./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3774581547 <...> forked to background, child pid 3186[ 27.199172][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 no interfaces have a carrier [ 27.221993][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts. execve("./syz-executor3774581547", ["./syz-executor3774581547"], 0x7ffe086e0ce0 /* 10 vars */) = 0 brk(NULL) = 0x555555e29000 brk(0x555555e29c40) = 0x555555e29c40 arch_prctl(ARCH_SET_FS, 0x555555e29300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3774581547", 4096) = 28 brk(0x555555e4ac40) = 0x555555e4ac40 brk(0x555555e4b000) = 0x555555e4b000 mprotect(0x7f8b41d92000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 3 setsockopt(3, SOL_SOCKET, SO_REUSEPORT, [4100], 4) = 0 listen(3, 0) = 0 exit_group(0) = ? syzkaller login: [ 50.301990][ T3607] [ 50.304430][ T3607] ============================= [ 50.309260][ T3607] WARNING: suspicious RCU usage [ 50.314146][ T3607] 6.0.0-rc1-syzkaller-00066-g3b06a2755758 #0 Not tainted [ 50.321233][ T3607] ----------------------------- [ 50.326093][ T3607] include/net/sock.h:592 suspicious rcu_dereference_check() usage! [ 50.334011][ T3607] [ 50.334011][ T3607] other info that might help us debug this: [ 50.334011][ T3607] [ 50.344298][ T3607] [ 50.344298][ T3607] rcu_scheduler_active = 2, debug_locks = 1 [ 50.352411][ T3607] 5 locks held by syz-executor377/3607: [ 50.357979][ T3607] #0: ffff88807357dc10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 50.368566][ T3607] #1: ffff88807e749930 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1e/0xc0 [ 50.377613][ T3607] #2: ffffc90001315d50 (&h->lhash2[i].lock){+.+.}-{2:2}, at: inet_unhash+0x345/0x680 [ 50.387221][ T3607] #3: ffffffff8d7bc038 (reuseport_lock){+...}-{2:2}, at: reuseport_detach_sock+0x22/0x4a0 [ 50.397291][ T3607] #4: ffff88807e749bb8 (clock-AF_INET){++..}-{2:2}, at: bpf_sk_reuseport_detach+0x26/0x190 [ 50.407452][ T3607] [ 50.407452][ T3607] stack backtrace: [ 50.413386][ T3607] CPU: 1 PID: 3607 Comm: syz-executor377 Not tainted 6.0.0-rc1-syzkaller-00066-g3b06a2755758 #0 [ 50.423798][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 50.433853][ T3607] Call Trace: [ 50.437131][ T3607] [ 50.440060][ T3607] dump_stack_lvl+0xcd/0x134 [ 50.444667][ T3607] bpf_sk_reuseport_detach+0x156/0x190 [ 50.450119][ T3607] reuseport_detach_sock+0x8c/0x4a0 [ 50.455312][ T3607] reuseport_stop_listen_sock+0x6d/0x500 [ 50.460944][ T3607] inet_unhash+0x3b1/0x680 [ 50.465350][ T3607] tcp_set_state+0x198/0x7e0 [ 50.469948][ T3607] ? tcp_wmem_schedule+0x210/0x210 [ 50.475058][ T3607] ? find_held_lock+0x2d/0x110 [ 50.479835][ T3607] ? tcp_close+0x1e/0xc0 [ 50.484110][ T3607] __tcp_close+0xbfd/0xf50 [ 50.488568][ T3607] tcp_close+0x29/0xc0 [ 50.492645][ T3607] inet_release+0x12e/0x270 [ 50.497164][ T3607] __sock_release+0xcd/0x280 [ 50.501763][ T3607] sock_close+0x18/0x20 [ 50.505927][ T3607] __fput+0x277/0x9d0 [ 50.509917][ T3607] ? __sock_release+0x280/0x280 [ 50.514781][ T3607] task_work_run+0xdd/0x1a0 [ 50.519301][ T3607] do_exit+0xad5/0x29b0 [ 50.523488][ T3607] ? mm_update_next_owner+0x7a0/0x7a0 [ 50.528869][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.534078][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.539293][ T3607] do_group_exit+0xd2/0x2f0 [ 50.543810][ T3607] __x64_sys_exit_group+0x3a/0x50 [ 50.548875][ T3607] do_syscall_64+0x35/0xb0 [ 50.553299][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.559200][ T3607] RIP: 0033:0x7f8b41d24639 [ 50.563619][ T3607] Code: Unable to access opcode bytes at RIP 0x7f8b41d2460f. [ 50.570984][ T3607] RSP: 002b:00007ffc4af87918 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 50.579405][ T3607] RAX: ffffffffffffffda RBX: 00007f8b41d98270 RCX: 00007f8b41d24639 [ 50.587381][ T3607] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 50.595372][ T3607] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000000 +++ exited with 0 +++ [