syzkaller login: [ 283.806050][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 283.946516][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 293.308476][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:26136' (ECDSA) to the list of known hosts. 1970/01/01 00:05:59 fuzzer started 1970/01/01 00:06:12 dialing manager at localhost:40479 [ 378.803232][ T2025] cgroup: Unknown subsys name 'net' [ 380.256643][ T2025] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:20 syscalls: 2918 1970/01/01 00:06:20 code coverage: enabled 1970/01/01 00:06:20 comparison tracing: enabled 1970/01/01 00:06:20 extra coverage: enabled 1970/01/01 00:06:20 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:20 setuid sandbox: enabled 1970/01/01 00:06:20 namespace sandbox: enabled 1970/01/01 00:06:20 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:20 fault injection: enabled 1970/01/01 00:06:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:20 net packet injection: enabled 1970/01/01 00:06:20 net device setup: enabled 1970/01/01 00:06:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:20 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:20 USB emulation: enabled 1970/01/01 00:06:20 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:20 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:20 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:20 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:24 fetching corpus: 50, signal 32982/36358 (executing program) 1970/01/01 00:06:26 fetching corpus: 99, signal 42906/47668 (executing program) 1970/01/01 00:06:30 fetching corpus: 147, signal 50551/56609 (executing program) 1970/01/01 00:06:34 fetching corpus: 197, signal 60193/67304 (executing program) 1970/01/01 00:06:37 fetching corpus: 246, signal 65978/74153 (executing program) 1970/01/01 00:06:41 fetching corpus: 295, signal 70766/80025 (executing program) 1970/01/01 00:06:44 fetching corpus: 345, signal 77359/87482 (executing program) 1970/01/01 00:06:47 fetching corpus: 395, signal 82709/93648 (executing program) 1970/01/01 00:06:51 fetching corpus: 444, signal 86315/98125 (executing program) 1970/01/01 00:06:54 fetching corpus: 493, signal 90181/102760 (executing program) 1970/01/01 00:06:55 fetching corpus: 541, signal 93092/106472 (executing program) 1970/01/01 00:06:58 fetching corpus: 591, signal 95636/109809 (executing program) 1970/01/01 00:07:01 fetching corpus: 641, signal 99100/113867 (executing program) 1970/01/01 00:07:04 fetching corpus: 690, signal 100967/116527 (executing program) 1970/01/01 00:07:07 fetching corpus: 738, signal 103560/119772 (executing program) 1970/01/01 00:07:10 fetching corpus: 788, signal 106444/123167 (executing program) 1970/01/01 00:07:15 fetching corpus: 838, signal 108936/126242 (executing program) 1970/01/01 00:07:17 fetching corpus: 887, signal 110648/128609 (executing program) 1970/01/01 00:07:20 fetching corpus: 937, signal 112858/131349 (executing program) 1970/01/01 00:07:24 fetching corpus: 987, signal 116610/135305 (executing program) 1970/01/01 00:07:26 fetching corpus: 1037, signal 118348/137605 (executing program) 1970/01/01 00:07:28 fetching corpus: 1086, signal 122018/141353 (executing program) 1970/01/01 00:07:31 fetching corpus: 1136, signal 123864/143632 (executing program) 1970/01/01 00:07:34 fetching corpus: 1185, signal 125166/145426 (executing program) 1970/01/01 00:07:36 fetching corpus: 1235, signal 126485/147248 (executing program) 1970/01/01 00:07:39 fetching corpus: 1285, signal 128471/149515 (executing program) 1970/01/01 00:07:42 fetching corpus: 1335, signal 129736/151230 (executing program) 1970/01/01 00:07:45 fetching corpus: 1385, signal 131309/153142 (executing program) 1970/01/01 00:07:49 fetching corpus: 1434, signal 132973/155051 (executing program) 1970/01/01 00:07:53 fetching corpus: 1484, signal 134615/156959 (executing program) 1970/01/01 00:07:56 fetching corpus: 1534, signal 136197/158785 (executing program) 1970/01/01 00:07:59 fetching corpus: 1583, signal 137228/160240 (executing program) 1970/01/01 00:08:01 fetching