./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2964523674 <...> DUID 00:04:b8:64:54:4b:51:f9:b6:ea:77:bd:45:d1:95:a6:31:4f forked to background, child pid 3209 [ 32.843069][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.853228][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.185' (ECDSA) to the list of known hosts. execve("./syz-executor2964523674", ["./syz-executor2964523674"], 0x7fff83c1e350 /* 10 vars */) = 0 brk(NULL) = 0x555555ee3000 brk(0x555555ee3c40) = 0x555555ee3c40 arch_prctl(ARCH_SET_FS, 0x555555ee3300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2964523674", 4096) = 28 brk(0x555555f04c40) = 0x555555f04c40 brk(0x555555f05000) = 0x555555f05000 mprotect(0x7f3cc2496000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_TRUNC|O_NOATIME, 000) = 3 ioctl(3, TUNSETIFF, 0x20000200) = 0 ioctl(3, TUNSETLINK, 0x118) = 0 socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_DYNAMIC}) = 0 syzkaller login: [ 58.140351][ T3635] syz-executor296 uses obsolete (PF_INET,SOCK_PACKET) [ 58.150861][ T3635] general protection fault, probably for non-canonical address 0xdffffc0000000c04: 0000 [#1] PREEMPT SMP KASAN [ 58.162618][ T3635] KASAN: probably user-memory-access in range [0x0000000000006020-0x0000000000006027] [ 58.172263][ T3635] CPU: 0 PID: 3635 Comm: syz-executor296 Not tainted 6.1.0-rc7-syzkaller-00118-ge931a173a685 #0 [ 58.182786][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 58.192866][ T3635] RIP: 0010:can_rcv_filter+0x36/0x8d0 [ 58.198289][ T3635] Code: 53 48 89 fb 48 83 ec 10 48 89 7c 24 08 e8 32 f4 ce f8 48 8d bb 20 60 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e d1 06 00 00 48 8b 44 24 08 31 [ 58.217920][ T3635] RSP: 0018:ffffc90003b4f7e0 EFLAGS: 00010202 [ 58.224082][ T3635] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 58.232058][ T3635] RDX: 0000000000000c04 RSI: ffffffff88b124ee RDI: 0000000000006020 [ 58.240034][ T3635] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 58.248010][ T3635] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 58.255986][ T3635] R13: ffff88801c372280 R14: ffff888022784000 R15: ffff88802842b200 [ 58.263963][ T3635] FS: 0000555555ee3300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 58.272901][ T3635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.279493][ T3635] CR2: 0000555a65d946f8 CR3: 00000000188cb000 CR4: 00000000003506f0 [ 58.287489][ T3635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.295465][ T3635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.303443][ T3635] Call Trace: [ 58.306718][ T3635] [ 58.309654][ T3635] can_receive+0x31d/0x580 [ 58.314087][ T3635] canfd_rcv+0x166/0x1a0 [ 58.318336][ T3635] ? can_rcv+0x1a0/0x1a0 [ 58.322585][ T3635] __netif_receive_skb_one_core+0x114/0x180 [ 58.328502][ T3635] ? __netif_receive_skb_core+0x39d0/0x39d0 [ 58.336232][ T3635] ? ktime_get_with_offset+0x3f6/0x500 [ 58.341707][ T3635] ? lockdep_hardirqs_on+0x7d/0x100 [ 58.346908][ T3635] ? ktime_get_with_offset+0x3f6/0x500 [ 58.352382][ T3635] ? ktime_get_with_offset+0x371/0x500 [ 58.357855][ T3635] __netif_receive_skb+0x1f/0x1c0 [ 58.362894][ T3635] netif_receive_skb+0x16e/0x9e0 [ 58.367850][ T3635] ? __netif_receive_skb+0x1c0/0x1c0 [ 58.373153][ T3635] ? _copy_from_iter+0x23d/0xf40 [ 58.378097][ T3635] ? skb_set_owner_w+0x26d/0x420 [ 58.383047][ T3635] tun_rx_batched+0x4b3/0x7a0 [ 58.387732][ T3635] ? tun_flow_cleanup+0x2a0/0x2a0 [ 58.392759][ T3635] ? lock_release+0x810/0x810 [ 58.397452][ T3635] ? tun_get_user+0x1dba/0x3ab0 [ 58.402315][ T3635] ? lock_downgrade+0x6e0/0x6e0 [ 58.407187][ T3635] ? __local_bh_enable_ip+0xa4/0x130 [ 58.412479][ T3635] tun_get_user+0x1e73/0x3ab0 [ 58.417201][ T3635] ? tun_build_skb+0x1160/0x1160 [ 58.422150][ T3635] ? lock_downgrade+0x6e0/0x6e0 [ 58.427026][ T3635] tun_chr_write_iter+0xdf/0x200 [ 58.431973][ T3635] vfs_write+0x9ed/0xdd0 [ 58.436229][ T3635] ? kernel_write+0x630/0x630 [ 58.440918][ T3635] ? find_held_lock+0x2d/0x110 [ 58.445697][ T3635] ? lock_downgrade+0x6e0/0x6e0 [ 58.450565][ T3635] ? __fget_light+0x20a/0x270 [ 58.455255][ T3635] ksys_write+0x12b/0x250 [ 58.459601][ T3635] ? __ia32_sys_read+0xb0/0xb0 [ 58.464376][ T3635] ? lockdep_hardirqs_on+0x7d/0x100 [ 58.469580][ T3635] ? _raw_spin_unlock_irq+0x2e/0x50 [ 58.474786][ T3635] ? ptrace_notify+0xfe/0x140 [ 58.479490][ T3635] do_syscall_64+0x39/0xb0 [ 58.483918][ T3635] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.489822][ T3635] RIP: 0033:0x7f3cc2429d59 [ 58.494237][ T3635] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.513846][ T3635] RSP: 002b:00007ffee5409f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.522263][ T3635] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3cc2429d59 [ 58.530233][ T3635] RDX: 0000000000000056 RSI: 0000000020000040 RDI: 0000000000000003 [ 58.538202][ T3635] RBP: 00007f3cc23edf00 R08: 00000000ffff8000 R09: 0000000000000000 [ 58.546172][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3cc23edf90 [ 58.554143][ T3635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.562120][ T3635] [ 58.565138][ T3635] Modules linked in: [ 58.569082][ T3635] ---[ end trace 0000000000000000 ]--- [ 58.574545][ T3635] RIP: 0010:can_rcv_filter+0x36/0x8d0 [ 58.579971][ T3635] Code: 53 48 89 fb 48 83 ec 10 48 89 7c 24 08 e8 32 f4 ce f8 48 8d bb 20 60 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e d1 06 00 00 48 8b 44 24 08 31 [ 58.599626][ T3635] RSP: 0018:ffffc90003b4f7e0 EFLAGS: 00010202 [ 58.605733][ T3635] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 58.613716][ T3635] RDX: 0000000000000c04 RSI: ffffffff88b124ee RDI: 0000000000006020 [ 58.621712][ T3635] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 58.629713][ T3635] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 58.637740][ T3635] R13: ffff88801c372280 R14: ffff888022784000 R15: ffff88802842b200 [ 58.645752][ T3635] FS: 0000555555ee3300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 58.654704][ T3635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.661328][ T3635] CR2: 0000555a65d946f8 CR3: 00000000188cb000 CR4: 00000000003506f0 [ 58.669343][ T3635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.677355][ T3635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.685360][ T3635] Kernel panic - not syncing: Fatal exception in interrupt [ 58.692703][ T3635] Kernel Offset: disabled [ 58.697020][ T3635] Rebooting in 86400 seconds..