./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor92690761
<...>
Warning: Permanently added '10.128.1.48' (ECDSA) to the list of known hosts.
execve("./syz-executor92690761", ["./syz-executor92690761"], 0x7ffdac15c610 /* 10 vars */) = 0
brk(NULL) = 0x555555646000
brk(0x555555646c40) = 0x555555646c40
arch_prctl(ARCH_SET_FS, 0x555555646300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor92690761", 4096) = 26
brk(0x555555667c40) = 0x555555667c40
brk(0x555555668000) = 0x555555668000
mprotect(0x7f475213b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached
, child_tidptr=0x5555556465d0) = 5082
[pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5082] setpgid(0, 0) = 0
[pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5082] write(3, "1000", 4) = 4
[pid 5082] close(3) = 0
[pid 5082] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 3
[pid 5082] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4
[pid 5082] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 5
[pid 5082] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EFAULT (Bad address)
[pid 5082] getsockname(5, {sa_family=AF_NETLINK, nl_pid=5082, nl_groups=00000000}, [20 => 12]) = 0
[pid 5082] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x00\x00\x00\x10\x00\x37\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xda\x13\x00\x00\x83\x04\x05\x00\x00\x00\x00\x00\x1c\x00\x12\x80\x0e\x00\x01\x00\x69\x70\x36\x65\x72\x73\x70\x61\x6e\x00\x00\x00\x08\x00\x02\x80\x04\x00\x12\x00", iov_len=60}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60
[pid 5082] setsockopt(3, SOL_PACKET, PACKET_QDISC_BYPASS, [1024], 4) = 0
syzkaller login: [ 71.296452][ T5082] ------------[ cut here ]------------
[ 71.302219][ T5082] WARNING: CPU: 0 PID: 5082 at include/linux/skbuff.h:2875 ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 71.312793][ T5082] Modules linked in:
[ 71.316733][ T5082] CPU: 0 PID: 5082 Comm: syz-executor926 Not tainted 6.3.0-rc2-syzkaller-00392-gf36fa5581bca #0
[ 71.327247][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 71.337381][ T5082] RIP: 0010:ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 71.343729][ T5082] Code: 04 02 41 01 de 84 c0 74 08 3c 03 0f 8e 1c 0a 00 00 45 89 b4 24 c8 00 00 00 c6 85 77 fe ff ff 01 e9 33 e7 ff ff e8 c4 eb a2 f8 <0f> 0b e9 b6 e7 ff ff e8 b8 eb a2 f8 49 8d bf f0 0c 00 00 48 b8 00
[ 71.363512][ T5082] RSP: 0018:ffffc90003b8f838 EFLAGS: 00010293
[ 71.369642][ T5082] RAX: 0000000000000000 RBX: 000000000000ffff RCX: 0000000000000000
[ 71.377706][ T5082] RDX: ffff888025f057c0 RSI: ffffffff88dff93c RDI: 0000000000000003
[ 71.385767][ T5082] RBP: ffffc90003b8f9e0 R08: 0000000000000003 R09: 000000000000ffff
[ 71.393854][ T5082] R10: 000000000000ffff R11: 0000000000000000 R12: ffff888028ee8000
[ 71.401935][ T5082] R13: 00000000000000d0 R14: ffff88802ae9bcd0 R15: ffff888022aba000
[ 71.410006][ T5082] FS: 0000555555646300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 71.419027][ T5082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 71.425691][ T5082] CR2: 0000564d49f1b6f8 CR3: 0000000021eeb000 CR4: 00000000003506f0
[ 71.433837][ T5082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 71.441890][ T5082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 71.449908][ T5082] Call Trace:
[ 71.453265][ T5082]
[ 71.456257][ T5082] ? ip6gre_fill_info+0xd30/0xd30
[ 71.461560][ T5082] ? lock_release+0x670/0x670
[ 71.466296][ T5082] ? do_raw_spin_lock+0x124/0x2b0
[ 71.471411][ T5082] ? spin_bug+0x1c0/0x1c0
[ 71.475797][ T5082] ? validate_xmit_skb+0x816/0xe60
[ 71.481009][ T5082] __dev_direct_xmit+0x504/0x730
[ 71.486028][ T5082] ? validate_xmit_skb_list+0x130/0x130
[ 71.491683][ T5082] ? netdev_pick_tx+0x152/0xc60
[ 71.497116][ T5082] packet_direct_xmit+0x1b7/0x310
[ 71.502243][ T5082] packet_sendmsg+0x33aa/0x55d0
[ 71.507368][ T5082] ? aa_sk_perm+0x31d/0xb10
[ 71.511981][ T5082] ? packet_lookup_frame.isra.0+0x1c0/0x1c0
[ 71.517956][ T5082] ? aa_af_perm+0x240/0x240
[ 71.522574][ T5082] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 71.527920][ T5082] ? packet_lookup_frame.isra.0+0x1c0/0x1c0
[ 71.533914][ T5082] sock_sendmsg+0xde/0x190
[ 71.538402][ T5082] __sys_sendto+0x23a/0x340
[ 71.543021][ T5082] ? __ia32_sys_getpeername+0xb0/0xb0
[ 71.548467][ T5082] ? do_raw_spin_lock+0x124/0x2b0
[ 71.553630][ T5082] ? lock_downgrade+0x690/0x690
[ 71.558556][ T5082] ? _raw_spin_unlock_irq+0x23/0x50
[ 71.563882][ T5082] ? lockdep_hardirqs_on+0x7d/0x100
[ 71.569152][ T5082] __x64_sys_sendto+0xe1/0x1b0
[ 71.574030][ T5082] ? syscall_trace_enter.constprop.0+0xb0/0x1e0
[ 71.580358][ T5082] do_syscall_64+0x39/0xb0