corpus: 1633, signal 138465/161860 (executing program) 1970/01/01 00:08:03 fetching corpus: 1683, signal 139636/163348 (executing program) 1970/01/01 00:08:06 fetching corpus: 1733, signal 142001/165583 (executing program) 1970/01/01 00:08:09 fetching corpus: 1782, signal 143469/167199 (executing program) 1970/01/01 00:08:12 fetching corpus: 1831, signal 144706/168627 (executing program) 1970/01/01 00:08:14 fetching corpus: 1880, signal 145895/169970 (executing program) 1970/01/01 00:08:17 fetching corpus: 1929, signal 147523/171640 (executing program) 1970/01/01 00:08:19 fetching corpus: 1979, signal 149109/173218 (executing program) 1970/01/01 00:08:22 fetching corpus: 2027, signal 150829/174838 (executing program) 1970/01/01 00:08:24 fetching corpus: 2076, signal 152296/176240 (executing program) 1970/01/01 00:08:28 fetching corpus: 2126, signal 153223/177352 (executing program) 1970/01/01 00:08:31 fetching corpus: 2176, signal 154298/178492 (executing program) 1970/01/01 00:08:34 fetching corpus: 2226, signal 155293/179625 (executing program) 1970/01/01 00:08:36 fetching corpus: 2275, signal 156959/181104 (executing program) 1970/01/01 00:08:38 fetching corpus: 2324, signal 157899/182123 (executing program) 1970/01/01 00:08:40 fetching corpus: 2373, signal 158747/183106 (executing program) 1970/01/01 00:08:43 fetching corpus: 2423, signal 159654/184044 (executing program) 1970/01/01 00:08:44 fetching corpus: 2472, signal 160561/185011 (executing program) 1970/01/01 00:08:46 fetching corpus: 2522, signal 161328/185915 (executing program) 1970/01/01 00:08:49 fetching corpus: 2572, signal 162341/186843 (executing program) 1970/01/01 00:08:52 fetching corpus: 2622, signal 163391/187792 (executing program) 1970/01/01 00:08:54 fetching corpus: 2672, signal 164307/188640 (executing program) 1970/01/01 00:08:57 fetching corpus: 2722, signal 165380/189605 (executing program) 1970/01/01 00:08:59 fetching corpus: 2771, signal 166020/190308 (executing program) 1970/01/01 00:09:01 fetching corpus: 2820, signal 166672/191029 (executing program) 1970/01/01 00:09:04 fetching corpus: 2869, signal 167712/191917 (executing program) 1970/01/01 00:09:09 fetching corpus: 2919, signal 168813/192794 (executing program) 1970/01/01 00:09:11 fetching corpus: 2968, signal 169542/193529 (executing program) 1970/01/01 00:09:13 fetching corpus: 3018, signal 170125/194199 (executing program) 1970/01/01 00:09:15 fetching corpus: 3066, signal 170763/194869 (executing program) 1970/01/01 00:09:18 fetching corpus: 3116, signal 171637/195600 (executing program) 1970/01/01 00:09:21 fetching corpus: 3165, signal 172290/196213 (executing program) 1970/01/01 00:09:23 fetching corpus: 3214, signal 172747/196767 (executing program) 1970/01/01 00:09:25 fetching corpus: 3264, signal 173490/197406 (executing program) 1970/01/01 00:09:27 fetching corpus: 3314, signal 174258/198040 (executing program) 1970/01/01 00:09:31 fetching corpus: 3364, signal 175205/198750 (executing program) 1970/01/01 00:09:35 fetching corpus: 3413, signal 176151/199403 (executing program) 1970/01/01 00:09:37 fetching corpus: 3462, signal 176782/199916 (executing program) 1970/01/01 00:09:40 fetching corpus: 3512, signal 177490/200525 (executing program) 1970/01/01 00:09:42 fetching corpus: 3562, signal 178213/201070 (executing program) 1970/01/01 00:09:44 fetching corpus: 3611, signal 178850/201560 (executing program) 1970/01/01 00:09:47 fetching corpus: 3660, signal 179808/202165 (executing program) 1970/01/01 00:09:49 fetching corpus: 3709, signal 180355/202599 (executing program) 1970/01/01 00:09:51 fetching corpus: 3758, signal 180928/203016 (executing program) 1970/01/01 00:09:54 fetching corpus: 3808, signal 181632/203488 (executing program) 1970/01/01 00:09:58 fetching corpus: 3858, signal 182757/204057 (executing program) 1970/01/01 00:10:00 fetching corpus: 3907, signal 183504/204503 (executing program) 1970/01/01 00:10:03 fetching corpus: 3957, signal 184210/204900 (executing program) 1970/01/01 00:10:06 fetching corpus: 4005, signal 184721/205303 (executing program) 