./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2406143221 <...> Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. execve("./syz-executor2406143221", ["./syz-executor2406143221"], 0x7ffe65007a20 /* 10 vars */) = 0 brk(NULL) = 0x555556861000 brk(0x555556861d00) = 0x555556861d00 arch_prctl(ARCH_SET_FS, 0x555556861380) = 0 set_tid_address(0x555556861650) = 5046 set_robust_list(0x555556861660, 24) = 0 rseq(0x555556861ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2406143221", 4096) = 28 getrandom("\x8d\xdf\xb4\x7d\x27\xa9\x37\x2f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556861d00 brk(0x555556882d00) = 0x555556882d00 brk(0x555556883000) = 0x555556883000 mprotect(0x7f85e63c2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556861650) = 5047 ./strace-static-x86_64: Process 5047 attached [pid 5047] set_robust_list(0x555556861660, 24) = 0 [pid 5047] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5047] setsid() = 1 [pid 5047] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5047] unshare(CLONE_NEWNS) = 0 [pid 5047] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5047] unshare(CLONE_NEWIPC) = 0 [pid 5047] unshare(CLONE_NEWCGROUP) = 0 [pid 5047] unshare(CLONE_NEWUTS) = 0 [pid 5047] unshare(CLONE_SYSVSEM) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "16777216", 8) = 8 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "536870912", 9) = 9 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "8192", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5047] close(3) = 0 [pid 5047] getpid() = 1 [pid 5047] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<= skb_headlen() (104) [ 84.765665][ T5047] WARNING: CPU: 0 PID: 5047 at net/core/dev.c:3297 skb_checksum_help+0x525/0x730 [ 84.774893][ T5047] Modules linked in: [ 84.778846][ T5047] CPU: 0 PID: 5047 Comm: syz-executor240 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 84.789299][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 84.799828][ T5047] RIP: 0010:skb_checksum_help+0x525/0x730 [ 84.805598][ T5047] Code: 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f9 01 00 00 44 89 e2 2b 53 74 44 89 ee 48 c7 c7 20 21 a3 8b e8 eb 95 1a f9 <0f> 0b e9 46 ff ff ff e8 ff 70 54 f9 44 0f b6 25 a4 14 85 06 31 ff [ 84.825339][ T5047] RSP: 0018:ffffc90003adf098 EFLAGS: 00010286 [ 84.831505][ T5047] RAX: 0000000000000000 RBX: ffff8880259b2000 RCX: 0000000000000000 [ 84.839517][ T5047] RDX: ffff8880147fbb80 RSI: ffffffff814df0c6 RDI: 0000000000000001 [ 84.847508][ T5047] RBP: ffff8880259b2074 R08: 0000000000000001 R09: 0000000000000000 [ 84.855544][ T5047] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000002969 [ 84.863575][ T5047] R13: 0000000000000529 R14: ffff8880259b2070 R15: 00000000000005d1 [ 84.871610][ T5047] FS: 0000555556861380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 84.880595][ T5047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.887185][ T5047] CR2: 000000002000d000 CR3: 000000007aeb2000 CR4: 00000000003506f0 [ 84.895198][ T5047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.903213][ T5047] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.911251][ T5047] Call Trace: [ 84.914593][ T5047] [ 84.917519][ T5047] ? show_regs+0x8f/0xa0 [ 84.921815][ T5047] ? __warn+0xe6/0x380 [ 84.925919][ T5047] ? skb_checksum_help+0x525/0x730 [ 84.931083][ T5047] ? report_bug+0x3bc/0x580 [ 84.935616][ T5047] ? handle_bug+0x3c/0x70 [ 84.940032][ T5047] ? exc_invalid_op+0x17/0x40 [ 84.944745][ T5047] ? asm_exc_invalid_op+0x1a/0x20 [ 84.949830][ T5047] ? __warn_printk+0x1a6/0x350 [ 84.954620][ T5047] ? skb_checksum_help+0x525/0x730 [ 84.959782][ T5047] ? skb_checksum_help+0x525/0x730 [ 84.965102][ T5047] ip_do_fragment+0xa1b/0x18b0 [ 84.969910][ T5047] ? ip_fragment.constprop.0+0x230/0x230 [ 84.975590][ T5047] ? ip_frag_next+0xa40/0xa40 [ 84.980326][ T5047] ip_fragment.constprop.0+0x161/0x230 [ 84.985838][ T5047] __ip_finish_output+0x49a/0x640 [ 84.990958][ T5047] ip_finish_output+0x31/0x310 [ 84.995791][ T5047] ip_mc_output+0x1dd/0x6a0 [ 85.000398][ T5047] ip_local_out+0xaf/0x190 [ 85.004854][ T5047] iptunnel_xmit+0x61a/0x9e0 [ 85.009518][ T5047] ip_tunnel_xmit+0x1e4f/0x3370 [ 85.014411][ T5047] ? ip_md_tunnel_xmit+0x1fc0/0x1fc0 [ 85.019747][ T5047] ? skb_mac_gso_segment+0x3d1/0x610 [ 85.025068][ T5047] ? __gre_xmit+0x4f5/0x990 [ 85.029623][ T5047] ipgre_xmit+0x63c/0x910 [ 85.033973][ T5047] dev_hard_start_xmit+0x13d/0x6c0 [ 85.039210][ T5047] __dev_queue_xmit+0x9b4/0x3d60 [ 85.044241][ T5047] ? netdev_core_pick_tx+0x390/0x390 [ 85.049603][ T5047] ? skb_partial_csum_set+0x202/0x390 [ 85.055015][ T5047] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 85.061663][ T5047] ? packet_release+0xdc0/0xdc0 [ 85.066574][ T5047] packet_xmit+0x257/0x380 [ 85.071064][ T5047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.077426][ T5047] packet_sendmsg+0x24d9/0x5580 [ 85.082339][ T5047] ? preempt_count_sub+0x150/0x150 [ 85.087479][ T5047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.093432][ T5047] ? aa_sk_perm+0x2c1/0xad0 [ 85.097963][ T5047] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 85.104024][ T5047] ? aa_af_perm+0x260/0x260 [ 85.108604][ T5047] ? import_ubuf+0x1f5/0x260 [ 85.113246][ T5047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 85.118606][ T5047] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 85.124607][ T5047] __sock_sendmsg+0xd5/0x180 [ 85.129260][ T5047] ____sys_sendmsg+0x6ac/0x940 [ 85.134053][ T5047] ? copy_msghdr_from_user+0x10b/0x160 [ 85.139601][ T5047] ? kernel_sendmsg+0x50/0x50 [ 85.144340][ T5047] ___sys_sendmsg+0x135/0x1d0 [ 85.149088][ T5047] ? do_recvmmsg+0x740/0x740 [ 85.153882][ T5047] ? lock_sync+0x190/0x190 [ 85.158341][ T5047] ? ptrace_stop.part.0+0x4af/0x900 [ 85.163572][ T5047] ? __fget_light+0x1fc/0x260 [ 85.168313][ T5047] __sys_sendmsg+0x117/0x1e0 [ 85.172931][ T5047] ? __sys_sendmsg_sock+0x30/0x30 [ 85.177950][ T5047] ? ptrace_notify+0xf4/0x130 [ 85.182688][ T5047] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.187918][ T5047] ? _raw_spin_unlock_irq+0x2e/0x50 [ 85.193160][ T5047] ? ptrace_notify+0xf4/0x130 [ 85.197861][ T5047] do_syscall_64+0x38/0xb0 [ 85.202320][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.208285][ T5047] RIP: 0033:0x7f85e634a4d9 [ 85.212715][ T5047] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.232394][ T5047] RSP: 002b:00007ffcaf7bc8d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.240931][ T5047] RAX: ffffffffffffffda RBX: 00007f85e6397390 RCX: 00007f85e634a4d9 [ 85.248970][ T5047] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 85.256968][ T5047] RBP: 0000000000000003 R08: 0000555500000000 R09: 0000555500000000 [ 85.265056][ T5047] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffcaf7bc920 [ 85.273065][ T5047] R13: 00007ffcaf7bc8f0 R14: 0000000000000001 R15: 00007ffcaf7bc920 [ 85.281088][ T5047] [ 85.284116][ T5047] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.291397][ T5047] CPU: 0 PID: 5047 Comm: syz-executor240 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 85.301813][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 85.311866][ T5047] Call Trace: [ 85.315138][ T5047] [ 85.318089][ T5047] dump_stack_lvl+0xd9/0x1b0 [ 85.322719][ T5047] panic+0x6a6/0x750 [ 85.326661][ T5047] ? panic_smp_self_stop+0xa0/0xa0 [ 85.331799][ T5047] ? skb_checksum_help+0x525/0x730 [ 85.336925][ T5047] check_panic_on_warn+0xab/0xb0 [ 85.341867][ T5047] __warn+0xf2/0x380 [ 85.345761][ T5047] ? skb_checksum_help+0x525/0x730 [ 85.350872][ T5047] report_bug+0x3bc/0x580 [ 85.355194][ T5047] handle_bug+0x3c/0x70 [ 85.359344][ T5047] exc_invalid_op+0x17/0x40 [ 85.363846][ T5047] asm_exc_invalid_op+0x1a/0x20 [ 85.368703][ T5047] RIP: 0010:skb_checksum_help+0x525/0x730 [ 85.374448][ T5047] Code: 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f9 01 00 00 44 89 e2 2b 53 74 44 89 ee 48 c7 c7 20 21 a3 8b e8 eb 95 1a f9 <0f> 0b