last executing test programs: 2m13.163233379s ago: executing program 0 (id=324): io_uring_setup(0x2e34, &(0x7f0000000180)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = dup(r0) accept$alg(r1, 0x0, 0x0) 2m8.210003311s ago: executing program 0 (id=326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 2m5.329647358s ago: executing program 0 (id=327): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, r1, 0x2e, 0x0, 0x0, @prog_id, r2}, 0x20) 2m3.313893358s ago: executing program 0 (id=329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x58f7, &(0x7f0000001440)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) close(r0) close(r1) 2m0.5933454s ago: executing program 0 (id=331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000003c0)=0x800000, 0x4) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000340)=0x4) 1m56.289177275s ago: executing program 0 (id=333): socket(0x0, 0xa, 0xfffffff8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000002180), 0x4) sendto$inet(r3, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00400000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0002000000080001007063690011000200303030303a30303a31302e300000000008000b00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ffffffff"], 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 21.694100634s ago: executing program 1 (id=355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x404c140) 17.382567169s ago: executing program 1 (id=356): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}) 14.333981811s ago: executing program 1 (id=357): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 10.496352503s ago: executing program 1 (id=358): pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x541b, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x5450, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002040)={0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) 2.982456484s ago: executing program 1 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0x5451, 0x0) 0s ago: executing program 1 (id=360): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x1, 'veth0_to_team\x00'}, 0x18) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300), 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) flistxattr(r1, &(0x7f00000000c0)=""/182, 0xb6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000200)) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x34, @local, @empty, 0x8000, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000580)=@llc, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000800)={0x0, 'ip6gre0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58581' (ED25519) to the list of known hosts. syzkaller login: [ 331.822634][ T3030] cgroup: Unknown subsys name 'net' [ 332.354151][ T3030] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 384.756203][ T3030] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 440.056759][ T3036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.180481][ T3036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.520449][ T3035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.597164][ T3035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.462785][ T3036] hsr_slave_0: entered promiscuous mode [ 450.505301][ T3036] hsr_slave_1: entered promiscuous mode [ 453.764440][ T3035] hsr_slave_0: entered promiscuous mode [ 453.784398][ T3035] hsr_slave_1: entered promiscuous mode [ 453.802664][ T3035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.806637][ T3035] Cannot create hsr debugfs directory [ 456.865110][ T3036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.213225][ T3036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 457.439863][ T3036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 457.752121][ T3036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 460.454239][ T3035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.546976][ T3035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.671819][ T3035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.800920][ T3035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 468.275712][ T3036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.832877][ T3035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.304215][ T3036] veth0_vlan: entered promiscuous mode [ 510.865668][ T3036] veth1_vlan: entered promiscuous mode [ 511.150072][ T3035] veth0_vlan: entered promiscuous mode [ 512.186233][ T3035] veth1_vlan: entered promiscuous mode [ 513.214760][ T3036] veth0_macvtap: entered promiscuous mode [ 513.644387][ T3036] veth1_macvtap: entered promiscuous mode [ 514.502146][ T3035] veth0_macvtap: entered promiscuous mode [ 514.864961][ T3035] veth1_macvtap: entered promiscuous mode [ 515.282829][ T3036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.286820][ T3036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.290760][ T3036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.292772][ T3036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.383038][ T3035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.384785][ T3035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.386059][ T3035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.399819][ T3035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.626651][ T3790] input: syz1 as /devices/virtual/input/input0 [ 597.469504][ T3870] input: syz1 as /devices/virtual/input/input1 [ 612.951866][ T3783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.251149][ T3783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.633738][ T3973] input: syz1 as /devices/virtual/input/input2 [ 631.891285][ T4046] input: syz1 as /devices/virtual/input/input3 [ 632.982383][ T3783] hsr_slave_0: entered promiscuous mode [ 633.084485][ T3783] hsr_slave_1: entered promiscuous mode [ 633.194572][ T3783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.196730][ T3783] Cannot create hsr debugfs directory [ 642.236831][ T3783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.441407][ T3783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.336988][ T3783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.969459][ T3783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.590730][ T3783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 647.646298][ T3783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 647.811372][ T3783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 647.910431][ T3783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.285841][ T4157] input: syz1 as /devices/virtual/input/input4 [ 663.753063][ T3783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.813423][ T4180] input: syz1 as /devices/virtual/input/input5 [ 685.779141][ T4210] input: syz1 as /devices/virtual/input/input6 [ 698.605670][ T4226] sctp: failed to load transform for md5: -2 [ 715.219651][ T4251] Zero length message leads to an empty skb [ 719.274712][ T4255] input: syz1 as /devices/virtual/input/input7 [ 723.506571][ T3783] veth0_vlan: entered promiscuous mode [ 723.964146][ T3783] veth1_vlan: entered promiscuous mode [ 725.247118][ T3783] veth0_macvtap: entered promiscuous mode [ 725.677196][ T3783] veth1_macvtap: entered promiscuous mode [ 727.065913][ T3783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.081871][ T3783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.083556][ T3783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.084890][ T3783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.195888][ T3972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.844557][ T3972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.522574][ T3972] bond0 (unregistering): Released all slaves [ 745.545467][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 746.833965][ T3972] hsr_slave_0: left promiscuous mode [ 746.911770][ T3972] hsr_slave_1: left promiscuous mode [ 747.111760][ T3972] veth1_macvtap: left promiscuous mode [ 747.115225][ T3972] veth0_macvtap: left promiscuous mode [ 747.128792][ T3972] veth1_vlan: left promiscuous mode [ 747.139881][ T3972] veth0_vlan: left promiscuous mode [ 769.823040][ T4297] tap0: tun_chr_ioctl cmd 1074025673 [ 775.051257][ T3972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.965001][ T3972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.622040][ T3972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.301101][ T3972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.712839][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.533984][ T3972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.914240][ T3972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.058400][ T3972] bond0 (unregistering): Released all slaves [ 788.144230][ T3972] hsr_slave_0: left promiscuous mode [ 788.192017][ T3972] hsr_slave_1: left promiscuous mode [ 788.451534][ T3972] veth1_macvtap: left promiscuous mode [ 788.454507][ T3972] veth0_macvtap: left promiscuous mode [ 788.461351][ T3972] veth1_vlan: left promiscuous mode [ 788.464962][ T3972] veth0_vlan: left promiscuous mode [ 801.376187][ T4346] syz.1.79 uses obsolete (PF_INET,SOCK_PACKET) [ 826.562816][ T4490] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 832.916443][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.211798][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.620762][ T4304] hsr_slave_0: entered promiscuous mode [ 849.682425][ T4304] hsr_slave_1: entered promiscuous mode [ 863.393619][ T4304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 863.794640][ T4304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 864.050181][ T4304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 