./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2790567510 <...> DUID 00:04:d9:45:fa:af:54:4f:86:ad:3e:10:3e:6c:cf:b7:e9:d2 forked to background, child pid 4687 [ 20.655138][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 20.665761][ T4688] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.153' (ECDSA) to the list of known hosts. execve("./syz-executor2790567510", ["./syz-executor2790567510"], 0x7ffda9124950 /* 10 vars */) = 0 brk(NULL) = 0x5555564b5000 brk(0x5555564b5c40) = 0x5555564b5c40 arch_prctl(ARCH_SET_FS, 0x5555564b5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2790567510", 4096) = 28 brk(0x5555564d6c40) = 0x5555564d6c40 brk(0x5555564d7000) = 0x5555564d7000 mprotect(0x7f41e4f21000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5019 attached , child_tidptr=0x5555564b55d0) = 5019 [pid 5019] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5019] setsid() = 1 [pid 5019] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5019] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5019] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5019] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5019] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5019] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5019] unshare(CLONE_NEWNS) = 0 [pid 5019] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5019] unshare(CLONE_NEWIPC) = 0 [pid 5019] unshare(CLONE_NEWCGROUP) = 0 [pid 5019] unshare(CLONE_NEWUTS) = 0 [pid 5019] unshare(CLONE_SYSVSEM) = 0 [pid 5019] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "16777216", 8) = 8 [pid 5019] close(3) = 0 [pid 5019] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "536870912", 9) = 9 [pid 5019] close(3) = 0 [pid 5019] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "1024", 4) = 4 [pid 5019] close(3) = 0 [pid 5019] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "8192", 4) = 4 [pid 5019] close(3) = 0 [pid 5019] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "1024", 4) = 4 [pid 5019] close(3) = 0 [pid 5019] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "1024", 4) = 4 [pid 5019] close(3) = 0 [pid 5019] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5019] close(3) = 0 [pid 5019] getpid() = 1 [pid 5019] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 0f b6 1d bb f0 78 06 31 ff 89 de e8 db 2d 69 f9 84 db 75 dd [ 42.037645][ T5019] RSP: 0018:ffffc900039cf120 EFLAGS: 00010293 [ 42.043690][ T5019] RAX: 0000000000000000 RBX: 000000000000061f RCX: 0000000000000000 [ 42.051765][ T5019] RDX: ffff88802d8c5940 RSI: ffffffff881bad63 RDI: 0000000000000006 [ 42.059758][ T5019] RBP: ffff8880231bca00 R08: 0000000000000006 R09: 0000000000000621 [ 42.067749][ T5019] R10: 0000000000000519 R11: 0000000000000001 R12: ffff8880231bca74 [ 42.075723][ T5019] R13: 000000000000061f R14: 0000000000000519 R15: 0000000000000621 [ 42.083742][ T5019] FS: 00005555564b5300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 42.092698][ T5019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.099300][ T5019] CR2: 