e9 46 ff ff ff e8 ff 70 54 f9 44 0f b6 25 a4 14 85 06 31 ff [ 85.394110][ T5047] RSP: 0018:ffffc90003adf098 EFLAGS: 00010286 [ 85.400193][ T5047] RAX: 0000000000000000 RBX: ffff8880259b2000 RCX: 0000000000000000 [ 85.408187][ T5047] RDX: ffff8880147fbb80 RSI: ffffffff814df0c6 RDI: 0000000000000001 [ 85.416179][ T5047] RBP: ffff8880259b2074 R08: 0000000000000001 R09: 0000000000000000 [ 85.424157][ T5047] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000002969 [ 85.432136][ T5047] R13: 0000000000000529 R14: ffff8880259b2070 R15: 00000000000005d1 [ 85.440123][ T5047] ? __warn_printk+0x1a6/0x350 [ 85.444912][ T5047] ? skb_checksum_help+0x525/0x730 [ 85.450050][ T5047] ip_do_fragment+0xa1b/0x18b0 [ 85.454825][ T5047] ? ip_fragment.constprop.0+0x230/0x230 [ 85.460506][ T5047] ? ip_frag_next+0xa40/0xa40 [ 85.465477][ T5047] ip_fragment.constprop.0+0x161/0x230 [ 85.470973][ T5047] __ip_finish_output+0x49a/0x640 [ 85.476032][ T5047] ip_finish_output+0x31/0x310 [ 85.480830][ T5047] ip_mc_output+0x1dd/0x6a0 [ 85.485362][ T5047] ip_local_out+0xaf/0x190 [ 85.489812][ T5047] iptunnel_xmit+0x61a/0x9e0 [ 85.494438][ T5047] ip_tunnel_xmit+0x1e4f/0x3370 [ 85.499334][ T5047] ? ip_md_tunnel_xmit+0x1fc0/0x1fc0 [ 85.504667][ T5047] ? skb_mac_gso_segment+0x3d1/0x610 [ 85.509998][ T5047] ? __gre_xmit+0x4f5/0x990 [ 85.514538][ T5047] ipgre_xmit+0x63c/0x910 [ 85.518892][ T5047] dev_hard_start_xmit+0x13d/0x6c0 [ 85.524051][ T5047] __dev_queue_xmit+0x9b4/0x3d60 [ 85.529130][ T5047] ? netdev_core_pick_tx+0x390/0x390 [ 85.534460][ T5047] ? skb_partial_csum_set+0x202/0x390 [ 85.539865][ T5047] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 85.546505][ T5047] ? packet_release+0xdc0/0xdc0 [ 85.551391][ T5047] packet_xmit+0x257/0x380 [ 85.555835][ T5047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.561845][ T5047] packet_sendmsg+0x24d9/0x5580 [ 85.566761][ T5047] ? preempt_count_sub+0x150/0x150 [ 85.572013][ T5047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.577951][ T5047] ? aa_sk_perm+0x2c1/0xad0 [ 85.582486][ T5047] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 85.588400][ T5047] ? aa_af_perm+0x260/0x260 [ 85.592924][ T5047] ? import_ubuf+0x1f5/0x260 [ 85.597567][ T5047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 85.602919][ T5047] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 85.608873][ T5047] __sock_sendmsg+0xd5/0x180 [ 85.613509][ T5047] ____sys_sendmsg+0x6ac/0x940 [ 85.618304][ T5047] ? copy_msghdr_from_user+0x10b/0x160 [ 85.623781][ T5047] ? kernel_sendmsg+0x50/0x50 [ 85.628496][ T5047] ___sys_sendmsg+0x135/0x1d0 [ 85.633216][ T5047] ? do_recvmmsg+0x740/0x740 [ 85.637829][ T5047] ? lock_sync+0x190/0x190 [ 85.642265][ T5047] ? ptrace_stop.part.0+0x4af/0x900 [ 85.647486][ T5047] ? __fget_light+0x1fc/0x260 [ 85.652181][ T5047] __sys_sendmsg+0x117/0x1e0 [ 85.656783][ T5047] ? __sys_sendmsg_sock+0x30/0x30 [ 85.661818][ T5047] ? ptrace_notify+0xf4/0x130 [ 85.666533][ T5047] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.671772][ T5047] ? _raw_spin_unlock_irq+0x2e/0x50 [ 85.676998][ T5047] ? ptrace_notify+0xf4/0x130 [ 85.681731][ T5047] do_syscall_64+0x38/0xb0 [ 85.686182][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.692138][ T5047] RIP: 0033:0x7f85e634a4d9 [ 85.696577][ T5047] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.716307][ T5047] RSP: 002b:00007ffcaf7bc8d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.724741][ T5047] RAX: ffffffffffffffda RBX: 00007f85e6397390 RCX: 00007f85e634a4d9 [ 85.732723][ T5047] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 85.740705][ T5047] RBP: 0000000000000003 R08: 0000555500000000 R09: 0000555500000000 [ 85.748684][ T5047] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffcaf7bc920 [ 85.756662][ T5047] R13: 00007ffcaf7bc8f0 R14: 0000000000000001 R15: 00007ffcaf7bc920 [ 85.764657][ T5047] [ 85.767848][ T5047] Kernel Offset: disabled [ 85.772275][ T5047] Rebooting in 86400 seconds..