./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3361911025 <...> Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. execve("./syz-executor3361911025", ["./syz-executor3361911025"], 0x7fff09719a60 /* 10 vars */) = 0 brk(NULL) = 0x555555c24000 brk(0x555555c24d00) = 0x555555c24d00 arch_prctl(ARCH_SET_FS, 0x555555c24380) = 0 set_tid_address(0x555555c24650) = 5072 set_robust_list(0x555555c24660, 24) = 0 rseq(0x555555c24ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3361911025", 4096) = 28 getrandom("\x98\x9c\xe3\x8c\x15\x24\x70\x13", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555c24d00 brk(0x555555c45d00) = 0x555555c45d00 brk(0x555555c46000) = 0x555555c46000 mprotect(0x7f810e387000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached , child_tidptr=0x555555c24650) = 5073 [pid 5073] set_robust_list(0x555555c24660, 24) = 0 [pid 5073] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setsid() = 1 [pid 5073] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5073] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5073] unshare(CLONE_NEWNS) = 0 [pid 5073] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5073] unshare(CLONE_NEWIPC) = 0 [pid 5073] unshare(CLONE_NEWCGROUP) = 0 [pid 5073] unshare(CLONE_NEWUTS) = 0 [pid 5073] unshare(CLONE_SYSVSEM) = 0 [ 97.260135][ T27] cfg80211: failed to load regulatory.db [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "16777216", 8) = 8 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "536870912", 9) = 9 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "8192", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5073] close(3) = 0 [pid 5073] getpid() = 1 [pid 5073] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 2]) = 0 [pid 5082] bind(6, {sa_family=AF_PACKET, sll_protocol=htons(0 /* ETH_P_??? */), sll_ifindex=if_nametoindex("wlan0"), sll_hatype=ARPHRD_ETHER, sll_pkttype=PACKET_HOST, sll_halen=6, sll_addr=[0x5f, 0xfa, 0x45, 0xaa, 0xe9, 0xe3]}, 20) = 0 [pid 5082] sendto(6, "\x41\x04\x09\xfc\xc1\xf7\x48\x02\x01\x0e\x02\x00\xc5\x2c\xf7\xc2\x06\x75\xe0\x05\xb0\x2f\x08\x00\xeb\x2b\x2f\xf0\xda\xc8\x89\x7c\x6b\x11\x20\x02\xfa\xff\xff\xff\x30\x66\x09\x0c\xb6\x00\xc5\x47\x1d\x13\x0a\x66\x32\x1a\x54\xe7\xdf\x30\x5f\x80\xa8\x81\x61\xb6\xfd\x8f\x24\x28\x6a\x57\xc3\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 64531, MSG_CONFIRM, NULL, 47) = 64531 [pid 5082] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 9 [pid 5082] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 10 [pid 5082] ioctl(10, SIOCGIFINDEX, {ifr_name="batadv_slave_1", ifr_ifindex=42}) = 0 [pid 5082] sendmsg(9, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x70\x00\x00\x00\x14\x00\x09\x05\x00\x00\x00\x00\x00\x00\x00\x00\x02\x01\x00\xfd\x2a\x00\x00\x00\x14\x00\x06\x00\x06\x00\x00\x00\x00\x00\x00\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x02\x00\xac\x1e\x00\x01\x08\x00\x01\x00\xac\x14\x14\xaa\x08\x00\x04\x00\x7f\x00\x00\x01\x08\x00\x04\x00\xe0\x00\x00\x02\x14\x00\x03\x00\x76\x65\x74\x68\x31\x5f\x74\x6f\x5f\x62\x6f\x6e\x64\x00\x00\x00\x08\x00\x08\x00"..., iov_len=112}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 112 [pid 5082] close(3) = 0 [pid 5082] close(4) = 0 [pid 5082] close(5) = 0 [pid 5082] close(6) = 0 [pid 5082] close(7) = 0 [pid 5082] close(8) = 0 [pid 5082] close(9) = 0 [pid 5082] close(10) = 0 [pid 5082] close(11) = -1 EBADF (Bad file descriptor) [pid 5082] close(12) = -1 EBADF (Bad file descriptor) [pid 5082] close(13) = -1 EBADF (Bad file descriptor) [pid 5082] close(14) = -1 EBADF (Bad