./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1410931287 <...> Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. execve("./syz-executor1410931287", ["./syz-executor1410931287"], 0x7ffc4c845de0 /* 10 vars */) = 0 brk(NULL) = 0x55555680d000 brk(0x55555680dd00) = 0x55555680dd00 arch_prctl(ARCH_SET_FS, 0x55555680d380) = 0 set_tid_address(0x55555680d650) = 5055 set_robust_list(0x55555680d660, 24) = 0 rseq(0x55555680dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1410931287", 4096) = 28 getrandom("\xd2\xa7\x98\x9e\x52\x5c\x28\x68", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555680dd00 brk(0x55555682ed00) = 0x55555682ed00 brk(0x55555682f000) = 0x55555682f000 mprotect(0x7f816f766000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5056 attached , child_tidptr=0x55555680d650) = 5056 [pid 5056] set_robust_list(0x55555680d660, 24) = 0 [ 79.035338][ T28] audit: type=1400 audit(1705752346.386:86): avc: denied { execmem } for pid=5055 comm="syz-executor141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5056] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5056] setsid() = 1 [pid 5056] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5056] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [ 79.086099][ T28] audit: type=1400 audit(1705752346.436:87): avc: denied { mounton } for pid=5056 comm="syz-executor141" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 79.110178][ T28] audit: type=1400 audit(1705752346.436:88): avc: denied { mount } for pid=5056 comm="syz-executor141" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [pid 5056] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5056] unshare(CLONE_NEWNS) = 0 [pid 5056] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5056] unshare(CLONE_NEWIPC) = 0 [pid 5056] unshare(CLONE_NEWCGROUP) = 0 [pid 5056] unshare(CLONE_NEWUTS) = 0 [pid 5056] unshare(CLONE_SYSVSEM) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "16777216", 8) = 8 [ 79.179975][ T28] audit: type=1400 audit(1705752346.536:89): avc: denied { mounton } for pid=5056 comm="syz-executor141" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "536870912", 9) = 9 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1024", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "8192", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1024", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1024", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5056] close(3) = 0 [pid 5056] getpid() = 1 [pid 5056] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< skb_headlen() (116) [ 88.062145][ T5067] WARNING: CPU: 0 PID: 5067 at net/core/dev.c:3302 skb_checksum_help+0x5e2/0x740 [ 88.071347][ T5067] Modules linked in: [ 88.075232][ T5067] CPU: 0 PID: 5067 Comm: syz-executor141 Not tainted 6.7.0-syzkaller-12824-g9d64bf433c53 #0 [ 88.085340][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 88.095485][ T5067] RIP: 0010:skb_checksum_help+0x5e2/0x740 [ 88.101310][ T5067] Code: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 a0 64 ea 8b e8 1f 5c d2 f8 90 <0f> 0b 90 90 e9 87 fe ff ff e8 50 ca 63 f9 e9 4b fa ff ff 48 89 ef [ 88.121970][ T5067] RSP: 0018:ffffc900034df088 EFLAGS: 00010286 [ 88.128128][ T5067] RAX: 0000000000000000 RBX: ffff88801f5b5b40 RCX: ffffffff814d0129 [ 88.136216][ T5067] RDX: ffff88802879bb80 RSI: ffffffff814d0136 RDI: 