./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1625642442 <...> Warning: Permanently added '10.128.1.84' (ECDSA) to the list of known hosts. execve("./syz-executor1625642442", ["./syz-executor1625642442"], 0x7fffc9d57490 /* 10 vars */) = 0 brk(NULL) = 0x555556d07000 brk(0x555556d07c40) = 0x555556d07c40 arch_prctl(ARCH_SET_FS, 0x555556d07300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1625642442", 4096) = 28 brk(0x555556d28c40) = 0x555556d28c40 brk(0x555556d29000) = 0x555556d29000 mprotect(0x7f3fb5a3a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d075d0) = 3609 ./strace-static-x86_64: Process 3609 attached [pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3609] setpgid(0, 0) = 0 [pid 3609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1000", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 3609] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3609] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3609] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3609] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3609] write(5, "19", 2) = 2 syzkaller login: [ 41.654288][ T3609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [ 41.663829][ T3609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3609] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3609] exit_group(0) = ? [ 41.703118][ T3609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3609] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3609, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3612 attached , child_tidptr=0x555556d075d0) = 3612 [pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3612] setpgid(0, 0) = 0 [pid 3612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1000", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 3612] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3612] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3612] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3612] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3612] write(5, "19", 2) = 2 [ 41.869029][ T3612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3612] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3612] exit_group(0) = ? [pid 3612] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3612, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d075d0) = 3615 ./strace-static-x86_64: Process 3615 attached [pid 3615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3615] setpgid(0, 0) = 0 [pid 3615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3615] write(3, "1000", 4) = 4 [pid 3615] close(3) = 0 [pid 3615] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 3615] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3615] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3615] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3615] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3615] write(5, "19", 2) = 2 [ 42.080945][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3615] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3615] exit_group(0) = ? [pid 3615] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3615, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d075d0) = 3617 ./strace-static-x86_64: Process 3617 attached [pid 3617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3617] setpgid(0, 0) = 0 [pid 3617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1000", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 3617] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3617] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3617] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3617] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3617] write(5, "19", 2) = 2 [pid 3617] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3617] exit_group(0) = ? [ 42.299715][ T3617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3617] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3617, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d075d0) = 3619 ./strace-static-x86_64: Process 3619 attached [pid 3619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3619] setpgid(0, 0) = 0 [pid 3619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3619] write(3, "1000", 4) = 4 [pid 3619] close(3) = 0 [pid 3619] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 3619] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3619] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3619] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3619] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3619] write(5, "19", 