./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor133364510 <...> Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. execve("./syz-executor133364510", ["./syz-executor133364510"], 0x7ffc833a9a50 /* 10 vars */) = 0 brk(NULL) = 0x555557280000 brk(0x555557280d00) = 0x555557280d00 arch_prctl(ARCH_SET_FS, 0x555557280380) = 0 set_tid_address(0x555557280650) = 5042 set_robust_list(0x555557280660, 24) = 0 rseq(0x555557280ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor133364510", 4096) = 27 getrandom("\x0b\xd8\xc4\x63\x1b\xcd\xe2\xbd", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557280d00 brk(0x5555572a1d00) = 0x5555572a1d00 brk(0x5555572a2000) = 0x5555572a2000 mprotect(0x7f6b111c3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 16776960 mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0) = 0x20000000 openat(AT_FDCWD, 0x20000080, O_RDONLY|O_NONBLOCK|O_DSYNC|O_DIRECT|O_NOFOLLOW|O_NOATIME|0x8) = 4 socket(AF_INET6, SOCK_DGRAM, IPPROTO_L2TP) = 5 bind(5, 0x20000000, 32) = 0 connect(5, 0x20000040, 32) = 0 [ 98.279405][ T28] audit: type=1804 audit(1694016954.923:2): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor133" name="/root/cgroup.controllers" dev="sda1" ino=1927 res=1 errno=0 [ 98.293731][ T5042] ------------[ cut here ]------------ [ 98.306948][ T5042] WARNING: CPU: 1 PID: 5042 at net/ipv6/ip6_output.c:1800 __ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.317664][ T5042] Modules linked in: [ 98.321643][ T5042] CPU: 1 PID: 5042 Comm: syz-executor133 Not tainted 6.5.0-syzkaller-11938-g65d6e954e378 #0 [ 98.331801][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 98.342050][ T5042] RIP: 0010:__ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.348667][ T5042] Code: db f6 ff ff e8 09 d5 97 f8 49 8d 44 24 ff 48 89 44 24 60 49 8d 6c 24 07 e9 c2 f6 ff ff 4c 8b b4 24 90 01 00 00 e8 e8 d4 97 f8 <0f> 0b 48 8b 44 24 10 45 89 f4 48 8d 98 74 02 00 00 e8 d2 d4 97 f8 [ 98.368778][ T5042] RSP: 0018:ffffc90003a1f3b8 EFLAGS: 00010293 [ 98.375030][ T5042] RAX: 0000000000000000 RBX: 0000000000001004 RCX: 0000000000000000 [ 98.383077][ T5042] RDX: ffff88801fe70000 RSI: ffffffff88efcf18 RDI: 0000000000000006 [ 98.391465][ T5042] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001004 [ 98.399510][ T5042] R10: 0000000000001000 R11: 0000000000000000 R12: 0000000000000001 [ 98.407891][ T5042] R13: dffffc0000000000 R14: 0000000000001004 R15: ffff888019f31000 [ 98.415907][ T5042] FS: 0000555557280380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 98.424922][ T5042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.431527][ T5042] CR2: 000000000045ad50 CR3: 0000000072666000 CR4: 00000000003506e0 [ 98.439629][ T5042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.447847][ T5042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.455868][ T5042] Call Trace: [ 98.459197][ T5042] [ 98.462135][ T5042] ? show_regs+0x8f/0xa0 [ 98.466448][ T5042] ? __warn+0xe6/0x380 [ 98.470563][ T5042] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.476515][ T5042] ? report_bug+0x3bc/0x580 [ 98.481158][ T5042] ? handle_bug+0x3c/0x70 [ 98.485672][ T5042] ? exc_invalid_op+0x17/0x40 [ 98.490566][ T5042] ? asm_exc_invalid_op+0x1a/0x20 [ 98.495892][ T5042] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.501940][ T5042] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.507963][ T5042] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.514050][ T5042] ? xfrm_expand_policies.constprop.0+0x6b0/0x6b0 [ 98.520669][ T5042] ? ip_frag_init+0x320/0x320 [ 98.525441][ T5042] ? ip6_dst_lookup+0x60/0x60 [ 98.530252][ T5042] ? rcu_is_watching+0x12/0xb0 [ 98.535112][ T5042] ip6_append_data+0x1e6/0x510 [ 98.539926][ T5042] ? ip_frag_init+0x320/0x320 [ 98.544703][ T5042] l2tp_ip6_sendmsg+0xdf9/0x1cc0 [ 98.549691][ T5042] ? l2tp_ip6_open+0x210/0x210 [ 