./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4018431347 <...> DUID 00:04:cd:7d:74:7d:04:96:3f:c0:f2:1a:da:5a:49:b1:9f:fb forked to background, child pid 4706 [ 46.713097][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.728275][ T4707] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. execve("./syz-executor4018431347", ["./syz-executor4018431347"], 0x7ffc307b7050 /* 10 vars */) = 0 brk(NULL) = 0x5555563f2000 brk(0x5555563f2d00) = 0x5555563f2d00 arch_prctl(ARCH_SET_FS, 0x5555563f2380) = 0 set_tid_address(0x5555563f2650) = 5038 set_robust_list(0x5555563f2660, 24) = 0 rseq(0x5555563f2ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4018431347", 4096) = 28 getrandom("\xa1\x7b\xb8\xe6\x51\x7a\x28\xc7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555563f2d00 brk(0x555556413d00) = 0x555556413d00 brk(0x555556414000) = 0x555556414000 mprotect(0x7ff27ce2b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5039 attached , child_tidptr=0x5555563f2650) = 5039 [pid 5039] set_robust_list(0x5555563f2660, 24) = 0 [pid 5039] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5039] setsid() = 1 [pid 5039] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5039] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5039] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5039] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5039] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5039] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5039] unshare(CLONE_NEWNS) = 0 [pid 5039] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5039] unshare(CLONE_NEWIPC) = 0 [pid 5039] unshare(CLONE_NEWCGROUP) = 0 [pid 5039] unshare(CLONE_NEWUTS) = 0 [pid 5039] unshare(CLONE_SYSVSEM) = 0 [pid 5039] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5039] write(3, "16777216", 8) = 8 [pid 5039] close(3) = 0 [pid 5039] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5039] write(3, "536870912", 9) = 9 [pid 5039] close(3) = 0 [pid 5039] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5039] write(3, "1024", 4) = 4 [pid 5039] close(3) = 0 [pid 5039] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5039] write(3, "8192", 4) = 4 [pid 5039] close(3) = 0 [pid 5039] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5039] write(3, "1024", 4) = 4 [pid 5039] close(3) = 0 [pid 5039] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5039] write(3, "1024", 4) = 4 [pid 5039] close(3) = 0 [pid 5039] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5039] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5039] close(3) = 0 [pid 5039] getpid() = 1 [pid 5039] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< b6 04 02 84 c0 74 08 3c 03 0f 8e ea 21 00 00 48 8b 84 24 00 01 [ 72.051983][ T5039] RSP: 0018:ffffc90003d3f1c8 EFLAGS: 00010202 [ 72.058035][ T5039] RAX: dffffc0000000000 RBX: 000000000001fffe RCX: 0000000000000000 [ 72.065991][ T5039] RDX: 000000000000000e RSI: ffffffff882a3115 RDI: 0000000000000070 [ 72.073949][ T5039] RBP: ffffc90003d3f378 R08: 0000000000000005 R09: 000000000000ffff [ 72.081927][ T5039] R10: 000000000000ffff R11: 5ee4a93e456187d6 R12: 000000000001ffc6 [ 72.089884][ T5039] R13: dffffc0000000000 R14: 0000000000000008 R15: 000000000000ffff [ 72.097862][ T5039] FS: 00005555563f2380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 72.106808][ T5039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.113403][ T5039] CR2: 0000000020020000 CR3: 000000001626d000 CR4: 00000000003506f0 [ 72.121380][ T5039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.129353][ T5039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.137325][ T5039] Call Trace: [ 72.140604][ T5039] [ 72.143621][ T5039] ? show_regs+0x8f/0xa0 [ 72.147878][ T5039] ? die_addr+0x4f/0xd0 [ 72.152043][ T5039] ? exc_general_protection+0x154/0x230 [ 72.157614][ T5039] ? asm_exc_general_protection+0x26/0x30 [ 72.163359][ T5039] ? skb_segment+0x1a35/0x3ef0 [ 72.168131][ T5039] ? skb_segment+0x1a52/0x3ef0 [ 72.172907][ T5039] ? skb_segment+0x1a35/0x3ef0 [ 72.177696][ T5039] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 72.183690][ T5039] ? get_random_u32+0x423/0x7e0 [ 72.188555][ T5039] ? pskb_extract+0x2b0/0x2b0 [ 72.193240][ T5039] ? ip6_find_1stfragopt+0x163/0x2c0 [ 72.198536][ T5039] udp6_ufo_fragment+0x9d2/0xd50 [ 72.203490][ T5039] ? udp6_gro_complete+0x5a0/0x5a0 [ 72.208610][ T5039] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 72.214084][ T5039] ipv6_gso_segment+0x5c4/0x17b0 [ 72.219037][ T5039] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 72.224505][ T5039] ? _down_write_nest_lock+0x200/0x200 [ 72.229974][ T5039] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.235892][ T5039] skb_mac_gso_segment+0x292/0x610 [ 72.241023][ T5039] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 72.246496][ T5039] ? skb_gso_validate_mac_len+0x300/0x300 [ 72.252243][ T5039] ? rcu_is_watching+0x12/0xb0 [ 72.257067][ T5039] ? lock_acquire+0x464/0x510 [ 72.261802][ T5039] __skb_gso_segment+0x339/0x710 [ 72.266775][ T5039] validate_xmit_skb+0x3a5/0xf10 [ 72.271736][ T5039] ? netdev_core_pick_tx+0x240/0x390 [ 72.277043][ T5039] __dev_queue_xmit+0x8f0/0x3d60 [ 72.282005][ T5039] ? netdev_core_pick_tx+0x390/0x390 [ 72.287306][ T5039] ? __pskb_pull_tail+0xd24/0x1830 [ 72.292441][ T5039] ? virtio_net_hdr_to_skb.constprop.0+0x685/0x1230 [ 72.299059][ T5039] ? packet_release+0xdc0/0xdc0 [ 72.303958][ T5039] packet_xmit+0x257/0x380 [ 72.308391][ T5039] packet_sendmsg+0x24c7/0x5570 [ 72.313262][ T5039] ? preempt_count_sub+0x150/0x150 [ 72.318393][ T5039] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.324332][ T5039] ? aa_sk_perm+0x2c1/0xae0 [ 72.328854][ T5039] ? rcu_is_watching+0x12/0xb0 [ 72.333629][ T5039] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 72.339538][ T5039] ? aa_af_perm+0x260/0x260 [ 72.344046][ T5039] ? import_ubuf+0x1f5/0x260 [ 72.348653][ T5039] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.353954][ T5039] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 72.359959][ T5039] sock_sendmsg+0xd9/0x180 [ 72.364398][ T5039] ____sys_sendmsg+0x6ac/0x940 [ 72.369181][ T5039] ? copy_msghdr_from_user+0x10b/0x160 [ 72.374736][ T5039] ? kernel_sendmsg+0x50/0x50 [ 72.379435][ T5039] ? finish_task_switch.isra.0+0x216/0xc90 [ 72.385249][ T5039] ? __switch_to+0x73d/0x1340 [ 72.389940][ T5039] ___sys_sendmsg+0x135/0x1d0 [ 72.394625][ T5039] ? do_recvmmsg+0x740/0x740 [ 72.399233][ T5039] ? lock_sync+0x190/0x190 [ 72.403666][ T5039] ? ptrace_stop.part.0+0x4b4/0x8f0 [ 72.408876][ T5039] ? __fget_light+0x1fc/0x260 [ 72.413564][ T5039] __sys_sendmsg+0x117/0x1e0 [ 72.418252][ T5039] ? __sys_sendmsg_sock+0x30/0x30 [ 72.423281][ T5039] ? ptrace_notify+0xf4/0x130 [ 72.427968][ T5039] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.433178][ T5039] ? ptrace_notify+0xf4/0x130 [ 72.437860][ T5039] do_syscall_64+0x38/0xb0 [ 72.442302][ T5039] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.448217][ T5039] RIP: 0033:0x7ff27cdb34d9 [ 72.452634][ T5039] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.472335][ T5039] RSP: 002b:00007ffc90af2648 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.480751][ T5039] RAX: ffffffffffffffda RBX: 00007ff27ce00390 RCX: 00007ff27cdb34d9 [ 72.488728][ T5039] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 72.496709][ T5039] RBP: 0000000000000003 R08: 0000555500000000 R09: 0000555500000000 [ 72.504682][ T5039] R10: 0000000000000004 R11: 0000000000000246 R12: 00007ffc90af2690 [ 72.512654][ T5039] R13: 00007ffc90af2660 R14: 0000000000000001 R15: 00007ffc90af2690 [ 72.520638][ T5039] [ 72.523656][ T5039] Modules linked in: [ 72.527644][ T5039] ---[ end trace 0000000000000000 ]--- [ 72.533160][ T5039] RIP: 0010:skb_segment+0x1a52/0x3ef0 [ 72.538570][ T5039] Code: 00 00 00 e9 ab eb ff ff e8 6b 96 5d f9 48 8b 84 24 00 01 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e ea 21 00 00 48 8b 84 24 00 01 [ 72.558327][ T5039] RSP: 0018:ffffc90003d3f1c8 EFLAGS: 00010202 [ 72.564461][ T5039] RAX: dffffc0000000000 RBX: 000000000001fffe RCX: 0000000000000000 [ 72.572488][ T5039] RDX: 000000000000000e RSI: ffffffff882a3115 RDI: 0000000000000070 [ 72.580485][ T5039] RBP: ffffc90003d3f378 R08: 0000000000000005 R09: 000000000000ffff [ 72.588469][ T5039] R10: 000000000000ffff R11: 5ee4a93e456187d6 R12: 000000000001ffc6 [ 72.596470][ T5039] R13: dffffc0000000000 R14: 0000000000000008 R15: 000000000000ffff [ 72.604475][ T5039] FS: 00005555563f2380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 72.613434][ T5039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.620209][ T5039] CR2: 0000000020020000 CR3: 000000001626d000 CR4: 00000000003506f0 [ 72.628221][ T5039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.636221][ T5039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.644224][ T5039] Kernel panic - not syncing: Fatal exception in interrupt [ 72.651510][ T5039] Kernel Offset: disabled [ 72.655818][ T5039] Rebooting in 86400 seconds..