2) = 2 [pid 3619] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3619] exit_group(0) = ? [ 42.545194][ T3619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3619] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3619, si_uid=0, si_status=0, si_utime=0, si_stime=15} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d075d0) = 3622 ./strace-static-x86_64: Process 3622 attached [pid 3622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3622] setpgid(0, 0) = 0 [pid 3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3622] write(3, "1000", 4) = 4 [pid 3622] close(3) = 0 [pid 3622] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 3622] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3622] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3622] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3622] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3622] write(5, "19", 2) = 2 [pid 3622] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3622] exit_group(0) = ? [ 42.728434][ T3622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3622] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3622, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3630 attached , child_tidptr=0x555556d075d0) = 3630 [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3630] setpgid(0, 0) = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3630] write(3, "1000", 4) = 4 [pid 3630] close(3) = 0 [pid 3630] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [pid 3630] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3630] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3630] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3630] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3630] write(5, "19", 2) = 2 [ 42.909852][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3630] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3630] exit_group(0) = ? [pid 3630] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3630, si_uid=0, si_status=0, si_utime=0, si_stime=12} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3632 attached [pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3632] setpgid(0, 0) = 0 [pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3632] write(3, "1000", 4) = 4 [pid 3632] close(3) = 0 [pid 3632] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET [pid 3608] <... clone resumed>, child_tidptr=0x555556d075d0) = 3632 [pid 3632] <... unshare resumed>) = 0 [pid 3632] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3632] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3632] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3632] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3632] write(5, "19", 2) = 2 [ 43.122671][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor162'. [pid 3632] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3632] exit_group(0) = ? [pid 3632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3632, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d075d0) = 3635 ./strace-static-x86_64: Process 3635 attached [pid 3635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3635] setpgid(0, 0) = 0 [pid 3635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3635] write(3, "1000", 4) = 4 [pid 3635] close(3) = 0 [pid 3635] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [ 43.393421][ T11] ------------[ cut here ]------------ [ 43.398964][ T11] WARNING: CPU: 0 PID: 11 at net/netfilter/nf_tables_api.c:10096 nf_tables_exit_net+0x714/0x830 [ 43.409961][ T11] Modules linked in: [ 43.414096][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.0-rc1-next-20221021-syzkaller #0 [ 43.423830][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 43.434900][ T11] Workqueue: netns cleanup_net [pid 3635] mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE, -1, 0) = 0x20000000 [pid 3635] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 3635] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 4 [pid 3635] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3635] write(5, "19", 2) = 2 [ 43.439737][ T11] RIP: 0010:nf_tables_exit_net+0x714/0x830 [ 43.445930][ T11] Code: fc 05 01 e8 b2 69 9c 01 e9 af f9 ff ff e8 84 23 cd f9 0f 0b e9 87 fd ff ff e8 78 23 cd f9 0f 0b e9 19 fd ff ff e8 6c 23 cd f9 <0f> 0b e9 3e fd ff ff e8 30 b0 19 fa e9 ac fb ff ff 48 89 ef e8 43 [ 43.465804][ T11] RSP: 0018:ffffc90000107bd0 EFLAGS: 00010293 [ 43.472434][ T11] RAX: 0000000000000000 RBX: ffff888026d60c20 RCX: 0000000000000000 [ 43.480631][ T11] RDX: ffff88813fee3a80 RSI: ffffffff87af71c4 RDI: ffffc90000107b18 [pid 3635] sendmsg(4, {msg_name=NULL, msg_namelen=5120, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x50\x00\x00\x00\x09\x0a\x01\x04\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x08\x00\x0a\x40\x00\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30"..., iov_len=152}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 152 [pid 3635] exit_group(0) = ? [ 43.488620][ T11] RBP: ffff888026d60c00 R08: 0000000000000001 R09: ffffc90000107b1f [ 43.497066][ T11] R10: fffff52000020f63 R11: 000000000008c001 R12: 0000000000000001 [ 43.505395][ T11] R13: ffff888026d60c00 R14: ffff88801d280000 R15: ffff888026d60c00 [ 43.513621][ T11] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 43.522784][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.529386][ T11] CR2: 00007ffdd2f33448 CR3: 000000001cab2000 CR4: 00000000003506f0 [pid 3635] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3635, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d075d0) = 3637 ./strace-static-x86_64: Process 3637 attached [pid 3637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3637] setpgid(0, 0) = 0 [pid 3637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3637] write(3, "1000", 4) = 4 [pid 3637] close(3) = 0 [ 43.537703][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.545990][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.554364][ T11] Call Trace: [ 43.557654][ T11] [ 43.560913][ T11] ? nf_tables_exit_net+0x0/0x830 [ 43.565966][ T11] ops_exit_list+0xb0/0x170 [ 43.570869][ T11] cleanup_net+0x4ea/0xb00 [ 43.575388][ T11] ? cleanup_net+0x0/0xb00 [ 43.579797][ T11] ? pwq_activate_inactive_work+0x174/0x470 [ 43.586442][ T11] process_one_work+0x9bf/0x1710 [pid 3637] unshare(CLONE_NEWNS|CLONE_SYSVSEM|CLONE_NEWUTS|CLONE_NEWIPC|CLONE_NEWPID|CLONE_NEWNET) = 0 [ 43.591634][ T11] ? process_one_work+0x0/0x1710 [ 43.596605][ T11] ? do_raw_spin_lock+0x0/0x2a0 [ 43.601789][ T11] worker_thread+0x665/0x1080 [ 43.606506][ T11] ? worker_thread+0x0/0x1080 [ 43.611514][ T11] kthread+0x2e4/0x3a0 [ 43.615610][ T11] ? kthread+0x0/0x3a0 [ 43.619884][ T11] ret_from_fork+0x1f/0x30 [ 43.624703][ T11] [ 43.627735][ T11] Kernel panic - not syncing: panic_on_warn set ... [ 43.634324][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.0-rc1-next-20221021-syzkaller #0 [ 43.643788][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 43.653849][ T11] Workqueue: netns cleanup_net [ 43.658630][ T11] Call Trace: [ 43.661909][ T11] [ 43.664844][ T11] dump_stack_lvl+0xcd/0x134 [ 43.669452][ T11] panic+0x2c8/0x622 [ 43.673362][ T11] ? panic+0x0/0x622 [ 43.677293][ T11] ? __warn.cold+0x24b/0x350 [ 43.681899][ T11] ? nf_tables_exit_net+0x714/0x830 [ 43.687099][ T11] __warn.cold+0x25c/0x350 [ 43.691519][ T11] ? nf_tables_exit_net+0x714/0x830 [ 43.696725][ T11] report_bug+0x1bc/0x210 [ 43.701052][ T11] handle_bug+0x3c/0x70 [ 43.705211][ T11] exc_invalid_op+0x14/0x40 [ 43.709715][ T11] asm_exc_int3-0xa/0x40 [ 43.713959][ T11] RIP: 0010:nf_tables_exit_net+0x714/0x830 [ 43.719765][ T11] Code: fc 05 01 e8 b2 69 9c 01 e9 af f9 ff ff e8 84 23 cd f9 0f 0b e9 87 fd ff ff e8 78 23 cd f9 0f 0b e9 19 fd ff ff e8 6c 23 cd f9 <0f> 0b e9 3e fd ff ff e8 30 b0 19 fa e9 ac fb ff ff 48 89 ef e8 43 [ 43.739362][ T11] RSP: 0018:ffffc90000107bd0 EFLAGS: 00010293 [ 43.745419][ T11] RAX: 0000000000000000 RBX: ffff888026d60c20 RCX: 0000000000000000 [ 43.753386][ T11] RDX: ffff88813fee3a80 RSI: ffffffff87af71c4 RDI: ffffc90000107b18 [ 43.761348][ T11] RBP: ffff888026d60c00 R08: 0000000000000001 R09: ffffc90000107b1f [ 43.769310][ T11] R10: fffff52000020f63 R11: 000000000008c001 R12: 0000000000000001 [ 43.777274][ T11] R13: ffff888026d60c00 R14: ffff88801d280000 R15: ffff888026d60c00 [ 43.785241][ T11] ? nf_tables_exit_net+0x714/0x830 [ 43.790440][ T11] ? nf_tables_exit_net+0x0/0x830 [ 43.795460][ T11] ops_exit_list+0xb0/0x170 [ 43.799965][ T11] cleanup_net+0x4ea/0xb00 [ 43.804382][ T11] ? cleanup_net+0x0/0xb00 [ 43.808792][ T11] ? pwq_activate_inactive_work+0x174/0x470 [ 43.814686][ T11] process_one_work+0x9bf/0x1710 [ 43.819630][ T11] ? process_one_work+0x0/0x1710 [ 43.824568][ T11] ? do_raw_spin_lock+0x0/0x2a0 [ 43.829417][ T11] worker_thread+0x665/0x1080 [ 43.834105][ T11] ? worker_thread+0x0/0x1080 [ 43.838780][ T11] kthread+0x2e4/0x3a0 [ 43.842844][ T11] ? kthread+0x0/0x3a0 [ 43.846910][ T11] ret_from_fork+0x1f/0x30 [ 43.851335][ T11] [ 43.854492][ T11] Kernel Offset: disabled [ 43.858806][ T11] Rebooting in 86400 seconds..