./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3031889679
<...>
forked to background, child pid 3184
[ 26.548011][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.559254][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices
[ 26.722492][ T3269] ssh-keygen (3269) used greatest stack depth: 22304 bytes left
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.115' (ECDSA) to the list of known hosts.
execve("./syz-executor3031889679", ["./syz-executor3031889679"], 0x7ffcb5cb7860 /* 10 vars */) = 0
brk(NULL) = 0x555556ec9000
brk(0x555556ec9c40) = 0x555556ec9c40
arch_prctl(ARCH_SET_FS, 0x555556ec9300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3031889679", 4096) = 28
brk(0x555556eeac40) = 0x555556eeac40
brk(0x555556eeb000) = 0x555556eeb000
mprotect(0x7f80e6f9e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_IEEE802154, SOCK_RAW, 0) = 3
syzkaller login: [ 49.131756][ T3613] ------------[ cut here ]------------
[ 49.137244][ T3613] skb_assert_len
[ 49.141293][ T3613] WARNING: CPU: 1 PID: 3613 at include/linux/skbuff.h:2493 __dev_queue_xmit+0x23a8/0x3ad0
[ 49.151254][ T3613] Modules linked in:
[ 49.155157][ T3613] CPU: 1 PID: 3613 Comm: syz-executor303 Not tainted 5.19.0-next-20220808-syzkaller #0
[ 49.165208][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 49.175301][ T3613] RIP: 0010:__dev_queue_xmit+0x23a8/0x3ad0
[ 49.181163][ T3613] Code: 89 de e8 bb 78 25 fa 84 db 75 21 e8 32 7c 25 fa 48 c7 c6 e0 51 f4 8a 48 c7 c7 e0 25 f4 8a c6 05 0f 0e 73 06 01 e8 a9 b2 e3 01 <0f> 0b e8 11 7c 25 fa 0f b6 1d fb 0d 73 06 31 ff 89 de e8 81 78 25
[ 49.200837][ T3613] RSP: 0018:ffffc9000380f768 EFLAGS: 00010286
[ 49.206956][ T3613] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 49.215190][ T3613] RDX: ffff88801f0abb00 RSI: ffffffff8161f208 RDI: fffff52000701edf
[ 49.223228][ T3613] RBP: ffff888026adbaba R08: 0000000000000005 R09: 0000000000000000
[ 49.231374][ T3613] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000
[ 49.239342][ T3613] R13: 0000000000000000 R14: ffff888026adba10 R15: ffff888026adba00
[ 49.247395][ T3613] FS: 0000555556ec9300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 49.256390][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.263043][ T3613] CR2: 00000000200033c8 CR3: 0000000072fec000 CR4: 00000000003506e0
[ 49.271103][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.279099][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.287121][ T3613] Call Trace:
[ 49.290436][ T3613]
[ 49.293425][ T3613] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 49.298820][ T3613] ? __might_fault+0x142/0x170
[ 49.303648][ T3613] ? _copy_from_iter+0x239/0x11c0
[ 49.308702][ T3613] ? _copy_mc_to_iter+0x1430/0x1430
[ 49.313957][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 49.318900][ T3613] ? rwlock_bug.part.0+0x90/0x90
[ 49.323930][ T3613] ? __local_bh_enable_ip+0xa0/0x120
[ 49.329250][ T3613] ? __check_object_size+0x2d/0x700
[ 49.334496][ T3613] raw_sendmsg+0x538/0x790
[ 49.338932][ T3613] ? dgram_sendmsg+0xd90/0xd90
[ 49.343757][ T3613] ? __import_iovec+0x1f7/0x610
[ 49.348641][ T3613] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 49.354224][ T3613] ? ieee802154_sock_release+0xa0/0xa0
