./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3089697019 <...> Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. execve("./syz-executor3089697019", ["./syz-executor3089697019"], 0x7ffe105c9090 /* 10 vars */) = 0 brk(NULL) = 0x55555732d000 brk(0x55555732dd00) = 0x55555732dd00 arch_prctl(ARCH_SET_FS, 0x55555732d380) = 0 set_tid_address(0x55555732d650) = 5033 set_robust_list(0x55555732d660, 24) = 0 rseq(0x55555732dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3089697019", 4096) = 28 getrandom("\x79\x9b\x46\x8e\xde\x2f\x2b\xa7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555732dd00 brk(0x55555734ed00) = 0x55555734ed00 brk(0x55555734f000) = 0x55555734f000 mprotect(0x7fd6448e5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 16776960 mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0) = 0x20000000 openat(AT_FDCWD, 0x20000080, O_RDONLY|O_NONBLOCK|O_DSYNC|O_DIRECT|O_NOFOLLOW|O_NOATIME|0x8) = 4 socket(AF_INET6, SOCK_DGRAM, IPPROTO_L2TP) = 5 bind(5, 0x20000000, 32) = 0 connect(5, 0x20000040, 32) = 0 [ 59.362553][ T27] audit: type=1804 audit(1693704039.238:2): pid=5033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor308" name="/root/cgroup.controllers" dev="sda1" ino=1927 res=1 errno=0 [ 59.390792][ T5033] ------------[ cut here ]------------ [ 59.396484][ T5033] WARNING: CPU: 1 PID: 5033 at net/ipv6/ip6_output.c:1800 __ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.407167][ T5033] Modules linked in: [ 59.411050][ T5033] CPU: 1 PID: 5033 Comm: syz-executor308 Not tainted 6.5.0-syzkaller-03967-gbd6c11bc43c4 #0 [ 59.421149][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 59.431259][ T5033] RIP: 0010:__ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.437815][ T5033] Code: db f6 ff ff e8 09 91 9c f8 49 8d 44 24 ff 48 89 44 24 60 49 8d 6c 24 07 e9 c2 f6 ff ff 4c 8b b4 24 90 01 00 00 e8 e8 90 9c f8 <0f> 0b 48 8b 44 24 10 45 89 f4 48 8d 98 74 02 00 00 e8 d2 90 9c f8 [ 59.457538][ T5033] RSP: 0018:ffffc90003a2f3b8 EFLAGS: 00010293 [ 59.463661][ T5033] RAX: 0000000000000000 RBX: 0000000000001004 RCX: 0000000000000000 [ 59.471695][ T5033] RDX: ffff8880243d3b80 RSI: ffffffff88e9f698 RDI: 0000000000000006 [ 59.479691][ T5033] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001004 [ 59.487718][ T5033] R10: 0000000000001000 R11: 0000000000000000 R12: 0000000000000001 [ 59.495764][ T5033] R13: dffffc0000000000 R14: 0000000000001004 R15: ffff88801bbb73c0 [ 59.503778][ T5033] FS: 000055555732d380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 59.512790][ T5033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.519375][ T5033] CR2: 0000000020000080 CR3: 00000000728e1000 CR4: 00000000003506e0 [ 59.527395][ T5033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.535424][ T5033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.543428][ T5033] Call Trace: [ 59.546715][ T5033] [ 59.549639][ T5033] ? __warn+0xe6/0x380 [ 59.553769][ T5033] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.559720][ T5033] ? report_bug+0x3bc/0x580 [ 59.564275][ T5033] ? handle_bug+0x3c/0x70 [ 59.568627][ T5033] ? exc_invalid_op+0x17/0x40 [ 59.573367][ T5033] ? asm_exc_invalid_op+0x1a/0x20 [ 59.578422][ T5033] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.584374][ T5033] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.590309][ T5033] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.596349][ T5033] ? ip_frag_init+0x320/0x320 [ 59.601056][ T5033] ? print_usage_bug.part.0+0x670/0x670 [ 59.606679][ T5033] ? ip6_dst_lookup+0x60/0x60 [ 59.611403][ T5033] ip6_append_data+0x1e6/0x510 [ 59.616245][ T5033] ? ip_frag_init+0x320/0x320 [ 59.620923][ T5033] l2tp_ip6_sendmsg+0xdf9/0x1cc0 [ 59.625919][ T5033] ? l2tp_ip6_open+0x210/0x210 [ 59.630720][ T5033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.636705][ T5033] ? inet_sendmsg+0x9d/0xe0 [ 59.641230][ T5033] inet_sendmsg+0x9d/0xe0 [ 59.645611][ T5033] ? inet_send_prepare+0x540/0x540 [ 59.650745][ T5033] sock_sendmsg+0xd9/0x180 [ 59.655229][ T5033] splice_to_socket+0xade/0x1010 [ 59.660194][ T5033] ? splice_from_pipe+0x130/0x130 [ 59.665256][ T5033] ? slab_free_freelist_hook+0x10b/0x1e0 [ 59.670924][ T5033] ? __phys_addr+0xc6/0x140 [ 59.675515][ T5033] ? security_file_permission+0xdc/0x100 [ 59.681173][ T5033] ? splice_from_pipe+0x130/0x130 [ 59.686244][ T5033] direct_splice_actor+0x118/0x180 [ 59.691392][ T5033] splice_direct_to_actor+0x347/0xa30 [ 59.696852][ T5033] ? folio_flags.constprop.0+0x150/0x150 [ 59.702544][ T5033] ? vfs_splice_read+0x3b0/0x3b0 [ 59.707480][ T5033] ? bpf_lsm_file_permission+0x9/0x10 [ 59.712915][ T5033] ? security_file_permission+0x94/0x100 [ 59.718576][ T5033] do_splice_direct+0x1af/0x280 [ 59.723498][ T5033] ? splice_direct_to_actor+0xa30/0xa30 [ 59.729072][ T5033] ? propagate_umount+0x1af0/0x1af0 [ 59.734445][ T5033] ? bpf_lsm_file_permission+0x9/0x10 [ 59.739854][ T5033] ? security_file_permission+0x94/0x100 [ 59.745555][ T5033] do_sendfile+0xb88/0x1390 [ 59.750080][ T5033] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 59.755572][ T5033] ? ptrace_notify+0xf4/0x130 [ 59.760270][ T5033] ? reacquire_held_locks+0x4b0/0x4b0 [ 59.765702][ T5033] __x64_sys_sendfile64+0x1d6/0x220 [ 59.770924][ T5033] ? __ia32_sys_sendfile+0x220/0x220 [ 59.776268][ T5033] ? lockdep_hardirqs_on+0x7d/0x100 [ 59.781496][ T5033] ? _raw_spin_unlock_irq+0x2e/0x50 [ 59.786736][ T5033] ? ptrace_notify+0xf4/0x130 [ 59.791431][ T5033] do_syscall_64+0x38/0xb0 [ 59.795910][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.801851][ T5033] RIP: 0033:0x7fd644872469 [ 59.806255][ T5033] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.825929][ T5033] RSP: 002b:00007fff7999b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 59.834398][ T5033] RAX: ffffffffffffffda RBX: 00007fff7999b4c8 RCX: 00007fd644872469 [ 59.842420][ T5033] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 59.850402][ T5033] RBP: 00007fd6448e5610 R08: 00007fff7999b4c8 R09: 00007fff7999b4c8 [ 59.858436][ T5033] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 59.866479][ T5033] R13: 00007fff7999b4b8 R14: 0000000000000001 R15: 0000000000000001 [ 59.874523][ T5033] [ 59.877551][ T5033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.884821][ T5033] CPU: 1 PID: 5033 Comm: syz-executor308 Not tainted 6.5.0-syzkaller-03967-gbd6c11bc43c4 #0 [ 59.894872][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 59.904912][ T5033] Call Trace: [ 59.908179][ T5033] [ 59.911098][ T5033] dump_stack_lvl+0xd9/0x1b0 [ 59.915689][ T5033] panic+0x6a4/0x750 [ 59.919574][ T5033] ? panic_smp_self_stop+0xa0/0xa0 [ 59.924716][ T5033] ? show_trace_log_lvl+0x29d/0x3c0 [ 59.929915][ T5033] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.935813][ T5033] check_panic_on_warn+0xab/0xb0 [ 59.940746][ T5033] __warn+0xf2/0x380 [ 59.944633][ T5033] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.950533][ T5033] report_bug+0x3bc/0x580 [ 59.954860][ T5033] handle_bug+0x3c/0x70 [ 59.959008][ T5033] exc_invalid_op+0x17/0x40 [ 59.963503][ T5033] asm_exc_invalid_op+0x1a/0x20 [ 59.968343][ T5033] RIP: 0010:__ip6_append_data.isra.0+0x1be8/0x47f0 [ 59.974848][ T5033] Code: db f6 ff ff e8 09 91 9c f8 49 8d 44 24 ff 48 89 44 24 60 49 8d 6c 24 07 e9 c2 f6 ff ff 4c 8b b4 24 