./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4192135507 <...> Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. execve("./syz-executor4192135507", ["./syz-executor4192135507"], 0x7fff308af120 /* 10 vars */) = 0 brk(NULL) = 0x5555573d7000 brk(0x5555573d7d00) = 0x5555573d7d00 arch_prctl(ARCH_SET_FS, 0x5555573d7380) = 0 set_tid_address(0x5555573d7650) = 5034 set_robust_list(0x5555573d7660, 24) = 0 rseq(0x5555573d7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4192135507", 4096) = 28 getrandom("\x10\x4b\xd6\x79\xe3\x80\x36\x96", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555573d7d00 brk(0x5555573f8d00) = 0x5555573f8d00 brk(0x5555573f9000) = 0x5555573f9000 mprotect(0x7f36592c9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573d7650) = 5035 ./strace-static-x86_64: Process 5035 attached [pid 5035] set_robust_list(0x5555573d7660, 24) = 0 [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5035] setpgid(0, 0) = 0 [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5035] write(3, "1000", 4) = 4 [pid 5035] close(3) = 0 [pid 5035] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 5035] write(3, "#! ./file0\n", 11) = 11 [pid 5035] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 4 [ 75.430079][ T27] audit: type=1400 audit(1697164020.308:83): avc: denied { write } for pid=5031 comm="strace-static-x" path="pipe:[4402]" dev="pipefs" ino=4402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [pid 5035] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 5035] sendmsg(5, {msg_name=NULL, msg_namelen=919, msg_iov=[{iov_base=NULL, iov_len=65424}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 5035] getsockname(5, {sa_family=AF_NETLINK, sa_data="\x00\x00\xb5\x4a\x95\xfa\x00\x00"}, [10 => 12]) = 0 [pid 5035] ioctl(4, TUNSETIFINDEX, 0x20000040) = 0 [ 75.462195][ T27] audit: type=1400 audit(1697164020.338:84): avc: denied { execmem } for pid=5034 comm="syz-executor419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.489043][ T5035] ------------[ cut here ]------------ [ 75.494635][ T5035] WARNING: CPU: 0 PID: 5035 at net/core/dev.c:9596 dev_index_reserve+0x1a2/0x1c0 [ 75.503826][ T5035] Modules linked in: [ 75.507729][ T5035] CPU: 0 PID: 5035 Comm: syz-executor419 Not tainted 6.6.0-rc5-syzkaller-00072-g401644852d0b #0 [ 75.518232][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 75.528426][ T5035] RIP: 0010:dev_index_reserve+0x1a2/0x1c0 [ 75.534239][ T5035] Code: 00 31 d2 4d 8d 45 50 b9 ff ff ff 7f 48 8d 74 24 20 e8 02 2b 03 02 4c 89 e7 89 c3 e8 38 3b 12 02 e9 48 ff ff ff e8 4e 66 56 f9 <0f> 0b bb ea ff ff ff e9 52 ff ff ff e8 4d 7e 0e 02 66 66 2e 0f 1f [ 75.553942][ T5035] RSP: 0018:ffffc9000338fc30 EFLAGS: 00010293 [ 75.560027][ T5035] RAX: 0000000000000000 RBX: 00000000fa954ab5 RCX: 0000000000000000 [ 75.568107][ T5035] RDX: ffff8880247cc0c0 RSI: ffffffff88305ec2 RDI: 0000000000000005 [ 75.576154][ T5035] RBP: 1ffff92000671f86 R08: 0000000000000005 R09: 0000000000000000 [ 75.584175][ T5035] R10: 00000000fa954ab5 R11: ffffffff910c7730 R12: ffff888073ef4010 [ 75.592251][ T5035] R13: ffffffff9260e540 R14: ffff888073ef4000 R15: ffff888073ef40f8 [ 75.600248][ T5035] FS: 00005555573d7380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 75.609243][ T5035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.615884][ T5035] CR2: 0000000000000000 CR3: 0000000028447000 CR4: 00000000003506f0 [ 75.623934][ T5035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.632005][ T5035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.640072][ T5035] Call Trace: [ 75.643379][ T5035] [ 75.646318][ T5035] ? show_regs+0x8f/0xa0 [ 75.650598][ T5035] ? __warn+0xe6/0x380 [ 75.654767][ T5035] ? dev_index_reserve+0x1a2/0x1c0 [ 75.659904][ T5035] ? report_bug+0x3bc/0x580 [ 75.664467][ T5035] ? handle_bug+0x3c/0x70 [ 75.668897][ T5035] ? exc_invalid_op+0x17/0x40 [ 75.673651][ T5035] ? asm_exc_invalid_op+0x1a/0x20 [ 75.678698][ T5035] ? dev_index_reserve+0x1a2/0x1c0 [ 75.683879][ T5035] ? dev_index_reserve+0x1a2/0x1c0 [ 75.689018][ T5035] ? tc_run+0x530/0x530 [ 75.693258][ T5035] ? tun_net_init+0x4f2/0x6d0 [ 75.697967][ T5035] ? tun_attach.isra.0+0x1790/0x1790 [ 75.703354][ T5035] register_netdevice+0x69a/0x1490 [ 75.708489][ T5035] ? unregister_netdevice_queue+0x3c0/0x3c0 [ 75.714480][ T5035] ? alloc_netdev_mqs+0xee6/0x1290 [ 75.719614][ T5035] __tun_chr_ioctl+0x3091/0x4700 [ 75.724610][ T5035] ? backing_inode_security+0x143/0x160 [ 75.730191][ T5035] ? tun_chr_read_iter+0x290/0x290 [ 75.735374][ T5035] ? selinux_file_ioctl+0x17d/0x270 [ 75.740603][ T5035] ? selinux_file_ioctl+0xb5/0x270 [ 75.745807][ T5035] ? tun_chr_compat_ioctl+0x30/0x30 [ 75.751020][ T5035] __x64_sys_ioctl+0x18f/0x210 [ 75.755852][ T5035] do_syscall_64+0x38/0xb0 [ 75.760297][ T5035] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.766250][ T5035] RIP: 0033:0x7f3659256b79 [ 75.770681][ T5035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.790454][ T5035] RSP: 002b:00007ffe53722c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.798945][ T5035] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3659256b79 [ 75.807011][ T5035] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 75.815066][ T5035] RBP: 00007f36592c95f0 R08: 0000000000000006 R09: 0000000000000006 [ 75.823155][ T5035] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 75.831426][ T5035] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 75.839462][ T5035] [ 75.842581][ T5035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.849897][ T5035] CPU: 0 PID: 5035 Comm: syz-executor419 Not tainted 6.6.0-rc5-syzkaller-00072-g401644852d0b #0 [ 75.860317][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 75.870453][ T5035] Call Trace: [ 75.873744][ T5035] [ 75.876674][ T5035] dump_stack_lvl+0xd9/0x1b0 [ 75.881540][ T5035] panic+0x6a6/0x750 [ 75.885428][ T5035] ? panic_smp_self_stop+0xa0/0xa0 [ 75.890544][ T5035] ? dev_index_reserve+0x1a2/0x1c0 [ 75.895656][ T5035] check_panic_on_warn+0xab/0xb0 [ 75.900612][ T5035] __warn+0xf2/0x380 [ 75.904525][ T5035] ? dev_index_reserve+0x1a2/0x1c0 [ 75.909658][ T5035] report_bug+0x3bc/0x580 [ 75.914080][ T5035] handle_bug+0x3c/0x70 [ 75.918237][ T5035] exc_invalid_op+0x17/0x40 [ 75.922748][ T5035] asm_exc_invalid_op+0x1a/0x20 [ 75.927634][ T5035] RIP: 0010:dev_index_reserve+0x1a2/0x1c0 [ 75.933391][ T5035] Code: 00 31 d2 4d 8d 45 50 b9 ff ff ff 7f 48 8d 74 24 20 e8 02 2b 03 02 4c 89 e7 89 c3 e8 38 3b 12 02 e9 48 ff ff ff e8 4e 66 56 f9 <0f> 0b bb ea ff ff ff e9 52 ff ff ff e8 4d 7e 0e 02 66 66 2e 0f 1f [ 75.953004][ T5035] RSP: 0018:ffffc9000338fc30 EFLAGS: 00010293 [ 75.959090][ T5035] RAX: 0000000000000000 RBX: 00000000fa954ab5 RCX: 0000000000000000 [ 75.967075][ T5035] RDX: ffff8880247cc0c0 RSI: ffffffff88305ec2 RDI: 0000000000000005 [ 75.975049][ T5035] RBP: 1ffff92000671f86 R08: 0000000000000005 R09: 0000000000000000 [ 75.983031][ T5035] R10: 00000000fa954ab5 R11: ffffffff910c7730 R12: ffff888073ef4010 [ 75.991002][ T5035] R13: ffffffff9260e540 R14: ffff888073ef4000 R15: ffff888073ef40f8 [ 75.998975][ T5035] ? dev_index_reserve+0x1a2/0x1c0 [ 76.004098][ T5035] ? tc_run+0x530/0x530 [ 76.008277][ T5035] ? tun_net_init+0x4f2/0x6d0 [ 76.012969][ T5035] ? tun_attach.isra.0+0x1790/0x1790 [ 76.018261][ T5035] register_netdevice+0x69a/0x1490 [ 76.023407][ T5035] ? unregister_netdevice_queue+0x3c0/0x3c0 [ 76.029310][ T5035] ? alloc_netdev_mqs+0xee6/0x1290 [ 76.034427][ T5035] __tun_chr_ioctl+0x3091/0x4700 [ 76.039372][ T5035] ? backing_inode_security+0x143/0x160 [ 76.044974][ T5035] ? tun_chr_read_iter+0x290/0x290 [ 76.050300][ T5035] ? selinux_file_ioctl+0x17d/0x270 [ 76.055525][ T5035] ? selinux_file_ioctl+0xb5/0x270 [ 76.060645][ T5035] ? tun_chr_compat_ioctl+0x30/0x30 [ 76.065854][ T5035] __x64_sys_ioctl+0x18f/0x210 [ 76.070631][ T5035] do_syscall_64+0x38/0xb0 [ 76.075049][ T5035] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.080944][ T5035] RIP: 0033:0x7f3659256b79 [ 76.085358][ T5035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.104964][ T5035] RSP: 002b:00007ffe53722c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.113375][ T5035] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3659256b79 [ 76.121340][ T5035] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 76.129321][ T5035] RBP: 00007f36592c95f0 R08: 0000000000000006 R09: 0000000000000006 [ 76.137289][ T5035] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 76.145258][ T5035] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 76.153231][ T5035] [ 76.156340][ T5035] Kernel Offset: disabled [ 76.160748][ T5035] Rebooting in 86400 seconds..