0000000020001000 CR3: 000000001833d000 CR4: 0000000000350ef0 [ 42.107291][ T5019] Call Trace: [ 42.110554][ T5019] [ 42.113495][ T5019] ? __warn+0xe6/0x390 [ 42.117618][ T5019] ? skb_checksum_help+0x4a3/0x5c0 [ 42.122746][ T5019] ? report_bug+0x2da/0x500 [ 42.127294][ T5019] ? handle_bug+0x3c/0x70 [ 42.131635][ T5019] ? exc_invalid_op+0x18/0x50 [ 42.136349][ T5019] ? asm_exc_invalid_op+0x1a/0x20 [ 42.141388][ T5019] ? skb_checksum_help+0x4a3/0x5c0 [ 42.146542][ T5019] ? skb_checksum_help+0x4a3/0x5c0 [ 42.151672][ T5019] ip_do_fragment+0x9a4/0x17f0 [ 42.156466][ T5019] ? ip_fragment.constprop.0+0x240/0x240 [ 42.162129][ T5019] ? ip_frag_next+0xa50/0xa50 [ 42.166839][ T5019] ? slab_free_freelist_hook+0x8b/0x1c0 [ 42.172405][ T5019] ip_fragment.constprop.0+0x16b/0x240 [ 42.177895][ T5019] __ip_finish_output+0x4a0/0x650 [ 42.182938][ T5019] ip_finish_output+0x31/0x280 [ 42.187736][ T5019] ip_output+0x1a3/0x320 [ 42.191999][ T5019] ip_local_out+0xb3/0x1a0 [ 42.196444][ T5019] iptunnel_xmit+0x622/0xa40 [ 42.201062][ T5019] ip_tunnel_xmit+0xfc0/0x3170 [ 42.205853][ T5019] ? flow_indr_dev_setup_offload+0xa8/0x8c0 [ 42.211784][ T5019] ? ip_md_tunnel_xmit+0x1f80/0x1f80 [ 42.217098][ T5019] ? __gre_xmit+0x4f4/0x980 [ 42.221608][ T5019] ipgre_xmit+0x6d3/0x8f0 [ 42.225980][ T5019] dev_hard_start_xmit+0x187/0x700 [ 42.231132][ T5019] __dev_queue_xmit+0x2be2/0x3b10 [ 42.236205][ T5019] ? netdev_core_pick_tx+0x390/0x390 [ 42.241512][ T5019] ? hash_and_copy_to_iter+0x170/0x210 [ 42.247006][ T5019] ? hash_and_copy_to_iter+0x210/0x210 [ 42.252505][ T5019] ? skb_partial_csum_set+0x203/0x390 [ 42.257942][ T5019] ? virtio_net_hdr_to_skb.constprop.0+0xa44/0x1220 [ 42.264577][ T5019] ? packet_rcv_spkt+0x620/0x620 [ 42.269584][ T5019] packet_xmit+0x260/0x390 [ 42.274010][ T5019] packet_sendmsg+0x34ad/0x5090 [ 42.278916][ T5019] ? aa_sk_perm+0x31d/0xb10 [ 42.283436][ T5019] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 42.289368][ T5019] ? aa_af_perm+0x240/0x240 [ 42.293883][ T5019] ? copy_iovec_from_user.part.0+0xc7/0x100 [ 42.299844][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 42.305149][ T5019] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 42.311082][ T5019] sock_sendmsg+0xde/0x190 [ 42.315513][ T5019] ____sys_sendmsg+0x739/0x920 [ 42.320313][ T5019] ? copy_msghdr_from_user+0xfc/0x150 [ 42.325709][ T5019] ? kernel_sendmsg+0x50/0x50 [ 42.330435][ T5019] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 42.336473][ T5019] ___sys_sendmsg+0x110/0x1b0 [ 42.341159][ T5019] ? do_recvmmsg+0x6f0/0x6f0 [ 42.345737][ T5019] ? lock_sync+0x190/0x190 [ 42.350195][ T5019] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 42.355402][ T5019] ? do_raw_spin_lock+0x124/0x2b0 [ 42.360469][ T5019] ? spin_bug+0x1c0/0x1c0 [ 42.364818][ T5019] ? _raw_spin_lock_irq+0x45/0x50 [ 42.369880][ T5019] ? __fget_light+0x201/0x270 [ 42.374578][ T5019] __sys_sendmsg+0xf7/0x1c0 [ 42.379109][ T5019] ? __sys_sendmsg_sock+0x40/0x40 [ 42.384316][ T5019] ? lock_downgrade+0x690/0x690 [ 42.389203][ T5019] ? lockdep_hardirqs_on+0x7d/0x100 [ 42.394412][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 42.399640][ T5019] ? ptrace_notify+0xfe/0x140 [ 42.404326][ T5019] do_syscall_64+0x39/0xb0 [ 42.408803][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.414716][ T5019] RIP: 0033:0x7f41e4ead559 [ 42.419174][ T5019] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.438856][ T5019] RSP: 002b:00007ffd132e7aa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.447325][ T5019] RAX: ffffffffffffffda RBX: 00007ffd132e7ab8 RCX: 00007f41e4ead559 [ 42.455394][ T5019] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 42.463418][ T5019] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 42.471528][ T5019] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffd132e7ac0 [ 42.479570][ T5019] R13: 00007ffd132e7ae0 R14: 0000000000000000 R15: 0000000000000000 [ 42.487762][ T5019] [ 42.490769][ T5019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 42.498060][ T5019] CPU: 0 PID: 5019 Comm: syz-executor279 Not tainted 6.4.0-syzkaller-12316-g4f6b6c2b2f86 #0 [ 42.508124][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 42.518169][ T5019] Call Trace: [ 42.521439][ T5019] [ 42.524553][ T5019] dump_stack_lvl+0xd9/0x150 [ 42.529136][ T5019] panic+0x686/0x730 [ 42.533041][ T5019] ? panic_smp_self_stop+0xa0/0xa0 [ 42.538155][ T5019] ? show_trace_log_lvl+0x284/0x390 [ 42.543780][ T5019] ? skb_checksum_help+0x4a3/0x5c0 [ 42.548908][ T5019] check_panic_on_warn+0xb1/0xc0 [ 42.553832][ T5019] __warn+0xf2/0x390 [ 42.557712][ T5019] ? skb_checksum_help+0x4a3/0x5c0 [ 42.562837][ T5019] report_bug+0x2da/0x500 [ 42.567245][ T5019] handle_bug+0x3c/0x70 [ 42.571402][ T5019] exc_invalid_op+0x18/0x50 [ 42.575887][ T5019] asm_exc_invalid_op+0x1a/0x20 [ 42.580715][ T5019] RIP: 0010:skb_checksum_help+0x4a3/0x5c0 [ 42.586422][ T5019] Code: 32 69 f9 0f 0b 0f b6 1d e3 f0 78 06 31 ff 89 de e8 02 2e 69 f9 84 db 0f 84 cf 00 00 00 41 bc ea ff ff ff eb ad e8 0d 32 69 f9 <0f> 0b 0f b6 1d bb f0 78 06 31 ff 89 de e8 db 2d 69 f9 84 db 75 dd [ 42.606024][ T5019] RSP: 0018:ffffc900039cf120 EFLAGS: 00010293 [ 42.612600][ T5019] RAX: 0000000000000000 RBX: 000000000000061f RCX: 0000000000000000 [ 42.620575][ T5019] RDX: ffff88802d8c5940 RSI: ffffffff881bad63 RDI: 0000000000000006 [ 42.628534][ T5019] RBP: ffff8880231bca00 R08: 0000000000000006 R09: 0000000000000621 [ 42.636491][ T5019] R10: 0000000000000519 R11: 0000000000000001 R12: ffff8880231bca74 [ 42.644489][ T5019] R13: 000000000000061f R14: 0000000000000519 R15: 0000000000000621 [ 42.652458][ T5019] ? skb_checksum_help+0x4a3/0x5c0 [ 42.657572][ T5019] ip_do_fragment+0x9a4/0x17f0 [ 42.662326][ T5019] ? ip_fragment.constprop.0+0x240/0x240 [ 42.668145][ T5019] ? ip_frag_next+0xa50/0xa50 [ 42.672815][ T5019] ? slab_free_freelist_hook+0x8b/0x1c0 [ 42.678630][ T5019] ip_fragment.constprop.0+0x16b/0x240 [ 42.684078][ T5019] __ip_finish_output+0x4a0/0x650 [ 42.689106][ T5019] ip_finish_output+0x31/0x280 [ 42.693876][ T5019] ip_output+0x1a3/0x320 [ 42.698109][ T5019] ip_local_out+0xb3/0x1a0 [ 