864.330737][ T4304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 880.806145][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.660576][ T4304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 896.986235][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 910.035461][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 937.731559][ T4304] veth0_vlan: entered promiscuous mode [ 938.382554][ T4304] veth1_vlan: entered promiscuous mode [ 940.414069][ T4304] veth0_macvtap: entered promiscuous mode [ 940.617283][ T4304] veth1_macvtap: entered promiscuous mode [ 942.764960][ T4304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.766881][ T4304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.779814][ T4304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.781502][ T4304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.729836][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 1008.719001][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 1135.612419][ T5056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.784302][ T5056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.932004][ T5056] hsr_slave_0: entered promiscuous mode [ 1158.040050][ T5056] hsr_slave_1: entered promiscuous mode [ 1158.095793][ T5056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1158.105694][ T5056] Cannot create hsr debugfs directory [ 1169.240792][ T5056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.077177][ T5056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.210399][ T5056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.640791][ T5056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.373791][ T5056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1177.546059][ T5056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1177.747292][ T5056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1178.050953][ T5056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1195.546363][ T5056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.070525][ T5056] veth0_vlan: entered promiscuous mode [ 1270.724355][ T5056] veth1_vlan: entered promiscuous mode [ 1274.870398][ T5470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.290924][ T5470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.558226][ T5056] veth0_macvtap: entered promiscuous mode [ 1277.809512][ T5056] veth1_macvtap: entered promiscuous mode [ 1280.210054][ T5056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.213329][ T5056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.216932][ T5056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.271173][ T5056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.709781][ T5470] hsr_slave_0: entered promiscuous mode [ 1300.796212][ T5470] hsr_slave_1: entered promiscuous mode [ 1300.854850][ T5470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1300.857015][ T5470] Cannot create hsr debugfs directory [ 1314.243987][ T5470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.434370][ T5470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.374496][ T5470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.813942][ T5470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.815001][ T5470] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1321.093518][ T5470] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1321.219525][ T5470] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1321.482185][ T5470] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1344.386010][ T5450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.811772][ T5450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1345.075984][ T5450] bond0 (unregistering): Released all slaves [ 1346.666973][ T5450] hsr_slave_0: left promiscuous mode [ 1346.772625][ T5450] hsr_slave_1: left promiscuous mode [ 1347.390181][ T5450] veth1_macvtap: left promiscuous mode [ 1347.393765][ T5450] veth0_macvtap: left promiscuous mode [ 1347.418583][ T5450] veth1_vlan: left promiscuous mode [ 1347.431506][ T5450] veth0_vlan: left promiscuous mode [ 1377.786173][ T5470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.476022][ T5450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.549964][ T5450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.631774][ T5450] bond0 (unregistering): Released all slaves [ 1425.214988][ T5450] hsr_slave_0: left promiscuous mode [ 1425.241562][ T5450] hsr_slave_1: left promiscuous mode [ 1425.516267][ T5450] veth1_macvtap: left promiscuous mode [ 1425.530484][ T5450] veth0_macvtap: left promiscuous mode [ 1425.546867][ T5450] veth1_vlan: left promiscuous mode [ 1425.562798][ T5450] veth0_vlan: left promiscuous mode [ 1454.290670][ T5470] veth0_vlan: entered promiscuous mode [ 1454.503645][ T5470] veth1_vlan: entered promiscuous mode [ 1455.683551][ T5470] veth0_macvtap: entered promiscuous mode [ 1456.175447][ T5470] veth1_macvtap: entered promiscuous mode [ 1457.824426][ T5470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.826656][ T5470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.838836][ T5470] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.841778][ T5470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.961921][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.081681][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1592.227075][ T6075] hsr_slave_0: entered promiscuous mode [ 1592.285676][ T6075] hsr_slave_1: entered promiscuous mode [ 1600.951924][ T6075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.073465][ T6075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.220136][ T6075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.352857][ T6075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.631677][ T6075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1607.824871][ T6075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1608.029780][ T6075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1608.225832][ T6075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1620.715994][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.934912][ T6075] veth0_vlan: entered promiscuous mode [ 1678.705987][ T6075] veth1_vlan: entered promiscuous mode [ 1680.626312][ T6075] veth0_macvtap: entered promiscuous mode [ 1680.890420][ T6075] veth1_macvtap: entered promiscuous mode [ 1682.896069][ T6075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.921424][ T6075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.923641][ T6075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.925471][ T6075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.255672][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1749.532039][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1749.692503][ T5859] bond0 (unregistering): Released all slaves [ 1750.721662][ T5859] hsr_slave_0: left promiscuous mode [ 1750.742294][ T5859] hsr_slave_1: left promiscuous mode [ 1750.872296][ T5859] veth1_macvtap: left promiscuous mode [ 1750.874168][ T5859] veth0_macvtap: left promiscuous mode [ 1750.877172][ T5859] veth1_vlan: left promiscuous mode [ 1750.880191][ T5859] veth0_vlan: left promiscuous mode [ 1814.870045][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1815.023360][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1834.373185][ T6625] hsr_slave_0: entered promiscuous mode [ 1834.471940][ T6625] hsr_slave_1: entered promiscuous mode [ 1834.553531][ T6625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1834.556785][ T6625] Cannot create hsr debugfs directory [ 1842.483922][ T6625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.262537][ T6625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.215449][ T6625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.335710][ T6625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.611972][ T6972] ================================================================== [ 1845.613951][ T6972] BUG: KASAN: global-out-of-bounds in memcmp+0xc0/0xca [ 1845.617882][ T6972] Read of size 1 at addr ffffffff89077f80 by task syz.1.360/6972 [ 1845.621521][ T6972] [ 1845.623156][ T6972] CPU: 1 PID: 6972 Comm: syz.1.360 Not tainted 6.10.0-rc6-syzkaller-gc562ba719df5 #0 [ 1845.624907][ T6972] Hardware name: riscv-virtio,qemu (DT) [ 1845.626304][ T6972] Call Trace: [ 1845.628355][ T6972] [] dump_backtrace+0x2e/0x3c [ 1845.629901][ T6972] [] show_stack+0x34/0x40 [ 1845.631220][ T6972] [] dump_stack_lvl+0x122/0x196 [ 1845.632747][ T6972] [] print_report+0x288/0x596 [ 1845.634287][ T6972] [] kasan_report+0xec/0x118 [ 1845.635634][ T6972] [] __asan_report_load1_noabort+0x12/0x1a [ 1845.637246][ T6972] [] memcmp+0xc0/0xca [ 1845.638589][ T6972] [] __hw_addr_add_ex+0xee/0x676 [ 1845.640131][ T6972] [] dev_mc_add+0xac/0x108 [ 1845.641623][ T6972] [] mrp_init_applicant+0xe8/0x56e [ 1845.643107][ T6972] [] vlan_mvrp_init_applicant+0x26/0x30 [ 1845.644620][ T6972] [] register_vlan_dev+0x1b4/0x922 [ 1845.646122][ T6972] [] vlan_ioctl_handler+0x54e/0x956 [ 1845.647942][ T6972] [] sock_ioctl+0x1f6/0x61a [ 1845.649467][ T6972] [] __riscv_sys_ioctl+0x186/0x1d6 [ 1845.650885][ T6972] [] syscall_handler+0x94/0x118 [ 1845.652335][ T6972] [] do_trap_ecall_u+0x14c/0x214 [ 1845.653831][ T6972] [] ret_from_exception+0x0/0x64 [ 1845.655614][ T6972] [ 1845.656400][ T6972] The buggy address belongs to the variable: [ 1845.657479][ T6972] vlan_mrp_app+0x60/0x3e80 [ 1845.658624][ T6972] [ 1845.659391][ T6972] The buggy address belongs to the physical page: [ 1845.661169][ T6972] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x89277 [ 1845.663347][ T6972] flags: 0xffe000000002000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 