./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1179570360 <...> DUID 00:04:c5:78:79:07:21:f0:b3:e0:09:b6:1a:d6:4d:97:86:4f forked to background, child pid 4673 [ 48.808934][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.835401][ T4674] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.120' (ECDSA) to the list of known hosts. execve("./syz-executor1179570360", ["./syz-executor1179570360"], 0x7ffe65ed1700 /* 10 vars */) = 0 brk(NULL) = 0x55555558b000 brk(0x55555558bc40) = 0x55555558bc40 arch_prctl(ARCH_SET_FS, 0x55555558b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1179570360", 4096) = 28 brk(0x5555555acc40) = 0x5555555acc40 brk(0x5555555ad000) = 0x5555555ad000 mprotect(0x7f7b11074000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 24) = 24 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555558b5d0) = 5011 ./strace-static-x86_64: Process 5011 attached [pid 5011] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5011] setsid() = 1 [pid 5011] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5011] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5011] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5011] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5011] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5011] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5011] unshare(CLONE_NEWNS) = 0 [pid 5011] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5011] unshare(CLONE_NEWIPC) = 0 [pid 5011] unshare(CLONE_NEWCGROUP) = 0 [pid 5011] unshare(CLONE_NEWUTS) = 0 [pid 5011] unshare(CLONE_SYSVSEM) = 0 [pid 5011] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] write(3, "16777216", 8) = 8 [pid 5011] close(3) = 0 [pid 5011] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] write(3, "536870912", 9) = 9 [pid 5011] close(3) = 0 [pid 5011] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] write(3, "1024", 4) = 4 [pid 5011] close(3) = 0 [pid 5011] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] write(3, "8192", 4) = 4 [pid 5011] close(3) = 0 [pid 5011] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] write(3, "1024", 4) = 4 [pid 5011] close(3) = 0 [pid 5011] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] write(3, "1024", 4) = 4 [pid 5011] close(3) = 0 [pid 5011] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5011] close(3) = 0 [pid 5011] getpid() = 1 [pid 5011] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 79.830198][ T5011] dump_stack_lvl+0x136/0x150 [ 79.834915][ T5011] should_fail_ex+0x4a3/0x5b0 [ 79.839612][ T5011] should_failslab+0x9/0x20 [ 79.844139][ T5011] __kmem_cache_alloc_node+0x5b/0x320 [ 79.849552][ T5011] ? nsim_fib_event_nb+0x1ba/0xe30 [ 79.854719][ T5011] kmalloc_trace+0x26/0xe0 [ 79.859176][ T5011] nsim_fib_event_nb+0x1ba/0xe30 [ 79.864161][ T5011] ? lock_sync+0x190/0x190 [ 79.868623][ T5011] ? net_generic+0xd9/0x2a0 [ 79.873226][ T5011] notifier_call_chain+0xb6/0x3c0 [ 79.878415][ T5011] atomic_notifier_call_chain+0x73/0x1c0 [ 79.884095][ T5011] call_fib_notifiers+0x34/0x70 [ 79.888985][ T5011] fib6_add+0xe6f/0x4080 [ 79.893282][ T5011] ? fib6_update_sernum_stub+0x80/0x80 [ 79.898773][ T5011] ? do_raw_spin_lock+0x124/0x2b0 [ 79.903856][ T5011] ip6_route_add+0x8f/0x150 [ 79.908399][ T5011] ipv6_route_ioctl+0x3fc/0x570 [ 79.913282][ T5011] ? debug_check_no_obj_freed+0x210/0x420 [ 79.919050][ T5011] ? lock_downgrade+0x690/0x690 [ 79.923946][ T5011] ? rt6_purge_dflt_routers+0xe60/0xe60 [ 79.929529][ T5011] ? find_held_lock+0x2d/0x110 [ 79.934363][ T5011] inet6_ioctl+0x246/0x290 [ 79.938823][ T5011] ? inet6_release+0x70/0x70 [ 79.943476][ T5011] sock_do_ioctl+0xcc/0x230 [ 79.948017][ T5011] ? get_user_ifreq+0x250/0x250 [ 79.952909][ T5011] ? vfs_fileattr_set+0xc40/0xc40 [ 79.957996][ T5011] sock_ioctl+0x1f8/0x680 [ 79.962369][ T5011] ? br_ioctl_call+0xb0/0xb0 [ 79.967006][ T5011] ? lock_downgrade+0x690/0x690 [ 79.971908][ T5011] ? bpf_lsm_file_ioctl+0x9/0x10 [ 79.976887][ T5011] ? br_ioctl_call+0xb0/0xb0 [ 