./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3257771829 <...> Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. execve("./syz-executor3257771829", ["./syz-executor3257771829"], 0x7fff2ca204e0 /* 10 vars */) = 0 brk(NULL) = 0x555555b90000 brk(0x555555b90c40) = 0x555555b90c40 arch_prctl(ARCH_SET_FS, 0x555555b90300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3257771829", 4096) = 28 brk(0x555555bb1c40) = 0x555555bb1c40 brk(0x555555bb2000) = 0x555555bb2000 mprotect(0x7ffbe5ee7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3609 attached , child_tidptr=0x555555b905d0) = 3609 [pid 3609] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3609] setsid() = 1 [pid 3609] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3609] unshare(CLONE_NEWNS) = 0 [pid 3609] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3609] unshare(CLONE_NEWIPC) = 0 [pid 3609] unshare(CLONE_NEWCGROUP) = 0 [pid 3609] unshare(CLONE_NEWUTS) = 0 [pid 3609] unshare(CLONE_SYSVSEM) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "16777216", 8) = 8 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "536870912", 9) = 9 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "8192", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3609] close(3) = 0 [pid 3609] getpid() = 1 [pid 3609] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 ac f8 ff ff e8 7a 23 d8 fc e9 ed f4 ff ff e8 80 23 d8 fc [ 51.907794][ T3609] RSP: 0018:ffffc90003b2f808 EFLAGS: 00010293 [ 51.913873][ T3609] RAX: 0000000000000000 RBX: ffff888024b3c000 RCX: 0000000000000000 [ 51.921876][ T3609] RDX: ffff888018a5d880 RSI: ffffffff84f0506a RDI: 0000000000000003 [ 51.929871][ T3609] RBP: ffffc90003b2f9b8 R08: 0000000000000003 R09: 000000000000ffff [ 51.937882][ T3609] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880733813c0 [ 51.945874][ T3609] R13: 1ffff92000765f06 R14: 000000000000ffff R15: ffff888024b3cca0 [ 51.953876][ T3609] FS: 0000555555b90300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 51.962844][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.969465][ T3609] CR2: 0000000020000080 CR3: 00000000729c4000 CR4: 00000000003506f0 [ 51.977467][ T3609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.985425][ T3609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.993424][ T3609] Call Trace: [ 51.996719][ T3609] [ 51.999637][ T3609] ? __lock_acquire+0xbc3/0x56d0 [ 52.004568][ T3609] ? ipvlan_handle_mode_l3+0x140/0x140 [ 52.010085][ T3609] ? skb_network_protocol+0x151/0x580 [ 52.015474][ T3609] ? skb_crc32c_csum_help+0x70/0x70 [ 52.020704][ T3609] ? __alloc_skb+0x17f/0x2f0 [ 52.025309][ T3609] ? validate_xmit_xfrm+0x493/0x10e0 [ 52.030622][ T3609] ? netif_skb_features+0x396/0xb90 [ 52.035836][ T3609] ipvlan_start_xmit+0x45/0x150 [ 52.040715][ T3609] __dev_direct_xmit+0x500/0x720 [ 52.045664][ T3609] ? validate_xmit_skb_list+0x120/0x120 [ 52.051248][ T3609] ? netdev_pick_tx+0x14e/0xbd0 [ 52.056108][ T3609] packet_direct_xmit+0x1b3/0x2c0 [ 52.061161][ T3609] packet_sendmsg+0x3354/0x5500 [ 52.066033][ T3609] ? aa_sk_perm+0x30f/0xaa0 [ 52.070591][ T3609] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 52.076527][ T3609] ? aa_af_perm+0x230/0x230 [ 52.081027][ T3609] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 52.086348][ T3609] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 52.092253][ T3609] sock_sendmsg+0xcf/0x120 [ 52.096733][ T3609] __sys_sendto+0x236/0x340 [ 52.101247][ T3609] ? __ia32_sys_getpeername+0xb0/0xb0 [ 52.106663][ T3609] ? do_raw_spin_lock+0x120/0x2a0 [ 52.111702][ T3609] ? _raw_spin_lock_irq+0x41/0x50 [ 52.116775][ T3609] ? lock_downgrade+0x6e0/0x6e0 [ 52.121635][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.126877][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.132086][ T3609] ? lockdep_hardirqs_on+0x79/0x100 [ 52.137348][ T3609] __x64_sys_sendto+0xdd/0x1b0 [ 52.142129][ T3609] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 52.148403][ T3609] do_syscall_64+0x35/0xb0 [ 52.152829][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.158751][ T3609] RIP: 0033:0x7ffbe5e73669 [ 52.163173][ T3609] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.182810][ T3609] RSP: 002b:00007ffdd0951ed8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 52.191259][ T3609] RAX: ffffffffffffffda RBX: 00007ffdd0951ef8 RCX: 00007ffbe5e73669 [ 52.199260][ T3609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 52.207287][ T3609] RBP: 0000000000000003 R08: 00000000200000c0 R09: 0000000000000014 [ 52.215270][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd0951f00 [ 52.223274][ T3609] R13: 00007ffdd0951f20 R14: 0000000000000000 R15: 0000000000000000 [ 52.231283][ T3609] [ 52.234292][ T3609] Kernel panic - not syncing: panic_on_warn set ... [ 52.240874][ T3609] CPU: 0 PID: 3609 Comm: syz-executor325 Not tainted 6.0.0-rc2-syzkaller-00500-gf97e971dbdc7 #0 [ 52.251268][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 52.261308][ T3609] Call Trace: [ 52.264589][ T3609] [ 52.267509][ T3609] dump_stack_lvl+0xcd/0x134 [ 52.272093][ T3609] panic+0x2c8/0x627 [ 52.275978][ T3609] ? panic_print_sys_info.part.0+0x10b/0x10b [ 52.281962][ T3609] ? __warn.cold+0x248/0x2c4 [ 52.286551][ T3609] ? ipvlan_queue_xmit+0xcba/0x19d0 [ 52.291759][ T3609] __warn.cold+0x259/0x2c4 [ 52.296171][ T3609] ? ipvlan_queue_xmit+0xcba/0x19d0 [ 52.301983][ T3609] report_bug+0x1bc/0x210 [ 52.306314][ T3609] handle_bug+0x3c/0x60 [ 52.310475][ T3609] exc_invalid_op+0x14/0x40 [ 52.314966][ T3609] asm_exc_invalid_op+0x16/0x20 [ 52.319806][ T3609] RIP: 0010:ipvlan_queue_xmit+0xcba/0x19d0 [ 52.325602][ T3609] Code: 41 0f b7 d6 48 c7 c6 e0 ca 75 8a 48 c7 c7 60 c8 75 8a c6 05 6a 5a d9 08 01 e8 3f cc 4a 04 0f 0b e9 e5 f7 ff ff e8 76 b8 8b fc <0f> 0b e9 ac f8 ff ff e8 7a 23 d8 fc e9 ed f4 ff ff e8 80 23 d8 fc [ 52.345198][ T3609] RSP: 0018:ffffc90003b2f808 EFLAGS: 00010293 [ 52.351255][ T3609] RAX: 0000000000000000 RBX: ffff888024b3c000 RCX: 0000000000000000 [ 52.359216][ T3609] RDX: ffff888018a5d880 RSI: ffffffff84f0506a RDI: 0000000000000003 [ 52.367192][ T3609] RBP: ffffc90003b2f9b8 R08: 0000000000000003 R09: 000000000000ffff [ 52.375177][ T3609] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880733813c0 [ 52.383141][ T3609] R13: 1ffff92000765f06 R14: 000000000000ffff R15: ffff888024b3cca0 [ 52.391110][ T3609] ? ipvlan_queue_xmit+0xcba/0x19d0 [ 52.396309][ T3609] ? ipvlan_queue_xmit+0xcba/0x19d0 [ 52.401509][ T3609] ? __lock_acquire+0xbc3/0x56d0 [ 52.406463][ T3609] ? ipvlan_handle_mode_l3+0x140/0x140 [ 52.411946][ T3609] ? skb_network_protocol+0x151/0x580 [ 52.417341][ T3609] ? skb_crc32c_csum_help+0x70/0x70 [ 52.422602][ T3609] ? __alloc_skb+0x17f/0x2f0 [ 52.427240][ T3609] ? validate_xmit_xfrm+0x493/0x10e0 [ 52.432550][ T3609] ? netif_skb_features+0x396/0xb90 [ 52.437754][ T3609] ipvlan_start_xmit+0x45/0x150 [ 52.442619][ T3609] __dev_direct_xmit+0x500/0x720 [ 52.447565][ T3609] ? validate_xmit_skb_list+0x120/0x120 [ 52.453124][ T3609] ? netdev_pick_tx+0x14e/0xbd0 [ 52.457975][ T3609] packet_direct_xmit+0x1b3/0x2c0 [ 52.462996][ T3609] packet_sendmsg+0x3354/0x5500 [ 52.467850][ T3609] ? aa_sk_perm+0x30f/0xaa0 [ 52.472350][ T3609] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 52.478245][ T3609] ? aa_af_perm+0x230/0x230 [ 52.482757][ T3609] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 52.488036][ T3609] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 52.493919][ T3609] sock_sendmsg+0xcf/0x120 [ 52.498324][ T3609] __sys_sendto+0x236/0x340 [ 52.502833][ T3609] ? __ia32_sys_getpeername+0xb0/0xb0 [ 52.508244][ T3609] ? do_raw_spin_lock+0x120/0x2a0 [ 52.513272][ T3609] ? _raw_spin_lock_irq+0x41/0x50 [ 52.518293][ T3609] ? lock_downgrade+0x6e0/0x6e0 [ 52.523134][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.528339][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.533547][ T3609] ? lockdep_hardirqs_on+0x79/0x100 [ 52.538749][ T3609] __x64_sys_sendto+0xdd/0x1b0 [ 52.543519][ T3609] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 52.549764][ T3609] do_syscall_64+0x35/0xb0 [ 52.554173][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.560057][ T3609] RIP: 0033:0x7ffbe5e73669 [ 52.564461][ T3609] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.584066][ T3609] RSP: 002b:00007ffdd0951ed8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 52.592471][ T3609] RAX: ffffffffffffffda RBX: 00007ffdd0951ef8 RCX: 00007ffbe5e73669 [ 52.600446][ T3609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 52.608421][ T3609] RBP: 0000000000000003 R08: 00000000200000c0 R09: 0000000000000014 [ 52.616384][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd0951f00 [ 52.624344][ T3609] R13: 00007ffdd0951f20 R14: 0000000000000000 R15: 0000000000000000 [ 52.632309][ T3609] [ 52.635571][ T3609] Kernel Offset: disabled [ 52.639947][ T3609] Rebooting in 86400 seconds..