./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3764210001 <...> forked to background, child pid 3185 no interfaces have a carrier [ 23.649150][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.660515][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. execve("./syz-executor3764210001", ["./syz-executor3764210001"], 0x7ffde1bf2790 /* 10 vars */) = 0 brk(NULL) = 0x55555728f000 brk(0x55555728fc40) = 0x55555728fc40 arch_prctl(ARCH_SET_FS, 0x55555728f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3764210001", 4096) = 28 brk(0x5555572b0c40) = 0x5555572b0c40 brk(0x5555572b1000) = 0x5555572b1000 mprotect(0x7f01899f5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/ppp", O_RDWR|O_NONBLOCK|O_NOATIME|O_CLOEXEC) = 3 ioctl(3, PPPIOCNEWUNIT, 0x200000c0) = 0 ioctl(3, PPPIOCSACTIVE, 0x20000240) = 0 syzkaller login: [ 46.295711][ T3606] ------------[ cut here ]------------ [ 46.301492][ T3606] WARNING: CPU: 1 PID: 3606 at net/core/flow_dissector.c:1016 __skb_flow_dissect+0x947/0x5920 [ 46.311936][ T3606] Modules linked in: [ 46.315844][ T3606] CPU: 1 PID: 3606 Comm: syz-executor376 Not tainted 6.1.0-rc3-syzkaller-00239-g10d916c86eca #0 [ 46.326558][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 46.336625][ T3606] RIP: 0010:__skb_flow_dissect+0x947/0x5920 [ 46.342506][ T3606] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 97 66 26 fa 48 85 db 0f 85 84 f8 ff ff e8 89 66 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 73 66 26 fa [ 46.362308][ T3606] RSP: 0018:ffffc90003e9f628 EFLAGS: 00010293 [ 46.368374][ T3606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 46.376339][ T3606] RDX: ffff888026b73a80 RSI: ffffffff87564607 RDI: ffff88801c329c98 [ 46.384311][ T3606] RBP: ffffffff8de29206 R08: 0000000000000001 R09: 0000000000000000 [ 46.392284][ T3606] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de29204 [ 46.400258][ T3606] R13: 0000000000000000 R14: ffffffff8de29200 R15: ffff88801c329c80 [ 46.408249][ T3606] FS: 000055555728f300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 46.417198][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.423763][ T3606] CR2: 00000000005d84c8 CR3: 000000007ac41000 CR4: 0000000000350ee0 [ 46.431730][ T3606] Call Trace: [ 46.435007][ T3606] [ 46.437930][ T3606] ? is_bpf_text_address+0x99/0x170 [ 46.443116][ T3606] ? kernel_text_address+0x39/0x80 [ 46.448233][ T3606] ? __kernel_text_address+0x9/0x30 [ 46.453418][ T3606] ? unwind_get_return_address+0x51/0x90 [ 46.459054][ T3606] ? bpf_flow_dissect+0x360/0x360 [ 46.464067][ T3606] ? mark_lock.part.0+0xee/0x1910 [ 46.469090][ T3606] ? lock_chain_count+0x20/0x20 [ 46.473941][ T3606] ? stack_trace_save+0x8c/0xc0 [ 46.478793][ T3606] ? filter_irq_stacks+0x90/0x90 [ 46.483722][ T3606] ? save_trace+0x43/0xa00 [ 46.488137][ T3606] ? mark_lock.part.0+0xee/0x1910 [ 46.493144][ T3606] ? __lock_acquire+0x166e/0x56d0 [ 46.498165][ T3606] ? lock_chain_count+0x20/0x20 [ 46.503019][ T3606] ? mark_lock.part.0+0xee/0x1910 [ 46.508041][ T3606] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.514023][ T3606] ? mark_lock.part.0+0xee/0x1910 [ 46.519063][ T3606] ? lock_chain_count+0x20/0x20 [ 46.523897][ T3606] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.529966][ T3606] ? mark_held_locks+0x9f/0xe0 [ 46.534717][ T3606] ? asm_common_interrupt+0x22/0x40 [ 46.539923][ T3606] skb_get_poff+0x99/0x1a0 [ 46.544327][ T3606] ? __skb_get_poff+0x290/0x290 [ 46.549787][ T3606] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 46.555598][ T3606] bpf_skb_get_pay_offset+0x11/0x20 [ 46.560786][ T3606] ? __ppp_xmit_process+0x9a6/0x17b0 [ 46.566081][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 46.570914][ T3606] ? ppp_receive_nonmp_frame+0x2000/0x2000 [ 46.576729][ T3606] ? ppp_xmit_process+0x161/0x2f0 [ 46.581744][ T3606] ? ppp_write+0x239/0x2d0 [ 46.586160][ T3606] ? do_iter_write+0x4ef/0x700 [ 46.592042][ T3606] ? vfs_writev+0x1aa/0x630 [ 46.596910][ T3606] ? vfs_iter_write+0xa0/0xa0 [ 46.601572][ T3606] ? do_raw_spin_lock+0x120/0x2a0 [ 46.606591][ T3606] ? rwlock_bug.part.0+0x90/0x90 [ 46.611523][ T3606] ? _raw_spin_lock_irq+0x41/0x50 [ 46.616637][ T3606] ? find_held_lock+0x2d/0x110 [ 46.621383][ T3606] ? ptrace_notify+0xfa/0x140 [ 46.626057][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 46.630891][ T3606] ? __x64_sys_pwritev+0x22b/0x310 [ 46.636000][ T3606] ? __ia32_sys_preadv2+0x150/0x150 [ 46.641184][ T3606] ? lockdep_hardirqs_on+0x79/0x100 [ 46.646393][ T3606] ? _raw_spin_unlock_irq+0x2a/0x40 [ 46.651577][ T3606] ? ptrace_notify+0xfa/0x140 [ 46.656251][ T3606] ? do_syscall_64+0x35/0xb0 [ 46.660830][ T3606] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 46.666911][ T3606] [ 46.669918][ T3606] Kernel panic - not syncing: panic_on_warn set ... [ 46.676662][ T3606] CPU: 1 PID: 3606 Comm: syz-executor376 Not tainted 6.1.0-rc3-syzkaller-00239-g10d916c86eca #0 [ 46.687062][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 46.697478][ T3606] Call Trace: [ 46.701006][ T3606] [ 46.703918][ T3606] dump_stack_lvl+0xcd/0x134 [ 46.708499][ T3606] panic+0x2c8/0x622 [ 46.712385][ T3606] ? panic_print_sys_info.part.0+0x110/0x110 [ 46.718358][ T3606] ? __warn.cold+0x24b/0x350 [ 46.722932][ T3606] ? __skb_flow_dissect+0x947/0x5920 [ 46.728205][ T3606] __warn.cold+0x25c/0x350 [ 46.732603][ T3606] ? __skb_flow_dissect+0x947/0x5920 [ 46.737872][ T3606] report_bug+0x1bc/0x210 [ 46.742188][ T3606] handle_bug+0x3c/0x70 [ 46.746329][ T3606] exc_invalid_op+0x14/0x40 [ 46.750812][ T3606] asm_exc_invalid_op+0x16/0x20 [ 46.755645][ T3606] RIP: 0010:__skb_flow_dissect+0x947/0x5920 [ 46.761535][ T3606] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7f 47 00 00 48 8b 9b 50 06 00 00 e8 97 66 26 fa 48 85 db 0f 85 84 f8 ff ff e8 89 66 26 fa <0f> 0b e9 56 fa ff ff 66 83 fb 08 0f 85 ea 0e 00 00 e8 73 66 26 fa [ 46.781120][ T3606] RSP: 0018:ffffc90003e9f628 EFLAGS: 00010293 [ 46.787167][ T3606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 