./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2471280713 <...> no interfaces have a carrier [ 27.274559][ T3182] dhcpcd (3182) used greatest stack depth: 22472 bytes left [ 27.280315][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.292917][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.45' (ECDSA) to the list of known hosts. execve("./syz-executor2471280713", ["./syz-executor2471280713"], 0x7ffc41eab510 /* 10 vars */) = 0 brk(NULL) = 0x555556977000 brk(0x555556977c40) = 0x555556977c40 arch_prctl(ARCH_SET_FS, 0x555556977300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2471280713", 4096) = 28 brk(0x555556998c40) = 0x555556998c40 brk(0x555556999000) = 0x555556999000 mprotect(0x7fc846660000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3606 attached , child_tidptr=0x5555569775d0) = 3606 [pid 3606] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3606] setsid() = 1 [pid 3606] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3606] unshare(CLONE_NEWNS) = 0 [pid 3606] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3606] unshare(CLONE_NEWIPC) = 0 [pid 3606] unshare(CLONE_NEWCGROUP) = 0 [pid 3606] unshare(CLONE_NEWUTS) = 0 [pid 3606] unshare(CLONE_SYSVSEM) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "16777216", 8) = 8 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "536870912", 9) = 9 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "8192", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3606] close(3) = 0 [pid 3606] getpid() = 1 [pid 3606] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 ac f8 ff ff e8 6a 35 d8 fc e9 ed f4 ff ff e8 70 35 d8 fc [ 51.816614][ T3606] RSP: 0018:ffffc9000386f808 EFLAGS: 00010293 [ 51.822701][ T3606] RAX: 0000000000000000 RBX: ffff88802115c000 RCX: 0000000000000000 [ 51.830709][ T3606] RDX: ffff88802452d880 RSI: ffffffff84f03eca RDI: 0000000000000003 [ 51.838717][ T3606] RBP: ffffc9000386f9b8 R08: 0000000000000003 R09: 000000000000ffff [ 51.846765][ T3606] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880738a3c80 [ 51.854783][ T3606] R13: 1ffff9200070df06 R14: 000000000000ffff R15: ffff88802115cca0 [ 51.862850][ T3606] FS: 0000555556977300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 51.871861][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.878494][ T3606] CR2: 0000000020000080 CR3: 0000000020b38000 CR4: 00000000003506e0 [ 51.886509][ T3606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.894484][ T3606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.902541][ T3606] Call Trace: [ 51.905857][ T3606] [ 51.908777][ T3606] ? __lock_acquire+0xbc3/0x56d0 [ 51.913721][ T3606] ? ipvlan_handle_mode_l3+0x140/0x140 [ 51.919239][ T3606] ? skb_network_protocol+0x151/0x580 [ 51.924636][ T3606] ? skb_crc32c_csum_help+0x70/0x70 [ 51.929869][ T3606] ? __alloc_skb+0x17f/0x2f0 [ 51.934482][ T3606] ? validate_xmit_xfrm+0x493/0x10e0 [ 51.939822][ T3606] ? netif_skb_features+0x396/0xb90 [ 51.945085][ T3606] ipvlan_start_xmit+0x45/0x150 [ 51.949947][ T3606] __dev_direct_xmit+0x500/0x720 [ 51.954885][ T3606] ? validate_xmit_skb_list+0x120/0x120 [ 51.960474][ T3606] ? netdev_pick_tx+0x14e/0xbd0 [ 51.965380][ T3606] packet_direct_xmit+0x1b3/0x2c0 [ 51.970426][ T3606] packet_sendmsg+0x3354/0x5500 [ 51.975345][ T3606] ? aa_sk_perm+0x30f/0xaa0 [ 51.979900][ T3606] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 51.985883][ T3606] ? aa_af_perm+0x230/0x230 [ 51.990426][ T3606] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 51.995756][ T3606] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 52.001667][ T3606] sock_sendmsg+0xcf/0x120 [ 52.006121][ T3606] __sys_sendto+0x236/0x340 [ 52.010677][ T3606] ? __ia32_sys_getpeername+0xb0/0xb0 [ 52.016128][ T3606] ? do_raw_spin_lock+0x120/0x2a0 [ 52.021181][ T3606] ? _raw_spin_lock_irq+0x41/0x50 [ 52.026281][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 52.031158][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.036407][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.041649][ T3606] ? lockdep_hardirqs_on+0x79/0x100 [ 52.046911][ T3606] __x64_sys_sendto+0xdd/0x1b0 [ 52.051717][ T3606] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 52.058031][ T3606] do_syscall_64+0x35/0xb0 [ 52.062465][ T3606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.068396][ T3606] RIP: 0033:0x7fc8465ec669 [ 52.072822][ T3606] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.092482][ T3606] RSP: 002b:00007ffe2e0c0158 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 52.100948][ T3606] RAX: ffffffffffffffda