syzkaller login: [ 482.291926][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 482.424139][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 482.485521][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 482.531029][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:36057' (ECDSA) to the list of known hosts. 1970/01/01 00:09:05 fuzzer started 1970/01/01 00:09:20 dialing manager at localhost:41167 [ 566.631019][ T2028] cgroup: Unknown subsys name 'net' [ 567.866738][ T2028] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:09:27 syscalls: 2918 1970/01/01 00:09:27 code coverage: enabled 1970/01/01 00:09:27 comparison tracing: ioctl(KCOV_DISABLE) failed: invalid argument 1970/01/01 00:09:27 extra coverage: enabled 1970/01/01 00:09:27 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:09:27 setuid sandbox: enabled 1970/01/01 00:09:27 namespace sandbox: enabled 1970/01/01 00:09:27 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:09:27 fault injection: enabled 1970/01/01 00:09:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:09:27 net packet injection: enabled 1970/01/01 00:09:27 net device setup: enabled 1970/01/01 00:09:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:09:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:09:27 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:09:27 USB emulation: enabled 1970/01/01 00:09:27 hci packet injection: /dev/vhci does not exist 1970/01/01 00:09:27 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:09:27 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:09:28 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:09:33 fetching corpus: 50, signal 34536/37766 (executing program) 1970/01/01 00:09:36 fetching corpus: 98, signal 43519/48047 (executing program) 1970/01/01 00:09:41 fetching corpus: 148, signal 56911/62319 (executing program) 1970/01/01 00:09:44 fetching corpus: 197, signal 62242/68709 (executing program) 1970/01/01 00:09:47 fetching corpus: 246, signal 67339/74781 (executing program) 1970/01/01 00:09:49 fetching corpus: 295, signal 71762/80107 (executing program) 1970/01/01 00:09:52 fetching corpus: 345, signal 76209/85375 (executing program) 1970/01/01 00:09:55 fetching corpus: 395, signal 80206/90132 (executing program) 1970/01/01 00:09:57 fetching corpus: 443, signal 83387/94063 (executing program) 1970/01/01 00:10:00 fetching corpus: 492, signal 86450/97860 (executing program) 1970/01/01 00:10:03 fetching corpus: 541, signal 89388/101452 (executing program) 1970/01/01 00:10:05 fetching corpus: 590, signal 91210/104012 (executing program) 1970/01/01 00:10:09 fetching corpus: 640, signal 94159/107498 (executing program) 1970/01/01 00:10:11 fetching corpus: 690, signal 96843/110719 (executing program) 1970/01/01 00:10:14 fetching corpus: 740, signal 99256/113679 (executing program) 1970/01/01 00:10:16 fetching corpus: 788, signal 102005/116789 (executing program) 1970/01/01 00:10:20 fetching corpus: 838, signal 104052/119324 (executing program) 1970/01/01 00:10:22 fetching corpus: 886, signal 106412/122066 (executing program) 1970/01/01 00:10:26 fetching corpus: 934, signal 109274/125042 (executing program) 1970/01/01 00:10:28 fetching corpus: 983, signal 112056/127959 (executing program) 1970/01/01 00:10:31 fetching corpus: 1032, signal 114443/130511 (executing program) 1970/01/01 00:10:33 fetching corpus: 1082, signal 117581/133519 (executing program) 1970/01/01 00:10:37 fetching corpus: 1132, signal 119744/135787 (executing program) 1970/01/01 00:10:39 fetching corpus: 1182, signal 121839/137950 (executing program) 1970/01/01 00:10:42 fetching corpus: 1232, signal 123965/140125 (executing program) 1970/01/01 00:10:45 fetching corpus: 1282, signal 126563/142631 (executing program) 