./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1996251520 <...> Warning: Permanently added '10.128.1.119' (ECDSA) to the list of known hosts. execve("./syz-executor1996251520", ["./syz-executor1996251520"], 0x7fff758507c0 /* 10 vars */) = 0 brk(NULL) = 0x555556c9e000 brk(0x555556c9ec40) = 0x555556c9ec40 arch_prctl(ARCH_SET_FS, 0x555556c9e300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1996251520", 4096) = 28 brk(0x555556cbfc40) = 0x555556cbfc40 brk(0x555556cc0000) = 0x555556cc0000 mprotect(0x7fd4186e3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/ppp", O_RDWR|O_NONBLOCK|O_NOATIME|O_CLOEXEC) = 3 ioctl(3, PPPIOCNEWUNIT, 0x200000c0) = 0 ioctl(3, PPPIOCSACTIVE, 0x20000240) = 0 syzkaller login: [ 42.474878][ T3611] ------------[ cut here ]------------ [ 42.480378][ T3611] WARNING: CPU: 0 PID: 3611 at net/core/flow_dissector.c:1016 __skb_flow_dissect+0x947/0x5920 [ 42.490681][ T3611] Modules linked in: [ 42.494563][ T3611] CPU: 0 PID: 3611 Comm: syz-executor199 Not tainted 6.1.0-rc2-syzkaller-00287-g34e0b9452030 #0 [ 42.504968][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 42.515030][ T3611] RIP: 0010:__skb_flow_dissect+0x947/0x5920 [ 42.520940][ T3611] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 17 42 26 fa 48 85 db 0f 85 84 f8 ff ff e8 09 42 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 f3 41 26 fa [ 42.540566][ T3611] RSP: 0018:ffffc90003a5f628 EFLAGS: 00010293 [ 42.546628][ T3611] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 42.554596][ T3611] RDX: ffff88802095d7c0 RSI: ffffffff875659b7 RDI: ffff88801e14b518 [ 42.562563][ T3611] RBP: ffffffff8de29bc6 R08: 0000000000000001 R09: 0000000000000000 [ 42.570544][ T3611] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de29bc4 [ 42.578507][ T3611] R13: 0000000000000000 R14: ffffffff8de29bc0 R15: ffff88801e14b500 [ 42.586477][ T3611] FS: 0000555556c9e300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 42.595416][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.602001][ T3611] CR2: 000055c121a13550 CR3: 0000000022ac5000 CR4: 00000000003506f0 [ 42.609966][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.617937][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.625902][ T3611] Call Trace: [ 42.629169][ T3611] [ 42.632102][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 42.636947][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 42.641889][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.647410][ T3611] ? bpf_flow_dissect+0x360/0x360 [ 42.652441][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.657886][ T3611] ? lock_acquire+0x4fc/0x630 [ 42.662564][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.668010][ T3611] ? lock_release+0x5cb/0x810 [ 42.672687][ T3611] ? is_bpf_text_address+0x77/0x170 [ 42.677887][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 42.682751][ T3611] ? unwind_next_frame+0xfa9/0x1cc0 [ 42.687947][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.693415][ T3611] ? lock_acquire+0x4fc/0x630 [ 42.698084][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.703552][ T3611] ? lock_release+0x5cb/0x810 [ 42.708220][ T3611] ? __kernel_text_address+0x9/0x30 [ 42.713433][ T3611] ? __stack_depot_save+0x260/0x560 [ 42.718624][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 42.723475][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 42.728403][ T3611] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 42.734216][ T3611] ? trace_hardirqs_on+0x2d/0x160 [ 42.739229][ T3611] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 42.745049][ T3611] ? __stack_depot_save+0x260/0x560 [ 42.750239][ T3611] ? ppp_write+0xb3/0x2d0 [ 42.754574][ T3611] ? kasan_save_stack+0x31/0x40 [ 42.759415][ T3611] ? kasan_save_stack+0x1e/0x40 [ 42.764268][ T3611] ? kasan_set_track+0x21/0x30 [ 42.769026][ T3611] ? __kasan_kmalloc+0xa1/0xb0 [ 42.773795][ T3611] ? __kmalloc_node_track_caller+0x55/0xc0 [ 42.779590][ T3611] ? __alloc_skb+0xd9/0x2f0 [ 42.784098][ T3611] ? ppp_write+0xb3/0x2d0 [ 42.788420][ T3611] ? do_iter_write+0x4ef/0x700 [ 42.793187][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.798631][ T3611] ? lock_acquire+0x4fc/0x630 [ 42.803311][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.808758][ T3611] skb_get_poff+0x99/0x1a0 [ 42.813181][ T3611] ? __skb_get_poff+0x290/0x290 [ 42.818025][ T3611] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 42.823838][ T3611] ? trace_hardirqs_on+0x2d/0x160 [ 42.828849][ T3611] bpf_skb_get_pay_offset+0x11/0x20 [ 42.834049][ T3611] ? __ppp_xmit_process+0x9a6/0x17b0 [ 42.839327][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.844784][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 42.849625][ T3611] ? ppp_receive_nonmp_frame+0x2000/0x2000 [ 42.855441][ T3611] ? ppp_xmit_process+0x161/0x2f0 [ 42.860477][ T3611] ? ppp_write+0x239/0x2d0 [ 42.864936][ T3611] ? do_iter_write+0x4ef/0x700 [ 42.869708][ T3611] ? vfs_writev+0x1aa/0x630 [ 42.874233][ T3611] ? vfs_iter_write+0xa0/0xa0 [ 42.878904][ T3611] ? do_raw_spin_lock+0x120/0x2a0 [ 42.883933][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 42.888867][ T3611] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 42.894341][ T3611] ? ptrace_stop.part.0+0x5f4/0x8c0 [ 42.899531][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.904990][ T3611] ? lock_release+0x5cb/0x810 [ 42.909656][ T3611] ? ptrace_notify+0xfa/0x140 [ 42.914339][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 42.919184][ T3611] ? __x64_sys_pwritev+0x22b/0x310 [ 42.924305][ T3611] ? __ia32_sys_preadv2+0x150/0x150 [ 42.929500][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40 [ 42.934706][ T3611] ? ptrace_notify+0xfa/0x140 [ 42.939372][ T3611] ? do_syscall_64+0x35/0xb0 [ 42.943970][ T3611] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.950035][ T3611] [ 42.953054][ T3611] Kernel panic - not syncing: panic_on_warn set ... [ 42.959621][ T3611] CPU: 0 PID: 3611 Comm: syz-executor199 Not tainted 6.1.0-rc2-syzkaller-00287-g34e0b9452030 #0 [ 42.970013][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 42.980050][ T3611] Call Trace: [ 42.983319][ T3611] [ 42.986238][ T3611] dump_stack_lvl+0xcd/0x134 [ 42.990824][ T3611] panic+0x2c8/0x622 [ 42.994712][ T3611] ? panic_print_sys_info.part.0+0x110/0x110 [ 43.000684][ T3611] ? __warn.cold+0x24b/0x350 [ 43.005268][ T3611] ? __skb_flow_dissect+0x947/0x5920 [ 43.010549][ T3611] __warn.cold+0x25c/0x350 [ 43.014960][ T3611] ? __skb_flow_dissect+0x947/0x5920 [ 43.020240][ T3611] report_bug+0x1bc/0x210 [ 43.024561][ T3611] handle_bug+0x3c/0x70 [ 43.028700][ T3611] exc_invalid_op+0x14/0x40 [ 43.034751][ T3611] asm_exc_invalid_op+0x16/0x20 [ 43.039593][ T3611] RIP: 0010:__skb_flow_dissect+0x947/0x5920 [ 43.045481][ T3611] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 17 42 26 fa 48 85 db 0f 85 84 f8 ff ff e8 09 42 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 f3 41 26 fa [ 43.065086][ T3611] RSP: 0018:ffffc90003a5f628 EFLAGS: 00010293 [ 43.071146][ T3611] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 43.079111][ T3611] RDX: ffff88802095d7c0 RSI: ffffffff875659b7 RDI: ffff88801e14b518 [ 43.087066][ T3611] RBP: ffffffff8de29bc6 R08: 0000000000000001 R09: 0000000000000000 [ 43.095028][ T3611] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de29bc4 [ 43.102984][ T3611] R13: 0000000000000000 R14: ffffffff8de29bc0 R15: ffff88801e14b500 [ 43.110949][ T3611] ? __skb_flow_dissect+0x947/0x5920 [ 43.116249][ T3611] ? __skb_flow_dissect+0x947/0x5920 [ 43.121598][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 43.126438][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 43.131364][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.136806][ T3611] ? bpf_flow_dissect+0x360/0x360 [ 43.141820][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.147262][ T3611] ? lock_acquire+0x4fc/0x630 [ 43.151929][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.157372][ T3611] ? lock_release+0x5cb/0x810 [ 43.162035][ T3611] ? is_bpf_text_address+0x77/0x170 [ 43.167224][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 43.172063][ T3611] ? unwind_next_frame+0xfa9/0x1cc0 [ 43.177251][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.182705][ T3611] ? lock_acquire+0x4fc/0x630 [ 43.187385][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.192833][ T3611] ? lock_release+0x5cb/0x810 [ 43.197505][ T3611] ? __kernel_text_address+0x9/0x30 [ 43.202701][ T3611] ? __stack_depot_save+0x260/0x560 [ 43.207892][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 43.212741][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 43.217674][ T3611] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 43.223481][ T3611] ? trace_hardirqs_on+0x2d/0x160 [ 43.228499][ T3611] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 43.234297][ T3611] ? __stack_depot_save+0x260/0x560 [ 43.239487][ T3611] ? ppp_write+0xb3/0x2d0 [ 43.243811][ T3611] ? kasan_save_stack+0x31/0x40 [ 43.248657][ T3611] ? kasan_save_stack+0x1e/0x40 [ 43.253498][ T3611] ? kasan_set_track+0x21/0x30 [ 43.258252][ T3611] ? __kasan_kmalloc+0xa1/0xb0 [ 43.263018][ T3611] ? __kmalloc_node_track_caller+0x55/0xc0 [ 43.268827][ T3611] ? __alloc_skb+0xd9/0x2f0 [ 43.273329][ T3611] ? ppp_write+0xb3/0x2d0 [ 43.277652][ T3611] ? do_iter_write+0x4ef/0x700 [ 43.282412][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.287866][ T3611] ? lock_acquire+0x4fc/0x630 [ 43.292537][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.297990][ T3611] skb_get_poff+0x99/0x1a0 [ 43.302407][ T3611] ? __skb_get_poff+0x290/0x290 [ 43.307335][ T3611] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 43.313134][ T3611] ? trace_hardirqs_on+0x2d/0x160 [ 43.318146][ T3611] bpf_skb_get_pay_offset+0x11/0x20 [ 43.323335][ T3611] ? __ppp_xmit_process+0x9a6/0x17b0 [ 43.328618][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.334063][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 43.338904][ T3611] ? ppp_receive_nonmp_frame+0x2000/0x2000 [ 43.344709][ T3611] ? ppp_xmit_process+0x161/0x2f0 [ 43.349727][ T3611] ? ppp_write+0x239/0x2d0 [ 43.354143][ T3611] ? do_iter_write+0x4ef/0x700 [ 43.358910][ T3611] ? vfs_writev+0x1aa/0x630 [ 43.363404][ T3611] ? vfs_iter_write+0xa0/0xa0 [ 43.368073][ T3611] ? do_raw_spin_lock+0x120/0x2a0 [ 43.373085][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 43.378010][ T3611] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 43.383464][ T3611] ? ptrace_stop.part.0+0x5f4/0x8c0 [ 43.388674][ T3611] ? rcu_read_lock_sched_held+0xd/0x70 [ 43.394118][ T3611] ? lock_release+0x5cb/0x810 [ 43.398782][ T3611] ? ptrace_notify+0xfa/0x140 [ 43.403445][ T3611] ? lock_downgrade+0x6e0/0x6e0 [ 43.408283][ T3611] ? __x64_sys_pwritev+0x22b/0x310 [ 43.413394][ T3611] ? __ia32_sys_preadv2+0x150/0x150 [ 43.418590][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40 [ 43.423777][ T3611] ? ptrace_notify+0xfa/0x140 [ 43.428451][ T3611] ? do_syscall_64+0x35/0xb0 [ 43.433121][ T3611] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.439183][ T3611] [ 43.442348][ T3611] Kernel Offset: disabled [ 43.446663][ T3611] Rebooting in 86400 seconds..