./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor433517137 <...> [ 97.110413][ T54] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. execve("./syz-executor433517137", ["./syz-executor433517137"], 0x7ffe6de4e0e0 /* 10 vars */) = 0 brk(NULL) = 0x55555723a000 brk(0x55555723ad00) = 0x55555723ad00 arch_prctl(ARCH_SET_FS, 0x55555723a380) = 0 set_tid_address(0x55555723a650) = 5046 set_robust_list(0x55555723a660, 24) = 0 rseq(0x55555723aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor433517137", 4096) = 27 getrandom("\x10\x67\x11\xa2\x08\xed\x2b\x23", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555723ad00 brk(0x55555725bd00) = 0x55555725bd00 brk(0x55555725c000) = 0x55555725c000 mprotect(0x7f5587601000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5047 attached , child_tidptr=0x55555723a650) = 5047 [pid 5047] set_robust_list(0x55555723a660, 24) = 0 [pid 5047] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5047] setsid() = 1 [pid 5047] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5047] unshare(CLONE_NEWNS) = 0 [pid 5047] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5047] unshare(CLONE_NEWIPC) = 0 [pid 5047] unshare(CLONE_NEWCGROUP) = 0 [pid 5047] unshare(CLONE_NEWUTS) = 0 [pid 5047] unshare(CLONE_SYSVSEM) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "16777216", 8) = 8 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "536870912", 9) = 9 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "8192", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5047] close(3) = 0 [pid 5047] getpid() = 1 [pid 5047] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 0f b6 2d b7 ff 85 06 31 ff 89 ee e8 29 71 55 f9 40 84 ed 75 [ 103.523075][ T5047] RSP: 0018:ffffc90003abf0a0 EFLAGS: 00010293 [ 103.529228][ T5047] RAX: 0000000000000000 RBX: ffff88807dea5b40 RCX: 0000000000000000 [ 103.537291][ T5047] RDX: ffff88807e40bb80 RSI: ffffffff88325025 RDI: 0000000000000006 [ 103.545303][ T5047] RBP: ffff88807dea5bb4 R08: 0000000000000006 R09: 0000000000000529 [ 103.553337][ T5047] R10: 000000000000007c R11: ffffffff8a60008b R12: 0000000000000527 [ 103.561371][ T5047] R13: 0000000000000527 R14: 000000000000007c R15: 0000000000000529 [ 103.569399][ T5047] FS: 000055555723a380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 103.578395][ T5047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.585019][ T5047] CR2: 0000000020001000 CR3: 00000000724e5000 CR4: 00000000003506e0 [ 103.593085][ T5047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.601115][ T5047] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.609146][ T5047] Call Trace: [ 103.612453][ T5047] [ 103.615395][ T5047] ? show_regs+0x8f/0xa0 [ 103.619716][ T5047] ? __warn+0xe6/0x380 [ 103.623836][ T5047] ? skb_checksum_help+0x4b5/0x5c0 [ 103.629112][ T5047] ? report_bug+0x3bc/0x580 [ 103.633790][ T5047] ? handle_bug+0x3c/0x70 [ 103.638187][ T5047] ? exc_invalid_op+0x17/0x40 [ 103.642910][ T5047] ? asm_exc_invalid_op+0x1a/0x20 [ 103.648029][ T5047] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 103.654167][ T5047] ? skb_checksum_help+0x4b5/0x5c0 [ 103.659378][ T5047] ? skb_checksum_help+0x4b5/0x5c0 [ 103.664561][ T5047] ip_do_fragment+0xa1b/0x18b0 [ 103.669427][ T5047] ? ip_fragment.constprop.0+0x230/0x230 [ 103.675138][ T5047] ? ip_frag_next+0xa40/0xa40 [ 103.679920][ T5047] ip_fragment.constprop.0+0x161/0x230 [ 103.685441][ T5047] __ip_finish_output+0x49a/0x640 [ 103.690723][ T5047] ip_finish_output+0x31/0x310 [ 103.695568][ T5047] ip_mc_output+0x1dd/0x6a0 [ 103.700167][ T5047] ip_local_out+0xaf/0x190 [ 103.704644][ T5047] iptunnel_xmit+0x61a/0x9e0 [ 103.709345][ T5047] ip_tunnel_xmit+0x1e4f/0x3370 [ 103.714281][ T5047] ? ip_md_tunnel_xmit+0x1fc0/0x1fc0 [ 103.719636][ T5047] ? skb_mac_gso_segment+0x3d1/0x610 [ 103.724981][ T5047] ? __gre_xmit+0x4f5/0x990 [ 