./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor424999383
<...>
DUID 00:04:bb:a2:40:ae:48:ac:17:b5:4c:fd:37:63:df:39:12:a9
forked to background, child pid 4657
[ 34.527720][ T4658] 8021q: adding VLAN 0 to HW filter on device bond0
[ 34.536777][ T4658] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.94' (ECDSA) to the list of known hosts.
execve("./syz-executor424999383", ["./syz-executor424999383"], 0x7ffddce66d60 /* 10 vars */) = 0
brk(NULL) = 0x555557036000
brk(0x555557036c40) = 0x555557036c40
arch_prctl(ARCH_SET_FS, 0x555557036300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor424999383", 4096) = 27
brk(0x555557057c40) = 0x555557057c40
brk(0x555557058000) = 0x555557058000
mprotect(0x7f5b7b04b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached
, child_tidptr=0x5555570365d0) = 5080
[pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5080] setpgid(0, 0) = 0
[pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5080] write(3, "1000", 4) = 4
[pid 5080] close(3) = 0
[pid 5080] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 3
[pid 5080] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4
[pid 5080] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5
[pid 5080] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address)
[pid 5080] getsockname(5, {sa_family=AF_NETLINK, nl_pid=5080, nl_groups=00000000}, [20 => 12]) = 0
[pid 5080] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x00\x00\x00\x10\x00\x37\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x13\x00\x00\x83\x04\x05\x00\x00\x00\x00\x00\x1c\x00\x12\x80\x0e\x00\x01\x00\x69\x70\x36\x65\x72\x73\x70\x61\x6e\x00\x00\x00\x08\x00\x02\x80\x04\x00\x12\x00", iov_len=60}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60
[pid 5080] setsockopt(3, SOL_PACKET, PACKET_QDISC_BYPASS, [1024], 4) = 0
syzkaller login: [ 51.780693][ T5080] ------------[ cut here ]------------
[ 51.786438][ T5080] WARNING: CPU: 1 PID: 5080 at include/linux/skbuff.h:2875 ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 51.797008][ T5080] Modules linked in:
[ 51.800963][ T5080] CPU: 1 PID: 5080 Comm: syz-executor424 Not tainted 6.3.0-rc3-syzkaller #0
[ 51.809720][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 51.819890][ T5080] RIP: 0010:ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 51.826238][ T5080] Code: 04 02 41 01 de 84 c0 74 08 3c 03 0f 8e 1c 0a 00 00 45 89 b4 24 c8 00 00 00 c6 85 77 fe ff ff 01 e9 33 e7 ff ff e8 d4 f0 a2 f8 <0f> 0b e9 b6 e7 ff ff e8 c8 f0 a2 f8 49 8d bf f0 0c 00 00 48 b8 00
[ 51.845920][ T5080] RSP: 0018:ffffc90003d9f838 EFLAGS: 00010293
[ 51.852082][ T5080] RAX: 0000000000000000 RBX: 000000000000ffff RCX: 0000000000000000
[ 51.860171][ T5080] RDX: ffff8880248b0000 RSI: ffffffff88dff42c RDI: 0000000000000003
[ 51.868231][ T5080] RBP: ffffc90003d9f9e0 R08: 0000000000000003 R09: 000000000000ffff
[ 51.876277][ T5080] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880292c8c80
[ 51.884343][ T5080] R13: 00000000000000d0 R14: ffff88802a83ded0 R15: ffff88802236a000
[ 51.892377][ T5080] FS: 0000555557036300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 51.901348][ T5080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.908016][ T5080] CR2: 00007ffc0bed8dd0 CR3: 0000000029a50000 CR4: 00000000003506e0
[ 51.916051][ T5080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 51.924107][ T5080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 51.932184][ T5080] Call Trace:
[ 51.935496][ T5080]
[ 51.938462][ T5080] ? ip6gre_fill_info+0xd30/0xd30
[ 51.943604][ T5080] ? lock_release+0x670/0x670
[ 51.948330][ T5080] ? do_raw_spin_lock+0x124/0x2b0
[ 51.953446][ T5080] ? spin_bug+0x1c0/0x1c0
[ 51.957829][ T5080] ? validate_xmit_skb+0x816/0xe60
[ 51.963049][ T5080] __dev_direct_xmit+0x504/0x730
[ 51.968051][ T5080] ? validate_xmit_skb_list+0x130/0x130
[ 51.973696][ T5080] ? netdev_pick_tx+0x152/0xc60
[ 51.978609][ T5080] packet_direct_xmit+0x1b7/0x310
[ 51.983767][ T5080] packet_sendmsg+0x33aa/0x55d0
[ 51.988708][ T5080] ? aa_sk_perm+0x31d/0xb10
[ 51.993336][ T5080] ? packet_lookup_frame.isra.0+0x1c0/0x1c0
[ 51.999285][ T5080] ? aa_af_perm+0x240/0x240
[ 52.003899][ T5080] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 52.009319][ T5080] ? packet_lookup_frame.isra.0+0x1c0/0x1c0
[ 52.015324][ T5080] sock_sendmsg+0xde/0x190
[ 52.019801][ T5080] __sys_sendto+0x23a/0x340
[ 52.024403][ T5080] ? __ia32_sys_getpeername+0xb0/0xb0
[ 52.029843][ T5080] ? do_raw_spin_lock+0x124/0x2b0
[ 52.034988][ T5080] ? lock_downgrade+0x690/0x690
[ 52.039891][ T5080] ? _raw_spin_unlock_irq+0x23/0x50
[ 52.045192][ T5080] ? lockdep_hardirqs_on+0x7d/0x100
[ 52.050440][ T5080] __x64_sys_sendto+0xe1/0x1b0
