./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor401973980 <...> Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. execve("./syz-executor401973980", ["./syz-executor401973980"], 0x7ffe6a38c990 /* 10 vars */) = 0 brk(NULL) = 0x55557cf50000 brk(0x55557cf50d00) = 0x55557cf50d00 arch_prctl(ARCH_SET_FS, 0x55557cf50380) = 0 set_tid_address(0x55557cf50650) = 5837 set_robust_list(0x55557cf50660, 24) = 0 rseq(0x55557cf50ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor401973980", 4096) = 27 getrandom("\x2e\xe7\x66\x3c\x84\xbc\x73\xc5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557cf50d00 brk(0x55557cf71d00) = 0x55557cf71d00 brk(0x55557cf72000) = 0x55557cf72000 mprotect(0x7fc6557d0000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [ 88.979595][ T5837] ------------[ cut here ]------------ [ 88.985302][ T5837] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:21 [ 88.993786][ T5837] index 16 is out of range for type 'const __u8[16]' (aka 'const unsigned char[16]') [ 89.003450][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor401 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 89.003476][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.003494][ T5837] Call Trace: [ 89.003502][ T5837] [ 89.003510][ T5837] dump_stack_lvl+0x189/0x250 [ 89.003571][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.003600][ T5837] ? __pfx__printk+0x10/0x10 [ 89.003617][ T5837] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 89.003659][ T5837] ubsan_epilogue+0xa/0x40 [ 89.003680][ T5837] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 89.003712][ T5837] ? __asan_memcpy+0x40/0x70 [ 89.003741][ T5837] ipv6_addr_prefix+0x145/0x1d0 [ 89.003771][ T5837] ip6_route_info_create+0x629/0xa70 [ 89.003810][ T5837] inet6_rtm_newroute+0x578/0x1c70 [ 89.003843][ T5837] ? __lock_acquire+0xaac/0xd20 [ 89.003876][ T5837] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 89.003964][ T5837] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 89.003991][ T5837] rtnetlink_rcv_msg+0x7cc/0xb70 [ 89.004019][ T5837] ? kasan_save_track+0x4f/0x80 [ 89.004044][ T5837] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 89.004072][ T5837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.004102][ T5837] ? __lock_acquire+0xaac/0xd20 [ 89.004143][ T5837] netlink_rcv_skb+0x219/0x490 [ 89.004174][ T5837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.004204][ T5837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.004252][ T5837] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.004280][ T5837] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.004314][ T5837] netlink_unicast+0x758/0x8d0 [ 89.004342][ T5837] netlink_sendmsg+0x805/0xb30 [ 89.004370][ T5837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.004394][ T5837] ? aa_sock_msg_perm+0x94/0x160 [ 89.004410][ T5837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 89.004426][ T5837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.004449][ T5837] __sock_sendmsg+0x219/0x270 [ 89.004470][ T5837] ____sys_sendmsg+0x505/0x830 [ 89.004488][ T5837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.004509][ T5837] ? import_iovec+0x74/0xa0 [ 89.004531][ T5837] ___sys_sendmsg+0x21f/0x2a0 [ 89.004547][ T5837] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.004564][ T5837] ? do_raw_spin_lock+0x121/0x290 [ 89.004604][ T5837] ? _raw_spin_lock_irq+0xae/0xf0 [ 89.004637][ T5837] __x64_sys_sendmsg+0x19b/0x260 [ 89.004654][ T5837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.004685][ T5837] do_syscall_64+0xf6/0x210 [ 89.004704][ T5837] ? clear_bhb_loop+0x45/0xa0 [ 89.004730][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.004743][ T5837] RIP: 0033:0x7fc65575d369 [ 89.004761][ T5837] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.004773][ T5837] RSP: 002b:00007fff8937e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.004790][ T5837] RAX: ffffffffffffffda RBX: 00007fff8937e1f8 RCX: 00007fc65575d369 [ 89.004801][ T5837] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 