103.729575][ T5047] ipgre_xmit+0x63c/0x910 [ 103.733954][ T5047] dev_hard_start_xmit+0x13d/0x6c0 [ 103.739156][ T5047] __dev_queue_xmit+0x9b4/0x3d60 [ 103.744163][ T5047] ? netdev_core_pick_tx+0x390/0x390 [ 103.749545][ T5047] ? skb_partial_csum_set+0x202/0x390 [ 103.755005][ T5047] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 103.761689][ T5047] ? packet_release+0xdc0/0xdc0 [ 103.766641][ T5047] packet_xmit+0x257/0x380 [ 103.771109][ T5047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.777113][ T5047] packet_sendmsg+0x24d9/0x5580 [ 103.782065][ T5047] ? preempt_count_sub+0x150/0x150 [ 103.787345][ T5047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.793303][ T5047] ? aa_sk_perm+0x2c1/0xad0 [ 103.797882][ T5047] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 103.803818][ T5047] ? aa_af_perm+0x260/0x260 [ 103.808400][ T5047] ? import_ubuf+0x1f5/0x260 [ 103.813059][ T5047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 103.818518][ T5047] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 103.824466][ T5047] sock_sendmsg+0xd9/0x180 [ 103.828964][ T5047] ____sys_sendmsg+0x6ac/0x940 [ 103.833784][ T5047] ? copy_msghdr_from_user+0x10b/0x160 [ 103.839304][ T5047] ? kernel_sendmsg+0x50/0x50 [ 103.844045][ T5047] ___sys_sendmsg+0x135/0x1d0 [ 103.848789][ T5047] ? do_recvmmsg+0x740/0x740 [ 103.853428][ T5047] ? lock_sync+0x190/0x190 [ 103.857927][ T5047] ? ptrace_stop.part.0+0x4af/0x900 [ 103.863181][ T5047] ? __fget_light+0x1fc/0x260 [ 103.867948][ T5047] __sys_sendmsg+0x117/0x1e0 [ 103.872575][ T5047] ? __sys_sendmsg_sock+0x30/0x30 [ 103.877665][ T5047] ? ptrace_notify+0xf4/0x130 [ 103.882396][ T5047] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.887693][ T5047] ? _raw_spin_unlock_irq+0x2e/0x50 [ 103.892959][ T5047] ? ptrace_notify+0xf4/0x130 [ 103.897735][ T5047] do_syscall_64+0x38/0xb0 [ 103.902197][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 103.908235][ T5047] RIP: 0033:0x7f55875894d9 [ 103.912708][ T5047] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 103.932664][ T5047] RSP: 002b:00007fff33f70608 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.941143][ T5047] RAX: ffffffffffffffda RBX: 00007f55875d6390 RCX: 00007f55875894d9 [ 103.949169][ T5047] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 103.957311][ T5047] RBP: 0000000000000003 R08: 0000555500000000 R09: 0000555500000000 [ 103.965313][ T5047] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fff33f70650 [ 103.973342][ T5047] R13: 00007fff33f70620 R14: 0000000000000001 R15: 00007fff33f70650 [ 103.981410][ T5047] [ 103.984447][ T5047] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.991737][ T5047] CPU: 1 PID: 5047 Comm: syz-executor433 Not tainted 6.6.0-rc1-syzkaller-00269-ge789286468a9 #0 [ 104.002273][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 104.012341][ T5047] Call Trace: [ 104.015635][ T5047] [ 104.018591][ T5047] dump_stack_lvl+0xd9/0x1b0 [ 104.023212][ T5047] panic+0x6a6/0x750 [ 104.027137][ T5047] ? panic_smp_self_stop+0xa0/0xa0 [ 104.032295][ T5047] ? skb_checksum_help+0x4b5/0x5c0 [ 104.037443][ T5047] check_panic_on_warn+0xab/0xb0 [ 104.042419][ T5047] __warn+0xf2/0x380 [ 104.046345][ T5047] ? skb_checksum_help+0x4b5/0x5c0 [ 104.051494][ T5047] report_bug+0x3bc/0x580 [ 104.055870][ T5047] handle_bug+0x3c/0x70 [ 104.060058][ T5047] exc_invalid_op+0x17/0x40 [ 104.064589][ T5047] asm_exc_invalid_op+0x1a/0x20 [ 104.069476][ T5047] RIP: 0010:skb_checksum_help+0x4b5/0x5c0 [ 104.075237][ T5047] Code: f9 40 84 ed 75 dd e8 2a 76 55 f9 31 d2 48 89 de 48 c7 c7 80 05 a3 8b c6 05 cd ff 85 06 01 e8 e2 1c f8 ff eb be e8 0b 76 55 f9 <0f> 0b 0f b6 2d b7 ff 85 06 31 ff 89 ee e8 29 71 55 f9 40 84 ed 75 [ 104.094868][ T5047] RSP: 0018:ffffc90003abf0a0 EFLAGS: 00010293 [ 104.100958][ T5047] RAX: 0000000000000000 RBX: ffff88807dea5b40 RCX: 