./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4028785379
<...>
forked to background, child pid 3179
no interfaces have a carrier
[ 27.606844][ T3180] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.617169][ T3180] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.22' (ECDSA) to the list of known hosts.
execve("./syz-executor4028785379", ["./syz-executor4028785379"], 0x7ffe019eb780 /* 10 vars */) = 0
brk(NULL) = 0x55555590b000
brk(0x55555590bc40) = 0x55555590bc40
arch_prctl(ARCH_SET_FS, 0x55555590b300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4028785379", 4096) = 28
brk(0x55555592cc40) = 0x55555592cc40
brk(0x55555592d000) = 0x55555592d000
mprotect(0x7fda15c6d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socketpair(AF_UNIX, SOCK_SEQPACKET, 0, [3, 4]) = 0
setsockopt(4, SOL_SOCKET, SO_ATTACH_FILTER, {len=2, filter=0x20000080}, 16) = 0
syzkaller login: [ 50.842572][ T3601] ------------[ cut here ]------------
[ 50.848095][ T3601] WARNING: CPU: 0 PID: 3601 at include/linux/skbuff.h:2785 bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 50.860042][ T3601] Modules linked in:
[ 50.863954][ T3601] CPU: 0 PID: 3601 Comm: syz-executor402 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 50.873971][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 50.884147][ T3601] RIP: 0010:bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 50.891635][ T3601] Code: ff ff 45 31 f6 e9 5a ff ff ff e8 1a 26 3f 00 e9 3b ff ff ff e8 00 26 3f 00 e9 df fe ff ff e8 f6 25 3f 00 eb 9e e8 2f 21 f3 ff <0f> 0b eb b1 e8 06 26 3f 00 e9 79 fe ff ff 90 41 57 41 56 41 55 41
[ 50.911445][ T3601] RSP: 0018:ffffc90002f8f668 EFLAGS: 00010293
[ 50.917509][ T3601] RAX: 0000000000000000 RBX: ffffffffffeff00c RCX: 0000000000000000
[ 50.925532][ T3601] RDX: ffff8880205c1d40 RSI: ffffffff818795e1 RDI: 0000000000000003
[ 50.933641][ T3601] RBP: ffff8880258d1dc0 R08: 0000000000000003 R09: 000000000000ffff
[ 50.941654][ T3601] R10: 000000000000ffff R11: 0000000000000001 R12: 0000000000000004
[ 50.949640][ T3601] R13: ffff888078dff800 R14: 000000000000ffff R15: dffffc0000000000
[ 50.957722][ T3601] FS: 000055555590b300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 50.966692][ T3601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.973308][ T3601] CR2: 000000000061ba0c CR3: 0000000072a17000 CR4: 00000000003506f0
[ 50.981327][ T3601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.989291][ T3601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.997327][ T3601] Call Trace:
[ 51.000656][ T3601] <TASK>
[ 51.003597][ T3601] bpf_skb_load_helper_32+0x191/0x220
[ 51.008980][ T3601] ? bpf_xdp_store_bytes+0xa0/0xa0
[ 51.014137][ T3601] ? skb_set_owner_w+0x269/0x420
[ 51.019112][ T3601] ? sk_filter_trim_cap+0x351/0x9a0
[ 51.024396][ T3601] ? sock_wmalloc+0x120/0x120
[ 51.029336][ T3601] ? bpf_xdp_redirect+0x160/0x160
[ 51.034401][ T3601] ? do_raw_spin_lock+0x120/0x2a0
[ 51.039440][ T3601] ? skb_copy_datagram_from_iter+0x474/0x6c0
[ 51.045482][ T3601] ? unix_dgram_sendmsg+0xa46/0x1b60
[ 51.050817][ T3601] ? unix_stream_sendpage+0xcc0/0xcc0
[ 51.056197][ T3601] ? unix_seqpacket_sendmsg+0x111/0x1a0
[ 51.061991][ T3601] ? unix_dgram_sendmsg+0x1b60/0x1b60
[ 51.067385][ T3601] ? sock_sendmsg+0xcf/0x120
[ 51.072018][ T3601] ? ____sys_sendmsg+0x334/0x810
[ 51.076994][ T3601] ? kernel_sendmsg+0x50/0x50
[ 51.081707][ T3601] ? do_recvmmsg+0x6d0/0x6d0
[ 51.086309][ T3601] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 51.092339][ T3601] ? ___sys_sendmsg+0xf3/0x170
[ 51.097129][ T3601] ? sendmsg_copy_msghdr+0x160/0x160
[ 51.102480][ T3601] ? __lock_acquire+0x163e/0x5660
[ 51.107518][ T3601] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 51.113536][ T3601] ? lockdep_hardirqs_on+0x79/0x100
[ 51.118750][ T3601] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 51.124768][ T3601] ? __switch_to+0x5cc/0x1050
[ 51.129468][ T3601] ? __fget_light+0x20a/0x270
[ 51.134198][ T3601] ? __sys_sendmmsg+0x195/0x470
[ 51.139070][ T3601] ? __ia32_sys_sendmsg+0x220/0x220
[ 51.144335][ T3601] ? _raw_spin_lock_irq+0x41/0x50
[ 51.149415][ T3601] ? find_held_lock+0x2d/0x110
[ 51.154264][ T3601] ? ptrace_notify+0xfa/0x140
[ 51.158992][ T3601] ? lock_downgrade+0x6e0/0x6e0
[ 51.163914][ T3601] ? _raw_spin_unlock_irq+0x1f/0x40
[ 51.169130][ T3601] ? _raw_spin_unlock_irq+0x1f/0x40
[ 51.174369][ T3601] ? lockdep_hardirqs_on+0x79/0x100
[ 51.179586][ T3601] ? __x64_sys_sendmmsg+0x99/0x100
[ 51.184835][ T3601] ? do_syscall_64+0x35/0xb0
[ 51.189464][ T3601] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 51.195582][ T3601] </TASK>
[ 51.198604][ T3601] Kernel panic - not syncing: panic_on_warn set ...