90 01 00 00 e8 e8 90 9c f8 <0f> 0b 48 8b 44 24 10 45 89 f4 48 8d 98 74 02 00 00 e8 d2 90 9c f8 [ 59.994467][ T5033] RSP: 0018:ffffc90003a2f3b8 EFLAGS: 00010293 [ 60.000554][ T5033] RAX: 0000000000000000 RBX: 0000000000001004 RCX: 0000000000000000 [ 60.008536][ T5033] RDX: ffff8880243d3b80 RSI: ffffffff88e9f698 RDI: 0000000000000006 [ 60.016521][ T5033] RBP: 0000000000001000 R08: 0000000000000006 R09: 0000000000001004 [ 60.024497][ T5033] R10: 0000000000001000 R11: 0000000000000000 R12: 0000000000000001 [ 60.032475][ T5033] R13: dffffc0000000000 R14: 0000000000001004 R15: ffff88801bbb73c0 [ 60.040486][ T5033] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 60.046435][ T5033] ? __ip6_append_data.isra.0+0x1be8/0x47f0 [ 60.052374][ T5033] ? ip_frag_init+0x320/0x320 [ 60.057074][ T5033] ? print_usage_bug.part.0+0x670/0x670 [ 60.062659][ T5033] ? ip6_dst_lookup+0x60/0x60 [ 60.067371][ T5033] ip6_append_data+0x1e6/0x510 [ 60.072170][ T5033] ? ip_frag_init+0x320/0x320 [ 60.076873][ T5033] l2tp_ip6_sendmsg+0xdf9/0x1cc0 [ 60.081841][ T5033] ? l2tp_ip6_open+0x210/0x210 [ 60.086639][ T5033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.092577][ T5033] ? inet_sendmsg+0x9d/0xe0 [ 60.097091][ T5033] inet_sendmsg+0x9d/0xe0 [ 60.101462][ T5033] ? inet_send_prepare+0x540/0x540 [ 60.106589][ T5033] sock_sendmsg+0xd9/0x180 [ 60.111019][ T5033] splice_to_socket+0xade/0x1010 [ 60.115983][ T5033] ? splice_from_pipe+0x130/0x130 [ 60.121019][ T5033] ? slab_free_freelist_hook+0x10b/0x1e0 [ 60.126679][ T5033] ? __phys_addr+0xc6/0x140 [ 60.131227][ T5033] ? security_file_permission+0xdc/0x100 [ 60.136877][ T5033] ? splice_from_pipe+0x130/0x130 [ 60.141916][ T5033] direct_splice_actor+0x118/0x180 [ 60.147041][ T5033] splice_direct_to_actor+0x347/0xa30 [ 60.152435][ T5033] ? folio_flags.constprop.0+0x150/0x150 [ 60.158085][ T5033] ? vfs_splice_read+0x3b0/0x3b0 [ 60.163040][ T5033] ? bpf_lsm_file_permission+0x9/0x10 [ 60.168430][ T5033] ? security_file_permission+0x94/0x100 [ 60.174083][ T5033] do_splice_direct+0x1af/0x280 [ 60.178948][ T5033] ? splice_direct_to_actor+0xa30/0xa30 [ 60.184507][ T5033] ? propagate_umount+0x1af0/0x1af0 [ 60.189718][ T5033] ? bpf_lsm_file_permission+0x9/0x10 [ 60.195190][ T5033] ? security_file_permission+0x94/0x100 [ 60.200844][ T5033] do_sendfile+0xb88/0x1390 [ 60.205364][ T5033] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 60.210659][ T5033] ? ptrace_notify+0xf4/0x130 [ 60.215347][ T5033] ? reacquire_held_locks+0x4b0/0x4b0 [ 60.220743][ T5033] __x64_sys_sendfile64+0x1d6/0x220 [ 60.225958][ T5033] ? __ia32_sys_sendfile+0x220/0x220 [ 60.231280][ T5033] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.236510][ T5033] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.241726][ T5033] ? ptrace_notify+0xf4/0x130 [ 60.246421][ T5033] do_syscall_64+0x38/0xb0 [ 60.250863][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.256777][ T5033] RIP: 0033:0x7fd644872469 [ 60.261201][ T5033] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.280827][ T5033] RSP: 002b:00007fff7999b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 60.289250][ T5033] RAX: ffffffffffffffda RBX: 00007fff7999b4c8 RCX: 00007fd644872469 [ 60.297230][ T5033] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 60.305207][ T5033] RBP: 00007fd6448e5610 R08: 00007fff7999b4c8 R09: 00007fff7999b4c8 [ 60.313186][ T5033] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 60.321165][ T5033] R13: 00007fff7999b4b8 R14: 0000000000000001 R15: 0000000000000001 [ 60.329162][ T5033] [ 60.332358][ T5033] Kernel Offset: disabled [ 60.336751][ T5033] Rebooting in 86400 seconds..