46.795120][ T3606] RDX: ffff888026b73a80 RSI: ffffffff87564607 RDI: ffff88801c329c98 [ 46.803077][ T3606] RBP: ffffffff8de29206 R08: 0000000000000001 R09: 0000000000000000 [ 46.811027][ T3606] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8de29204 [ 46.819153][ T3606] R13: 0000000000000000 R14: ffffffff8de29200 R15: ffff88801c329c80 [ 46.827120][ T3606] ? __skb_flow_dissect+0x947/0x5920 [ 46.832391][ T3606] ? __skb_flow_dissect+0x947/0x5920 [ 46.838095][ T3606] ? is_bpf_text_address+0x99/0x170 [ 46.843278][ T3606] ? kernel_text_address+0x39/0x80 [ 46.848378][ T3606] ? __kernel_text_address+0x9/0x30 [ 46.853558][ T3606] ? unwind_get_return_address+0x51/0x90 [ 46.859173][ T3606] ? bpf_flow_dissect+0x360/0x360 [ 46.864182][ T3606] ? mark_lock.part.0+0xee/0x1910 [ 46.869192][ T3606] ? lock_chain_count+0x20/0x20 [ 46.874024][ T3606] ? stack_trace_save+0x8c/0xc0 [ 46.878874][ T3606] ? filter_irq_stacks+0x90/0x90 [ 46.883807][ T3606] ? save_trace+0x43/0xa00 [ 46.888207][ T3606] ? mark_lock.part.0+0xee/0x1910 [ 46.893212][ T3606] ? __lock_acquire+0x166e/0x56d0 [ 46.898215][ T3606] ? lock_chain_count+0x20/0x20 [ 46.903047][ T3606] ? mark_lock.part.0+0xee/0x1910 [ 46.908053][ T3606] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.914012][ T3606] ? mark_lock.part.0+0xee/0x1910 [ 46.919026][ T3606] ? lock_chain_count+0x20/0x20 [ 46.923942][ T3606] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.929996][ T3606] ? mark_held_locks+0x9f/0xe0 [ 46.934742][ T3606] ? asm_common_interrupt+0x22/0x40 [ 46.939933][ T3606] skb_get_poff+0x99/0x1a0 [ 46.944345][ T3606] ? __skb_get_poff+0x290/0x290 [ 46.949185][ T3606] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 46.954994][ T3606] bpf_skb_get_pay_offset+0x11/0x20 [ 46.960186][ T3606] ? __ppp_xmit_process+0x9a6/0x17b0 [ 46.965468][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 46.970303][ T3606] ? ppp_receive_nonmp_frame+0x2000/0x2000 [ 46.976102][ T3606] ? ppp_xmit_process+0x161/0x2f0 [ 46.981110][ T3606] ? ppp_write+0x239/0x2d0 [ 46.985515][ T3606] ? do_iter_write+0x4ef/0x700 [ 46.990276][ T3606] ? vfs_writev+0x1aa/0x630 [ 46.994761][ T3606] ? vfs_iter_write+0xa0/0xa0 [ 46.999422][ T3606] ? do_raw_spin_lock+0x120/0x2a0 [ 47.004428][ T3606] ? rwlock_bug.part.0+0x90/0x90 [ 47.009346][ T3606] ? _raw_spin_lock_irq+0x41/0x50 [ 47.014362][ T3606] ? find_held_lock+0x2d/0x110 [ 47.019105][ T3606] ? ptrace_notify+0xfa/0x140 [ 47.023760][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 47.028594][ T3606] ? __x64_sys_pwritev+0x22b/0x310 [ 47.033690][ T3606] ? __ia32_sys_preadv2+0x150/0x150 [ 47.038870][ T3606] ? lockdep_hardirqs_on+0x79/0x100 [ 47.044050][ T3606] ? _raw_spin_unlock_irq+0x2a/0x40 [ 47.049243][ T3606] ? ptrace_notify+0xfa/0x140 [ 47.053910][ T3606] ? do_syscall_64+0x35/0xb0 [ 47.058487][ T3606] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 47.064545][ T3606] [ 47.068129][ T3606] Kernel Offset: disabled [ 47.072502][ T3606] Rebooting in 86400 seconds..