0000000000000001 [ 88.145315][ T5067] RBP: ffff88801f5b5bb4 R08: 0000000000000001 R09: 0000000000000000 [ 88.153341][ T5067] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000080 [ 88.161898][ T5067] R13: 0000000000000229 R14: ffff88801f5b5bb0 R15: 0000000000000227 [ 88.170109][ T5067] FS: 000055555680d380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 88.179489][ T5067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.186210][ T5067] CR2: 000000002000d000 CR3: 000000002e6a8000 CR4: 00000000003506f0 [ 88.194262][ T5067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.202372][ T5067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.210513][ T5067] Call Trace: [ 88.213825][ T5067] [ 88.216774][ T5067] ? show_regs+0x8f/0xa0 [ 88.221100][ T5067] ? __warn+0xe6/0x390 [ 88.225280][ T5067] ? skb_checksum_help+0x5e2/0x740 [ 88.230460][ T5067] ? report_bug+0x3bc/0x580 [ 88.235083][ T5067] ? handle_bug+0x3d/0x70 [ 88.239491][ T5067] ? exc_invalid_op+0x17/0x40 [ 88.244205][ T5067] ? asm_exc_invalid_op+0x1a/0x20 [ 88.249405][ T5067] ? __warn_printk+0x199/0x350 [ 88.254197][ T5067] ? __warn_printk+0x1a6/0x350 [ 88.259032][ T5067] ? skb_checksum_help+0x5e2/0x740 [ 88.264335][ T5067] ? skb_checksum_help+0x5e1/0x740 [ 88.269535][ T5067] ip_do_fragment+0xa15/0x18a0 [ 88.274433][ T5067] ? ip_fragment.constprop.0+0x230/0x230 [ 88.280142][ T5067] ? ip_skb_dst_mtu+0xc60/0xc60 [ 88.285021][ T5067] ? kfree_skbmem+0xef/0x1b0 [ 88.289688][ T5067] ? __kasan_slab_free+0x12c/0x1b0 [ 88.294826][ T5067] ? kmem_cache_free+0x129/0x350 [ 88.299818][ T5067] ? skb_release_data+0x5bf/0x870 [ 88.304903][ T5067] ? kfree_skbmem+0xef/0x1b0 [ 88.309594][ T5067] ip_fragment.constprop.0+0x161/0x230 [ 88.315096][ T5067] __ip_finish_output+0x49c/0x650 [ 88.320223][ T5067] ip_finish_output+0x31/0x310 [ 88.325021][ T5067] ip_mc_output+0x1dd/0x6a0 [ 88.329612][ T5067] ? __get_random_u32_below+0x4e/0xa0 [ 88.335010][ T5067] ip_local_out+0xaf/0x1a0 [ 88.339485][ T5067] iptunnel_xmit+0x5b4/0x9b0 [ 88.344101][ T5067] ip_tunnel_xmit+0x1daa/0x33b0 [ 88.349006][ T5067] ? reacquire_held_locks+0x410/0x4c0 [ 88.354494][ T5067] ? ip_md_tunnel_xmit+0x1ff0/0x1ff0 [ 88.360473][ T5067] ? __gre_xmit+0x4f5/0x990 [ 88.365015][ T5067] ipgre_xmit+0x49b/0x980 [ 88.369408][ T5067] dev_hard_start_xmit+0x137/0x6d0 [ 88.374738][ T5067] __dev_queue_xmit+0x7b6/0x3ed0 [ 88.379781][ T5067] ? _copy_from_iter+0x2c1/0x10f0 [ 88.384863][ T5067] ? netdev_core_pick_tx+0x370/0x370 [ 88.390201][ T5067] ? skb_partial_csum_set+0x202/0x390 [ 88.395597][ T5067] ? virtio_net_hdr_to_skb.constprop.0+0x4ed/0x1300 [ 88.402254][ T5067] ? packet_create+0x8e0/0x8e0 [ 88.407032][ T5067] packet_xmit+0x237/0x350 [ 88.411498][ T5067] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.417431][ T5067] packet_sendmsg+0x24a6/0x51e0 [ 88.422443][ T5067] ? check_irq_usage+0x10f0/0x1490 [ 88.427579][ T5067] ? sock_has_perm+0x25b/0x2f0 [ 88.432390][ T5067] ? selinux_socket_post_create+0x7e0/0x7e0 [ 88.438355][ T5067] ? tomoyo_socket_bind_permission+0x340/0x340 [ 88.444736][ T5067] ? packet_notifier+0x8c0/0x8c0 [ 88.449767][ T5067] ? import_ubuf+0x1a4/0x200 [ 88.454392][ T5067] ? packet_notifier+0x8c0/0x8c0 [ 88.459404][ T5067] __sock_sendmsg+0xd5/0x180 [ 88.464030][ T5067] ____sys_sendmsg+0x6ac/0x940 [ 88.468863][ T5067] ? copy_msghdr_from_user+0x10b/0x160 [ 88.474437][ T5067] ? kernel_sendmsg+0x50/0x50 [ 88.479195][ T5067] ___sys_sendmsg+0x135/0x1d0 [ 88.484001][ T5067] ? do_recvmmsg+0x740/0x740 [ 88.488663][ T5067] ? lock_sync+0x190/0x190 [ 88.493110][ T5067] ? ptrace_stop.part.0+0x457/0x950 [ 88.498395][ T5067] ? __fget_light+0x173/0x200 [ 88.503113][ T5067] __sys_sendmsg+0x117/0x1e0 [ 88.507767][ T5067] ? __sys_sendmsg_sock+0x30/0x30 [ 88.512844][ T5067] ? ptrace_notify+0xf4/0x130 [ 88.517523][ T5067] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.522777][ T5067] ? _raw_spin_unlock_irq+0x2e/0x50 [ 88.528049][ T5067] ? ptrace_notify+0xf4/0x130 [ 88.532748][ T5067] do_syscall_64+0xd3/0x250 [ 88.537250][ T5067] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 88.543198][ T5067] RIP: 0033:0x7f816f6edc69 [ 88.547646][ T5067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.568111][ T5067] RSP: 002b:00007fff26f55988 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.576897][ T5067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f816f6edc69 [ 88.584944][ T5067] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 88.593029][ T5067] RBP: 0000000000000000 R08: 0000000100000000 R09: 0000000100000000 [ 88.601287][ T5067] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 88.609319][ T5067] R13: 0000000000000001 R14: 00007fff26f559e0 R15: 0000000000000003 [ 88.617320][ T5067] [ 88.620489][ T5067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.627789][ T5067] CPU: 0 PID: 5067 Comm: syz-executor141 Not tainted 6.7.0-syzkaller-12824-g9d64bf433c53 #0 [ 88.637858][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 88.648090][ T5067] Call Trace: [ 88.651377][ T5067] [ 88.654316][ T5067] dump_stack_lvl+0xd9/0x1b0 [ 88.658921][ T5067] panic+0x6dc/0x790 [ 88.662919][ T5067] ? panic_smp_self_stop+0xa0/0xa0 [ 88.668220][ T5067] ? show_trace_log_lvl+0x363/0x4f0 [ 88.673568][ T5067] ? check_panic_on_warn+0x1f/0xb0 [ 88.679560][ T5067] ? skb_checksum_help+0x5e2/0x740 [ 88.684691][ T5067] check_panic_on_warn+0xab/0xb0 [ 88.689633][ T5067] __warn+0xf2/0x390 [ 88.693555][ T5067] ? skb_checksum_help+0x5e2/0x740 [ 88.698772][ T5067] report_bug+0x3bc/0x580 [ 88.703105][ T5067] handle_bug+0x3d/0x70 [ 88.707364][ T5067] exc_invalid_op+0x17/0x40 [ 88.711878][ T5067] asm_exc_invalid_op+0x1a/0x20 [ 88.716724][ T5067] RIP: 0010:skb_checksum_help+0x5e2/0x740 [ 88.722453][ T5067] Code: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 a0 64 ea 8b e8 1f 5c d2 f8 90 <0f> 0b 90 90 e9 87 fe ff ff e8 50 ca 63 f9 e9 4b fa ff ff 48 89 ef [ 88.742065][ T5067] RSP: 0018:ffffc900034df088 EFLAGS: 00010286 [ 88.748141][ T5067] RAX: 0000000000000000 RBX: ffff88801f5b5b40 RCX: ffffffff814d0129 [ 88.756119][ T5067] RDX: ffff88802879bb80 RSI: ffffffff814d0136 RDI: 0000000000000001 [ 88.764098][ T5067] RBP: ffff88801f5b5bb4 R08: 0000000000000001 R09: 0000000000000000 [ 88.772089][ T5067] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000080 [ 88.780188][ T5067] R13: 0000000000000229 R14: ffff88801f5b5bb0 R15: 0000000000000227 [ 88.788460][ T5067] ? __warn_printk+0x199/0x350 [ 88.793240][ T5067] ? __warn_printk+0x1a6/0x350 [ 88.798012][ T5067] ? skb_checksum_help+0x5e1/0x740 [ 88.803133][ T5067] ip_do_fragment+0xa15/0x18a0 [ 88.807906][ T5067] ? ip_fragment.constprop.0+0x230/0x230 [ 88.813546][ T5067] ? ip_skb_dst_mtu+0xc60/0xc60 [ 88.818424][ T5067] ? kfree_skbmem+0xef/0x1b0 [ 