./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor273356745 <...> Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. execve("./syz-executor273356745", ["./syz-executor273356745"], 0x7ffeddf8a2b0 /* 10 vars */) = 0 brk(NULL) = 0x555592580000 brk(0x555592580d00) = 0x555592580d00 arch_prctl(ARCH_SET_FS, 0x555592580380) = 0 set_tid_address(0x555592580650) = 5828 set_robust_list(0x555592580660, 24) = 0 rseq(0x555592580ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor273356745", 4096) = 27 getrandom("\x8c\xce\xea\xe0\xc0\xff\x29\x9c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555592580d00 brk(0x5555925a1d00) = 0x5555925a1d00 brk(0x5555925a2000) = 0x5555925a2000 mprotect(0x7f0b3ce16000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5829 attached , child_tidptr=0x555592580650) = 5829 [pid 5829] set_robust_list(0x555592580660, 24) = 0 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] getppid() = 0 [pid 5829] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5829] unshare(CLONE_NEWNS) = 0 [pid 5829] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5829] unshare(CLONE_NEWIPC) = 0 [pid 5829] unshare(CLONE_NEWCGROUP) = 0 [pid 5829] unshare(CLONE_NEWUTS) = 0 [pid 5829] unshare(CLONE_SYSVSEM) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "16777216", 8) = 8 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "536870912", 9) = 9 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "8192", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5829] close(3) = 0 [pid 5829] getpid() = 1 [pid 5829] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 12]) = 0 [pid 5829] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x58\x00\x00\x00\x24\x00\x0b\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\xf1\xff\x08\x00\x01\x00\x73\x66\x62\x00\x2c\x00\x02\x00\x28\x00\x01\x00\xa3\x01\x00\x00\x5c\x65\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\xff\xff\xff\x7f\xff\xff\xff\x7f\x80\x00\x00\x00\xff\xff\xff\xff\x01\x00\x00\x00", iov_len=88}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5829] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=NULL, iov_len=0}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5829] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x44\x00\x00\x00\x2c\x00\x27\x0d\x2d\xbd\x70\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x08\x00\xe0\xff\x09\x00\x01\x00\x66\x6c\x6f\x77\x00\x00\x00\x00\x14\x00\x02\x00\x08\x00\x04\x00\xe5\x24\x00\x00\x08\x00\x01\x00\x64\x58\x01\x00", iov_len=68}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL) = -1 EINVAL (Invalid argument) [pid 5829] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5829] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=32}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_NOSIGNAL}, MSG_DONTROUTE) = -1 EBADF (Bad file descriptor) [pid 5829] sendmmsg(4, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x58\x00\x00\x00\x24\x00\x0b\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\xf1\xff\x08\x00\x01\x00\x73\x66\x62\x00\x2c\x00\x02\x00\x28\x00\x01\x00\xa3\x01\x00\x00\x5c\x65\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\xff\xff\xff\x7f\xff\xff\xff\x7f\x80\x00\x00\x00\xff\xff\xff\xff\x01\x00\x00\x00", iov_len=88}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, msg_len=88}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x44\x00\x00\x00\x2c\x00\x27\x0d\x2d\xbd\x70\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x08\x00\xe0\xff\x09\x00\x01\x00\x66\x6c\x6f\x77\x00\x00\x00\x00\x14\x00\x02\x00\x08\x00\x04\x00\xe5\x24\x00\x00\x08\x00\x01\x00\x20\x00\x00\x00", iov_len=68}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, msg_len=68}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x44\x00\x00\x00\x2c\x00\x27