./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1500083116
<...>
DUID 00:04:83:15:3d:b3:f9:44:11:d6:e6:e1:d9:1f:49:4d:f4:66
forked to background, child pid 3182
[ 25.903765][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0
[ 25.906593][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts.
execve("./syz-executor1500083116", ["./syz-executor1500083116"], 0x7ffc3d752350 /* 10 vars */) = 0
brk(NULL) = 0x555556b8f000
brk(0x555556b8fc40) = 0x555556b8fc40
arch_prctl(ARCH_SET_FS, 0x555556b8f300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1500083116", 4096) = 28
brk(0x555556bb0c40) = 0x555556bb0c40
brk(0x555556bb1000) = 0x555556bb1000
mprotect(0x7f54cbbb3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 3
bind(3, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=0x000200}, 12) = 0
exit_group(0) = ?
syzkaller login: [ 41.531445][ T3610] ================================================================================
[ 41.531455][ T3610] UBSAN: array-index-out-of-bounds in net/netfilter/nfnetlink.c:697:28
[ 41.531467][ T3610] index 10 is out of range for type 'int [10]'
[ 41.531474][ T3610] CPU: 1 PID: 3610 Comm: syz-executor150 Not tainted 5.18.0-syzkaller-11972-gd1dc87763f40 #0
[ 41.531489][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 41.531497][ T3610] Call Trace:
[ 41.531500][ T3610]
[ 41.531505][ T3610] dump_stack_lvl+0xcd/0x134
[ 41.531535][ T3610] ubsan_epilogue+0xb/0x50
[ 41.531548][ T3610] __ubsan_handle_out_of_bounds.cold+0x62/0x6c
[ 41.531563][ T3610] ? __local_bh_enable_ip+0xa0/0x120
[ 41.531577][ T3610] ? __local_bh_enable_ip+0xa0/0x120
[ 41.531591][ T3610] nfnetlink_unbind+0x38c/0x3b0
[ 41.531608][ T3610] netlink_release+0xa8f/0x1db0
[ 41.531632][ T3610] ? netlink_setsockopt+0xda0/0xda0
[ 41.531647][ T3610] ? down_write_killable+0x170/0x170
[ 41.531663][ T3610] ? locks_remove_file+0x2f7/0x570
[ 41.531679][ T3610] ? fcntl_setlk+0xcf0/0xcf0
[ 41.531694][ T3610] __sock_release+0xcd/0x280
[ 41.531713][ T3610] sock_close+0x18/0x20
[ 41.531727][ T3610] __fput+0x277/0x9d0
[ 41.531739][ T3610] ? __sock_release+0x280/0x280
[ 41.531758][ T3610] task_work_run+0xdd/0x1a0
[ 41.531777][ T3610] do_exit+0xaff/0x2a00
[ 41.531793][ T3610] ? lock_downgrade+0x6e0/0x6e0
[ 41.531812][ T3610] ? mm_update_next_owner+0x7a0/0x7a0
[ 41.531829][ T3610] ? _raw_spin_unlock_irq+0x1f/0x40
[ 41.531842][ T3610] ? _raw_spin_unlock_irq+0x1f/0x40
[ 41.531857][ T3610] do_group_exit+0xd2/0x2f0
[ 41.531875][ T3610] __x64_sys_exit_group+0x3a/0x50
[ 41.531890][ T3610] do_syscall_64+0x35/0xb0
[ 41.531905][ T3610] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 41.531918][ T3610] RIP: 0033:0x7f54cbb45639
[ 41.531930][ T3610] Code: Unable to access opcode bytes at RIP 0x7f54cbb4560f.
[ 41.531935][ T3610] RSP: 002b:00007ffd1204eed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 41.531949][ T3610] RAX: ffffffffffffffda RBX: 00007f54cbbb9270 RCX: 00007f54cbb45639
[ 41.531958][ T3610] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 41.531966][ T3610] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000000
[ 41.531973][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54cbbb9270
[ 41.531982][ T3610] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 41.531999][ T3610]
[ 41.532003][ T3610] ================================================================================
[ 41.532008][ T3610] Kernel panic - not syncing: panic_on_warn set ...
[ 41.782974][ T3610] CPU: 1 PID: 3610 Comm: syz-executor150 Not tainted 5.18.0-syzkaller-11972-gd1dc87763f40 #0
[ 41.793130][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 41.803186][ T3610] Call Trace:
[ 41.806466][ T3610]
[ 41.809400][ T3610] dump_stack_lvl+0xcd/0x134
[ 41.814001][ T3610] panic+0x2d7/0x636
[ 41.817900][ T3610] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 41.823891][ T3610] ? mark_held_locks+0x9f/0xe0
[ 41.828674][ T3610] ? dump_stack_lvl+0xeb/0x134
[ 41.833452][ T3610] ? ubsan_epilogue+0x3e/0x50
[ 41.838148][ T3610] ? nfnetlink_net_init+0x390/0x390
[ 41.843353][ T3610] ubsan_epilogue+0x4a/0x50
[ 41.847864][ T3610] __ubsan_handle_out_of_bounds.cold+0x62/0x6c
[ 41.854026][ T3610] ? __local_bh_enable_ip+0xa0/0x120
[ 41.859319][ T3610] ? __local_bh_enable_ip+0xa0/0x120
[ 41.864636][ T3610] nfnetlink_unbind+0x38c/0x3b0
[ 41.869496][ T3610] netlink_release+0xa8f/0x1db0
[ 41.874363][ T3610] ? netlink_setsockopt+0xda0/0xda0
[ 41.879570][ T3610] ? down_write_killable+0x170/0x170
[ 41.884862][ T3610] ? locks_remove_file+0x2f7/0x570
[ 41.889980][ T3610] ? fcntl_setlk+0xcf0/0xcf0
[ 41.894578][ T3610] __sock_release+0xcd/0x280
[ 41.899181][ T3610] sock_close+0x18/0x20
[ 41.903342][ T3610] __fput+0x277/0x9d0
[ 41.907328][ T3610] ? __sock_release+0x280/0x280
[ 41.912191][ T3610] task_work_run+0xdd/0x1a0
[ 41.916709][ T3610] do_exit+0xaff/0x2a00
[ 41.920878][ T3610] ? lock_downgrade+0x6e0/0x6e0
[ 41.925742][ T3610] ? mm_update_next_owner+0x7a0/0x7a0
[ 41.931122][ T3610] ? _raw_spin_unlock_irq+0x1f/0x40
[ 41.936325][ T3610] ? _raw_spin_unlock_irq+0x1f/0x40
[ 41.941545][ T3610] do_group_exit+0xd2/0x2f0
[ 41.946068][ T3610] __x64_sys_exit_group+0x3a/0x50
[ 41.951125][ T3610] do_syscall_64+0x35/0xb0
[ 41.955550][ T3610] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 41.961450][ T3610] RIP: 0033:0x7f54cbb45639
[ 41.965878][ T3610] Code: Unable to access opcode bytes at RIP 0x7f54cbb4560f.
[ 41.973237][ T3610] RSP: 002b:00007ffd1204eed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 41.981655][ T3610] RAX: ffffffffffffffda RBX: 00007f54cbbb9270 RCX: 00007f54cbb45639
[ 41.989627][ T3610] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 41.997615][ T3610] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000000
[ 42.005587][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54cbbb9270
[ 42.013562][ T3610] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 42.021560][ T3610]
[ 42.024852][ T3610] Kernel Offset: disabled
[ 42.029209][ T3610] Rebooting in 86400 seconds..