89.004809][ T5837] RBP: 00007fc6557d0610 R08: 0000000000000000 R09: 00007fff8937e1f8 [ 89.004818][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.004826][ T5837] R13: 00007fff8937e1e8 R14: 0000000000000001 R15: 0000000000000001 [ 89.004847][ T5837] [ 89.004852][ T5837] ---[ end trace ]--- [ 89.326068][ T5837] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 89.333264][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor401 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 89.345679][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.355738][ T5837] Call Trace: [ 89.359029][ T5837] [ 89.361968][ T5837] dump_stack_lvl+0x99/0x250 [ 89.366575][ T5837] ? __asan_memcpy+0x40/0x70 [ 89.371170][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.376395][ T5837] ? __pfx__printk+0x10/0x10 [ 89.381001][ T5837] panic+0x2db/0x790 [ 89.384918][ T5837] ? __pfx_panic+0x10/0x10 [ 89.389350][ T5837] ? _printk+0xcf/0x120 [ 89.393521][ T5837] ? __pfx__printk+0x10/0x10 [ 89.398109][ T5837] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 89.404025][ T5837] check_panic_on_warn+0x89/0xb0 [ 89.409001][ T5837] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 89.414741][ T5837] ? __asan_memcpy+0x40/0x70 [ 89.419349][ T5837] ipv6_addr_prefix+0x145/0x1d0 [ 89.424207][ T5837] ip6_route_info_create+0x629/0xa70 [ 89.429507][ T5837] inet6_rtm_newroute+0x578/0x1c70 [ 89.434625][ T5837] ? __lock_acquire+0xaac/0xd20 [ 89.439482][ T5837] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 89.445070][ T5837] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 89.450615][ T5837] rtnetlink_rcv_msg+0x7cc/0xb70 [ 89.455557][ T5837] ? kasan_save_track+0x4f/0x80 [ 89.460424][ T5837] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 89.465543][ T5837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.471007][ T5837] ? __lock_acquire+0xaac/0xd20 [ 89.475890][ T5837] netlink_rcv_skb+0x219/0x490 [ 89.480682][ T5837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.486162][ T5837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.491473][ T5837] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.496682][ T5837] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.501897][ T5837] netlink_unicast+0x758/0x8d0 [ 89.506681][ T5837] netlink_sendmsg+0x805/0xb30 [ 89.511512][ T5837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.516809][ T5837] ? aa_sock_msg_perm+0x94/0x160 [ 89.521744][ T5837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 89.527033][ T5837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.532324][ T5837] __sock_sendmsg+0x219/0x270 [ 89.537004][ T5837] ____sys_sendmsg+0x505/0x830 [ 89.541771][ T5837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.547057][ T5837] ? import_iovec+0x74/0xa0 [ 89.551572][ T5837] ___sys_sendmsg+0x21f/0x2a0 [ 89.556268][ T5837] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.561466][ T5837] ? do_raw_spin_lock+0x121/0x290 [ 89.566512][ T5837] ? _raw_spin_lock_irq+0xae/0xf0 [ 89.571568][ T5837] __x64_sys_sendmsg+0x19b/0x260 [ 89.576607][ T5837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.582096][ T5837] do_syscall_64+0xf6/0x210 [ 89.586626][ T5837] ? clear_bhb_loop+0x45/0xa0 [ 89.591325][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.597226][ T5837] RIP: 0033:0x7fc65575d369 [ 89.601662][ T5837] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.621281][ T5837] RSP: 002b:00007fff8937e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.629708][ T5837] RAX: ffffffffffffffda RBX: 00007fff8937e1f8 RCX: 00007fc65575d369 [ 89.637679][ T5837] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 89.645663][ T5837] RBP: 00007fc6557d0610 R08: 0000000000000000 R09: 00007fff8937e1f8 [ 89.653642][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.661611][ T5837] R13: 00007fff8937e1e8 R14: 0000000000000001 R15: 0000000000000001 [ 89.669595][ T5837] [ 89.672965][ T5837] Kernel Offset: disabled [ 89.677297][ T5837] Rebooting in 86400 seconds..