./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor971212546
<...>
forked to background, child pid 3187
no interfaces have a carrier
[ 24.369631][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0
[ 24.378087][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts.
execve("./syz-executor971212546", ["./syz-executor971212546"], 0x7ffd2aefb510 /* 10 vars */) = 0
brk(NULL) = 0x555555f71000
brk(0x555555f71c40) = 0x555555f71c40
arch_prctl(ARCH_SET_FS, 0x555555f71300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor971212546", 4096) = 27
brk(0x555555f92c40) = 0x555555f92c40
brk(0x555555f93000) = 0x555555f93000
mprotect(0x7f97a4c61000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0
ioctl(5, SIOCGIFINDEX, {ifr_name="lo", ifr_ifindex=1}) = 0
sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x48\x00\x00\x00\x24\x00\x0b\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x60\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x09\x00\x01\x00\x70\x72\x69\x6f\x00\x00\x00\x00\x18\x00\x02\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=72}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 72
socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 6
socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 7
bind(7, {sa_family=AF_PACKET, sll_protocol=htons(0 /* ETH_P_??? */), sll_ifindex=if_nametoindex("lo"), sll_hatype=ARPHRD_NETROM, sll_pkttype=0x8 /* PACKET_??? */, sll_halen=0}, 128) = 0
getsockname(7, {sa_family=AF_PACKET, sa_data="\x00\x00\x01\x00\x00\x00\x04\x03\x00\x06\x00\x00\x00\x00\x00\x00"}, [103 => 18]) = 0
syzkaller login: [ 42.276868][ T3608] ------------[ cut here ]------------
[ 42.282570][ T3608] memcpy: detected field-spanning write (size 80) of single field "&n->sel" at net/sched/cls_u32.c:1043 (size 16)
[ 42.295111][ T3608] WARNING: CPU: 0 PID: 3608 at net/sched/cls_u32.c:1043 u32_change+0x2962/0x3250
[ 42.304267][ T3608] Modules linked in:
[ 42.308152][ T3608] CPU: 0 PID: 3608 Comm: syz-executor971 Not tainted 6.0.0-rc6-next-20220921-syzkaller #0
[ 42.318107][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2022
[ 42.328229][ T3608] RIP: 0010:u32_change+0x2962/0x3250
[ 42.333560][ T3608] Code: f4 df 14 fa 48 8b b5 78 fe ff ff b9 10 00 00 00 48 c7 c2 20 f7 f5 8a 48 c7 c7 a0 f6 f5 8a c6 05 55 b3 63 06 01 e8 db d6 df 01 <0f> 0b e9 73 f3 ff ff e8 c2 df 14 fa 48 c7 c7 00 fc f5 8a e8 66 ed
[ 42.353208][ T3608] RSP: 0018:ffffc90003d7f300 EFLAGS: 00010282
[ 42.359295][ T3608] RAX: 0000000000000000 RBX: ffffc90003d7f618 RCX: 0000000000000000
[ 42.367270][ T3608] RDX: ffff8880235f1d40 RSI: ffffffff81620348 RDI: fffff520007afe52
[ 42.375272][ T3608] RBP: ffffc90003d7f4a0 R08: 0000000000000005 R09: 0000000000000000
[ 42.383275][ T3608] R10: 0000000080000000 R11: 203a7970636d656d R12: ffff888021d420e0
[ 42.391282][ T3608] R13: ffffc90003d7f5b8 R14: ffff888021d43c30 R15: ffff888021d42000
[ 42.399293][ T3608] FS: 0000555555f71300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 42.408231][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.415033][ T3608] CR2: 000000000064a110 CR3: 000000002824c000 CR4: 00000000003506f0
[ 42.423063][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.431083][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.439087][ T3608] Call Trace:
[ 42.442381][ T3608]
[ 42.445309][ T3608] ? lock_release+0x560/0x810
[ 42.450019][ T3608] ? u32_dump+0x10f0/0x10f0
[ 42.454532][ T3608] ? lockdep_rtnl_is_held+0x22/0x30
[ 42.459751][ T3608] ? u32_dump+0x10f0/0x10f0
[ 42.464271][ T3608] tc_new_tfilter+0x938/0x2190
[ 42.469076][ T3608] ? tc_del_tfilter+0x1560/0x1560
[ 42.474125][ T3608] ? is_bpf_text_address+0x99/0x170
[ 42.479342][ T3608] ? kernel_text_address+0x39/0x80
