./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1503069749 <...> DUID 00:04:91:bc:de:6a:11:68:5e:b9:f7:f7:da:c6:96:db:93:18 forked to background, child pid 3186 [ 46.915559][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.935895][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.15.215' (ECDSA) to the list of known hosts. execve("./syz-executor1503069749", ["./syz-executor1503069749"], 0x7ffe11c9fb90 /* 10 vars */) = 0 brk(NULL) = 0x555555eaa000 brk(0x555555eaac40) = 0x555555eaac40 arch_prctl(ARCH_SET_FS, 0x555555eaa300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1503069749", 4096) = 28 brk(0x555555ecbc40) = 0x555555ecbc40 brk(0x555555ecc000) = 0x555555ecc000 mprotect(0x7f0631df1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_NONBLOCK|O_DSYNC|O_NOATIME, 000) = 3 ioctl(3, TUNSETIFF, 0x200000c0) = 0 socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 syzkaller login: [ 73.335101][ T3619] syz-executor150 uses obsolete (PF_INET,SOCK_PACKET) [ 73.366815][ T3619] ------------[ cut here ]------------ [ 73.372578][ T3619] WARNING: CPU: 1 PID: 3619 at net/core/dev.c:6076 napi_complete_done+0x45b/0x880 [ 73.381929][ T3619] Modules linked in: [ 73.385868][ T3619] CPU: 1 PID: 3619 Comm: syz-executor150 Not tainted 6.1.0-rc3-syzkaller-00175-g1118b2049d77 #0 [ 73.396369][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 73.406602][ T3619] RIP: 0010:napi_complete_done+0x45b/0x880 [ 73.412520][ T3619] Code: c1 ea 03 0f b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 24 04 00 00 41 89 5d 1c e9 73 fc ff ff e8 b5 53 22 fa <0f> 0b e9 82 fe ff ff e8 a9 53 22 fa 48 8b 5c 24 08 31 ff 48 89 de [ 73.432227][ T3619] RSP: 0018:ffffc90003c7fb08 EFLAGS: 00010293 [ 73.438354][ T3619] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000000 [ 73.446408][ T3619] RDX: ffff88807eb057c0 RSI: ffffffff875a58db RDI: 0000000000000007 [ 73.454465][ T3619] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 73.462514][ T3619] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888026620628 [ 73.470561][ T3619] R13: ffff888026620618 R14: ffff888026620634 R15: 0000000000000000 [ 73.478573][ T3619] FS: 0000555555eaa300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 73.487586][ T3619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.494356][ T3619] CR2: 00007ffc5f593b70 CR3: 0000000077721000 CR4: 00000000003506e0 [ 73.502477][ T3619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.510530][ T3619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.518546][ T3619] Call Trace: [ 73.521891][ T3619] [ 73.524870][ T3619] tun_get_user+0x206d/0x3a60 [ 73.529624][ T3619] ? tun_build_skb+0x1160/0x1160 [ 73.534776][ T3619] ? lock_downgrade+0x6e0/0x6e0 [ 73.539708][ T3619] tun_chr_write_iter+0xdb/0x200 [ 73.544741][ T3619] vfs_write+0x9e9/0xdd0 [ 73.549059][ T3619] ? kernel_write+0x630/0x630 [ 73.553842][ T3619] ? find_held_lock+0x2d/0x110 [ 73.558661][ T3619] ? lock_downgrade+0x6e0/0x6e0 [ 73.563635][ T3619] ? __fget_light+0x20a/0x270 [ 73.568387][ T3619] ksys_write+0x127/0x250 [ 73.572855][ T3619] ? __ia32_sys_read+0xb0/0xb0 [ 73.577684][ T3619] ? lockdep_hardirqs_on+0x79/0x100 [ 73.583031][ T3619] ? _raw_spin_unlock_irq+0x2a/0x40 [ 73.588299][ T3619] ? ptrace_notify+0xfa/0x140 [ 73.593104][ T3619] do_syscall_64+0x35/0xb0 [ 73.597592][ T3619] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.603587][ T3619] RIP: 0033:0x7f0631d84d49 [ 73.608049][ T3619] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.627845][ T3619] RSP: 002b:00007ffcb99ad508 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.636386][ T3619] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0631d84d49 [ 73.644436][ T3619] RDX: 000000000000002e RSI: 00000000200001c0 RDI: 0000000000000003 [ 73.652505][ T3619] RBP: 00007f0631d48ef0 R08: 0000000000000000 R09: 0000000000000000 [ 73.660553][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0631d48f80 [ 73.668582][ T3619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.676681][ T3619] [ 73.679743][ T3619] Kernel panic - not syncing: panic_on_warn set ... [ 73.686357][ T3619] CPU: 1 PID: 3619 Comm: syz-executor150 Not tainted 6.1.0-rc3-syzkaller-00175-g1118b2049d77 #0 [ 73.696809][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 73.706902][ T3619] Call Trace: [ 73.710221][ T3619] [ 73.713227][ T3619] dump_stack_lvl+0xcd/0x134 [ 73.717884][ T3619] panic+0x2c8/0x622 [ 73.721843][ T3619] ? panic_print_sys_info.part.0+0x110/0x110 [ 73.727903][ T3619] ? __warn.cold+0x24b/0x350 [ 73.732543][ T3619] ? napi_complete_done+0x45b/0x880 [ 73.737801][ T3619] __warn.cold+0x25c/0x350 [ 73.742265][ T3619] ? napi_complete_done+0x45b/0x880 [ 73.747526][ T3619] report_bug+0x1bc/0x210 [ 73.751955][ T3619] handle_bug+0x3c/0x70 [ 73.756179][ T3619] exc_invalid_op+0x14/0x40 [ 73.760734][ T3619] asm_exc_invalid_op+0x16/0x20 [ 73.765646][ T3619] RIP: 0010:napi_complete_done+0x45b/0x880 [ 73.771528][ T3619] Code: c1 ea 03 0f b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 24 04 00 00 41 89 5d 1c e9 73 fc ff ff e8 b5 53 22 fa <0f> 0b e9 82 fe ff ff e8 a9 53 22 fa 48 8b 5c 24 08 31 ff 48 89 de [ 73.791193][ T3619] RSP: 0018:ffffc90003c7fb08 EFLAGS: 00010293 [ 73.797305][ T3619] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000000 [ 73.805314][ T3619] RDX: ffff88807eb057c0 RSI: ffffffff875a58db RDI: 0000000000000007 [ 73.813325][ T3619] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 73.821337][ T3619] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888026620628 [ 73.829352][ T3619] R13: ffff888026620618 R14: ffff888026620634 R15: 0000000000000000 [ 73.837376][ T3619] ? napi_complete_done+0x45b/0x880 [ 73.842648][ T3619] ? napi_complete_done+0x45b/0x880 [ 73.847913][ T3619] tun_get_user+0x206d/0x3a60 [ 73.852677][ T3619] ? tun_build_skb+0x1160/0x1160 [ 73.857670][ T3619] ? lock_downgrade+0x6e0/0x6e0 [ 73.862587][ T3619] tun_chr_write_iter+0xdb/0x200 [ 73.867573][ T3619] vfs_write+0x9e9/0xdd0 [ 73.871878][ T3619] ? kernel_write+0x630/0x630 [ 73.876618][ T3619] ? find_held_lock+0x2d/0x110 [ 73.881431][ T3619] ? lock_downgrade+0x6e0/0x6e0 [ 73.886339][ T3619] ? __fget_light+0x20a/0x270 [ 73.891077][ T3619] ksys_write+0x127/0x250 [ 73.895481][ T3619] ? __ia32_sys_read+0xb0/0xb0 [ 73.900297][ T3619] ? lockdep_hardirqs_on+0x79/0x100 [ 73.905550][ T3619] ? _raw_spin_unlock_irq+0x2a/0x40 [ 73.910805][ T3619] ? ptrace_notify+0xfa/0x140 [ 73.915537][ T3619] do_syscall_64+0x35/0xb0 [ 73.920021][ T3619] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.925978][ T3619] RIP: 0033:0x7f0631d84d49 [ 73.930449][ T3619] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.950098][ T3619] RSP: 002b:00007ffcb99ad508 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.958566][ T3619] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0631d84d49 [ 73.966575][ T3619] RDX: 000000000000002e RSI: 00000000200001c0 RDI: 0000000000000003 [ 73.974580][ T3619] RBP: 00007f0631d48ef0 R08: 0000000000000000 R09: 0000000000000000 [ 73.982591][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0631d48f80 [ 73.990597][ T3619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.998623][ T3619] [ 74.001957][ T3619] Kernel Offset: disabled [ 74.006390][ T3619] Rebooting in 86400 seconds..