./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2217906209 <...> Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. execve("./syz-executor2217906209", ["./syz-executor2217906209"], 0x7fff3d20b120 /* 10 vars */) = 0 brk(NULL) = 0x55555650d000 brk(0x55555650dd00) = 0x55555650dd00 arch_prctl(ARCH_SET_FS, 0x55555650d380) = 0 set_tid_address(0x55555650d650) = 5019 set_robust_list(0x55555650d660, 24) = 0 rseq(0x55555650dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2217906209", 4096) = 28 getrandom("\x34\xd7\xda\xd8\xa0\x67\xb9\xdd", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555650dd00 brk(0x55555652ed00) = 0x55555652ed00 brk(0x55555652f000) = 0x55555652f000 mprotect(0x7fe689558000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5020 attached , child_tidptr=0x55555650d650) = 5020 [pid 5020] set_robust_list(0x55555650d660, 24) = 0 [pid 5020] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5020] setsid() = 1 [pid 5020] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5020] unshare(CLONE_NEWNS) = 0 [pid 5020] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5020] unshare(CLONE_NEWIPC) = 0 [pid 5020] unshare(CLONE_NEWCGROUP) = 0 [pid 5020] unshare(CLONE_NEWUTS) = 0 [pid 5020] unshare(CLONE_SYSVSEM) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "16777216", 8) = 8 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "536870912", 9) = 9 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "8192", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5020] close(3) = 0 [pid 5020] getpid() = 1 [pid 5020] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 12]) = 0 [pid 5020] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x58\x00\x00\x00\x24\x00\x0b\x0e\x00\x00\x00\x00\x00\x00\x00\x00\xff\xe4\x00\x00\x01\x00\x00\x00\x00\x00\x20\x00\xff\xff\xff\xff\x00\x00\x00\x00\x0a\x00\x01\x00\x6e\x65\x74\x65\x6d\x00\x00\x00\x28\x00\x02\x00\x00\x00\x00\x00\x02\x00\x88\x12\xdf\x00\x00\x26\x74\x00\x00\x00\xfd\xff\xe1\xfe\x00\x00\xe2\xe6\x0c\x00\x04\x00\xff\xff\xff\xff\x00\x00\x00\x00", iov_len=88}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 88 [pid 5020] bind(3, {sa_family=AF_PACKET, sll_protocol=htons(0 /* ETH_P_??? */), sll_ifindex=if_nametoindex("lo"), sll_hatype=ARPHRD_ETHER, sll_pkttype=PACKET_HOST, sll_halen=6, sll_addr=[0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0xbb]}, 20) = 0 [ 72.214930][ T5020] ------------[ cut here ]------------ [ 72.220576][ T5020] WARNING: CPU: 1 PID: 5020 at net/core/dev.c:3288 skb_checksum_help+0x3b8/0x5b0 [ 72.229784][ T5020] Modules linked in: [ 72.233745][ T5020] CPU: 1 PID: 5020 Comm: syz-executor221 Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0 [ 72.244242][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 72.254347][ T5020] RIP: 0010:skb_checksum_help+0x3b8/0x5b0 [ 72.260082][ T5020] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 53 66 e4 f8 bb f4 ff ff ff eb e3 e8 47 66 e4 f8 4c 89 ff e8 bf fa ff ff bb ea ff ff ff eb cf <0f> 0b 80 3d 49 46 dc 05 01 0f 85 a8 01 00 00 e8 24 66 e4 f8 bb ea [ 72.279762][ T5020] RSP: 0018:ffffc90003aef408 EFLAGS: 00010212 [ 72.285900][ T5020] RAX: 0000000000000000 RBX: 000000000000019a RCX: ffff8880276d5940 [ 72.293935][ T5020] RDX: ffff8880276d5940 RSI: 000000000000019a RDI: 0000000000000348 [ 72.301934][ T5020] RBP: 0000000000000348 R08: ffffffff88a7506b R09: 1ffffffff20f6878 [ 72.309967][ T5020] R10: dffffc0000000000 R11: fffffbfff20f6879 R12: 1ffff1100e8fc4fe [ 72.318006][ T5020] R13: ffff8880747e27f0 R14: 000000000000019a R15: ffff8880747e2780 [ 72.326029][ T5020] FS: 000055555650d380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 72.335028][ T5020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.341719][ T5020] CR2: 000000002000f000 CR3: 0000000072dad000 CR4: 00000000003506e0 [ 72.349793][ T5020] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.357834][ T5020] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.365859][ T5020] Call Trace: [ 72.369169][ T5020] [ 72.372106][ T5020] ? __warn+0x162/0x4a0 [ 72.376323][ T5020] ? skb_checksum_help+0x3b8/0x5b0 [ 72.381497][ T5020] ? report_bug+0x2b3/0x500 [ 72.386074][ T5020] ? skb_checksum_help+0x3b8/0x5b0 [ 72.391242][ T5020] ? handle_bug+0x3d/0x70 [ 72.395646][ T5020] ? exc_invalid_op+0x1a/0x50 [ 72.400362][ T5020] ? asm_exc_invalid_op+0x1a/0x20 [ 72.405516][ T5020] ? skb_checksum_help+0x22b/0x5b0 [ 72.410681][ T5020] ? skb_checksum_help+0x3b8/0x5b0 [ 72.415883][ T5020] ? skb_checksum_help+0x22b/0x5b0 [ 72.421133][ T5020] netem_enqueue+0x2720/0x3800 [ 72.426004][ T5020] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 72.432207][ T5020] ? rcu_read_lock_bh_held+0x7e/0x120 [ 72.437741][ T5020] ? sch_tree_unlock+0x1a0/0x1a0 [ 72.442797][ T5020] ? skb_clone+0x21d/0x370 [ 72.447233][ T5020] netem_enqueue+0x1281/0x3800 [ 72.452006][ T5020] ? lockdep_softirqs_on+0x590/0x590 [ 72.457552][ T5020] ? do_raw_spin_lock+0x14d/0x3a0 [ 72.462666][ T5020] ? sch_tree_unlock+0x1a0/0x1a0 [ 72.467630][ T5020] ? __rwlock_init+0x150/0x150 [ 72.472458][ T5020] dev_qdisc_enqueue+0x47/0x240 [ 72.477340][ T5020] ? __dev_queue_xmit+0xc4d/0x38b0 [ 72.482534][ T5020] __dev_queue_xmit+0xdbf/0x38b0 [ 72.487703][ T5020] ? netdev_core_pick_tx+0x330/0x330 [ 72.493089][ T5020] ? virtio_net_hdr_to_skb+0x66b/0x10c0 [ 72.498712][ T5020] ? packet_xmit+0x68/0x320 [ 72.503298][ T5020] packet_sendmsg+0x466c/0x6170 [ 72.508215][ T5020] ? smack_socket_sendmsg+0x172/0x530 [ 72.513669][ T5020] ? smack_socket_connect+0x4e0/0x4e0 [ 72.519092][ T5020] ? tomoyo_socket_sendmsg_permission+0x287/0x410 [ 72.525579][ T5020] ? tomoyo_socket_bind_permission+0x340/0x340 [ 72.532061][ T5020] ? packet_getsockopt+0x1000/0x1000 [ 72.537417][ T5020] ? __rwlock_init+0x150/0x150 [ 72.542224][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.547576][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 72.553137][ T5020] ? packet_getsockopt+0x1000/0x1000 [ 72.559404][ T5020] __sys_sendto+0x484/0x640 [ 72.563971][ T5020] ? __ia32_sys_getpeername+0x90/0x90 [ 72.569377][ T5020] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 72.575441][ T5020] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.580682][ T5020] ? do_notify_parent+0xf50/0xf50 [ 72.585786][ T5020] ? print_irqtrace_events+0x220/0x220 [ 72.591286][ T5020] __x64_sys_sendto+0xde/0xf0 [ 72.596030][ T5020] do_syscall_64+0x41/0xc0 [ 72.600472][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.606429][ T5020] RIP: 0033:0x7fe6894e05d9 [ 72.610866][ T5020] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.630922][ T5020] RSP: 002b:00007ffc48325628 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 72.639547][ T5020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6894e05d9 [ 72.647613][ T5020] RDX: 000000000000fc13 RSI: 0000000020000280 RDI: 0000000000000003 [ 72.655650][ T5020] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000002f [ 72.663831][ T5020] R10: 0000000000000800 R11: 0000000000000246 R12: 00007ffc48325680 [ 72.671829][ T5020] R13: 00007ffc48325650 R14: 0000000000000001 R15: 00007ffc48325680 [ 72.679904][ T5020] [ 72.682989][ T5020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.690310][ T5020] CPU: 1 PID: 5020 Comm: syz-executor221 Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0 [ 72.701029][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 72.711093][ T5020] Call Trace: [ 72.714380][ T5020] [ 72.717331][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 72.722202][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 72.727685][ T5020] ? panic+0x770/0x770 [ 72.731770][ T5020] ? vscnprintf+0x5d/0x80 [ 72.736138][ T5020] panic+0x30f/0x770 [ 72.740060][ T5020] ? __warn+0x171/0x4a0 [ 72.744267][ T5020] ? __memcpy_flushcache+0x2b0/0x2b0 [ 72.749931][ T5020] __warn+0x314/0x4a0 [ 72.753920][ T5020] ? skb_checksum_help+0x3b8/0x5b0 [ 72.759218][ T5020] report_bug+0x2b3/0x500 [ 72.763722][ T5020] ? skb_checksum_help+0x3b8/0x5b0 [ 72.768852][ T5020] handle_bug+0x3d/0x70 [ 72.773036][ T5020] exc_invalid_op+0x1a/0x50 [ 72.777572][ T5020] asm_exc_invalid_op+0x1a/0x20 [ 72.782449][ T5020] RIP: 0010:skb_checksum_help+0x3b8/0x5b0 [ 72.788203][ T5020] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 53 66 e4 f8 bb f4 ff ff ff eb e3 e8 47 66 e4 f8 4c 89 ff e8 bf fa ff ff bb ea ff ff ff eb cf <0f> 0b 80 3d 49 46 dc 05 01 0f 85 a8 01 00 00 e8 24 66 e4 f8 bb ea [ 72.808012][ T5020] RSP: 0018:ffffc90003aef408 EFLAGS: 00010212 [ 72.814085][ T5020] RAX: 0000000000000000 RBX: 000000000000019a RCX: ffff8880276d5940 [ 72.822057][ T5020] RDX: ffff8880276d5940 RSI: 000000000000019a RDI: 0000000000000348 [ 72.830053][ T5020] RBP: 0000000000000348 R08: ffffffff88a7506b R09: 1ffffffff20f6878 [ 72.838037][ T5020] R10: dffffc0000000000 R11: fffffbfff20f6879 R12: 1ffff1100e8fc4fe [ 72.846013][ T5020] R13: ffff8880747e27f0 R14: 000000000000019a R15: ffff8880747e2780 [ 72.853996][ T5020] ? skb_checksum_help+0x22b/0x5b0 [ 72.859122][ T5020] ? skb_checksum_help+0x22b/0x5b0 [ 72.864258][ T5020] netem_enqueue+0x2720/0x3800 [ 72.869067][ T5020] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 72.875243][ T5020] ? rcu_read_lock_bh_held+0x7e/0x120 [ 72.880657][ T5020] ? sch_tree_unlock+0x1a0/0x1a0 [ 72.886055][ T5020] ? skb_clone+0x21d/0x370 [ 72.890478][ T5020] netem_enqueue+0x1281/0x3800 [ 72.895262][ T5020] ? lockdep_softirqs_on+0x590/0x590 [ 72.900675][ T5020] ? do_raw_spin_lock+0x14d/0x3a0 [ 72.905721][ T5020] ? sch_tree_unlock+0x1a0/0x1a0 [ 72.910760][ T5020] ? __rwlock_init+0x150/0x150 [ 72.920490][ T5020] dev_qdisc_enqueue+0x47/0x240 [ 72.925565][ T5020] ? __dev_queue_xmit+0xc4d/0x38b0 [ 72.930797][ T5020] __dev_queue_xmit+0xdbf/0x38b0 [ 72.935783][ T5020] ? netdev_core_pick_tx+0x330/0x330 [ 72.941176][ T5020] ? virtio_net_hdr_to_skb+0x66b/0x10c0 [ 72.946750][ T5020] ? packet_xmit+0x68/0x320 [ 72.951272][ T5020] packet_sendmsg+0x466c/0x6170 [ 72.956154][ T5020] ? smack_socket_sendmsg+0x172/0x530 [ 72.961535][ T5020] ? smack_socket_connect+0x4e0/0x4e0 [ 72.966913][ T5020] ? tomoyo_socket_sendmsg_permission+0x287/0x410 [ 72.973365][ T5020] ? tomoyo_socket_bind_permission+0x340/0x340 [ 72.980065][ T5020] ? packet_getsockopt+0x1000/0x1000 [ 72.985409][ T5020] ? __rwlock_init+0x150/0x150 [ 72.990188][ T5020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.995477][ T5020] ? security_socket_sendmsg+0x81/0xa0 [ 73.001041][ T5020] ? packet_getsockopt+0x1000/0x1000 [ 73.006766][ T5020] __sys_sendto+0x484/0x640 [ 73.011283][ T5020] ? __ia32_sys_getpeername+0x90/0x90 [ 73.017016][ T5020] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 73.023013][ T5020] ? _raw_spin_unlock_irq+0x23/0x50 [ 73.028224][ T5020] ? do_notify_parent+0xf50/0xf50 [ 73.033456][ T5020] ? print_irqtrace_events+0x220/0x220 [ 73.038960][ T5020] __x64_sys_sendto+0xde/0xf0 [ 73.043652][ T5020] do_syscall_64+0x41/0xc0 [ 73.048074][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.054100][ T5020] RIP: 0033:0x7fe6894e05d9 [ 73.058721][ T5020] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.078418][ T5020] RSP: 002b:00007ffc48325628 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 73.086838][ T5020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6894e05d9 [ 73.094809][ T5020] RDX: 000000000000fc13 RSI: 0000000020000280 RDI: 0000000000000003 [ 73.102782][ T5020] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000002f [ 73.110753][ T5020] R10: 0000000000000800 R11: 0000000000000246 R12: 00007ffc48325680 [ 73.118723][ T5020] R13: 00007ffc48325650 R14: 0000000000000001 R15: 00007ffc48325680 [ 73.126709][ T5020] [ 73.130098][ T5020] Kernel Offset: disabled [ 73.134526][ T5020] Rebooting in 86400 seconds..