\x0d\x2d\xbd\x70\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x08\x00\xe0\xff\x09\x00\x01\x00\x66\x6c\x6f\x77\x00\x00\x00\x00\x14\x00\x02\x00\x08\x00\x04\x00\xe5\x24\x00\x00\x08\x00\x01\x00\x20\x00\x00\x00", iov_len=68}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, msg_len=68}, {msg_hdr={msg_name=0xd27002c00000044, msg_namelen=7388461, msg_iov=0x100000000, msg_iovlen=14, msg_control=0x10009ffe00008, msg_controllen=2003790950, msg_flags=MSG_DONTROUTE|MSG_PROBE|MSG_SENDPAGE_NOTLAST}}, {msg_hdr={msg_name=0x20, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name={sa_family=AF_IUCV, sa_data="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"}, msg_namelen=32, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=32}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_NOSIGNAL}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=0xc, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, {msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}, ...], 159, 0) = 3 [pid 5829] exit_group(1) = ? [ 98.429008][ T2990] ------------[ cut here ]------------ [ 98.434646][ T2990] UBSAN: shift-out-of-bounds in net/sched/cls_flow.c:329:23 [ 98.442030][ T2990] shift exponent 9445 is too large for 32-bit type 'u32' (aka 'unsigned int') [ 98.450946][ T2990] CPU: 1 UID: 0 PID: 2990 Comm: kworker/u8:6 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 98.461814][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.471970][ T2990] Workqueue: ipv6_addrconf addrconf_dad_work [ 98.478012][ T2990] Call Trace: [ 98.481304][ T2990] [ 98.484249][ T2990] dump_stack_lvl+0x241/0x360 [ 98.488959][ T2990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.494181][ T2990] ? __pfx__printk+0x10/0x10 [ 98.498789][ T2990] ? lockdep_unlock+0x16a/0x300 [ 98.503660][ T2990] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 98.510111][ T2990] ? rcu_read_lock_bh_held+0x7e/0x120 [ 98.515608][ T2990] flow_classify+0x24d5/0x25b0 [ 98.520439][ T2990] ? __pfx_flow_classify+0x10/0x10 [ 98.525562][ T2990] ? lockdep_unlock+0x16a/0x300 [ 98.530469][ T2990] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 98.536656][ T2990] tcf_classify+0x420/0x1160 [ 98.541271][ T2990] sfb_enqueue+0x3ad/0x18b0 [ 98.545806][ T2990] ? do_raw_spin_lock+0x14f/0x370 [ 98.550837][ T2990] ? __pfx_sfb_enqueue+0x10/0x10 [ 98.555794][ T2990] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 98.561181][ T2990] dev_qdisc_enqueue+0x4b/0x290 [ 98.566049][ T2990] __dev_queue_xmit+0xf0e/0x3f50 [ 98.571024][ T2990] ? __dev_queue_xmit+0x2f4/0x3f50 [ 98.576156][ T2990] ? __pfx___dev_queue_xmit+0x10/0x10 [ 98.581580][ T2990] ? mark_lock+0x9a/0x360 [ 98.585941][ T2990] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.591946][ T2990] ? ip_finish_output2+0xa14/0x1390 [ 98.597166][ T2990] ? ip_finish_output2+0x45f/0x1390 [ 98.602384][ T2990] ip_finish_output2+0xd41/0x1390 [ 98.607436][ T2990] ? ip_finish_output2+0x45f/0x1390 [ 98.612678][ T2990] ? __pfx_ip_finish_output+0x10/0x10 [ 98.618065][ T2990] ? __pfx_ip_finish_output2+0x10/0x10 [ 98.623554][ T2990] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 98.628435][ T2990] ? __ip_finish_output+0x349/0x400 [ 98.633658][ T2990] iptunnel_xmit+0x55d/0x9b0 [ 98.638296][ T2990] udp_tunnel_xmit_skb+0x262/0x3b0 [ 98.643444][ T2990] geneve_xmit+0x21dc/0x2d00 [ 98.648080][ T2990] ? validate_xmit_xfrm+0xc1/0x1270 [ 98.653302][ T2990] ? geneve_xmit+0x13a/0x2d00 [ 98.658008][ T2990] ? __pfx_geneve_xmit+0x10/0x10 [ 98.662973][ T2990] ? netif_skb_features+0x8b6/0xc90 [ 98.668197][ T2990] ? validate_xmit_skb+0x9b8/0xff0 [ 98.673342][ T2990] dev_hard_start_xmit+0x27a/0x7d0 [ 98.678501][ T2990] __dev_queue_xmit+0x1b73/0x3f50 [ 98.683563][ T2990] ? __dev_queue_xmit+0x2f4/0x3f50 [ 