42.702514][ T5019] iptunnel_xmit+0x622/0xa40 [ 42.707098][ T5019] ip_tunnel_xmit+0xfc0/0x3170 [ 42.711843][ T5019] ? flow_indr_dev_setup_offload+0xa8/0x8c0 [ 42.717744][ T5019] ? ip_md_tunnel_xmit+0x1f80/0x1f80 [ 42.723014][ T5019] ? __gre_xmit+0x4f4/0x980 [ 42.727502][ T5019] ipgre_xmit+0x6d3/0x8f0 [ 42.731833][ T5019] dev_hard_start_xmit+0x187/0x700 [ 42.736940][ T5019] __dev_queue_xmit+0x2be2/0x3b10 [ 42.741981][ T5019] ? netdev_core_pick_tx+0x390/0x390 [ 42.747253][ T5019] ? hash_and_copy_to_iter+0x170/0x210 [ 42.752698][ T5019] ? hash_and_copy_to_iter+0x210/0x210 [ 42.758166][ T5019] ? skb_partial_csum_set+0x203/0x390 [ 42.763610][ T5019] ? virtio_net_hdr_to_skb.constprop.0+0xa44/0x1220 [ 42.770184][ T5019] ? packet_rcv_spkt+0x620/0x620 [ 42.775106][ T5019] packet_xmit+0x260/0x390 [ 42.779586][ T5019] packet_sendmsg+0x34ad/0x5090 [ 42.784447][ T5019] ? aa_sk_perm+0x31d/0xb10 [ 42.788943][ T5019] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 42.794818][ T5019] ? aa_af_perm+0x240/0x240 [ 42.799317][ T5019] ? copy_iovec_from_user.part.0+0xc7/0x100 [ 42.805226][ T5019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 42.810504][ T5019] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 42.816383][ T5019] sock_sendmsg+0xde/0x190 [ 42.820785][ T5019] ____sys_sendmsg+0x739/0x920 [ 42.825532][ T5019] ? copy_msghdr_from_user+0xfc/0x150 [ 42.830892][ T5019] ? kernel_sendmsg+0x50/0x50 [ 42.835557][ T5019] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 42.841522][ T5019] ___sys_sendmsg+0x110/0x1b0 [ 42.846192][ T5019] ? do_recvmmsg+0x6f0/0x6f0 [ 42.850791][ T5019] ? lock_sync+0x190/0x190 [ 42.855189][ T5019] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 42.860367][ T5019] ? do_raw_spin_lock+0x124/0x2b0 [ 42.865378][ T5019] ? spin_bug+0x1c0/0x1c0 [ 42.869691][ T5019] ? _raw_spin_lock_irq+0x45/0x50 [ 42.874702][ T5019] ? __fget_light+0x201/0x270 [ 42.879363][ T5019] __sys_sendmsg+0xf7/0x1c0 [ 42.883842][ T5019] ? __sys_sendmsg_sock+0x40/0x40 [ 42.888843][ T5019] ? lock_downgrade+0x690/0x690 [ 42.893679][ T5019] ? lockdep_hardirqs_on+0x7d/0x100 [ 42.898858][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 42.904042][ T5019] ? ptrace_notify+0xfe/0x140 [ 42.908700][ T5019] do_syscall_64+0x39/0xb0 [ 42.913103][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.918980][ T5019] RIP: 0033:0x7f41e4ead559 [ 42.923378][ T5019] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.942969][ T5019] RSP: 002b:00007ffd132e7aa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.951456][ T5019] RAX: ffffffffffffffda RBX: 00007ffd132e7ab8 RCX: 00007f41e4ead559 [ 42.959408][ T5019] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 42.967359][ T5019] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 42.975307][ T5019] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffd132e7ac0 [ 42.983256][ T5019] R13: 00007ffd132e7ae0 R14: 0000000000000000 R15: 0000000000000000 [ 42.991215][ T5019] [ 42.994919][ T5019] Kernel Offset: disabled [ 42.999315][ T5019] Rebooting in 86400 seconds..