[ 49.359716][ T3613] sock_sendmsg+0xcf/0x120
[ 49.364200][ T3613] ____sys_sendmsg+0x334/0x810
[ 49.368984][ T3613] ? copy_msghdr_from_user+0xfc/0x150
[ 49.374411][ T3613] ? kernel_sendmsg+0x50/0x50
[ 49.379113][ T3613] ___sys_sendmsg+0x110/0x1b0
[ 49.383889][ T3613] ? do_recvmmsg+0x6e0/0x6e0
[ 49.388582][ T3613] ? __lock_acquire+0x166e/0x56d0
[ 49.393674][ T3613] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 49.399667][ T3613] ? lockdep_hardirqs_on+0x79/0x100
[ 49.404921][ T3613] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 49.410934][ T3613] ? __switch_to+0x5cc/0x1050
[ 49.415675][ T3613] ? __fget_light+0x20a/0x270
[ 49.420460][ T3613] __sys_sendmmsg+0x18b/0x460
[ 49.425204][ T3613] ? __ia32_sys_sendmsg+0xb0/0xb0
[ 49.430257][ T3613] ? _raw_spin_lock_irq+0x41/0x50
[ 49.435348][ T3613] ? find_held_lock+0x2d/0x110
[ 49.440141][ T3613] ? ptrace_notify+0xfa/0x140
[ 49.444858][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 49.449727][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40
[ 49.454971][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40
[ 49.460191][ T3613] ? lockdep_hardirqs_on+0x79/0x100
[ 49.465446][ T3613] __x64_sys_sendmmsg+0x99/0x100
[ 49.470427][ T3613] do_syscall_64+0x35/0xb0
[ 49.474906][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.480820][ T3613] RIP: 0033:0x7f80e6f31b99
[ 49.485320][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.504983][ T3613] RSP: 002b:00007fffc8daca48 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 49.513435][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80e6f31b99
[ 49.521441][ T3613] RDX: 0000000000000002 RSI: 00000000200033c0 RDI: 0000000000000003
[ 49.529404][ T3613] RBP: 00007f80e6ef5d40 R08: 0000000000000000 R09: 0000000000000000
[ 49.537402][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80e6ef5dd0
[ 49.545435][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.553463][ T3613]
[ 49.556494][ T3613] Kernel panic - not syncing: panic_on_warn set ...
[ 49.563092][ T3613] CPU: 1 PID: 3613 Comm: syz-executor303 Not tainted 5.19.0-next-20220808-syzkaller #0
[ 49.572717][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 49.582769][ T3613] Call Trace:
[ 49.586045][ T3613]
[ 49.588971][ T3613] dump_stack_lvl+0xcd/0x134
[ 49.593565][ T3613] panic+0x2c8/0x627
[ 49.597460][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 49.603447][ T3613] ? __warn.cold+0x248/0x2c4
[ 49.608041][ T3613] ? __dev_queue_xmit+0x23a8/0x3ad0
[ 49.613235][ T3613] __warn.cold+0x259/0x2c4
[ 49.617668][ T3613] ? __dev_queue_xmit+0x23a8/0x3ad0
[ 49.622874][ T3613] report_bug+0x1bc/0x210
[ 49.627224][ T3613] handle_bug+0x3c/0x60
[ 49.631396][ T3613] exc_invalid_op+0x14/0x40
[ 49.635908][ T3613] asm_exc_invalid_op+0x16/0x20
[ 49.640768][ T3613] RIP: 0010:__dev_queue_xmit+0x23a8/0x3ad0
[ 49.646582][ T3613] Code: 89 de e8 bb 78 25 fa 84 db 75 21 e8 32 7c 25 fa 48 c7 c6 e0 51 f4 8a 48 c7 c7 e0 25 f4 8a c6 05 0f 0e 73 06 01 e8 a9 b2 e3 01 <0f> 0b e8 11 7c 25 fa 0f b6 1d fb 0d 73 06 31 ff 89 de e8 81 78 25
[ 49.666192][ T3613] RSP: 0018:ffffc9000380f768 EFLAGS: 00010286