98.688697][ T2990] ? __pfx___dev_queue_xmit+0x10/0x10 [ 98.694091][ T2990] ? neigh_resolve_output+0x450/0x740 [ 98.699482][ T2990] ? read_seqbegin+0x157/0x2b0 [ 98.704261][ T2990] ? lockdep_hardirqs_on+0x99/0x150 [ 98.709493][ T2990] ? read_seqbegin+0x208/0x2b0 [ 98.714281][ T2990] ? __pfx_read_seqbegin+0x10/0x10 [ 98.719412][ T2990] ? neigh_resolve_output+0x2e5/0x740 [ 98.724799][ T2990] ? eth_header+0x11c/0x1f0 [ 98.729324][ T2990] ? __asan_memcpy+0x40/0x70 [ 98.733939][ T2990] ? eth_header+0x11c/0x1f0 [ 98.738462][ T2990] ? __pfx_eth_header+0x10/0x10 [ 98.743330][ T2990] ? neigh_resolve_output+0x61f/0x740 [ 98.748742][ T2990] ip6_finish_output2+0x12c7/0x17b0 [ 98.753984][ T2990] ? ip6_mtu+0x81/0x3f0 [ 98.758154][ T2990] ? ip6_finish_output2+0x63a/0x17b0 [ 98.763462][ T2990] ? __pfx_ip6_finish_output2+0x10/0x10 [ 98.769039][ T2990] ? ip6_mtu+0x81/0x3f0 [ 98.773211][ T2990] ip6_finish_output+0x41e/0x840 [ 98.778172][ T2990] ndisc_send_skb+0xb30/0x1450 [ 98.782953][ T2990] ? ndisc_send_skb+0x563/0x1450 [ 98.787909][ T2990] ? __pfx_ndisc_send_skb+0x10/0x10 [ 98.793138][ T2990] ? skb_put+0x114/0x1f0 [ 98.797412][ T2990] ? __pfx_ndisc_ns_create+0x10/0x10 [ 98.802750][ T2990] ndisc_send_ns+0xcc/0x160 [ 98.807278][ T2990] ? __pfx_ndisc_send_ns+0x10/0x10 [ 98.812420][ T2990] addrconf_dad_work+0xb45/0x16f0 [ 98.817484][ T2990] ? __pfx_addrconf_dad_work+0x10/0x10 [ 98.822980][ T2990] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.829337][ T2990] ? process_scheduled_works+0x976/0x1840 [ 98.835075][ T2990] process_scheduled_works+0xa66/0x1840 [ 98.840679][ T2990] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.846763][ T2990] ? assign_work+0x364/0x3d0 [ 98.851369][ T2990] worker_thread+0x870/0xd30 [ 98.856002][ T2990] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 98.861940][ T2990] ? __kthread_parkme+0x169/0x1d0 [ 98.866979][ T2990] ? __pfx_worker_thread+0x10/0x10 [ 98.872103][ T2990] kthread+0x2f0/0x390 [ 98.876188][ T2990] ? __pfx_worker_thread+0x10/0x10 [ 98.881319][ T2990] ? __pfx_kthread+0x10/0x10 [ 98.885928][ T2990] ret_from_fork+0x4b/0x80 [ 98.890356][ T2990] ? __pfx_kthread+0x10/0x10 [ 98.894967][ T2990] ret_from_fork_asm+0x1a/0x30 [ 98.899759][ T2990] [ 98.903338][ T2990] ---[ end trace ]--- [ 98.907408][ T2990] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 98.914628][ T2990] CPU: 1 UID: 0 PID: 2990 Comm: kworker/u8:6 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 [ 98.925482][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.935546][ T2990] Workqueue: ipv6_addrconf addrconf_dad_work [ 98.941558][ T2990] Call Trace: [ 98.944872][ T2990] [ 98.947812][ T2990] dump_stack_lvl+0x241/0x360 [ 98.952510][ T2990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.957738][ T2990] ? __pfx__printk+0x10/0x10 [ 98.962364][ T2990] ? lockdep_hardirqs_on+0x99/0x150 [ 98.967592][ T2990] ? vscnprintf+0x5d/0x90 [ 98.971938][ T2990] panic+0x349/0x880 [ 98.975861][ T2990] ? check_panic_on_warn+0x21/0xb0 [ 98.981031][ T2990] ? __pfx_panic+0x10/0x10 [ 98.985484][ T2990] ? _printk+0xd5/0x120 [ 98.989659][ T2990] ? __pfx__printk+0x10/0x10 [ 98.994266][ T2990] ? lockdep_unlock+0x16a/0x300 [ 98.999136][ T2990] check_panic_on_warn+0x86/0xb0 [ 99.004090][ T2990] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 99.010612][ T2990] ? rcu_read_lock_bh_held+0x7e/0x120 [ 99.016013][ T2990] flow_classify+0x24d5/0x25b0 [ 99.020818][ T2990] ? __pfx_flow_classify+0x10/0x10 [ 99.025934][ T2990] ? lockdep_unlock+0x16a/0x300 [ 99.030813][ T2990] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 99.036986][ T2990] tcf_classify+0x420/0x1160 [ 99.041595][ T2990] sfb_enqueue+0x3ad/0x18b0 [ 99.046127][ T2990] ? do_raw_spin_lock+0x14f/0x370 [ 99.051162][ T2990] ? __pfx_sfb_enqueue+0x10/0x10 [ 99.056112][ T2990] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.061515][ T2990] dev_qdisc_enqueue+0x4b/0x290 [ 99.066388][ T2990] __dev_queue_xmit+0xf0e/0x3f50 [ 99.071354][ T2990] ? __dev_queue_xmit+0x2f4/0x3f50 [ 99.076493][ T2990] ? __pfx___dev_queue_xmit+0x10/0x10 [ 99.081904][ T2990] ? mark_lock+0x9a/0x360 [ 99.086256][ T2990] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.092273][ T2990] ? ip_finish_output2+0xa14/0x1390 [ 99.097486][ T2990] ? ip_finish_output2+0x45f/0x1390 [ 99.102696][ T2990] ip_finish_output2+0xd41/0x1390 [ 99.107737][ T2990] ? ip_finish_output2+0x45f/0x1390 [ 99.112943][ T2990] ? __pfx_ip_finish_output+0x10/0x10 [ 99.118325][ T2990] ? __pfx_ip_finish_output2+0x10/0x10 [ 99.123800][ T2990] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 99.128659][ T2990] ? __ip_finish_output+0x349/0x400 [ 99.133869][ T2990] iptunnel_xmit+0x55d/0x9b0 [ 99.138499][ T2990] udp_tunnel_xmit_skb+0x262/0x3b0 [ 99.143645][ T2990] geneve_xmit+0x21dc/0x2d00 [ 99.148279][ T2990] ? validate_xmit_xfrm+0xc1/0x1270 [ 99.153498][ T2990] ? geneve_xmit+0x13a/0x2d00 [ 99.158212][ T2990] ? __pfx_geneve_xmit+0x10/0x10 [ 99.163176][ T2990] ? netif_skb_features+0x8b6/0xc90 [ 99.168478][ T2990] ? validate_xmit_skb+0x9b8/0xff0 [ 99.173610][ T2990] dev_hard_start_xmit+0x27a/0x7d0 [ 99.178752][ T2990] __dev_queue_xmit+0x1b73/0x3f50 [ 99.183803][ T2990] ? __dev_queue_xmit+0x2f4/0x3f50 [ 99.188926][ T2990] ? __pfx___dev_queue_xmit+0x10/0x10 [ 99.194308][ T2990] ? neigh_resolve_output+0x450/0x740 [ 99.199692][ T2990] ? read_seqbegin+0x157/0x2b0 [ 99.204488][ T2990] ? lockdep_hardirqs_on+0x99/0x150 [ 99.209703][ T2990] ? read_seqbegin+0x208/0x2b0 [ 99.214504][ T2990] ? __pfx_read_seqbegin+0x10/0x10 [ 99.219627][ T2990] ? neigh_resolve_output+0x2e5/0x740 [ 99.225034][ T2990] ? eth_header+0x11c/0x1f0 [ 99.229554][ T2990] ? __asan_memcpy+0x40/0x70 [ 99.234155][ T2990] ? eth_header+0x11c/0x1f0 [ 99.238683][ T2990] ? __pfx_eth_header+0x10/0x10 [ 99.243554][ T2990] ? neigh_resolve_output+0x61f/0x740 [ 99.248953][ T2990] ip6_finish_output2+0x12c7/0x17b0 [ 99.254172][ T2990] ? ip6_mtu+0x81/0x3f0 [ 99.258336][ T2990] ? ip6_finish_output2+0x63a/0x17b0 [ 99.263654][ T2990] ? __pfx_ip6_finish_output2+0x10/0x10 [ 99.269220][ T2990] ? ip6_mtu+0x81/0x3f0 [ 99.273397][ T2990] ip6_finish_output+0x41e/0x840 [ 99.278351][ T2990] ndisc_send_skb+0xb30/0x1450 [ 99.283134][ T2990] ? ndisc_send_skb+0x563/0x1450 [ 99.288094][ T2990] ? __pfx_ndisc_send_skb+0x10/0x10 [ 99.293310][ T2990] ? skb_put+0x114/0x1f0 [ 99.297577][ T2990] ? __pfx_ndisc_ns_create+0x10/0x10 [ 99.302887][ T2990] ndisc_send_ns+0xcc/0x160 [ 99.307407][ T2990] ? __pfx_ndisc_send_ns+0x10/0x10 [ 99.312559][ T2990] addrconf_dad_work+0xb45/0x16f0 [ 99.317617][ T2990] ? __pfx_addrconf_dad_work+0x10/0x10 [ 99.323095][ T2990] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.329449][ T2990] ? process_scheduled_works+0x976/0x1840 [ 99.335177][ T2990] process_scheduled_works+0xa66/0x1840 [ 99.340757][ T2990] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.346754][ T2990] ? assign_work+0x364/0x3d0 [ 99.351367][ T2990] worker_thread+0x870/0xd30 [ 99.355975][ T2990] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 99.361887][ T2990] ? __kthread_parkme+0x169/0x1d0 [ 99.366926][ T2990] ? __pfx_worker_thread+0x10/0x10 [ 99.372046][ T2990] kthread+0x2f0/0x390 [ 99.376138][ T2990] ? __pfx_worker_thread+0x10/0x10 [ 99.381263][ T2990] ? __pfx_kthread+0x10/0x10 [ 99.385871][ T2990] ret_from_fork+0x4b/0x80 [ 99.390302][ T2990] ? __pfx_kthread+0x10/0x10 [ 99.394914][ T2990] ret_from_fork_asm+0x1a/0x30 [ 99.399713][ T2990] [ 99.403051][ T2990] Kernel Offset: disabled [ 99.407428][ T2990] Rebooting in 86400 seconds..