file descriptor) [pid 5082] close(15) = -1 EBADF (Bad file descriptor) [pid 5082] close(16) = -1 EBADF (Bad file descriptor) [pid 5082] close(17) = -1 EBADF (Bad file descriptor) [pid 5082] close(18) = -1 EBADF (Bad file descriptor) [pid 5082] close(19) = -1 EBADF (Bad file descriptor) [pid 5082] close(20) = -1 EBADF (Bad file descriptor) [pid 5082] close(21) = -1 EBADF (Bad file descriptor) [pid 5082] close(22) = -1 EBADF (Bad file descriptor) [pid 5082] close(23) = -1 EBADF (Bad file descriptor) [pid 5082] close(24) = -1 EBADF (Bad file descriptor) [pid 5082] close(25) = -1 EBADF (Bad file descriptor) [pid 5082] close(26) = -1 EBADF (Bad file descriptor) [pid 5082] close(27) = -1 EBADF (Bad file descriptor) [pid 5082] close(28) = -1 EBADF (Bad file descriptor) [pid 5082] close(29) = -1 EBADF (Bad file descriptor) [pid 5082] exit_group(0) = ? [pid 5082] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555c24650) = 3 ./strace-static-x86_64: Process 5084 attached [pid 5084] set_robust_list(0x555555c24660, 24) = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] write(3, "1000", 4) = 4 [pid 5084] close(3) = 0 [pid 5084] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 5084] openat(AT_FDCWD, "./bus", O_RDONLY) = 3 [pid 5084] openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4 [pid 5084] dup(4) = 5 [pid 5084] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL)) = 6 [pid 5084] setsockopt(6, SOL_PACKET, PACKET_VNET_HDR, "\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 197675465) = 0 [pid 5084] socketpair(AF_UNIX, SOCK_STREAM, 0, [7, 8]) = 0 [pid 5084] getsockname(7, {sa_family=AF_UNIX}, [20 => 2]) = 0 [pid 5084] bind(6, {sa_family=AF_PACKET, sll_protocol=htons(0 /* ETH_P_??? */), sll_ifindex=if_nametoindex("wlan0"), sll_hatype=ARPHRD_ETHER, sll_pkttype=PACKET_HOST, sll_halen=6, sll_addr=[0x5f, 0xfa, 0x45, 0xaa, 0xe9, 0xe3]}, 20) = 0 [ 106.973408][ T5084] skb len=1116 headroom=140 headlen=1116 tailroom=472 [ 106.973408][ T5084] mac=(140,0) net=(140,60) trans=200 [ 106.973408][ T5084] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 106.973408][ T5084] csum(0xe0102e8 ip_summed=3 complete_sw=0 valid=0 level=0) [ 106.973408][ T5084] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 107.005900][ T5084] dev name=batadv_slave_1 feat=0x000061164fdd19e9 [ 107.012387][ T5084] sk family=17 type=3 proto=0 [ 107.017074][ T5084] skb linear: 00000000: 45 00 04 5c 99 76 00 00 40 29 35 e4 ac 1e 00 01 [ 107.025685][ T5084] skb linear: 00000010: fa ff ff ff 02 00 c5 2c 04 20 06 75 e0 05 b0 2f [ 107.034288][ T5084] skb linear: 00000020: 08 00 eb 2b 2f f0 da c8 89 7c 6b 11 20 02 fa ff [ 107.042849][ T5084] skb linear: 00000030: ff ff 30 66 09 0c b6 00 c5 47 1d 13 0a 66 32 1a [ 107.051414][ T5084] skb linear: 00000040: 54 e8 d6 f1 5f 80 a8 81 61 36 fd 8f 2c 66 6a 57 [ 107.059973][ T5084] skb linear: 00000050: c3 fe ff ff 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.068552][ T5084] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.077081][ T5084] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.085650][ T5084] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.094212][ T5084] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.102827][ T5084] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.111400][ T5084] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.120001][ T5084] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.128571][ T5084] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.137131][ T5084] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.145709][ T5084] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.154285][ T5084] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.162848][ T5084] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.171442][ T5084] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.180050][ T5084] ------------[ cut here ]------------ [ 107.185525][ T5084] offset+2 (4191) > skb_headlen() (1116) [ 107.192352][ T5084] WARNING: CPU: 1 PID: 5084 at net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 [ 107.202812][ T5084] Modules linked in: [ 107.206719][ T5084] CPU: 1 PID: 5084 Comm: syz-executor336 Not tainted 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0 [ 107.217289][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 107.227492][ T5084] RIP: 0010:skb_checksum_help+0x5e2/0x740 [ 107.233316][ T5084] Code: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 <0f> 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef [ 107.253013][ T5084] RSP: 0018:ffffc90003a9f338 EFLAGS: 00010286 [ 107.259186][ T5084] RAX: 0000000000000000 RBX: ffff888025125780 RCX: ffffffff814db209 [ 107.267204][ T5084] RDX: ffff888015393b80 RSI: ffffffff814db216 RDI: 0000000000000001 [ 107.275257][ T5084] RBP: ffff8880251257f4 R08: 0000000000000001 R09: 0000000000000000 [ 107.283319][ T5084] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000045c [ 107.291368][ T5084] R13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d [ 107.299408][ T5084] FS: 0000555555c24380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 107.308434][ T5084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.315054][ T5084] CR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0 [ 107.323102][ T5084] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.331185][ T5084] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.339260][ T5084] Call Trace: [ 107.342573][ T5084] [ 107.345519][ T5084] ? show_regs+0x8f/0xa0 [ 107.349871][ T5084] ? __warn+0xe6/0x390 [ 107.353998][ T5084] ? skb_checksum_help+0x5e2/0x740 [ 107.359194][ T5084] ? report_bug+0x3bc/0x580 [ 107.363747][ T5084] ? handle_bug+0x3d/0x70 [ 107.368180][ T5084] ? exc_invalid_op+0x17/0x40 [ 107.372908][ T5084] ? asm_exc_invalid_op+0x1a/0x20 [ 107.378034][ T5084] ? __warn_printk+0x199/0x350 [ 107.382850][ T5084] ? __warn_printk+0x1a6/0x350 [ 107.387639][ T5084] ? skb_checksum_help+0x5e2/0x740 [ 107.392831][ T5084] ? skb_checksum_help+0x5e1/0x740 [ 107.398064][ T5084] ip_do_fragment+0xa1b/0x18b0 [ 107.402919][ T5084] ? ip_fragment.constprop.0+0x230/0x230 [ 107.408656][ T5084] ? ip_skb_dst_mtu+0xc80/0xc80 [ 107.413578][ T5084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.419599][ T5084] ip_fragment.constprop.0+0x161/0x230 [ 107.425132][ T5084] __ip_finish_output+0x49c/0x650 [ 107.430250][ T5084] ip_finish_output+0x31/0x310 [ 107.435076][ T5084] ip_output+0x13b/0x2a0 [ 107.439413][ T5084] ip_local_out+0xaf/0x1a0 [ 107.443890][ T5084] iptunnel_xmit+0x5b4/0x9b0 [ 107.448611][ T5084] sit_tunnel_xmit+0xed2/0x28f0 [ 107.453531][ T5084] ? ipip_rcv+0x20/0x20 [ 107.457718][ T5084] ? dev_queue_xmit_nit+0x86d/0xb70 [ 107.463005][ T5084] ? dev_queue_xmit_nit+0x851/0xb70 [ 107.468283][ T5084] ? __skb_gso_segment+0x39b/0x710 [ 107.473429][ T5084] dev_hard_start_xmit+0x13d/0x6d0 [ 107.478646][ T5084] __dev_queue_xmit+0x7c1/0x3d60 [ 107.483645][ T5084] ? _copy_from_iter+0x2c1/0x10f0 [ 107.488753][ T5084] ? netdev_core_pick_tx+0x3a0/0x3a0 [ 107.494090][ T5084] ? skb_partial_csum_set+0x202/0x390 [ 107.499548][ T5084] ? virtio_net_hdr_to_skb.constprop.0+0x4e4/0x1380 [ 107.506217][ T5084] ? packet_create+0x8e0/0x8e0 [ 107.511064][ T5084] packet_xmit+0x257/0x380 [ 107.515527][ T5084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.521503][ T5084] packet_sendmsg+0x24ca/0x5240 [ 107.526418][ T5084] ? preempt_count_sub+0x160/0x160 [ 107.531603][ T5084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.537552][ T5084] ? aa_sk_perm+0x2f8/0xb40 [ 107.542162][ T5084] ? packet_notifier+0x8c0/0x8c0 [ 107.547159][ T5084] ? aa_af_perm+0x250/0x250 [ 107.551752][ T5084] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.557096][ T5084] ? packet_notifier+0x8c0/0x8c0 [ 107.562134][ T5084] __sock_sendmsg+0xd5/0x180 [ 107.566776][ T5084] __sys_sendto+0x255/0x340 [ 107.571374][ T5084] ? __ia32_sys_getpeername+0xb0/0xb0 [ 107.576799][ T5084] ? spin_bug+0x1d0/0x1d0 [ 107.581195][ T5084] ? cgroup_update_frozen+0x144/0x6b0 [ 107.586640][ T5084] ? ptrace_notify+0xf4/0x130 [ 107.591419][ T5084] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.596661][ T5084] ? lockdep_hardirqs_on+0x7d/0x110 [ 107.601943][ T5084] ? _raw_spin_unlock_irq+0x2e/0x50 [ 107.607189][ T5084] __x64_sys_sendto+0xe0/0x1b0 [ 107.612066][ T5084] ? syscall_enter_from_user_mode+0x107/0x120 [ 107.618249][ T5084] do_syscall_64+0x40/0x110 [ 107.622787][ T5084] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 107.628777][ T5084] RIP: 0033:0x7f810e30ee69 [ 107.633226][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 107.652997][ T5084] RSP: 002b:00007ffc2d2906e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.661483][ T5084] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f810e30ee69 [ 107.669559][ T5084] RDX: 000000000000fc13 RSI: 0000000020000280 RDI: 0000000000000006 [ 107.677580][ T5084] RBP: 00000000000f4240 R08: 0000000000000000 R09: 000000000000002f [ 107.685639][ T5084] R10: 0000000000000800 R11: 0000000000000246 R12: 00007ffc2d290750 [ 107.693683][ T5084] R13: 000000000001a075 R14: 00007ffc2d29071c R15: 0000000000000003 [ 107.701758][ T5084] [ 107.704806][ T5084] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.712093][ T5084] CPU: 1 PID: 5084 Comm: syz-executor336 Not tainted 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0 [ 107.722520][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 107.732589][ T5084] Call Trace: [ 107.735899][ T5084] [ 107.738857][ T5084] dump_stack_lvl+0xd9/0x1b0 [ 107.743473][ T5084] panic+0x6dc/0x790 [ 107.747389][ T5084] ? panic_smp_self_stop+0xa0/0xa0 [ 107.752527][ T5084] ? show_trace_log_lvl+0x363/0x4f0 [ 107.757759][ T5084] ? check_panic_on_warn+0x1f/0xb0 [ 107.762937][ T5084] ? skb_checksum_help+0x5e2/0x740 [ 107.768074][ T5084] check_panic_on_warn+0xab/0xb0 [ 107.773035][ T5084] __warn+0xf2/0x390 [ 107.776952][ T5084] ? skb_checksum_help+0x5e2/0x740 [ 107.782084][ T5084] report_bug+0x3bc/0x580 [ 107.786442][ T5084] handle_bug+0x3d/0x70 [ 107.790623][ T5084] exc_invalid_op+0x17/0x40 [ 107.795150][ T5084] asm_exc_invalid_op+0x1a/0x20 [ 107.800031][ T5084] RIP: 0010:skb_checksum_help+0x5e2/0x740 [ 107.805946][ T5084] Code: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 <0f> 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef [ 107.825595][ T5084] RSP: 0018:ffffc90003a9f338 EFLAGS: 00010286 [ 107.831688][ T5084] RAX: 0000000000000000 RBX: ffff888025125780 RCX: ffffffff814db209 [ 107.839678][ T5084] RDX: ffff888015393b80 RSI: ffffffff814db216 RDI: 0000000000000001 [ 107.847679][ T5084] RBP: ffff8880251257f4 R08: 0000000000000001 R09: 0000000000000000 [ 107.855694][ T5084] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000045c [ 107.863681][ T5084] R13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d [ 107.871715][ T5084] ? __warn_printk+0x199/0x350 [ 107.876519][ T5084] ? __warn_printk+0x1a6/0x350 [ 107.881334][ T5084] ? skb_checksum_help+0x5e1/0x740 [ 107.886476][ T5084] ip_do_fragment+0xa1b/0x18b0 [ 107.891272][ T5084] ? ip_fragment.constprop.0+0x230/0x230 [ 107.896946][ T5084] ? ip_skb_dst_mtu+0xc80/0xc80 [ 107.901840][ T5084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.907775][ T5084] ip_fragment.constprop.0+0x161/0x230 [ 107.913290][ T5084] __ip_finish_output+0x49c/0x650 [ 107.918359][ T5084] ip_finish_output+0x31/0x310 [ 107.923159][ T5084] ip_output+0x13b/0x2a0 [ 107.927460][ T5084] ip_local_out+0xaf/0x1a0 [ 107.931921][ T5084] iptunnel_xmit+0x5b4/0x9b0 [ 107.936572][ T5084] sit_tunnel_xmit+0xed2/0x28f0 [ 107.941465][ T5084] ? ipip_rcv+0x20/0x20 [ 107.945645][ T5084] ? dev_queue_xmit_nit+0x86d/0xb70 [ 107.950874][ T5084] ? dev_queue_xmit_nit+0x851/0xb70 [ 107.956137][ T5084] ? __skb_gso_segment+0x39b/0x710 [ 107.961303][ T5084] dev_hard_start_xmit+0x13d/0x6d0 [ 107.966451][ T5084] __dev_queue_xmit+0x7c1/0x3d60 [ 107.971424][ T5084] ? _copy_from_iter+0x2c1/0x10f0 [ 107.976479][ T5084] ? netdev_core_pick_tx+0x3a0/0x3a0 [ 107.981791][ T5084] ? skb_partial_csum_set+0x202/0x390 [ 107.987213][ T5084] ? virtio_net_hdr_to_skb.constprop.0+0x4e4/0x1380 [ 107.993861][ T5084] ? packet_create+0x8e0/0x8e0 [ 107.998665][ T5084] packet_xmit+0x257/0x380 [ 108.004257][ T5084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.010182][ T5084] packet_sendmsg+0x24ca/0x5240 [ 108.015075][ T5084] ? preempt_count_sub+0x160/0x160 [ 108.020244][ T5084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.026178][ T5084] ? aa_sk_perm+0x2f8/0xb40 [ 108.030704][ T5084] ? packet_notifier+0x8c0/0x8c0 [ 108.035735][ T5084] ? aa_af_perm+0x250/0x250 [ 108.040313][ T5084] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 108.045630][ T5084] ? packet_notifier+0x8c0/0x8c0 [ 108.050595][ T5084] __sock_sendmsg+0xd5/0x180 [ 108.055220][ T5084] __sys_sendto+0x255/0x340 [ 108.059772][ T5084] ? __ia32_sys_getpeername+0xb0/0xb0 [ 108.065332][ T5084] ? spin_bug+0x1d0/0x1d0 [ 108.069684][ T5084] ? cgroup_update_frozen+0x144/0x6b0 [ 108.075110][ T5084] ? ptrace_notify+0xf4/0x130 [ 108.079823][ T5084] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.085042][ T5084] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.090278][ T5084] ? _raw_spin_unlock_irq+0x2e/0x50 [ 108.095501][ T5084] __x64_sys_sendto+0xe0/0x1b0 [ 108.100306][ T5084] ? syscall_enter_from_user_mode+0x107/0x120 [ 108.106415][ T5084] do_syscall_64+0x40/0x110 [ 108.110953][ T5084] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 108.116888][ T5084] RIP: 0033:0x7f810e30ee69 [ 108.121321][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 108.141424][ T5084] RSP: 002b:00007ffc2d2906e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 108.149858][ T5084] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f810e30ee69 [ 108.157853][ T5084] RDX: 000000000000fc13 RSI: 0000000020000280 RDI: 0000000000000006 [ 108.165857][ T5084] RBP: 00000000000f4240 R08: 0000000000000000 R09: 000000000000002f [ 108.173852][ T5084] R10: 0000000000000800 R11: 0000000000000246 R12: 00007ffc2d290750 [ 108.181847][ T5084] R13: 000000000001a075 R14: 00007ffc2d29071c R15: 0000000000000003 [ 108.189857][ T5084] [ 108.193106][ T5084] Kernel Offset: disabled [ 108.197561][ T5084] Rebooting in 86400 seconds..