[ 42.484471][ T3608] ? __kernel_text_address+0x9/0x30
[ 42.489697][ T3608] ? arch_stack_walk+0x93/0xe0
[ 42.494471][ T3608] ? security_capable+0x8f/0xc0
[ 42.499352][ T3608] ? tc_del_tfilter+0x1560/0x1560
[ 42.504392][ T3608] rtnetlink_rcv_msg+0x955/0xca0
[ 42.509357][ T3608] ? rtnl_getlink+0xae0/0xae0
[ 42.514040][ T3608] ? sock_sendmsg+0xcf/0x120
[ 42.518619][ T3608] ? ____sys_sendmsg+0x712/0x8c0
[ 42.523576][ T3608] ? ___sys_sendmsg+0x110/0x1b0
[ 42.528439][ T3608] ? __sys_sendmsg+0xf3/0x1c0
[ 42.533154][ T3608] ? do_syscall_64+0x35/0xb0
[ 42.537764][ T3608] ? __sanitizer_cov_trace_switch+0x50/0x90
[ 42.543789][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 42.549315][ T3608] ? lock_acquire+0x4fc/0x630
[ 42.554009][ T3608] netlink_rcv_skb+0x153/0x420
[ 42.558834][ T3608] ? rtnl_getlink+0xae0/0xae0
[ 42.563519][ T3608] ? netlink_ack+0xd50/0xd50
[ 42.568101][ T3608] ? netlink_deliver_tap+0x1a2/0xc40
[ 42.573415][ T3608] ? netlink_deliver_tap+0x1b1/0xc40
[ 42.578769][ T3608] netlink_unicast+0x543/0x7f0
[ 42.583544][ T3608] ? netlink_attachskb+0x880/0x880
[ 42.588642][ T3608] ? __virt_addr_valid+0x5d/0x2d0
[ 42.593767][ T3608] ? __phys_addr_symbol+0x2c/0x70
[ 42.598831][ T3608] ? __check_object_size+0x2de/0x5a0
[ 42.604125][ T3608] netlink_sendmsg+0x917/0xe10
[ 42.608974][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 42.613925][ T3608] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 42.619251][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 42.624200][ T3608] sock_sendmsg+0xcf/0x120
[ 42.628606][ T3608] ____sys_sendmsg+0x712/0x8c0
[ 42.633412][ T3608] ? copy_msghdr_from_user+0xfc/0x150
[ 42.638829][ T3608] ? kernel_sendmsg+0x50/0x50
[ 42.643506][ T3608] ? finish_task_switch.isra.0+0x2b5/0xc80
[ 42.649372][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 42.654404][ T3608] ___sys_sendmsg+0x110/0x1b0
[ 42.659110][ T3608] ? do_recvmmsg+0x6e0/0x6e0
[ 42.663709][ T3608] ? __schedule+0xbda/0x55c0
[ 42.668288][ T3608] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 42.674134][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 42.679219][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 42.684691][ T3608] ? lock_acquire+0x4fc/0x630
[ 42.689396][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 42.694892][ T3608] ? lock_acquire+0x4fc/0x630
[ 42.699609][ T3608] ? lock_release+0x810/0x810
[ 42.704294][ T3608] ? ptrace_stop.part.0+0x49a/0x8c0
[ 42.709530][ T3608] ? do_raw_spin_lock+0x120/0x2a0
[ 42.714565][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 42.719523][ T3608] ? __fget_light+0x20a/0x270
[ 42.724217][ T3608] __sys_sendmsg+0xf3/0x1c0
[ 42.728755][ T3608] ? __sys_sendmsg_sock+0x30/0x30
[ 42.733795][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 42.738637][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 42.743867][ T3608] ? ptrace_notify+0xfa/0x140
[ 42.748554][ T3608] do_syscall_64+0x35/0xb0
[ 42.753007][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 42.758938][ T3608] RIP: 0033:0x7f97a4bf4e69
[ 42.763341][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.782997][ T3608] RSP: 002b:00007ffdcaf10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 42.791435][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f97a4bf4e69
[ 42.799442][ T3608] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000006
[ 42.807509][ T3608] RBP: 00007f97a4bb9010 R08: 0000000000000000 R09: 0000000000000000
[ 42.815521][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97a4bb90a0
[ 42.823537][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.831548][ T3608]
[ 42.834567][ T3608] Kernel panic - not syncing: panic_on_warn set ...