1970/01/01 00:10:47 fetching corpus: 1332, signal 128081/144296 (executing program) 1970/01/01 00:10:49 fetching corpus: 1382, signal 129745/145980 (executing program) 1970/01/01 00:10:53 fetching corpus: 1432, signal 131325/147607 (executing program) 1970/01/01 00:10:55 fetching corpus: 1482, signal 133211/149368 (executing program) 1970/01/01 00:10:57 fetching corpus: 1532, signal 135361/151227 (executing program) 1970/01/01 00:11:00 fetching corpus: 1581, signal 136539/152485 (executing program) 1970/01/01 00:11:03 fetching corpus: 1631, signal 138150/153978 (executing program) 1970/01/01 00:11:05 fetching corpus: 1678, signal 140253/155774 (executing program) 1970/01/01 00:11:08 fetching corpus: 1728, signal 141687/157096 (executing program) 1970/01/01 00:11:11 fetching corpus: 1777, signal 142645/158097 (executing program) 1970/01/01 00:11:13 fetching corpus: 1826, signal 143599/159081 (executing program) 1970/01/01 00:11:17 fetching corpus: 1876, signal 144870/160200 (executing program) 1970/01/01 00:11:19 fetching corpus: 1925, signal 145860/161160 (executing program) 1970/01/01 00:11:23 fetching corpus: 1974, signal 147051/162206 (executing program) 1970/01/01 00:11:26 fetching corpus: 2023, signal 147866/163055 (executing program) 1970/01/01 00:11:29 fetching corpus: 2073, signal 148678/163830 (executing program) 1970/01/01 00:11:32 fetching corpus: 2123, signal 149588/164632 (executing program) 1970/01/01 00:11:35 fetching corpus: 2173, signal 151204/165779 (executing program) 1970/01/01 00:11:37 fetching corpus: 2221, signal 152272/166594 (executing program) 1970/01/01 00:11:40 fetching corpus: 2271, signal 153371/167447 (executing program) 1970/01/01 00:11:42 fetching corpus: 2320, signal 154324/168187 (executing program) 1970/01/01 00:11:45 fetching corpus: 2370, signal 155430/168991 (executing program) 1970/01/01 00:11:47 fetching corpus: 2419, signal 156317/169651 (executing program) 1970/01/01 00:11:49 fetching corpus: 2468, signal 157284/170315 (executing program) 1970/01/01 00:11:52 fetching corpus: 2517, signal 158485/171090 (executing program) 1970/01/01 00:11:56 fetching corpus: 2567, signal 159393/171719 (executing program) 1970/01/01 00:11:57 fetching corpus: 2616, signal 160321/172337 (executing program) 1970/01/01 00:12:00 fetching corpus: 2665, signal 161287/172910 (executing program) 1970/01/01 00:12:03 fetching corpus: 2715, signal 161904/173360 (executing program) 1970/01/01 00:12:05 fetching corpus: 2764, signal 163969/174376 (executing program) 1970/01/01 00:12:07 fetching corpus: 2814, signal 164646/174789 (executing program) 1970/01/01 00:12:09 fetching corpus: 2864, signal 165460/175246 (executing program) 1970/01/01 00:12:12 fetching corpus: 2914, signal 166499/175746 (executing program) 1970/01/01 00:12:14 fetching corpus: 2964, signal 167650/176278 (executing program) 1970/01/01 00:12:17 fetching corpus: 3014, signal 168480/176682 (executing program) 1970/01/01 00:12:19 fetching corpus: 3064, signal 169024/176995 (executing program) 1970/01/01 00:12:23 fetching corpus: 3114, signal 169816/177372 (executing program) 1970/01/01 00:12:26 fetching corpus: 3163, signal 170922/177801 (executing program) 1970/01/01 00:12:28 fetching corpus: 3213, signal 171663/178097 (executing program) 1970/01/01 00:12:30 fetching corpus: 3263, signal 172695/178466 (executing program) 1970/01/01 00:12:33 fetching corpus: 3313, signal 173357/178758 (executing program) 1970/01/01 00:12:36 fetching corpus: 3363, signal 174282/179071 (executing program) 1970/01/01 00:12:38 fetching corpus: 3413, signal 175025/179354 (executing program) 1970/01/01 00:12:40 fetching corpus: 3462, signal 175525/179496 (executing program) 1970/01/01 00:12:43 fetching corpus: 3511, signal 