./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor277977002 <...> Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. execve("./syz-executor277977002", ["./syz-executor277977002"], 0x7ffc44af6320 /* 10 vars */) = 0 brk(NULL) = 0x555563a30000 brk(0x555563a30d00) = 0x555563a30d00 arch_prctl(ARCH_SET_FS, 0x555563a30380) = 0 set_tid_address(0x555563a30650) = 5851 set_robust_list(0x555563a30660, 24) = 0 rseq(0x555563a30ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor277977002", 4096) = 27 getrandom("\xa1\x49\x0f\x07\x86\xb2\x4e\xa0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555563a30d00 brk(0x555563a51d00) = 0x555563a51d00 brk(0x555563a52000) = 0x555563a52000 mprotect(0x7f52927dc000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached , child_tidptr=0x555563a30650) = 5852 [pid 5852] set_robust_list(0x555563a30660, 24) = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] getppid() = 0 [pid 5852] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5852] unshare(CLONE_NEWNS) = 0 [pid 5852] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5852] unshare(CLONE_NEWIPC) = 0 [pid 5852] unshare(CLONE_NEWCGROUP) = 0 [pid 5852] unshare(CLONE_NEWUTS) = 0 [pid 5852] unshare(CLONE_SYSVSEM) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "16777216", 8) = 8 [pid 5852] close(3) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "536870912", 9) = 9 [pid 5852] close(3) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1024", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "8192", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1024", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1024", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5852] close(3) = 0 [pid 5852] getpid() = 1 [pid 5852] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 90 e9 71 f5 ff ff e8 c1 db 80 f7 e9 d3 00 00 00 e8 b7 db 80 [ 122.620717][ T5873] RSP: 0018:ffffc9000411ed00 EFLAGS: 00010293 [ 122.629989][ T5873] RAX: ffffffff8a3f4d21 RBX: ffffffff8de66da0 RCX: ffff8880795d5a00 [ 122.643952][ T5873] RDX: 0000000000000000 RSI: 00000000000100f4 RDI: 0000000000010000 [ 122.656651][ T5873] RBP: ffffc9000411ee30 R08: ffffea0000cdfd00 R09: 0000013a000001a7 [ 122.671306][ T5873] R10: ffffea0000cdfd00 R11: 0000013a000001a7 R12: 1ffffffff1bccdb4 [ 122.682992][ T5873] R13: ffff8880299398c0 R14: 00000000000100f4 R15: ffff888029939990 [ 122.692772][ T5873] FS: 0000555563a30380(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 122.706172][ T5873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.715963][ T5873] CR2: 0000200000010000 CR3: 0000000078a4c000 CR4: 00000000003526f0 [ 122.729793][ T5873] Call Trace: [ 122.734850][ T5873] [ 122.737962][ T5873] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 122.746531][ T5873] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 122.756386][ T5873] skb_mac_gso_segment+0x31c/0x640 [ 122.764266][ T5873] ? skb_mac_gso_segment+0x17e/0x640 [ 122.775598][ T5873] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 122.784698][ T5873] ? __lock_acquire+0xab9/0xd20 [ 122.792345][ T5873] nsh_gso_segment+0x54a/0xe10 [ 122.800262][ T5873] ? __pfx_nsh_gso_segment+0x10/0x10 [ 122.806710][ T5873] skb_mac_gso_segment+0x31c/0x640 [ 122.815405][ T5873] ? skb_mac_gso_segment+0x17e/0x640 [ 122.823896][ T5873] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 122.833057][ T5873] __skb_gso_segment+0x342/0x510 [ 122.840421][ T5873] validate_xmit_skb+0x857/0x11b0 [ 122.847663][ T5873] ? __pfx_validate_xmit_skb+0x10/0x10 [ 122.856441][ T5873] validate_xmit_skb_list+0x84/0x120 [ 122.865503][ T5873] sch_direct_xmit+0xd3/0x4b0 [ 122.873285][ T5873] ? __pfx_sch_direct_xmit+0x10/0x10 [ 122.882796][ T5873] __dev_queue_xmit+0x17b6/0x3a70 [ 122.892314][ T5873] ? __dev_queue_xmit+0x27e/0x3a70 [ 122.901641][ T5873] ? __pskb_pull_tail+0xb59/0x15b0 [ 122.910761][ T5873] ? __asan_memcpy+0x40/0x70 [ 122.917929][ T5873] ? __pfx___dev_queue_xmit+0x10/0x10 [ 122.928346][ T5873] ? skb_partial_csum_set+0x107/0x360 [ 122.937593][ T5873] ? virtio_net_hdr_to_skb+0x9e1/0x1490 [ 122.944068][ T5873] ? packet_parse_headers+0x7ff/0xb60 [ 122.951025][ T5873] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 122.959825][ T5873] ? packet_xmit+0x68/0x330 [ 122.967110][ T5873] packet_sendmsg+0x3e16/0x5060 [ 122.975064][ T5873] ? aa_bind_mount+0x140/0x590 [ 122.981352][ T5873] ? __pfx___might_resched+0x10/0x10 [ 122.988265][ T5873] ? cpuacct_charge+0x117/0x320 [ 122.995319][ T5873] ? xfd_validate_state+0x6d/0x150 [ 123.002194][ T5873] ? save_fpregs_to_fpstate+0xa3/0x210 [ 123.009887][ T5873] ? __pfx_packet_sendmsg+0x10/0x10 [ 123.017928][ T5873] ? aa_sk_perm+0x81e/0x950 [ 123.025540][ T5873] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 123.037239][ T5873] ? __lock_acquire+0xab9/0xd20 [ 123.044060][ T5873] ? aa_sock_msg_perm+0x94/0x160 [ 123.054377][ T5873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.062938][ T5873] ? __pfx_packet_sendmsg+0x10/0x10 [ 123.071882][ T5873] __sock_sendmsg+0x21c/0x270 [ 123.079008][ T5873] ____sys_sendmsg+0x505/0x830 [ 123.087473][ T5873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.097078][ T5873] ? import_iovec+0x74/0xa0 [ 123.107207][ T5873] ___sys_sendmsg+0x21f/0x2a0 [ 123.114907][ T5873] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.123093][ T5873] ? do_raw_spin_lock+0x121/0x290 [ 123.131951][ T5873] __x64_sys_sendmsg+0x19b/0x260 [ 123.140004][ T5873] ? _raw_spin_unlock_irq+0x2e/0x50 [ 123.147202][ T5873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.155876][ T5873] ? rcu_is_watching+0x15/0xb0 [ 123.163134][ T5873] do_syscall_64+0xfa/0x3b0 [ 123.170431][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.177172][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.186002][ T5873] ? clear_bhb_loop+0x60/0xb0 [ 123.193240][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.201786][ T5873] RIP: 0033:0x7f5292762ea9 [ 123.206978][ T5873] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.230252][ T5873] RSP: 002b:00007fffa68b5778 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.239904][ T5873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5292762ea9 [ 123.248971][ T5873] RDX: 00000000200400c4 RSI: 0000200000000180 RDI: 0000000000000003 [ 123.260299][ T5873] RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 [ 123.271800][ T5873] R10: 0000200000000180 R11: 0000000000000246 R12: 00007fffa68b57d0 [ 123.283400][ T5873] R13: 00007f52927b03fe R14: 0000000000000003 R15: 00007fffa68b57b0 [ 123.300007][ T5873] [ 123.304737][ T5873] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.319146][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: syz-executor277 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 123.341666][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.359866][ T5873] Call Trace: [ 123.364017][ T5873] [ 123.368287][ T5873] dump_stack_lvl+0x99/0x250 [ 123.373942][ T5873] ? __asan_memcpy+0x40/0x70 [ 123.379839][ T5873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.388228][ T5873] ? __pfx__printk+0x10/0x10 [ 123.394870][ T5873] panic+0x2db/0x790 [ 123.401102][ T5873] ? __pfx_panic+0x10/0x10 [ 123.407907][ T5873] ? show_trace_log_lvl+0x4fb/0x550 [ 123.415322][ T5873] __warn+0x31b/0x4b0 [ 123.420665][ T5873] ? ipv6_gso_segment+0x15e2/0x21e0 [ 123.426450][ T5873] ? ipv6_gso_segment+0x15e2/0x21e0 [ 123.432144][ T5873] report_bug+0x2be/0x4f0 [ 123.437797][ T5873] ? ipv6_gso_segment+0x15e2/0x21e0 [ 123.444238][ T5873] ? ipv6_gso_segment+0x15e2/0x21e0 [ 123.451814][ T5873] ? ipv6_gso_segment+0x15e4/0x21e0 [ 123.460922][ T5873] handle_bug+0x84/0x160 [ 123.466313][ T5873] exc_invalid_op+0x1a/0x50 [ 123.472327][ T5873] asm_exc_invalid_op+0x1a/0x20 [ 123.478302][ T5873] RIP: 0010:ipv6_gso_segment+0x15e2/0x21e0 [ 123.487241][ T5873] Code: ff ff e8 f1 db 80 f7 49 c7 c5 a3 ff ff ff e9 27 fe ff ff e8 e0 db 80 f7 49 c7 c5 a3 ff ff ff e9 16 fe ff ff e8 cf db 80 f7 90 <0f> 0b 90 e9 71 f5 ff ff e8 c1 db 80 f7 e9 d3 00 00 00 e8 b7 db 80 [ 123.521572][ T5873] RSP: 0018:ffffc9000411ed00 EFLAGS: 00010293 [ 123.531191][ T5873] RAX: ffffffff8a3f4d21 RBX: ffffffff8de66da0 RCX: ffff8880795d5a00 [ 123.543020][ T5873] RDX: 0000000000000000 RSI: 00000000000100f4 RDI: 0000000000010000 [ 123.556011][ T5873] RBP: ffffc9000411ee30 R08: ffffea0000cdfd00 R09: 0000013a000001a7 [ 