./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1024711868 <...> DUID 00:04:83:15:3d:b3:f9:44:11:d6:e6:e1:d9:1f:49:4d:f4:66 forked to background, child pid 4646 [ 36.486767][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.496252][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.109' (ECDSA) to the list of known hosts. execve("./syz-executor1024711868", ["./syz-executor1024711868"], 0x7ffe0d4b44b0 /* 10 vars */) = 0 brk(NULL) = 0x55555594b000 brk(0x55555594bc40) = 0x55555594bc40 arch_prctl(ARCH_SET_FS, 0x55555594b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x55555594b5d0) = 5083 set_robust_list(0x55555594b5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fbcc68d0760, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fbcc68d0e30}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fbcc68d0800, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbcc68d0e30}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1024711868", 4096) = 28 brk(0x55555596cc40) = 0x55555596cc40 brk(0x55555596d000) = 0x55555596d000 mprotect(0x7fbcc6991000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 futex(0x7fbcc69974ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbcc68a0000 mprotect(0x7fbcc68a1000, 131072, PROT_READ|PROT_WRITE) = 0 clone(child_stack=0x7fbcc68c03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5084 attached , parent_tid=[5084], tls=0x7fbcc68c0700, child_tidptr=0x7fbcc68c09d0) = 5084 [pid 5083] futex(0x7fbcc69974a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbcc69974ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] set_robust_list(0x7fbcc68c09e0, 24) = 0 [pid 5084] io_uring_setup(18771, {flags=IORING_SETUP_IOPOLL|IORING_SETUP_SQPOLL, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=32768, cq_entries=65536, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=1048896}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5084] mmap(0x20000000, 1179968, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000 [pid 5084] mmap(0x20000000, 0, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = -1 EINVAL (Invalid argument) [pid 5084] futex(0x7fbcc69974ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5083] futex(0x7fbcc69974a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbcc69974ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5084] <... futex resumed>) = 1 [pid 5084] futex(0x7fbcc69974ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5083] futex(0x7fbcc69974a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbcc69974ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... futex resumed>) = 1 [pid 5084] io_uring_enter(3, 4096, 64527, IORING_ENTER_GETEVENTS|IORING_ENTER_SQ_WAKEUP, NULL, 0 [pid 5083] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] futex(0x7fbcc69974ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5083] futex(0x7fbcc69974bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbcc687f000 [pid 5083] mprotect(0x7fbcc6880000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5083] clone(child_stack=0x7fbcc689f3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5086], tls=0x7fbcc689f700, child_tidptr=0x7fbcc689f9d0) = 5086 [pid 5083] futex(0x7fbcc69974b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] futex(0x7fbcc69974bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5086 attached [pid 5086] set_robust_list(0x7fbcc689f9e0, 24) = 0 [pid 5086] io_uring_setup(20712, 0x20000040) = 4 [pid 5086] futex(0x7fbcc69974bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 1 syzkaller login: [ 59.748574][ T5084] ------------[ cut here ]------------ [ 59.754120][ T5084] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait_exclusive+0x7e/0x2c0 [ 59.770407][ T5084] WARNING: CPU: 1 PID: 5084 at kernel/sched/core.c:9908 __might_sleep+0x109/0x160 [ 59.780001][ T5084] Modules linked in: [ 59.784358][ T5084] CPU: 1 PID: 5084 Comm: syz-executor102 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [pid 5086] futex(0x7fbcc69974b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] exit_group(0) = ? [pid 5086] <... futex resumed>) = ? [pid 5086] +++ exited with 0 +++ [ 59.794999][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 59.805654][ T5084] RIP: 0010:__might_sleep+0x109/0x160 [ 59.811670][ T5084] Code: ac 03 00 48 8d bb b8 16 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 34 48 8b 93 b8 16 00 00 48 c7 c7 80 d6 2b 8a e8 74 f6 5b 08 <0f> 0b e9 75 ff ff ff e8 7b 78 78 00 e9 26 ff ff ff 89 34 24 e8 8e [ 59.831910][ T5084] RSP: 0018:ffffc90003ccfbb8 EFLAGS: 00010282 [ 59.838275][ T5084] RAX: 0000000000000000 RBX: ffff88802aa48000 RCX: 0000000000000000 [ 59.848523][ T5084] RDX: ffff88802aa48000 RSI: ffffffff8166707c RDI: fffff52000799f69 [ 59.856714][ T5084] RBP: ffffffff8a2c3500 R08: 0000000000000005 R09: 0000000000000000 [ 59.864770][ T5084] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000244 [ 59.872833][ T5084] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000001000 [ 59.880857][ T5084] FS: 00007fbcc68c0700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 59.889791][ T5084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.896709][ T5084] CR2: 00007fbcc6964018 CR3: 0000000028bc2000 CR4: 00000000003506e0 [ 59.904745][ T5084] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.912762][ T5084] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.920957][ T5084] Call Trace: [ 59.924240][ T5084] [ 59.927171][ T5084] __mutex_lock+0x9f/0x1360 [ 59.931744][ T5084] ? find_held_lock+0x2d/0x110 [ 59.936570][ T5084] ? io_cqring_overflow_flush+0xe6/0x130 [ 59.942575][ T5084] ? prepare_to_wait_exclusive+0xdf/0x2c0 [ 59.948355][ T5084] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 59.954191][ T5084] ? wait_for_completion_io_timeout+0x20/0x20 [ 59.960386][ T5084] io_cqring_overflow_flush+0xe6/0x130 [ 59.965981][ T5084] __do_sys_io_uring_enter+0x1590/0x21b0 [ 59.971703][ T5084] ? io_run_task_work_sig+0x2d0/0x2d0 [ 59.977202][ T5084] ? ptrace_notify+0xfe/0x140 [ 59.981953][ T5084] ? lock_downgrade+0x6e0/0x6e0 [ 59.986921][ T5084] ? __io_prep_linked_timeout+0x260/0x260 [ 59.992716][ T5084] ? lockdep_hardirqs_on+0x7d/0x100 [ 59.997940][ T5084] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.003218][ T5084] ? ptrace_notify+0xfe/0x140 [ 60.007923][ T5084] do_syscall_64+0x39/0xb0 [ 60.012426][ T5084] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.018418][ T5084] RIP: 0033:0x7fbcc6912ec9 [ 60.023049][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.042967][ T5084] RSP: 002b:00007fbcc68c02f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 60.051442][ T5084] RAX: ffffffffffffffda RBX: 00007fbcc69974a8 RCX: 00007fbcc6912ec9 [ 60.059444][ T5084] RDX: 000000000000fc0f RSI: 0000000000001000 RDI: 0000000000000003 [ 60.067538][ T5084] RBP: 00007fbcc69974a0 R08: 0000000000000000 R09: 0000000000000000 [ 60.075684][ T5084] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fbcc69974ac [ 60.083786][ T5084] R13: 0000000000000003 R14: 00007fbcc68c0400 R15: 0000000000022000 [ 60.091840][ T5084] [ 60.094874][ T5084] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 60.102160][ T5084] CPU: 0 PID: 5084 Comm: syz-executor102 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0 [ 60.112226][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 60.122380][ T5084] Call Trace: [ 60.125658][ T5084] [ 60.128596][ T5084] dump_stack_lvl+0xd1/0x138 [ 60.133385][ T5084] panic+0x2cc/0x626 [ 60.137297][ T5084] ? panic_print_sys_info.part.0+0x110/0x110 [ 60.143292][ T5084] ? __might_sleep+0x109/0x160 [ 60.148073][ T5084] check_panic_on_warn.cold+0x19/0x35 [ 60.153452][ T5084] __warn+0xf2/0x1a0 [ 60.157368][ T5084] ? __might_sleep+0x109/0x160 [ 60.162162][ T5084] report_bug+0x1c0/0x210 [ 60.166552][ T5084] handle_bug+0x3c/0x70 [ 60.170741][ T5084] exc_invalid_op+0x18/0x50 [ 60.175305][ T5084] asm_exc_invalid_op+0x1a/0x20 [ 60.180174][ T5084] RIP: 0010:__might_sleep+0x109/0x160 [ 60.185570][ T5084] Code: ac 03 00 48 8d bb b8 16 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 34 48 8b 93 b8 16 00 00 48 c7 c7 80 d6 2b 8a e8 74 f6 5b 08 <0f> 0b e9 75 ff ff ff e8 7b 78 78 00 e9 26 ff ff ff 89 34 24 e8 8e [ 60.205191][ T5084] RSP: 0018:ffffc90003ccfbb8 EFLAGS: 00010282 [ 60.211274][ T5084] RAX: 0000000000000000 RBX: ffff88802aa48000 RCX: 0000000000000000 [ 60.219256][ T5084] RDX: ffff88802aa48000 RSI: ffffffff8166707c RDI: fffff52000799f69 [ 60.227261][ T5084] RBP: ffffffff8a2c3500 R08: 0000000000000005 R09: 0000000000000000 [ 60.235294][ T5084] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000244 [ 60.243308][ T5084] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000001000 [ 60.251310][ T5084] ? vprintk+0x8c/0xa0 [ 60.255405][ T5084] ? __might_sleep+0x109/0x160 [ 60.260205][ T5084] __mutex_lock+0x9f/0x1360 [ 60.264765][ T5084] ? find_held_lock+0x2d/0x110 [ 60.269602][ T5084] ? io_cqring_overflow_flush+0xe6/0x130 [ 60.275296][ T5084] ? prepare_to_wait_exclusive+0xdf/0x2c0 [ 60.281052][ T5084] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 60.286630][ T5084] ? wait_for_completion_io_timeout+0x20/0x20 [ 60.292733][ T5084] io_cqring_overflow_flush+0xe6/0x130 [ 60.298226][ T5084] __do_sys_io_uring_enter+0x1590/0x21b0 [ 60.304074][ T5084] ? io_run_task_work_sig+0x2d0/0x2d0 [ 60.309628][ T5084] ? ptrace_notify+0xfe/0x140 [ 60.314340][ T5084] ? lock_downgrade+0x6e0/0x6e0 [ 60.319239][ T5084] ? __io_prep_linked_timeout+0x260/0x260 [ 60.324999][ T5084] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.330356][ T5084] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.335605][ T5084] ? ptrace_notify+0xfe/0x140 [ 60.340321][ T5084] do_syscall_64+0x39/0xb0 [ 60.344788][ T5084] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.350706][ T5084] RIP: 0033:0x7fbcc6912ec9 [ 60.355152][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.374807][ T5084] RSP: 002b:00007fbcc68c02f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 60.383418][ T5084] RAX: ffffffffffffffda RBX: 00007fbcc69974a8 RCX: 00007fbcc6912ec9 [ 60.391400][ T5084] RDX: 000000000000fc0f RSI: 0000000000001000 RDI: 0000000000000003 [ 60.399381][ T5084] RBP: 00007fbcc69974a0 R08: 0000000000000000 R09: 0000000000000000 [ 60.407358][ T5084] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fbcc69974ac [ 60.415368][ T5084] R13: 0000000000000003 R14: 00007fbcc68c0400 R15: 0000000000022000 [ 60.423394][ T5084] [ 60.426576][ T5084] Kernel Offset: disabled [ 60.430966][ T5084] Rebooting in 86400 seconds..