./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1295389578 <...> Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. execve("./syz-executor1295389578", ["./syz-executor1295389578"], 0x7ffd3c4212a0 /* 10 vars */) = 0 brk(NULL) = 0x55558b6bf000 brk(0x55558b6bfd00) = 0x55558b6bfd00 arch_prctl(ARCH_SET_FS, 0x55558b6bf380) = 0 set_tid_address(0x55558b6bf650) = 5073 set_robust_list(0x55558b6bf660, 24) = 0 rseq(0x55558b6bfca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1295389578", 4096) = 28 getrandom("\xfd\x7f\xc3\x1e\x24\x1f\x25\xb5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558b6bfd00 brk(0x55558b6e0d00) = 0x55558b6e0d00 brk(0x55558b6e1000) = 0x55558b6e1000 mprotect(0x7f3fff7cd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5074 attached , child_tidptr=0x55558b6bf650) = 5074 [pid 5074] set_robust_list(0x55558b6bf660, 24) = 0 [pid 5074] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setsid() = 1 [pid 5074] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5074] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5074] unshare(CLONE_NEWNS) = 0 [pid 5074] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5074] unshare(CLONE_NEWIPC) = 0 [pid 5074] unshare(CLONE_NEWCGROUP) = 0 [pid 5074] unshare(CLONE_NEWUTS) = 0 [pid 5074] unshare(CLONE_SYSVSEM) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "16777216", 8) = 8 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "536870912", 9) = 9 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1024", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "8192", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1024", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1024", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5074] close(3) = 0 [pid 5074] getpid() = 1 [pid 5074] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 90 e9 09 fc ff ff 44 89 e7 89 ee e8 0f 57 9d f7 41 39 ec 0f [ 83.052673][ T5074] RSP: 0018:ffffc900039dee00 EFLAGS: 00010293 [ 83.058832][ T5074] RAX: ffffffff89f79b0e RBX: ffff888024af3718 RCX: ffff8880157e3c00 [ 83.066878][ T5074] RDX: 0000000000000000 RSI: 00000000ffffffb6 RDI: 0000000000000000 [ 83.074869][ T5074] RBP: 00000000ffffffb6 R08: ffffffff89f79712 R09: 1ffffffff1f0d5cd [ 83.082899][ T5074] R10: dffffc0000000000 R11: ffffffff89f79610 R12: 0000000000000000 [ 83.090944][ T5074] R13: ffff888024af3640 R14: ffff88802cd18000 R15: dffffc0000000000 [ 83.099008][ T5074] FS: 000055558b6bf380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 83.108020][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.114640][ T5074] CR2: 0000000020010000 CR3: 000000002263a000 CR4: 00000000003506f0 [ 83.122902][ T5074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.131851][ T5074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.141175][ T5074] Call Trace: [ 83.144485][ T5074] [ 83.147486][ T5074] ? __warn+0x163/0x4b0 [ 83.151804][ T5074] ? gre_tap_xmit+0x4ff/0x6e0 [ 83.156547][ T5074] ? report_bug+0x2b3/0x500 [ 83.161130][ T5074] ? gre_tap_xmit+0x4ff/0x6e0 [ 83.165906][ T5074] ? handle_bug+0x3e/0x70 [ 83.170267][ T5074] ? exc_invalid_op+0x1a/0x50 [ 83.174962][ T5074] ? asm_exc_invalid_op+0x1a/0x20 [ 83.180059][ T5074] ? __pfx_gre_tap_xmit+0x10/0x10 [ 83.185111][ T5074] ? gre_tap_xmit+0x102/0x6e0 [ 83.190140][ T5074] ? gre_tap_xmit+0x4fe/0x6e0 [ 83.194860][ T5074] ? gre_tap_xmit+0x4ff/0x6e0 [ 83.199634][ T5074] dev_hard_start_xmit+0x26a/0x790 [ 83.204810][ T5074] sch_direct_xmit+0x2b6/0x5f0 [ 83.209664][ T5074] ? __pfx_sch_direct_xmit+0x10/0x10 [ 83.215092][ T5074] __dev_queue_xmit+0x1912/0x3b10 [ 83.220230][ T5074] ? __dev_queue_xmit+0x2c4/0x3b10 [ 83.225407][ T5074] ? __pfx___dev_queue_xmit+0x10/0x10 [ 83.230886][ T5074] ? netdev_lower_get_next_private_rcu+0x9e/0x100 [ 83.237386][ T5074] ? bond_get_slave_by_id+0x5c8/0x5d0 [ 83.242784][ T5074] ? __pfx_lock_release+0x10/0x10 [ 83.247880][ T5074] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 83.253664][ T5074] ? bond_xmit_roundrobin_slave_get+0x24c/0x420 [ 83.260065][ T5074] bond_start_xmit+0x1389/0x1c40 [ 83.265086][ T5074] ? bond_start_xmit+0x128/0x1c40 [ 83.270193][ T5074] ? __pfx_bond_start_xmit+0x10/0x10 [ 83.275562][ T5074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.281558][ T5074] ? validate_xmit_xfrm+0xc1/0x1260 [ 83.286814][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.293180][ T5074] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 83.298811][ T5074] ? validate_xmit_skb+0x5b5/0x1120 [ 83.304049][ T5074] ? kmem_cache_free+0x102/0x2a0 [ 83.309062][ T5074] ? validate_xmit_skb+0xa04/0x1120 [ 83.314300][ T5074] dev_hard_start_xmit+0x26a/0x790 [ 83.319491][ T5074] __dev_queue_xmit+0x19f4/0x3b10 [ 83.324553][ T5074] ? __dev_queue_xmit+0x2c4/0x3b10 [ 83.329742][ T5074] ? skb_partial_csum_set+0x105/0x350 [ 83.335142][ T5074] ? __pfx___dev_queue_xmit+0x10/0x10 [ 83.340581][ T5074] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 83.346199][ T5074] ? packet_parse_headers+0x7bd/0xad0 [ 83.351586][ T5074] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 83.357454][ T5074] ? packet_xmit+0x68/0x330 [ 83.361992][ T5074] packet_sendmsg+0x4932/0x63d0 [ 83.366936][ T5074] ? __pfx___might_resched+0x10/0x10 [ 83.372259][ T5074] ? aa_sk_perm+0x967/0xab0 [ 83.376832][ T5074] ? __pfx_packet_sendmsg+0x10/0x10 [ 83.382066][ T5074] ? __import_iovec+0x361/0x820 [ 83.386975][ T5074] ? aa_sock_msg_perm+0x91/0x160 [ 83.391941][ T5074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 83.397281][ T5074] ? security_socket_sendmsg+0x87/0xb0 [ 83.402801][ T5074] ? __pfx_packet_sendmsg+0x10/0x10 [ 83.408059][ T5074] __sock_sendmsg+0x221/0x270 [ 83.412764][ T5074] ____sys_sendmsg+0x525/0x7d0 [ 83.417602][ T5074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.422920][ T5074] ? do_raw_spin_lock+0x14f/0x370 [ 83.428017][ T5074] __sys_sendmsg+0x2b0/0x3a0 [ 83.432637][ T5074] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.437822][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.444182][ T5074] ? _raw_spin_unlock_irq+0x2e/0x50 [ 83.449441][ T5074] ? ptrace_notify+0x279/0x380 [ 83.454252][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.460636][ T5074] ? do_syscall_64+0x10a/0x240 [ 83.465432][ T5074] ? syscall_trace_enter+0x5f/0x150 [ 83.470695][ T5074] do_syscall_64+0xfb/0x240 [ 83.475230][ T5074] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 83.481184][ T5074] RIP: 0033:0x7f3fff754c09 [ 83.485648][ T5074] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.505313][ T5074] RSP: 002b:00007ffeafa98858 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.513798][ T5074] RAX: ffffffffffffffda RBX: 00007f3fff7a23d3 RCX: 00007f3fff754c09 [ 83.521825][ T5074] RDX: 00000000200400c4 RSI: 0000000020000180 RDI: 0000000000000004 [ 83.529844][ T5074] RBP: 00007ffeafa98880 R08: 0000000000000001 R09: 0000000000000001 [ 83.537866][ T5074] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffeafa98890 [ 83.545882][ T5074] R13: 00007f3fff7a2004 R14: 00007ffeafa9887c R15: 0000000000000003 [ 83.553866][ T5074] [ 83.556932][ T5074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.564495][ T5074] CPU: 0 PID: 5074 Comm: syz-executor129 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 83.574571][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 83.584644][ T5074] Call Trace: [ 83.587970][ T5074] [ 83.590947][ T5074] dump_stack_lvl+0x1e7/0x2e0 [ 83.595663][ T5074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.600888][ T5074] ? __pfx__printk+0x10/0x10 [ 83.605510][ T5074] ? vscnprintf+0x5d/0x90 [ 83.609887][ T5074] panic+0x349/0x860 [ 83.613803][ T5074] ? __warn+0x172/0x4b0 [ 83.617980][ T5074] ? __pfx_panic+0x10/0x10 [ 83.622426][ T5074] __warn+0x31e/0x4b0 [ 83.626538][ T5074] ? gre_tap_xmit+0x4ff/0x6e0 [ 83.631238][ T5074] report_bug+0x2b3/0x500 [ 83.635605][ T5074] ? gre_tap_xmit+0x4ff/0x6e0 [ 83.640309][ T5074] handle_bug+0x3e/0x70 [ 83.644485][ T5074] exc_invalid_op+0x1a/0x50 [ 83.649030][ T5074] asm_exc_invalid_op+0x1a/0x20 [ 83.653904][ T5074] RIP: 0010:gre_tap_xmit+0x4ff/0x6e0 [ 83.659197][ T5074] Code: 00 4c 89 ef 48 89 ee 48 89 da e8 7c 8f fb ff 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 62 55 9d f7 90 <0f> 0b 90 e9 09 fc ff ff 44 89 e7 89 ee e8 0f 57 9d f7 41 39 ec 0f [ 83.679241][ T5074] RSP: 0018:ffffc900039dee00 EFLAGS: 00010293 [ 83.685311][ T5074] RAX: ffffffff89f79b0e RBX: ffff888024af3718 RCX: ffff8880157e3c00 [ 83.693627][ T5074] RDX: 0000000000000000 RSI: 00000000ffffffb6 RDI: 0000000000000000 [ 83.701596][ T5074] RBP: 00000000ffffffb6 R08: ffffffff89f79712 R09: 1ffffffff1f0d5cd [ 83.709587][ T5074] R10: dffffc0000000000 R11: ffffffff89f79610 R12: 0000000000000000 [ 83.717644][ T5074] R13: ffff888024af3640 R14: ffff88802cd18000 R15: dffffc0000000000 [ 83.725899][ T5074] ? __pfx_gre_tap_xmit+0x10/0x10 [ 83.730928][ T5074] ? gre_tap_xmit+0x102/0x6e0 [ 83.735602][ T5074] ? gre_tap_xmit+0x4fe/0x6e0 [ 83.740291][ T5074] dev_hard_start_xmit+0x26a/0x790 [ 83.745416][ T5074] sch_direct_xmit+0x2b6/0x5f0 [ 83.750191][ T5074] ? __pfx_sch_direct_xmit+0x10/0x10 [ 83.755486][ T5074] __dev_queue_xmit+0x1912/0x3b10 [ 83.760538][ T5074] ? __dev_queue_xmit+0x2c4/0x3b10 [ 83.765677][ T5074] ? __pfx___dev_queue_xmit+0x10/0x10 [ 83.771067][ T5074] ? netdev_lower_get_next_private_rcu+0x9e/0x100 [ 83.777498][ T5074] ? bond_get_slave_by_id+0x5c8/0x5d0 [ 83.782878][ T5074] ? __pfx_lock_release+0x10/0x10 [ 83.787904][ T5074] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 83.793631][ T5074] ? bond_xmit_roundrobin_slave_get+0x24c/0x420 [ 83.799885][ T5074] bond_start_xmit+0x1389/0x1c40 [ 83.804834][ T5074] ? bond_start_xmit+0x128/0x1c40 [ 83.809860][ T5074] ? __pfx_bond_start_xmit+0x10/0x10 [ 83.815168][ T5074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.821150][ T5074] ? validate_xmit_xfrm+0xc1/0x1260 [ 83.826351][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.832695][ T5074] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 83.838248][ T5074] ? validate_xmit_skb+0x5b5/0x1120 [ 83.843461][ T5074] ? kmem_cache_free+0x102/0x2a0 [ 83.848416][ T5074] ? validate_xmit_skb+0xa04/0x1120 [ 83.853624][ T5074] dev_hard_start_xmit+0x26a/0x790 [ 83.858750][ T5074] __dev_queue_xmit+0x19f4/0x3b10 [ 83.863792][ T5074] ? __dev_queue_xmit+0x2c4/0x3b10 [ 83.868947][ T5074] ? skb_partial_csum_set+0x105/0x350 [ 83.874329][ T5074] ? __pfx___dev_queue_xmit+0x10/0x10 [ 83.879709][ T5074] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 83.885254][ T5074] ? packet_parse_headers+0x7bd/0xad0 [ 83.890643][ T5074] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 83.896454][ T5074] ? packet_xmit+0x68/0x330 [ 83.900964][ T5074] packet_sendmsg+0x4932/0x63d0 [ 83.905841][ T5074] ? __pfx___might_resched+0x10/0x10 [ 83.911140][ T5074] ? aa_sk_perm+0x967/0xab0 [ 83.915770][ T5074] ? __pfx_packet_sendmsg+0x10/0x10 [ 83.921033][ T5074] ? __import_iovec+0x361/0x820 [ 83.925909][ T5074] ? aa_sock_msg_perm+0x91/0x160 [ 83.930873][ T5074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 83.936190][ T5074] ? security_socket_sendmsg+0x87/0xb0 [ 83.941665][ T5074] ? __pfx_packet_sendmsg+0x10/0x10 [ 83.946875][ T5074] __sock_sendmsg+0x221/0x270 [ 83.951569][ T5074] ____sys_sendmsg+0x525/0x7d0 [ 83.956363][ T5074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.961664][ T5074] ? do_raw_spin_lock+0x14f/0x370 [ 83.966720][ T5074] __sys_sendmsg+0x2b0/0x3a0 [ 83.972563][ T5074] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.977706][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.984066][ T5074] ? _raw_spin_unlock_irq+0x2e/0x50 [ 83.989278][ T5074] ? ptrace_notify+0x279/0x380 [ 83.994841][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.001197][ T5074] ? do_syscall_64+0x10a/0x240 [ 84.006005][ T5074] ? syscall_trace_enter+0x5f/0x150 [ 84.011477][ T5074] do_syscall_64+0xfb/0x240 [ 84.016176][ T5074] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 84.022611][ T5074] RIP: 0033:0x7f3fff754c09 [ 84.027531][ T5074] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.048216][ T5074] RSP: 002b:00007ffeafa98858 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.056675][ T5074] RAX: ffffffffffffffda RBX: 00007f3fff7a23d3 RCX: 00007f3fff754c09 [ 84.064716][ T5074] RDX: 00000000200400c4 RSI: 0000000020000180 RDI: 0000000000000004 [ 84.072710][ T5074] RBP: 00007ffeafa98880 R08: 0000000000000001 R09: 0000000000000001 [ 84.080703][ T5074] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffeafa98890 [ 84.088690][ T5074] R13: 00007f3fff7a2004 R14: 00007ffeafa9887c R15: 0000000000000003 [ 84.096682][ T5074] [ 84.100009][ T5074] Kernel Offset: disabled [ 84.104431][ T5074] Rebooting in 86400 seconds..