79.981522][ T5011] __x64_sys_ioctl+0x19d/0x210 [ 79.986340][ T5011] do_syscall_64+0x39/0xb0 [ 79.990797][ T5011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.996731][ T5011] RIP: 0033:0x7f7b110006f9 [ 80.001170][ T5011] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.020806][ T5011] RSP: 002b:00007ffd3a1dbf08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.029248][ T5011] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f7b110006f9 [ 80.037240][ T5011] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000005 [ 80.045319][ T5011] RBP: 00007ffd3a1dbf20 R08: 0000000000000001 R09: 0000000000000000 [ 80.053312][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 80.061308][ T5011] R13: 00007ffd3a1dbf40 R14: 0000000000000003 R15: 0000000000000000 [ 80.069325][ T5011] [ 80.073717][ T5011] ------------[ cut here ]------------ [ 80.079505][ T5011] WARNING: CPU: 0 PID: 5011 at net/ipv6/ip6_fib.c:1506 fib6_add+0x3669/0x4080 [ 80.088505][ T5011] Modules linked in: [ 80.092455][ T5011] CPU: 0 PID: 5011 Comm: syz-executor117 Not tainted 6.4.0-syzkaller-01224-g1ef6663a587b #0 [ 80.102610][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 80.112740][ T5011] RIP: 0010:fib6_add+0x3669/0x4080 [ 80.117949][ T5011] Code: 00 00 48 8b 9b 58 0b 00 00 e9 67 f2 ff ff e8 9e 2c b0 f8 be 02 00 00 00 4c 89 f7 e8 c1 00 40 fb e9 ac e2 ff ff e8 87 2c b0 f8 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 48 48 c1 ea 03 80 [ 80.137634][ T5011] RSP: 0018:ffffc9000398f8c8 EFLAGS: 00010293 [ 80.143744][ T5011] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 80.151798][ T5011] RDX: ffff88807dc15940 RSI: ffffffff88d43e69 RDI: ffff888027a1c320 [ 80.159890][ T5011] RBP: ffff888027a1c1a0 R08: 0000000000000005 R09: 0000000000000000 [ 80.167949][ T5011] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 80.175992][ T5011] R13: 0000000000000000 R14: ffff88802a80642c R15: ffff888076b50000 [ 80.183977][ T5011] FS: 000055555558b300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 80.192983][ T5011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.199641][ T5011] CR2: 0000000020000340 CR3: 000000007ebcb000 CR4: 00000000003506f0 [ 80.207704][ T5011] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.215781][ T5011] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.223801][ T5011] Call Trace: [ 80.227156][ T5011] [ 80.230116][ T5011] ? __warn+0xe6/0x390 [ 80.234269][ T5011] ? fib6_add+0x3669/0x4080 [ 80.238853][ T5011] ? report_bug+0x2da/0x500 [ 80.243381][ T5011] ? handle_bug+0x3c/0x70 [ 80.247820][ T5011] ? exc_invalid_op+0x18/0x50 [ 80.252551][ T5011] ? asm_exc_invalid_op+0x1a/0x20 [ 80.257669][ T5011] ? fib6_add+0x3669/0x4080 [ 80.262221][ T5011] ? fib6_add+0x3669/0x4080 [ 80.266822][ T5011] ? fib6_add+0x3669/0x4080 [ 80.271735][ T5011] ? fib6_update_sernum_stub+0x80/0x80 [ 80.277269][ T5011] ? do_raw_spin_lock+0x124/0x2b0 [ 80.282465][ T5011] ip6_route_add+0x8f/0x150 [ 80.287095][ T5011] ipv6_route_ioctl+0x3fc/0x570 [ 80.292076][ T5011] ? debug_check_no_obj_freed+0x210/0x420 [ 80.297920][ T5011] ? lock_downgrade+0x690/0x690 [ 80.302832][ T5011] ? rt6_purge_dflt_routers+0xe60/0xe60 [ 80.308481][ T5011] ? find_held_lock+0x2d/0x110 [ 80.313584][ T5011] inet6_ioctl+0x246/0x290 [ 80.318094][ T5011] ? inet6_release+0x70/0x70 [ 80.322764][ T5011] sock_do_ioctl+0xcc/0x230 [ 80.327361][ T5011] ? get_user_ifreq+0x250/0x250 [ 80.332266][ T5011] ? vfs_fileattr_set+0xc40/0xc40 [ 80.337422][ T5011] sock_ioctl+0x1f8/0x680 [ 80.341829][ T5011] ? br_ioctl_call+0xb0/0xb0 [ 80.346543][ T5011] ? lock_downgrade+0x690/0x690 [ 80.351472][ T5011] ? bpf_lsm_file_ioctl+0x9/0x10 [ 80.356517][ T5011] ? br_ioctl_call+0xb0/0xb0 [ 80.361166][ T5011] __x64_sys_ioctl+0x19d/0x210 [ 80.366029][ T5011] do_syscall_64+0x39/0xb0 [ 80.370502][ T5011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.376574][ T5011] RIP: 0033:0x7f7b110006f9 [ 80.381113][ T5011] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.400804][ T5011] RSP: 