./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4197674436 <...> Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. execve("./syz-executor4197674436", ["./syz-executor4197674436"], 0x7fffba2eec70 /* 10 vars */) = 0 brk(NULL) = 0x555556540000 brk(0x555556540d00) = 0x555556540d00 arch_prctl(ARCH_SET_FS, 0x555556540380) = 0 set_tid_address(0x555556540650) = 5065 set_robust_list(0x555556540660, 24) = 0 rseq(0x555556540ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4197674436", 4096) = 28 getrandom("\xf1\x05\x67\x52\xb4\x80\x1e\xfa", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556540d00 brk(0x555556561d00) = 0x555556561d00 brk(0x555556562000) = 0x555556562000 mprotect(0x7fcedcd03000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5066 attached , child_tidptr=0x555556540650) = 5066 [pid 5066] set_robust_list(0x555556540660, 24) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 3 [pid 5066] dup(3) = 4 [pid 5066] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x58\x00\x00\x00\x02\x06\x05\x00\x00\x00\x00\x00\xff\xff\xf0\x00\x00\x00\x00\x00\x05\x00\x01\x00\x06\x00\x00\x00\x05\x00\x05\x00\x02\x00\x00\x00\x09\x00\x02\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x05\x00\x04\x00\x00\x00\x00\x00\x0c\x00\x07\x80\x08\x00\x06\x40\x00\x00\x00\x00\x13\x00\x03\x00\x68\x61\x73\x68\x3a\x6e\x65\x74\x2c\x69\x66\x61\x63\x65\x00\x00", iov_len=88}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 88 [pid 5066] exit_group(0) = ? [pid 5066] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5067 attached , child_tidptr=0x555556540650) = 5067 [pid 5067] set_robust_list(0x555556540660, 24) = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 3 [pid 5067] dup(3) = 4 [ 58.493934][ T5067] ------------[ cut here ]------------ [ 58.499711][ T5067] ODEBUG: free active (active state 0) object: ffff888023d54050 object type: timer_list hint: hash_netiface4_gc+0x0/0x570 [ 58.513005][ T5067] WARNING: CPU: 0 PID: 5067 at lib/debugobjects.c:517 debug_print_object+0x17a/0x1f0 [ 58.522556][ T5067] Modules linked in: [ 58.526610][ T5067] CPU: 0 PID: 5067 Comm: syz-executor419 Not tainted 6.8.0-rc3-syzkaller-00047-g047371968ffc #0 [ 58.537067][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 58.547203][ T5067] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 58.553042][ T5067] Code: e8 cb 22 4e fd 4c 8b 0b 48 c7 c7 e0 71 fe 8b 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 1b 17 b0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 ac 2a de 0a 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 58.572727][ T5067] RSP: 0018:ffffc90003bf6ad8 EFLAGS: 00010286 [ 58.578859][ T5067] RAX: 76418a66bd4af100 RBX: ffffffff8bac97a0 RCX: ffff88802b978000 [ 58.587160][ T5067] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 58.595215][ T5067] RBP: ffffffff8bfe7360 R08: ffffffff81577992 R09: 1ffff9200077ecac [ 58.603206][ T5067] R10: dffffc0000000000 R11: fffff5200077ecad R12: 0000000000000000 [ 58.611283][ T5067] R13: ffffffff8bfe7278 R14: dffffc0000000000 R15: ffff888023d54050 [ 58.619302][ T5067] FS: 0000555556540380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 58.628281][ T5067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.634908][ T5067] CR2: 0000000020000104 CR3: 000000002e1e2000 CR4: 00000000003506f0 [ 58.642875][ T5067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.651066][ T5067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.659103][ T5067] Call Trace: [ 58.662372][ T5067] [ 58.665345][ T5067] ? __warn+0x162/0x4b0 [ 58.669521][ T5067] ? debug_print_object+0x17a/0x1f0 [ 58.674786][ T5067] ? report_bug+0x2b3/0x500 [ 58.679343][ T5067] ? debug_print_object+0x17a/0x1f0 [ 58.684541][ T5067] ? handle_bug+0x3e/0x70 [ 58.688915][ T5067] ? exc_invalid_op+0x1a/0x50 [ 58.693870][ T5067] ? asm_exc_invalid_op+0x1a/0x20 [ 58.698945][ T5067] ? __warn_printk+0x292/0x360 [ 58.703736][ T5067] ? debug_print_object+0x17a/0x1f0 [ 58.709011][ T5067] ? __pfx_hash_netiface4_gc+0x10/0x10 [ 58.714490][ T5067] ? __pfx_hash_netiface4_gc+0x10/0x10 [ 58.720012][ T5067] debug_check_no_obj_freed+0x45b/0x580 [ 58.725641][ T5067] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 58.731815][ T5067] ? hash_netiface4_destroy+0x297/0x2c0 [ 58.737405][ T5067] kfree+0x110/0x380 [ 58.741431][ T5067] hash_netiface4_destroy+0x297/0x2c0 [ 58.746945][ T5067] ? hash_netiface4_uadt+0x73f/0xca0 [ 58.752247][ T5067] ? hash_netiface4_same_set+0x148/0x220 [ 58.757934][ T5067] ip_set_create+0x13b4/0x1780 [ 58.762713][ T5067] ? ip_set_create+0x45e/0x1780 [ 58.767616][ T5067] ? __pfx_ip_set_create+0x10/0x10 [ 58.772740][ T5067] ? trace_contention_end+0x3c/0x100 [ 58.778110][ T5067] ? nfnetlink_rcv_msg+0x225/0x1190 [ 58.783332][ T5067] nfnetlink_rcv_msg+0xbec/0x1190 [ 58.788412][ T5067] ? nfnetlink_rcv_msg+0x225/0x1190 [ 58.793637][ T5067] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 58.799186][ T5067] netlink_rcv_skb+0x1e3/0x430 [ 58.803963][ T5067] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 58.809514][ T5067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 58.814877][ T5067] ? apparmor_capable+0x138/0x1b0 [ 58.819906][ T5067] ? bpf_lsm_capable+0x9/0x10 [ 58.824574][ T5067] ? security_capable+0x90/0xb0 [ 58.829733][ T5067] nfnetlink_rcv+0x294/0x2650 [ 58.834429][ T5067] ? __pfx_validate_chain+0x10/0x10 [ 58.839710][ T5067] ? mark_lock+0x9a/0x350 [ 58.844064][ T5067] ? __pfx_validate_chain+0x10/0x10 [ 58.849371][ T5067] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 58.854511][ T5067] ? mark_lock+0x9a/0x350 [ 58.858908][ T5067] ? __lock_acquire+0x1345/0x1fd0 [ 58.863980][ T5067] ? netlink_deliver_tap+0x2e/0x1b0 [ 58.869231][ T5067] ? __pfx_lock_release+0x10/0x10 [ 58.874278][ T5067] ? netlink_deliver_tap+0x2e/0x1b0 [ 58.879529][ T5067] netlink_unicast+0x7ea/0x980 [ 58.884316][ T5067] ? __pfx_netlink_unicast+0x10/0x10 [ 58.889646][ T5067] ? __virt_addr_valid+0x44e/0x520 [ 58.894807][ T5067] ? __phys_addr_symbol+0x2f/0x70 [ 58.899829][ T5067] ? __check_object_size+0x4bb/0xa00 [ 58.905166][ T5067] ? bpf_lsm_netlink_send+0x9/0x10 [ 58.910908][ T5067] netlink_sendmsg+0xa3b/0xd70 [ 58.915728][ T5067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.921021][ T5067] ? __import_iovec+0x552/0x890 [ 58.925913][ T5067] ? aa_sock_msg_perm+0x91/0x160 [ 58.930869][ T5067] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 58.936220][ T5067] ? security_socket_sendmsg+0x87/0xb0 [ 58.941689][ T5067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.947100][ T5067] __sock_sendmsg+0x221/0x270 [ 58.951804][ T5067] ____sys_sendmsg+0x525/0x7d0 [ 58.956618][ T5067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.961923][ T5067] ? do_raw_spin_lock+0x14e/0x370 [ 58.967038][ T5067] __sys_sendmsg+0x2b0/0x3a0 [ 58.971655][ T5067] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.976828][ T5067] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.983180][ T5067] ? _raw_spin_unlock_irq+0x2e/0x50 [ 58.988424][ T5067] ? ptrace_notify+0x278/0x380 [ 58.993206][ T5067] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.999578][ T5067] ? exc_page_fault+0x587/0x870 [ 59.004442][ T5067] ? syscall_trace_enter+0x5e/0x150 [ 59.009687][ T5067] do_syscall_64+0xf9/0x240 [ 59.014224][ T5067] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 59.020160][ T5067] RIP: 0033:0x7fcedcc90bb9 [ 59.024589][ T5067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.044259][ T5067] RSP: 002b:00007ffc20b62448 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.052734][ T5067] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcedcc90bb9 [ 59.060753][ T5067] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 59.068787][ T5067] RBP: 000000000000e3d0 R08: 0000000000000006 R09: 0000000000000006 [ 59.076807][ T5067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc20b6245c [ 59.084843][ T5067] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 59.092830][ T5067] [ 59.095942][ T5067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.103225][ T5067] CPU: 0 PID: 5067 Comm: syz-executor419 Not tainted 6.8.0-rc3-syzkaller-00047-g047371968ffc #0 [ 59.113635][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 59.123688][ T5067] Call Trace: [ 59.126981][ T5067] [ 59.129917][ T5067] dump_stack_lvl+0x1e7/0x2e0 [ 59.134612][ T5067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.139814][ T5067] ? __pfx__printk+0x10/0x10 [ 59.144404][ T5067] ? _printk+0xd5/0x120 [ 59.148564][ T5067] ? vscnprintf+0x5d/0x90 [ 59.152895][ T5067] panic+0x349/0x860 [ 59.156790][ T5067] ? __warn+0x171/0x4b0 [ 59.160945][ T5067] ? __pfx_panic+0x10/0x10 [ 59.165356][ T5067] ? show_trace_log_lvl+0x4e4/0x520 [ 59.170567][ T5067] __warn+0x31c/0x4b0 [ 59.174545][ T5067] ? debug_print_object+0x17a/0x1f0 [ 59.179742][ T5067] report_bug+0x2b3/0x500 [ 59.184063][ T5067] ? debug_print_object+0x17a/0x1f0 [ 59.189277][ T5067] handle_bug+0x3e/0x70 [ 59.193434][ T5067] exc_invalid_op+0x1a/0x50 [ 59.197934][ T5067] asm_exc_invalid_op+0x1a/0x20 [ 59.202783][ T5067] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 59.208587][ T5067] Code: e8 cb 22 4e fd 4c 8b 0b 48 c7 c7 e0 71 fe 8b 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 1b 17 b0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 ac 2a de 0a 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 59.228205][ T5067] RSP: 0018:ffffc90003bf6ad8 EFLAGS: 00010286 [ 59.234281][ T5067] RAX: 76418a66bd4af100 RBX: ffffffff8bac97a0 RCX: ffff88802b978000 [ 59.242272][ T5067] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 59.250249][ T5067] RBP: ffffffff8bfe7360 R08: ffffffff81577992 R09: 1ffff9200077ecac [ 59.258240][ T5067] R10: dffffc0000000000 R11: fffff5200077ecad R12: 0000000000000000 [ 59.266228][ T5067] R13: ffffffff8bfe7278 R14: dffffc0000000000 R15: ffff888023d54050 [ 59.274307][ T5067] ? __warn_printk+0x292/0x360 [ 59.279112][ T5067] ? __pfx_hash_netiface4_gc+0x10/0x10 [ 59.284570][ T5067] ? __pfx_hash_netiface4_gc+0x10/0x10 [ 59.290028][ T5067] debug_check_no_obj_freed+0x45b/0x580 [ 59.295581][ T5067] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 59.301657][ T5067] ? hash_netiface4_destroy+0x297/0x2c0 [ 59.307199][ T5067] kfree+0x110/0x380 [ 59.311094][ T5067] hash_netiface4_destroy+0x297/0x2c0 [ 59.316464][ T5067] ? hash_netiface4_uadt+0x73f/0xca0 [ 59.321744][ T5067] ? hash_netiface4_same_set+0x148/0x220 [ 59.327376][ T5067] ip_set_create+0x13b4/0x1780 [ 59.332159][ T5067] ? ip_set_create+0x45e/0x1780 [ 59.337036][ T5067] ? __pfx_ip_set_create+0x10/0x10 [ 59.342257][ T5067] ? trace_contention_end+0x3c/0x100 [ 59.347578][ T5067] ? nfnetlink_rcv_msg+0x225/0x1190 [ 59.352784][ T5067] nfnetlink_rcv_msg+0xbec/0x1190 [ 59.357815][ T5067] ? nfnetlink_rcv_msg+0x225/0x1190 [ 59.363033][ T5067] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 59.368520][ T5067] netlink_rcv_skb+0x1e3/0x430 [ 59.373285][ T5067] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 59.378746][ T5067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.384035][ T5067] ? apparmor_capable+0x138/0x1b0 [ 59.389057][ T5067] ? bpf_lsm_capable+0x9/0x10 [ 59.393729][ T5067] ? security_capable+0x90/0xb0 [ 59.398577][ T5067] nfnetlink_rcv+0x294/0x2650 [ 59.403254][ T5067] ? __pfx_validate_chain+0x10/0x10 [ 59.408455][ T5067] ? mark_lock+0x9a/0x350 [ 59.412776][ T5067] ? __pfx_validate_chain+0x10/0x10 [ 59.417978][ T5067] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 59.423089][ T5067] ? mark_lock+0x9a/0x350 [ 59.427440][ T5067] ? __lock_acquire+0x1345/0x1fd0 [ 59.432518][ T5067] ? netlink_deliver_tap+0x2e/0x1b0 [ 59.437729][ T5067] ? __pfx_lock_release+0x10/0x10 [ 59.442758][ T5067] ? netlink_deliver_tap+0x2e/0x1b0 [ 59.447979][ T5067] netlink_unicast+0x7ea/0x980 [ 59.452758][ T5067] ? __pfx_netlink_unicast+0x10/0x10 [ 59.458044][ T5067] ? __virt_addr_valid+0x44e/0x520 [ 59.463163][ T5067] ? __phys_addr_symbol+0x2f/0x70 [ 59.468277][ T5067] ? __check_object_size+0x4bb/0xa00 [ 59.473564][ T5067] ? bpf_lsm_netlink_send+0x9/0x10 [ 59.478674][ T5067] netlink_sendmsg+0xa3b/0xd70 [ 59.483442][ T5067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.488734][ T5067] ? __import_iovec+0x552/0x890 [ 59.493603][ T5067] ? aa_sock_msg_perm+0x91/0x160 [ 59.498542][ T5067] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 59.503826][ T5067] ? security_socket_sendmsg+0x87/0xb0 [ 59.509284][ T5067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.514569][ T5067] __sock_sendmsg+0x221/0x270 [ 59.519247][ T5067] ____sys_sendmsg+0x525/0x7d0 [ 59.524014][ T5067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.529296][ T5067] ? do_raw_spin_lock+0x14e/0x370 [ 59.534321][ T5067] __sys_sendmsg+0x2b0/0x3a0 [ 59.538914][ T5067] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.544048][ T5067] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.550387][ T5067] ? _raw_spin_unlock_irq+0x2e/0x50 [ 59.555583][ T5067] ? ptrace_notify+0x278/0x380 [ 59.560357][ T5067] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.566702][ T5067] ? exc_page_fault+0x587/0x870 [ 59.571551][ T5067] ? syscall_trace_enter+0x5e/0x150 [ 59.576753][ T5067] do_syscall_64+0xf9/0x240 [ 59.581258][ T5067] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 59.587150][ T5067] RIP: 0033:0x7fcedcc90bb9 [ 59.591562][ T5067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.611339][ T5067] RSP: 002b:00007ffc20b62448 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.619761][ T5067] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcedcc90bb9 [ 59.627827][ T5067] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 59.635987][ T5067] RBP: 000000000000e3d0 R08: 0000000000000006 R09: 0000000000000006 [ 59.644126][ T5067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc20b6245c [ 59.652094][ T5067] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 59.660071][ T5067] [ 59.663318][ T5067] Kernel Offset: disabled [ 59.667852][ T5067] Rebooting in 86400 seconds..