[ 49.672263][ T3613] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 49.680233][ T3613] RDX: ffff88801f0abb00 RSI: ffffffff8161f208 RDI: fffff52000701edf
[ 49.688206][ T3613] RBP: ffff888026adbaba R08: 0000000000000005 R09: 0000000000000000
[ 49.696271][ T3613] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000
[ 49.704245][ T3613] R13: 0000000000000000 R14: ffff888026adba10 R15: ffff888026adba00
[ 49.712226][ T3613] ? vprintk+0x88/0x90
[ 49.716315][ T3613] ? __dev_queue_xmit+0x23a8/0x3ad0
[ 49.721543][ T3613] ? netdev_core_pick_tx+0x2e0/0x2e0
[ 49.726856][ T3613] ? __might_fault+0x142/0x170
[ 49.731654][ T3613] ? _copy_from_iter+0x239/0x11c0
[ 49.736704][ T3613] ? _copy_mc_to_iter+0x1430/0x1430
[ 49.741999][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 49.746859][ T3613] ? rwlock_bug.part.0+0x90/0x90
[ 49.751899][ T3613] ? __local_bh_enable_ip+0xa0/0x120
[ 49.757197][ T3613] ? __check_object_size+0x2d/0x700
[ 49.762413][ T3613] raw_sendmsg+0x538/0x790
[ 49.766839][ T3613] ? dgram_sendmsg+0xd90/0xd90
[ 49.771613][ T3613] ? __import_iovec+0x1f7/0x610
[ 49.776476][ T3613] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 49.781801][ T3613] ? ieee802154_sock_release+0xa0/0xa0
[ 49.787356][ T3613] sock_sendmsg+0xcf/0x120
[ 49.791783][ T3613] ____sys_sendmsg+0x334/0x810
[ 49.796559][ T3613] ? copy_msghdr_from_user+0xfc/0x150
[ 49.801942][ T3613] ? kernel_sendmsg+0x50/0x50
[ 49.806642][ T3613] ___sys_sendmsg+0x110/0x1b0
[ 49.811332][ T3613] ? do_recvmmsg+0x6e0/0x6e0
[ 49.815940][ T3613] ? __lock_acquire+0x166e/0x56d0
[ 49.820980][ T3613] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 49.826969][ T3613] ? lockdep_hardirqs_on+0x79/0x100
[ 49.832183][ T3613] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 49.838170][ T3613] ? __switch_to+0x5cc/0x1050
[ 49.842872][ T3613] ? __fget_light+0x20a/0x270
[ 49.847561][ T3613] __sys_sendmmsg+0x18b/0x460
[ 49.852255][ T3613] ? __ia32_sys_sendmsg+0xb0/0xb0
[ 49.857294][ T3613] ? _raw_spin_lock_irq+0x41/0x50
[ 49.862346][ T3613] ? find_held_lock+0x2d/0x110
[ 49.867129][ T3613] ? ptrace_notify+0xfa/0x140
[ 49.871817][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 49.876693][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40
[ 49.881908][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40
[ 49.887125][ T3613] ? lockdep_hardirqs_on+0x79/0x100
[ 49.892346][ T3613] __x64_sys_sendmmsg+0x99/0x100
[ 49.897298][ T3613] do_syscall_64+0x35/0xb0
[ 49.901732][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.907636][ T3613] RIP: 0033:0x7f80e6f31b99
[ 49.912055][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.931665][ T3613] RSP: 002b:00007fffc8daca48 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 49.940090][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80e6f31b99
[ 49.948073][ T3613] RDX: 0000000000000002 RSI: 00000000200033c0 RDI: 0000000000000003
[ 49.956046][ T3613] RBP: 00007f80e6ef5d40 R08: 0000000000000000 R09: 0000000000000000
[ 49.964020][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80e6ef5dd0
[ 49.972005][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.979994][ T3613]
[ 49.983303][ T3613] Kernel Offset: disabled
[ 49.987679][ T3613] Rebooting in 86400 seconds..