./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4088948657 <...> forked to background, child pid 3186 no interfaces have a carrier [ 44.461300][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.485264][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.15.213' (ECDSA) to the list of known hosts. execve("./syz-executor4088948657", ["./syz-executor4088948657"], 0x7fff1250e6c0 /* 10 vars */) = 0 brk(NULL) = 0x555555f13000 brk(0x555555f13c40) = 0x555555f13c40 arch_prctl(ARCH_SET_FS, 0x555555f13300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4088948657", 4096) = 28 brk(0x555555f34c40) = 0x555555f34c40 brk(0x555555f35000) = 0x555555f35000 mprotect(0x7f3702210000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/net/tun", O_WRONLY|O_CREAT|O_NONBLOCK|O_NOATIME, 000) = 3 ioctl(3, TUNSETIFF, 0x200000c0) = 0 socket(AF_INET, SOCK_PACKET, IPPROTO_IGMP) = 4 ioctl(4, SIOCSIFFLAGS, {ifr_name="syzkaller1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_LOOPBACK|IFF_POINTOPOINT|IFF_NOTRAILERS|IFF_NOARP|IFF_PROMISC|IFF_ALLMULTI|IFF_SLAVE|IFF_MULTICAST|IFF_PORTSEL|IFF_DYNAMIC}) = 0 syzkaller login: [ 68.775902][ T3612] syz-executor408 uses obsolete (PF_INET,SOCK_PACKET) [ 68.785201][ T3612] device syzkaller1 entered promiscuous mode [ 68.809225][ T3612] ------------[ cut here ]------------ [ 68.814975][ T3612] WARNING: CPU: 0 PID: 3612 at net/core/dev.c:6076 napi_complete_done+0x45b/0x880 [ 68.824759][ T3612] Modules linked in: [ 68.828704][ T3612] CPU: 0 PID: 3612 Comm: syz-executor408 Not tainted 6.1.0-rc3-syzkaller-00175-g1118b2049d77 #0 [ 68.839221][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 68.849407][ T3612] RIP: 0010:napi_complete_done+0x45b/0x880 [ 68.855338][ T3612] Code: c1 ea 03 0f b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 24 04 00 00 41 89 5d 1c e9 73 fc ff ff e8 b5 53 22 fa <0f> 0b e9 82 fe ff ff e8 a9 53 22 fa 48 8b 5c 24 08 31 ff 48 89 de [ 68.875149][ T3612] RSP: 0018:ffffc90003c4f920 EFLAGS: 00010293 [ 68.881358][ T3612] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000000 [ 68.889524][ T3612] RDX: ffff8880251c0000 RSI: ffffffff875a58db RDI: 0000000000000007 [ 68.897783][ T3612] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 68.905858][ T3612] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888072d02628 [ 68.914028][ T3612] R13: ffff888072d02618 R14: ffff888072d02634 R15: 0000000000000000 [ 68.922095][ T3612] FS: 0000555555f13300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 68.931085][ T3612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.937776][ T3612] CR2: 000055c44d3892b8 CR3: 00000000172d2000 CR4: 00000000003506f0 [ 68.945852][ T3612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.953930][ T3612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.961983][ T3612] Call Trace: [ 68.965386][ T3612] [ 68.968363][ T3612] tun_get_user+0x206d/0x3a60 [ 68.973156][ T3612] ? tun_build_skb+0x1160/0x1160 [ 68.978159][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 68.983103][ T3612] ? find_held_lock+0x2d/0x110 [ 68.987966][ T3612] tun_chr_write_iter+0xdb/0x200 [ 68.993001][ T3612] do_iter_readv_writev+0x20b/0x3b0 [ 68.998271][ T3612] ? generic_copy_file_range+0xd0/0xd0 [ 69.003849][ T3612] ? bpf_lsm_file_permission+0x5/0x10 [ 69.009282][ T3612] ? security_file_permission+0xab/0xd0 [ 69.014936][ T3612] do_iter_write+0x182/0x700 [ 69.019689][ T3612] ? import_iovec+0x10c/0x150 [ 69.024481][ T3612] vfs_writev+0x1aa/0x630 [ 69.028897][ T3612] ? ptrace_stop.part.0+0x49a/0x8c0 [ 69.034195][ T3612] ? vfs_iter_write+0xa0/0xa0 [ 69.038954][ T3612] ? do_raw_spin_lock+0x120/0x2a0 [ 69.044084][ T3612] ? rwlock_bug.part.0+0x90/0x90 [ 69.049100][ T3612] ? find_held_lock+0x2d/0x110 [ 69.053974][ T3612] ? ptrace_notify+0xfa/0x140 [ 69.058724][ T3612] ? __fget_light+0x20a/0x270 [ 69.063508][ T3612] do_writev+0x133/0x2f0 [ 69.067815][ T3612] ? vfs_writev+0x630/0x630 [ 69.072420][ T3612] ? lockdep_hardirqs_on+0x79/0x100 [ 69.077762][ T3612] ? _raw_spin_unlock_irq+0x2a/0x40 [ 69.083186][ T3612] ? ptrace_notify+0xfa/0x140 [ 69.087939][ T3612] do_syscall_64+0x35/0xb0 [ 69.092550][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.098510][ T3612] RIP: 0033:0x7f37021a3c19 [ 69.103011][ T3612] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 69.122716][ T3612] RSP: 002b:00007ffee3bb5388 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 69.131193][ T3612] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f37021a3c19 [ 69.139259][ T3612] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 69.147331][ T3612] RBP: 00007f3702167dc0 R08: 0000000000000000 R09: 0000000000000000 [ 69.155391][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3702167e50 [ 69.163453][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.171553][ T3612] [ 69.174627][ T3612] Kernel panic - not syncing: panic_on_warn set ... [ 69.181252][ T3612] CPU: 0 PID: 3612 Comm: syz-executor408 Not tainted 6.1.0-rc3-syzkaller-00175-g1118b2049d77 #0 [ 69.191715][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 69.201813][ T3612] Call Trace: [ 69.205138][ T3612] [ 69.208107][ T3612] dump_stack_lvl+0xcd/0x134 [ 69.213200][ T3612] panic+0x2c8/0x622 [ 69.217163][ T3612] ? panic_print_sys_info.part.0+0x110/0x110 [ 69.223228][ T3612] ? __warn.cold+0x24b/0x350 [ 69.227959][ T3612] ? napi_complete_done+0x45b/0x880 [ 69.233230][ T3612] __warn.cold+0x25c/0x350 [ 69.237705][ T3612] ? napi_complete_done+0x45b/0x880 [ 69.242975][ T3612] report_bug+0x1bc/0x210 [ 69.247389][ T3612] handle_bug+0x3c/0x70 [ 69.251791][ T3612] exc_invalid_op+0x14/0x40 [ 69.256443][ T3612] asm_exc_invalid_op+0x16/0x20 [ 69.261443][ T3612] RIP: 0010:napi_complete_done+0x45b/0x880 [ 69.267315][ T3612] Code: c1 ea 03 0f b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 24 04 00 00 41 89 5d 1c e9 73 fc ff ff e8 b5 53 22 fa <0f> 0b e9 82 fe ff ff e8 a9 53 22 fa 48 8b 5c 24 08 31 ff 48 89 de [ 69.286996][ T3612] RSP: 0018:ffffc90003c4f920 EFLAGS: 00010293 [ 69.293115][ T3612] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000000 [ 69.301927][ T3612] RDX: ffff8880251c0000 RSI: ffffffff875a58db RDI: 0000000000000007 [ 69.309962][ T3612] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 69.317978][ T3612] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888072d02628 [ 69.325996][ T3612] R13: ffff888072d02618 R14: ffff888072d02634 R15: 0000000000000000 [ 69.334034][ T3612] ? napi_complete_done+0x45b/0x880 [ 69.339320][ T3612] tun_get_user+0x206d/0x3a60 [ 69.344074][ T3612] ? tun_build_skb+0x1160/0x1160 [ 69.349163][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 69.354068][ T3612] ? find_held_lock+0x2d/0x110 [ 69.358920][ T3612] tun_chr_write_iter+0xdb/0x200 [ 69.363914][ T3612] do_iter_readv_writev+0x20b/0x3b0 [ 69.369180][ T3612] ? generic_copy_file_range+0xd0/0xd0 [ 69.374712][ T3612] ? bpf_lsm_file_permission+0x5/0x10 [ 69.380159][ T3612] ? security_file_permission+0xab/0xd0 [ 69.385859][ T3612] do_iter_write+0x182/0x700 [ 69.390527][ T3612] ? import_iovec+0x10c/0x150 [ 69.395280][ T3612] vfs_writev+0x1aa/0x630 [ 69.399681][ T3612] ? ptrace_stop.part.0+0x49a/0x8c0 [ 69.405027][ T3612] ? vfs_iter_write+0xa0/0xa0 [ 69.409775][ T3612] ? do_raw_spin_lock+0x120/0x2a0 [ 69.414862][ T3612] ? rwlock_bug.part.0+0x90/0x90 [ 69.420222][ T3612] ? find_held_lock+0x2d/0x110 [ 69.425043][ T3612] ? ptrace_notify+0xfa/0x140 [ 69.429785][ T3612] ? __fget_light+0x20a/0x270 [ 69.434541][ T3612] do_writev+0x133/0x2f0 [ 69.438849][ T3612] ? vfs_writev+0x630/0x630 [ 69.444103][ T3612] ? lockdep_hardirqs_on+0x79/0x100 [ 69.449365][ T3612] ? _raw_spin_unlock_irq+0x2a/0x40 [ 69.454629][ T3612] ? ptrace_notify+0xfa/0x140 [ 69.459463][ T3612] do_syscall_64+0x35/0xb0 [ 69.463968][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.469930][ T3612] RIP: 0033:0x7f37021a3c19 [ 69.474391][ T3612] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 69.494144][ T3612] RSP: 002b:00007ffee3bb5388 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 69.502617][ T3612] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f37021a3c19 [ 69.510648][ T3612] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [ 69.518671][ T3612] RBP: 00007f3702167dc0 R08: 0000000000000000 R09: 0000000000000000 [ 69.526689][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3702167e50 [ 69.534709][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.544570][ T3612] [ 69.547701][ T3612] Kernel Offset: disabled [ 69.552122][ T3612] Rebooting in 86400 seconds..