123.567640][ T5873] R10: ffffea0000cdfd00 R11: 0000013a000001a7 R12: 1ffffffff1bccdb4 [ 123.578814][ T5873] R13: ffff8880299398c0 R14: 00000000000100f4 R15: ffff888029939990 [ 123.590634][ T5873] ? ipv6_gso_segment+0x15e1/0x21e0 [ 123.599709][ T5873] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 123.607749][ T5873] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 123.616332][ T5873] skb_mac_gso_segment+0x31c/0x640 [ 123.625027][ T5873] ? skb_mac_gso_segment+0x17e/0x640 [ 123.634195][ T5873] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 123.646780][ T5873] ? __lock_acquire+0xab9/0xd20 [ 123.654687][ T5873] nsh_gso_segment+0x54a/0xe10 [ 123.662940][ T5873] ? __pfx_nsh_gso_segment+0x10/0x10 [ 123.671778][ T5873] skb_mac_gso_segment+0x31c/0x640 [ 123.679677][ T5873] ? skb_mac_gso_segment+0x17e/0x640 [ 123.688529][ T5873] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 123.697454][ T5873] __skb_gso_segment+0x342/0x510 [ 123.703792][ T5873] validate_xmit_skb+0x857/0x11b0 [ 123.710901][ T5873] ? __pfx_validate_xmit_skb+0x10/0x10 [ 123.719937][ T5873] validate_xmit_skb_list+0x84/0x120 [ 123.726272][ T5873] sch_direct_xmit+0xd3/0x4b0 [ 123.734271][ T5873] ? __pfx_sch_direct_xmit+0x10/0x10 [ 123.743041][ T5873] __dev_queue_xmit+0x17b6/0x3a70 [ 123.753410][ T5873] ? __dev_queue_xmit+0x27e/0x3a70 [ 123.761437][ T5873] ? __pskb_pull_tail+0xb59/0x15b0 [ 123.770169][ T5873] ? __asan_memcpy+0x40/0x70 [ 123.777441][ T5873] ? __pfx___dev_queue_xmit+0x10/0x10 [ 123.785890][ T5873] ? skb_partial_csum_set+0x107/0x360 [ 123.796470][ T5873] ? virtio_net_hdr_to_skb+0x9e1/0x1490 [ 123.807057][ T5873] ? packet_parse_headers+0x7ff/0xb60 [ 123.815893][ T5873] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 123.827536][ T5873] ? packet_xmit+0x68/0x330 [ 123.833954][ T5873] packet_sendmsg+0x3e16/0x5060 [ 123.840880][ T5873] ? aa_bind_mount+0x140/0x590 [ 123.850031][ T5873] ? __pfx___might_resched+0x10/0x10 [ 123.857688][ T5873] ? cpuacct_charge+0x117/0x320 [ 123.866250][ T5873] ? xfd_validate_state+0x6d/0x150 [ 123.874252][ T5873] ? save_fpregs_to_fpstate+0xa3/0x210 [ 123.883295][ T5873] ? __pfx_packet_sendmsg+0x10/0x10 [ 123.892621][ T5873] ? aa_sk_perm+0x81e/0x950 [ 123.901315][ T5873] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 123.910373][ T5873] ? __lock_acquire+0xab9/0xd20 [ 123.917108][ T5873] ? aa_sock_msg_perm+0x94/0x160 [ 123.924668][ T5873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.934881][ T5873] ? __pfx_packet_sendmsg+0x10/0x10 [ 123.943043][ T5873] __sock_sendmsg+0x21c/0x270 [ 123.950280][ T5873] ____sys_sendmsg+0x505/0x830 [ 123.956940][ T5873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.964986][ T5873] ? import_iovec+0x74/0xa0 [ 123.971629][ T5873] ___sys_sendmsg+0x21f/0x2a0 [ 123.978793][ T5873] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.988092][ T5873] ? do_raw_spin_lock+0x121/0x290 [ 123.995997][ T5873] __x64_sys_sendmsg+0x19b/0x260 [ 124.002906][ T5873] ? _raw_spin_unlock_irq+0x2e/0x50 [ 124.010311][ T5873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.017698][ T5873] ? rcu_is_watching+0x15/0xb0 [ 124.027250][ T5873] do_syscall_64+0xfa/0x3b0 [ 124.035315][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.046016][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.056290][ T5873] ? clear_bhb_loop+0x60/0xb0 [ 124.065293][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.078868][ T5873] RIP: 0033:0x7f5292762ea9 [ 124.088953][ T5873] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 124.120544][ T5873] RSP: 002b:00007fffa68b5778 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.131564][ T5873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5292762ea9 [ 124.143587][ T5873] RDX: 00000000200400c4 RSI: 0000200000000180 RDI: 0000000000000003 [ 124.153980][ T5873] RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 [ 124.164537][ T5873] R10: 0000200000000180 R11: 0000000000000246 R12: 00007fffa68b57d0 [ 124.175308][ T5873] R13: 00007f52927b03fe R14: 0000000000000003 R15: 00007fffa68b57b0 [ 124.187208][ T5873] [ 124.192771][ T5873] Kernel Offset: disabled [ 124.198411][ T5873] Rebooting in 86400 seconds..