./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3226729408 <...> Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. execve("./syz-executor3226729408", ["./syz-executor3226729408"], 0x7ffd2f429bc0 /* 10 vars */) = 0 brk(NULL) = 0x5555614ea000 brk(0x5555614ead00) = 0x5555614ead00 arch_prctl(ARCH_SET_FS, 0x5555614ea380) = 0 set_tid_address(0x5555614ea650) = 5837 set_robust_list(0x5555614ea660, 24) = 0 rseq(0x5555614eaca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3226729408", 4096) = 28 getrandom("\x79\xa0\xc6\x11\xa2\x30\x90\x22", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555614ead00 brk(0x55556150bd00) = 0x55556150bd00 brk(0x55556150c000) = 0x55556150c000 mprotect(0x7f5c0946c000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [ 86.895820][ T5837] ------------[ cut here ]------------ [ 86.901309][ T5837] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:21 [ 86.909583][ T5837] index 16 is out of range for type 'const __u8[16]' (aka 'const unsigned char[16]') [ 86.919164][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor322 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 86.919188][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.919205][ T5837] Call Trace: [ 86.919212][ T5837] [ 86.919220][ T5837] dump_stack_lvl+0x189/0x250 [ 86.919275][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.919304][ T5837] ? __pfx__printk+0x10/0x10 [ 86.919322][ T5837] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 86.919369][ T5837] ubsan_epilogue+0xa/0x40 [ 86.919390][ T5837] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 86.919421][ T5837] ? __asan_memcpy+0x40/0x70 [ 86.919442][ T5837] ipv6_addr_prefix+0x145/0x1d0 [ 86.919472][ T5837] ip6_route_info_create+0x629/0xa70 [ 86.919527][ T5837] inet6_rtm_newroute+0x578/0x1c70 [ 86.919557][ T5837] ? __lock_acquire+0xaac/0xd20 [ 86.919587][ T5837] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 86.919688][ T5837] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 86.919714][ T5837] rtnetlink_rcv_msg+0x7cc/0xb70 [ 86.919742][ T5837] ? kasan_save_track+0x4f/0x80 [ 86.919767][ T5837] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 86.919794][ T5837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.919822][ T5837] ? __lock_acquire+0xaac/0xd20 [ 86.919861][ T5837] netlink_rcv_skb+0x219/0x490 [ 86.919891][ T5837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.919920][ T5837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.919965][ T5837] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.919992][ T5837] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.920023][ T5837] netlink_unicast+0x758/0x8d0 [ 86.920059][ T5837] netlink_sendmsg+0x805/0xb30 [ 86.920098][ T5837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.920131][ T5837] ? aa_sock_msg_perm+0x94/0x160 [ 86.920153][ T5837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 86.920175][ T5837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.920205][ T5837] __sock_sendmsg+0x219/0x270 [ 86.920234][ T5837] ____sys_sendmsg+0x505/0x830 [ 86.920260][ T5837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.920290][ T5837] ? import_iovec+0x74/0xa0 [ 86.920319][ T5837] ___sys_sendmsg+0x21f/0x2a0 [ 86.920340][ T5837] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.920369][ T5837] ? do_raw_spin_lock+0x121/0x290 [ 86.920406][ T5837] ? _raw_spin_lock_irq+0xae/0xf0 [ 86.920452][ T5837] __x64_sys_sendmsg+0x19b/0x260 [ 86.920476][ T5837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 86.920519][ T5837] do_syscall_64+0xf6/0x210 [ 86.920545][ T5837] ? clear_bhb_loop+0x45/0xa0 [ 86.920569][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.920595][ T5837] RIP: 0033:0x7f5c093f9369 [ 86.920619][ T5837] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.920635][ T5837] RSP: 002b:00007fffa8fbf2a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.920655][ T5837] RAX: ffffffffffffffda RBX: 00007fffa8fbf478 RCX: 00007f5c093f9369 [ 86.920669][ T5837] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 86.920688][ T5837] RBP: 00007f5c0946c610 R08: 0000000000000000 R09: 00007fffa8fbf478 [ 86.920699][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.920709][ T5837] R13: 00007fffa8fbf468 R14: 0000000000000001 R15: 0000000000000001 [ 86.920735][ T5837] [ 86.920742][ T5837] ---[ end trace ]--- [ 87.242885][ T5837] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 87.250113][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor322 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 87.262545][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.272695][ T5837] Call Trace: [ 87.275985][ T5837] [ 87.278936][ T5837] dump_stack_lvl+0x99/0x250 [ 87.283541][ T5837] ? __asan_memcpy+0x40/0x70 [ 87.288143][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.293452][ T5837] ? __pfx__printk+0x10/0x10 [ 87.298073][ T5837] panic+0x2db/0x790 [ 87.301995][ T5837] ? __pfx_panic+0x10/0x10 [ 87.306434][ T5837] ? _printk+0xcf/0x120 [ 87.310608][ T5837] ? __pfx__printk+0x10/0x10 [ 87.315295][ T5837] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 87.321206][ T5837] check_panic_on_warn+0x89/0xb0 [ 87.326155][ T5837] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 87.331884][ T5837] ? __asan_memcpy+0x40/0x70 [ 87.336480][ T5837] ipv6_addr_prefix+0x145/0x1d0 [ 87.341341][ T5837] ip6_route_info_create+0x629/0xa70 [ 87.346645][ T5837] inet6_rtm_newroute+0x578/0x1c70 [ 87.351772][ T5837] ? __lock_acquire+0xaac/0xd20 [ 87.356651][ T5837] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 87.362280][ T5837] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 87.367834][ T5837] rtnetlink_rcv_msg+0x7cc/0xb70 [ 87.372871][ T5837] ? kasan_save_track+0x4f/0x80 [ 87.377728][ T5837] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 87.382938][ T5837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.388408][ T5837] ? __lock_acquire+0xaac/0xd20 [ 87.393299][ T5837] netlink_rcv_skb+0x219/0x490 [ 87.398078][ T5837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.403573][ T5837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.408897][ T5837] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.414106][ T5837] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.419340][ T5837] netlink_unicast+0x758/0x8d0 [ 87.424137][ T5837] netlink_sendmsg+0x805/0xb30 [ 87.428944][ T5837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.434271][ T5837] ? aa_sock_msg_perm+0x94/0x160 [ 87.439224][ T5837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 87.444523][ T5837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.449821][ T5837] __sock_sendmsg+0x219/0x270 [ 87.454510][ T5837] ____sys_sendmsg+0x505/0x830 [ 87.459306][ T5837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.464600][ T5837] ? import_iovec+0x74/0xa0 [ 87.469113][ T5837] ___sys_sendmsg+0x21f/0x2a0 [ 87.473897][ T5837] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.479100][ T5837] ? do_raw_spin_lock+0x121/0x290 [ 87.484146][ T5837] ? _raw_spin_lock_irq+0xae/0xf0 [ 87.489191][ T5837] __x64_sys_sendmsg+0x19b/0x260 [ 87.494138][ T5837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.499618][ T5837] do_syscall_64+0xf6/0x210 [ 87.504128][ T5837] ? clear_bhb_loop+0x45/0xa0 [ 87.508813][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.514801][ T5837] RIP: 0033:0x7f5c093f9369 [ 87.519227][ T5837] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.538921][ T5837] RSP: 002b:00007fffa8fbf2a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.547342][ T5837] RAX: ffffffffffffffda RBX: 00007fffa8fbf478 RCX: 00007f5c093f9369 [ 87.555319][ T5837] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 87.563293][ T5837] RBP: 00007f5c0946c610 R08: 0000000000000000 R09: 00007fffa8fbf478 [ 87.571277][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.579268][ T5837] R13: 00007fffa8fbf468 R14: 0000000000000001 R15: 0000000000000001 [ 87.587290][ T5837] [ 87.590676][ T5837] Kernel Offset: disabled [ 87.595009][ T5837] Rebooting in 86400 seconds..