[ 51.205172][ T3601] CPU: 0 PID: 3601 Comm: syz-executor402 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 51.215141][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 51.225190][ T3601] Call Trace:
[ 51.228461][ T3601] <TASK>
[ 51.231385][ T3601] dump_stack_lvl+0xcd/0x134
[ 51.235985][ T3601] panic+0x2d7/0x636
[ 51.239995][ T3601] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 51.245973][ T3601] ? __warn.cold+0x248/0x2c4
[ 51.250563][ T3601] ? bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 51.257319][ T3601] __warn.cold+0x259/0x2c4
[ 51.261728][ T3601] ? bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 51.268478][ T3601] report_bug+0x1bc/0x210
[ 51.272995][ T3601] handle_bug+0x3c/0x60
[ 51.277147][ T3601] exc_invalid_op+0x14/0x40
[ 51.281640][ T3601] asm_exc_invalid_op+0x1b/0x20
[ 51.286477][ T3601] RIP: 0010:bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 51.293838][ T3601] Code: ff ff 45 31 f6 e9 5a ff ff ff e8 1a 26 3f 00 e9 3b ff ff ff e8 00 26 3f 00 e9 df fe ff ff e8 f6 25 3f 00 eb 9e e8 2f 21 f3 ff <0f> 0b eb b1 e8 06 26 3f 00 e9 79 fe ff ff 90 41 57 41 56 41 55 41
[ 51.313440][ T3601] RSP: 0018:ffffc90002f8f668 EFLAGS: 00010293
[ 51.319504][ T3601] RAX: 0000000000000000 RBX: ffffffffffeff00c RCX: 0000000000000000
[ 51.327488][ T3601] RDX: ffff8880205c1d40 RSI: ffffffff818795e1 RDI: 0000000000000003
[ 51.335453][ T3601] RBP: ffff8880258d1dc0 R08: 0000000000000003 R09: 000000000000ffff
[ 51.343432][ T3601] R10: 000000000000ffff R11: 0000000000000001 R12: 0000000000000004
[ 51.351398][ T3601] R13: ffff888078dff800 R14: 000000000000ffff R15: dffffc0000000000
[ 51.359374][ T3601] ? bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 51.366148][ T3601] ? bpf_internal_load_pointer_neg_helper+0x1b1/0x1c0
[ 51.372916][ T3601] bpf_skb_load_helper_32+0x191/0x220
[ 51.378294][ T3601] ? bpf_xdp_store_bytes+0xa0/0xa0
[ 51.383409][ T3601] ? skb_set_owner_w+0x269/0x420
[ 51.388354][ T3601] ? sk_filter_trim_cap+0x351/0x9a0
[ 51.393555][ T3601] ? sock_wmalloc+0x120/0x120
[ 51.398226][ T3601] ? bpf_xdp_redirect+0x160/0x160
[ 51.403253][ T3601] ? do_raw_spin_lock+0x120/0x2a0
[ 51.408276][ T3601] ? skb_copy_datagram_from_iter+0x474/0x6c0
[ 51.414271][ T3601] ? unix_dgram_sendmsg+0xa46/0x1b60
[ 51.419569][ T3601] ? unix_stream_sendpage+0xcc0/0xcc0
[ 51.424956][ T3601] ? unix_seqpacket_sendmsg+0x111/0x1a0
[ 51.430507][ T3601] ? unix_dgram_sendmsg+0x1b60/0x1b60
[ 51.435903][ T3601] ? sock_sendmsg+0xcf/0x120
[ 51.440495][ T3601] ? ____sys_sendmsg+0x334/0x810
[ 51.445435][ T3601] ? kernel_sendmsg+0x50/0x50
[ 51.450109][ T3601] ? do_recvmmsg+0x6d0/0x6d0
[ 51.454800][ T3601] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 51.460789][ T3601] ? ___sys_sendmsg+0xf3/0x170
[ 51.465559][ T3601] ? sendmsg_copy_msghdr+0x160/0x160
[ 51.470848][ T3601] ? __lock_acquire+0x163e/0x5660
[ 51.475879][ T3601] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 51.481854][ T3601] ? lockdep_hardirqs_on+0x79/0x100
[ 51.487055][ T3601] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 51.493029][ T3601] ? __switch_to+0x5cc/0x1050
[ 51.497716][ T3601] ? __fget_light+0x20a/0x270
[ 51.502403][ T3601] ? __sys_sendmmsg+0x195/0x470
[ 51.507260][ T3601] ? __ia32_sys_sendmsg+0x220/0x220
[ 51.512464][ T3601] ? _raw_spin_lock_irq+0x41/0x50
[ 51.517500][ T3601] ? find_held_lock+0x2d/0x110
[ 51.522275][ T3601] ? ptrace_notify+0xfa/0x140
[ 51.526954][ T3601] ? lock_downgrade+0x6e0/0x6e0
[ 51.531811][ T3601] ? _raw_spin_unlock_irq+0x1f/0x40
[ 51.537017][ T3601] ? _raw_spin_unlock_irq+0x1f/0x40
[ 51.542222][ T3601] ? lockdep_hardirqs_on+0x79/0x100
[ 51.547426][ T3601] ? __x64_sys_sendmmsg+0x99/0x100
[ 51.552545][ T3601] ? do_syscall_64+0x35/0xb0
[ 51.557148][ T3601] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 51.563228][ T3601] </TASK>
[ 51.566530][ T3601] Kernel Offset: disabled
[ 51.570906][ T3601] Rebooting in 86400 seconds..