./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor276247944 <...> Warning: Permanently added '10.128.0.245' (ECDSA) to the list of known hosts. execve("./syz-executor276247944", ["./syz-executor276247944"], 0x7ffd09d22730 /* 10 vars */) = 0 brk(NULL) = 0x55555749a000 brk(0x55555749ac40) = 0x55555749ac40 arch_prctl(ARCH_SET_FS, 0x55555749a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor276247944", 4096) = 27 brk(0x5555574bbc40) = 0x5555574bbc40 brk(0x5555574bc000) = 0x5555574bc000 mprotect(0x7f2db4190000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/ppp", O_RDWR|O_NONBLOCK|O_NOATIME|O_CLOEXEC) = 3 ioctl(3, PPPIOCNEWUNIT, 0x200000c0) = 0 ioctl(3, PPPIOCSACTIVE, 0x20000240) = 0 syzkaller login: [ 39.119965][ T3604] ------------[ cut here ]------------ [ 39.125471][ T3604] WARNING: CPU: 0 PID: 3604 at net/core/flow_dissector.c:1016 __skb_flow_dissect+0x947/0x5920 [ 39.135725][ T3604] Modules linked in: [ 39.139600][ T3604] CPU: 0 PID: 3604 Comm: syz-executor276 Not tainted 6.1.0-rc2-syzkaller-00078-g98555239e4c3 #0 [ 39.150005][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 39.160059][ T3604] RIP: 0010:__skb_flow_dissect+0x947/0x5920 [ 39.165961][ T3604] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 27 7b 26 fa 48 85 db 0f 85 84 f8 ff ff e8 19 7b 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 03 7b 26 fa [ 39.185564][ T3604] RSP: 0018:ffffc90003d1f628 EFLAGS: 00010293 [ 39.191612][ T3604] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 39.199578][ T3604] RDX: ffff88801e730000 RSI: ffffffff87562167 RDI: ffff88801e1208d8 [ 39.207545][ T3604] RBP: ffffffff8de28c46 R08: 0000000000000001 R09: 0000000000000000 [ 39.215512][ T3604] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de28c44 [ 39.223464][ T3604] R13: 0000000000000000 R14: ffffffff8de28c40 R15: ffff88801e1208c0 [ 39.231431][ T3604] FS: 000055555749a300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 39.240357][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.246985][ T3604] CR2: 0000562a90245ed0 CR3: 0000000074da9000 CR4: 00000000003506f0 [ 39.254959][ T3604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.262913][ T3604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.270889][ T3604] Call Trace: [ 39.274176][ T3604] [ 39.277096][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.281937][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 39.286881][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.292323][ T3604] ? bpf_flow_dissect+0x360/0x360 [ 39.297349][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.302792][ T3604] ? lock_acquire+0x4fc/0x630 [ 39.307468][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.312909][ T3604] ? lock_release+0x5cb/0x810 [ 39.317580][ T3604] ? is_bpf_text_address+0x77/0x170 [ 39.322766][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.327616][ T3604] ? unwind_next_frame+0xfa9/0x1cc0 [ 39.332802][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.338258][ T3604] ? lock_acquire+0x4fc/0x630 [ 39.342923][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.348374][ T3604] ? lock_release+0x5cb/0x810 [ 39.353036][ T3604] ? __kernel_text_address+0x9/0x30 [ 39.358236][ T3604] ? __stack_depot_save+0x260/0x560 [ 39.363421][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.368268][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 39.373191][ T3604] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 39.378996][ T3604] ? trace_hardirqs_on+0x2d/0x160 [ 39.384054][ T3604] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 39.389856][ T3604] ? __stack_depot_save+0x260/0x560 [ 39.395054][ T3604] ? ppp_write+0xb3/0x2d0 [ 39.399373][ T3604] ? kasan_save_stack+0x31/0x40 [ 39.404228][ T3604] ? kasan_save_stack+0x1e/0x40 [ 39.409079][ T3604] ? kasan_set_track+0x21/0x30 [ 39.413832][ T3604] ? __kasan_kmalloc+0xa1/0xb0 [ 39.418597][ T3604] ? __kmalloc_node_track_caller+0x55/0xc0 [ 39.424404][ T3604] ? __alloc_skb+0xd9/0x2f0 [ 39.428922][ T3604] ? ppp_write+0xb3/0x2d0 [ 39.433241][ T3604] ? do_iter_write+0x4ef/0x700 [ 39.438009][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.443460][ T3604] ? lock_acquire+0x4fc/0x630 [ 39.448134][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.453576][ T3604] skb_get_poff+0x99/0x1a0 [ 39.458002][ T3604] ? __skb_get_poff+0x290/0x290 [ 39.462846][ T3604] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 39.468653][ T3604] ? trace_hardirqs_on+0x2d/0x160 [ 39.473666][ T3604] bpf_skb_get_pay_offset+0x11/0x20 [ 39.478866][ T3604] ? __ppp_xmit_process+0x9a6/0x17b0 [ 39.484162][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.489611][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.494485][ T3604] ? ppp_receive_nonmp_frame+0x2000/0x2000 [ 39.500303][ T3604] ? ppp_xmit_process+0x161/0x2f0 [ 39.505329][ T3604] ? ppp_write+0x239/0x2d0 [ 39.509739][ T3604] ? do_iter_write+0x4ef/0x700 [ 39.514512][ T3604] ? vfs_writev+0x1aa/0x630 [ 39.519016][ T3604] ? vfs_iter_write+0xa0/0xa0 [ 39.523681][ T3604] ? do_raw_spin_lock+0x120/0x2a0 [ 39.528702][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 39.533624][ T3604] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 39.539087][ T3604] ? ptrace_stop.part.0+0x5f4/0x8c0 [ 39.544290][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.549744][ T3604] ? lock_release+0x5cb/0x810 [ 39.554423][ T3604] ? ptrace_notify+0xfa/0x140 [ 39.559093][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.563928][ T3604] ? __x64_sys_pwritev+0x22b/0x310 [ 39.569041][ T3604] ? __ia32_sys_preadv2+0x150/0x150 [ 39.574249][ T3604] ? _raw_spin_unlock_irq+0x2a/0x40 [ 39.579445][ T3604] ? ptrace_notify+0xfa/0x140 [ 39.584123][ T3604] ? do_syscall_64+0x35/0xb0 [ 39.588715][ T3604] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.594785][ T3604] [ 39.597790][ T3604] Kernel panic - not syncing: panic_on_warn set ... [ 39.604363][ T3604] CPU: 0 PID: 3604 Comm: syz-executor276 Not tainted 6.1.0-rc2-syzkaller-00078-g98555239e4c3 #0 [ 39.614764][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 39.624804][ T3604] Call Trace: [ 39.628068][ T3604] [ 39.630986][ T3604] dump_stack_lvl+0xcd/0x134 [ 39.635566][ T3604] panic+0x2c8/0x622 [ 39.639456][ T3604] ? panic_print_sys_info.part.0+0x110/0x110 [ 39.645432][ T3604] ? __warn.cold+0x24b/0x350 [ 39.650014][ T3604] ? __skb_flow_dissect+0x947/0x5920 [ 39.655287][ T3604] __warn.cold+0x25c/0x350 [ 39.659693][ T3604] ? __skb_flow_dissect+0x947/0x5920 [ 39.664968][ T3604] report_bug+0x1bc/0x210 [ 39.669291][ T3604] handle_bug+0x3c/0x70 [ 39.673438][ T3604] exc_invalid_op+0x14/0x40 [ 39.677931][ T3604] asm_exc_invalid_op+0x16/0x20 [ 39.682786][ T3604] RIP: 0010:__skb_flow_dissect+0x947/0x5920 [ 39.688666][ T3604] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 27 7b 26 fa 48 85 db 0f 85 84 f8 ff ff e8 19 7b 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 03 7b 26 fa [ 39.708259][ T3604] RSP: 0018:ffffc90003d1f628 EFLAGS: 00010293 [ 39.714310][ T3604] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 39.722277][ T3604] RDX: ffff88801e730000 RSI: ffffffff87562167 RDI: ffff88801e1208d8 [ 39.730231][ T3604] RBP: ffffffff8de28c46 R08: 0000000000000001 R09: 0000000000000000 [ 39.738182][ T3604] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de28c44 [ 39.746136][ T3604] R13: 0000000000000000 R14: ffffffff8de28c40 R15: ffff88801e1208c0 [ 39.754094][ T3604] ? __skb_flow_dissect+0x947/0x5920 [ 39.759383][ T3604] ? __skb_flow_dissect+0x947/0x5920 [ 39.764658][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.769503][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 39.774434][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.779887][ T3604] ? bpf_flow_dissect+0x360/0x360 [ 39.784900][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.790339][ T3604] ? lock_acquire+0x4fc/0x630 [ 39.795005][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.800448][ T3604] ? lock_release+0x5cb/0x810 [ 39.805107][ T3604] ? is_bpf_text_address+0x77/0x170 [ 39.810295][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.815131][ T3604] ? unwind_next_frame+0xfa9/0x1cc0 [ 39.820317][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.825764][ T3604] ? lock_acquire+0x4fc/0x630 [ 39.830424][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.835863][ T3604] ? lock_release+0x5cb/0x810 [ 39.840524][ T3604] ? __kernel_text_address+0x9/0x30 [ 39.845715][ T3604] ? __stack_depot_save+0x260/0x560 [ 39.850902][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.855736][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 39.860662][ T3604] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 39.866472][ T3604] ? trace_hardirqs_on+0x2d/0x160 [ 39.871488][ T3604] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 39.877283][ T3604] ? __stack_depot_save+0x260/0x560 [ 39.882491][ T3604] ? ppp_write+0xb3/0x2d0 [ 39.886818][ T3604] ? kasan_save_stack+0x31/0x40 [ 39.891664][ T3604] ? kasan_save_stack+0x1e/0x40 [ 39.896518][ T3604] ? kasan_set_track+0x21/0x30 [ 39.901284][ T3604] ? __kasan_kmalloc+0xa1/0xb0 [ 39.906041][ T3604] ? __kmalloc_node_track_caller+0x55/0xc0 [ 39.911838][ T3604] ? __alloc_skb+0xd9/0x2f0 [ 39.916333][ T3604] ? ppp_write+0xb3/0x2d0 [ 39.920656][ T3604] ? do_iter_write+0x4ef/0x700 [ 39.925418][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.930860][ T3604] ? lock_acquire+0x4fc/0x630 [ 39.935521][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.940963][ T3604] skb_get_poff+0x99/0x1a0 [ 39.945370][ T3604] ? __skb_get_poff+0x290/0x290 [ 39.950210][ T3604] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 39.956003][ T3604] ? trace_hardirqs_on+0x2d/0x160 [ 39.961035][ T3604] bpf_skb_get_pay_offset+0x11/0x20 [ 39.966220][ T3604] ? __ppp_xmit_process+0x9a6/0x17b0 [ 39.971495][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 39.976943][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.981778][ T3604] ? ppp_receive_nonmp_frame+0x2000/0x2000 [ 39.987670][ T3604] ? ppp_xmit_process+0x161/0x2f0 [ 39.992696][ T3604] ? ppp_write+0x239/0x2d0 [ 39.997109][ T3604] ? do_iter_write+0x4ef/0x700 [ 40.001911][ T3604] ? vfs_writev+0x1aa/0x630 [ 40.006414][ T3604] ? vfs_iter_write+0xa0/0xa0 [ 40.011083][ T3604] ? do_raw_spin_lock+0x120/0x2a0 [ 40.016099][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 40.021031][ T3604] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 40.026484][ T3604] ? ptrace_stop.part.0+0x5f4/0x8c0 [ 40.031671][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.037111][ T3604] ? lock_release+0x5cb/0x810 [ 40.041770][ T3604] ? ptrace_notify+0xfa/0x140 [ 40.046431][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 40.051266][ T3604] ? __x64_sys_pwritev+0x22b/0x310 [ 40.056367][ T3604] ? __ia32_sys_preadv2+0x150/0x150 [ 40.061555][ T3604] ? _raw_spin_unlock_irq+0x2a/0x40 [ 40.066741][ T3604] ? ptrace_notify+0xfa/0x140 [ 40.071419][ T3604] ? do_syscall_64+0x35/0xb0 [ 40.076000][ T3604] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.082058][ T3604] [ 40.085219][ T3604] Kernel Offset: disabled [ 40.089533][ T3604] Rebooting in 86400 seconds..