ci-upstream-net-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-net-kasan-gce/syz-executor2766991319 <...> Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. execve("ci-upstream-net-kasan-gce/syz-executor2766991319", ["ci-upstream-net-kasan-gce/syz-executor2766991319"], 0x7ffce470e870 /* 10 vars */) = 0 brk(NULL) = 0x555585768000 brk(0x555585768d80) = 0x555585768d80 arch_prctl(ARCH_SET_FS, 0x555585768400) = 0 set_tid_address(0x5555857686d0) = 5619 set_robust_list(0x5555857686e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-net-kasan-gce/syz-executor2766991319", 4096) = 54 getrandom("\xfe\x36\xcc\x6f\x82\x61\x30\xf2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555585768d80 brk(0x555585789d80) = 0x555585789d80 brk(0x55558578a000) = 0x55558578a000 mprotect(0x7f41cf5e8000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5620 attached [pid 5620] set_robust_list(0x5555857686e0, 24 [pid 5619] <... clone resumed>, child_tidptr=0x5555857686d0) = 5620 [pid 5620] <... set_robust_list resumed>) = 0 [pid 5619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5620] getppid() = 0 [pid 5620] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5620] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5620] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5620] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5620] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5620] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5620] unshare(CLONE_NEWNS) = 0 [pid 5620] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5620] unshare(CLONE_NEWIPC) = 0 [pid 5620] unshare(CLONE_NEWCGROUP) = 0 [pid 5620] unshare(CLONE_NEWUTS) = 0 [pid 5620] unshare(CLONE_SYSVSEM) = 0 [pid 5620] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "16777216", 8) = 8 [pid 5620] close(3) = 0 [pid 5620] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "536870912", 9) = 9 [pid 5620] close(3) = 0 [pid 5620] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "1024", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "8192", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "1024", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "1024", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5620] close(3) = 0 [pid 5620] getpid() = 1 [pid 5620] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5656] set_robust_list(0x5555857686e0, 24 [pid 5620] <... clone resumed>, child_tidptr=0x5555857686d0) = 2 [pid 5656] <... set_robust_list resumed>) = 0 [pid 5656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5620] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] <... prctl resumed>) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] write(1, "executing program\n", 18) = 18 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5656] rt_sigaction(SIGRT_1, {sa_handler=0x7f41cf552650, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f41cf544920}, NULL, 8) = 0 [pid 5656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f41cf4f1000 [pid 5656] mprotect(0x7f41cf4f2000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f41cf511990, parent_tid=0x7f41cf511990, exit_signal=0, stack=0x7f41cf4f1000, stack_size=0x202c0, tls=0x7f41cf5116c0}ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5657 attached => {parent_tid=[3]}, 88) = 3 [pid 5656] rt_sigprocmask(SIG_SETMASK, [] [pid 5657] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5657] <... rseq resumed>) = 0 [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] set_robust_list(0x7f41cf5119a0, 24 [pid 5656] <... futex resumed>) = 0 [pid 5657] <... set_robust_list resumed>) = 0 [pid 5657] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5657] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] futex(0x7f41cf5eeb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5657] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL) [pid 5656] <... futex resumed>) = 0 [pid 5657] <... socket resumed>) = 4 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7f41cf5eeb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = 1 [pid 5657] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = 0 [pid 5657] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... socket resumed>) = 6 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5657] <... futex resumed>) = 1 [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] socket(AF_XDP, SOCK_RAW, 0 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... socket resumed>) = 7 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5657] <... futex resumed>) = 1 [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] setsockopt(7, SOL_XDP, XDP_UMEM_REG, "\x00\x00\x10\x00\x00\x20\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00", 32) = 0 