./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3403929663
<...>
forked to background, child pid 3179
no interfaces have a carrier
[ 28.550246][ T3180] 8021q: adding VLAN 0 to HW filter on device bond0
[ 28.560767][ T3180] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts.
execve("./syz-executor3403929663", ["./syz-executor3403929663"], 0x7fffb99873d0 /* 10 vars */) = 0
brk(NULL) = 0x555555cd9000
brk(0x555555cd9c40) = 0x555555cd9c40
arch_prctl(ARCH_SET_FS, 0x555555cd9300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3403929663", 4096) = 28
brk(0x555555cfac40) = 0x555555cfac40
brk(0x555555cfb000) = 0x555555cfb000
mprotect(0x7f080e7ce000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 3
bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000040, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4
bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5
bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_STREAM_VERDICT, attach_flags=0}, 16) = 0
bind(3, {sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("224.0.0.2")}, 16) = 0
sendto(3, NULL, 0, MSG_OOB|MSG_SENDPAGE_NOTLAST|MSG_FASTOPEN, {sa_family=AF_INET, sin_port=htons(20000), sin_addr=inet_addr("0.0.0.0")}, 16) = 0
bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x200002c0, value=0x20000340, flags=BPF_ANY}, 32) = 0
shutdown(3, SHUT_WR) = 0
exit_group(0) = ?
syzkaller login: [ 50.319652][ T3601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 50.345133][ T3601] ------------[ cut here ]------------
[ 50.350729][ T3601] WARNING: CPU: 1 PID: 3601 at net/core/stream.c:205 sk_stream_kill_queues+0x2ee/0x3d0
[ 50.360716][ T3601] Modules linked in:
[ 50.364722][ T3601] CPU: 1 PID: 3601 Comm: syz-executor340 Not tainted 5.19.0-rc4-next-20220627-syzkaller #0
[ 50.374805][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.384909][ T3601] RIP: 0010:sk_stream_kill_queues+0x2ee/0x3d0
[ 50.390983][ T3601] Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ec 00 00 00 8b ab 28 02 00 00 e9 60 ff ff ff e8 3b 9a 29 fa 0f 0b eb 97 e8 32 9a 29 fa <0f> 0b eb a0 e8 29 9a 29 fa 0f 0b e9 6a fe ff ff e8 0d a1 75 fa e9
[ 50.410672][ T3601] RSP: 0018:ffffc90002e6fbf0 EFLAGS: 00010293
[ 50.416800][ T3601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 50.424809][ T3601] RDX: ffff88801e90ba80 RSI: ffffffff87511cce RDI: 0000000000000005
[ 50.432813][ T3601] RBP: 0000000000000b00 R08: 0000000000000005 R09: 0000000000000000
[ 50.440799][ T3601] R10: 0000000000000b00 R11: 0000000000000004 R12: ffff88801e0c8e28
[ 50.448809][ T3601] R13: ffffffff913121c0 R14: ffff88801e0c8c28 R15: ffff88801e0c8db8
[ 50.456821][ T3601] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 50.465952][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.472603][ T3601] CR2: 000000000045b630 CR3: 000000000ba8e000 CR4: 00000000003506e0
[ 50.480590][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.488635][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.496652][ T3601] Call Trace:
[ 50.499930][ T3601]
[ 50.502915][ T3601] inet_csk_destroy_sock+0x1a5/0x440
[ 50.508240][ T3601] __tcp_close+0xb92/0xf50
[ 50.512711][ T3601] tcp_close+0x29/0xc0
[ 50.516805][ T3601] inet_release+0x12e/0x270
[ 50.521314][ T3601] __sock_release+0xcd/0x280
[ 50.525955][ T3601] sock_close+0x18/0x20
[ 50.530227][ T3601] __fput+0x277/0x9d0
[ 50.534257][ T3601] ? __sock_release+0x280/0x280
[ 50.539168][ T3601] task_work_run+0xdd/0x1a0
[ 50.543816][ T3601] do_exit+0xaf1/0x29f0
[ 50.547997][ T3601] ? lock_downgrade+0x6e0/0x6e0
[ 50.552895][ T3601] ? mm_update_next_owner+0x7b0/0x7b0
[ 50.558282][ T3601] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.563520][ T3601] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.568737][ T3601] do_group_exit+0xd2/0x2f0
[ 50.573282][ T3601] __x64_sys_exit_group+0x3a/0x50
[ 50.578318][ T3601] do_syscall_64+0x35/0xb0
[ 50.582793][ T3601] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.588705][ T3601] RIP: 0033:0x7f080e760989
[ 50.593152][ T3601] Code: Unable to access opcode bytes at RIP 0x7f080e76095f.
