./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1498109510 <...> Warning: Permanently added '10.128.0.115' (ECDSA) to the list of known hosts. execve("./syz-executor1498109510", ["./syz-executor1498109510"], 0x7ffca27036b0 /* 10 vars */) = 0 brk(NULL) = 0x555557074000 brk(0x555557074c40) = 0x555557074c40 arch_prctl(ARCH_SET_FS, 0x555557074300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1498109510", 4096) = 28 brk(0x555557095c40) = 0x555557095c40 brk(0x555557096000) = 0x555557096000 mprotect(0x7fb7e3948000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/ppp", O_RDWR|O_NONBLOCK|O_NOATIME|O_CLOEXEC) = 3 ioctl(3, PPPIOCNEWUNIT, 0x200000c0) = 0 ioctl(3, PPPIOCSACTIVE, 0x20000240) = 0 syzkaller login: [ 44.221461][ T3604] ------------[ cut here ]------------ [ 44.226980][ T3604] WARNING: CPU: 0 PID: 3604 at net/core/flow_dissector.c:1016 __skb_flow_dissect+0x947/0x5920 [ 44.237266][ T3604] Modules linked in: [ 44.241147][ T3604] CPU: 0 PID: 3604 Comm: syz-executor149 Not tainted 6.1.0-rc2-syzkaller-00082-gc5f0a1728874 #0 [ 44.251558][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 44.261643][ T3604] RIP: 0010:__skb_flow_dissect+0x947/0x5920 [ 44.267550][ T3604] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 67 7b 26 fa 48 85 db 0f 85 84 f8 ff ff e8 59 7b 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 43 7b 26 fa [ 44.287162][ T3604] RSP: 0018:ffffc90003b1f628 EFLAGS: 00010293 [ 44.293235][ T3604] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 44.301197][ T3604] RDX: ffff888024353a80 RSI: ffffffff87562067 RDI: ffff88802096dc98 [ 44.309187][ T3604] RBP: ffffffff8de28c86 R08: 0000000000000001 R09: 0000000000000000 [ 44.317168][ T3604] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de28c84 [ 44.325158][ T3604] R13: 0000000000000000 R14: ffffffff8de28c80 R15: ffff88802096dc80 [ 44.333136][ T3604] FS: 0000555557074300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 44.342063][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.348649][ T3604] CR2: 000055fcc9a3d000 CR3: 0000000078090000 CR4: 00000000003506f0 [ 44.356631][ T3604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.364604][ T3604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.372561][ T3604] Call Trace: [ 44.375837][ T3604] [ 44.378756][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 44.383613][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 44.388540][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.393997][ T3604] ? bpf_flow_dissect+0x360/0x360 [ 44.399011][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.404466][ T3604] ? lock_acquire+0x4fc/0x630 [ 44.409131][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.414587][ T3604] ? lock_release+0x5cb/0x810 [ 44.419262][ T3604] ? is_bpf_text_address+0x77/0x170 [ 44.424484][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 44.429329][ T3604] ? unwind_next_frame+0xfa9/0x1cc0 [ 44.434533][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.439980][ T3604] ? lock_acquire+0x4fc/0x630 [ 44.444659][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.450112][ T3604] ? lock_release+0x5cb/0x810 [ 44.454789][ T3604] ? __kernel_text_address+0x9/0x30 [ 44.459979][ T3604] ? __stack_depot_save+0x260/0x560 [ 44.465177][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 44.470026][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 44.474983][ T3604] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 44.480792][ T3604] ? trace_hardirqs_on+0x2d/0x160 [ 44.485827][ T3604] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 44.491625][ T3604] ? __stack_depot_save+0x260/0x560 [ 44.496825][ T3604] ? ppp_write+0xb3/0x2d0 [ 44.501148][ T3604] ? kasan_save_stack+0x31/0x40 [ 44.506008][ T3604] ? kasan_save_stack+0x1e/0x40 [ 44.510854][ T3604] ? kasan_set_track+0x21/0x30 [ 44.515627][ T3604] ? __kasan_kmalloc+0xa1/0xb0 [ 44.520381][ T3604] ? __kmalloc_node_track_caller+0x55/0xc0 [ 44.526186][ T3604] ? __alloc_skb+0xd9/0x2f0 [ 44.530679][ T3604] ? ppp_write+0xb3/0x2d0 [ 44.535020][ T3604] ? do_iter_write+0x4ef/0x700 [ 44.539776][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.545253][ T3604] ? lock_acquire+0x4fc/0x630 [ 44.549931][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.555397][ T3604] skb_get_poff+0x99/0x1a0 [ 44.559809][ T3604] ? __skb_get_poff+0x290/0x290 [ 44.564663][ T3604] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 44.570467][ T3604] ? trace_hardirqs_on+0x2d/0x160 [ 44.575501][ T3604] bpf_skb_get_pay_offset+0x11/0x20 [ 44.580691][ T3604] ? __ppp_xmit_process+0x9a6/0x17b0 [ 44.585990][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.591440][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 44.596286][ T3604] ? ppp_receive_nonmp_frame+0x2000/0x2000 [ 44.602089][ T3604] ? ppp_xmit_process+0x161/0x2f0 [ 44.607117][ T3604] ? ppp_write+0x239/0x2d0 [ 44.611522][ T3604] ? do_iter_write+0x4ef/0x700 [ 44.616289][ T3604] ? vfs_writev+0x1aa/0x630 [ 44.620785][ T3604] ? vfs_iter_write+0xa0/0xa0 [ 44.625471][ T3604] ? do_raw_spin_lock+0x120/0x2a0 [ 44.630481][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 44.635419][ T3604] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 44.640869][ T3604] ? ptrace_stop.part.0+0x5f4/0x8c0 [ 44.646063][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.651513][ T3604] ? lock_release+0x5cb/0x810 [ 44.656187][ T3604] ? ptrace_notify+0xfa/0x140 [ 44.660934][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 44.665783][ T3604] ? __x64_sys_pwritev+0x22b/0x310 [ 44.670889][ T3604] ? __ia32_sys_preadv2+0x150/0x150 [ 44.676088][ T3604] ? _raw_spin_unlock_irq+0x2a/0x40 [ 44.681275][ T3604] ? ptrace_notify+0xfa/0x140 [ 44.685953][ T3604] ? do_syscall_64+0x35/0xb0 [ 44.690534][ T3604] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.696606][ T3604] [ 44.699612][ T3604] Kernel panic - not syncing: panic_on_warn set ... [ 44.706179][ T3604] CPU: 0 PID: 3604 Comm: syz-executor149 Not tainted 6.1.0-rc2-syzkaller-00082-gc5f0a1728874 #0 [ 44.716568][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 44.726605][ T3604] Call Trace: [ 44.729866][ T3604] [ 44.732784][ T3604] dump_stack_lvl+0xcd/0x134 [ 44.737378][ T3604] panic+0x2c8/0x622 [ 44.741264][ T3604] ? panic_print_sys_info.part.0+0x110/0x110 [ 44.747239][ T3604] ? __warn.cold+0x24b/0x350 [ 44.751818][ T3604] ? __skb_flow_dissect+0x947/0x5920 [ 44.757094][ T3604] __warn.cold+0x25c/0x350 [ 44.761500][ T3604] ? __skb_flow_dissect+0x947/0x5920 [ 44.766774][ T3604] report_bug+0x1bc/0x210 [ 44.771098][ T3604] handle_bug+0x3c/0x70 [ 44.775251][ T3604] exc_invalid_op+0x14/0x40 [ 44.779744][ T3604] asm_exc_invalid_op+0x16/0x20 [ 44.784584][ T3604] RIP: 0010:__skb_flow_dissect+0x947/0x5920 [ 44.790468][ T3604] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 67 7b 26 fa 48 85 db 0f 85 84 f8 ff ff e8 59 7b 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 43 7b 26 fa [ 44.810082][ T3604] RSP: 0018:ffffc90003b1f628 EFLAGS: 00010293 [ 44.816134][ T3604] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 44.824088][ T3604] RDX: ffff888024353a80 RSI: ffffffff87562067 RDI: ffff88802096dc98 [ 44.832045][ T3604] RBP: ffffffff8de28c86 R08: 0000000000000001 R09: 0000000000000000 [ 44.840000][ T3604] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de28c84 [ 44.847955][ T3604] R13: 0000000000000000 R14: ffffffff8de28c80 R15: ffff88802096dc80 [ 44.855917][ T3604] ? __skb_flow_dissect+0x947/0x5920 [ 44.861199][ T3604] ? __skb_flow_dissect+0x947/0x5920 [ 44.866474][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 44.871312][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 44.876237][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.881680][ T3604] ? bpf_flow_dissect+0x360/0x360 [ 44.886694][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.892135][ T3604] ? lock_acquire+0x4fc/0x630 [ 44.896797][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.902240][ T3604] ? lock_release+0x5cb/0x810 [ 44.906900][ T3604] ? is_bpf_text_address+0x77/0x170 [ 44.912086][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 44.916920][ T3604] ? unwind_next_frame+0xfa9/0x1cc0 [ 44.922107][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.927550][ T3604] ? lock_acquire+0x4fc/0x630 [ 44.932209][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 44.937651][ T3604] ? lock_release+0x5cb/0x810 [ 44.942309][ T3604] ? __kernel_text_address+0x9/0x30 [ 44.947497][ T3604] ? __stack_depot_save+0x260/0x560 [ 44.952688][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 44.957536][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 44.962459][ T3604] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 44.968253][ T3604] ? trace_hardirqs_on+0x2d/0x160 [ 44.973264][ T3604] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 44.979068][ T3604] ? __stack_depot_save+0x260/0x560 [ 44.984255][ T3604] ? ppp_write+0xb3/0x2d0 [ 44.988588][ T3604] ? kasan_save_stack+0x31/0x40 [ 44.993441][ T3604] ? kasan_save_stack+0x1e/0x40 [ 44.998295][ T3604] ? kasan_set_track+0x21/0x30 [ 45.003059][ T3604] ? __kasan_kmalloc+0xa1/0xb0 [ 45.007828][ T3604] ? __kmalloc_node_track_caller+0x55/0xc0 [ 45.013628][ T3604] ? __alloc_skb+0xd9/0x2f0 [ 45.018125][ T3604] ? ppp_write+0xb3/0x2d0 [ 45.022446][ T3604] ? do_iter_write+0x4ef/0x700 [ 45.027291][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 45.032741][ T3604] ? lock_acquire+0x4fc/0x630 [ 45.037414][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 45.042880][ T3604] skb_get_poff+0x99/0x1a0 [ 45.047393][ T3604] ? __skb_get_poff+0x290/0x290 [ 45.052240][ T3604] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 45.058036][ T3604] ? trace_hardirqs_on+0x2d/0x160 [ 45.063050][ T3604] bpf_skb_get_pay_offset+0x11/0x20 [ 45.068246][ T3604] ? __ppp_xmit_process+0x9a6/0x17b0 [ 45.073608][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 45.079145][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 45.083979][ T3604] ? ppp_receive_nonmp_frame+0x2000/0x2000 [ 45.089779][ T3604] ? ppp_xmit_process+0x161/0x2f0 [ 45.094794][ T3604] ? ppp_write+0x239/0x2d0 [ 45.099203][ T3604] ? do_iter_write+0x4ef/0x700 [ 45.103957][ T3604] ? vfs_writev+0x1aa/0x630 [ 45.108448][ T3604] ? vfs_iter_write+0xa0/0xa0 [ 45.113114][ T3604] ? do_raw_spin_lock+0x120/0x2a0 [ 45.118133][ T3604] ? rwlock_bug.part.0+0x90/0x90 [ 45.123059][ T3604] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 45.128520][ T3604] ? ptrace_stop.part.0+0x5f4/0x8c0 [ 45.133705][ T3604] ? rcu_read_lock_sched_held+0xd/0x70 [ 45.139145][ T3604] ? lock_release+0x5cb/0x810 [ 45.143806][ T3604] ? ptrace_notify+0xfa/0x140 [ 45.148467][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 45.153304][ T3604] ? __x64_sys_pwritev+0x22b/0x310 [ 45.158416][ T3604] ? __ia32_sys_preadv2+0x150/0x150 [ 45.163601][ T3604] ? _raw_spin_unlock_irq+0x2a/0x40 [ 45.168799][ T3604] ? ptrace_notify+0xfa/0x140 [ 45.173461][ T3604] ? do_syscall_64+0x35/0xb0 [ 45.178043][ T3604] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.184100][ T3604] [ 45.187166][ T3604] Kernel Offset: disabled [ 45.191477][ T3604] Rebooting in 86400 seconds..