./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4136564677 <...> Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. execve("./syz-executor4136564677", ["./syz-executor4136564677"], 0x7ffff0ba9510 /* 10 vars */) = 0 brk(NULL) = 0x55558e007000 brk(0x55558e007d00) = 0x55558e007d00 arch_prctl(ARCH_SET_FS, 0x55558e007380) = 0 set_tid_address(0x55558e007650) = 5831 set_robust_list(0x55558e007660, 24) = 0 rseq(0x55558e007ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4136564677", 4096) = 28 getrandom("\x41\xd4\x3b\xcb\x7c\x8a\x41\x4e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558e007d00 brk(0x55558e028d00) = 0x55558e028d00 brk(0x55558e029000) = 0x55558e029000 mprotect(0x7fa4515b0000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5832 attached , child_tidptr=0x55558e007650) = 5832 [pid 5832] set_robust_list(0x55558e007660, 24) = 0 [pid 5832] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5832] getppid() = 0 [pid 5832] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5832] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5832] unshare(CLONE_NEWNS) = 0 [pid 5832] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5832] unshare(CLONE_NEWIPC) = 0 [pid 5832] unshare(CLONE_NEWCGROUP) = 0 [pid 5832] unshare(CLONE_NEWUTS) = 0 [pid 5832] unshare(CLONE_SYSVSEM) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "16777216", 8) = 8 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "536870912", 9) = 9 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "1024", 4) = 4 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "8192", 4) = 4 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "1024", 4) = 4 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "1024", 4) = 4 [pid 5832] close(3) = 0 [pid 5832] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5832] close(3) = 0 [pid 5832] getpid() = 1 [pid 5832] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 101.074045][ T5835] dump_stack_lvl+0x189/0x250 [ 101.074064][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.074078][ T5835] ? __pfx__printk+0x10/0x10 [ 101.074087][ T5835] ? udp_tunnel6_dst_lookup+0x231/0x3c0 [ 101.074098][ T5835] ? ip6_finish_output2+0x11bc/0x16a0 [ 101.074110][ T5835] ? NF_HOOK+0x9e/0x380 [ 101.074118][ T5835] ? mld_sendpack+0x800/0xd80 [ 101.074127][ T5835] ? mld_ifc_work+0x835/0xde0 [ 101.074140][ T5835] ubsan_epilogue+0xa/0x40 [ 101.074151][ T5835] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 101.074172][ T5835] ip6_rt_copy_init+0x8e7/0x970 [ 101.074189][ T5835] ip6_pol_route+0xbac/0x1180 [ 101.074203][ T5835] ? ip6_pol_route+0x162/0x1180 [ 101.074219][ T5835] ? __pfx_ip6_pol_route+0x10/0x10 [ 101.074233][ T5835] ? lock_release+0x4b/0x3e0 [ 101.074251][ T5835] ? unwind_next_frame+0xa5/0x2390 [ 101.074263][ T5835] ? unwind_next_frame+0x19ae/0x2390 [ 101.074277][ T5835] fib6_rule_lookup+0x348/0x6f0 [ 101.074293][ T5835] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 101.074307][ T5835] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 101.074323][ T5835] ? ip6_route_output_flags+0x2e/0x5d0 [ 101.074338][ T5835] ? ip6_route_output_flags+0x2e/0x5d0 [ 101.074353][ T5835] ? __pfx_hlock_conflict+0x10/0x10 [ 101.074370][ T5835] ip6_route_output_flags+0x364/0x5d0 [ 101.074384][ T5835] ? ip6_route_output_flags+0x2e/0x5d0 [ 101.074400][ T5835] ip6_dst_lookup_tail+0x1ae/0x1510 [ 101.074419][ T5835] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 101.074435][ T5835] ? __lock_acquire+0xaac/0xd20 [ 101.074450][ T5835] ? __siphash_unaligned+0x263/0x3b0 [ 101.074466][ T5835] ip6_dst_lookup_flow+0x47/0xe0 [ 101.074486][ T5835] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 101.074497][ T5835] udp_tunnel6_dst_lookup+0x231/0x3c0 [ 101.074511][ T5835] ? __pfx_udp_tunnel6_dst_lookup+0x10/0x10 [ 101.074520][ T5835] ? geneve_get_dsfield+0xec/0x680 [ 101.074542][ T5835] ? __pfx_geneve_get_dsfield+0x10/0x10 [ 101.074560][ T5835] geneve_xmit+0xd2e/0x2b70 [ 101.074581][ T5835] ? __lock_acquire+0xaac/0xd20 [ 101.074600][ T5835] ? __pfx_skb_network_protocol+0x10/0x10 [ 101.074613][ T5835] ? geneve_xmit+0x128/0x2b70 [ 101.074628][ T5835] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 101.074641][ T5835] ? __pfx_geneve_xmit+0x10/0x10 [ 101.074665][ T5835] dev_hard_start_xmit+0x2d4/0x830 [ 101.074678][ T5835] ? rcu_read_lock_bh_held+0x79/0xe0 [ 101.074696][ T5835] __dev_queue_xmit+0x1adf/0x3a70 [ 101.074715][ T5835] ? __dev_queue_xmit+0x27e/0x3a70 [ 101.074734][ T5835] ? __pfx_fib_rules_lookup+0x10/0x10 [ 101.074745][ T5835] ? __pfx___dev_queue_xmit+0x10/0x10 [ 101.074757][ T5835] ? l3mdev_update_flow+0x4d1/0x640 [ 101.074773][ T5835] ? look_up_lock_class+0x74/0x170 [ 101.074787][ T5835] ? register_lock_class+0x51/0x320 [ 101.074804][ T5835] ? __lock_acquire+0xaac/0xd20 [ 101.074822][ T5835] ? ip6_finish_output+0x234/0x7d0 [ 101.074840][ T5835] ? ip6_finish_output2+0xf99/0x16a0 [ 101.074855][ T5835] ip6_finish_output2+0x11bc/0x16a0 [ 101.074871][ T5835] ? ip6_finish_output2+0x701/0x16a0 [ 101.074891][ T5835] ? __pfx_ip6_finish_output2+0x10/0x10 [ 101.074903][ T5835] ? ip6_mtu+0x7d/0x3f0 [ 101.074915][ T5835] ? ip6_mtu+0x7d/0x3f0 [ 101.074926][ T5835] ip6_finish_output+0x234/0x7d0 [ 101.074944][ T5835] NF_HOOK+0x9e/0x380 [ 101.074956][ T5835] ? __pfx_NF_HOOK+0x10/0x10 [ 101.074967][ T5835] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 101.074981][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 101.074993][ T5835] ? icmp6_dst_alloc+0x3a5/0x420 [ 101.075004][ T5835] ? icmp6_dst_alloc+0x3a5/0x420 [ 101.075017][ T5835] mld_sendpack+0x800/0xd80 [ 101.075037][ T5835] ? mld_sendpack+0x1de/0xd80 [ 101.075048][ T5835] ? __pfx_mld_sendpack+0x10/0x10 [ 101.075071][ T5835] mld_ifc_work+0x835/0xde0 [ 101.075082][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.075096][ T5835] ? process_scheduled_works+0x9ec/0x17a0 [ 101.075112][ T5835] process_scheduled_works+0xadb/0x17a0 [ 101.075145][ T5835] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.075170][ T5835] worker_thread+0x8a0/0xda0 [ 101.075182][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.075199][ T5835] ? __kthread_parkme+0x7b/0x200 [ 101.075216][ T5835] kthread+0x70e/0x8a0 [ 101.075230][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 101.075240][ T5835] ? __pfx_kthread+0x10/0x10 [ 101.075253][ T5835] ? __pfx_kthread+0x10/0x10 [ 101.075264][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.075275][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.075287][ T5835] ? __pfx_kthread+0x10/0x10 [ 101.075298][ T5835] ret_from_fork+0x4b/0x80 [ 101.075309][ T5835] ? __pfx_kthread+0x10/0x10 [ 101.075320][ T5835] ret_from_fork_asm+0x1a/0x30 [ 101.075341][ T5835] [ 101.075345][ T5835] ---[ end trace ]--- [ 101.550524][ T5835] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 101.557720][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/1:3 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 101.569776][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.579840][ T5835] Workqueue: mld mld_ifc_work [ 101.584540][ T5835] Call Trace: [ 101.587813][ T5835] [ 101.590843][ T5835] dump_stack_lvl+0x99/0x250 [ 101.595442][ T5835] ? __asan_memcpy+0x40/0x70 [ 101.600035][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.605230][ T5835] ? __pfx__printk+0x10/0x10 [ 101.609828][ T5835] panic+0x2db/0x790 [ 101.613754][ T5835] ? __pfx_panic+0x10/0x10 [ 101.618176][ T5835] ? _printk+0xcf/0x120 [ 101.622327][ T5835] ? __pfx__printk+0x10/0x10 [ 101.626910][ T5835] ? udp_tunnel6_dst_lookup+0x231/0x3c0 [ 101.632449][ T5835] ? ip6_finish_output2+0x11bc/0x16a0 [ 101.637846][ T5835] ? NF_HOOK+0x9e/0x380 [ 101.642030][ T5835] ? mld_sendpack+0x800/0xd80 [ 101.646707][ T5835] ? mld_ifc_work+0x835/0xde0 [ 101.651412][ T5835] check_panic_on_warn+0x89/0xb0 [ 101.656375][ T5835] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 101.662135][ T5835] ip6_rt_copy_init+0x8e7/0x970 [ 101.667010][ T5835] ip6_pol_route+0xbac/0x1180 [ 101.671710][ T5835] ? ip6_pol_route+0x162/0x1180 [ 101.676597][ T5835] ? __pfx_ip6_pol_route+0x10/0x10 [ 101.681721][ T5835] ? lock_release+0x4b/0x3e0 [ 101.686339][ T5835] ? unwind_next_frame+0xa5/0x2390 [ 101.691461][ T5835] ? unwind_next_frame+0x19ae/0x2390 [ 101.696765][ T5835] fib6_rule_lookup+0x348/0x6f0 [ 101.701649][ T5835] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 101.707399][ T5835] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 101.712805][ T5835] ? ip6_route_output_flags+0x2e/0x5d0 [ 101.718280][ T5835] ? ip6_route_output_flags+0x2e/0x5d0 [ 101.723754][ T5835] ? __pfx_hlock_conflict+0x10/0x10 [ 101.728968][ T5835] ip6_route_output_flags+0x364/0x5d0 [ 101.734352][ T5835] ? ip6_route_output_flags+0x2e/0x5d0 [ 101.739858][ T5835] ip6_dst_lookup_tail+0x1ae/0x1510 [ 101.745082][ T5835] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 101.750733][ T5835] ? __lock_acquire+0xaac/0xd20 [ 101.755619][ T5835] ? __siphash_unaligned+0x263/0x3b0 [ 101.760921][ T5835] ip6_dst_lookup_flow+0x47/0xe0 [ 101.765869][ T5835] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 101.771507][ T5835] udp_tunnel6_dst_lookup+0x231/0x3c0 [ 101.776890][ T5835] ? __pfx_udp_tunnel6_dst_lookup+0x10/0x10 [ 101.782785][ T5835] ? geneve_get_dsfield+0xec/0x680 [ 101.787921][ T5835] ? __pfx_geneve_get_dsfield+0x10/0x10 [ 101.793484][ T5835] geneve_xmit+0xd2e/0x2b70 [ 101.798056][ T5835] ? __lock_acquire+0xaac/0xd20 [ 101.802947][ T5835] ? __pfx_skb_network_protocol+0x10/0x10 [ 101.808690][ T5835] ? geneve_xmit+0x128/0x2b70 [ 101.813404][ T5835] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 101.818968][ T5835] ? __pfx_geneve_xmit+0x10/0x10 [ 101.823953][ T5835] dev_hard_start_xmit+0x2d4/0x830 [ 101.829085][ T5835] ? rcu_read_lock_bh_held+0x79/0xe0 [ 101.834391][ T5835] __dev_queue_xmit+0x1adf/0x3a70 [ 101.839441][ T5835] ? __dev_queue_xmit+0x27e/0x3a70 [ 101.844580][ T5835] ? __pfx_fib_rules_lookup+0x10/0x10 [ 101.849973][ T5835] ? __pfx___dev_queue_xmit+0x10/0x10 [ 101.855359][ T5835] ? l3mdev_update_flow+0x4d1/0x640 [ 101.860574][ T5835] ? look_up_lock_class+0x74/0x170 [ 101.865703][ T5835] ? register_lock_class+0x51/0x320 [ 101.870918][ T5835] ? __lock_acquire+0xaac/0xd20 [ 101.875791][ T5835] ? ip6_finish_output+0x234/0x7d0 [ 101.880919][ T5835] ? ip6_finish_output2+0xf99/0x16a0 [ 101.886213][ T5835] ip6_finish_output2+0x11bc/0x16a0 [ 101.891425][ T5835] ? ip6_finish_output2+0x701/0x16a0 [ 101.896726][ T5835] ? __pfx_ip6_finish_output2+0x10/0x10 [ 101.902277][ T5835] ? ip6_mtu+0x7d/0x3f0 [ 101.906526][ T5835] ? ip6_mtu+0x7d/0x3f0 [ 101.910712][ T5835] ip6_finish_output+0x234/0x7d0 [ 101.915667][ T5835] NF_HOOK+0x9e/0x380 [ 101.919665][ T5835] ? __pfx_NF_HOOK+0x10/0x10 [ 101.924263][ T5835] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 101.930080][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 101.935290][ T5835] ? icmp6_dst_alloc+0x3a5/0x420 [ 101.940238][ T5835] ? icmp6_dst_alloc+0x3a5/0x420 [ 101.945187][ T5835] mld_sendpack+0x800/0xd80 [ 101.949721][ T5835] ? mld_sendpack+0x1de/0xd80 [ 101.954498][ T5835] ? __pfx_mld_sendpack+0x10/0x10 [ 101.959548][ T5835] mld_ifc_work+0x835/0xde0 [ 101.964062][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.969267][ T5835] ? process_scheduled_works+0x9ec/0x17a0 [ 101.975025][ T5835] process_scheduled_works+0xadb/0x17a0 [ 101.980640][ T5835] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.986759][ T5835] worker_thread+0x8a0/0xda0 [ 101.991366][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.997716][ T5835] ? __kthread_parkme+0x7b/0x200 [ 102.002757][ T5835] kthread+0x70e/0x8a0 [ 102.006843][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 102.011961][ T5835] ? __pfx_kthread+0x10/0x10 [ 102.016560][ T5835] ? __pfx_kthread+0x10/0x10 [ 102.021161][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.026367][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.031570][ T5835] ? __pfx_kthread+0x10/0x10 [ 102.036164][ T5835] ret_from_fork+0x4b/0x80 [ 102.040585][ T5835] ? __pfx_kthread+0x10/0x10 [ 102.045180][ T5835] ret_from_fork_asm+0x1a/0x30 [ 102.049965][ T5835] [ 102.053127][ T5835] Kernel Offset: disabled [ 102.057483][ T5835] Rebooting in 86400 seconds..