./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2810794205 <...> Warning: Permanently added '10.128.0.145' (ECDSA) to the list of known hosts. execve("./syz-executor2810794205", ["./syz-executor2810794205"], 0x7ffc933b7fe0 /* 10 vars */) = 0 brk(NULL) = 0x55555621a000 brk(0x55555621ac40) = 0x55555621ac40 arch_prctl(ARCH_SET_FS, 0x55555621a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2810794205", 4096) = 28 brk(0x55555623bc40) = 0x55555623bc40 brk(0x55555623c000) = 0x55555623c000 mprotect(0x7f8fb656c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_IEEE802154, SOCK_RAW, 0) = 3 [ 43.732187][ T3612] ------------[ cut here ]------------ [ 43.737960][ T3612] skb_assert_len [ 43.741758][ T3612] WARNING: CPU: 1 PID: 3612 at include/linux/skbuff.h:2493 __dev_queue_xmit+0x23a8/0x3ad0 [ 43.751755][ T3612] Modules linked in: [ 43.755879][ T3612] CPU: 1 PID: 3612 Comm: syz-executor281 Not tainted 6.0.0-rc1-syzkaller-00399-g15b3f48a4339 #0 [ 43.766395][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 43.776494][ T3612] RIP: 0010:__dev_queue_xmit+0x23a8/0x3ad0 [ 43.782288][ T3612] Code: 89 de e8 3b 94 25 fa 84 db 75 21 e8 b2 97 25 fa 48 c7 c6 60 57 f4 8a 48 c7 c7 60 2b f4 8a c6 05 53 1a 73 06 01 e8 e5 c8 e3 01 <0f> 0b e8 91 97 25 fa 0f b6 1d 3f 1a 73 06 31 ff 89 de e8 01 94 25 [ 43.801959][ T3612] RSP: 0018:ffffc9000375f768 EFLAGS: 00010286 [ 43.808108][ T3612] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 43.816141][ T3612] RDX: ffff88807d1a9d80 RSI: ffffffff8161f5a8 RDI: fffff520006ebedf [ 43.824124][ T3612] RBP: ffff88801bbba83a R08: 0000000000000005 R09: 0000000000000000 [ 43.832150][ T3612] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000 [ 43.840154][ T3612] R13: 0000000000000000 R14: ffff88801bbba790 R15: ffff88801bbba780 [ 43.848148][ T3612] FS: 000055555621a300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 43.857114][ T3612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.863678][ T3612] CR2: 00000000200033c8 CR3: 000000007e7c7000 CR4: 0000000000350ee0 [ 43.871670][ T3612] Call Trace: [ 43.874943][ T3612] [ 43.877928][ T3612] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 43.883230][ T3612] ? __might_fault+0x142/0x170 [ 43.888019][ T3612] ? _copy_from_iter+0x239/0x11c0 [ 43.893079][ T3612] ? _copy_mc_to_iter+0x1430/0x1430 [ 43.898314][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 43.903171][ T3612] ? rwlock_bug.part.0+0x90/0x90 [ 43.908146][ T3612] ? __local_bh_enable_ip+0xa0/0x120 [ 43.913432][ T3612] ? __check_object_size+0x2d/0x700 [ 43.918682][ T3612] raw_sendmsg+0x538/0x790 [ 43.923458][ T3612] ? dgram_sendmsg+0xd90/0xd90 [ 43.928250][ T3612] ? __import_iovec+0x1f7/0x610 [ 43.933116][ T3612] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 43.938465][ T3612] ? ieee802154_sock_release+0xa0/0xa0 [ 43.943940][ T3612] sock_sendmsg+0xcf/0x120 [ 43.948600][ T3612] ____sys_sendmsg+0x334/0x810 [ 43.953362][ T3612] ? copy_msghdr_from_user+0xfc/0x150 [ 43.958795][ T3612] ? kernel_sendmsg+0x50/0x50 [ 43.963482][ T3612] ___sys_sendmsg+0x110/0x1b0 [ 43.968185][ T3612] ? do_recvmmsg+0x6e0/0x6e0 [ 43.972790][ T3612] ? __lock_acquire+0x166e/0x56d0 [ 43.977866][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 43.983854][ T3612] ? lockdep_hardirqs_on+0x79/0x100 [ 43.989089][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 43.995073][ T3612] ? __switch_to+0x5cc/0x1050 [ 43.999800][ T3612] ? __fget_light+0x20a/0x270 [ 44.004577][ T3612] __sys_sendmmsg+0x18b/0x460 [ 44.009304][ T3612] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 44.014353][ T3612] ? _raw_spin_lock_irq+0x41/0x50 [ 44.019427][ T3612] ? find_held_lock+0x2d/0x110 [ 44.024202][ T3612] ? ptrace_notify+0xfa/0x140 [ 44.028954][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 44.033814][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.039076][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.044286][ T3612] ? lockdep_hardirqs_on+0x79/0x100 [ 44.049517][ T3612] __x64_sys_sendmmsg+0x99/0x100 [ 44.054461][ T3612] do_syscall_64+0x35/0xb0 [ 44.058916][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.064816][ T3612] RIP: 0033:0x7f8fb64ffb99 [ 44.069283][ T3612] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.088950][ T3612] RSP: 002b:00007ffca8a8c7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 44.097445][ T3612] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fb64ffb99 [ 44.105536][ T3612] RDX: 0000000000000002 RSI: 00000000200033c0 RDI: 0000000000000003 [ 44.113542][ T3612] RBP: 00007f8fb64c3d40 R08: 0000000000000000 R09: 0000000000000000 [ 