./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4101378022 <...> Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. execve("./syz-executor4101378022", ["./syz-executor4101378022"], 0x7ffcc6831480 /* 10 vars */) = 0 brk(NULL) = 0x55555a160000 brk(0x55555a160d00) = 0x55555a160d00 arch_prctl(ARCH_SET_FS, 0x55555a160380) = 0 set_tid_address(0x55555a160650) = 5854 set_robust_list(0x55555a160660, 24) = 0 rseq(0x55555a160ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4101378022", 4096) = 28 getrandom("\x84\x0d\x7f\x00\x4a\x38\x96\x86", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555a160d00 brk(0x55555a181d00) = 0x55555a181d00 brk(0x55555a182000) = 0x55555a182000 mprotect(0x7ffb36c32000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached , child_tidptr=0x55555a160650) = 5855 [pid 5855] set_robust_list(0x55555a160660, 24) = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] getppid() = 0 [pid 5855] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5855] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5855] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5855] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5855] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5855] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5855] unshare(CLONE_NEWNS) = 0 [pid 5855] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5855] unshare(CLONE_NEWIPC) = 0 [pid 5855] unshare(CLONE_NEWCGROUP) = 0 [pid 5855] unshare(CLONE_NEWUTS) = 0 [pid 5855] unshare(CLONE_SYSVSEM) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "16777216", 8) = 8 [pid 5855] close(3) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "536870912", 9) = 9 [pid 5855] close(3) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1024", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "8192", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1024", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1024", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5855] close(3) = 0 [pid 5855] getpid() = 1 [pid 5855] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5874] set_robust_list(0x55555a160660, 24 [pid 5855] <... clone resumed>, child_tidptr=0x55555a160650) = 2 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3) = 0 executing program [pid 5874] write(1, "executing program\n", 18) = 18 [pid 5874] socket(AF_PACKET, SOCK_RAW, htons(0 /* ETH_P_??? */)) = 3 [pid 5874] setsockopt(3, SOL_PACKET, PACKET_VNET_HDR, [-1], 4) = 0 [ 98.254756][ T5874] ------------[ cut here ]------------ [ 98.260384][ T5874] WARNING: CPU: 1 PID: 5874 at ./include/linux/skbuff.h:3032 ipv6_gso_segment+0x15e2/0x21e0 [ 98.270559][ T5874] Modules linked in: [ 98.274571][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: syz-executor410 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 98.286566][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.296693][ T5874] RIP: 0010:ipv6_gso_segment+0x15e2/0x21e0 [ 98.302587][ T5874] Code: ff ff e8 f1 db 80 f7 49 c7 c5 a3 ff ff ff e9 27 fe ff ff e8 e0 db 80 f7 49 c7 c5 a3 ff ff ff e9 16 fe ff ff e8 cf db 80 f7 90 <0f> 0b 90 e9 71 f5 ff ff e8 c1 db 80 f7 e9 d3 00 00 00 e8 b7 db 80 [ 98.322352][ T5874] RSP: 0018:ffffc90003faed00 EFLAGS: 00010293 [ 98.328521][ T5874] RAX: ffffffff8a3f4d21 RBX: ffffffff8de66da0 RCX: ffff888030385a00 [ 98.336614][ T5874] RDX: 0000000000000000 RSI: 00000000000100f4 RDI: 0000000000010000 [ 98.344657][ T5874] RBP: ffffc90003faee30 R08: ffffea0001ff8240 R09: 0000013a000001a7 [ 98.352686][ T5874] R10: ffffea0001ff8240 R11: 0000013a000001a7 R12: 1ffffffff1bccdb4 [ 98.360713][ T5874] R13: ffff8880334eb280 R14: 00000000000100f4 R15: ffff8880334eb350 [ 98.368848][ T5874] FS: 000055555a160380(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 98.377857][ T5874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.384466][ T5874] CR2: 0000200000010000 CR3: 000000007fe76000 CR4: 00000000003526f0 [ 98.392498][ T5874] Call Trace: [ 98.395797][ T5874] [ 98.398830][ T5874] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 98.404255][ T5874] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 98.409701][ T5874] skb_mac_gso_segment+0x31c/0x640 [ 98.414855][ T5874] ? skb_mac_gso_segment+0x17e/0x640 [ 98.420325][ T5874] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 98.426005][ T5874] ? __lock_acquire+0xab9/0xd20 [ 98.430918][ T5874] nsh_gso_segment+0x54a/0xe10 [ 98.435739][ T5874] ? __pfx_nsh_gso_segment+0x10/0x10 [ 98.441091][ T5874] skb_mac_gso_segment+0x31c/0x640 [ 98.446263][ T5874] ? skb_mac_gso_segment+0x17e/0x640 [ 98.451626][ T5874] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 98.457311][ T5874] __skb_gso_segment+0x342/0x510 [ 98.462332][ T5874] validate_xmit_skb+0x857/0x11b0 [ 98.467406][ T5874] ? __pfx_validate_xmit_skb+0x10/0x10 [ 98.472964][ T5874] validate_xmit_skb_list+0x84/0x120 [ 98.478309][ T5874] sch_direct_xmit+0xd3/0x4b0 [ 98.483005][ T5874] ? __pfx_sch_direct_xmit+0x10/0x10 [ 98.488370][ T5874] __dev_queue_xmit+0x17b6/0x3a70 [ 98.493459][ T5874] ? __dev_queue_xmit+0x27e/0x3a70 [ 98.498654][ T5874] ? __pskb_pull_tail+0xb59/0x15b0 [ 98.503808][ T5874] ? __asan_memcpy+0x40/0x70 [ 98.508466][ T5874] ? __pfx___dev_queue_xmit+0x10/0x10 [ 98.513865][ T5874] ? skb_partial_csum_set+0x107/0x360 [ 98.519331][ T5874] ? virtio_net_hdr_to_skb+0x9e1/0x1490 [ 98.524934][ T5874] ? packet_parse_headers+0x7ff/0xb60 [ 98.530403][ T5874] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 98.536257][ T5874] ? packet_xmit+0x68/0x330 [ 98.540812][ T5874] packet_sendmsg+0x3e16/0x5060 [ 98.545693][ T5874] ? __lock_acquire+0xab9/0xd20 [ 98.550602][ T5874] ? aa_bind_mount+0x140/0x590 [ 98.555413][ T5874] ? __pfx___might_resched+0x10/0x10 [ 98.560777][ T5874] ? __lock_acquire+0xab9/0xd20 [ 98.565657][ T5874] ? kvm_sched_clock_read+0x11/0x20 [ 98.570908][ T5874] ? sched_clock+0x3f/0x60 [ 98.575359][ T5874] ? __pfx_packet_sendmsg+0x10/0x10 [ 98.580624][ T5874] ? aa_sk_perm+0x81e/0x950 [ 98.585156][ T5874] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 98.591650][ T5874] ? __lock_acquire+0xab9/0xd20 [ 98.596526][ T5874] ? aa_sock_msg_perm+0x94/0x160 [ 98.601570][ T5874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 98.606900][ T5874] ? __pfx_packet_sendmsg+0x10/0x10 [ 98.612208][ T5874] __sock_sendmsg+0x21c/0x270 [ 98.616925][ T5874] ____sys_sendmsg+0x505/0x830 [ 98.621782][ T5874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.627128][ T5874] ? import_iovec+0x74/0xa0 [ 98.631717][ T5874] ___sys_sendmsg+0x21f/0x2a0 [ 98.636461][ T5874] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.641768][ T5874] ? do_raw_spin_lock+0x121/0x290 [ 98.646860][ T5874] __x64_sys_sendmsg+0x19b/0x260 [ 98.651868][ T5874] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.657093][ T5874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.662643][ T5874] do_syscall_64+0xfa/0x3b0 [ 98.667173][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.672420][ T5874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.678557][ T5874] ? clear_bhb_loop+0x60/0xb0 [ 98.683262][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.689224][ T5874] RIP: 0033:0x7ffb36bb8ea9 [ 98.693681][ T5874] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.713352][ T5874] RSP: 002b:00007fff4bae10a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.722006][ T5874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ffb36bb8ea9 [ 98.730035][ T5874] RDX: 00000000200400c4 RSI: 0000200000000180 RDI: 0000000000000003 [ 98.738070][ T5874] RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 [ 98.746098][ T5874] R10: 0000200000000180 R11: 0000000000000246 R12: 00007fff4bae1100 [ 98.754226][ T5874] R13: 00007ffb36c063fe R14: 0000000000000003 R15: 00007fff4bae10e0 [ 98.762282][ T5874] [ 98.765312][ T5874] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.772604][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: syz-executor410 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 98.786552][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.796626][ T5874] Call Trace: [ 98.799917][ T5874] [ 98.802864][ T5874] dump_stack_lvl+0x99/0x250 [ 98.807470][ T5874] ? __asan_memcpy+0x40/0x70 [ 98.812069][ T5874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.817286][ T5874] ? __pfx__printk+0x10/0x10 [ 98.821921][ T5874] panic+0x2db/0x790 [ 98.825842][ T5874] ? __pfx_panic+0x10/0x10 [ 98.830969][ T5874] ? show_trace_log_lvl+0x4fb/0x550 [ 98.836207][ T5874] __warn+0x31b/0x4b0 [ 98.840232][ T5874] ? ipv6_gso_segment+0x15e2/0x21e0 [ 98.845454][ T5874] ? ipv6_gso_segment+0x15e2/0x21e0 [ 98.850672][ T5874] report_bug+0x2be/0x4f0 [ 98.855075][ T5874] ? ipv6_gso_segment+0x15e2/0x21e0 [ 98.860284][ T5874] ? ipv6_gso_segment+0x15e2/0x21e0 [ 98.865494][ T5874] ? ipv6_gso_segment+0x15e4/0x21e0 [ 98.870732][ T5874] handle_bug+0x84/0x160 [ 98.874999][ T5874] exc_invalid_op+0x1a/0x50 [ 98.879513][ T5874] asm_exc_invalid_op+0x1a/0x20 [ 98.884372][ T5874] RIP: 0010:ipv6_gso_segment+0x15e2/0x21e0 [ 98.890190][ T5874] Code: ff ff e8 f1 db 80 f7 49 c7 c5 a3 ff ff ff e9 27 fe ff ff e8 e0 db 80 f7 49 c7 c5 a3 ff ff ff e9 16 fe ff ff e8 cf db 80 f7 90 <0f> 0b 90 e9 71 f5 ff ff e8 c1 db 80 f7 e9 d3 00 00 00 e8 b7 db 80 [ 98.909812][ T5874] RSP: 0018:ffffc90003faed00 EFLAGS: 00010293 [ 98.915896][ T5874] RAX: ffffffff8a3f4d21 RBX: ffffffff8de66da0 RCX: ffff888030385a00 [ 98.923890][ T5874] RDX: 0000000000000000 RSI: 00000000000100f4 RDI: 0000000000010000 [ 98.931878][ T5874] RBP: ffffc90003faee30 R08: ffffea0001ff8240 R09: 0000013a000001a7 [ 98.939862][ T5874] R10: ffffea0001ff8240 R11: 0000013a000001a7 R12: 1ffffffff1bccdb4 [ 98.947847][ T5874] R13: ffff8880334eb280 R14: 00000000000100f4 R15: ffff8880334eb350 [ 98.955833][ T5874] ? ipv6_gso_segment+0x15e1/0x21e0 [ 98.961070][ T5874] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 98.966458][ T5874] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 98.971840][ T5874] skb_mac_gso_segment+0x31c/0x640 [ 98.976971][ T5874] ? skb_mac_gso_segment+0x17e/0x640 [ 98.982373][ T5874] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 98.988026][ T5874] ? __lock_acquire+0xab9/0xd20 [ 98.992885][ T5874] nsh_gso_segment+0x54a/0xe10 [ 98.997696][ T5874] ? __pfx_nsh_gso_segment+0x10/0x10 [ 99.003044][ T5874] skb_mac_gso_segment+0x31c/0x640 [ 99.008183][ T5874] ? skb_mac_gso_segment+0x17e/0x640 [ 99.013499][ T5874] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 99.019189][ T5874] __skb_gso_segment+0x342/0x510 [ 99.024184][ T5874] validate_xmit_skb+0x857/0x11b0 [ 99.029231][ T5874] ? __pfx_validate_xmit_skb+0x10/0x10 [ 99.034708][ T5874] validate_xmit_skb_list+0x84/0x120 [ 99.040018][ T5874] sch_direct_xmit+0xd3/0x4b0 [ 99.044715][ T5874] ? __pfx_sch_direct_xmit+0x10/0x10 [ 99.050046][ T5874] __dev_queue_xmit+0x17b6/0x3a70 [ 99.055120][ T5874] ? __dev_queue_xmit+0x27e/0x3a70 [ 99.060248][ T5874] ? __pskb_pull_tail+0xb59/0x15b0 [ 99.065387][ T5874] ? __asan_memcpy+0x40/0x70 [ 99.069998][ T5874] ? __pfx___dev_queue_xmit+0x10/0x10 [ 99.075380][ T5874] ? skb_partial_csum_set+0x107/0x360 [ 99.080901][ T5874] ? virtio_net_hdr_to_skb+0x9e1/0x1490 [ 99.086484][ T5874] ? packet_parse_headers+0x7ff/0xb60 [ 99.091882][ T5874] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 99.097703][ T5874] ? packet_xmit+0x68/0x330 [ 99.102243][ T5874] packet_sendmsg+0x3e16/0x5060 [ 99.107133][ T5874] ? __lock_acquire+0xab9/0xd20 [ 99.112026][ T5874] ? aa_bind_mount+0x140/0x590 [ 99.116848][ T5874] ? __pfx___might_resched+0x10/0x10 [ 99.122154][ T5874] ? __lock_acquire+0xab9/0xd20 [ 99.127039][ T5874] ? kvm_sched_clock_read+0x11/0x20 [ 99.132247][ T5874] ? sched_clock+0x3f/0x60 [ 99.136677][ T5874] ? __pfx_packet_sendmsg+0x10/0x10 [ 99.141887][ T5874] ? aa_sk_perm+0x81e/0x950 [ 99.146400][ T5874] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 99.152842][ T5874] ? __lock_acquire+0xab9/0xd20 [ 99.157708][ T5874] ? aa_sock_msg_perm+0x94/0x160 [ 99.162670][ T5874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.167979][ T5874] ? __pfx_packet_sendmsg+0x10/0x10 [ 99.173211][ T5874] __sock_sendmsg+0x21c/0x270 [ 99.177931][ T5874] ____sys_sendmsg+0x505/0x830 [ 99.182721][ T5874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.188034][ T5874] ? import_iovec+0x74/0xa0 [ 99.192579][ T5874] ___sys_sendmsg+0x21f/0x2a0 [ 99.197277][ T5874] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.202494][ T5874] ? do_raw_spin_lock+0x121/0x290 [ 99.207559][ T5874] __x64_sys_sendmsg+0x19b/0x260 [ 99.212536][ T5874] ? _raw_spin_unlock_irq+0x2e/0x50 [ 99.217753][ T5874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.223271][ T5874] do_syscall_64+0xfa/0x3b0 [ 99.227793][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.233025][ T5874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.239130][ T5874] ? clear_bhb_loop+0x60/0xb0 [ 99.243823][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.249729][ T5874] RIP: 0033:0x7ffb36bb8ea9 [ 99.254149][ T5874] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 99.273775][ T5874] RSP: 002b:00007fff4bae10a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.282219][ T5874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ffb36bb8ea9 [ 99.290208][ T5874] RDX: 00000000200400c4 RSI: 0000200000000180 RDI: 0000000000000003 [ 99.298205][ T5874] RBP: 00000000000f4240 R08: 0000000000000001 R09: 0000000000000001 [ 99.306215][ T5874] R10: 0000200000000180 R11: 0000000000000246 R12: 00007fff4bae1100 [ 99.314201][ T5874] R13: 00007ffb36c063fe R14: 0000000000000003 R15: 00007fff4bae10e0 [ 99.322206][ T5874] [ 99.325633][ T5874] Kernel Offset: disabled [ 99.329971][ T5874] Rebooting in 86400 seconds..