98.555091][ T5042] ? do_syscall_64+0x38/0xb0 [ 98.559733][ T5042] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 98.566237][ T5042] ? kasan_save_stack+0x43/0x50 [ 98.571234][ T5042] ? kasan_save_stack+0x33/0x50 [ 98.577225][ T5042] ? kasan_set_track+0x25/0x30 [ 98.582062][ T5042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.588268][ T5042] ? inet_sendmsg+0x9d/0xe0 [ 98.592828][ T5042] inet_sendmsg+0x9d/0xe0 [ 98.597282][ T5042] ? inet_send_prepare+0x540/0x540 [ 98.602456][ T5042] sock_sendmsg+0xd9/0x180 [ 98.607071][ T5042] splice_to_socket+0xade/0x1010 [ 98.612151][ T5042] ? splice_from_pipe+0x130/0x130 [ 98.617334][ T5042] ? __phys_addr+0xc6/0x140 [ 98.621907][ T5042] ? security_file_permission+0xdc/0x100 [ 98.627647][ T5042] ? splice_from_pipe+0x130/0x130 [ 98.632815][ T5042] direct_splice_actor+0x118/0x180 [ 98.638002][ T5042] splice_direct_to_actor+0x347/0xa30 [ 98.643584][ T5042] ? folio_flags.constprop.0+0x150/0x150 [ 98.649357][ T5042] ? vfs_splice_read+0x3b0/0x3b0 [ 98.654356][ T5042] ? bpf_lsm_file_permission+0x9/0x10 [ 98.659774][ T5042] ? security_file_permission+0x94/0x100 [ 98.665531][ T5042] do_splice_direct+0x1af/0x280 [ 98.670425][ T5042] ? splice_direct_to_actor+0xa30/0xa30 [ 98.676042][ T5042] ? propagate_umount+0x1af0/0x1af0 [ 98.681285][ T5042] ? bpf_lsm_file_permission+0x9/0x10 [ 98.686734][ T5042] ? security_file_permission+0x94/0x100 [ 98.692439][ T5042] do_sendfile+0xb88/0x1390 [ 98.697007][ T5042] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 98.702335][ T5042] ? lock_release+0x4bf/0x680 [ 98.707086][ T5042] ? ptrace_notify+0xf4/0x130 [ 98.711803][ T5042] ? reacquire_held_locks+0x4b0/0x4b0 [ 98.717362][ T5042] __x64_sys_sendfile64+0x1d6/0x220 [ 98.722622][ T5042] ? rcu_is_watching+0x12/0xb0 [ 98.727466][ T5042] ? __ia32_sys_sendfile+0x220/0x220 [ 98.732798][ T5042] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.738140][ T5042] ? ptrace_notify+0xf4/0x130 [ 98.742873][ T5042] do_syscall_64+0x38/0xb0 [ 98.747372][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 98.753343][ T5042] RIP: 0033:0x7f6b11150469 [ 98.757802][ T5042] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.777501][ T5042] RSP: 002b:00007fffd14e71a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 98.785976][ T5042] RAX: ffffffffffffffda RBX: 00007fffd14e7378 RCX: 00007f6b11150469 [ 98.794024][ T5042] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 98.802051][ T5042] RBP: 00007f6b111c3610 R08: 00007fffd14e7378 R09: 00007fffd14e7378 [ 98.810119][ T5042] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 98.818150][ T5042] R13: 00007fffd14e7368 R14: 0000000000000001 R15: 0000000000000001 [ 98.826207][ T5042] [ 98.829262][ T5042] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.836551][ T5042] CPU: 1 PID: 5042 Comm: syz-executor133 Not tainted 6.5.0-syzkaller-11938-g65d6e954e378 #0 [ 98.847000][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 98.857162][ T5042] Call Trace: [ 98.860468][ T5042] [ 98.863413][ T5042] dump_stack_lvl+0xd9/0x1b0 [ 98.868131][ T5042] panic+0x6a6/0x750 [ 98.872077][ T5042] ? panic_smp_self_stop+0xa0/0xa0 [ 98.877229][ T5042] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.883156][ T5042] check_panic_on_warn+0xab/0xb0 [ 98.888216][ T5042] __warn+0xf2/0x380 [ 98.892154][ T5042] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.898105][ T5042] report_bug+0x3bc/0x580 [ 98.902523][ T5042] handle_bug+0x3c/0x70 [ 98.906726][ T5042] exc_invalid_op+0x17/0x40 [ 98.911277][ T5042] asm_exc_invalid_op+0x1a/0x20 [ 98.916255][ T5042] RIP: 0010:__ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.922792][ T5042] Code: db f6 ff ff e8 09 d5 97 f8 49 8d 44 24 ff 48 89 44 24 60 49 8d 6c 24 07 e9 c2 f6 ff ff 4c 8b b4 24 90 01 00 00 e8 e8 d4 97 f8 <0f> 0b 48 8b 44 24 10 45 89 f4 48 8d 98 74 02 00 00 e8 d2 