./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3598956705 <...> Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. execve("./syz-executor3598956705", ["./syz-executor3598956705"], 0x7fff9fd3b540 /* 10 vars */) = 0 brk(NULL) = 0x555570280000 brk(0x555570280d00) = 0x555570280d00 arch_prctl(ARCH_SET_FS, 0x555570280380) = 0 set_tid_address(0x555570280650) = 5791 set_robust_list(0x555570280660, 24) = 0 rseq(0x555570280ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3598956705", 4096) = 28 getrandom("\x3c\xaf\xcd\x70\xfd\xa1\xf7\x9b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555570280d00 brk(0x5555702a1d00) = 0x5555702a1d00 brk(0x5555702a2000) = 0x5555702a2000 mprotect(0x7fa0cfc97000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5791}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5792 attached , child_tidptr=0x555570280650) = 5792 [pid 5792] set_robust_list(0x555570280660, 24) = 0 [pid 5792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5792] getppid() = 0 [pid 5792] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5792] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5792] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5792] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5792] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5792] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5792] unshare(CLONE_NEWNS) = 0 [pid 5792] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5792] unshare(CLONE_NEWIPC) = 0 [pid 5792] unshare(CLONE_NEWCGROUP) = 0 [pid 5792] unshare(CLONE_NEWUTS) = 0 [pid 5792] unshare(CLONE_SYSVSEM) = 0 [pid 5792] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "16777216", 8) = 8 [pid 5792] close(3) = 0 [pid 5792] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "536870912", 9) = 9 [pid 5792] close(3) = 0 [pid 5792] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "1024", 4) = 4 [pid 5792] close(3) = 0 [pid 5792] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "8192", 4) = 4 [pid 5792] close(3) = 0 [pid 5792] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "1024", 4) = 4 [pid 5792] close(3) = 0 [pid 5792] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "1024", 4) = 4 [pid 5792] close(3) = 0 [pid 5792] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5792] close(3) = 0 [pid 5792] getpid() = 1 [pid 5792] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 188.335555][ T5819] dump_stack_lvl+0x216/0x2d0 [ 188.340440][ T5819] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 188.346373][ T5819] dump_stack+0x1e/0x30 [ 188.350654][ T5819] panic+0x4e2/0xcf0 [ 188.354747][ T5819] ? kmsan_get_metadata+0x131/0x1c0 [ 188.360080][ T5819] kmsan_report+0x2c7/0x2d0 [ 188.364767][ T5819] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 188.371242][ T5819] ? kmsan_get_metadata+0x13e/0x1c0 [ 188.376607][ T5819] ? __msan_warning+0x95/0x120 [ 188.381571][ T5819] ? ip6table_mangle_hook+0x97d/0x9c0 [ 188.387112][ T5819] ? nf_hook_slow+0xf4/0x400 [ 188.391799][ T5819] ? __ip6_local_out+0x5ac/0x640 [ 188.396843][ T5819] ? ip6_local_out+0x4c/0x210 [ 188.401619][ T5819] ? ip6tunnel_xmit+0x129/0x460 [ 188.406583][ T5819] ? ip6_tnl_xmit+0x341a/0x3860 [ 188.411557][ T5819] ? __gre6_xmit+0x14b9/0x1550 [ 188.416485][ T5819] ? ip6gre_tunnel_xmit+0x18f7/0x2030 [ 188.422053][ T5819] ? dev_hard_start_xmit+0x247/0xa20 [ 188.427452][ T5819] ? sch_direct_xmit+0x399/0xd40 [ 188.432511][ T5819] ? __dev_queue_xmit+0x2fcf/0x56d0 [ 188.437819][ T5819] ? packet_xmit+0x9c/0x6c0 [ 188.442418][ T5819] ? packet_sendmsg+0x908b/0xa370 [ 188.447661][ T5819] ? __sock_sendmsg+0x30f/0x380 [ 188.452636][ T5819] ? __sys_sendto+0x645/0x7f0 [ 188.457425][ T5819] ? __x64_sys_sendto+0x125/0x1d0 [ 188.462588][ T5819] ? x64_sys_call+0x3373/0x3ba0 [ 188.467619][ T5819] ? do_syscall_64+0xcd/0x1e0 [ 188.472425][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.478636][ T5819] ? kmsan_get_metadata+0x13e/0x1c0 [ 188.483935][ T5819] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 188.489869][ T5819] __msan_warning+0x95/0x120 [ 188.494647][ T5819] ip6table_mangle_hook+0x97d/0x9c0 [ 188.499979][ T5819] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 188.505816][ T5819] nf_hook_slow+0xf4/0x400 [ 188.510336][ T5819] __ip6_local_out+0x5ac/0x640 [ 188.515209][ T5819] ? __pfx_dst_output+0x10/0x10 [ 188.520169][ T5819] ip6_local_out+0x4c/0x210 [ 188.524809][ T5819] ip6tunnel_xmit+0x129/0x460 [ 188.529667][ T5819] ip6_tnl_xmit+0x341a/0x3860 [ 188.534488][ T5819] __gre6_xmit+0x14b9/0x1550 [ 188.539202][ T5819] ? iptunnel_handle_offloads+0x490/0x640 [ 188.545041][ T5819] ip6gre_tunnel_xmit+0x18f7/0x2030 [ 188.550376][ T5819] ? kmsan_get_metadata+0x13e/0x1c0 [ 188.555703][ T5819] ? __pfx_ip6gre_tunnel_xmit+0x10/0x10 [ 188.561463][ T5819] dev_hard_start_xmit+0x247/0xa20 [ 188.566759][ T5819] sch_direct_xmit+0x399/0xd40 [ 188.571659][ T5819] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 188.578315][ T5819] __dev_queue_xmit+0x2fcf/0x56d0 [ 188.583544][ T5819] ? __dev_queue_xmit+0x355/0x56d0 [ 188.588789][ T5819] packet_xmit+0x9c/0x6c0 [ 188.593208][ T5819] ? kmsan_get_metadata+0x13e/0x1c0 [ 188.598532][ T5819] packet_sendmsg+0x908b/0xa370 [ 188.603580][ T5819] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 188.609575][ T5819] ? kmsan_get_metadata+0x13e/0x1c0 [ 188.614896][ T5819] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 188.620815][ T5819] ? aa_label_sk_perm+0x677/0x7b0 [ 188.625981][ T5819] ? filter_irq_stacks+0x60/0x1a0 [ 188.631138][ T5819] ? kmsan_get_metadata+0x13e/0x1c0 [ 188.636513][ T5819] ? __pfx_packet_sendmsg+0x10/0x10 [ 188.641903][ T5819] ? __pfx_packet_sendmsg+0x10/0x10 [ 188.647225][ T5819] __sock_sendmsg+0x30f/0x380 [ 188.652026][ T5819] __sys_sendto+0x645/0x7f0 [ 188.656727][ T5819] ? kmsan_get_metadata+0x13e/0x1c0 [ 188.662072][ T5819] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 188.668033][ T5819] __x64_sys_sendto+0x125/0x1d0 [ 188.673090][ T5819] x64_sys_call+0x3373/0x3ba0 [ 188.677888][ T5819] do_syscall_64+0xcd/0x1e0 [ 188.682513][ T5819] ? clear_bhb_loop+0x25/0x80 [ 188.687313][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.693441][ T5819] RIP: 0033:0x7fa0cfc25c39 [ 188.697972][ T5819] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 188.717761][ T5819] RSP: 002b:00007ffe8dbaa718 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 188.726284][ T5819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa0cfc25c39 [ 188.734347][ T5819] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000004 [ 188.742405][ T5819] RBP: 0000000000000000 R08: 0000000020000140 R09: 0000000000000014 [ 188.750457][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.758504][ T5819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.766595][ T5819] [ 188.771697][ T5819] Kernel Offset: disabled [ 188.776090][ T5819] Rebooting in 86400 seconds..