./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1447834955 <...> Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. execve("./syz-executor1447834955", ["./syz-executor1447834955"], 0x7ffd771c6750 /* 10 vars */) = 0 brk(NULL) = 0x5555574b1000 brk(0x5555574b1d00) = 0x5555574b1d00 arch_prctl(ARCH_SET_FS, 0x5555574b1380) = 0 set_tid_address(0x5555574b1650) = 5014 set_robust_list(0x5555574b1660, 24) = 0 rseq(0x5555574b1ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1447834955", 4096) = 28 getrandom("\xc5\xcc\x6e\x45\x29\x58\x5f\xd0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555574b1d00 brk(0x5555574d2d00) = 0x5555574d2d00 brk(0x5555574d3000) = 0x5555574d3000 mprotect(0x7fc0cda19000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574b1650) = 5015 ./strace-static-x86_64: Process 5015 attached [pid 5015] set_robust_list(0x5555574b1660, 24) = 0 [pid 5015] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5015] setsid() = 1 [pid 5015] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5015] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5015] unshare(CLONE_NEWNS) = 0 [pid 5015] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5015] unshare(CLONE_NEWIPC) = 0 [pid 5015] unshare(CLONE_NEWCGROUP) = 0 [pid 5015] unshare(CLONE_NEWUTS) = 0 [pid 5015] unshare(CLONE_SYSVSEM) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "16777216", 8) = 8 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "536870912", 9) = 9 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1024", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "8192", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1024", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1024", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5015] close(3) = 0 [pid 5015] getpid() = 1 [pid 5015] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 5b 41 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 38 c1 0f 8c [ 57.089091][ T5015] RSP: 0018:ffffc90003b3f470 EFLAGS: 00010246 [ 57.095210][ T5015] RAX: e2a24ee93ea5fb00 RBX: ffff888028b820f0 RCX: ffff888020e31dc0 [ 57.103214][ T5015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.111193][ T5015] RBP: 0000000000000000 R08: ffffffff8152d442 R09: 1ffff92000767e04 [ 57.119221][ T5015] R10: dffffc0000000000 R11: fffff52000767e05 R12: ffff88807685ac98 [ 57.127242][ T5015] R13: dffffc0000000000 R14: ffffffff8bf662a0 R15: ffff888028b82000 [ 57.135252][ T5015] FS: 00005555574b1380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 57.144233][ T5015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.150807][ T5015] CR2: 0000000020001000 CR3: 000000002497d000 CR4: 00000000003506f0 [ 57.158860][ T5015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.166881][ T5015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.174900][ T5015] Call Trace: [ 57.178198][ T5015] [ 57.181116][ T5015] ? __warn+0x162/0x4a0 [ 57.185335][ T5015] ? skb_warn_bad_offload+0x15c/0x190 [ 57.190735][ T5015] ? report_bug+0x2b3/0x500 [ 57.195319][ T5015] ? skb_warn_bad_offload+0x15c/0x190 [ 57.200724][ T5015] ? handle_bug+0x3d/0x70 [ 57.205111][ T5015] ? exc_invalid_op+0x1a/0x50 [ 57.209797][ T5015] ? asm_exc_invalid_op+0x1a/0x20 [ 57.214883][ T5015] ? __warn_printk+0x292/0x360 [ 57.219660][ T5015] ? skb_warn_bad_offload+0x15c/0x190 [ 57.225190][ T5015] __skb_gso_segment+0x3bd/0x4c0 [ 57.230142][ T5015] ? netif_skb_features+0x81d/0xb80 [ 57.235392][ T5015] validate_xmit_skb+0x57d/0x11f0 [ 57.240431][ T5015] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 57.246470][ T5015] ? validate_xmit_skb_list+0x130/0x130 [ 57.252062][ T5015] validate_xmit_skb_list+0x95/0x130 [ 57.257488][ T5015] sch_direct_xmit+0x11a/0x5f0 [ 57.262319][ T5015] ? do_raw_spin_lock+0x3a0/0x3a0 [ 57.267357][ T5015] ? mrp_pdu_parse_vecattr_event+0x2c0/0x2c0 [ 57.273385][ T5015] ? skb_copy_bits+0x33d/0x790 [ 57.278244][ T5015] __dev_queue_xmit+0x18d2/0x38b0 [ 57.283330][ T5015] ? netdev_core_pick_tx+0x330/0x330 [ 57.288642][ T5015] ? virtio_net_hdr_to_skb+0x66b/0x10c0 [ 57.294253][ T5015] ? packet_xmit+0x68/0x320 [ 57.298769][ T5015] packet_sendmsg+0x466c/0x6170 [ 57.303695][ T5015] ? smack_socket_sendmsg+0x172/0x530 [ 57.309073][ T5015] ? smack_socket_connect+0x4e0/0x4e0 [ 57.314507][ T5015] ? tomoyo_socket_sendmsg_permission+0x287/0x410 [ 57.320971][ T5015] ? tomoyo_socket_bind_permission+0x340/0x340 [ 57.327190][ T5015] ? packet_getsockopt+0x1000/0x1000 [ 57.332518][ T5015] ? __rwlock_init+0x150/0x150 [ 57.337280][ T5015] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 57.342614][ T5015] ? security_socket_sendmsg+0x81/0xa0 [ 57.348082][ T5015] ? packet_getsockopt+0x1000/0x1000 [ 57.353409][ T5015] __sys_sendto+0x484/0x640 [ 57.357929][ T5015] ? __ia32_sys_getpeername+0x90/0x90 [ 57.363342][ T5015] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 57.369340][ T5015] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.374608][ T5015] ? do_notify_parent+0xf50/0xf50 [ 57.379653][ T5015] ? print_irqtrace_events+0x220/0x220 [ 57.385161][ T5015] __x64_sys_sendto+0xde/0xf0 [ 57.389848][ T5015] do_syscall_64+0x41/0xc0 [ 57.394311][ T5015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.400215][ T5015] RIP: 0033:0x7fc0cd9a1499 [ 57.404669][ T5015] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.424411][ T5015] RSP: 002b:00007ffcc1c44ca8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 57.432883][ T5015] RAX: ffffffffffffffda RBX: 00007fc0cd9ee390 RCX: 00007fc0cd9a1499 [ 57.440871][ T5015] RDX: 0000000000002378 RSI: 0000000020000080 RDI: 0000000000000003 [ 57.449280][ T5015] RBP: 0000000000000003 R08: 0000000000000000 R09: 00000000000002ff [ 57.457314][ T5015] R10: 0000000004000002 R11: 0000000000000246 R12: 00007ffcc1c44d00 [ 57.465337][ T5015] R13: 00007ffcc1c44cd0 R14: 0000000000000001 R15: 00007ffcc1c44d00 [ 57.473440][ T5015] [ 57.476536][ T5015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.483797][ T5015] CPU: 0 PID: 5015 Comm: syz-executor144 Not tainted 6.5.0-rc6-syzkaller-00027-g91aa6c412d7f #0 [ 57.494189][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 57.504227][ T5015] Call Trace: [ 57.507561][ T5015] [ 57.510476][ T5015] dump_stack_lvl+0x1e7/0x2d0 [ 57.515143][ T5015] ? nf_tcp_handle_invalid+0x650/0x650 [ 57.520604][ T5015] ? panic+0x770/0x770 [ 57.524662][ T5015] ? vscnprintf+0x5d/0x80 [ 57.528979][ T5015] panic+0x30f/0x770 [ 57.532874][ T5015] ? __warn+0x171/0x4a0 [ 57.537041][ T5015] ? __memcpy_flushcache+0x2b0/0x2b0 [ 57.542344][ T5015] __warn+0x314/0x4a0 [ 57.546319][ T5015] ? skb_warn_bad_offload+0x15c/0x190 [ 57.551676][ T5015] report_bug+0x2b3/0x500 [ 57.556011][ T5015] ? skb_warn_bad_offload+0x15c/0x190 [ 57.561387][ T5015] handle_bug+0x3d/0x70 [ 57.565536][ T5015] exc_invalid_op+0x1a/0x50 [ 57.570027][ T5015] asm_exc_invalid_op+0x1a/0x20 [ 57.574870][ T5015] RIP: 