./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1119786212 <...> Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. execve("./syz-executor1119786212", ["./syz-executor1119786212"], 0x7fff3fb15990 /* 10 vars */) = 0 brk(NULL) = 0x55557a522000 brk(0x55557a522d00) = 0x55557a522d00 arch_prctl(ARCH_SET_FS, 0x55557a522380) = 0 set_tid_address(0x55557a522650) = 5088 set_robust_list(0x55557a522660, 24) = 0 rseq(0x55557a522ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1119786212", 4096) = 28 getrandom("\xd0\x71\x1e\x31\xeb\xe2\x09\xf5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557a522d00 brk(0x55557a543d00) = 0x55557a543d00 brk(0x55557a544000) = 0x55557a544000 mprotect(0x7fe7e6fde000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a522650) = 5089 ./strace-static-x86_64: Process 5089 attached [pid 5089] set_robust_list(0x55557a522660, 24) = 0 [pid 5089] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5089] setsid() = 1 [pid 5089] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5089] unshare(CLONE_NEWNS) = 0 [pid 5089] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5089] unshare(CLONE_NEWIPC) = 0 [pid 5089] unshare(CLONE_NEWCGROUP) = 0 [pid 5089] unshare(CLONE_NEWUTS) = 0 [pid 5089] unshare(CLONE_SYSVSEM) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "16777216", 8) = 8 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "536870912", 9) = 9 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1024", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "8192", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1024", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1024", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5089] close(3) = 0 [pid 5089] getpid() = 1 [pid 5089] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<= skb_headlen() (104) [ 65.425148][ T5089] WARNING: CPU: 1 PID: 5089 at net/core/dev.c:3325 skb_checksum_help+0x5f9/0x730 [ 65.434340][ T5089] Modules linked in: [ 65.438306][ T5089] CPU: 1 PID: 5089 Comm: syz-executor111 Not tainted 6.9.0-next-20240523-syzkaller #0 [ 65.448025][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 65.458143][ T5089] RIP: 0010:skb_checksum_help+0x5f9/0x730 [ 65.463894][ T5089] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 dd 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 40 6a c5 8c 44 89 f6 89 da e8 08 1d fd f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 65 fd ff ff e8 54 fb 3a f8 c6 05 b8 [ 65.483548][ T5089] RSP: 0018:ffffc9000334eda8 EFLAGS: 00010246 [ 65.489666][ T5089] RAX: dde3a379714d1e00 RBX: 0000000000000068 RCX: ffff88807b12da00 [ 65.497758][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.505741][ T5089] RBP: 0000000000002969 R08: ffffffff815867a2 R09: 1ffff92000669d54 [ 65.513847][ T5089] R10: dffffc0000000000 R11: fffff52000669d55 R12: 1ffff11004ddda86 [ 65.521882][ T5089] R13: dffffc0000000000 R14: 0000000000000529 R15: ffff888026eed3c0 [ 65.529922][ T5089] FS: 000055557a522380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 65.538904][ T5089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.545509][ T5089] CR2: 000000002000d000 CR3: 00000000780b2000 CR4: 00000000003506f0 [ 65.553571][ T5089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.561587][ T5089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.569631][ T5089] Call Trace: [ 65.572924][ T5089] [ 65.575854][ T5089] ? __warn+0x163/0x4e0 [ 65.580070][ T5089] ? skb_checksum_help+0x5f9/0x730 [ 65.585202][ T5089] ? report_bug+0x2b3/0x500 [ 65.589748][ T5089] ? skb_checksum_help+0x5f9/0x730 [ 65.594876][ T5089] ? handle_bug+0x3e/0x70 [ 65.599284][ T5089] ? exc_invalid_op+0x1a/0x50 [ 65.603975][ T5089] ? asm_exc_invalid_op+0x1a/0x20 [ 65.609079][ T5089] ? __warn_printk+0x292/0x360 [ 65.613911][ T5089] ? skb_checksum_help+0x5f9/0x730 [ 65.619076][ T5089] ? skb_checksum_help+0x5f8/0x730 [ 65.624231][ T5089] ip_do_fragment+0x21b/0x1b60 [ 65.629063][ T5089] ? __pfx_ip_finish_output2+0x10/0x10 [ 65.634540][ T5089] ? __pfx_ip_do_fragment+0x10/0x10 [ 65.639788][ T5089] ? kasan_quarantine_put+0xdc/0x230 [ 65.645090][ T5089] ? lockdep_hardirqs_on+0x99/0x150 [ 65.650500][ T5089] ? __ip_finish_output+0x247/0x400 [ 65.655920][ T5089] ? kmem_cache_free+0x145/0x350 [ 65.660950][ T5089] ? ip_fragment+0x9a/0x220 [ 65.665504][ T5089] __ip_finish_output+0x290/0x400 [ 65.670626][ T5089] iptunnel_xmit+0x540/0x9b0 [ 65.675347][ T5089] ip_tunnel_xmit+0x2113/0x2940 [ 65.680655][ T5089] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 65.685894][ T5089] ? gre_build_header+0x341/0xb30 [ 65.691003][ T5089] ? __pfx_gre_build_header+0x10/0x10 [ 65.696480][ T5089] ? iptunnel_handle_offloads+0x25f/0x650 [ 65.702280][ T5089] ipgre_xmit+0x956/0xd40 [ 65.706646][ T5089] ? __pfx_ipgre_xmit+0x10/0x10 [ 65.711579][ T5089] ? validate_xmit_skb+0xa04/0x1120 [ 65.716833][ T5089] dev_hard_start_xmit+0x27a/0x7e0 [ 65.722403][ T5089] __dev_queue_xmit+0x1b0e/0x3d30 [ 65.727478][ T5089] ? __might_fault+0xc6/0x120 [ 65.732173][ T5089] ? __dev_queue_xmit+0x2d2/0x3d30 [ 65.737323][ T5089] ? skb_partial_csum_set+0x105/0x350 [ 65.742848][ T5089] ? __pfx___dev_queue_xmit+0x10/0x10 [ 65.748330][ T5089] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 65.754069][ T5089] ? packet_parse_headers+0x7bd/0xad0 [ 65.759661][ T5089] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 65.765954][ T5089] ? packet_xmit+0x68/0x330 [ 65.770561][ T5089] packet_sendmsg+0x46c2/0x6150 [ 65.775463][ T5089] ? __pfx___might_resched+0x10/0x10 [ 65.780818][ T5089] ? aa_sk_perm+0x967/0xab0 [ 65.785551][ T5089] ? __pfx_packet_sendmsg+0x10/0x10 [ 65.790832][ T5089] ? __pfx_lock_release+0x10/0x10 [ 65.795881][ T5089] ? __import_iovec+0x536/0x820 [ 65.800817][ T5089] ? aa_sock_msg_perm+0x91/0x160 [ 65.805791][ T5089] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 65.811706][ T5089] ? security_socket_sendmsg+0x87/0xb0 [ 65.817224][ T5089] ? __pfx_packet_sendmsg+0x10/0x10 [ 65.822432][ T5089] __sock_sendmsg+0x221/0x270 [ 65.827189][ T5089] ____sys_sendmsg+0x525/0x7d0 [ 65.832074][ T5089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.837408][ T5089] ? do_raw_spin_lock+0x14f/0x370 [ 65.842771][ T5089] __sys_sendmsg+0x2b0/0x3a0 [ 65.847429][ T5089] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.852586][ T5089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.858981][ T5089] ? _raw_spin_unlock_irq+0x2e/0x50 [ 65.864193][ T5089] ? ptrace_notify+0x279/0x380 [ 65.869011][ T5089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.875384][ T5089] ? exc_page_fault+0x590/0x8c0 [ 65.880335][ T5089] do_syscall_64+0xf3/0x230 [ 65.884858][ T5089] ? clear_bhb_loop+0x35/0x90 [ 65.889588][ T5089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.895513][ T5089] RIP: 0033:0x7fe7e6f664d9 [ 65.899994][ T5089] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 65.919645][ T5089] RSP: 002b:00007ffe697d43f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.928129][ T5089] RAX: ffffffffffffffda RBX: 00007fe7e6fb3390 RCX: 00007fe7e6f664d9 [ 65.936124][ T5089] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 65.944188][ T5089] RBP: 0000000000000003 R08: 0000555500000000 R09: 0000555500000000 [ 65.952248][ T5089] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffe697d4440 [ 65.960324][ T5089] R13: 00007ffe697d4410 R14: 0000000000000001 R15: 00007ffe697d4440 [ 65.968364][ T5089] [ 65.971450][ T5089] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.978716][ T5089] CPU: 1 PID: 5089 Comm: syz-executor111 Not tainted 6.9.0-next-20240523-syzkaller #0 [ 65.988241][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 65.998421][ T5089] Call Trace: [ 66.001700][ T5089] [ 66.004628][ T5089] dump_stack_lvl+0x241/0x360 [ 66.009301][ T5089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.014509][ T5089] ? __pfx__printk+0x10/0x10 [ 66.019128][ T5089] ? vscnprintf+0x5d/0x90 [ 66.023467][ T5089] panic+0x349/0x860 [ 66.027478][ T5089] ? __warn+0x172/0x4e0 [ 66.031741][ T5089] ? __pfx_panic+0x10/0x10 [ 66.036174][ T5089] __warn+0x346/0x4e0 [ 66.040155][ T5089] ? skb_checksum_help+0x5f9/0x730 [ 66.045258][ T5089] report_bug+0x2b3/0x500 [ 66.049655][ T5089] ? skb_checksum_help+0x5f9/0x730 [ 66.054886][ T5089] handle_bug+0x3e/0x70 [ 66.059137][ T5089] exc_invalid_op+0x1a/0x50 [ 66.063665][ T5089] asm_exc_invalid_op+0x1a/0x20 [ 66.068512][ T5089] RIP: 0010:skb_checksum_help+0x5f9/0x730 [ 66.074223][ T5089] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 dd 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 40 6a c5 8c 44 89 f6 89 da e8 08 1d fd f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 65 fd ff ff e8 54 fb 3a f8 c6 05 b8 [ 66.093841][ T5089] RSP: 0018:ffffc9000334eda8 EFLAGS: 00010246 [ 66.099908][ T5089] RAX: dde3a379714d1e00 RBX: 0000000000000068 RCX: ffff88807b12da00 [ 66.107871][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.115833][ T5089] RBP: 0000000000002969 R08: ffffffff815867a2 R09: 1ffff92000669d54 [ 66.123797][ T5089] R10: dffffc0000000000 R11: fffff52000669d55 R12: 1ffff11004ddda86 [ 66.131764][ T5089] R13: dffffc0000000000 R14: 0000000000000529 R15: ffff888026eed3c0 [ 66.139737][ T5089] ? __warn_printk+0x292/0x360 [ 66.144518][ T5089] ? skb_checksum_help+0x5f8/0x730 [ 66.149717][ T5089] ip_do_fragment+0x21b/0x1b60 [ 66.154487][ T5089] ? __pfx_ip_finish_output2+0x10/0x10 [ 66.159944][ T5089] ? __pfx_ip_do_fragment+0x10/0x10 [ 66.165137][ T5089] ? kasan_quarantine_put+0xdc/0x230 [ 66.170413][ T5089] ? lockdep_hardirqs_on+0x99/0x150 [ 66.175603][ T5089] ? __ip_finish_output+0x247/0x400 [ 66.180813][ T5089] ? kmem_cache_free+0x145/0x350 [ 66.185750][ T5089] ? ip_fragment+0x9a/0x220 [ 66.190257][ T5089] __ip_finish_output+0x290/0x400 [ 66.195280][ T5089] iptunnel_xmit+0x540/0x9b0 [ 66.199878][ T5089] ip_tunnel_xmit+0x2113/0x2940 [ 66.204742][ T5089] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 66.209932][ T5089] ? gre_build_header+0x341/0xb30 [ 66.214954][ T5089] ? __pfx_gre_build_header+0x10/0x10 [ 66.220320][ T5089] ? iptunnel_handle_offloads+0x25f/0x650 [ 66.226046][ T5089] ipgre_xmit+0x956/0xd40 [ 66.230388][ T5089] ? __pfx_ipgre_xmit+0x10/0x10 [ 66.235234][ T5089] ? validate_xmit_skb+0xa04/0x1120 [ 66.240443][ T5089] dev_hard_start_xmit+0x27a/0x7e0 [ 66.245743][ T5089] __dev_queue_xmit+0x1b0e/0x3d30 [ 66.251459][ T5089] ? __might_fault+0xc6/0x120 [ 66.256245][ T5089] ? __dev_queue_xmit+0x2d2/0x3d30 [ 66.261365][ T5089] ? skb_partial_csum_set+0x105/0x350 [ 66.266737][ T5089] ? __pfx___dev_queue_xmit+0x10/0x10 [ 66.272097][ T5089] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 66.277638][ T5089] ? packet_parse_headers+0x7bd/0xad0 [ 66.283012][ T5089] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 66.288821][ T5089] ? packet_xmit+0x68/0x330 [ 66.293320][ T5089] packet_sendmsg+0x46c2/0x6150 [ 66.298186][ T5089] ? __pfx___might_resched+0x10/0x10 [ 66.303477][ T5089] ? aa_sk_perm+0x967/0xab0 [ 66.307974][ T5089] ? __pfx_packet_sendmsg+0x10/0x10 [ 66.313167][ T5089] ? __pfx_lock_release+0x10/0x10 [ 66.318184][ T5089] ? __import_iovec+0x536/0x820 [ 66.323027][ T5089] ? aa_sock_msg_perm+0x91/0x160 [ 66.327958][ T5089] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 66.333257][ T5089] ? security_socket_sendmsg+0x87/0xb0 [ 66.338718][ T5089] ? __pfx_packet_sendmsg+0x10/0x10 [ 66.343906][ T5089] __sock_sendmsg+0x221/0x270 [ 66.348585][ T5089] ____sys_sendmsg+0x525/0x7d0 [ 66.353352][ T5089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.358635][ T5089] ? do_raw_spin_lock+0x14f/0x370 [ 66.363668][ T5089] __sys_sendmsg+0x2b0/0x3a0 [ 66.368251][ T5089] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.373363][ T5089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.379777][ T5089] ? _raw_spin_unlock_irq+0x2e/0x50 [ 66.384970][ T5089] ? ptrace_notify+0x279/0x380 [ 66.389864][ T5089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.396182][ T5089] ? exc_page_fault+0x590/0x8c0 [ 66.401028][ T5089] do_syscall_64+0xf3/0x230 [ 66.405524][ T5089] ? clear_bhb_loop+0x35/0x90 [ 66.410282][ T5089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.416170][ T5089] RIP: 0033:0x7fe7e6f664d9 [ 66.420579][ T5089] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.440185][ T5089] RSP: 002b:00007ffe697d43f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.448617][ T5089] RAX: ffffffffffffffda RBX: 00007fe7e6fb3390 RCX: 00007fe7e6f664d9 [ 66.456580][ T5089] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 66.464565][ T5089] RBP: 0000000000000003 R08: 0000555500000000 R09: 0000555500000000 [ 66.472531][ T5089] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffe697d4440 [ 66.480521][ T5089] R13: 00007ffe697d4410 R14: 0000000000000001 R15: 00007ffe697d4440 [ 66.488492][ T5089] [ 66.491622][ T5089] Kernel Offset: disabled [ 66.495966][ T5089] Rebooting in 86400 seconds..