./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2225996917 <...> forked to background, child pid 3185 no interfaces have a carrier [ 25.940719][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.949677][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.157' (ECDSA) to the list of known hosts. execve("./syz-executor2225996917", ["./syz-executor2225996917"], 0x7ffe8b11bdb0 /* 10 vars */) = 0 brk(NULL) = 0x5555567fd000 brk(0x5555567fdc40) = 0x5555567fdc40 arch_prctl(ARCH_SET_FS, 0x5555567fd300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2225996917", 4096) = 28 brk(0x55555681ec40) = 0x55555681ec40 brk(0x55555681f000) = 0x55555681f000 mprotect(0x7fba38b4f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567fd5d0) = 3607 ./strace-static-x86_64: Process 3607 attached [pid 3607] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3607] setsid() = 1 [pid 3607] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3607] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3607] unshare(CLONE_NEWNS) = 0 [pid 3607] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3607] unshare(CLONE_NEWIPC) = 0 [pid 3607] unshare(CLONE_NEWCGROUP) = 0 [pid 3607] unshare(CLONE_NEWUTS) = 0 [pid 3607] unshare(CLONE_SYSVSEM) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "16777216", 8) = 8 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "536870912", 9) = 9 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1024", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "8192", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1024", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1024", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3607] close(3) = 0 [pid 3607] getpid() = 1 [pid 3607] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 de fa ff ff e8 9c 39 a2 f9 e8 77 57 9e 01 31 ff 89 c3 89 [ 51.377481][ T3607] RSP: 0018:ffffc9000300fbf8 EFLAGS: 00010293 [ 51.383597][ T3607] RAX: 0000000000000000 RBX: ffff88801b6a2000 RCX: 0000000000000000 [ 51.391649][ T3607] RDX: ffff8880271f5880 RSI: ffffffff87d84aa8 RDI: ffff88801ae39368 [ 51.399628][ T3607] RBP: ffff88801ae39360 R08: 0000000000000001 R09: 0000000000000001 [ 51.407662][ T3607] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 51.415838][ T3607] R13: ffff88801b6a2000 R14: 0000000000000000 R15: ffff88801ae38cc0 [ 51.423875][ T3607] FS: 00005555567fd300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 51.432882][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.439474][ T3607] CR2: 0000000020000180 CR3: 000000001bb71000 CR4: 00000000003506e0 [ 51.447500][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.455549][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.463682][ T3607] Call Trace: [ 51.466972][ T3607] [ 51.469899][ T3607] ? find_held_lock+0x2d/0x110 [ 51.474748][ T3607] ? inet_csk_update_fastreuse+0xb30/0xb30 [ 51.480604][ T3607] ? rcu_read_lock_sched_held+0x3a/0x70 [ 51.486239][ T3607] ? trace_inet_sock_set_state+0x1d6/0x290 [ 51.492147][ T3607] ? inet_csk_update_fastreuse+0xb30/0xb30 [ 51.498004][ T3607] inet_csk_listen_start+0x13e/0x3c0 [ 51.503404][ T3607] inet_listen+0x231/0x640 [ 51.507877][ T3607] ? inet_init_net+0x5c0/0x5c0 [ 51.512744][ T3607] ? aa_af_perm+0x230/0x230 [ 51.517270][ T3607] ? find_held_lock+0x2d/0x110 [ 51.522160][ T3607] __sys_listen+0x17d/0x250 [ 51.526694][ T3607] ? __ia32_sys_bind+0xb0/0xb0 [ 51.531534][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.536754][ T3607] ? _raw_spin_unlock_irq+0x2a/0x40 [ 51.542014][ T3607] ? ptrace_notify+0xfa/0x140 [ 51.546704][ T3607] __x64_sys_listen+0x50/0x70 [ 51.551455][ T3607] do_syscall_64+0x35/0xb0 [ 51.555890][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.561840][ T3607] RIP: 0033:0x7fba38adb4d9 [ 51.566263][ T3607] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.585951][ T3607] RSP: 002b:00007ffe43836ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 