88.823030][ T5067] ? __kasan_slab_free+0x12c/0x1b0 [ 88.828156][ T5067] ? kmem_cache_free+0x129/0x350 [ 88.833099][ T5067] ? skb_release_data+0x5bf/0x870 [ 88.838130][ T5067] ? kfree_skbmem+0xef/0x1b0 [ 88.842731][ T5067] ip_fragment.constprop.0+0x161/0x230 [ 88.848208][ T5067] __ip_finish_output+0x49c/0x650 [ 88.853255][ T5067] ip_finish_output+0x31/0x310 [ 88.858028][ T5067] ip_mc_output+0x1dd/0x6a0 [ 88.862555][ T5067] ? __get_random_u32_below+0x4e/0xa0 [ 88.867932][ T5067] ip_local_out+0xaf/0x1a0 [ 88.872375][ T5067] iptunnel_xmit+0x5b4/0x9b0 [ 88.876992][ T5067] ip_tunnel_xmit+0x1daa/0x33b0 [ 88.881955][ T5067] ? reacquire_held_locks+0x410/0x4c0 [ 88.887372][ T5067] ? ip_md_tunnel_xmit+0x1ff0/0x1ff0 [ 88.892850][ T5067] ? __gre_xmit+0x4f5/0x990 [ 88.897379][ T5067] ipgre_xmit+0x49b/0x980 [ 88.901727][ T5067] dev_hard_start_xmit+0x137/0x6d0 [ 88.906846][ T5067] __dev_queue_xmit+0x7b6/0x3ed0 [ 88.911806][ T5067] ? _copy_from_iter+0x2c1/0x10f0 [ 88.916841][ T5067] ? netdev_core_pick_tx+0x370/0x370 [ 88.922165][ T5067] ? skb_partial_csum_set+0x202/0x390 [ 88.927556][ T5067] ? virtio_net_hdr_to_skb.constprop.0+0x4ed/0x1300 [ 88.934304][ T5067] ? packet_create+0x8e0/0x8e0 [ 88.939100][ T5067] packet_xmit+0x237/0x350 [ 88.943539][ T5067] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.949459][ T5067] packet_sendmsg+0x24a6/0x51e0 [ 88.954330][ T5067] ? check_irq_usage+0x10f0/0x1490 [ 88.959893][ T5067] ? sock_has_perm+0x25b/0x2f0 [ 88.964666][ T5067] ? selinux_socket_post_create+0x7e0/0x7e0 [ 88.971304][ T5067] ? tomoyo_socket_bind_permission+0x340/0x340 [ 88.978381][ T5067] ? packet_notifier+0x8c0/0x8c0 [ 88.983365][ T5067] ? import_ubuf+0x1a4/0x200 [ 88.987991][ T5067] ? packet_notifier+0x8c0/0x8c0 [ 88.992943][ T5067] __sock_sendmsg+0xd5/0x180 [ 88.997549][ T5067] ____sys_sendmsg+0x6ac/0x940 [ 89.002693][ T5067] ? copy_msghdr_from_user+0x10b/0x160 [ 89.008187][ T5067] ? kernel_sendmsg+0x50/0x50 [ 89.012878][ T5067] ___sys_sendmsg+0x135/0x1d0 [ 89.017583][ T5067] ? do_recvmmsg+0x740/0x740 [ 89.022203][ T5067] ? lock_sync+0x190/0x190 [ 89.026657][ T5067] ? ptrace_stop.part.0+0x457/0x950 [ 89.031873][ T5067] ? __fget_light+0x173/0x200 [ 89.036573][ T5067] __sys_sendmsg+0x117/0x1e0 [ 89.041190][ T5067] ? __sys_sendmsg_sock+0x30/0x30 [ 89.046222][ T5067] ? ptrace_notify+0xf4/0x130 [ 89.050908][ T5067] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.056996][ T5067] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.062294][ T5067] ? ptrace_notify+0xf4/0x130 [ 89.067018][ T5067] do_syscall_64+0xd3/0x250 [ 89.071535][ T5067] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 89.077498][ T5067] RIP: 0033:0x7f816f6edc69 [ 89.082286][ T5067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.101907][ T5067] RSP: 002b:00007fff26f55988 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.110350][ T5067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f816f6edc69 [ 89.118343][ T5067] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 89.126349][ T5067] RBP: 0000000000000000 R08: 0000000100000000 R09: 0000000100000000 [ 89.134355][ T5067] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 89.142340][ T5067] R13: 0000000000000001 R14: 00007fff26f559e0 R15: 0000000000000003 [ 89.150778][ T5067] [ 89.153909][ T5067] Kernel Offset: disabled [ 89.158411][ T5067] Rebooting in 86400 seconds..