0000000000000000 [ 104.109123][ T5047] RDX: ffff88807e40bb80 RSI: ffffffff88325025 RDI: 0000000000000006 [ 104.117112][ T5047] RBP: ffff88807dea5bb4 R08: 0000000000000006 R09: 0000000000000529 [ 104.125099][ T5047] R10: 000000000000007c R11: ffffffff8a60008b R12: 0000000000000527 [ 104.133086][ T5047] R13: 0000000000000527 R14: 000000000000007c R15: 0000000000000529 [ 104.141081][ T5047] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 104.147178][ T5047] ? skb_checksum_help+0x4b5/0x5c0 [ 104.152332][ T5047] ip_do_fragment+0xa1b/0x18b0 [ 104.157140][ T5047] ? ip_fragment.constprop.0+0x230/0x230 [ 104.162831][ T5047] ? ip_frag_next+0xa40/0xa40 [ 104.167565][ T5047] ip_fragment.constprop.0+0x161/0x230 [ 104.173061][ T5047] __ip_finish_output+0x49a/0x640 [ 104.178125][ T5047] ip_finish_output+0x31/0x310 [ 104.182929][ T5047] ip_mc_output+0x1dd/0x6a0 [ 104.187490][ T5047] ip_local_out+0xaf/0x190 [ 104.191943][ T5047] iptunnel_xmit+0x61a/0x9e0 [ 104.196607][ T5047] ip_tunnel_xmit+0x1e4f/0x3370 [ 104.201518][ T5047] ? ip_md_tunnel_xmit+0x1fc0/0x1fc0 [ 104.206833][ T5047] ? skb_mac_gso_segment+0x3d1/0x610 [ 104.212173][ T5047] ? __gre_xmit+0x4f5/0x990 [ 104.216703][ T5047] ipgre_xmit+0x63c/0x910 [ 104.221056][ T5047] dev_hard_start_xmit+0x13d/0x6c0 [ 104.226214][ T5047] __dev_queue_xmit+0x9b4/0x3d60 [ 104.231201][ T5047] ? netdev_core_pick_tx+0x390/0x390 [ 104.236525][ T5047] ? skb_partial_csum_set+0x202/0x390 [ 104.241942][ T5047] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 104.248572][ T5047] ? packet_release+0xdc0/0xdc0 [ 104.253456][ T5047] packet_xmit+0x257/0x380 [ 104.257898][ T5047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.263834][ T5047] packet_sendmsg+0x24d9/0x5580 [ 104.268736][ T5047] ? preempt_count_sub+0x150/0x150 [ 104.273888][ T5047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.279832][ T5047] ? aa_sk_perm+0x2c1/0xad0 [ 104.284373][ T5047] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 104.290299][ T5047] ? aa_af_perm+0x260/0x260 [ 104.294859][ T5047] ? import_ubuf+0x1f5/0x260 [ 104.299489][ T5047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 104.304808][ T5047] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 104.310755][ T5047] sock_sendmsg+0xd9/0x180 [ 104.315216][ T5047] ____sys_sendmsg+0x6ac/0x940 [ 104.320148][ T5047] ? copy_msghdr_from_user+0x10b/0x160 [ 104.325629][ T5047] ? kernel_sendmsg+0x50/0x50 [ 104.330359][ T5047] ___sys_sendmsg+0x135/0x1d0 [ 104.335063][ T5047] ? do_recvmmsg+0x740/0x740 [ 104.339688][ T5047] ? lock_sync+0x190/0x190 [ 104.344133][ T5047] ? ptrace_stop.part.0+0x4af/0x900 [ 104.349372][ T5047] ? __fget_light+0x1fc/0x260 [ 104.354081][ T5047] __sys_sendmsg+0x117/0x1e0 [ 104.358692][ T5047] ? __sys_sendmsg_sock+0x30/0x30 [ 104.363738][ T5047] ? ptrace_notify+0xf4/0x130 [ 104.368456][ T5047] ? lockdep_hardirqs_on+0x7d/0x100 [ 104.373690][ T5047] ? _raw_spin_unlock_irq+0x2e/0x50 [ 104.378925][ T5047] ? ptrace_notify+0xf4/0x130 [ 104.383631][ T5047] do_syscall_64+0x38/0xb0 [ 104.388075][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 104.393999][ T5047] RIP: 0033:0x7f55875894d9 [ 104.398437][ T5047] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 104.418065][ T5047] RSP: 002b:00007fff33f70608 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.426500][ T5047] RAX: ffffffffffffffda RBX: 00007f55875d6390 RCX: 00007f55875894d9 [ 104.434488][ T5047] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 104.442476][ T5047] RBP: 0000000000000003 R08: 0000555500000000 R09: 0000555500000000 [ 104.450524][ T5047] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fff33f70650 [ 104.459308][ T5047] R13: 00007fff33f70620 R14: 0000000000000001 R15: 00007fff33f70650 [ 104.467335][ T5047] [ 104.470638][ T5047] Kernel Offset: disabled [ 104.475056][ T5047] Rebooting in 86400 seconds..