[ 42.841132][ T3608] CPU: 0 PID: 3608 Comm: syz-executor971 Not tainted 6.0.0-rc6-next-20220921-syzkaller #0
[ 42.851005][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2022
[ 42.861044][ T3608] Call Trace:
[ 42.864315][ T3608]
[ 42.867233][ T3608] dump_stack_lvl+0xcd/0x134
[ 42.871819][ T3608] panic+0x2c8/0x622
[ 42.875715][ T3608] ? panic_print_sys_info.part.0+0x110/0x110
[ 42.881694][ T3608] ? __warn.cold+0x24b/0x350
[ 42.886268][ T3608] ? u32_change+0x2962/0x3250
[ 42.890934][ T3608] __warn.cold+0x25c/0x350
[ 42.895334][ T3608] ? __wake_up_klogd.part.0+0x99/0xf0
[ 42.900693][ T3608] ? u32_change+0x2962/0x3250
[ 42.905360][ T3608] report_bug+0x1bc/0x210
[ 42.909679][ T3608] handle_bug+0x3c/0x60
[ 42.913822][ T3608] exc_invalid_op+0x14/0x40
[ 42.918309][ T3608] asm_exc_invalid_op+0x16/0x20
[ 42.923148][ T3608] RIP: 0010:u32_change+0x2962/0x3250
[ 42.928591][ T3608] Code: f4 df 14 fa 48 8b b5 78 fe ff ff b9 10 00 00 00 48 c7 c2 20 f7 f5 8a 48 c7 c7 a0 f6 f5 8a c6 05 55 b3 63 06 01 e8 db d6 df 01 <0f> 0b e9 73 f3 ff ff e8 c2 df 14 fa 48 c7 c7 00 fc f5 8a e8 66 ed
[ 42.948189][ T3608] RSP: 0018:ffffc90003d7f300 EFLAGS: 00010282
[ 42.954256][ T3608] RAX: 0000000000000000 RBX: ffffc90003d7f618 RCX: 0000000000000000
[ 42.962228][ T3608] RDX: ffff8880235f1d40 RSI: ffffffff81620348 RDI: fffff520007afe52
[ 42.970198][ T3608] RBP: ffffc90003d7f4a0 R08: 0000000000000005 R09: 0000000000000000
[ 42.978168][ T3608] R10: 0000000080000000 R11: 203a7970636d656d R12: ffff888021d420e0
[ 42.986141][ T3608] R13: ffffc90003d7f5b8 R14: ffff888021d43c30 R15: ffff888021d42000
[ 42.994118][ T3608] ? vprintk+0x88/0x90
[ 42.998198][ T3608] ? lock_release+0x560/0x810
[ 43.002882][ T3608] ? u32_dump+0x10f0/0x10f0
[ 43.007393][ T3608] ? lockdep_rtnl_is_held+0x22/0x30
[ 43.012606][ T3608] ? u32_dump+0x10f0/0x10f0
[ 43.017117][ T3608] tc_new_tfilter+0x938/0x2190
[ 43.021901][ T3608] ? tc_del_tfilter+0x1560/0x1560
[ 43.026935][ T3608] ? is_bpf_text_address+0x99/0x170
[ 43.032145][ T3608] ? kernel_text_address+0x39/0x80
[ 43.037268][ T3608] ? __kernel_text_address+0x9/0x30
[ 43.042482][ T3608] ? arch_stack_walk+0x93/0xe0
[ 43.047254][ T3608] ? security_capable+0x8f/0xc0
[ 43.052114][ T3608] ? tc_del_tfilter+0x1560/0x1560
[ 43.057151][ T3608] rtnetlink_rcv_msg+0x955/0xca0
[ 43.062098][ T3608] ? rtnl_getlink+0xae0/0xae0
[ 43.066775][ T3608] ? sock_sendmsg+0xcf/0x120
[ 43.071367][ T3608] ? ____sys_sendmsg+0x712/0x8c0
[ 43.076305][ T3608] ? ___sys_sendmsg+0x110/0x1b0
[ 43.081166][ T3608] ? __sys_sendmsg+0xf3/0x1c0
[ 43.085864][ T3608] ? do_syscall_64+0x35/0xb0
[ 43.090484][ T3608] ? __sanitizer_cov_trace_switch+0x50/0x90
[ 43.096414][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 43.101895][ T3608] ? lock_acquire+0x4fc/0x630
[ 43.106583][ T3608] netlink_rcv_skb+0x153/0x420
[ 43.111360][ T3608] ? rtnl_getlink+0xae0/0xae0
