./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2278839062 <...> forked to background, child pid 3046 no interfaces have a carrier [ 67.783020][ T3047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.814650][ T3047] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 95.143651][ T121] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.165' (ECDSA) to the list of known hosts. execve("./syz-executor2278839062", ["./syz-executor2278839062"], 0x7fff867a21e0 /* 10 vars */) = 0 brk(NULL) = 0x555555bd9000 brk(0x555555bd9c40) = 0x555555bd9c40 arch_prctl(ARCH_SET_FS, 0x555555bd9300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2278839062", 4096) = 28 brk(0x555555bfac40) = 0x555555bfac40 brk(0x555555bfb000) = 0x555555bfb000 mprotect(0x7fdbb1604000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555bd95d0) = 3476 ./strace-static-x86_64: Process 3476 attached [pid 3476] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3476] setsid() = 1 [pid 3476] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3476] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3476] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3476] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3476] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3476] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3476] unshare(CLONE_NEWNS) = 0 [pid 3476] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3476] unshare(CLONE_NEWIPC) = 0 [pid 3476] unshare(CLONE_NEWCGROUP) = 0 [pid 3476] unshare(CLONE_NEWUTS) = 0 [pid 3476] unshare(CLONE_SYSVSEM) = 0 [pid 3476] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3476] write(3, "16777216", 8) = 8 [pid 3476] close(3) = 0 [pid 3476] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3476] write(3, "536870912", 9) = 9 [pid 3476] close(3) = 0 [pid 3476] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3476] write(3, "1024", 4) = 4 [pid 3476] close(3) = 0 [pid 3476] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3476] write(3, "8192", 4) = 4 [pid 3476] close(3) = 0 [pid 3476] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3476] write(3, "1024", 4) = 4 [pid 3476] close(3) = 0 [pid 3476] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3476] write(3, "1024", 4) = 4 [pid 3476] close(3) = 0 [pid 3476] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3476] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3476] close(3) = 0 [pid 3476] getpid() = 1 [pid 3476] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 104.297502][ T3507] dump_stack_lvl+0x1ff/0x28e [ 104.302212][ T3507] dump_stack+0x25/0x28 [ 104.306412][ T3507] panic+0x4fe/0xc73 [ 104.310359][ T3507] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 104.316565][ T3507] ? add_taint+0x181/0x210 [ 104.320992][ T3507] ? console_unlock+0x1c00/0x2130 [ 104.326043][ T3507] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 104.331898][ T3507] kmsan_report+0x2e6/0x2f0 [ 104.336444][ T3507] ? __msan_warning+0x94/0x110 [ 104.341255][ T3507] ? ipv6_find_tlv+0x460/0x510 [ 104.346051][ T3507] ? ip6_find_1stfragopt+0x2af/0x610 [ 104.351474][ T3507] ? ip6_fragment+0x26b/0x4550 [ 104.356275][ T3507] ? __ip6_finish_output+0xcc6/0x10b0 [ 104.361674][ T3507] ? ip6_finish_output+0x15c/0x590 [ 104.366823][ T3507] ? ip6_output+0x4b9/0x800 [ 104.371362][ T3507] ? ip6_local_out+0x180/0x1f0 [ 104.376194][ T3507] ? ip6_push_pending_frames+0x252/0x570 [ 104.381868][ T3507] ? rawv6_push_pending_frames+0xcc1/0xd30 [ 104.387696][ T3507] ? rawv6_sendmsg+0x3079/0x33b0 [ 104.392650][ T3507] ? inet_sendmsg+0x15b/0x1d0 [ 104.397359][ T3507] ? ____sys_sendmsg+0xe11/0x12c0 [ 104.402411][ T3507] ? __sys_sendmsg+0x704/0x840 [ 104.407215][ T3507] ? __x64_sys_sendmsg+0xe2/0x120 [ 104.412261][ T3507] ? do_syscall_64+0x51/0xa0 [ 104.416888][ T3507] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 104.422978][ T3507] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 104.429084][ T3507] ? arch_stack_walk+0x291/0x3c0 [ 104.434050][ T3507] ? kmsan_get_metadata+0x33/0x220 [ 104.439193][ T3507] ? kmsan_internal_memmove_metadata+0x96/0x350 [ 104.445477][ T3507] ? __msan_memcpy+0x65/0x90 [ 104.450116][ T3507] ? skb_copy_bits+0xfa3/0x10f0 [ 104.455010][ T3507] ? kmsan_get_metadata+0x33/0x220 [ 104.460133][ T3507] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 104.465956][ T3507] __msan_warning+0x94/0x110 [ 104.470575][ T3507] ipv6_find_tlv+0x460/0x510 [ 104.475221][ T3507] ip6_find_1stfragopt+0x2af/0x610 [ 104.480380][ T3507] ip6_fragment+0x26b/0x4550 [ 104.485015][ T3507] ? __ip6_finish_output+0x10b0/0x10b0 [ 104.490504][ T3507] ? get_l4proto+0x6c9/0x810 [ 104.495108][ T3507] ? ipv6_confirm+0x10b/0x910 [ 104.499815][ T3507] ? filter_irq_stacks+0xb5/0x230 [ 104.504902][ T3507] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 104.510740][ T3507] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 104.516586][ T3507] __ip6_finish_output+0xcc6/0x10b0 [ 104.521838][ T3507] ip6_finish_output+0x15c/0x590 [ 104.526825][ T3507] ip6_output+0x4b9/0x800 [ 104.531209][ T3507] ? ip6_output+0x800/0x800 [ 104.535754][ T3507] ? ac6_seq_show+0x200/0x200 [ 104.540462][ T3507] ip6_local_out+0x180/0x1f0 [ 104.545095][ T3507] ip6_push_pending_frames+0x252/0x570 [ 104.550611][ T3507] rawv6_push_pending_frames+0xcc1/0xd30 [ 104.556301][ T3507] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 104.562171][ T3507] rawv6_sendmsg+0x3079/0x33b0 [ 104.566974][ T3507] ? __stack_depot_save+0x21/0x4b0 [ 104.572142][ T3507] ? kmsan_get_metadata+0x33/0x220 [ 104.577288][ T3507] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 104.583145][ T3507] ? compat_rawv6_ioctl+0x120/0x120 [ 104.588381][ T3507] inet_sendmsg+0x15b/0x1d0 [ 104.592930][ T3507] ____sys_sendmsg+0xe11/0x12c0 [ 104.597827][ T3507] ? inet_send_prepare+0x6c0/0x6c0 [ 104.602969][ T3507] __sys_sendmsg+0x704/0x840 [ 104.607628][ T3507] ? kmsan_get_metadata+0x33/0x220 [ 104.612772][ T3507] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 104.618596][ T3507] ? preempt_count_sub+0xf8/0x330 [ 104.623656][ T3507] ? _raw_spin_unlock_irq+0x40/0x60 [ 104.628894][ T3507] ? kmsan_get_metadata+0x33/0x220 [ 104.634039][ T3507] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 104.639866][ T3507] __x64_sys_sendmsg+0xe2/0x120 [ 104.644766][ T3507] do_syscall_64+0x51/0xa0 [ 104.649202][ T3507] ? exc_page_fault+0x76/0x150 [ 104.653995][ T3507] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 104.659932][ T3507] RIP: 0033:0x7fdbb1590b39 [ 104.664365][ T3507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 104.684011][ T3507] RSP: 002b:00007ffc57142ba8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.692544][ T3507] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdbb1590b39 [ 104.700545][ T3507] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 104.708541][ T3507] RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d [ 104.716532][ T3507] R10: 000000000000000d R11: 0000000000000246 R12: 00007ffc57142bc0 [ 104.724528][ T3507] R13: 00000000000f4240 R14: 0000000000000000 R15: 0000000000000000 [ 104.732534][ T3507] [ 104.735756][ T3507] Kernel Offset: disabled [ 104.740081][ T3507] Rebooting in 86400 seconds..