176094/179679 (executing program) 1970/01/01 00:12:45 fetching corpus: 3561, signal 176730/179855 (executing program) 1970/01/01 00:12:47 fetching corpus: 3610, signal 177358/180048 (executing program) 1970/01/01 00:12:51 fetching corpus: 3659, signal 178188/180255 (executing program) 1970/01/01 00:12:52 fetching corpus: 3676, signal 178490/180324 (executing program) 1970/01/01 00:12:52 fetching corpus: 3677, signal 178509/180362 (executing program) 1970/01/01 00:12:52 fetching corpus: 3678, signal 178514/180397 (executing program) 1970/01/01 00:12:52 fetching corpus: 3678, signal 178514/180428 (executing program) 1970/01/01 00:12:53 fetching corpus: 3678, signal 178514/180452 (executing program) 1970/01/01 00:12:53 fetching corpus: 3678, signal 178514/180477 (executing program) 1970/01/01 00:12:53 fetching corpus: 3678, signal 178514/180505 (executing program) 1970/01/01 00:12:53 fetching corpus: 3678, signal 178514/180528 (executing program) 1970/01/01 00:12:53 fetching corpus: 3678, signal 178514/180564 (executing program) 1970/01/01 00:12:53 fetching corpus: 3678, signal 178514/180586 (executing program) 1970/01/01 00:12:53 fetching corpus: 3678, signal 178514/180618 (executing program) 1970/01/01 00:12:53 fetching corpus: 3678, signal 178514/180634 (executing program) 1970/01/01 00:12:54 fetching corpus: 3678, signal 178514/180668 (executing program) 1970/01/01 00:12:54 fetching corpus: 3678, signal 178514/180688 (executing program) 1970/01/01 00:12:54 fetching corpus: 3678, signal 178514/180719 (executing program) 1970/01/01 00:12:54 fetching corpus: 3678, signal 178514/180735 (executing program) 1970/01/01 00:12:54 fetching corpus: 3678, signal 178514/180735 (executing program) 1970/01/01 00:14:58 starting 2 fuzzer processes 00:14:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), 0x0, 0x38, 0x0) 00:14:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3db, &(0x7f00000004c0)="$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") syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000640)='mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) [ 923.749683][ T2040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.836220][ T2040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.201438][ T2039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.308570][ T2039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.607642][ T2040] device hsr_slave_0 entered promiscuous mode [ 935.645814][ T2040] device hsr_slave_1 entered promiscuous mode [ 939.608455][ T2039] device hsr_slave_0 entered promiscuous mode [ 939.671769][ T2039] device hsr_slave_1 entered promiscuous mode [ 939.691922][ T2039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.700203][ T2039] Cannot create hsr debugfs directory [ 945.268415][ T2040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 945.659886][ T2040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 945.909208][ T2040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 946.187639][ T2040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 947.251351][ T2039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 947.540188][ T2039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 947.860260][ T2039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 947.989282][ T2039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 962.573986][ T2040] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 962.577624][ T2040] CPU: 0 PID: 2040 Comm: syz-executor.0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 962.579667][ T2040] Hardware name: riscv-virtio,qemu (DT) [ 962.580931][ T2040] Call Trace: [ 962.581589][ T2040] [] dump_backtrace+0x2e/0x3c [ 962.582887][ T2040] [] show_stack+0x34/0x40 [ 962.583991][ T2040] [] dump_stack_lvl+0xe4/0x150 [ 962.584928][ T2040] [] dump_stack+0x1c/0x24 [ 962.585759][ T2040] [] panic+0x24a/0x634 [ 962.586490][ T2040] [] schedule+0x0/0x14c [ 962.587313][ T2040] [] preempt_schedule_common+0x4e/0xde [ 962.588214][ T2040] [] preempt_schedule+0x34/0x36 [ 962.589039][ T2040] [] _raw_spin_unlock_irqrestore+0x8c/0x98 [ 962.589884][ T2040] [] debug_check_no_obj_freed+0x14c/0x24a [ 962.590916][ T2040] [] slab_free_freelist_hook+0xe4/0x1cc [ 962.591993][ T2040] [] kfree+0xe0/0x3e4 [ 962.593414][ T2040] [] pskb_expand_head+0x1d8/0x842 [ 962.594568][ T2040] [] netlink_trim+0x15a/0x16c [ 962.595629][ T2040] [] netlink_broadcast+0x4c/0xab6 [ 962.596606][ T2040] [] nlmsg_notify+0x78/0x22e [ 962.597579][ T2040] [] rtnetlink_event+0x142/0x144 [ 962.598561][ T2040] [] notifier_call_chain+0xb8/0x188 [ 962.599546][ T2040] [] raw_notifier_call_chain+0x2a/0x38 [ 962.600561][ T2040] [] call_netdevice_notifiers_info+0x9e/0x10c [ 962.601695][ T2040] [] dev_set_mac_address+0x218/0x25a [ 962.603072][ T2040] [] bond_set_mac_address+0x25a/0x506 [ 962.605065][ T2040] [] dev_set_mac_address+0x1d8/0x25a [ 962.606063][ T2040] [] dev_set_mac_address_user+0x3a/0x58 [ 962.607055][ T2040] [] do_setlink+0xfb4/0x21c4 [ 962.608050][ T2040] [] __rtnl_newlink+0x99e/0xfa0 [ 962.609010][ T2040] [] rtnl_newlink+0x60/0x8c [ 962.609831][ T2040] [] rtnetlink_rcv_msg+0x338/0x9a0 [ 962.610677][ T2040] [] netlink_rcv_skb+0xf8/0x2be [ 962.611667][ T2040] [] rtnetlink_rcv+0x26/0x30 [ 962.613191][ T2040] [] netlink_unicast+0x40e/0x5fe [ 962.615005][ T2040] [] netlink_sendmsg+0x4e0/0x994 [ 962.615986][ T2040] [] sock_sendmsg+0xa0/0xc4 [ 962.616955][ T2040] [] __sys_sendto+0x1f2/0x2e0 [ 962.617846][ T2040] [] sys_sendto+0x3e/0x52 [ 962.618842][ T2040] [] ret_from_syscall+0x0/0x2 [ 962.620078][ T2040] SMP: stopping secondary CPUs [ 962.622153][ T2040] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:34:39 Registers: info registers vcpu 0 pc ffffffff80200f00 mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff831a56fc mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80124596 x2/sp ffffaf8021d51d70 x3/gp ffffffff85863ac0 x4/tp ffffaf800bc71840 x5/t0 ffffffff84a98468 x6/t1 fffffffef095308c x7/t2 0000000000000000 x8/s0 ffffaf8021d51da0 x9/s1 ffffffff84a88a00 x10/a0 0000000000000000 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffff8012346a x14/a4 ffffaf800bc72840 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffaf8021d51ce7 x18/s2 ffffffff84a88a00 x19/s3 ffffffff84b3ceb8 x20/s4 ffffffff84a98410 x21/s5 ffffaf8021d51fa0 x22/s6 ffffaf8021d51fe0 x23/s7 ffffffff84b3ceb0 x24/s8 0000000000000001 x25/s9 1ffff5f0043aa3ec x26/s10 0000000000000073 x27/s11 ffffffff838d6d80 x28/t3 1ffff5f0043aa434 x29/t4 fffff5ef043aa3c0 x30/t5 fffff5ef043aa3c1 x31/t6 ffffaf8021d52028 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80106a16 mhartid 0000000000000001 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc 0000000000022008 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80106a44 x2/sp ffffaf800b943580 x3/gp ffffffff85863ac0 x4/tp ffffaf800ed18000 x5/t0 ffffaf800b943940 x6/t1 fffffffef0ab9e14 x7/t2 00007fffe8917c06 x8/s0 ffffaf800b9435e0 x9/s1 ffffffff855cf0a0 x10/a0 ffffffff855cf0a0 x11/a1 0000000000000007 x12/a2 0000000000000000 x13/a3 ffffffff80106a44 x14/a4 0000000000000000 x15/a5 ffffffffffffffff x16/a6 ffffffff855cf0a0 x17/a7 ffffffff855cf0a7 x18/s2 ffffaf800bc71840 x19/s3 0000000000000000 x20/s4 ffffaf800bc71884 x21/s5 ffffaf800bc71860 x22/s6 0000000000000000 x23/s7 0000000000000010 x24/s8 ffffffff855cf130 x25/s9 ffffffff855cf0f0 x26/s10 ffffaf800ed18000 x27/s11 1ffff5f0017286c8 x28/t3 fffffffff3f3f300 x29/t4 fffffffef0ab9e14 x30/t5 fffffffef0ab9e15 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000