./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4066529651 <...> Warning: Permanently added '10.128.0.189' (ECDSA) to the list of known hosts. execve("./syz-executor4066529651", ["./syz-executor4066529651"], 0x7ffec9f9d360 /* 10 vars */) = 0 brk(NULL) = 0x555556a61000 brk(0x555556a61c40) = 0x555556a61c40 arch_prctl(ARCH_SET_FS, 0x555556a61300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4066529651", 4096) = 28 brk(0x555556a82c40) = 0x555556a82c40 brk(0x555556a83000) = 0x555556a83000 mprotect(0x7f123ab0e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5083 attached , child_tidptr=0x555556a615d0) = 5083 [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5083] setpgid(0, 0) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] write(3, "1000", 4) = 4 [pid 5083] close(3) = 0 [pid 5083] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 3 [pid 5083] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5083] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5 [pid 5083] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address) [pid 5083] getsockname(5, {sa_family=AF_NETLINK, nl_pid=5083, nl_groups=00000000}, [20 => 12]) = 0 [pid 5083] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x00\x00\x00\x10\x00\x37\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdb\x13\x00\x00\x83\x04\x05\x00\x00\x00\x00\x00\x1c\x00\x12\x80\x0e\x00\x01\x00\x69\x70\x36\x65\x72\x73\x70\x61\x6e\x00\x00\x00\x08\x00\x02\x80\x04\x00\x12\x00", iov_len=60}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60 [pid 5083] setsockopt(3, SOL_PACKET, PACKET_QDISC_BYPASS, [1024], 4) = 0 [ 73.815284][ T5083] ------------[ cut here ]------------ [ 73.821062][ T5083] WARNING: CPU: 0 PID: 5083 at include/linux/skbuff.h:2873 ip6erspan_tunnel_xmit+0x1d9c/0x2d90 [ 73.831550][ T5083] Modules linked in: [ 73.835494][ T5083] CPU: 0 PID: 5083 Comm: syz-executor406 Not tainted 6.3.0-rc2-syzkaller-00866-gd4671cb96fa3 #0 [ 73.846058][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 73.856226][ T5083] RIP: 0010:ip6erspan_tunnel_xmit+0x1d9c/0x2d90 [ 73.862608][ T5083] Code: 04 02 41 01 de 84 c0 74 08 3c 03 0f 8e 1c 0a 00 00 45 89 b4 24 c8 00 00 00 c6 85 77 fe ff ff 01 e9 33 e7 ff ff e8 b4 27 a1 f8 <0f> 0b e9 b6 e7 ff ff e8 a8 27 a1 f8 49 8d bf f0 0c 00 00 48 b8 00 [ 73.882328][ T5083] RSP: 0018:ffffc90003b2f830 EFLAGS: 00010293 [ 73.888458][ T5083] RAX: 0000000000000000 RBX: 000000000000ffff RCX: 0000000000000000 [ 73.896770][ T5083] RDX: ffff888021273a80 RSI: ffffffff88e1bd4c RDI: 0000000000000003 [ 73.904845][ T5083] RBP: ffffc90003b2f9d8 R08: 0000000000000003 R09: 000000000000ffff [ 73.912940][ T5083] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88802b28da00 [ 73.920969][ T5083] R13: 00000000000000d0 R14: ffff88807e25b6d0 R15: ffff888023408000 [ 73.929053][ T5083] FS: 0000555556a61300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 73.938092][ T5083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.944784][ T5083] CR2: 000055e5b11eb6e8 CR3: 0000000027c1b000 CR4: 00000000003506f0 [ 73.952856][ T5083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.960874][ T5083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.968957][ T5083] Call Trace: [ 73.972354][ T5083] [ 73.975351][ T5083] ? ip6gre_fill_info+0xd30/0xd30 [ 73.980467][ T5083] ? lock_release+0x670/0x670 [ 73.985271][ T5083] ? do_raw_spin_lock+0x124/0x2b0 [ 73.990368][ T5083] ? spin_bug+0x1c0/0x1c0 [ 73.994826][ T5083] ? validate_xmit_skb+0x816/0xea0 [ 74.000035][ T5083] __dev_direct_xmit+0x504/0x730 [ 74.005129][ T5083] ? validate_xmit_skb_list+0x130/0x130 [ 74.010756][ T5083] ? netdev_pick_tx+0x152/0xc60 [ 74.015759][ T5083] packet_xmit+0x20a/0x390 [ 74.020242][ T5083] packet_sendmsg+0x31a0/0x5150 [ 74.025253][ T5083] ? aa_sk_perm+0x31d/0xb10 [ 74.029825][ T5083] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 74.035879][ T5083] ? aa_af_perm+0x240/0x240 [ 74.040448][ T5083] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 74.045870][ T5083] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 74.051887][ T5083] sock_sendmsg+0xde/0x190 [ 74.056384][ T5083] __sys_sendto+0x23a/0x340 [ 74.060947][ T5083] ? __ia32_sys_getpeername+0xb0/0xb0 [ 74.066445][ T5083] ? do_raw_spin_lock+0x124/0x2b0 [ 74.071595][ T5083] ? lock_downgrade+0x690/0x690 [ 74.076522][ T5083] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.081851][ T5083] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.087133][ T5083] __x64_sys_sendto+0xe1/0x1b0 [ 74.091999][ T5083] ? syscall_trace_enter.constprop.0+0xb0/0x1e0 [ 74.098310][ T5083] do_syscall_64+0x39/0xb0 [ 74.102842][ T5083] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.108805][ T5083] RIP: 0033:0x7f123aaa1039 [ 74.113341][ T5083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.133157][ T5083] RSP: 002b:00007ffc15d12058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 74.141684][ T5083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f123aaa1039 [ 74.149709][ T5083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.157787][ T5083] RBP: 0000000000000000 R08: 0000000020000040 R09: 0000000000000014 [ 74.166301][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f123aa648c0 [ 74.174362][ T5083] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 74.182453][ T5083] [ 74.185515][ T5083] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.192831][ T5083] CPU: 0 PID: 5083 Comm: syz-executor406 Not tainted 6.3.0-rc2-syzkaller-00866-gd4671cb96fa3 #0 [ 74.203291][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 74.213404][ T5083] Call Trace: [ 74.216719][ T5083] [ 74.219751][ T5083] dump_stack_lvl+0xd9/0x150 [ 74.224415][ T5083] panic+0x688/0x730 [ 74.228375][ T5083] ? panic_smp_self_stop+0x90/0x90 [ 74.233557][ T5083] ? show_trace_log_lvl+0x285/0x390 [ 74.238940][ T5083] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90 [ 74.244644][ T5083] check_panic_on_warn+0xb1/0xc0 [ 74.249647][ T5083] __warn+0xf2/0x390 [ 74.253604][ T5083] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90 [ 74.259303][ T5083] report_bug+0x2da/0x500 [ 74.263701][ T5083] handle_bug+0x3c/0x70 [ 74.267911][ T5083] exc_invalid_op+0x18/0x50 [ 74.272475][ T5083] asm_exc_invalid_op+0x1a/0x20 [ 74.277381][ T5083] RIP: 0010:ip6erspan_tunnel_xmit+0x1d9c/0x2d90 [ 74.283691][ T5083] Code: 04 02 41 01 de 84 c0 74 08 3c 03 0f 8e 1c 0a 00 00 45 89 b4 24 c8 00 00 00 c6 85 77 fe ff ff 01 e9 33 e7 ff ff e8 b4 27 a1 f8 <0f> 0b e9 b6 e7 ff ff e8 a8 27 a1 f8 49 8d bf f0 0c 00 00 48 b8 00 [ 74.303349][ T5083] RSP: 0018:ffffc90003b2f830 EFLAGS: 00010293 [ 74.309465][ T5083] RAX: 0000000000000000 RBX: 000000000000ffff RCX: 0000000000000000 [ 74.317483][ T5083] RDX: ffff888021273a80 RSI: ffffffff88e1bd4c RDI: 0000000000000003 [ 74.325506][ T5083] RBP: ffffc90003b2f9d8 R08: 0000000000000003 R09: 000000000000ffff [ 74.333528][ T5083] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88802b28da00 [ 74.341561][ T5083] R13: 00000000000000d0 R14: ffff88807e25b6d0 R15: ffff888023408000 [ 74.349594][ T5083] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90 [ 74.355411][ T5083] ? ip6gre_fill_info+0xd30/0xd30 [ 74.360520][ T5083] ? lock_release+0x670/0x670 [ 74.365259][ T5083] ? do_raw_spin_lock+0x124/0x2b0 [ 74.370349][ T5083] ? spin_bug+0x1c0/0x1c0 [ 74.374740][ T5083] ? validate_xmit_skb+0x816/0xea0 [ 74.379964][ T5083] __dev_direct_xmit+0x504/0x730 [ 74.384981][ T5083] ? validate_xmit_skb_list+0x130/0x130 [ 74.390612][ T5083] ? netdev_pick_tx+0x152/0xc60 [ 74.395535][ T5083] packet_xmit+0x20a/0x390 [ 74.400013][ T5083] packet_sendmsg+0x31a0/0x5150 [ 74.404947][ T5083] ? aa_sk_perm+0x31d/0xb10 [ 74.409514][ T5083] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 74.415459][ T5083] ? aa_af_perm+0x240/0x240 [ 74.420040][ T5083] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 74.425386][ T5083] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 74.431334][ T5083] sock_sendmsg+0xde/0x190 [ 74.435825][ T5083] __sys_sendto+0x23a/0x340 [ 74.440377][ T5083] ? __ia32_sys_getpeername+0xb0/0xb0 [ 74.445801][ T5083] ? do_raw_spin_lock+0x124/0x2b0 [ 74.450914][ T5083] ? lock_downgrade+0x690/0x690 [ 74.455828][ T5083] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.461080][ T5083] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.466361][ T5083] __x64_sys_sendto+0xe1/0x1b0 [ 74.471176][ T5083] ? syscall_trace_enter.constprop.0+0xb0/0x1e0 [ 74.477483][ T5083] do_syscall_64+0x39/0xb0 [ 74.481965][ T5083] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.487911][ T5083] RIP: 0033:0x7f123aaa1039 [ 74.492371][ T5083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.512248][ T5083] RSP: 002b:00007ffc15d12058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 74.520718][ T5083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f123aaa1039 [ 74.528735][ T5083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.536754][ T5083] RBP: 0000000000000000 R08: 0000000020000040 R09: 0000000000000014 [ 74.544769][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f123aa648c0 [ 74.552789][ T5083] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 74.560828][ T5083] [ 74.564061][ T5083] Kernel Offset: disabled [ 74.568518][ T5083] Rebooting in 86400 seconds..