[ 52.055307][ T5080] ? syscall_trace_enter.constprop.0+0xb0/0x1e0
[ 52.061600][ T5080] do_syscall_64+0x39/0xb0
[ 52.066109][ T5080] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.072076][ T5080] RIP: 0033:0x7f5b7afde039
[ 52.076528][ T5080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.096224][ T5080] RSP: 002b:00007fff92039f78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 52.104761][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b7afde039
[ 52.112834][ T5080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 52.120837][ T5080] RBP: 0000000000000000 R08: 0000000020000040 R09: 0000000000000014
[ 52.128898][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b7afa18c0
[ 52.136972][ T5080] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 52.145062][ T5080]
[ 52.148113][ T5080] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 52.155446][ T5080] CPU: 1 PID: 5080 Comm: syz-executor424 Not tainted 6.3.0-rc3-syzkaller #0
[ 52.164158][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 52.174255][ T5080] Call Trace:
[ 52.177559][ T5080]
[ 52.180514][ T5080] dump_stack_lvl+0xd9/0x150
[ 52.185146][ T5080] panic+0x688/0x730
[ 52.189078][ T5080] ? panic_smp_self_stop+0x90/0x90
[ 52.194259][ T5080] ? show_trace_log_lvl+0x285/0x390
[ 52.199529][ T5080] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 52.205217][ T5080] check_panic_on_warn+0xb1/0xc0
[ 52.210205][ T5080] __warn+0xf2/0x390
[ 52.214144][ T5080] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 52.219840][ T5080] report_bug+0x2da/0x500
[ 52.224222][ T5080] handle_bug+0x3c/0x70
[ 52.228420][ T5080] exc_invalid_op+0x18/0x50
[ 52.232969][ T5080] asm_exc_invalid_op+0x1a/0x20
[ 52.237871][ T5080] RIP: 0010:ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 52.244252][ T5080] Code: 04 02 41 01 de 84 c0 74 08 3c 03 0f 8e 1c 0a 00 00 45 89 b4 24 c8 00 00 00 c6 85 77 fe ff ff 01 e9 33 e7 ff ff e8 d4 f0 a2 f8 <0f> 0b e9 b6 e7 ff ff e8 c8 f0 a2 f8 49 8d bf f0 0c 00 00 48 b8 00
[ 52.263994][ T5080] RSP: 0018:ffffc90003d9f838 EFLAGS: 00010293
[ 52.270102][ T5080] RAX: 0000000000000000 RBX: 000000000000ffff RCX: 0000000000000000
[ 52.278105][ T5080] RDX: ffff8880248b0000 RSI: ffffffff88dff42c RDI: 0000000000000003
[ 52.286144][ T5080] RBP: ffffc90003d9f9e0 R08: 0000000000000003 R09: 000000000000ffff
[ 52.294148][ T5080] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880292c8c80
[ 52.302152][ T5080] R13: 00000000000000d0 R14: ffff88802a83ded0 R15: ffff88802236a000
[ 52.310252][ T5080] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 52.315945][ T5080] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 52.321644][ T5080] ? ip6gre_fill_info+0xd30/0xd30
[ 52.326735][ T5080] ? lock_release+0x670/0x670
[ 52.331488][ T5080] ? do_raw_spin_lock+0x124/0x2b0
[ 52.336561][ T5080] ? spin_bug+0x1c0/0x1c0
[ 52.340937][ T5080] ? validate_xmit_skb+0x816/0xe60
[ 52.346142][ T5080] __dev_direct_xmit+0x504/0x730
[ 52.351135][ T5080] ? validate_xmit_skb_list+0x130/0x130
[ 52.356749][ T5080] ? netdev_pick_tx+0x152/0xc60
[ 52.361655][ T5080] packet_direct_xmit+0x1b7/0x310
[ 52.366746][ T5080] packet_sendmsg+0x33aa/0x55d0
[ 52.371679][ T5080] ? aa_sk_perm+0x31d/0xb10
[ 52.376245][ T5080] ? packet_lookup_frame.isra.0+0x1c0/0x1c0
[ 52.382204][ T5080] ? aa_af_perm+0x240/0x240
[ 52.386771][ T5080] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 52.392098][ T5080] ? packet_lookup_frame.isra.0+0x1c0/0x1c0
[ 52.398048][ T5080] sock_sendmsg+0xde/0x190
[ 52.402517][ T5080] __sys_sendto+0x23a/0x340
[ 52.407078][ T5080] ? __ia32_sys_getpeername+0xb0/0xb0
[ 52.412507][ T5080] ? do_raw_spin_lock+0x124/0x2b0
[ 52.417602][ T5080] ? lock_downgrade+0x690/0x690
[ 52.422500][ T5080] ? _raw_spin_unlock_irq+0x23/0x50
[ 52.427760][ T5080] ? lockdep_hardirqs_on+0x7d/0x100
[ 52.433012][ T5080] __x64_sys_sendto+0xe1/0x1b0
[ 52.437866][ T5080] ? syscall_trace_enter.constprop.0+0xb0/0x1e0
[ 52.444166][ T5080] do_syscall_64+0x39/0xb0
[ 52.448626][ T5080] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.454571][ T5080] RIP: 0033:0x7f5b7afde039
[ 52.459059][ T5080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.478799][ T5080] RSP: 002b:00007fff92039f78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 52.487259][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b7afde039
[ 52.495270][ T5080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 52.503308][ T5080] RBP: 0000000000000000 R08: 0000000020000040 R09: 0000000000000014
[ 52.511308][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b7afa18c0
[ 52.519316][ T5080] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 52.527343][ T5080]
[ 52.530454][ T5080] Kernel Offset: disabled
[ 52.534892][ T5080] Rebooting in 86400 seconds..