44.121548][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8fb64c3dd0 [ 44.129554][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.137555][ T3612] [ 44.140566][ T3612] Kernel panic - not syncing: panic_on_warn set ... [ 44.147130][ T3612] CPU: 1 PID: 3612 Comm: syz-executor281 Not tainted 6.0.0-rc1-syzkaller-00399-g15b3f48a4339 #0 [ 44.157603][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 44.167656][ T3612] Call Trace: [ 44.170930][ T3612] [ 44.173841][ T3612] dump_stack_lvl+0xcd/0x134 [ 44.178503][ T3612] panic+0x2c8/0x627 [ 44.182379][ T3612] ? panic_print_sys_info.part.0+0x10b/0x10b [ 44.188342][ T3612] ? __warn.cold+0x248/0x2c4 [ 44.192928][ T3612] ? __dev_queue_xmit+0x23a8/0x3ad0 [ 44.198106][ T3612] __warn.cold+0x259/0x2c4 [ 44.202503][ T3612] ? __dev_queue_xmit+0x23a8/0x3ad0 [ 44.207687][ T3612] report_bug+0x1bc/0x210 [ 44.212015][ T3612] handle_bug+0x3c/0x60 [ 44.216164][ T3612] exc_invalid_op+0x14/0x40 [ 44.220836][ T3612] asm_exc_invalid_op+0x16/0x20 [ 44.225678][ T3612] RIP: 0010:__dev_queue_xmit+0x23a8/0x3ad0 [ 44.231475][ T3612] Code: 89 de e8 3b 94 25 fa 84 db 75 21 e8 b2 97 25 fa 48 c7 c6 60 57 f4 8a 48 c7 c7 60 2b f4 8a c6 05 53 1a 73 06 01 e8 e5 c8 e3 01 <0f> 0b e8 91 97 25 fa 0f b6 1d 3f 1a 73 06 31 ff 89 de e8 01 94 25 [ 44.251075][ T3612] RSP: 0018:ffffc9000375f768 EFLAGS: 00010286 [ 44.257131][ T3612] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 44.265101][ T3612] RDX: ffff88807d1a9d80 RSI: ffffffff8161f5a8 RDI: fffff520006ebedf [ 44.273060][ T3612] RBP: ffff88801bbba83a R08: 0000000000000005 R09: 0000000000000000 [ 44.281020][ T3612] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000 [ 44.288980][ T3612] R13: 0000000000000000 R14: ffff88801bbba790 R15: ffff88801bbba780 [ 44.296949][ T3612] ? vprintk+0x88/0x90 [ 44.301015][ T3612] ? __dev_queue_xmit+0x23a8/0x3ad0 [ 44.306210][ T3612] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 44.311572][ T3612] ? __might_fault+0x142/0x170 [ 44.316335][ T3612] ? _copy_from_iter+0x239/0x11c0 [ 44.321445][ T3612] ? _copy_mc_to_iter+0x1430/0x1430 [ 44.326635][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 44.331478][ T3612] ? rwlock_bug.part.0+0x90/0x90 [ 44.336412][ T3612] ? __local_bh_enable_ip+0xa0/0x120 [ 44.341692][ T3612] ? __check_object_size+0x2d/0x700 [ 44.346893][ T3612] raw_sendmsg+0x538/0x790 [ 44.351479][ T3612] ? dgram_sendmsg+0xd90/0xd90 [ 44.356324][ T3612] ? __import_iovec+0x1f7/0x610 [ 44.361168][ T3612] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 44.366535][ T3612] ? ieee802154_sock_release+0xa0/0xa0 [ 44.372006][ T3612] sock_sendmsg+0xcf/0x120 [ 44.376415][ T3612] ____sys_sendmsg+0x334/0x810 [ 44.381169][ T3612] ? copy_msghdr_from_user+0xfc/0x150 [ 44.386534][ T3612] ? kernel_sendmsg+0x50/0x50 [ 44.391216][ T3612] ___sys_sendmsg+0x110/0x1b0 [ 44.395884][ T3612] ? do_recvmmsg+0x6e0/0x6e0 [ 44.400466][ T3612] ? __lock_acquire+0x166e/0x56d0 [ 44.405487][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 44.411459][ T3612] ? lockdep_hardirqs_on+0x79/0x100 [ 44.416650][ T3612] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 44.422620][ T3612] ? __switch_to+0x5cc/0x1050 [ 44.427294][ T3612] ? __fget_light+0x20a/0x270 [ 44.431964][ T3612] __sys_sendmmsg+0x18b/0x460 [ 44.436636][ T3612] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 44.441652][ T3612] ? _raw_spin_lock_irq+0x41/0x50 [ 44.446680][ T3612] ? find_held_lock+0x2d/0x110 [ 44.451439][ T3612] ? ptrace_notify+0xfa/0x140 [ 44.456111][ T3612] ? lock_downgrade+0x6e0/0x6e0 [ 44.460957][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.466151][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40 [ 44.471336][ T3612] ? lockdep_hardirqs_on+0x79/0x100 [ 44.476528][ T3612] __x64_sys_sendmmsg+0x99/0x100 [ 44.481461][ T3612] do_syscall_64+0x35/0xb0 [ 44.485873][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.491756][ T3612] RIP: 0033:0x7f8fb64ffb99 [ 44.496160][ T3612] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.515762][ T3612] RSP: 002b:00007ffca8a8c7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 44.524173][ T3612] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fb64ffb99 [ 44.532131][ T3612] RDX: 0000000000000002 RSI: 00000000200033c0 RDI: 0000000000000003 [ 44.540090][ T3612] RBP: 00007f8fb64c3d40 R08: 0000000000000000 R09: 0000000000000000 [ 44.548049][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8fb64c3dd0 [ 44.556010][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.563979][ T3612] [ 44.567980][ T3612] Kernel Offset: disabled [ 44.572343][ T3612] Rebooting in 86400 seconds..