./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2281513851 <...> DUID 00:04:5a:7a:52:ad:4b:e5:ff:c1:d1:3d:bd:97:7e:8a:4f:1f forked to background, child pid 4656 [ 52.157284][ T4657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.180163][ T4657] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts. execve("./syz-executor2281513851", ["./syz-executor2281513851"], 0x7ffdb86a7630 /* 10 vars */) = 0 brk(NULL) = 0x5555559ed000 brk(0x5555559edc40) = 0x5555559edc40 arch_prctl(ARCH_SET_FS, 0x5555559ed300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2281513851", 4096) = 28 brk(0x555555a0ec40) = 0x555555a0ec40 brk(0x555555a0f000) = 0x555555a0f000 mprotect(0x7fa19db5b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached , child_tidptr=0x5555559ed5d0) = 5082 [pid 5082] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] setsid() = 1 [pid 5082] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5082] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5082] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5082] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5082] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5082] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5082] unshare(CLONE_NEWNS) = 0 [pid 5082] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5082] unshare(CLONE_NEWIPC) = 0 [pid 5082] unshare(CLONE_NEWCGROUP) = 0 [pid 5082] unshare(CLONE_NEWUTS) = 0 [pid 5082] unshare(CLONE_SYSVSEM) = 0 [pid 5082] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "16777216", 8) = 8 [pid 5082] close(3) = 0 [pid 5082] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "536870912", 9) = 9 [pid 5082] close(3) = 0 [pid 5082] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1024", 4) = 4 [pid 5082] close(3) = 0 [pid 5082] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "8192", 4) = 4 [pid 5082] close(3) = 0 [pid 5082] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1024", 4) = 4 [pid 5082] close(3) = 0 [pid 5082] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1024", 4) = 4 [pid 5082] close(3) = 0 [pid 5082] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5082] close(3) = 0 [pid 5082] getpid() = 1 [pid 5082] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 12]) = 0 [pid 5082] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x58\x00\x00\x00\x24\x00\x0b\x0e\x00\x00\x00\x00\x00\x00\x00\x00\xff\xe4\x00\x00\x01\x00\x00\x00\x00\x00\x20\x00\xff\xff\xff\xff\x00\x00\x00\x00\x0a\x00\x01\x00\x6e\x65\x74\x65\x6d\x00\x00\x00\x28\x00\x02\x00\x00\x00\x00\x00\x02\x00\x88\x12\xdf\x00\x00\x26\x74\x00\x00\x00\xfd\xff\xe1\xfe\x00\x00\xe2\xe6\x0c\x00\x04\x00\xff\xff\xff\xff\x00\x00\x00\x00", iov_len=88}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 88 [pid 5082] bind(3, {sa_family=AF_PACKET, sll_protocol=htons(0 /* ETH_P_??? */), sll_ifindex=if_nametoindex("lo"), sll_hatype=ARPHRD_ETHER, sll_pkttype=PACKET_HOST, sll_halen=6, sll_addr=[0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0xbb]}, 20) = 0 [ 78.947036][ T5082] ------------[ cut here ]------------ [ 78.952834][ T5082] WARNING: CPU: 1 PID: 5082 at net/core/dev.c:3260 skb_checksum_help+0x4a2/0x600 [ 78.962066][ T5082] Modules linked in: [ 78.966016][ T5082] CPU: 1 PID: 5082 Comm: syz-executor228 Not tainted 6.2.0-syzkaller-10827-g489fa31ea873 #0 [ 78.976175][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 78.986315][ T5082] RIP: 0010:skb_checksum_help+0x4a2/0x600 [ 78.992139][ T5082] Code: e0 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 63 15 70 f9 48 89 ef 41 bc ea ff ff ff e8 35 f9 ff ff eb d4 e8 4e 15 70 f9 <0f> 0b 0f b6 1d 88 29 4e 06 31 ff 89 de e8 4c 11 70 f9 84 db 0f 84 [ 79.011851][ T5082] RSP: 0018:ffffc90003b6f660 EFLAGS: 00010293 [ 79.017946][ T5082] RAX: 0000000000000000 RBX: 000000000000034a RCX: 0000000000000000 [ 79.026045][ T5082] RDX: ffff888024171d40 RSI: ffffffff8814b1f2 RDI: 0000000000000004 [ 79.034136][ T5082] RBP: ffff888079090780 R08: 0000000000000004 R09: 000000000000019a [ 79.042257][ T5082] R10: 0000000000000348 R11: 0000000000000000 R12: ffff8880790907f4 [ 79.050328][ T5082] R13: 0000000000000000 R14: ffff888079090800 R15: 0000000000000348 [ 79.058573][ T5082] FS: 00005555559ed300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 79.067572][ T5082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.074247][ T5082] CR2: 000000002000f000 CR3: 0000000072c0b000 CR4: 00000000003506e0 [ 79.082310][ T5082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.090391][ T5082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.098445][ T5082] Call Trace: [ 79.101741][ T5082] [ 79.104699][ T5082] netem_enqueue+0x2b57/0x35b0 [ 79.109564][ T5082] ? __copy_skb_header+0x2ea/0x5f0 [ 79.114746][ T5082] ? netem_dequeue+0xe00/0xe00 [ 79.119623][ T5082] ? __skb_clone+0x597/0x780 [ 79.124282][ T5082] netem_enqueue+0x2050/0x35b0 [ 79.129159][ T5082] ? netem_dequeue+0xe00/0xe00 [ 79.133977][ T5082] ? do_raw_spin_lock+0x124/0x2b0 [ 79.139106][ T5082] dev_qdisc_enqueue+0x46/0x3b0 [ 79.144052][ T5082] __dev_queue_xmit+0x236a/0x3db0 [ 79.149235][ T5082] ? netdev_core_pick_tx+0x350/0x350 [ 79.154584][ T5082] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 79.160321][ T5082] ? virtio_net_hdr_to_skb.constprop.0+0xa44/0x1220 [ 79.166964][ T5082] ? packet_rcv_spkt+0x620/0x620 [ 79.172063][ T5082] packet_sendmsg+0x33aa/0x55d0 [ 79.177018][ T5082] ? aa_sk_perm+0x31d/0xb10 [ 79.181647][ T5082] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 79.187698][ T5082] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 79.193694][ T5082] ? aa_af_perm+0x240/0x240 [ 79.198324][ T5082] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 79.203682][ T5082] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 79.209685][ T5082] sock_sendmsg+0xde/0x190 [ 79.214163][ T5082] __sys_sendto+0x23a/0x340 [ 79.218781][ T5082] ? __ia32_sys_getpeername+0xb0/0xb0 [ 79.224221][ T5082] ? do_raw_spin_lock+0x124/0x2b0 [ 79.229393][ T5082] ? ptrace_notify+0xfe/0x140 [ 79.234130][ T5082] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.239444][ T5082] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.244721][ T5082] __x64_sys_sendto+0xe1/0x1b0 [ 79.249613][ T5082] ? syscall_trace_enter.constprop.0+0xb0/0x250 [ 79.255917][ T5082] do_syscall_64+0x39/0xb0 [ 79.260452][ T5082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.266401][ T5082] RIP: 0033:0x7fa19dae7699 [ 79.270899][ T5082] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.290603][ T5082] RSP: 002b:00007fffb3262e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 79.299126][ T5082] RAX: ffffffffffffffda RBX: 00007fffb3262e48 RCX: 00007fa19dae7699 [ 79.307154][ T5082] RDX: 000000000000fc13 RSI: 0000000020000280 RDI: 0000000000000003 [ 79.315239][ T5082] RBP: 0000000000000003 R08: 0000000000000000 R09: 000000000000002f [ 79.323319][ T5082] R10: 0000000000000800 R11: 0000000000000246 R12: 00007fffb3262e50 [ 79.331393][ T5082] R13: 00007fffb3262e70 R14: 0000000000000000 R15: 0000000000000000 [ 79.339500][ T5082] [ 79.342534][ T5082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.349833][ T5082] CPU: 1 PID: 5082 Comm: syz-executor228 Not tainted 6.2.0-syzkaller-10827-g489fa31ea873 #0 [ 79.359937][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 79.370015][ T5082] Call Trace: [ 79.373302][ T5082] [ 79.376246][ T5082] dump_stack_lvl+0xd9/0x150 [ 79.380869][ T5082] panic+0x61b/0x6c0 [ 79.384792][ T5082] ? panic_smp_self_stop+0x90/0x90 [ 79.390013][ T5082] ? show_trace_log_lvl+0x285/0x390 [ 79.395255][ T5082] ? skb_checksum_help+0x4a2/0x600 [ 79.400406][ T5082] check_panic_on_warn+0xb1/0xc0 [ 79.405404][ T5082] __warn+0xf2/0x4f0 [ 79.409330][ T5082] ? skb_checksum_help+0x4a2/0x600 [ 79.414465][ T5082] report_bug+0x2da/0x500 [ 79.418848][ T5082] handle_bug+0x3c/0x70 [ 79.423027][ T5082] exc_invalid_op+0x18/0x50 [ 79.427548][ T5082] asm_exc_invalid_op+0x1a/0x20 [ 79.432439][ T5082] RIP: 0010:skb_checksum_help+0x4a2/0x600 [ 79.438235][ T5082] Code: e0 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 63 15 70 f9 48 89 ef 41 bc ea ff ff ff e8 35 f9 ff ff eb d4 e8 4e 15 70 f9 <0f> 0b 0f b6 1d 88 29 4e 06 31 ff 89 de e8 4c 11 70 f9 84 db 0f 84 [ 79.457920][ T5082] RSP: 0018:ffffc90003b6f660 EFLAGS: 00010293 [ 79.464023][ T5082] RAX: 0000000000000000 RBX: 000000000000034a RCX: 0000000000000000 [ 79.472018][ T5082] RDX: ffff888024171d40 RSI: ffffffff8814b1f2 RDI: 0000000000000004 [ 79.480015][ T5082] RBP: ffff888079090780 R08: 0000000000000004 R09: 000000000000019a [ 79.488012][ T5082] R10: 0000000000000348 R11: 0000000000000000 R12: ffff8880790907f4 [ 79.496008][ T5082] R13: 0000000000000000 R14: ffff888079090800 R15: 0000000000000348 [ 79.504106][ T5082] ? skb_checksum_help+0x4a2/0x600 [ 79.509282][ T5082] netem_enqueue+0x2b57/0x35b0 [ 79.514117][ T5082] ? __copy_skb_header+0x2ea/0x5f0 [ 79.519259][ T5082] ? netem_dequeue+0xe00/0xe00 [ 79.524065][ T5082] ? __skb_clone+0x597/0x780 [ 79.528697][ T5082] netem_enqueue+0x2050/0x35b0 [ 79.533506][ T5082] ? netem_dequeue+0xe00/0xe00 [ 79.538303][ T5082] ? do_raw_spin_lock+0x124/0x2b0 [ 79.543368][ T5082] dev_qdisc_enqueue+0x46/0x3b0 [ 79.548266][ T5082] __dev_queue_xmit+0x236a/0x3db0 [ 79.553354][ T5082] ? netdev_core_pick_tx+0x350/0x350 [ 79.558686][ T5082] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 79.564359][ T5082] ? virtio_net_hdr_to_skb.constprop.0+0xa44/0x1220 [ 79.570984][ T5082] ? packet_rcv_spkt+0x620/0x620 [ 79.576000][ T5082] packet_sendmsg+0x33aa/0x55d0 [ 79.580934][ T5082] ? aa_sk_perm+0x31d/0xb10 [ 79.585469][ T5082] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 79.591485][ T5082] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 79.597406][ T5082] ? aa_af_perm+0x240/0x240 [ 79.601960][ T5082] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 79.607281][ T5082] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 79.613203][ T5082] sock_sendmsg+0xde/0x190 [ 79.617695][ T5082] __sys_sendto+0x23a/0x340 [ 79.622242][ T5082] ? __ia32_sys_getpeername+0xb0/0xb0 [ 79.627672][ T5082] ? do_raw_spin_lock+0x124/0x2b0 [ 79.632762][ T5082] ? ptrace_notify+0xfe/0x140 [ 79.637483][ T5082] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.642740][ T5082] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.647979][ T5082] __x64_sys_sendto+0xe1/0x1b0 [ 79.652788][ T5082] ? syscall_trace_enter.constprop.0+0xb0/0x250 [ 79.659077][ T5082] do_syscall_64+0x39/0xb0 [ 79.663529][ T5082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.669465][ T5082] RIP: 0033:0x7fa19dae7699 [ 79.673918][ T5082] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.693654][ T5082] RSP: 002b:00007fffb3262e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 79.702097][ T5082] RAX: ffffffffffffffda RBX: 00007fffb3262e48 RCX: 00007fa19dae7699 [ 79.710094][ T5082] RDX: 000000000000fc13 RSI: 0000000020000280 RDI: 0000000000000003 [ 79.718177][ T5082] RBP: 0000000000000003 R08: 0000000000000000 R09: 000000000000002f [ 79.726179][ T5082] R10: 0000000000000800 R11: 0000000000000246 R12: 00007fffb3262e50 [ 79.734175][ T5082] R13: 00007fffb3262e70 R14: 0000000000000000 R15: 0000000000000000 [ 79.742191][ T5082] [ 79.745386][ T5082] Kernel Offset: disabled [ 79.749841][ T5082] Rebooting in 86400 seconds..