[ 71.584875][ T5082] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 71.590879][ T5082] RIP: 0033:0x7f47520ce039
[ 71.595409][ T5082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 71.615111][ T5082] RSP: 002b:00007fff05035b38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 71.623624][ T5082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47520ce039
[ 71.631688][ T5082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 71.639695][ T5082] RBP: 0000000000000000 R08: 0000000020000040 R09: 0000000000000014
[ 71.647752][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47520918c0
[ 71.655800][ T5082] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 71.663889][ T5082]
[ 71.666945][ T5082] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 71.674254][ T5082] CPU: 0 PID: 5082 Comm: syz-executor926 Not tainted 6.3.0-rc2-syzkaller-00392-gf36fa5581bca #0
[ 71.684907][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 71.695007][ T5082] Call Trace:
[ 71.698321][ T5082]
[ 71.701293][ T5082] dump_stack_lvl+0xd9/0x150
[ 71.705945][ T5082] panic+0x688/0x730
[ 71.709913][ T5082] ? panic_smp_self_stop+0x90/0x90
[ 71.715125][ T5082] ? show_trace_log_lvl+0x285/0x390
[ 71.720407][ T5082] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 71.726100][ T5082] check_panic_on_warn+0xb1/0xc0
[ 71.731095][ T5082] __warn+0xf2/0x390
[ 71.735032][ T5082] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 71.740697][ T5082] report_bug+0x2da/0x500
[ 71.745072][ T5082] handle_bug+0x3c/0x70
[ 71.749274][ T5082] exc_invalid_op+0x18/0x50
[ 71.753841][ T5082] asm_exc_invalid_op+0x1a/0x20
[ 71.758758][ T5082] RIP: 0010:ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 71.765067][ T5082] Code: 04 02 41 01 de 84 c0 74 08 3c 03 0f 8e 1c 0a 00 00 45 89 b4 24 c8 00 00 00 c6 85 77 fe ff ff 01 e9 33 e7 ff ff e8 c4 eb a2 f8 <0f> 0b e9 b6 e7 ff ff e8 b8 eb a2 f8 49 8d bf f0 0c 00 00 48 b8 00
[ 71.784769][ T5082] RSP: 0018:ffffc90003b8f838 EFLAGS: 00010293
[ 71.790888][ T5082] RAX: 0000000000000000 RBX: 000000000000ffff RCX: 0000000000000000
[ 71.798909][ T5082] RDX: ffff888025f057c0 RSI: ffffffff88dff93c RDI: 0000000000000003
[ 71.806929][ T5082] RBP: ffffc90003b8f9e0 R08: 0000000000000003 R09: 000000000000ffff
[ 71.814947][ T5082] R10: 000000000000ffff R11: 0000000000000000 R12: ffff888028ee8000
[ 71.822962][ T5082] R13: 00000000000000d0 R14: ffff88802ae9bcd0 R15: ffff888022aba000
[ 71.830985][ T5082] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 71.836696][ T5082] ? ip6erspan_tunnel_xmit+0x1d9c/0x2d90
[ 71.842392][ T5082] ? ip6gre_fill_info+0xd30/0xd30
[ 71.847446][ T5082] ? lock_release+0x670/0x670
[ 71.852148][ T5082] ? do_raw_spin_lock+0x124/0x2b0
[ 71.857211][ T5082] ? spin_bug+0x1c0/0x1c0
[ 71.861575][ T5082] ? validate_xmit_skb+0x816/0xe60
[ 71.866753][ T5082] __dev_direct_xmit+0x504/0x730
[ 71.871754][ T5082] ? validate_xmit_skb_list+0x130/0x130
[ 71.877369][ T5082] ? netdev_pick_tx+0x152/0xc60
[ 71.882285][ T5082] packet_direct_xmit+0x1b7/0x310
[ 71.887367][ T5082] packet_sendmsg+0x33aa/0x55d0
[ 71.892274][ T5082] ? aa_sk_perm+0x31d/0xb10
[ 71.896820][ T5082] ? packet_lookup_frame.isra.0+0x1c0/0x1c0
[ 71.902848][ T5082] ? aa_af_perm+0x240/0x240
[ 71.907435][ T5082] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 71.912848][ T5082] ? packet_lookup_frame.isra.0+0x1c0/0x1c0
[ 71.918833][ T5082] sock_sendmsg+0xde/0x190
[ 71.923323][ T5082] __sys_sendto+0x23a/0x340
[ 71.927898][ T5082] ? __ia32_sys_getpeername+0xb0/0xb0
[ 71.933356][ T5082] ? do_raw_spin_lock+0x124/0x2b0
[ 71.938471][ T5082] ? lock_downgrade+0x690/0x690
[ 71.943391][ T5082] ? _raw_spin_unlock_irq+0x23/0x50
[ 71.948660][ T5082] ? lockdep_hardirqs_on+0x7d/0x100
[ 71.953925][ T5082] __x64_sys_sendto+0xe1/0x1b0
[ 71.958757][ T5082] ? syscall_trace_enter.constprop.0+0xb0/0x1e0
[ 71.965063][ T5082] do_syscall_64+0x39/0xb0
[ 71.969527][ T5082] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 71.975480][ T5082] RIP: 0033:0x7f47520ce039
[ 71.979950][ T5082] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 71.999610][ T5082] RSP: 002b:00007fff05035b38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 72.008100][ T5082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47520ce039
[ 72.016112][ T5082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 72.024111][ T5082] RBP: 0000000000000000 R08: 0000000020000040 R09: 0000000000000014
[ 72.032130][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47520918c0
[ 72.040150][ T5082] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 72.048184][ T5082]
[ 72.051504][ T5082] Kernel Offset: disabled
[ 72.055944][ T5082] Rebooting in 86400 seconds..