d4 97 f8 [ 98.942513][ T5042] RSP: 0018:ffffc90003a1f3b8 EFLAGS: 00010293 [ 98.948700][ T5042] RAX: 0000000000000000 RBX: 0000000000001004 RCX: 0000000000000000 [ 98.956693][ T5042] RDX: ffff88801fe70000 RSI: ffffffff88efcf18 RDI: 0000000000000006 [ 98.965553][ T5042] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001004 [ 98.973630][ T5042] R10: 0000000000001000 R11: 0000000000000000 R12: 0000000000000001 [ 98.981709][ T5042] R13: dffffc0000000000 R14: 0000000000001004 R15: ffff888019f31000 [ 98.989709][ T5042] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 98.995640][ T5042] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 99.001570][ T5042] ? xfrm_expand_policies.constprop.0+0x6b0/0x6b0 [ 99.008108][ T5042] ? ip_frag_init+0x320/0x320 [ 99.012832][ T5042] ? ip6_dst_lookup+0x60/0x60 [ 99.017535][ T5042] ? rcu_is_watching+0x12/0xb0 [ 99.022352][ T5042] ip6_append_data+0x1e6/0x510 [ 99.027149][ T5042] ? ip_frag_init+0x320/0x320 [ 99.031866][ T5042] l2tp_ip6_sendmsg+0xdf9/0x1cc0 [ 99.036840][ T5042] ? l2tp_ip6_open+0x210/0x210 [ 99.041714][ T5042] ? do_syscall_64+0x38/0xb0 [ 99.046339][ T5042] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 99.052452][ T5042] ? kasan_save_stack+0x43/0x50 [ 99.057431][ T5042] ? kasan_save_stack+0x33/0x50 [ 99.062350][ T5042] ? kasan_set_track+0x25/0x30 [ 99.067186][ T5042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.073139][ T5042] ? inet_sendmsg+0x9d/0xe0 [ 99.077709][ T5042] inet_sendmsg+0x9d/0xe0 [ 99.082190][ T5042] ? inet_send_prepare+0x540/0x540 [ 99.087339][ T5042] sock_sendmsg+0xd9/0x180 [ 99.091787][ T5042] splice_to_socket+0xade/0x1010 [ 99.096776][ T5042] ? splice_from_pipe+0x130/0x130 [ 99.102793][ T5042] ? __phys_addr+0xc6/0x140 [ 99.107342][ T5042] ? security_file_permission+0xdc/0x100 [ 99.113102][ T5042] ? splice_from_pipe+0x130/0x130 [ 99.118202][ T5042] direct_splice_actor+0x118/0x180 [ 99.123367][ T5042] splice_direct_to_actor+0x347/0xa30 [ 99.128778][ T5042] ? folio_flags.constprop.0+0x150/0x150 [ 99.134460][ T5042] ? vfs_splice_read+0x3b0/0x3b0 [ 99.139439][ T5042] ? bpf_lsm_file_permission+0x9/0x10 [ 99.144958][ T5042] ? security_file_permission+0x94/0x100 [ 99.151327][ T5042] do_splice_direct+0x1af/0x280 [ 99.156253][ T5042] ? splice_direct_to_actor+0xa30/0xa30 [ 99.161844][ T5042] ? propagate_umount+0x1af0/0x1af0 [ 99.167257][ T5042] ? bpf_lsm_file_permission+0x9/0x10 [ 99.172701][ T5042] ? security_file_permission+0x94/0x100 [ 99.178390][ T5042] do_sendfile+0xb88/0x1390 [ 99.182935][ T5042] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 99.188248][ T5042] ? lock_release+0x4bf/0x680 [ 99.192961][ T5042] ? ptrace_notify+0xf4/0x130 [ 99.197665][ T5042] ? reacquire_held_locks+0x4b0/0x4b0 [ 99.203085][ T5042] __x64_sys_sendfile64+0x1d6/0x220 [ 99.208404][ T5042] ? rcu_is_watching+0x12/0xb0 [ 99.213194][ T5042] ? __ia32_sys_sendfile+0x220/0x220 [ 99.218532][ T5042] ? _raw_spin_unlock_irq+0x2e/0x50 [ 99.223863][ T5042] ? ptrace_notify+0xf4/0x130 [ 99.228567][ T5042] do_syscall_64+0x38/0xb0 [ 99.233026][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 99.239024][ T5042] RIP: 0033:0x7f6b11150469 [ 99.243459][ T5042] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 99.263200][ T5042] RSP: 002b:00007fffd14e71a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 99.271635][ T5042] RAX: ffffffffffffffda RBX: 00007fffd14e7378 RCX: 00007f6b11150469 [ 99.279631][ T5042] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 99.287645][ T5042] RBP: 00007f6b111c3610 R08: 00007fffd14e7378 R09: 00007fffd14e7378 [ 99.295643][ T5042] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 99.303740][ T5042] R13: 00007fffd14e7368 R14: 0000000000000001 R15: 0000000000000001 [ 99.311754][ T5042] [ 99.315056][ T5042] Kernel Offset: disabled [ 99.319580][ T5042] Rebooting in 86400 seconds..