./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3519431953 <...> forked to background, child pid 3183 no interfaces have a carri[ 18.140682][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 er [ 18.153207][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. execve("./syz-executor3519431953", ["./syz-executor3519431953"], 0x7ffdc54b1f90 /* 10 vars */) = 0 brk(NULL) = 0x5555566b2000 brk(0x5555566b2c40) = 0x5555566b2c40 arch_prctl(ARCH_SET_FS, 0x5555566b2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3519431953", 4096) = 28 brk(0x5555566d3c40) = 0x5555566d3c40 brk(0x5555566d4000) = 0x5555566d4000 mprotect(0x7fe6a0b4f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+memory", 7) = 7 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) syzkaller login: [ 33.531878][ T3604] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) [ 33.705031][ T3604] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 getpid() = 3604 mkdir("./syzkaller.AA4mDK", 0700) = 0 chmod("./syzkaller.AA4mDK", 0777) = 0 chdir("./syzkaller.AA4mDK") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566b25d0) = 3605 ./strace-static-x86_64: Process 3605 attached [pid 3605] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3605] setsid() = 1 [pid 3605] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3605] unshare(CLONE_NEWNS) = 0 [pid 3605] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3605] unshare(CLONE_NEWIPC) = 0 [pid 3605] unshare(CLONE_NEWCGROUP) = 0 [pid 3605] unshare(CLONE_NEWUTS) = 0 [pid 3605] unshare(CLONE_SYSVSEM) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "16777216", 8) = 8 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "536870912", 9) = 9 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "8192", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3605] close(3) = 0 [pid 3605] getpid() = 1 [pid 3605] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 3c 02 00 0f 85 3a 04 00 00 48 8b b3 90 00 00 00 4c 89 e7 e8 c9 [ 33.950729][ T3606] RSP: 0018:ffffc900040ffa30 EFLAGS: 00010216 [ 33.956775][ T3606] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 33.964811][ T3606] RDX: 0000000000000012 RSI: ffffffff81fda666 RDI: 0000000000000090 [ 33.972763][ T3606] RBP: ffffc900040ffa50 R08: 0000000000000005 R09: 0000000000000000 [ 33.980714][ T3606] R10: 0000000000000000 R11: 000000000008c07d R12: ffff888021974000 [ 33.988665][ T3606] R13: ffff888073148000 R14: ffff88807d73d880 R15: ffff888020b90000 [ 33.996635][ T3606] FS: 00005555566b2300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 34.005737][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.012300][ T3606] CR2: 0000000020000200 CR3: 000000007ecd3000 CR4: 0000000000350ef0 [ 34.020341][ T3606] Call Trace: [ 34.023600][ T3606] [ 34.026529][ T3606] cgroup_may_write+0x86/0x120 [ 34.031299][ T3606] cgroup_can_fork+0x961/0xec0 [ 34.036050][ T3606] copy_process+0x4335/0x7110 [ 34.040814][ T3606] ? lock_acquire+0x480/0x570 [ 34.045475][ T3606] ? __cleanup_sighand+0xb0/0xb0 [ 34.050414][ T3606] ? _copy_from_user+0xf9/0x170 [ 34.055249][ T3606] kernel_clone+0xe7/0x8f0 [ 34.059663][ T3606] ? rcu_read_lock_sched_held+0xd/0x70 [ 34.065105][ T3606] ? create_io_thread+0xe0/0xe0 [ 34.069938][ T3606] ? do_raw_spin_lock+0x120/0x2a0 [ 34.074944][ T3606] __do_sys_clone3+0x1cd/0x2e0 [ 34.079691][ T3606] ? __do_sys_clone+0x100/0x100 [ 34.084607][ T3606] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 34.090054][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 34.094883][ T3606] ? trace_hardirqs_on+0x2d/0x120 [ 34.099890][ T3606] ? _raw_spin_unlock_irq+0x2a/0x40 [ 34.105065][ T3606] ? ptrace_notify+0xfa/0x140 [ 34.109722][ T3606] do_syscall_64+0x35/0xb0 [ 34.114210][ T3606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 34.120088][ T3606] RIP: 0033:0x7fe6a0ae0e99 [ 34.124480][ T3606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 34.144241][ T3606] RSP: 002b:00007ffd863c5248 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 34.152634][ T3606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe6a0ae0e99 [ 34.160584][ T3606] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00007ffd863c52c0 [ 34.168554][ T3606] RBP: 0000000000000000 R08: 00007ffd863c50e0 R09: 00007ffd863c5270 [ 34.176506][ T3606] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffd863c526c [ 34.184454][ T3606] R13: 00007ffd863c5280 R14: 00007ffd863c52c0 R15: 0000000000000000 [ 34.192410][ T3606] [ 34.195424][ T3606] Modules linked in: [ 34.201578][ T3606] ---[ end trace 0000000000000000 ]--- [ 34.207133][ T3606] RIP: 0010:kernfs_get_inode+0x2e/0x520 [ 34.212682][ T3606] Code: 41 56 41 55 41 54 49 89 fc 53 48 89 f3 e8 da a3 7d ff 48 8d bb 90 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 3a 04 00 00 48 8b b3 90 00 00 00 4c 89 e7 e8 c9 [ 34.232322][ T3606] RSP: 0018:ffffc900040ffa30 EFLAGS: 00010216 [ 34.238429][ T3606] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 34.246400][ T3606] RDX: 0000000000000012 RSI: ffffffff81fda666 RDI: 0000000000000090 [ 34.254571][ T3606] RBP: ffffc900040ffa50 R08: 0000000000000005 R09: 0000000000000000 [ 34.262577][ T3606] R10: 0000000000000000 R11: 000000000008c07d R12: ffff888021974000 [ 34.270570][ T3606] R13: ffff888073148000 R14: ffff88807d73d880 R15: ffff888020b90000 [ 34.278559][ T3606] FS: 00005555566b2300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 34.287511][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.294119][ T3606] CR2: 0000000020000200 CR3: 000000007ecd3000 CR4: 0000000000350ef0 [ 34.302137][ T3606] Kernel panic - not syncing: Fatal exception [ 34.308838][ T3606] Kernel Offset: disabled [ 34.313164][ T3606] Rebooting in 86400 seconds..