./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4292742795 <...> Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. execve("./syz-executor4292742795", ["./syz-executor4292742795"], 0x7ffdb759dad0 /* 10 vars */) = 0 brk(NULL) = 0x555576c60000 brk(0x555576c60d00) = 0x555576c60d00 arch_prctl(ARCH_SET_FS, 0x555576c60380) = 0 set_tid_address(0x555576c60650) = 5084 set_robust_list(0x555576c60660, 24) = 0 rseq(0x555576c60ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4292742795", 4096) = 28 getrandom("\xc4\x95\xab\xf2\xc3\x51\x7a\xcb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555576c60d00 brk(0x555576c81d00) = 0x555576c81d00 brk(0x555576c82000) = 0x555576c82000 mprotect(0x7fbbc295e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576c60650) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5085] set_robust_list(0x555576c60660, 24) = 0 [pid 5085] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setsid() = 1 [pid 5085] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5085] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5085] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5085] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5085] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5085] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5085] unshare(CLONE_NEWNS) = 0 [pid 5085] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5085] unshare(CLONE_NEWIPC) = 0 [pid 5085] unshare(CLONE_NEWCGROUP) = 0 [pid 5085] unshare(CLONE_NEWUTS) = 0 [pid 5085] unshare(CLONE_SYSVSEM) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "16777216", 8) = 8 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "536870912", 9) = 9 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1024", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "8192", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1024", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1024", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5085] close(3) = 0 [pid 5085] getpid() = 1 [pid 5085] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 90 e9 09 fc ff ff 44 89 e7 89 ee e8 6f 73 91 f7 41 39 ec 0f [ 84.361762][ T5097] RSP: 0018:ffffc9000346ee00 EFLAGS: 00010293 [ 84.367924][ T5097] RAX: ffffffff8a048f9e RBX: ffff88801e8515d8 RCX: ffff888022cd5a00 [ 84.375957][ T5097] RDX: 0000000000000000 RSI: 00000000ffffffb6 RDI: 0000000000000000 [ 84.384029][ T5097] RBP: 00000000ffffffb6 R08: ffffffff8a048ba2 R09: 1ffffffff1f51fad [ 84.392120][ T5097] R10: dffffc0000000000 R11: ffffffff8a048aa0 R12: 0000000000000000 [ 84.400187][ T5097] R13: ffff88801e851500 R14: ffff88802ac5e000 R15: dffffc0000000000 [ 84.410161][ T5097] FS: 0000555576c60380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 84.419175][ T5097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.425792][ T5097] CR2: 0000000020010000 CR3: 00000000240fa000 CR4: 00000000003506f0 [ 84.433868][ T5097] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.441909][ T5097] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.449982][ T5097] Call Trace: [ 84.453292][ T5097] [ 84.456246][ T5097] ? __warn+0x163/0x4e0 [ 84.460770][ T5097] ? gre_tap_xmit+0x4ff/0x6e0 [ 84.465525][ T5097] ? report_bug+0x2b3/0x500 [ 84.470122][ T5097] ? gre_tap_xmit+0x4ff/0x6e0 [ 84.474853][ T5097] ? handle_bug+0x3e/0x70 [ 84.479262][ T5097] ? exc_invalid_op+0x1a/0x50 [ 84.483979][ T5097] ? asm_exc_invalid_op+0x1a/0x20 [ 84.489122][ T5097] ? __pfx_gre_tap_xmit+0x10/0x10 [ 84.494219][ T5097] ? gre_tap_xmit+0x102/0x6e0 [ 84.499095][ T5097] ? gre_tap_xmit+0x4fe/0x6e0 [ 84.503839][ T5097] ? gre_tap_xmit+0x4ff/0x6e0 [ 84.508647][ T5097] dev_hard_start_xmit+0x27a/0x7e0 [ 84.513840][ T5097] sch_direct_xmit+0x2b6/0x5f0 [ 84.518710][ T5097] ? __pfx_sch_direct_xmit+0x10/0x10 [ 84.524040][ T5097] __dev_queue_xmit+0x19eb/0x3ca0 [ 84.529171][ T5097] ? __dev_queue_xmit+0x2c7/0x3ca0 [ 84.534334][ T5097] ? __pfx___dev_queue_xmit+0x10/0x10 [ 84.539790][ T5097] ? netdev_lower_get_next_private_rcu+0x9e/0x100 [ 84.546266][ T5097] ? bond_get_slave_by_id+0x5c8/0x5d0 [ 84.551728][ T5097] ? __pfx_lock_release+0x10/0x10 [ 84.556829][ T5097] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 84.562587][ T5097] ? bond_xmit_roundrobin_slave_get+0x24c/0x420 [ 84.568909][ T5097] bond_start_xmit+0x1389/0x1c40 [ 84.573882][ T5097] ? bond_start_xmit+0x128/0x1c40 [ 84.578978][ T5097] ? __pfx_bond_start_xmit+0x10/0x10 [ 84.584295][ T5097] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.590348][ T5097] ? validate_xmit_xfrm+0xc1/0x1260 [ 84.595589][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.602001][ T5097] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 84.607641][ T5097] ? validate_xmit_skb+0x5b5/0x1120 [ 84.613121][ T5097] ? kmem_cache_free+0x10b/0x2c0 [ 84.618142][ T5097] ? validate_xmit_skb+0xa04/0x1120 [ 84.623390][ T5097] dev_hard_start_xmit+0x27a/0x7e0 [ 84.628635][ T5097] __dev_queue_xmit+0x1ad1/0x3ca0 [ 84.633724][ T5097] ? __pskb_pull_tail+0xaee/0x1490 [ 84.638960][ T5097] ? __dev_queue_xmit+0x2c7/0x3ca0 [ 84.644128][ T5097] ? __pfx___dev_queue_xmit+0x10/0x10 [ 84.649594][ T5097] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 84.655238][ T5097] ? packet_parse_headers+0x7bd/0xad0 [ 84.660745][ T5097] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 84.666643][ T5097] ? packet_xmit+0x68/0x330 [ 84.671280][ T5097] packet_sendmsg+0x46a9/0x6130 [ 84.676169][ T5097] ? __pfx___might_resched+0x10/0x10 [ 84.681580][ T5097] ? aa_sk_perm+0x967/0xab0 [ 84.686132][ T5097] ? __pfx_packet_sendmsg+0x10/0x10 [ 84.691438][ T5097] ? __import_iovec+0x361/0x820 [ 84.696371][ T5097] ? aa_sock_msg_perm+0x91/0x160 [ 84.701350][ T5097] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 84.706726][ T5097] ? security_socket_sendmsg+0x87/0xb0 [ 84.712234][ T5097] ? __pfx_packet_sendmsg+0x10/0x10 [ 84.717505][ T5097] __sock_sendmsg+0x221/0x270 [ 84.722229][ T5097] ____sys_sendmsg+0x525/0x7d0 [ 84.727082][ T5097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.732405][ T5097] ? do_raw_spin_lock+0x14f/0x370 [ 84.737514][ T5097] __sys_sendmsg+0x2b0/0x3a0 [ 84.742147][ T5097] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.747340][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.753713][ T5097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 84.759019][ T5097] ? ptrace_notify+0x279/0x380 [ 84.763848][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.770273][ T5097] ? do_syscall_64+0x102/0x240 [ 84.775102][ T5097] do_syscall_64+0xf5/0x240 [ 84.779710][ T5097] ? clear_bhb_loop+0x35/0x90 [ 84.784431][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.790431][ T5097] RIP: 0033:0x7fbbc28e52d9 [ 84.794895][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.814769][ T5097] RSP: 002b:00007ffc060b5858 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.823373][ T5097] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbbc28e52d9 [ 84.831427][ T5097] RDX: 00000000200400c4 RSI: 0000000020000180 RDI: 0000000000000003 [ 84.839504][ T5097] RBP: 00007ffc060b5890 R08: 0000000000000000 R09: 0000000000000001 [ 84.847552][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000f4240 [ 84.855567][ T5097] R13: 00000000000147ce R14: 00007ffc060b5874 R15: 00007ffc060b5880 [ 84.863667][ T5097] [ 84.866742][ T5097] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.874023][ T5097] CPU: 1 PID: 5097 Comm: syz-executor429 Not tainted 6.9.0-rc5-syzkaller-00150-g52afb15e9d9a #0 [ 84.884471][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 84.894537][ T5097] Call Trace: [ 84.897834][ T5097] [ 84.900783][ T5097] dump_stack_lvl+0x241/0x360 [ 84.905504][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.910739][ T5097] ? __pfx__printk+0x10/0x10 [ 84.915388][ T5097] ? vscnprintf+0x5d/0x90 [ 84.919733][ T5097] panic+0x349/0x860 [ 84.923727][ T5097] ? __warn+0x172/0x4e0 [ 84.927915][ T5097] ? __pfx_panic+0x10/0x10 [ 84.932390][ T5097] __warn+0x346/0x4e0 [ 84.936400][ T5097] ? gre_tap_xmit+0x4ff/0x6e0 [ 84.941102][ T5097] report_bug+0x2b3/0x500 [ 84.945448][ T5097] ? gre_tap_xmit+0x4ff/0x6e0 [ 84.950151][ T5097] handle_bug+0x3e/0x70 [ 84.954313][ T5097] exc_invalid_op+0x1a/0x50 [ 84.958836][ T5097] asm_exc_invalid_op+0x1a/0x20 [ 84.963702][ T5097] RIP: 0010:gre_tap_xmit+0x4ff/0x6e0 [ 84.969010][ T5097] Code: 00 4c 89 ef 48 89 ee 48 89 da e8 7c 8f fb ff 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 c2 71 91 f7 90 <0f> 0b 90 e9 09 fc ff ff 44 89 e7 89 ee e8 6f 73 91 f7 41 39 ec 0f [ 84.988661][ T5097] RSP: 0018:ffffc9000346ee00 EFLAGS: 00010293 [ 84.994759][ T5097] RAX: ffffffff8a048f9e RBX: ffff88801e8515d8 RCX: ffff888022cd5a00 [ 85.002742][ T5097] RDX: 0000000000000000 RSI: 00000000ffffffb6 RDI: 0000000000000000 [ 85.010722][ T5097] RBP: 00000000ffffffb6 R08: ffffffff8a048ba2 R09: 1ffffffff1f51fad [ 85.018707][ T5097] R10: dffffc0000000000 R11: ffffffff8a048aa0 R12: 0000000000000000 [ 85.026695][ T5097] R13: ffff88801e851500 R14: ffff88802ac5e000 R15: dffffc0000000000 [ 85.034691][ T5097] ? __pfx_gre_tap_xmit+0x10/0x10 [ 85.039742][ T5097] ? gre_tap_xmit+0x102/0x6e0 [ 85.044458][ T5097] ? gre_tap_xmit+0x4fe/0x6e0 [ 85.049189][ T5097] dev_hard_start_xmit+0x27a/0x7e0 [ 85.054348][ T5097] sch_direct_xmit+0x2b6/0x5f0 [ 85.059150][ T5097] ? __pfx_sch_direct_xmit+0x10/0x10 [ 85.064462][ T5097] __dev_queue_xmit+0x19eb/0x3ca0 [ 85.069515][ T5097] ? __dev_queue_xmit+0x2c7/0x3ca0 [ 85.074643][ T5097] ? __pfx___dev_queue_xmit+0x10/0x10 [ 85.080032][ T5097] ? netdev_lower_get_next_private_rcu+0x9e/0x100 [ 85.086470][ T5097] ? bond_get_slave_by_id+0x5c8/0x5d0 [ 85.091857][ T5097] ? __pfx_lock_release+0x10/0x10 [ 85.097070][ T5097] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 85.102820][ T5097] ? bond_xmit_roundrobin_slave_get+0x24c/0x420 [ 85.109102][ T5097] bond_start_xmit+0x1389/0x1c40 [ 85.114069][ T5097] ? bond_start_xmit+0x128/0x1c40 [ 85.119105][ T5097] ? __pfx_bond_start_xmit+0x10/0x10 [ 85.124482][ T5097] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.130476][ T5097] ? validate_xmit_xfrm+0xc1/0x1260 [ 85.135691][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.142036][ T5097] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 85.147608][ T5097] ? validate_xmit_skb+0x5b5/0x1120 [ 85.152820][ T5097] ? kmem_cache_free+0x10b/0x2c0 [ 85.157778][ T5097] ? validate_xmit_skb+0xa04/0x1120 [ 85.162994][ T5097] dev_hard_start_xmit+0x27a/0x7e0 [ 85.168137][ T5097] __dev_queue_xmit+0x1ad1/0x3ca0 [ 85.173180][ T5097] ? __pskb_pull_tail+0xaee/0x1490 [ 85.178346][ T5097] ? __dev_queue_xmit+0x2c7/0x3ca0 [ 85.183481][ T5097] ? __pfx___dev_queue_xmit+0x10/0x10 [ 85.188871][ T5097] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 85.194460][ T5097] ? packet_parse_headers+0x7bd/0xad0 [ 85.199885][ T5097] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 85.205739][ T5097] ? packet_xmit+0x68/0x330 [ 85.210271][ T5097] packet_sendmsg+0x46a9/0x6130 [ 85.215335][ T5097] ? __pfx___might_resched+0x10/0x10 [ 85.220665][ T5097] ? aa_sk_perm+0x967/0xab0 [ 85.225187][ T5097] ? __pfx_packet_sendmsg+0x10/0x10 [ 85.230412][ T5097] ? __import_iovec+0x361/0x820 [ 85.235285][ T5097] ? aa_sock_msg_perm+0x91/0x160 [ 85.240240][ T5097] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 85.245546][ T5097] ? security_socket_sendmsg+0x87/0xb0 [ 85.251031][ T5097] ? __pfx_packet_sendmsg+0x10/0x10 [ 85.256242][ T5097] __sock_sendmsg+0x221/0x270 [ 85.260952][ T5097] ____sys_sendmsg+0x525/0x7d0 [ 85.265743][ T5097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.271073][ T5097] ? do_raw_spin_lock+0x14f/0x370 [ 85.276213][ T5097] __sys_sendmsg+0x2b0/0x3a0 [ 85.280819][ T5097] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.285963][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.292316][ T5097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 85.297536][ T5097] ? ptrace_notify+0x279/0x380 [ 85.302322][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.308698][ T5097] ? do_syscall_64+0x102/0x240 [ 85.313494][ T5097] do_syscall_64+0xf5/0x240 [ 85.318018][ T5097] ? clear_bhb_loop+0x35/0x90 [ 85.322712][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.328622][ T5097] RIP: 0033:0x7fbbc28e52d9 [ 85.333066][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.352770][ T5097] RSP: 002b:00007ffc060b5858 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.361198][ T5097] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbbc28e52d9 [ 85.369183][ T5097] RDX: 00000000200400c4 RSI: 0000000020000180 RDI: 0000000000000003 [ 85.377166][ T5097] RBP: 00007ffc060b5890 R08: 0000000000000000 R09: 0000000000000001 [ 85.385148][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000f4240 [ 85.393132][ T5097] R13: 00000000000147ce R14: 00007ffc060b5874 R15: 00007ffc060b5880 [ 85.401130][ T5097] [ 85.404431][ T5097] Kernel Offset: disabled [ 85.408814][ T5097] Rebooting in 86400 seconds..