./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1913060926 <...> Warning: Permanently added '10.128.10.19' (ECDSA) to the list of known hosts. execve("./syz-executor1913060926", ["./syz-executor1913060926"], 0x7ffd79e99590 /* 10 vars */) = 0 brk(NULL) = 0x555556f67000 brk(0x555556f67c40) = 0x555556f67c40 arch_prctl(ARCH_SET_FS, 0x555556f67300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1913060926", 4096) = 28 brk(0x555556f88c40) = 0x555556f88c40 brk(0x555556f89000) = 0x555556f89000 mprotect(0x7f923b9a9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f675d0) = 3489 ./strace-static-x86_64: Process 3489 attached [pid 3489] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3489] setsid() = 1 [pid 3489] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3489] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3489] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3489] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3489] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3489] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3489] unshare(CLONE_NEWNS) = 0 [pid 3489] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3489] unshare(CLONE_NEWIPC) = 0 [pid 3489] unshare(CLONE_NEWCGROUP) = 0 [pid 3489] unshare(CLONE_NEWUTS) = 0 [pid 3489] unshare(CLONE_SYSVSEM) = 0 [pid 3489] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3489] write(3, "16777216", 8) = 8 [pid 3489] close(3) = 0 [pid 3489] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3489] write(3, "536870912", 9) = 9 [pid 3489] close(3) = 0 [pid 3489] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3489] write(3, "1024", 4) = 4 [pid 3489] close(3) = 0 [pid 3489] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3489] write(3, "8192", 4) = 4 [pid 3489] close(3) = 0 [pid 3489] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3489] write(3, "1024", 4) = 4 [pid 3489] close(3) = 0 [pid 3489] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3489] write(3, "1024", 4) = 4 [pid 3489] close(3) = 0 [pid 3489] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3489] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3489] close(3) = 0 [pid 3489] getpid() = 1 [pid 3489] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 121.514238][ T3514] dump_stack_lvl+0x1c8/0x256 [ 121.519048][ T3514] dump_stack+0x1a/0x1c [ 121.523342][ T3514] panic+0x4d3/0xc69 [ 121.527347][ T3514] ? add_taint+0x104/0x1a0 [ 121.531886][ T3514] kmsan_report+0x2cc/0x2d0 [ 121.536543][ T3514] ? init_conntrack+0xc05/0x1820 [ 121.541604][ T3514] ? nf_hook_slow+0xed/0x3b0 [ 121.546310][ T3514] ? __ip6_local_out+0x5fe/0x690 [ 121.551386][ T3514] ? ip6_local_out+0x49/0x140 [ 121.556181][ T3514] ? ip6_push_pending_frames+0x1f4/0x550 [ 121.561927][ T3514] ? rawv6_push_pending_frames+0xb12/0xb90 [ 121.567887][ T3514] ? rawv6_sendmsg+0x2ba7/0x2ea0 [ 121.572969][ T3514] ? __msan_warning+0x92/0x110 [ 121.577862][ T3514] ? ipv6_find_tlv+0x398/0x410 [ 121.582718][ T3514] ? ip6_find_1stfragopt+0x287/0x520 [ 121.588216][ T3514] ? ip6_fragment+0x1d7/0x3dc0 [ 121.593146][ T3514] ? ip6_finish_output+0xd0e/0x1230 [ 121.598490][ T3514] ? ip6_output+0x396/0x640 [ 121.603136][ T3514] ? ip6_local_out+0xe5/0x140 [ 121.607904][ T3514] ? ip6_push_pending_frames+0x1f4/0x550 [ 121.613700][ T3514] ? rawv6_push_pending_frames+0xb12/0xb90 [ 121.619645][ T3514] ? rawv6_sendmsg+0x2ba7/0x2ea0 [ 121.624683][ T3514] ? inet_sendmsg+0x101/0x180 [ 121.629497][ T3514] ? sock_write_iter+0x495/0x5e0 [ 121.634515][ T3514] ? aio_write+0x63a/0x950 [ 121.639016][ T3514] ? io_submit_one+0x1a36/0x3ad0 [ 121.644067][ T3514] ? __se_sys_io_submit+0x293/0x770 [ 121.649363][ T3514] ? __x64_sys_io_submit+0x92/0xd0 [ 121.654574][ T3514] ? do_syscall_64+0x3d/0xb0 [ 121.659250][ T3514] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.665489][ T3514] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 121.671395][ T3514] ? get_random_u32+0xea/0x530 [ 121.676258][ T3514] ? filter_irq_stacks+0x5c/0x1a0 [ 121.681379][ T3514] ? __stack_depot_save+0x21/0x4b0 [ 121.686659][ T3514] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 121.693087][ T3514] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 121.699068][ T3514] __msan_warning+0x92/0x110 [ 121.703803][ T3514] ipv6_find_tlv+0x398/0x410 [ 121.708521][ T3514] ip6_find_1stfragopt+0x287/0x520 [ 121.713752][ T3514] ip6_fragment+0x1d7/0x3dc0 [ 121.718484][ T3514] ? ip6_make_skb+0xa30/0xa30 [ 121.723317][ T3514] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 121.729313][ T3514] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 121.735249][ T3514] ip6_finish_output+0xd0e/0x1230 [ 121.740434][ T3514] ip6_output+0x396/0x640 [ 121.744892][ T3514] ? ip6_output+0x640/0x640 [ 121.749532][ T3514] ? ac6_seq_show+0x1b0/0x1b0 [ 121.754297][ T3514] ip6_local_out+0xe5/0x140 [ 121.758907][ T3514] ip6_push_pending_frames+0x1f4/0x550 [ 121.764548][ T3514] rawv6_push_pending_frames+0xb12/0xb90 [ 121.770342][ T3514] ? rawv6_send_hdrinc+0x2070/0x2070 [ 121.775796][ T3514] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 121.781773][ T3514] rawv6_sendmsg+0x2ba7/0x2ea0 [ 121.786665][ T3514] ? __stack_depot_save+0x21/0x4b0 [ 121.791968][ T3514] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 121.797930][ T3514] ? compat_rawv6_ioctl+0xb0/0xb0 [ 121.803062][ T3514] ? compat_rawv6_ioctl+0xb0/0xb0 [ 121.808236][ T3514] inet_sendmsg+0x101/0x180 [ 121.812885][ T3514] ? inet_send_prepare+0x5b0/0x5b0 [ 121.818120][ T3514] sock_write_iter+0x495/0x5e0 [ 121.823005][ T3514] ? sock_read_iter+0x560/0x560 [ 121.827948][ T3514] aio_write+0x63a/0x950 [ 121.832341][ T3514] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 121.838300][ T3514] io_submit_one+0x1a36/0x3ad0 [ 121.843230][ T3514] ? preempt_count_sub+0x7d/0x280 [ 121.848405][ T3514] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 121.854371][ T3514] __se_sys_io_submit+0x293/0x770 [ 121.859538][ T3514] __x64_sys_io_submit+0x92/0xd0 [ 121.864618][ T3514] do_syscall_64+0x3d/0xb0 [ 121.869148][ T3514] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.875170][ T3514] RIP: 0033:0x7f923b935129 [ 121.879669][ T3514] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 121.899382][ T3514] RSP: 002b:00007ffdb5738048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 121.907921][ T3514] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f923b935129 [ 121.915975][ T3514] RDX: 0000000020000540 RSI: 00000000000006c2 RDI: 00007f923b8e8000 [ 121.924033][ T3514] RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d [ 121.932105][ T3514] R10: 000000000000000d R11: 0000000000000246 R12: 00007ffdb5738060 [ 121.940181][ T3514] R13: 00000000000f4240 R14: 0000000000000000 R15: 0000000000000000 [ 121.948284][ T3514] [ 121.951542][ T3514] Kernel Offset: disabled [ 121.955918][ T3514] Rebooting in 86400 seconds..