1970/01/01 00:10:10 fetching corpus: 4055, signal 185438/205692 (executing program) 1970/01/01 00:10:12 fetching corpus: 4103, signal 186087/206074 (executing program) 1970/01/01 00:10:15 fetching corpus: 4153, signal 186660/206444 (executing program) 1970/01/01 00:10:17 fetching corpus: 4202, signal 187113/206722 (executing program) 1970/01/01 00:10:20 fetching corpus: 4252, signal 187738/207052 (executing program) 1970/01/01 00:10:23 fetching corpus: 4301, signal 188456/207420 (executing program) 1970/01/01 00:10:25 fetching corpus: 4350, signal 189154/207777 (executing program) 1970/01/01 00:10:28 fetching corpus: 4400, signal 189958/208121 (executing program) 1970/01/01 00:10:30 fetching corpus: 4450, signal 190879/208484 (executing program) 1970/01/01 00:10:32 fetching corpus: 4500, signal 191375/208762 (executing program) 1970/01/01 00:10:35 fetching corpus: 4550, signal 191931/209000 (executing program) 1970/01/01 00:10:38 fetching corpus: 4599, signal 193010/209302 (executing program) 1970/01/01 00:10:41 fetching corpus: 4648, signal 193697/209549 (executing program) 1970/01/01 00:10:44 fetching corpus: 4698, signal 194770/209831 (executing program) 1970/01/01 00:10:45 fetching corpus: 4748, signal 195303/210054 (executing program) 1970/01/01 00:10:47 fetching corpus: 4797, signal 195813/210263 (executing program) 1970/01/01 00:10:50 fetching corpus: 4847, signal 196414/210445 (executing program) 1970/01/01 00:10:52 fetching corpus: 4897, signal 196937/210625 (executing program) 1970/01/01 00:10:55 fetching corpus: 4946, signal 197413/210783 (executing program) 1970/01/01 00:10:58 fetching corpus: 4995, signal 198292/210959 (executing program) 1970/01/01 00:11:00 fetching corpus: 5045, signal 198771/211062 (executing program) 1970/01/01 00:11:02 fetching corpus: 5094, signal 199391/211218 (executing program) 1970/01/01 00:11:05 fetching corpus: 5144, signal 199954/211331 (executing program) 1970/01/01 00:11:07 fetching corpus: 5194, signal 200488/211416 (executing program) 1970/01/01 00:11:11 fetching corpus: 5244, signal 201214/211422 (executing program) 1970/01/01 00:11:14 fetching corpus: 5294, signal 201737/211461 (executing program) 1970/01/01 00:11:17 fetching corpus: 5343, signal 202340/211461 (executing program) 1970/01/01 00:11:20 fetching corpus: 5393, signal 203052/211461 (executing program) 1970/01/01 00:11:23 fetching corpus: 5442, signal 203678/211488 (executing program) 1970/01/01 00:11:25 fetching corpus: 5492, signal 204190/211488 (executing program) 1970/01/01 00:11:28 fetching corpus: 5542, signal 204772/211491 (executing program) 1970/01/01 00:11:30 fetching corpus: 5591, signal 205209/211507 (executing program) 1970/01/01 00:11:33 fetching corpus: 5640, signal 205668/211507 (executing program) 1970/01/01 00:11:36 fetching corpus: 5690, signal 206256/211507 (executing program) 1970/01/01 00:11:39 fetching corpus: 5740, signal 206830/211513 (executing program) 1970/01/01 00:11:41 fetching corpus: 5789, signal 207241/211538 (executing program) 1970/01/01 00:11:43 fetching corpus: 5837, signal 207791/211538 (executing program) 1970/01/01 00:11:46 fetching corpus: 5886, signal 208230/211538 (executing program) 1970/01/01 00:11:49 fetching corpus: 5936, signal 208745/211538 (executing program) 1970/01/01 00:11:50 fetching corpus: 5957, signal 208941/211538 (executing program) 1970/01/01 00:11:50 fetching corpus: 5957, signal 208941/211538 (executing program) 1970/01/01 00:13:53 starting 2 fuzzer processes 00:13:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) 00:13:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) [ 867.609366][ T2039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.751686][ T2038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.814003][ T2039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.894286][ T2038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.535283][ T2038] device hsr_slave_0 entered promiscuous mode [ 882.613412][ T2038] device hsr_slave_1 entered promiscuous mode [ 884.676837][ T2039] device hsr_slave_0 entered promiscuous mode [ 884.720291][ T2039] device hsr_slave_1 entered promiscuous mode [ 884.764288][ T2039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.768719][ T2039] Cannot create hsr debugfs directory [ 889.005585][ T2038] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 889.007424][ T2038] CPU: 0 PID: 2038 Comm: syz-executor.0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 889.009188][ T2038] Hardware name: riscv-virtio,qemu (DT) [ 889.010291][ T2038] Call Trace: [ 889.011339][ T2038] [] dump_backtrace+0x2e/0x3c [ 889.012727][ T2038] [] show_stack+0x34/0x40 [ 889.013944][ T2038] [] dump_stack_lvl+0xe4/0x150 [ 889.015273][ T2038] [] dump_stack+0x1c/0x24 [ 889.016543][ T2038] [] panic+0x24a/0x634 [ 889.017713][ T2038] [] schedule+0x0/0x14c [ 889.018907][ T2038] [] preempt_schedule_common+0x4e/0xde [ 889.020251][ T2038] [] preempt_schedule+0x34/0x36 [ 889.021943][ T2038] [] _raw_spin_unlock_irqrestore+0x8c/0x98 [ 889.023288][ T2038] [] __debug_object_init+0x284/0x7b8 [ 889.024564][ T2038] [] debug_object_init+0x1a/0x22 [ 889.025791][ T2038] [] __init_work+0x6e/0x82 [ 889.026916][ T2038] [] call_usermodehelper_setup+0x9c/0x1ac [ 889.028285][ T2038] [] kobject_uevent_env+0xa22/0xdfe [ 889.029647][ T2038] [] kobject_uevent+0x22/0x2e [ 889.031413][ T2038] [] net_rx_queue_update_kobjects+0xd6/0x3c6 [ 889.033207][ T2038] [] netdev_register_kobject+0x166/0x208 [ 889.034544][ T2038] [] register_netdevice+0x8ee/0xc6a [ 889.035880][ T2038] [] macvlan_common_newlink+0x8ec/0xc62 [ 889.037217][ T2038] [] macvlan_newlink+0x32/0x44 [ 889.038474][ T2038] [] __rtnl_newlink+0xc16/0xfa0 [ 889.041706][ T2038] [] rtnl_newlink+0x60/0x8c [ 889.043409][ T2038] [] rtnetlink_rcv_msg+0x338/0x9a0 [ 889.044646][ T2038] [] netlink_rcv_skb+0xf8/0x2be [ 889.045864][ T2038] [] rtnetlink_rcv+0x26/0x30 [ 889.047090][ T2038] [] netlink_unicast+0x40e/0x5fe [ 889.048281][ T2038] [] netlink_sendmsg+0x4e0/0x994 [ 889.049488][ T2038] [] sock_sendmsg+0xa0/0xc4 [ 889.051144][ T2038] [] __sys_sendto+0x1f2/0x2e0 [ 889.052817][ T2038] [] sys_sendto+0x3e/0x52 [ 889.054111][ T2038] [] ret_from_syscall+0x0/0x2 [ 889.055714][ T2038] SMP: stopping secondary CPUs [ 889.058245][ T2038] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:46:41 Registers: info registers vcpu 0 pc ffffffff80119ada mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff831afd22 mcause 0000000000000009 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80146d4e x2/sp ffffaf801081e4b0 x3/gp ffffffff85863ac0 x4/tp ffffaf800b708000 x5/t0 ffffffff84a981a8 x6/t1 fffff5ef02103c68 x7/t2 0000000000000000 x8/s0 ffffaf801081e410 x9/s1 fffff5ef02103c84 x10/a0 0000000000000000 x11/a1 00000000000002ce x12/a2 0000000000000002 x13/a3 ffffffff8011ed4a x14/a4 ffffaf800b709000 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffaf801081e347 x18/s2 ffffaf801081e320 x19/s3 1ffff5f002103c58 x20/s4 ffffffff8362ff80 x21/s5 ffffffff85889780 x22/s6 ffffaf801081e270 x23/s7 ffffaf809081e3ef x24/s8 ffffffff85889780 x25/s9 ffffffff00000000 x26/s10 0000000000ffffff x27/s11 ffffaf801081e100 x28/t3 1ffff5f002103c38 x29/t4 fffff5ef02103c20 x30/t5 fffff5ef02103c21 x31/t6 ffffaf801081e3f1 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff831a185c mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc 00007fffb3c6aa20 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff831a1986 x2/sp ffffaf800a0efa00 x3/gp ffffffff85863ac0 x4/tp ffffaf800e4f48c0 x5/t0 00007fffe949da98 x6/t1 fffff5ef0141df7f x7/t2 00000000769a9fca x8/s0 ffffaf800a0efa70 x9/s1 0000000000000000 x10/a0 ffffffff838a0620 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffff831a24bc x14/a4 0000000000000000 x15/a5 ffffffff84b782f0 x16/a6 0000000000f00000 x17/a7 ffffaf800a0efbff x18/s2 ffffaf800e4f48c0 x19/s3 ffffffff84b73ec0 x20/s4 ffffffff838a0620 x21/s5 0000000000000001 x22/s6 0000000000000000 x23/s7 ffffffff803ccf2c x24/s8 0000000000000000 x25/s9 1ffff5f00141df6c x26/s10 1ffff5f00141df34 x27/s11 ffffaf800a0efa40 x28/t3 ffffffff801163b2 x29/t4 fffff5ef0141df7f x30/t5 0000000000000008 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000