./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2859602303
<...>
DUID 00:04:f2:2d:62:da:c3:85:a0:c9:3a:ab:4f:1c:2c:dc:65:98
forked to background, child pid 3177
[ 27.149427][ T3178] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.163487][ T3178] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.174' (ECDSA) to the list of known hosts.
execve("./syz-executor2859602303", ["./syz-executor2859602303"], 0x7ffd65d2e440 /* 10 vars */) = 0
brk(NULL) = 0x55555578e000
brk(0x55555578ec40) = 0x55555578ec40
arch_prctl(ARCH_SET_FS, 0x55555578e300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2859602303", 4096) = 28
brk(0x5555557afc40) = 0x5555557afc40
brk(0x5555557b0000) = 0x5555557b0000
mprotect(0x7f9112d39000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [5], 4) = 0
bind(3, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0
sendto(3, NULL, 0, MSG_CTRUNC|MSG_PROBE|MSG_FIN|MSG_BATCH|MSG_FASTOPEN, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 4
setsockopt(4, SOL_SOCKET, SO_REUSEADDR, [5], 4) = 0
bind(4, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0
sendto(4, NULL, 0, MSG_CTRUNC|MSG_PROBE|MSG_FIN|MSG_BATCH|MSG_FASTOPEN, {sa_family=AF_INET6, sin6_port=htons(20000), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_scope_id=0}, 28) = -1 EADDRNOTAVAIL (Cannot assign requested address)
syzkaller login: [ 43.616187][ T3598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 43.639702][ T3598] ------------[ cut here ]------------
[ 43.645260][ T3598] WARNING: CPU: 1 PID: 3598 at net/ipv4/inet_connection_sock.c:525 inet_csk_get_port+0x1148/0x1ad0
[ 43.656164][ T3598] Modules linked in:
[ 43.660074][ T3598] CPU: 1 PID: 3598 Comm: syz-executor285 Not tainted 5.18.0-rc7-syzkaller-01833-gaa5334b1f968 #0
[ 43.670603][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 43.680691][ T3598] RIP: 0010:inet_csk_get_port+0x1148/0x1ad0
[ 43.686578][ T3598] Code: 07 00 00 48 8b 44 24 28 4c 89 ee 48 8b 78 18 e8 2e d1 fe ff e9 0f ff ff ff e8 f4 59 a6 f9 0f 0b e9 ae fa ff ff e8 e8 59 a6 f9 <0f> 0b e9 de fa ff ff e8 dc 59 a6 f9 e8 a7 ed 9d 01 31 ff 89 c3 89
[ 43.706310][ T3598] RSP: 0018:ffffc90002f4fbf8 EFLAGS: 00010293
[ 43.712406][ T3598] RAX: 0000000000000000 RBX: ffff888022f6a100 RCX: 0000000000000000
[ 43.720826][ T3598] RDX: ffff88801e6fbb00 RSI: ffffffff87d2dff8 RDI: ffff88801e2e06a8
[ 43.728825][ T3598] RBP: ffff88801e2e06a0 R08: 0000000000000001 R09: 0000000000000000
[ 43.736791][ T3598] R10: ffffffff87d2c485 R11: 0000000000000000 R12: 0000000000000000
[ 43.744813][ T3598] R13: ffff888022f6a100 R14: 0000000000000000 R15: ffff88801e2e0000
[ 43.752807][ T3598] FS: 000055555578e300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 43.761792][ T3598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.768420][ T3598] CR2: 00000000005defd8 CR3: 000000001ce0b000 CR4: 00000000003506e0
[ 43.776406][ T3598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 43.784437][ T3598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 43.792435][ T3598] Call Trace:
[ 43.795702][ T3598] <TASK>
[ 43.798677][ T3598] ? find_held_lock+0x2d/0x110
[ 43.803547][ T3598] ? inet_csk_update_fastreuse+0xb30/0xb30
[ 43.809403][ T3598] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 43.815646][ T3598] ? trace_inet_sock_set_state+0x1d6/0x290
[ 43.821492][ T3598] ? inet_csk_update_fastreuse+0xb30/0xb30
[ 43.827335][ T3598] inet_csk_listen_start+0x13e/0x3c0
[ 43.832612][ T3598] inet_listen+0x231/0x640
[ 43.837063][ T3598] ? inet_init_net+0x5c0/0x5c0
[ 43.841830][ T3598] ? aa_af_perm+0x230/0x230
[ 43.846321][ T3598] ? find_held_lock+0x2d/0x110
[ 43.851135][ T3598] __sys_listen+0x17d/0x250
[ 43.855645][ T3598] ? __ia32_sys_bind+0xb0/0xb0
[ 43.860465][ T3598] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.865673][ T3598] ? _raw_spin_unlock_irq+0x2a/0x40
[ 43.870908][ T3598] ? ptrace_notify+0xfa/0x140
[ 43.875688][ T3598] __x64_sys_listen+0x50/0x70
[ 43.880434][ T3598] do_syscall_64+0x35/0xb0
[ 43.884860][ T3598] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 43.890791][ T3598] RIP: 0033:0x7f9112cccd09
[ 43.895214][ T3598] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.914909][ T3598] RSP: 002b:00007ffca7006048 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[ 43.923384][ T3598] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9112cccd09
[ 43.931437][ T3598] RDX: ffffffffffffffc0 RSI: 0000000000000000 RDI: 0000000000000004
[ 43.939452][ T3598] RBP: 00007f9112c90eb0 R08: 000000000000001c R09: 000000000000001c
[ 43.947487][ T3598] R10: 0000000020001540 R11: 0000000000000246 R12: 00007f9112c90f40
[ 43.955464][ T3598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.963502][ T3598] </TASK>
[ 43.966529][ T3598] Kernel panic - not syncing: panic_on_warn set ...