002b:00007ffd3a1dbf08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.409321][ T5011] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f7b110006f9 [ 80.417366][ T5011] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000005 [ 80.425422][ T5011] RBP: 00007ffd3a1dbf20 R08: 0000000000000001 R09: 0000000000000000 [ 80.433424][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 80.441477][ T5011] R13: 00007ffd3a1dbf40 R14: 0000000000000003 R15: 0000000000000000 [ 80.449545][ T5011] [ 80.452588][ T5011] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.459881][ T5011] CPU: 0 PID: 5011 Comm: syz-executor117 Not tainted 6.4.0-syzkaller-01224-g1ef6663a587b #0 [ 80.469955][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 80.480132][ T5011] Call Trace: [ 80.483420][ T5011] [ 80.486359][ T5011] dump_stack_lvl+0xd9/0x150 [ 80.490976][ T5011] panic+0x686/0x730 [ 80.494940][ T5011] ? panic_smp_self_stop+0xa0/0xa0 [ 80.500073][ T5011] ? show_trace_log_lvl+0x284/0x390 [ 80.505332][ T5011] ? fib6_add+0x3669/0x4080 [ 80.509888][ T5011] check_panic_on_warn+0xb1/0xc0 [ 80.514870][ T5011] __warn+0xf2/0x390 [ 80.518799][ T5011] ? fib6_add+0x3669/0x4080 [ 80.523333][ T5011] report_bug+0x2da/0x500 [ 80.527705][ T5011] handle_bug+0x3c/0x70 [ 80.531915][ T5011] exc_invalid_op+0x18/0x50 [ 80.536463][ T5011] asm_exc_invalid_op+0x1a/0x20 [ 80.541347][ T5011] RIP: 0010:fib6_add+0x3669/0x4080 [ 80.546490][ T5011] Code: 00 00 48 8b 9b 58 0b 00 00 e9 67 f2 ff ff e8 9e 2c b0 f8 be 02 00 00 00 4c 89 f7 e8 c1 00 40 fb e9 ac e2 ff ff e8 87 2c b0 f8 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 48 48 c1 ea 03 80 [ 80.566125][ T5011] RSP: 0018:ffffc9000398f8c8 EFLAGS: 00010293 [ 80.572235][ T5011] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 80.580236][ T5011] RDX: ffff88807dc15940 RSI: ffffffff88d43e69 RDI: ffff888027a1c320 [ 80.588250][ T5011] RBP: ffff888027a1c1a0 R08: 0000000000000005 R09: 0000000000000000 [ 80.596241][ T5011] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 80.604232][ T5011] R13: 0000000000000000 R14: ffff88802a80642c R15: ffff888076b50000 [ 80.612240][ T5011] ? fib6_add+0x3669/0x4080 [ 80.616787][ T5011] ? fib6_add+0x3669/0x4080 [ 80.621348][ T5011] ? fib6_update_sernum_stub+0x80/0x80 [ 80.626836][ T5011] ? do_raw_spin_lock+0x124/0x2b0 [ 80.631906][ T5011] ip6_route_add+0x8f/0x150 [ 80.636440][ T5011] ipv6_route_ioctl+0x3fc/0x570 [ 80.641321][ T5011] ? debug_check_no_obj_freed+0x210/0x420 [ 80.647079][ T5011] ? lock_downgrade+0x690/0x690 [ 80.651970][ T5011] ? rt6_purge_dflt_routers+0xe60/0xe60 [ 80.657542][ T5011] ? find_held_lock+0x2d/0x110 [ 80.662374][ T5011] inet6_ioctl+0x246/0x290 [ 80.666844][ T5011] ? inet6_release+0x70/0x70 [ 80.671511][ T5011] sock_do_ioctl+0xcc/0x230 [ 80.676049][ T5011] ? get_user_ifreq+0x250/0x250 [ 80.680936][ T5011] ? vfs_fileattr_set+0xc40/0xc40 [ 80.686023][ T5011] sock_ioctl+0x1f8/0x680 [ 80.690387][ T5011] ? br_ioctl_call+0xb0/0xb0 [ 80.695013][ T5011] ? lock_downgrade+0x690/0x690 [ 80.699939][ T5011] ? bpf_lsm_file_ioctl+0x9/0x10 [ 80.704958][ T5011] ? br_ioctl_call+0xb0/0xb0 [ 80.709600][ T5011] __x64_sys_ioctl+0x19d/0x210 [ 80.714408][ T5011] do_syscall_64+0x39/0xb0 [ 80.718855][ T5011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.724781][ T5011] RIP: 0033:0x7f7b110006f9 [ 80.729218][ T5011] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.748849][ T5011] RSP: 002b:00007ffd3a1dbf08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.757300][ T5011] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f7b110006f9 [ 80.765293][ T5011] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000005 [ 80.773539][ T5011] RBP: 00007ffd3a1dbf20 R08: 0000000000000001 R09: 0000000000000000 [ 80.781544][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 80.789535][ T5011] R13: 00007ffd3a1dbf40 R14: 0000000000000003 R15: 0000000000000000 [ 80.797562][ T5011] [ 80.800897][ T5011] Kernel Offset: disabled [ 80.805240][ T5011] Rebooting in 86400 seconds..