./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3376088344 <...> DUID 00:04:b8:64:54:4b:51:f9:b6:ea:77:bd:45:d1:95:a6:31:4f forked to background, child pid 3188 [ 26.642295][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.653212][ T3189] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. execve("./syz-executor3376088344", ["./syz-executor3376088344"], 0x7fffb8b013c0 /* 10 vars */) = 0 brk(NULL) = 0x55555657b000 brk(0x55555657bc40) = 0x55555657bc40 arch_prctl(ARCH_SET_FS, 0x55555657b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3376088344", 4096) = 28 brk(0x55555659cc40) = 0x55555659cc40 brk(0x55555659d000) = 0x55555659d000 mprotect(0x7fe4a6ec7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3617 attached , child_tidptr=0x55555657b5d0) = 3617 [pid 3617] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3617] setsid() = 1 [pid 3617] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3617] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3617] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3617] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3617] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3617] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3617] unshare(CLONE_NEWNS) = 0 [pid 3617] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3617] unshare(CLONE_NEWIPC) = 0 [pid 3617] unshare(CLONE_NEWCGROUP) = 0 [pid 3617] unshare(CLONE_NEWUTS) = 0 [pid 3617] unshare(CLONE_SYSVSEM) = 0 [pid 3617] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "16777216", 8) = 8 [pid 3617] close(3) = 0 [pid 3617] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "536870912", 9) = 9 [pid 3617] close(3) = 0 [pid 3617] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1024", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "8192", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1024", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1024", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3617] close(3) = 0 [pid 3617] getpid() = 1 [pid 3617] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 3c 02 00 0f 85 36 01 00 00 49 8d bd 98 0b 00 00 4c 8b 65 40 48 [ 52.242635][ T3617] RSP: 0018:ffffc90003d4f398 EFLAGS: 00010202 [ 52.248686][ T3617] RAX: dffffc0000000000 RBX: ffff88801e4ea160 RCX: 0000000000000000 [ 52.256645][ T3617] RDX: 0000000000000008 RSI: ffffffff879a2061 RDI: 0000000000000040 [ 52.264602][ T3617] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 52.272562][ T3617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 52.280533][ T3617] R13: ffff888020e9c000 R14: ffff88807f8d4598 R15: ffffffff879a2010 [ 52.288504][ T3617] FS: 000055555657b300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 52.297435][ T3617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.304023][ T3617] CR2: 0000000020000080 CR3: 0000000072059000 CR4: 00000000003506f0 [ 52.311995][ T3617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.319963][ T3617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.327931][ T3617] Call Trace: [ 52.331208][ T3617] [ 52.334138][ T3617] ethnl_default_dumpit+0x4a4/0xe80 [ 52.339352][ T3617] netlink_dump+0x541/0xc20 [ 52.343863][ T3617] ? ethnl_default_parse+0xe5/0x130 [ 52.349066][ T3617] ? netlink_deliver_tap+0xc40/0xc40 [ 52.354360][ T3617] ? ethnl_default_parse+0x130/0x130 [ 52.359647][ T3617] ? genl_start+0x44a/0x670 [ 52.364160][ T3617] __netlink_dump_start+0x647/0x900 [ 52.369365][ T3617] ? genl_family_rcv_msg_doit+0x320/0x320 [ 52.375094][ T3617] ? ethnl_init_reply_data.isra.0+0x50/0x50 [ 52.380989][ T3617] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 52.386729][ T3617] ? genl_rcv+0x40/0x40 [ 52.390894][ T3617] ? genl_family_rcv_msg_doit+0x320/0x320 [ 52.396620][ T3617] ? ethnl_init_reply_data.isra.0+0x50/0x50 [ 52.402514][ T3617] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 52.408417][ T3617] ? __radix_tree_lookup+0x211/0x2a0 [ 52.413717][ T3617] ? genl_get_cmd+0x3cf/0x480 [ 52.418398][ T3617] genl_rcv_msg+0x55d/0x780 [ 52.422911][ T3617] ? genl_get_cmd+0x480/0x480 [ 52.427593][ T3617] ? ethnl_reply_init+0x200/0x200 [ 52.432619][ T3617] ? ethnl_default_parse+0x130/0x130 [ 52.437904][ T3617] ? ethnl_init_reply_data.isra.0+0x50/0x50 [ 52.443801][ T3617] ? ethtool_get_phc_vclocks+0x110/0x110 [ 52.449435][ T3617] ? lock_release+0x780/0x780 [ 52.454114][ T3617] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 52.459500][ T3617] netlink_rcv_skb+0x153/0x420 [ 52.464271][ T3617] ? genl_get_cmd+0x480/0x480 [ 52.468955][ T3617] ? netlink_ack+0xd50/0xd50 [ 52.473553][ T3617] ? netlink_deliver_tap+0x1b1/0xc40 [ 52.478849][ T3617] genl_rcv+0x24/0x40 [ 52.482835][ T3617] netlink_unicast+0x543/0x7f0 [ 52.487610][ T3617] ? netlink_attachskb+0x880/0x880 [ 52.492725][ T3617] ? __phys_addr+0xc4/0x140 [ 52.497244][ T3617] ? __phys_addr_symbol+0x2c/0x70 [ 52.502281][ T3617] ? __check_object_size+0x2de/0x700 [ 52.507584][ T3617] netlink_sendmsg+0x917/0xe10 [ 52.512354][ T3617] ? netlink_unicast+0x7f0/0x7f0 [ 52.517299][ T3617] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 52.522593][ T3617] ? netlink_unicast+0x7f0/0x7f0 [ 52.527535][ T3617] sock_sendmsg+0xcf/0x120 [ 52.531953][ T3617] ____sys_sendmsg+0x712/0x8c0 [ 52.536730][ T3617] ? copy_msghdr_from_user+0xfc/0x150 [ 52.542108][ T3617] ? kernel_sendmsg+0x50/0x50 [ 52.546805][ T3617] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 52.552820][ T3617] ___sys_sendmsg+0x110/0x1b0 [ 52.557520][ T3617] ? do_recvmmsg+0x6e0/0x6e0 [ 52.562128][ T3617] ? lock_release+0x780/0x780 [ 52.566808][ T3617] ? ptrace_stop.part.0+0x5ec/0xa80 [ 52.572010][ T3617] ? do_raw_spin_lock+0x120/0x2a0 [ 52.577038][ T3617] ? rwlock_bug.part.0+0x90/0x90 [ 52.581979][ T3617] ? _raw_spin_lock_irq+0x41/0x50 [ 52.587014][ T3617] ? __fget_light+0x20a/0x270 [ 52.591697][ T3617] __sys_sendmsg+0xf3/0x1c0 [ 52.596207][ T3617] ? __sys_sendmsg_sock+0x30/0x30 [ 52.601242][ T3617] ? lock_downgrade+0x6e0/0x6e0 [ 52.606097][ T3617] ? lockdep_hardirqs_on+0x79/0x100 [ 52.611301][ T3617] ? _raw_spin_unlock_irq+0x2a/0x40 [ 52.616508][ T3617] ? ptrace_notify+0xfa/0x140 [ 52.621191][ T3617] do_syscall_64+0x35/0xb0 [ 52.625624][ T3617] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.631528][ T3617] RIP: 0033:0x7fe4a6e53579 [ 52.635943][ T3617] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.655550][ T3617] RSP: 002b:00007fff0a576818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.664063][ T3617] RAX: ffffffffffffffda RBX: 00007fff0a576828 RCX: 00007fe4a6e53579 [ 52.672033][ T3617] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 52.680002][ T3617] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 52.687968][ T3617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0a576830 [ 52.695936][ T3617] R13: 00007fff0a576850 R14: 0000000000000000 R15: 0000000000000000 [ 52.703913][ T3617] [ 52.706927][ T3617] Modules linked in: [ 52.712835][ T3617] ---[ end trace 0000000000000000 ]--- [ 52.718309][ T3617] RIP: 0010:pse_prepare_data+0x66/0x1e0 [ 52.723933][ T3617] Code: 89 c6 e8 dd f1 e0 f9 45 85 e4 0f 88 b3 00 00 00 e8 0f f5 e0 f9 48 8d 7d 40 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 36 01 00 00 49 8d bd 98 0b 00 00 4c 8b 65 40 48 [ 52.743787][ T3617] RSP: 0018:ffffc90003d4f398 EFLAGS: 00010202 [ 52.750583][ T3617] RAX: dffffc0000000000 RBX: ffff88801e4ea160 RCX: 0000000000000000 [ 52.758563][ T3617] RDX: 0000000000000008 RSI: ffffffff879a2061 RDI: 0000000000000040 [ 52.766602][ T3617] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 52.774644][ T3617] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 52.782836][ T3617] R13: ffff888020e9c000 R14: ffff88807f8d4598 R15: ffffffff879a2010 [ 52.791041][ T3617] FS: 000055555657b300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 52.800101][ T3617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.806680][ T3617] CR2: 000055c322237058 CR3: 0000000072059000 CR4: 00000000003506f0 [ 52.814836][ T3617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.822899][ T3617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.830931][ T3617] Kernel panic - not syncing: Fatal exception [ 52.837157][ T3617] Kernel Offset: disabled [ 52.841473][ T3617] Rebooting in 86400 seconds..