[ 43.973096][ T3598] CPU: 1 PID: 3598 Comm: syz-executor285 Not tainted 5.18.0-rc7-syzkaller-01833-gaa5334b1f968 #0
[ 43.983584][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 43.993728][ T3598] Call Trace:
[ 43.997006][ T3598] <TASK>
[ 43.999968][ T3598] dump_stack_lvl+0xcd/0x134
[ 44.004638][ T3598] panic+0x2d7/0x636
[ 44.008530][ T3598] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 44.014511][ T3598] ? __warn.cold+0x1d1/0x2c5
[ 44.019092][ T3598] ? inet_csk_get_port+0x1148/0x1ad0
[ 44.024373][ T3598] __warn.cold+0x1e2/0x2c5
[ 44.028781][ T3598] ? inet_csk_get_port+0x1148/0x1ad0
[ 44.034056][ T3598] report_bug+0x1bd/0x210
[ 44.038379][ T3598] handle_bug+0x3c/0x60
[ 44.042520][ T3598] exc_invalid_op+0x14/0x40
[ 44.047016][ T3598] asm_exc_invalid_op+0x12/0x20
[ 44.051865][ T3598] RIP: 0010:inet_csk_get_port+0x1148/0x1ad0
[ 44.057749][ T3598] Code: 07 00 00 48 8b 44 24 28 4c 89 ee 48 8b 78 18 e8 2e d1 fe ff e9 0f ff ff ff e8 f4 59 a6 f9 0f 0b e9 ae fa ff ff e8 e8 59 a6 f9 <0f> 0b e9 de fa ff ff e8 dc 59 a6 f9 e8 a7 ed 9d 01 31 ff 89 c3 89
[ 44.077342][ T3598] RSP: 0018:ffffc90002f4fbf8 EFLAGS: 00010293
[ 44.083413][ T3598] RAX: 0000000000000000 RBX: ffff888022f6a100 RCX: 0000000000000000
[ 44.091470][ T3598] RDX: ffff88801e6fbb00 RSI: ffffffff87d2dff8 RDI: ffff88801e2e06a8
[ 44.099438][ T3598] RBP: ffff88801e2e06a0 R08: 0000000000000001 R09: 0000000000000000
[ 44.107413][ T3598] R10: ffffffff87d2c485 R11: 0000000000000000 R12: 0000000000000000
[ 44.115390][ T3598] R13: ffff888022f6a100 R14: 0000000000000000 R15: ffff88801e2e0000
[ 44.123370][ T3598] ? inet_csk_update_fastreuse+0x105/0xb30
[ 44.129200][ T3598] ? inet_csk_get_port+0x1148/0x1ad0
[ 44.134511][ T3598] ? inet_csk_get_port+0x1148/0x1ad0
[ 44.139821][ T3598] ? find_held_lock+0x2d/0x110
[ 44.144594][ T3598] ? inet_csk_update_fastreuse+0xb30/0xb30
[ 44.150421][ T3598] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 44.156664][ T3598] ? trace_inet_sock_set_state+0x1d6/0x290
[ 44.162473][ T3598] ? inet_csk_update_fastreuse+0xb30/0xb30
[ 44.168292][ T3598] inet_csk_listen_start+0x13e/0x3c0
[ 44.173589][ T3598] inet_listen+0x231/0x640
[ 44.178018][ T3598] ? inet_init_net+0x5c0/0x5c0
[ 44.182784][ T3598] ? aa_af_perm+0x230/0x230
[ 44.187291][ T3598] ? find_held_lock+0x2d/0x110
[ 44.192175][ T3598] __sys_listen+0x17d/0x250
[ 44.196683][ T3598] ? __ia32_sys_bind+0xb0/0xb0
[ 44.201446][ T3598] ? _raw_spin_unlock_irq+0x1f/0x40
[ 44.206650][ T3598] ? _raw_spin_unlock_irq+0x2a/0x40
[ 44.211847][ T3598] ? ptrace_notify+0xfa/0x140
[ 44.216621][ T3598] __x64_sys_listen+0x50/0x70
[ 44.221303][ T3598] do_syscall_64+0x35/0xb0
[ 44.225740][ T3598] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 44.231650][ T3598] RIP: 0033:0x7f9112cccd09
[ 44.236080][ T3598] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 44.255695][ T3598] RSP: 002b:00007ffca7006048 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[ 44.264122][ T3598] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9112cccd09
[ 44.272093][ T3598] RDX: ffffffffffffffc0 RSI: 0000000000000000 RDI: 0000000000000004
[ 44.280059][ T3598] RBP: 00007f9112c90eb0 R08: 000000000000001c R09: 000000000000001c
[ 44.288027][ T3598] R10: 0000000020001540 R11: 0000000000000246 R12: 00007f9112c90f40
[ 44.296093][ T3598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 44.304079][ T3598] </TASK>
[ 44.307370][ T3598] Kernel Offset: disabled
[ 44.311761][ T3598] Rebooting in 86400 seconds..