51.594595][ T3607] RAX: ffffffffffffffda RBX: 000000002000024a RCX: 00007fba38adb4d9 [ 51.602662][ T3607] RDX: ffffffffffffffc0 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.610642][ T3607] RBP: 0000000020000257 R08: 000000000000001c R09: 000000000000001c [ 51.618703][ T3607] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000000 [ 51.626725][ T3607] R13: 00007ffe43836b00 R14: 0000000000000000 R15: 0000000000000000 [ 51.634794][ T3607] [ 51.637831][ T3607] Kernel panic - not syncing: panic_on_warn set ... [ 51.644428][ T3607] CPU: 1 PID: 3607 Comm: syz-executor222 Not tainted 5.18.0-syzkaller-11972-gd1dc87763f40 #0 [ 51.654579][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.664636][ T3607] Call Trace: [ 51.667929][ T3607] [ 51.670873][ T3607] dump_stack_lvl+0xcd/0x134 [ 51.675478][ T3607] panic+0x2d7/0x636 [ 51.679379][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.685375][ T3607] ? __warn.cold+0x1d9/0x2cd [ 51.689976][ T3607] ? inet_csk_get_port+0x1148/0x1ad0 [ 51.695277][ T3607] __warn.cold+0x1ea/0x2cd [ 51.699700][ T3607] ? inet_csk_get_port+0x1148/0x1ad0 [ 51.704992][ T3607] report_bug+0x1bc/0x210 [ 51.709336][ T3607] handle_bug+0x3c/0x60 [ 51.713515][ T3607] exc_invalid_op+0x14/0x40 [ 51.718027][ T3607] asm_exc_invalid_op+0x1b/0x20 [ 51.722898][ T3607] RIP: 0010:inet_csk_get_port+0x1148/0x1ad0 [ 51.728827][ T3607] Code: 07 00 00 48 8b 44 24 28 4c 89 ee 48 8b 78 18 e8 2e d1 fe ff e9 0f ff ff ff e8 b4 39 a2 f9 0f 0b e9 ae fa ff ff e8 a8 39 a2 f9 <0f> 0b e9 de fa ff ff e8 9c 39 a2 f9 e8 77 57 9e 01 31 ff 89 c3 89 [ 51.748450][ T3607] RSP: 0018:ffffc9000300fbf8 EFLAGS: 00010293 [ 51.754522][ T3607] RAX: 0000000000000000 RBX: ffff88801b6a2000 RCX: 0000000000000000 [ 51.762497][ T3607] RDX: ffff8880271f5880 RSI: ffffffff87d84aa8 RDI: ffff88801ae39368 [ 51.770471][ T3607] RBP: ffff88801ae39360 R08: 0000000000000001 R09: 0000000000000001 [ 51.778452][ T3607] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 51.786440][ T3607] R13: ffff88801b6a2000 R14: 0000000000000000 R15: ffff88801ae38cc0 [ 51.794441][ T3607] ? inet_csk_get_port+0x1148/0x1ad0 [ 51.799786][ T3607] ? inet_csk_get_port+0x1148/0x1ad0 [ 51.805093][ T3607] ? find_held_lock+0x2d/0x110 [ 51.809870][ T3607] ? inet_csk_update_fastreuse+0xb30/0xb30 [ 51.815698][ T3607] ? rcu_read_lock_sched_held+0x3a/0x70 [ 51.821255][ T3607] ? trace_inet_sock_set_state+0x1d6/0x290 [ 51.827066][ T3607] ? inet_csk_update_fastreuse+0xb30/0xb30 [ 51.832882][ T3607] inet_csk_listen_start+0x13e/0x3c0 [ 51.838198][ T3607] inet_listen+0x231/0x640 [ 51.842644][ T3607] ? inet_init_net+0x5c0/0x5c0 [ 51.847421][ T3607] ? aa_af_perm+0x230/0x230 [ 51.851941][ T3607] ? find_held_lock+0x2d/0x110 [ 51.856738][ T3607] __sys_listen+0x17d/0x250 [ 51.861272][ T3607] ? __ia32_sys_bind+0xb0/0xb0 [ 51.866068][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 51.871285][ T3607] ? _raw_spin_unlock_irq+0x2a/0x40 [ 51.876510][ T3607] ? ptrace_notify+0xfa/0x140 [ 51.881204][ T3607] __x64_sys_listen+0x50/0x70 [ 51.885907][ T3607] do_syscall_64+0x35/0xb0 [ 51.890339][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.896238][ T3607] RIP: 0033:0x7fba38adb4d9 [ 51.900666][ T3607] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.920277][ T3607] RSP: 002b:00007ffe43836ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 51.928696][ T3607] RAX: ffffffffffffffda RBX: 000000002000024a RCX: 00007fba38adb4d9 [ 51.936669][ T3607] RDX: ffffffffffffffc0 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.944644][ T3607] RBP: 0000000020000257 R08: 000000000000001c R09: 000000000000001c [ 51.952633][ T3607] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000000 [ 51.960605][ T3607] R13: 00007ffe43836b00 R14: 0000000000000000 R15: 0000000000000000 [ 51.968595][ T3607] [ 51.971902][ T3607] Kernel Offset: disabled [ 51.976269][ T3607] Rebooting in 86400 seconds..