ci-upstream-net-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-net-kasan-gce/syz-executor1005190504 <...> Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. execve("ci-upstream-net-kasan-gce/syz-executor1005190504", ["ci-upstream-net-kasan-gce/syz-executor1005190504"], 0x7fff55d69b00 /* 10 vars */) = 0 brk(NULL) = 0x55555d674000 brk(0x55555d674d80) = 0x55555d674d80 arch_prctl(ARCH_SET_FS, 0x55555d674400) = 0 set_tid_address(0x55555d6746d0) = 5637 set_robust_list(0x55555d6746e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-net-kasan-gce/syz-executor1005190504", 4096) = 54 getrandom("\x80\xe9\x43\xb2\xbc\xa2\x72\xf5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555d674d80 brk(0x55555d695d80) = 0x55555d695d80 brk(0x55555d696000) = 0x55555d696000 mprotect(0x7f8e83605000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5638 attached , child_tidptr=0x55555d6746d0) = 5638 [pid 5638] set_robust_list(0x55555d6746e0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5638] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5638] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5638] getppid() = 0 [pid 5638] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5638] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5638] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5638] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5638] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5638] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5638] unshare(CLONE_NEWNS) = 0 [pid 5638] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5638] unshare(CLONE_NEWIPC) = 0 [pid 5638] unshare(CLONE_NEWCGROUP) = 0 [pid 5638] unshare(CLONE_NEWUTS) = 0 [pid 5638] unshare(CLONE_SYSVSEM) = 0 [pid 5638] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "16777216", 8) = 8 [pid 5638] close(3) = 0 [pid 5638] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "536870912", 9) = 9 [pid 5638] close(3) = 0 [pid 5638] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1024", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "8192", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1024", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1024", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5638] close(3) = 0 [pid 5638] getpid() = 1 [pid 5638] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< {parent_tid=[2]}, 88) = 2 [pid 5675] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5638] rt_sigprocmask(SIG_SETMASK, [] [pid 5675] <... rseq resumed>) = 0 [pid 5638] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5675] set_robust_list(0x7f8e8352f9a0, 24) = 0 [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5638] <... futex resumed>) = 0 [pid 5675] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... socket resumed>) = 3 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = 0 [pid 5675] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL) [pid 5638] <... futex resumed>) = 1 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... socket resumed>) = 4 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] <... futex resumed>) = 0 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... socket resumed>) = 5 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 6 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5638] <... futex resumed>) = 0 [pid 5675] socket(AF_XDP, SOCK_RAW, 0 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... socket resumed>) = 7 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5675] setsockopt(7, SOL_XDP, XDP_UMEM_REG, "\x00\x00\x10\x00\x00\x20\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... setsockopt resumed>) = 0 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = 0 [pid 5638] <... futex resumed>) = 1 [pid 5675] setsockopt(7, SOL_XDP, XDP_TX_RING, [16], 4 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... setsockopt resumed>) = 0 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = 0 [pid 5638] <... futex resumed>) = 1 [pid 5675] setsockopt(7, SOL_XDP, XDP_UMEM_COMPLETION_RING, [16], 4 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... setsockopt resumed>) = 0 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] setsockopt(7, SOL_XDP, XDP_UMEM_FILL_RING, [16], 4) = 0 [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] socketpair(AF_UNIX, SOCK_SEQPACKET, 0 [pid 5638] <... futex resumed>) = 0 [pid 5675] <... socketpair resumed>, [8, 9]) = 0 