1845.667031][ T6972] raw: 0ffe000000002000 ff1c000000249dc8 ff1c000000249dc8 0000000000000000 [ 1845.668633][ T6972] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1845.670054][ T6972] page dumped because: kasan: bad access detected [ 1845.671474][ T6972] page_owner info is not present (never set?) [ 1845.672683][ T6972] [ 1845.673416][ T6972] Memory state around the buggy address: [ 1845.675078][ T6972] ffffffff89077e80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1845.676501][ T6972] ffffffff89077f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1845.677986][ T6972] >ffffffff89077f80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1845.679320][ T6972] ^ [ 1845.680698][ T6972] ffffffff89078000: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 1845.681952][ T6972] ffffffff89078080: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1845.683377][ T6972] ================================================================== [ 1845.686619][ T6972] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1845.688563][ T6972] CPU: 1 PID: 6972 Comm: syz.1.360 Not tainted 6.10.0-rc6-syzkaller-gc562ba719df5 #0 [ 1845.690357][ T6972] Hardware name: riscv-virtio,qemu (DT) [ 1845.691399][ T6972] Call Trace: [ 1845.692266][ T6972] [] dump_backtrace+0x2e/0x3c [ 1845.694178][ T6972] [] show_stack+0x34/0x40 [ 1845.695591][ T6972] [] dump_stack_lvl+0x108/0x196 [ 1845.697106][ T6972] [] dump_stack+0x1c/0x24 [ 1845.698547][ T6972] [] panic+0x382/0x800 [ 1845.699941][ T6972] [] check_panic_on_warn+0xc0/0xe4 [ 1845.701356][ T6972] [] end_report.part.0+0x4a/0xaa [ 1845.702828][ T6972] [] kasan_report+0x102/0x118 [ 1845.704368][ T6972] [] __asan_report_load1_noabort+0x12/0x1a [ 1845.706052][ T6972] [] memcmp+0xc0/0xca [ 1845.707490][ T6972] [] __hw_addr_add_ex+0xee/0x676 [ 1845.709246][ T6972] [] dev_mc_add+0xac/0x108 [ 1845.710812][ T6972] [] mrp_init_applicant+0xe8/0x56e [ 1845.712350][ T6972] [] vlan_mvrp_init_applicant+0x26/0x30 [ 1845.713791][ T6972] [] register_vlan_dev+0x1b4/0x922 [ 1845.715458][ T6972] [] vlan_ioctl_handler+0x54e/0x956 [ 1845.717228][ T6972] [] sock_ioctl+0x1f6/0x61a [ 1845.718701][ T6972] [] __riscv_sys_ioctl+0x186/0x1d6 [ 1845.720150][ T6972] [] syscall_handler+0x94/0x118 [ 1845.721576][ T6972] [] do_trap_ecall_u+0x14c/0x214 [ 1845.723123][ T6972] [] ret_from_exception+0x0/0x64 [ 1845.725023][ T6972] SMP: stopping secondary CPUs [ 1845.728691][ T6972] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:58:05 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff802275fa mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000200 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000428 stvec ffffffff85cb3190 vstvec 0000000000000000 mepc ffffffff8001ca9c sepc ffffffff8021cf78 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080029000 sscratch 0000000000000000 satp a0546000000a692d x0/zero 0000000000000000 x1/ra ffffffff8022a9d0 x2/sp ff20000000003700 x3/gp ffffffff8925ab80 x4/tp ff6000000c724ec0 x5/t0 0000000000000000 x6/t1 ff6000000c725a58 x7/t2 ff6000000c7259e0 x8/s0 ff200000000038c0 x9/s1 ffffffff8934d800 x10/a0 ff6000000c724ec0 x11/a1 ff6000000c725a58 x12/a2 0000000000000008 x13/a3 fffffffff3f3f3f3 x14/a4 00000000000c403f x15/a5 0000000000080000 x16/a6 ffffffff8a757460 x17/a7 1fec0000018e4b4f x18/s2 0000000000000003 x19/s3 ff6000007ab4d484 x20/s4 0000000000000000 x21/s5 1fec0000018e4b3b x22/s6 ffffffff89292a60 x23/s7 ffffffff8938ee60 x24/s8 ff6000000c7259c4 x25/s9 0000000000000001 x26/s10 000000000000003f x27/s11 ff6000000c724ec0 x28/t3 0000000000000004 x29/t4 1fec0000018e4b38 x30/t5 0000000000000000 x31/t6 1fec0000018e4b4f f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8025133a mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000428 stvec ffffffff85cb3190 vstvec 0000000000000000 mepc ffffffff80232b2a sepc ffffffff8023436a vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080027000 sscratch 0000000000000000 satp a057d000000a834f x0/zero 0000000000000000 x1/ra ffffffff80251336 x2/sp ff20000003c233f0 x3/gp ffffffff8925ab80 x4/tp ff60000014ebcec0 x5/t0 20666f2064616552 x6/t1 fffffffef0f5a16c x7/t2 7320666f20646165 x8/s0 ff20000003c23430 x9/s1 1ffffffff1034a6f x10/a0 ff60000014ebd9dc x11/a1 ffffffff8b1c2908 x12/a2 0000000000040000 x13/a3 ffffffff80251336 x14/a4 ff200000048c74f0 x15/a5 000000000003d4f0 x16/a6 0000000000000003 x17/a7 ffffffff87ad0b63 x18/s2 0000000200000020 x19/s3 0000000000000000 x20/s4 fffffffef1034a66 x21/s5 0000000000000000 x22/s6 ff20000003c234e0 x23/s7 ffffffff881a5378 x24/s8 0000000000000001 x25/s9 dfffffff00000000 x26/s10 ffffffff881a5320 x27/s11 ff20000003c23540 x28/t3 ff60000014ebcec8 x29/t4 fffffffef0f5a16c x30/t5 fffffffef0f5a16d x31/t6 ffffffff8aff3977 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000