./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2906694759 <...> Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. execve("./syz-executor2906694759", ["./syz-executor2906694759"], 0x7ffc03f4fb80 /* 10 vars */) = 0 brk(NULL) = 0x5555566ca000 brk(0x5555566cad00) = 0x5555566cad00 arch_prctl(ARCH_SET_FS, 0x5555566ca380) = 0 set_tid_address(0x5555566ca650) = 5031 set_robust_list(0x5555566ca660, 24) = 0 rseq(0x5555566caca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2906694759", 4096) = 28 getrandom("\x2c\x3a\xc6\x18\x91\x1f\x94\x88", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555566cad00 brk(0x5555566ebd00) = 0x5555566ebd00 brk(0x5555566ec000) = 0x5555566ec000 mprotect(0x7f8560189000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 16776960 mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0) = 0x20000000 openat(AT_FDCWD, 0x20000080, O_RDONLY|O_NONBLOCK|O_DSYNC|O_DIRECT|O_NOFOLLOW|O_NOATIME|0x8) = 4 socket(AF_INET6, SOCK_DGRAM, IPPROTO_L2TP) = 5 bind(5, 0x20000000, 32) = 0 connect(5, 0x20000040, 32) = 0 [ 62.830279][ T27] audit: type=1804 audit(1693706283.259:2): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor290" name="/root/cgroup.controllers" dev="sda1" ino=1927 res=1 errno=0 [ 62.871641][ T5031] ------------[ cut here ]------------ [ 62.877227][ T5031] WARNING: CPU: 1 PID: 5031 at net/ipv6/ip6_output.c:1799 __ip6_append_data.isra.0+0x1beb/0x47f0 [ 62.888116][ T5031] Modules linked in: [ 62.892057][ T5031] CPU: 1 PID: 5031 Comm: syz-executor290 Not tainted 6.5.0-syzkaller-04011-gae074e2b2fd4 #0 [ 62.902382][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 62.912699][ T5031] RIP: 0010:__ip6_append_data.isra.0+0x1beb/0x47f0 [ 62.919299][ T5031] Code: db f6 ff ff e8 56 81 9c f8 49 8d 44 24 ff 48 89 44 24 60 49 8d 6c 24 07 e9 c2 f6 ff ff 4c 8b b4 24 90 01 00 00 e8 35 81 9c f8 <0f> 0b 48 8b 44 24 10 45 89 f4 48 8d 98 74 02 00 00 e8 1f 81 9c f8 [ 62.939350][ T5031] RSP: 0018:ffffc9000384f3b8 EFLAGS: 00010293 [ 62.945689][ T5031] RAX: 0000000000000000 RBX: 0000000000001004 RCX: 0000000000000000 [ 62.953734][ T5031] RDX: ffff8880272d9dc0 RSI: ffffffff88ea064b RDI: 0000000000000006 [ 62.961888][ T5031] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001004 [ 62.969950][ T5031] R10: 0000000000001000 R11: 0000000000000000 R12: 0000000000000001 [ 62.978147][ T5031] R13: dffffc0000000000 R14: 0000000000001004 R15: ffff888078c3e640 [ 62.986293][ T5031] FS: 00005555566ca380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 62.995312][ T5031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.002226][ T5031] CR2: 000000000045ad50 CR3: 0000000072d0c000 CR4: 00000000003506e0 [ 63.010379][ T5031] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.018615][ T5031] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.026930][ T5031] Call Trace: [ 63.030253][ T5031] [ 63.033290][ T5031] ? __warn+0xe6/0x380 [ 63.037414][ T5031] ? __ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.044075][ T5031] ? report_bug+0x3bc/0x580 [ 63.048904][ T5031] ? handle_bug+0x3c/0x70 [ 63.053325][ T5031] ? exc_invalid_op+0x17/0x40 [ 63.058402][ T5031] ? asm_exc_invalid_op+0x1a/0x20 [ 63.063587][ T5031] ? __ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.069529][ T5031] ? __ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.075509][ T5031] ? __ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.081495][ T5031] ? ip_frag_init+0x320/0x320 [ 63.086172][ T5031] ? print_usage_bug.part.0+0x670/0x670 [ 63.091775][ T5031] ? ip6_dst_lookup+0x60/0x60 [ 63.096677][ T5031] ip6_append_data+0x1e6/0x510 [ 63.101527][ T5031] ? ip_frag_init+0x320/0x320 [ 63.106229][ T5031] l2tp_ip6_sendmsg+0xdf9/0x1cc0 [ 63.111270][ T5031] ? l2tp_ip6_open+0x210/0x210 [ 63.116125][ T5031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.122135][ T5031] ? inet_sendmsg+0x9d/0xe0 [ 63.126636][ T5031] inet_sendmsg+0x9d/0xe0 [ 63.131048][ T5031] ? inet_send_prepare+0x540/0x540 [ 63.136304][ T5031] sock_sendmsg+0xd9/0x180 [ 63.140754][ T5031] splice_to_socket+0xade/0x1010 [ 63.145802][ T5031] ? splice_from_pipe+0x130/0x130 [ 63.150879][ T5031] ? slab_free_freelist_hook+0x10b/0x1e0 [ 63.156776][ T5031] ? __phys_addr+0xc6/0x140 [ 63.161470][ T5031] ? security_file_permission+0xdc/0x100 [ 63.167231][ T5031] ? splice_from_pipe+0x130/0x130 [ 63.172516][ T5031] direct_splice_actor+0x118/0x180 [ 63.177666][ T5031] splice_direct_to_actor+0x347/0xa30 [ 63.183272][ T5031] ? folio_flags.constprop.0+0x150/0x150 [ 63.188993][ T5031] ? vfs_splice_read+0x3b0/0x3b0 [ 63.194005][ T5031] ? bpf_lsm_file_permission+0x9/0x10 [ 63.199503][ T5031] ? security_file_permission+0x94/0x100 [ 63.205305][ T5031] do_splice_direct+0x1af/0x280 [ 63.210267][ T5031] ? splice_direct_to_actor+0xa30/0xa30 [ 63.216265][ T5031] ? propagate_umount+0x1af0/0x1af0 [ 63.221688][ T5031] ? bpf_lsm_file_permission+0x9/0x10 [ 63.227069][ T5031] ? security_file_permission+0x94/0x100 [ 63.232862][ T5031] do_sendfile+0xb88/0x1390 [ 63.237431][ T5031] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 63.242774][ T5031] ? ptrace_notify+0xf4/0x130 [ 63.247560][ T5031] ? reacquire_held_locks+0x4b0/0x4b0 [ 63.253660][ T5031] __x64_sys_sendfile64+0x1d6/0x220 [ 63.259069][ T5031] ? __ia32_sys_sendfile+0x220/0x220 [ 63.264538][ T5031] ? lockdep_hardirqs_on+0x7d/0x100 [ 63.270284][ T5031] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.275776][ T5031] ? ptrace_notify+0xf4/0x130 [ 63.280787][ T5031] do_syscall_64+0x38/0xb0 [ 63.285427][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.291623][ T5031] RIP: 0033:0x7f8560116469 [ 63.296149][ T5031] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.316474][ T5031] RSP: 002b:00007ffdac7a44f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 63.324963][ T5031] RAX: ffffffffffffffda RBX: 00007ffdac7a46c8 RCX: 00007f8560116469 [ 63.333093][ T5031] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 63.341171][ T5031] RBP: 00007f8560189610 R08: 00007ffdac7a46c8 R09: 00007ffdac7a46c8 [ 63.349203][ T5031] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 63.357327][ T5031] R13: 00007ffdac7a46b8 R14: 0000000000000001 R15: 0000000000000001 [ 63.365463][ T5031] [ 63.368492][ T5031] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.375765][ T5031] CPU: 1 PID: 5031 Comm: syz-executor290 Not tainted 6.5.0-syzkaller-04011-gae074e2b2fd4 #0 [ 63.385904][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 63.395959][ T5031] Call Trace: [ 63.399314][ T5031] [ 63.402235][ T5031] dump_stack_lvl+0xd9/0x1b0 [ 63.406852][ T5031] panic+0x6a4/0x750 [ 63.411040][ T5031] ? panic_smp_self_stop+0xa0/0xa0 [ 63.416341][ T5031] ? show_trace_log_lvl+0x29d/0x3c0 [ 63.421646][ T5031] ? __ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.427561][ T5031] check_panic_on_warn+0xab/0xb0 [ 63.432505][ T5031] __warn+0xf2/0x380 [ 63.436398][ T5031] ? __ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.442393][ T5031] report_bug+0x3bc/0x580 [ 63.446824][ T5031] handle_bug+0x3c/0x70 [ 63.450983][ T5031] exc_invalid_op+0x17/0x40 [ 63.456444][ T5031] asm_exc_invalid_op+0x1a/0x20 [ 63.461389][ T5031] RIP: 0010:__ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.468030][ T5031] Code: db f6 ff ff e8 56 81 9c f8 49 8d 44 24 ff 48 89 44 24 60 49 8d 6c 24 07 e9 