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5638] <... futex resumed>) = 0 [pid 5675] ioctl(8, SIOCGIFINDEX, {ifr_name="ip6tnl0" [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... ioctl resumed>, ifr_ifindex=9}) = 0 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5638] <... futex resumed>) = 0 [pid 5675] bind(7, {sa_family=AF_XDP, sxdp_flags=XDP_COPY, sxdp_ifindex=if_nametoindex("wlan1"), sxdp_queue_id=0}, 16 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... bind resumed>) = 0 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] mmap(0x200000000000, 4096, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED, 7, 0x80000000 [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... mmap resumed>) = 0x200000000000 [pid 5675] futex(0x7f8e8360bb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5675] futex(0x7f8e8360bb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] <... futex resumed>) = 0 [pid 5638] futex(0x7f8e8360bb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = 0 [pid 5638] <... futex resumed>) = 1 [pid 5675] pselect6(64, [], NULL, [0 1 2 3 4 5 6 7 8 9], NULL, NULL [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5638] futex(0x7f8e8360bb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5638] futex(0x7f8e8360bb7c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8e834ee000 [pid 5638] mprotect(0x7f8e834ef000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5638] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5638] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8e8350e990, parent_tid=0x7f8e8350e990, exit_signal=0, stack=0x7f8e834ee000, stack_size=0x202c0, tls=0x7f8e8350e6c0}ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5676 attached => {parent_tid=[3]}, 88) = 3 [pid 5638] rt_sigprocmask(SIG_SETMASK, [] [pid 5676] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5638] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5676] set_robust_list(0x7f8e8350e9a0, 24 [pid 5638] futex(0x7f8e8360bb78, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] <... set_robust_list resumed>) = 0 [pid 5638] <... futex resumed>) = 0 [pid 5676] rt_sigprocmask(SIG_SETMASK, [] [pid 5638] futex(0x7f8e8360bb7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5676] sendmsg(5, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=0x000008}, msg_namelen=12, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE}, 0) = -1 EFAULT (Bad address) [pid 5676] futex(0x7f8e8360bb7c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] <... futex resumed>) = 0 [pid 5676] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base={nlmsg_len=0, nlmsg_type=0 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=0}, iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5638] futex(0x7f8e8360bb78, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5676] <... sendmsg resumed>) = 52 [pid 5676] futex(0x7f8e8360bb7c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5638] futex(0x7f8e8360bb7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] futex(0x7f8e8360bb78, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 126.867241][ T5675] ------------[ cut here ]------------ [ 126.873118][ T5675] len > ((int)(~0U >> 1)) [ 126.873139][ T5675] WARNING: ./include/linux/skbuff.h:2864 at ip6_tnl_start_xmit+0x1066/0x1540, CPU#0: syz-executor100/5675 [ 126.888892][ T5675] Modules linked in: [ 126.892877][ T5675] CPU: 0 UID: 0 PID: 5675 Comm: syz-executor100 Not tainted syzkaller #0 PREEMPT(full) [ 126.902654][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.912760][ T5675] RIP: 0010:ip6_tnl_start_xmit+0x1066/0x1540 [ 126.918802][ T5675] Code: f7 be 03 00 00 00 ba 04 00 00 00 e8 24 54 b2 ff 48 8b 5c 24 18 e9 23 ff ff ff e8 75 77 2d f7 e9 19 ff ff ff e8 6b 77 2d f7 90 <0f> 0b 90 e9 2c f1 ff ff 44 89 e7 44 89 fe e8 17 79 2d f7 45 39 fc [ 126.938454][ T5675] RSP: 0018:ffffc90003c7f180 EFLAGS: 00010293 [ 126.944524][ T5675] RAX: ffffffff8a9989f5 RBX: 1ffff1100fcc7cb6 RCX: ffff88807bc5be00 [ 126.952562][ T5675] RDX: 0000000000000000 RSI: 00000000ffffffc0 RDI: 0000000000000000 [ 126.960578][ T5675] RBP: ffffc90003c7f2d0 R08: ffff88807bc5be00 R09: 0000000000000002 [ 126.968614][ T5675] R10: 0000000000004888 R11: ffffffff8a997990 R12: 00000000ffffffc0 [ 126.976621][ T5675] R13: dffffc0000000000 R14: ffff88807e63e5d8 R15: 0000000000000000 [ 126.984680][ T5675] FS: 00007f8e8352f6c0(0000) GS:ffff888124f4a000(0000) knlGS:0000000000000000 [ 126.993654][ T5675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.000299][ T5675] CR2: 00007f8e835b0320 CR3: 00000000710d0000 CR4: 00000000003526f0 [ 127.008327][ T5675] Call Trace: [ 127.011633][ T5675] [ 127.014588][ T5675] ? __pfx_ip6_tnl_start_xmit+0x10/0x10 [ 127.020203][ T5675] ? validate_xmit_skb+0xcac/0x14f0 [ 127.025463][ T5675] ? validate_xmit_xfrm+0x5d/0x1120 [ 127.030709][ T5675] ? __dev_direct_xmit+0x33c/0x730 [ 127.035875][ T5675] __dev_direct_xmit+0x4b6/0x730 [ 127.040852][ T5675] ? __pfx___dev_direct_xmit+0x10/0x10 [ 127.046370][ T5675] ? do_raw_spin_unlock+0xf5/0x210 [ 127.051506][ T5675] ? skb_put+0x112/0x210 [ 127.055806][ T5675] xsk_generic_xmit+0x272b/0x4730 [ 127.060875][ T5675] ? __lock_acquire+0x683/0x2cf0 [ 127.065916][ T5675] ? xsk_generic_xmit+0x107/0x4730 [ 127.071067][ T5675] ? xsk_poll+0xa6/0x670 [ 127.075374][ T5675] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 127.080775][ T5675] ? xsk_poll+0xa6/0x670 [ 127.085064][ T5675] ? xsk_poll+0xa6/0x670 [ 127.089334][ T5675] xsk_poll+0x326/0x670 [ 127.093507][ T5675] ? xsk_poll+0xa6/0x670 [ 127.097809][ T5675] sock_poll+0x338/0x3f0 [ 127.102112][ T5675] ? __pfx_sock_poll+0x10/0x10 [ 127.106932][ T5675] do_select+0x1067/0x17f0 [ 127.111394][ T5675] ? do_select+0xb81/0x17f0 [ 127.115974][ T5675] ? __pfx_do_select+0x10/0x10 [ 127.120770][ T5675] ? trace_sched_exit_tp+0x3a/0x130 [ 127.126048][ T5675] ? __lock_acquire+0x683/0x2cf0 [ 127.131032][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.135823][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.140534][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.145282][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.149990][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.154674][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.159406][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.164112][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.168849][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.173572][ T5675] core_sys_select+0x86d/0xb40 [ 127.178397][ T5675] ? __lock_acquire+0x683/0x2cf0 [ 127.183372][ T5675] ? __pfx_core_sys_select+0x10/0x10 [ 127.188860][ T5675] ? __pfx_set_user_sigmask+0x10/0x10 [ 127.194280][ T5675] __se_sys_pselect6+0x267/0x320 [ 127.199303][ T5675] ? __pfx___se_sys_pselect6+0x10/0x10 [ 127.204812][ T5675] ? __x64_sys_pselect6+0x21/0xf0 [ 127.209909][ T5675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.216015][ T5675] do_syscall_64+0x174/0x580 [ 127.220612][ T5675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.226719][ T5675] ? clear_bhb_loop+0x70/0xc0 [ 127.231432][ T5675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.237378][ T5675] RIP: 0033:0x7f8e8355ae69 [ 127.241829][ T5675] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 127.261500][ T5675] RSP: 002b:00007f8e8352f1c8 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 127.269958][ T5675] RAX: ffffffffffffffda RBX: 00007f8e8360bb68 RCX: 00007f8e8355ae69 [ 127.277991][ T5675] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 127.286014][ T5675] RBP: 00007f8e8360bb60 R08: 0000000000000000 R09: 0000000000000000 [ 127.294004][ T5675] R10: 0000200000000040 R11: 0000000000000246 R12: 00007f8e835d6028 [ 127.302058][ T5675] R13: 0000200000000000 R14: 00002000000006d0 R15: 00002000000006c0 [ 127.310084][ T5675] [ 127.313121][ T5675] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.320402][ T5675] CPU: 0 UID: 0 PID: 5675 Comm: syz-executor100 Not tainted syzkaller #0 PREEMPT(full) [ 127.330114][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.340194][ T5675] Call Trace: [ 127.343486][ T5675] [ 127.346422][ T5675] vpanic+0x56c/0xa60 [ 127.350434][ T5675] ? __pfx__printk+0x10/0x10 [ 127.355043][ T5675] ? __pfx_vpanic+0x10/0x10 [ 127.359567][ T5675] ? is_bpf_text_address+0x292/0x2b0 [ 127.364887][ T5675] ? is_bpf_text_address+0x26/0x2b0 [ 127.370121][ T5675] panic+0xc5/0xd0 [ 127.373861][ T5675] ? __pfx_panic+0x10/0x10 [ 127.378313][ T5675] __warn+0x315/0x4c0 [ 127.382312][ T5675] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 127.387712][ T5675] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 127.393116][ T5675] __report_bug+0x276/0x570 [ 127.397652][ T5675] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 127.403049][ T5675] ? __pfx___report_bug+0x10/0x10 [ 127.408127][ T5675] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 127.413537][ T5675] report_bug+0x16a/0x220 [ 127.417886][ T5675] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 127.423274][ T5675] ? ip6_tnl_start_xmit+0x1068/0x1540 [ 127.428656][ T5675] handle_bug+0x9c/0x200 [ 127.432912][ T5675] exc_invalid_op+0x1a/0x50 [ 127.437433][ T5675] asm_exc_invalid_op+0x1a/0x20 [ 127.442302][ T5675] RIP: 0010:ip6_tnl_start_xmit+0x1066/0x1540 [ 127.448316][ T5675] Code: f7 be 03 00 00 00 ba 04 00 00 00 e8 24 54 b2 ff 48 8b 5c 24 18 e9 23 ff ff ff e8 75 77 2d f7 e9 19 ff ff ff e8 6b 77 2d f7 90 <0f> 0b 90 e9 2c f1 ff ff 44 89 e7 44 89 fe e8 17 79 2d f7 45 39 fc [ 127.467950][ T5675] RSP: 0018:ffffc90003c7f180 EFLAGS: 00010293 [ 127.474035][ T5675] RAX: ffffffff8a9989f5 RBX: 1ffff1100fcc7cb6 RCX: ffff88807bc5be00 [ 127.482017][ T5675] RDX: 0000000000000000 RSI: 00000000ffffffc0 RDI: 0000000000000000 [ 127.490006][ T5675] RBP: ffffc90003c7f2d0 R08: ffff88807bc5be00 R09: 0000000000000002 [ 127.498009][ T5675] R10: 0000000000004888 R11: ffffffff8a997990 R12: 00000000ffffffc0 [ 127.506006][ T5675] R13: dffffc0000000000 R14: ffff88807e63e5d8 R15: 0000000000000000 [ 127.514031][ T5675] ? __pfx_ip6_tnl_start_xmit+0x10/0x10 [ 127.519596][ T5675] ? ip6_tnl_start_xmit+0x1065/0x1540 [ 127.525007][ T5675] ? __pfx_ip6_tnl_start_xmit+0x10/0x10 [ 127.530574][ T5675] ? validate_xmit_skb+0xcac/0x14f0 [ 127.535790][ T5675] ? validate_xmit_xfrm+0x5d/0x1120 [ 127.541013][ T5675] ? __dev_direct_xmit+0x33c/0x730 [ 127.546173][ T5675] __dev_direct_xmit+0x4b6/0x730 [ 127.551154][ T5675] ? __pfx___dev_direct_xmit+0x10/0x10 [ 127.556774][ T5675] ? do_raw_spin_unlock+0xf5/0x210 [ 127.561923][ T5675] ? skb_put+0x112/0x210 [ 127.566204][ T5675] xsk_generic_xmit+0x272b/0x4730 [ 127.571258][ T5675] ? __lock_acquire+0x683/0x2cf0 [ 127.576256][ T5675] ? xsk_generic_xmit+0x107/0x4730 [ 127.581390][ T5675] ? xsk_poll+0xa6/0x670 [ 127.585661][ T5675] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 127.591055][ T5675] ? xsk_poll+0xa6/0x670 [ 127.595319][ T5675] ? xsk_poll+0xa6/0x670 [ 127.599579][ T5675] xsk_poll+0x326/0x670 [ 127.603758][ T5675] ? xsk_poll+0xa6/0x670 [ 127.608019][ T5675] sock_poll+0x338/0x3f0 [ 127.612289][ T5675] ? __pfx_sock_poll+0x10/0x10 [ 127.617072][ T5675] do_select+0x1067/0x17f0 [ 127.621509][ T5675] ? do_select+0xb81/0x17f0 [ 127.626046][ T5675] ? __pfx_do_select+0x10/0x10 [ 127.630827][ T5675] ? trace_sched_exit_tp+0x3a/0x130 [ 127.636036][ T5675] ? __lock_acquire+0x683/0x2cf0 [ 127.641021][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.645719][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.650408][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.655098][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.659797][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.664490][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.669183][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.673874][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.678572][ T5675] ? __pfx_pollwake+0x10/0x10 [ 127.683282][ T5675] core_sys_select+0x86d/0xb40 [ 127.688080][ T5675] ? __lock_acquire+0x683/0x2cf0 [ 127.693055][ T5675] ? __pfx_core_sys_select+0x10/0x10 [ 127.698377][ T5675] ? __pfx_set_user_sigmask+0x10/0x10 [ 127.703763][ T5675] __se_sys_pselect6+0x267/0x320 [ 127.708742][ T5675] ? __pfx___se_sys_pselect6+0x10/0x10 [ 127.714220][ T5675] ? __x64_sys_pselect6+0x21/0xf0 [ 127.719257][ T5675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.725363][ T5675] do_syscall_64+0x174/0x580 [ 127.729984][ T5675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.736061][ T5675] ? clear_bhb_loop+0x70/0xc0 [ 127.740756][ T5675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.746668][ T5675] RIP: 0033:0x7f8e8355ae69 [ 127.751103][ T5675] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 127.770737][ T5675] RSP: 002b:00007f8e8352f1c8 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 127.779171][ T5675] RAX: ffffffffffffffda RBX: 00007f8e8360bb68 RCX: 00007f8e8355ae69 [ 127.787184][ T5675] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 127.795168][ T5675] RBP: 00007f8e8360bb60 R08: 0000000000000000 R09: 0000000000000000 [ 127.803207][ T5675] R10: 0000200000000040 R11: 0000000000000246 R12: 00007f8e835d6028 [ 127.811193][ T5675] R13: 0000200000000000 R14: 00002000000006d0 R15: 00002000000006c0 [ 127.819197][ T5675] [ 127.822407][ T5675] Kernel Offset: disabled [ 127.826738][ T5675] Rebooting in 86400 seconds..