./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4084952497 <...> Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. execve("./syz-executor4084952497", ["./syz-executor4084952497"], 0x7ffcfcd40a40 /* 10 vars */) = 0 brk(NULL) = 0x555555a12000 brk(0x555555a12c40) = 0x555555a12c40 arch_prctl(ARCH_SET_FS, 0x555555a12300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4084952497", 4096) = 28 brk(0x555555a33c40) = 0x555555a33c40 brk(0x555555a34000) = 0x555555a34000 mprotect(0x7f783f769000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4999 attached , child_tidptr=0x555555a125d0) = 4999 [pid 4999] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 4999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4999] setsid() = 1 [pid 4999] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 4999] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 4999] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 4999] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 4999] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 4999] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 4999] unshare(CLONE_NEWNS) = 0 [pid 4999] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 4999] unshare(CLONE_NEWIPC) = 0 [pid 4999] unshare(CLONE_NEWCGROUP) = 0 [pid 4999] unshare(CLONE_NEWUTS) = 0 [pid 4999] unshare(CLONE_SYSVSEM) = 0 [pid 4999] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "16777216", 8) = 8 [pid 4999] close(3) = 0 [pid 4999] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "536870912", 9) = 9 [pid 4999] close(3) = 0 [pid 4999] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "1024", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "8192", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "1024", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "1024", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "1024 1048576 500 1024", 21) = 21 [pid 4999] close(3) = 0 [pid 4999] getpid() = 1 [pid 4999] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 58 f8 ff ff e8 fe b3 5b fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 49.788487][ T754] RSP: 0018:ffffc9000463f568 EFLAGS: 00010086 [ 49.794529][ T754] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 49.802482][ T754] RDX: ffff88801eb28000 RSI: ffffffff814c03b7 RDI: 0000000000000001 [ 49.810434][ T754] RBP: ffff8881443b7190 R08: 0000000000000001 R09: 0000000000000000 [ 49.818385][ T754] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000003 [ 49.826333][ T754] R13: ffff88802a77cb18 R14: 0000000000000003 R15: ffff888018262500 [ 49.834285][ T754] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 49.843193][ T754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.849756][ T754] CR2: 0000556a99c15a18 CR3: 0000000028c71000 CR4: 0000000000350ef0 [ 49.857716][ T754] Call Trace: [ 49.860992][ T754] [ 49.863902][ T754] ? __warn+0xe6/0x390 [ 49.867956][ T754] ? __wake_up_klogd.part.0+0x99/0xf0 [ 49.873318][ T754] ? usb_submit_urb+0xed6/0x1880 [ 49.878244][ T754] ? report_bug+0x2da/0x500 [ 49.882741][ T754] ? handle_bug+0x3c/0x70 [ 49.887058][ T754] ? exc_invalid_op+0x18/0x50 [ 49.891719][ T754] ? asm_exc_invalid_op+0x1a/0x20 [ 49.896738][ T754] ? __warn_printk+0x187/0x310 [ 49.901491][ T754] ? usb_submit_urb+0xed6/0x1880 [ 49.906413][ T754] ? usb_submit_urb+0xed6/0x1880 [ 49.911361][ T754] ? _raw_spin_unlock+0x33/0x40 [ 49.916210][ T754] usbnet_start_xmit+0xfe5/0x2190 [ 49.921225][ T754] ? lock_sync+0x190/0x190 [ 49.925634][ T754] dev_hard_start_xmit+0x187/0x700 [ 49.930736][ T754] sch_direct_xmit+0x1a3/0xc30 [ 49.935486][ T754] ? mark_held_locks+0x9f/0xe0 [ 49.940251][ T754] ? dev_watchdog+0x8b0/0x8b0 [ 49.944909][ T754] ? do_raw_spin_trylock+0xb4/0x180 [ 49.950096][ T754] ? do_raw_spin_lock+0x250/0x2b0 [ 49.955113][ T754] __dev_queue_xmit+0x14d6/0x3b10 [ 49.960120][ T754] ? print_usage_bug.part.0+0x660/0x660 [ 49.965667][ T754] ? netdev_core_pick_tx+0x390/0x390 [ 49.970939][ T754] ? find_held_lock+0x2d/0x110 [ 49.975686][ T754] ? ip6_finish_output2+0x55a/0x1560 [ 49.980964][ T754] ? lock_downgrade+0x690/0x690 [ 49.985820][ T754] ? mark_held_locks+0x9f/0xe0 [ 49.990570][ T754] ? skb_push+0x9b/0xe0 [ 49.994711][ T754] neigh_resolve_output+0x51b/0x870 [ 49.999903][ T754] ip6_finish_output2+0x55a/0x1560 [ 50.005001][ T754] ip6_finish_output+0x69a/0x1170 [ 50.010016][ T754] ip6_output+0x1f1/0x540 [ 50.014337][ T754] mld_sendpack+0xa09/0xed0 [ 50.018834][ T754] ? nf_hook.constprop.0+0x5b0/0x5b0 [ 50.024115][ T754] mld_ifc_work+0x73c/0xe20 [ 50.028611][ T754] process_one_work+0x99a/0x15e0 [ 50.033546][ T754] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 50.038906][ T754] ? spin_bug+0x1c0/0x1c0 [ 50.043224][ T754] ? _raw_spin_lock_irq+0x45/0x50 [ 50.048239][ T754] worker_thread+0x67d/0x10c0 [ 50.052909][ T754] ? process_one_work+0x15e0/0x15e0 [ 50.058116][ T754] kthread+0x344/0x440 [ 50.062166][ T754] ? kthread_complete_and_exit+0x40/0x40 [ 50.067782][ T754] ret_from_fork+0x1f/0x30 [ 50.072194][ T754] [ 50.075191][ T754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.082462][ T754] CPU: 0 PID: 754 Comm: kworker/0:2 Not tainted 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6 #0 [ 50.092414][ T754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 50.102452][ T754] Workqueue: mld mld_ifc_work [ 50.107133][ T754] Call Trace: [ 50.110395][ T754] [ 50.113310][ T754] dump_stack_lvl+0xd9/0x150 [ 50.117895][ T754] panic+0x686/0x730 [ 50.121868][ T754] ? panic_smp_self_stop+0xa0/0xa0 [ 50.126972][ T754] ? show_trace_log_lvl+0x284/0x390 [ 50.132176][ T754] ? usb_submit_urb+0xed6/0x1880 [ 50.137188][ T754] check_panic_on_warn+0xb1/0xc0 [ 50.142118][ T754] __warn+0xf2/0x390 [ 50.145997][ T754] ? __wake_up_klogd.part.0+0x99/0xf0 [ 50.151365][ T754] ? usb_submit_urb+0xed6/0x1880 [ 50.156286][ T754] report_bug+0x2da/0x500 [ 50.160609][ T754] handle_bug+0x3c/0x70 [ 50.164748][ T754] exc_invalid_op+0x18/0x50 [ 50.169236][ T754] asm_exc_invalid_op+0x1a/0x20 [ 50.174072][ T754] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 50.179600][ T754] Code: 7c 24 18 e8 2c b4 5b fb 48 8b 7c 24 18 e8 42 07 f0 fe 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 a0 c9 fc 8a e8 5a 6f 23 fb <0f> 0b e9 58 f8 ff ff e8 fe b3 5b fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 50.199189][ T754] RSP: 0018:ffffc9000463f568 EFLAGS: 00010086 [ 50.205237][ T754] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 50.213189][ T754] RDX: ffff88801eb28000 RSI: ffffffff814c03b7 RDI: 0000000000000001 [ 50.221143][ T754] RBP: ffff8881443b7190 R08: 0000000000000001 R09: 0000000000000000 [ 50.229186][ T754] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000003 [ 50.237141][ T754] R13: ffff88802a77cb18 R14: 0000000000000003 R15: ffff888018262500 [ 50.245104][ T754] ? __warn_printk+0x187/0x310 [ 50.249858][ T754] ? usb_submit_urb+0xed6/0x1880 [ 50.254778][ T754] ? _raw_spin_unlock+0x33/0x40 [ 50.259617][ T754] usbnet_start_xmit+0xfe5/0x2190 [ 50.264626][ T754] ? lock_sync+0x190/0x190 [ 50.269041][ T754] dev_hard_start_xmit+0x187/0x700 [ 50.274139][ T754] sch_direct_xmit+0x1a3/0xc30 [ 50.278885][ T754] ? mark_held_locks+0x9f/0xe0 [ 50.283632][ T754] ? dev_watchdog+0x8b0/0x8b0 [ 50.288288][ T754] ? do_raw_spin_trylock+0xb4/0x180 [ 50.293479][ T754] ? do_raw_spin_lock+0x250/0x2b0 [ 50.298581][ T754] __dev_queue_xmit+0x14d6/0x3b10 [ 50.303589][ T754] ? print_usage_bug.part.0+0x660/0x660 [ 50.309120][ T754] ? netdev_core_pick_tx+0x390/0x390 [ 50.314391][ T754] ? find_held_lock+0x2d/0x110 [ 50.319139][ T754] ? ip6_finish_output2+0x55a/0x1560 [ 50.324407][ T754] ? lock_downgrade+0x690/0x690 [ 50.329243][ T754] ? mark_held_locks+0x9f/0xe0 [ 50.334011][ T754] ? skb_push+0x9b/0xe0 [ 50.338159][ T754] neigh_resolve_output+0x51b/0x870 [ 50.343350][ T754] ip6_finish_output2+0x55a/0x1560 [ 50.348453][ T754] ip6_finish_output+0x69a/0x1170 [ 50.353473][ T754] ip6_output+0x1f1/0x540 [ 50.357794][ T754] mld_sendpack+0xa09/0xed0 [ 50.362295][ T754] ? nf_hook.constprop.0+0x5b0/0x5b0 [ 50.367585][ T754] mld_ifc_work+0x73c/0xe20 [ 50.372085][ T754] process_one_work+0x99a/0x15e0 [ 50.377026][ T754] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 50.382392][ T754] ? spin_bug+0x1c0/0x1c0 [ 50.386710][ T754] ? _raw_spin_lock_irq+0x45/0x50 [ 50.391732][ T754] worker_thread+0x67d/0x10c0 [ 50.396410][ T754] ? process_one_work+0x15e0/0x15e0 [ 50.401606][ T754] kthread+0x344/0x440 [ 50.405660][ T754] ? kthread_complete_and_exit+0x40/0x40 [ 50.411278][ T754] ret_from_fork+0x1f/0x30 [ 50.415773][ T754] [ 50.419667][ T754] Kernel Offset: disabled [ 50.424086][ T754] Rebooting in 86400 seconds..