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] futex(0x7f41cf5eeb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] <... futex resumed>) = 0 [pid 5657] setsockopt(7, SOL_XDP, XDP_TX_RING, [16], 4 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... setsockopt resumed>) = 0 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] futex(0x7f41cf5eeb68, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] setsockopt(7, SOL_XDP, XDP_UMEM_COMPLETION_RING, [16], 4 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... setsockopt resumed>) = 0 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5657] futex(0x7f41cf5eeb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = 1 [pid 5657] setsockopt(7, SOL_XDP, XDP_UMEM_FILL_RING, [16], 4 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... setsockopt resumed>) = 0 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5657] socketpair(AF_UNIX, SOCK_SEQPACKET, 0 [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... socketpair resumed>, [8, 9]) = 0 [pid 5656] <... futex resumed>) = 0 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7f41cf5eeb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5657] ioctl(8, SIOCGIFINDEX, {ifr_name="ip6tnl0" [pid 5656] <... futex resumed>) = 1 [pid 5657] <... ioctl resumed>, ifr_ifindex=9}) = 0 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5657] futex(0x7f41cf5eeb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5657] bind(7, {sa_family=AF_XDP, sxdp_flags=XDP_COPY, sxdp_ifindex=if_nametoindex("wlan1"), sxdp_queue_id=0}, 16 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] <... bind resumed>) = 0 [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5657] <... futex resumed>) = 1 [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] mmap(0x200000000000, 4096, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED, 7, 0x80000000 [pid 5656] <... futex resumed>) = 0 [pid 5657] <... mmap resumed>) = 0x200000000000 [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5657] futex(0x7f41cf5eeb6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] futex(0x7f41cf5eeb68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] futex(0x7f41cf5eeb68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = 1 [pid 5657] pselect6(64, [], NULL, [0 1 2 3 4 5 6 7 8 9], NULL, NULL [pid 5656] futex(0x7f41cf5eeb6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5656] futex(0x7f41cf5eeb7c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f41cf4d0000 [pid 5656] mprotect(0x7f41cf4d1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f41cf4f0990, parent_tid=0x7f41cf4f0990, exit_signal=0, stack=0x7f41cf4d0000, stack_size=0x202c0, tls=0x7f41cf4f06c0}ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5658 attached => {parent_tid=[4]}, 88) = 4 [pid 5658] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5658] set_robust_list(0x7f41cf4f09a0, 24 [pid 5656] rt_sigprocmask(SIG_SETMASK, [] [pid 5658] <... set_robust_list resumed>) = 0 [pid 5656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5658] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] futex(0x7f41cf5eeb78, FUTEX_WAKE_PRIVATE, 1000000 [pid 5658] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] <... futex resumed>) = 0 [pid 5658] sendmsg(5, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=0x000008}, msg_namelen=12, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE}, 0) = -1 EFAULT (Bad address) [pid 5656] futex(0x7f41cf5eeb7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5658] futex(0x7f41cf5eeb7c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5658] <... futex resumed>) = 0 [pid 5656] futex(0x7f41cf5eeb78, FUTEX_WAKE_PRIVATE, 1000000 [pid 5658] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base={nlmsg_len=0, nlmsg_type=0 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=0}, iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 5656] <... futex resumed>) = 0 [pid 5656] futex(0x7f41cf5eeb7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5658] <... sendmsg resumed>) = 52 [pid 5658] futex(0x7f41cf5eeb7c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5658] <... futex resumed>) = 1 [ 84.643388][ T5657] ------------[ cut here ]------------ [ 84.649447][ T5657] len > ((int)(~0U >> 1)) [ 84.649471][ T5657] WARNING: ./include/linux/skbuff.h:2864 at ip6_tnl_start_xmit+0x1066/0x1540, CPU#1: syz-executor276/5657 [ 84.665183][ T5657] Modules linked in: [ 84.669176][ T5657] CPU: 1 UID: 0 PID: 5657 Comm: syz-executor276 Not tainted syzkaller #0 PREEMPT(full) [ 84.678941][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.689050][ T5657] RIP: 0010:ip6_tnl_start_xmit+0x1066/0x1540 [ 84.695086][ T5657] Code: f7 be 03 00 00 00 ba 04 00 00 00 e8 24 54 b2 ff 48 8b 5c 24 18 e9 23 ff ff ff e8 75 77 2d f7 e9 19 ff ff ff e8 6b 77 2d f7 90 <0f> 0b 90 e9 2c f1 ff ff 