[ 50.600700][ T3601] RSP: 002b:00007ffcee785818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 50.609245][ T3601] RAX: ffffffffffffffda RBX: 00007f080e7d4270 RCX: 00007f080e760989
[ 50.617254][ T3601] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 50.625259][ T3601] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000010
[ 50.633501][ T3601] R10: 0000000000000010 R11: 0000000000000246 R12: 00007f080e7d4270
[ 50.641470][ T3601] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 50.649516][ T3601]
[ 50.652568][ T3601] Kernel panic - not syncing: panic_on_warn set ...
[ 50.659159][ T3601] CPU: 1 PID: 3601 Comm: syz-executor340 Not tainted 5.19.0-rc4-next-20220627-syzkaller #0
[ 50.669125][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.679173][ T3601] Call Trace:
[ 50.682446][ T3601]
[ 50.685367][ T3601] dump_stack_lvl+0xcd/0x134
[ 50.689968][ T3601] panic+0x2d7/0x636
[ 50.693879][ T3601] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.699901][ T3601] ? __warn.cold+0x248/0x2c4
[ 50.704500][ T3601] ? sk_stream_kill_queues+0x2ee/0x3d0
[ 50.710385][ T3601] __warn.cold+0x259/0x2c4
[ 50.714809][ T3601] ? sk_stream_kill_queues+0x2ee/0x3d0
[ 50.720259][ T3601] report_bug+0x1bc/0x210
[ 50.724592][ T3601] handle_bug+0x3c/0x60
[ 50.728745][ T3601] exc_invalid_op+0x14/0x40
[ 50.733247][ T3601] asm_exc_invalid_op+0x1b/0x20
[ 50.738097][ T3601] RIP: 0010:sk_stream_kill_queues+0x2ee/0x3d0
[ 50.744158][ T3601] Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ec 00 00 00 8b ab 28 02 00 00 e9 60 ff ff ff e8 3b 9a 29 fa 0f 0b eb 97 e8 32 9a 29 fa <0f> 0b eb a0 e8 29 9a 29 fa 0f 0b e9 6a fe ff ff e8 0d a1 75 fa e9
[ 50.763862][ T3601] RSP: 0018:ffffc90002e6fbf0 EFLAGS: 00010293
[ 50.769927][ T3601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 50.777893][ T3601] RDX: ffff88801e90ba80 RSI: ffffffff87511cce RDI: 0000000000000005
[ 50.785878][ T3601] RBP: 0000000000000b00 R08: 0000000000000005 R09: 0000000000000000
[ 50.793839][ T3601] R10: 0000000000000b00 R11: 0000000000000004 R12: ffff88801e0c8e28
[ 50.801803][ T3601] R13: ffffffff913121c0 R14: ffff88801e0c8c28 R15: ffff88801e0c8db8
[ 50.809778][ T3601] ? sk_stream_kill_queues+0x2ee/0x3d0
[ 50.815243][ T3601] inet_csk_destroy_sock+0x1a5/0x440
[ 50.820543][ T3601] __tcp_close+0xb92/0xf50
[ 50.824961][ T3601] tcp_close+0x29/0xc0
[ 50.829034][ T3601] inet_release+0x12e/0x270
[ 50.833625][ T3601] __sock_release+0xcd/0x280
[ 50.838216][ T3601] sock_close+0x18/0x20
[ 50.842469][ T3601] __fput+0x277/0x9d0
[ 50.846443][ T3601] ? __sock_release+0x280/0x280
[ 50.851292][ T3601] task_work_run+0xdd/0x1a0
[ 50.855813][ T3601] do_exit+0xaf1/0x29f0
[ 50.860313][ T3601] ? lock_downgrade+0x6e0/0x6e0
[ 50.865165][ T3601] ? mm_update_next_owner+0x7b0/0x7b0
[ 50.870628][ T3601] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.875907][ T3601] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.881099][ T3601] do_group_exit+0xd2/0x2f0
[ 50.885599][ T3601] __x64_sys_exit_group+0x3a/0x50
[ 50.890614][ T3601] do_syscall_64+0x35/0xb0
[ 50.895186][ T3601] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.901074][ T3601] RIP: 0033:0x7f080e760989
[ 50.905479][ T3601] Code: Unable to access opcode bytes at RIP 0x7f080e76095f.
[ 50.912837][ T3601] RSP: 002b:00007ffcee785818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 50.921265][ T3601] RAX: ffffffffffffffda RBX: 00007f080e7d4270 RCX: 00007f080e760989
[ 50.929241][ T3601] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 50.937211][ T3601] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000010
[ 50.945267][ T3601] R10: 0000000000000010 R11: 0000000000000246 R12: 00007f080e7d4270
[ 50.953231][ T3601] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 50.961220][ T3601]
[ 50.964526][ T3601] Kernel Offset: disabled
[ 50.968943][ T3601] Rebooting in 86400 seconds..