0010:skb_warn_bad_offload+0x15c/0x190 [ 57.580835][ T5015] Code: e7 e8 d8 3c 3d f9 49 8b 04 24 48 8d 88 70 03 00 00 48 85 c0 49 0f 44 ce 48 c7 c7 e0 62 f6 8b 4c 89 fe 48 89 da e8 24 84 ab f8 <0f> 0b 5b 41 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 38 c1 0f 8c [ 57.600435][ T5015] RSP: 0018:ffffc90003b3f470 EFLAGS: 00010246 [ 57.606499][ T5015] RAX: e2a24ee93ea5fb00 RBX: ffff888028b820f0 RCX: ffff888020e31dc0 [ 57.614465][ T5015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.622429][ T5015] RBP: 0000000000000000 R08: ffffffff8152d442 R09: 1ffff92000767e04 [ 57.630411][ T5015] R10: dffffc0000000000 R11: fffff52000767e05 R12: ffff88807685ac98 [ 57.638375][ T5015] R13: dffffc0000000000 R14: ffffffff8bf662a0 R15: ffff888028b82000 [ 57.646345][ T5015] ? __warn_printk+0x292/0x360 [ 57.651113][ T5015] __skb_gso_segment+0x3bd/0x4c0 [ 57.656047][ T5015] ? netif_skb_features+0x81d/0xb80 [ 57.661243][ T5015] validate_xmit_skb+0x57d/0x11f0 [ 57.666355][ T5015] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 57.672334][ T5015] ? validate_xmit_skb_list+0x130/0x130 [ 57.677879][ T5015] validate_xmit_skb_list+0x95/0x130 [ 57.683162][ T5015] sch_direct_xmit+0x11a/0x5f0 [ 57.687923][ T5015] ? do_raw_spin_lock+0x3a0/0x3a0 [ 57.692943][ T5015] ? mrp_pdu_parse_vecattr_event+0x2c0/0x2c0 [ 57.698918][ T5015] ? skb_copy_bits+0x33d/0x790 [ 57.703678][ T5015] __dev_queue_xmit+0x18d2/0x38b0 [ 57.708799][ T5015] ? netdev_core_pick_tx+0x330/0x330 [ 57.714084][ T5015] ? virtio_net_hdr_to_skb+0x66b/0x10c0 [ 57.719640][ T5015] ? packet_xmit+0x68/0x320 [ 57.724143][ T5015] packet_sendmsg+0x466c/0x6170 [ 57.729010][ T5015] ? smack_socket_sendmsg+0x172/0x530 [ 57.734383][ T5015] ? smack_socket_connect+0x4e0/0x4e0 [ 57.739749][ T5015] ? tomoyo_socket_sendmsg_permission+0x287/0x410 [ 57.746160][ T5015] ? tomoyo_socket_bind_permission+0x340/0x340 [ 57.752311][ T5015] ? packet_getsockopt+0x1000/0x1000 [ 57.757597][ T5015] ? __rwlock_init+0x150/0x150 [ 57.762365][ T5015] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 57.767638][ T5015] ? security_socket_sendmsg+0x81/0xa0 [ 57.773094][ T5015] ? packet_getsockopt+0x1000/0x1000 [ 57.778370][ T5015] __sys_sendto+0x484/0x640 [ 57.782873][ T5015] ? __ia32_sys_getpeername+0x90/0x90 [ 57.788239][ T5015] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 57.794223][ T5015] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.799431][ T5015] ? do_notify_parent+0xf50/0xf50 [ 57.804454][ T5015] ? print_irqtrace_events+0x220/0x220 [ 57.809911][ T5015] __x64_sys_sendto+0xde/0xf0 [ 57.814589][ T5015] do_syscall_64+0x41/0xc0 [ 57.819003][ T5015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.824896][ T5015] RIP: 0033:0x7fc0cd9a1499 [ 57.829307][ T5015] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.848910][ T5015] RSP: 002b:00007ffcc1c44ca8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 57.857321][ T5015] RAX: ffffffffffffffda RBX: 00007fc0cd9ee390 RCX: 00007fc0cd9a1499 [ 57.865284][ T5015] RDX: 0000000000002378 RSI: 0000000020000080 RDI: 0000000000000003 [ 57.873254][ T5015] RBP: 0000000000000003 R08: 0000000000000000 R09: 00000000000002ff [ 57.881216][ T5015] R10: 0000000004000002 R11: 0000000000000246 R12: 00007ffcc1c44d00 [ 57.889180][ T5015] R13: 00007ffcc1c44cd0 R14: 0000000000000001 R15: 00007ffcc1c44d00 [ 57.897155][ T5015] [ 57.900365][ T5015] Kernel Offset: disabled [ 57.904778][ T5015] Rebooting in 86400 seconds..