[ 43.116047][ T3608] ? netlink_ack+0xd50/0xd50
[ 43.120643][ T3608] ? netlink_deliver_tap+0x1a2/0xc40
[ 43.125939][ T3608] ? netlink_deliver_tap+0x1b1/0xc40
[ 43.131238][ T3608] netlink_unicast+0x543/0x7f0
[ 43.136013][ T3608] ? netlink_attachskb+0x880/0x880
[ 43.141134][ T3608] ? __virt_addr_valid+0x5d/0x2d0
[ 43.146160][ T3608] ? __phys_addr_symbol+0x2c/0x70
[ 43.151188][ T3608] ? __check_object_size+0x2de/0x5a0
[ 43.156478][ T3608] netlink_sendmsg+0x917/0xe10
[ 43.161264][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 43.166222][ T3608] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 43.171572][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 43.176689][ T3608] sock_sendmsg+0xcf/0x120
[ 43.181119][ T3608] ____sys_sendmsg+0x712/0x8c0
[ 43.185887][ T3608] ? copy_msghdr_from_user+0xfc/0x150
[ 43.191270][ T3608] ? kernel_sendmsg+0x50/0x50
[ 43.195952][ T3608] ? finish_task_switch.isra.0+0x2b5/0xc80
[ 43.201759][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 43.206790][ T3608] ___sys_sendmsg+0x110/0x1b0
[ 43.211480][ T3608] ? do_recvmmsg+0x6e0/0x6e0
[ 43.216079][ T3608] ? __schedule+0xbda/0x55c0
[ 43.220669][ T3608] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 43.226485][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 43.231515][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 43.236991][ T3608] ? lock_acquire+0x4fc/0x630
[ 43.241669][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 43.247176][ T3608] ? lock_acquire+0x4fc/0x630
[ 43.251858][ T3608] ? lock_release+0x810/0x810
[ 43.256535][ T3608] ? ptrace_stop.part.0+0x49a/0x8c0
[ 43.261738][ T3608] ? do_raw_spin_lock+0x120/0x2a0
[ 43.266770][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 43.271716][ T3608] ? __fget_light+0x20a/0x270
[ 43.276420][ T3608] __sys_sendmsg+0xf3/0x1c0
[ 43.280941][ T3608] ? __sys_sendmsg_sock+0x30/0x30
[ 43.285991][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 43.290858][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 43.296078][ T3608] ? ptrace_notify+0xfa/0x140
[ 43.300769][ T3608] do_syscall_64+0x35/0xb0
[ 43.305208][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.311120][ T3608] RIP: 0033:0x7f97a4bf4e69
[ 43.315541][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.335243][ T3608] RSP: 002b:00007ffdcaf10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 43.343660][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f97a4bf4e69
[ 43.351633][ T3608] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000006
[ 43.359602][ T3608] RBP: 00007f97a4bb9010 R08: 0000000000000000 R09: 0000000000000000
[ 43.367573][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97a4bb90a0
[ 43.375547][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.383531][ T3608]
[ 43.386709][ T3608] Kernel Offset: disabled
[ 43.391029][ T3608] Rebooting in 86400 seconds..