./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor964641744 <...> Warning: Permanently added '10.128.1.80' (ECDSA) to the list of known hosts. execve("./syz-executor964641744", ["./syz-executor964641744"], 0x7ffcddc456e0 /* 10 vars */) = 0 brk(NULL) = 0x5555571a3000 brk(0x5555571a3c40) = 0x5555571a3c40 arch_prctl(ARCH_SET_FS, 0x5555571a3300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor964641744", 4096) = 27 brk(0x5555571c4c40) = 0x5555571c4c40 brk(0x5555571c5000) = 0x5555571c5000 mprotect(0x7f159c3d3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 ioctl(3, TUNSETIFF, 0x20000200) = 0 ioctl(3, TUNSETLINK, 0x118) = 0 socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 syzkaller login: [ 52.164912][ T3636] syz-executor964 uses obsolete (PF_INET,SOCK_PACKET) [ 52.175101][ T3636] general protection fault, probably for non-canonical address 0xdffffc0000000c04: 0000 [#1] PREEMPT SMP KASAN [ 52.186855][ T3636] KASAN: probably user-memory-access in range [0x0000000000006020-0x0000000000006027] [ 52.196418][ T3636] CPU: 0 PID: 3636 Comm: syz-executor964 Not tainted 6.1.0-rc7-syzkaller-00190-g97ee9d1c1696 #0 [ 52.206855][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.216926][ T3636] RIP: 0010:can_rcv_filter+0x36/0x8d0 [ 52.222354][ T3636] Code: 53 48 89 fb 48 83 ec 10 48 89 7c 24 08 e8 42 df ce f8 48 8d bb 20 60 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e d1 06 00 00 48 8b 44 24 08 31 [ 52.241986][ T3636] RSP: 0018:ffffc90003e0f7e0 EFLAGS: 00010202 [ 52.248064][ T3636] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 52.256046][ T3636] RDX: 0000000000000c04 RSI: ffffffff88b13afe RDI: 0000000000006020 [ 52.264020][ T3636] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 52.271999][ T3636] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 52.279987][ T3636] R13: ffff8880277c7140 R14: ffff888019914000 R15: ffff88814b202000 [ 52.287977][ T3636] FS: 00005555571a3300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 52.296921][ T3636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.303516][ T3636] CR2: 000055bb46eb92b8 CR3: 00000000209b1000 CR4: 00000000003506f0 [ 52.311497][ T3636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.319470][ T3636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.327445][ T3636] Call Trace: [ 52.330722][ T3636] [ 52.333658][ T3636] can_receive+0x31d/0x580 [ 52.338095][ T3636] canfd_rcv+0x166/0x1a0 [ 52.342351][ T3636] ? can_rcv+0x1a0/0x1a0 [ 52.346601][ T3636] __netif_receive_skb_one_core+0x114/0x180 [ 52.352517][ T3636] ? __netif_receive_skb_core+0x39d0/0x39d0 [ 52.358447][ T3636] ? ktime_get_with_offset+0x3f6/0x500 [ 52.363939][ T3636] ? lockdep_hardirqs_on+0x7d/0x100 [ 52.369160][ T3636] ? ktime_get_with_offset+0x3f6/0x500 [ 52.374641][ T3636] ? ktime_get_with_offset+0x371/0x500 [ 52.380120][ T3636] __netif_receive_skb+0x1f/0x1c0 [ 52.385166][ T3636] netif_receive_skb+0x16e/0x9e0 [ 52.390119][ T3636] ? __netif_receive_skb+0x1c0/0x1c0 [ 52.395424][ T3636] ? _copy_from_iter+0x23d/0xf40 [ 52.400370][ T3636] ? skb_set_owner_w+0x26d/0x420 [ 52.405323][ T3636] tun_rx_batched+0x4b3/0x7a0 [ 52.410008][ T3636] ? tun_flow_cleanup+0x2a0/0x2a0 [ 52.415038][ T3636] ? lock_release+0x810/0x810 [ 52.419736][ T3636] ? tun_get_user+0x1dba/0x3ab0 [ 52.424596][ T3636] ? lock_downgrade+0x6e0/0x6e0 [ 52.429472][ T3636] ? __local_bh_enable_ip+0xa4/0x130 [ 52.434768][ T3636] tun_get_user+0x1e73/0x3ab0 [ 52.439469][ T3636] ? tun_build_skb+0x1160/0x1160 [ 52.444511][ T3636] ? lock_downgrade+0x6e0/0x6e0 [ 52.449395][ T3636] tun_chr_write_iter+0xdf/0x200 [ 52.454345][ T3636] vfs_write+0x9ed/0xdd0 [ 52.458602][ T3636] ? kernel_write+0x630/0x630 [ 52.463295][ T3636] ? find_held_lock+0x2d/0x110 [ 52.468080][ T3636] ? lock_downgrade+0x6e0/0x6e0 [ 52.472954][ T3636] ? __fget_light+0x20a/0x270 [ 52.477645][ T3636] ksys_write+0x12b/0x250 [ 52.481988][ T3636] ? __ia32_sys_read+0xb0/0xb0 [ 52.486763][ T3636] ? lockdep_hardirqs_on+0x7d/0x100 [ 52.491970][ T3636] ? _raw_spin_unlock_irq+0x2e/0x50 [ 52.497179][ T3636] ? ptrace_notify+0xfe/0x140 [ 52.501881][ T3636] do_syscall_64+0x39/0xb0 [ 52.506318][ T3636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.512227][ T3636] RIP: 0033:0x7f159c366d59 [ 52.516648][ T3636] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.536260][ T3636] RSP: 002b:00007ffe5fa0c4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.544682][ T3636] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f159c366d59 [ 52.552658][ T3636] RDX: 0000000000000056 RSI: 0000000020000040 RDI: 0000000000000003 [ 52.560722][ T3636] RBP: 00007f159c32af00 R08: 00000000ffff8000 R09: 0000000000000000 [ 52.568701][ T3636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f159c32af90 [ 52.576676][ T3636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.584665][ T3636] [ 52.587684][ T3636] Modules linked in: [ 52.591632][ T3636] ---[ end trace 0000000000000000 ]--- [ 52.597126][ T3636] RIP: 0010:can_rcv_filter+0x36/0x8d0 [ 52.602540][ T3636] Code: 53 48 89 fb 48 83 ec 10 48 89 7c 24 08 e8 42 df ce f8 48 8d bb 20 60 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e d1 06 00 00 48 8b 44 24 08 31 [ 52.622203][ T3636] RSP: 0018:ffffc90003e0f7e0 EFLAGS: 00010202 [ 52.628314][ T3636] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 52.636317][ T3636] RDX: 0000000000000c04 RSI: ffffffff88b13afe RDI: 0000000000006020 [ 52.644322][ T3636] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 52.652314][ T3636] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 52.660348][ T3636] R13: ffff8880277c7140 R14: ffff888019914000 R15: ffff88814b202000 [ 52.668371][ T3636] FS: 00005555571a3300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 52.677353][ T3636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.683985][ T3636] CR2: 000055bb46eb92b8 CR3: 00000000209b1000 CR4: 00000000003506f0 [ 52.691984][ T3636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.700002][ T3636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.708037][ T3636] Kernel panic - not syncing: Fatal exception in interrupt [ 52.715384][ T3636] Kernel Offset: disabled [ 52.719705][ T3636] Rebooting in 86400 seconds..