 extra coverage: enabled 1970/01/01 00:10:42 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:10:42 setuid sandbox: enabled 1970/01/01 00:10:42 namespace sandbox: enabled 1970/01/01 00:10:42 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:10:42 fault injection: enabled 1970/01/01 00:10:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:10:42 net packet injection: enabled 1970/01/01 00:10:42 net device setup: enabled 1970/01/01 00:10:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:10:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:10:42 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:10:42 USB emulation: enabled 1970/01/01 00:10:42 hci packet injection: /dev/vhci does not exist 1970/01/01 00:10:42 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:10:42 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:10:43 fetching corpus: 0, signal 0/0 (executing program) 1970/01/01 00:10:43 fetching corpus: 0, signal 0/0 (executing program) 1970/01/01 00:12:07 starting 2 fuzzer processes 00:12:08 executing program 0: prctl$PR_CAPBSET_DROP(0x18, 0x0) 00:12:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000001480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2008c41, 0x0) pivot_root(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001400), 0x2000000, &(0x7f0000001680)={[{@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0xffffffff7fffffff}}], [{@dont_appraise}, {@uid_lt}, {@uid_gt}, {@euid_eq}, {@seclabel}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'mounts\x00'}}, {@permit_directio}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000015c0)=ANY=[@ANYBLOB="fc00000001000000180000005108d3313ba2dc9283a1295a5171867f61bcca74e59308d2fd87a892350332619f2b0fc67d92a1237a82c1b0c64b73e42eeb59cb006f4cd4e090f7eb38cb5903e5ef2298739e06e3a8c07d2f34b1c1ce32fc31a82d66d495672342eb154ed1030e4fbab17417", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="2e2f66896c653000"]) symlinkat(&(0x7f00000013c0)='./file0\x00', r2, &(0x7f0000001440)='./file0\x00') readv(r1, &(0x7f0000001140)=[{&(0x7f0000000100)=""/6, 0x6}], 0x1) mount$bpf(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x400, &(0x7f0000001280)=ANY=[@ANYBLOB="6d3030303030303030303031303030f7a730312c6d6f64653d30303030303030303030303030303030303030303030352c6d6f64653d30303030303030303030303030303030303030003030352c66756e633d4b455844435f4b45524e454c5f434845434b2c7065726d69745f646972656374696f2c646f6e745f6d6561737572652c66756b633d504f4c4943595f434845434b2c00"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7ffffffd) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x5, 0x0, &(0x7f0000001340)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000001540)=ANY=[@ANYBLOB="0100000001000000180000007fe6530df7201cb217b9507a7f7d21df2b76af09783f1118d819a76129cdfbcb3650ed65b4cbf7a59c6239e0d1ca1ab61f8d5a88a2a28987964de76d252548984cb46741d0fe89c3d34373327ec183a964", @ANYRES16=r5, @ANYRES32, @ANYRES64=r3]) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001500)=0x10, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x7, 0xffff, 0xfffff64d, 0x6, 0x20, 0xffffffffffffffff, 0x4, '\x00', 0x0, r4, 0x2, 0x3, 0x4}, 0x48) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 762.948608][ T2572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.074754][ T2573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.257145][ T2572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.380346][ T2573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.957474][ T2572] device hsr_slave_0 entered promiscuous mode [ 778.017613][ T2572] device hsr_slave_1 entered promiscuous mode [ 781.974413][ T2573] device hsr_slave_0 entered promiscuous mode [ 782.411981][ T2573] device hsr_slave_1 entered promiscuous mode [ 782.437430][ T2573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.444845][ T2573] Cannot create hsr debugfs directory ps_bpf_recvbpf: Network is down ps_bpf_recvbpf: Network is down ps_bpf_recvbpf: Network is down ps_bpf_recvbpf: Network is down ps_bpf_recvbpf: Network is down ps_bpf_recvbpf: Network is down ps_bpf_recvbpf: Network is down ps_bpf_recvbpf: Network is down [ 793.875028][ T2573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.031797][ T2573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.207041][ T2573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.568612][ T2573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 795.848704][ T2572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 796.039277][ T2572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 796.550988][ T2572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 796.775845][ T2572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 811.039672][ T2573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.809837][ T2572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.835746][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 812.901854][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 812.969336][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 813.050239][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 822.290812][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 822.357372][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 822.606679][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 822.645454][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 822.810376][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 823.778511][ T2388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 823.849303][ T2388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 823.887997][ T2388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 824.156522][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 824.267792][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 824.660604][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 824.759053][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 824.781857][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 825.324691][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 825.419133][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 825.460797][ T2390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 825.857883][ T2573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 826.896837][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 827.278491][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 827.311225][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 827.910937][ T2388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 827.970993][ T2388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 835.261827][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 835.289056][ T2043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 836.520895][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 836.540858][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 861.511480][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 861.626057][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 863.351050][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 863.518350][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 875.430518][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 875.505707][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 875.671713][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 875.738480][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 875.831617][ T2573] device veth0_vlan entered promiscuous mode [ 876.846894][ T2573] device veth1_vlan entered promiscuous mode [ 877.149842][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.197439][ T3138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.330974][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.387589][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 877.610069][ T2572] device veth0_vlan entered promiscuous mode [ 878.289044][ T2572] device veth1_vlan entered promiscuous mode [ 878.594281][ T2387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 878.660849][ T2387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 879.081280][ T2573] device veth0_macvtap entered promiscuous mode [ 879.516098][ T2573] device veth1_macvtap entered promiscuous mode [ 881.037483][ T3206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 881.088909][ T3206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 881.114567][ T3206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 881.135616][ T3206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 881.230450][ T2572] device veth0_macvtap entered promiscuous mode [ 881.516489][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 881.540275][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 881.619190][ T3208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 881.741894][ T2572] device veth1_macvtap entered promiscuous mode [ 882.059126][ T2573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.060534][ T2573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.061702][ T2573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.074204][ T2573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.340925][ T2573] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 882.345708][ T2573] CPU: 0 PID: 2573 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 882.347657][ T2573] Hardware name: riscv-virtio,qemu (DT) [ 882.349425][ T2573] Call Trace: [ 882.351474][ T2573] [] dump_backtrace+0x2e/0x3c [ 882.353861][ T2573] [] show_stack+0x34/0x40 [ 882.355560][ T2573] [] dump_stack_lvl+0xe4/0x150 [ 882.357029][ T2573] [] dump_stack+0x1c/0x24 [ 882.358458][ T2573] [] panic+0x24a/0x634 [ 882.359803][ T2573] [] schedule+0x0/0x14c [ 882.361304][ T2573] [] preempt_schedule_common+0x4e/0xde [ 882.363516][ T2573] [] preempt_schedule+0x34/0x36 [ 882.365419][ T2573] [] _raw_spin_unlock_irqrestore+0x8c/0x98 [ 882.367101][ T2573] [] __wake_up_common_lock+0xe4/0x136 [ 882.368600][ T2573] [] __wake_up+0x10/0x18 [ 882.370017][ T2573] [] netlink_broadcast+0x6d0/0xab6 [ 882.371455][ T2573] [] nlmsg_notify+0x78/0x22e [ 882.373421][ T2573] [] rtnl_notify+0x80/0x98 [ 882.375352][ T2573] [] rtmsg_fib+0x204/0x2be [ 882.376686][ T2573] [] fib_table_insert+0x52a/0xebe [ 882.378120][ T2573] [] fib_magic+0x3f4/0x438 [ 882.379554][ T2573] [] fib_add_ifaddr+0xd2/0x2e2 [ 882.380856][ T2573] [] fib_inetaddr_event+0xfe/0x19e [ 882.382267][ T2573] [] notifier_call_chain+0xb8/0x188 [ 882.384223][ T2573] [] blocking_notifier_call_chain+0x50/0x78 [ 882.385748][ T2573] [] __inet_insert_ifa+0x6ca/0x7e4 [ 882.387216][ T2573] [] inet_rtm_newaddr+0x7c2/0xbc2 [ 882.388810][ T2573] [] rtnetlink_rcv_msg+0x338/0x9a0 [ 882.390582][ T2573] [] netlink_rcv_skb+0xf8/0x2be [ 882.391976][ T2573] [] rtnetlink_rcv+0x26/0x30 [ 882.393844][ T2573] [] netlink_unicast+0x40e/0x5fe [ 882.396051][ T2573] [] netlink_sendmsg+0x4e0/0x994 [ 882.397443][ T2573] [] sock_sendmsg+0xa0/0xc4 [ 882.398920][ T2573] [] __sys_sendto+0x1f2/0x2e0 [ 882.400294][ T2573] [] sys_sendto+0x3e/0x52 [ 882.401671][ T2573] [] ret_from_syscall+0x0/0x2 [ 882.403989][ T2573] SMP: stopping secondary CPUs [ 882.407909][ T2573] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:26:40 Registers: info registers vcpu 0 pc ffffffff801165d6 mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80c389d8 sepc ffffffff800bdb3e mcause 8000000000000007 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff801165c2 x2/sp ffffaf800751e3c0 x3/gp ffffffff85863ac0 x4/tp ffffaf800f68b080 x5/t0 ffffffff86bcb657 x6/t1 bd0471db38502d00 x7/t2 0000000000000000 x8/s0 ffffaf800751e520 x9/s1 ffffffff8343c840 x10/a0 ffffaf805a9c8840 x11/a1 0000000000000003 x12/a2 1ffff5f00b539108 x13/a3 ffffffff801165c2 x14/a4 0000000000000000 x15/a5 0000000000000020 x16/a6 0000000000f00000 x17/a7 ffffffff8011ede2 x18/s2 ffffffff86c1a620 x19/s3 ffffaf805a9c8840 x20/s4 0000000000000000 x21/s5 ffffffff84a88898 x22/s6 0000000000000000 x23/s7 ffffaf800f68b080 x24/s8 ffffffff8011ede2 x25/s9 ffffffff85889780 x26/s10 1ffff5f000ea3c80 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f000ea3c5c x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff8020100c mhartid 0000000000000001 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc 00007fff8b282264 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8040f542 x2/sp ffffaf80107a7560 x3/gp ffffffff85863ac0 x4/tp ffffaf800ea96100 x5/t0 000000003857b28f x6/t1 fffff5ef01b98a50 x7/t2 0000000000000009 x8/s0 ffffaf80107a7530 x9/s1 0000000000000002 x10/a0 0000000000000000 x11/a1 0000000000000003 x12/a2 1ffff5f001d52c21 x13/a3 ffffffff80146d84 x14/a4 ffffaf800ea97100 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 0000000000000001 x18/s2 ffffaf800ea96100 x19/s3 0000000000000001 x20/s4 0000000000000000 x21/s5 ffffffff831a2658 x22/s6 0000000000000000 x23/s7 ffffaf800ea96100 x24/s8 ffffffff8040f576 x25/s9 ffffffff8040f576 x26/s10 0000000000000000 x27/s11 ffffaf800ea96100 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f0020f4e74 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000