RBX: 00007ffe2e0c0178 RCX: 00007fc8465ec669 [ 52.108979][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 52.117086][ T3606] RBP: 0000000000000003 R08: 00000000200000c0 R09: 0000000000000014 [ 52.125098][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2e0c0180 [ 52.133094][ T3606] R13: 00007ffe2e0c01a0 R14: 0000000000000000 R15: 0000000000000000 [ 52.141151][ T3606] [ 52.144195][ T3606] Kernel panic - not syncing: panic_on_warn set ... [ 52.150777][ T3606] CPU: 1 PID: 3606 Comm: syz-executor247 Not tainted 6.0.0-rc3-syzkaller #0 [ 52.159444][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 52.169506][ T3606] Call Trace: [ 52.172784][ T3606] [ 52.175712][ T3606] dump_stack_lvl+0xcd/0x134 [ 52.180332][ T3606] panic+0x2c8/0x627 [ 52.184229][ T3606] ? panic_print_sys_info.part.0+0x10b/0x10b [ 52.190207][ T3606] ? __warn.cold+0x248/0x2c4 [ 52.194787][ T3606] ? ipvlan_queue_xmit+0xcba/0x19d0 [ 52.199983][ T3606] __warn.cold+0x259/0x2c4 [ 52.204398][ T3606] ? ipvlan_queue_xmit+0xcba/0x19d0 [ 52.209682][ T3606] report_bug+0x1bc/0x210 [ 52.214011][ T3606] handle_bug+0x3c/0x60 [ 52.218174][ T3606] exc_invalid_op+0x14/0x40 [ 52.222696][ T3606] asm_exc_invalid_op+0x16/0x20 [ 52.227571][ T3606] RIP: 0010:ipvlan_queue_xmit+0xcba/0x19d0 [ 52.233384][ T3606] Code: 41 0f b7 d6 48 c7 c6 40 c7 75 8a 48 c7 c7 c0 c4 75 8a c6 05 7d 52 d9 08 01 e8 df 0d 4a 04 0f 0b e9 e5 f7 ff ff e8 66 cb 8b fc <0f> 0b e9 ac f8 ff ff e8 6a 35 d8 fc e9 ed f4 ff ff e8 70 35 d8 fc [ 52.253085][ T3606] RSP: 0018:ffffc9000386f808 EFLAGS: 00010293 [ 52.259154][ T3606] RAX: 0000000000000000 RBX: ffff88802115c000 RCX: 0000000000000000 [ 52.267127][ T3606] RDX: ffff88802452d880 RSI: ffffffff84f03eca RDI: 0000000000000003 [ 52.275088][ T3606] RBP: ffffc9000386f9b8 R08: 0000000000000003 R09: 000000000000ffff [ 52.283051][ T3606] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880738a3c80 [ 52.291021][ T3606] R13: 1ffff9200070df06 R14: 000000000000ffff R15: ffff88802115cca0 [ 52.298995][ T3606] ? ipvlan_queue_xmit+0xcba/0x19d0 [ 52.304191][ T3606] ? ipvlan_queue_xmit+0xcba/0x19d0 [ 52.309382][ T3606] ? __lock_acquire+0xbc3/0x56d0 [ 52.314335][ T3606] ? ipvlan_handle_mode_l3+0x140/0x140 [ 52.319805][ T3606] ? skb_network_protocol+0x151/0x580 [ 52.325189][ T3606] ? skb_crc32c_csum_help+0x70/0x70 [ 52.330384][ T3606] ? __alloc_skb+0x17f/0x2f0 [ 52.334980][ T3606] ? validate_xmit_xfrm+0x493/0x10e0 [ 52.340297][ T3606] ? netif_skb_features+0x396/0xb90 [ 52.345520][ T3606] ipvlan_start_xmit+0x45/0x150 [ 52.350368][ T3606] __dev_direct_xmit+0x500/0x720 [ 52.355298][ T3606] ? validate_xmit_skb_list+0x120/0x120 [ 52.360842][ T3606] ? netdev_pick_tx+0x14e/0xbd0 [ 52.365695][ T3606] packet_direct_xmit+0x1b3/0x2c0 [ 52.370715][ T3606] packet_sendmsg+0x3354/0x5500 [ 52.375566][ T3606] ? aa_sk_perm+0x30f/0xaa0 [ 52.380068][ T3606] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 52.385951][ T3606] ? aa_af_perm+0x230/0x230 [ 52.390451][ T3606] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 52.395748][ T3606] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 52.401629][ T3606] sock_sendmsg+0xcf/0x120 [ 52.406049][ T3606] __sys_sendto+0x236/0x340 [ 52.410559][ T3606] ? __ia32_sys_getpeername+0xb0/0xb0 [ 52.415955][ T3606] ? do_raw_spin_lock+0x120/0x2a0 [ 52.421016][ T3606] ? _raw_spin_lock_irq+0x41/0x50 [ 52.426148][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 52.431144][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.436377][ T3606] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.441606][ T3606] ? lockdep_hardirqs_on+0x79/0x100 [ 52.446829][ T3606] __x64_sys_sendto+0xdd/0x1b0 [ 52.451589][ T3606] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 52.457848][ T3606] do_syscall_64+0x35/0xb0 [ 52.462256][ T3606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.468139][ T3606] RIP: 0033:0x7fc8465ec669 [ 52.472555][ T3606] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.492164][ T3606] RSP: 002b:00007ffe2e0c0158 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 52.500581][ T3606] RAX: ffffffffffffffda RBX: 00007ffe2e0c0178 RCX: 00007fc8465ec669 [ 52.508551][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 52.516539][ T3606] RBP: 0000000000000003 R08: 00000000200000c0 R09: 0000000000000014 [ 52.524507][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2e0c0180 [ 52.532491][ T3606] R13: 00007ffe2e0c01a0 R14: 0000000000000000 R15: 0000000000000000 [ 52.540470][ T3606] [ 52.543772][ T3606] Kernel Offset: disabled [ 52.548208][ T3606] Rebooting in 86400 seconds..