c2 f6 ff ff 4c 8b b4 24 90 01 00 00 e8 35 81 9c f8 <0f> 0b 48 8b 44 24 10 45 89 f4 48 8d 98 74 02 00 00 e8 1f 81 9c f8 [ 63.487735][ T5031] RSP: 0018:ffffc9000384f3b8 EFLAGS: 00010293 [ 63.493814][ T5031] RAX: 0000000000000000 RBX: 0000000000001004 RCX: 0000000000000000 [ 63.501807][ T5031] RDX: ffff8880272d9dc0 RSI: ffffffff88ea064b RDI: 0000000000000006 [ 63.510144][ T5031] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001004 [ 63.518122][ T5031] R10: 0000000000001000 R11: 0000000000000000 R12: 0000000000000001 [ 63.526199][ T5031] R13: dffffc0000000000 R14: 0000000000001004 R15: ffff888078c3e640 [ 63.534193][ T5031] ? __ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.540125][ T5031] ? __ip6_append_data.isra.0+0x1beb/0x47f0 [ 63.546050][ T5031] ? ip_frag_init+0x320/0x320 [ 63.550754][ T5031] ? print_usage_bug.part.0+0x670/0x670 [ 63.556502][ T5031] ? ip6_dst_lookup+0x60/0x60 [ 63.561216][ T5031] ip6_append_data+0x1e6/0x510 [ 63.566019][ T5031] ? ip_frag_init+0x320/0x320 [ 63.570715][ T5031] l2tp_ip6_sendmsg+0xdf9/0x1cc0 [ 63.575772][ T5031] ? l2tp_ip6_open+0x210/0x210 [ 63.580667][ T5031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.586789][ T5031] ? inet_sendmsg+0x9d/0xe0 [ 63.591483][ T5031] inet_sendmsg+0x9d/0xe0 [ 63.595834][ T5031] ? inet_send_prepare+0x540/0x540 [ 63.600962][ T5031] sock_sendmsg+0xd9/0x180 [ 63.605564][ T5031] splice_to_socket+0xade/0x1010 [ 63.610615][ T5031] ? splice_from_pipe+0x130/0x130 [ 63.615648][ T5031] ? slab_free_freelist_hook+0x10b/0x1e0 [ 63.621480][ T5031] ? __phys_addr+0xc6/0x140 [ 63.626109][ T5031] ? security_file_permission+0xdc/0x100 [ 63.631853][ T5031] ? splice_from_pipe+0x130/0x130 [ 63.637174][ T5031] direct_splice_actor+0x118/0x180 [ 63.642408][ T5031] splice_direct_to_actor+0x347/0xa30 [ 63.647974][ T5031] ? folio_flags.constprop.0+0x150/0x150 [ 63.653629][ T5031] ? vfs_splice_read+0x3b0/0x3b0 [ 63.658607][ T5031] ? bpf_lsm_file_permission+0x9/0x10 [ 63.664001][ T5031] ? security_file_permission+0x94/0x100 [ 63.669649][ T5031] do_splice_direct+0x1af/0x280 [ 63.674512][ T5031] ? splice_direct_to_actor+0xa30/0xa30 [ 63.680125][ T5031] ? propagate_umount+0x1af0/0x1af0 [ 63.685355][ T5031] ? bpf_lsm_file_permission+0x9/0x10 [ 63.690846][ T5031] ? security_file_permission+0x94/0x100 [ 63.696595][ T5031] do_sendfile+0xb88/0x1390 [ 63.701201][ T5031] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 63.706583][ T5031] ? ptrace_notify+0xf4/0x130 [ 63.711272][ T5031] ? reacquire_held_locks+0x4b0/0x4b0 [ 63.716756][ T5031] __x64_sys_sendfile64+0x1d6/0x220 [ 63.721974][ T5031] ? __ia32_sys_sendfile+0x220/0x220 [ 63.727282][ T5031] ? lockdep_hardirqs_on+0x7d/0x100 [ 63.732503][ T5031] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.737717][ T5031] ? ptrace_notify+0xf4/0x130 [ 63.742406][ T5031] do_syscall_64+0x38/0xb0 [ 63.746840][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.752839][ T5031] RIP: 0033:0x7f8560116469 [ 63.757346][ T5031] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.777424][ T5031] RSP: 002b:00007ffdac7a44f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 63.785961][ T5031] RAX: ffffffffffffffda RBX: 00007ffdac7a46c8 RCX: 00007f8560116469 [ 63.793964][ T5031] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 63.801950][ T5031] RBP: 00007f8560189610 R08: 00007ffdac7a46c8 R09: 00007ffdac7a46c8 [ 63.809939][ T5031] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 63.817915][ T5031] R13: 00007ffdac7a46b8 R14: 0000000000000001 R15: 0000000000000001 [ 63.826037][ T5031] [ 63.829248][ T5031] Kernel Offset: disabled [ 63.833734][ T5031] Rebooting in 86400 seconds..