44 89 e7 44 89 fe e8 17 79 2d f7 45 39 fc [ 84.714729][ T5657] RSP: 0018:ffffc90003a5f180 EFLAGS: 00010293 [ 84.720807][ T5657] RAX: ffffffff8a9989f5 RBX: 1ffff1100fe35a3e RCX: ffff88807ceadd00 [ 84.728820][ T5657] RDX: 0000000000000000 RSI: 00000000ffffffc0 RDI: 0000000000000000 [ 84.736849][ T5657] RBP: ffffc90003a5f2d0 R08: ffff88807ceadd00 R09: 0000000000000002 [ 84.744855][ T5657] R10: 0000000000004888 R11: ffffffff8a997990 R12: 00000000ffffffc0 [ 84.752862][ T5657] R13: dffffc0000000000 R14: ffff88807f1ad218 R15: 0000000000000000 [ 84.760847][ T5657] FS: 00007f41cf5116c0(0000) GS:ffff88812504a000(0000) knlGS:0000000000000000 [ 84.769814][ T5657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.776431][ T5657] CR2: 0000000000000008 CR3: 00000000780de000 CR4: 00000000003526f0 [ 84.784433][ T5657] Call Trace: [ 84.787714][ T5657] [ 84.790646][ T5657] ? __pfx_ip6_tnl_start_xmit+0x10/0x10 [ 84.796241][ T5657] ? validate_xmit_skb+0xcac/0x14f0 [ 84.801450][ T5657] ? validate_xmit_xfrm+0x5d/0x1120 [ 84.806710][ T5657] ? __dev_direct_xmit+0x33c/0x730 [ 84.811868][ T5657] __dev_direct_xmit+0x4b6/0x730 [ 84.816813][ T5657] ? __pfx___dev_direct_xmit+0x10/0x10 [ 84.822306][ T5657] ? do_raw_spin_unlock+0xf5/0x210 [ 84.827426][ T5657] ? skb_put+0x112/0x210 [ 84.831663][ T5657] xsk_generic_xmit+0x272b/0x4730 [ 84.836827][ T5657] ? __lock_acquire+0x683/0x2cf0 [ 84.841820][ T5657] ? xsk_generic_xmit+0x107/0x4730 [ 84.846946][ T5657] ? xsk_poll+0xa6/0x670 [ 84.851202][ T5657] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 84.856636][ T5657] ? xsk_poll+0xa6/0x670 [ 84.860879][ T5657] ? xsk_poll+0xa6/0x670 [ 84.865257][ T5657] xsk_poll+0x326/0x670 [ 84.869452][ T5657] ? xsk_poll+0xa6/0x670 [ 84.873732][ T5657] sock_poll+0x338/0x3f0 [ 84.878008][ T5657] ? __pfx_sock_poll+0x10/0x10 [ 84.882819][ T5657] do_select+0x1067/0x17f0 [ 84.887249][ T5657] ? do_select+0xb81/0x17f0 [ 84.891808][ T5657] ? __pfx_do_select+0x10/0x10 [ 84.896580][ T5657] ? trace_sched_exit_tp+0x3a/0x130 [ 84.901819][ T5657] ? __lock_acquire+0x683/0x2cf0 [ 84.906765][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.911458][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.916178][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.920894][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.925617][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.930303][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.935023][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.939729][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.944431][ T5657] ? __pfx_pollwake+0x10/0x10 [ 84.949119][ T5657] core_sys_select+0x86d/0xb40 [ 84.954043][ T5657] ? __lock_acquire+0x683/0x2cf0 [ 84.959002][ T5657] ? __pfx_core_sys_select+0x10/0x10 [ 84.964370][ T5657] ? __pfx_set_user_sigmask+0x10/0x10 [ 84.969764][ T5657] __se_sys_pselect6+0x267/0x320 [ 84.974756][ T5657] ? __pfx___se_sys_pselect6+0x10/0x10 [ 84.980243][ T5657] ? __x64_sys_pselect6+0x21/0xf0 [ 84.985304][ T5657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.991404][ T5657] do_syscall_64+0x174/0x580 [ 84.996029][ T5657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.002138][ T5657] ? clear_bhb_loop+0x70/0xc0 [ 85.006833][ T5657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.012761][ T5657] RIP: 0033:0x7f41cf53d5e9 [ 85.017191][ T5657] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 85.036925][ T5657] RSP: 002b:00007f41cf5111c8 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 85.045407][ T5657] RAX: ffffffffffffffda RBX: 00007f41cf5eeb68 RCX: 00007f41cf53d5e9 [ 85.053428][ T5657] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 85.061406][ T5657] RBP: 00007f41cf5eeb60 R08: 0000000000000000 R09: 0000000000000000 [ 85.069407][ T5657] R10: 0000200000000040 R11: 0000000000000246 R12: 00007f41cf5bf9b0 [ 85.077406][ T5657] R13: 0000200000000000 R14: 00002000000006d0 R15: 00002000000006c0 [ 85.085427][ T5657] [ 85.088458][ T5657] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.095744][ T5657] CPU: 1 UID: 0 PID: 5657 Comm: syz-executor276 Not tainted syzkaller #0 PREEMPT(full) [ 85.105447][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.115498][ T5657] Call Trace: [ 85.118780][ T5657] [ 85.121710][ T5657] vpanic+0x56c/0xa60 [ 85.125724][ T5657] ? __pfx__printk+0x10/0x10 [ 85.130320][ T5657] ? __pfx_vpanic+0x10/0x10 [ 85.134826][ T5657] ? is_bpf_text_address+0x292/0x2b0 [ 85.140115][ T5657] ? is_bpf_text_address+0x26/0x2b0 [ 85.145339][ T5657] panic+0xc5/0xd0 [ 85.149060][ T5657] ? __pfx_panic+0x10/0x10 [ 85.153478][ T5657] __warn+0x315/0x4c0 [ 85.157451][ T5657] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 85.162815][ T5657] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 85.168174][ T5657] __report_bug+0x276/0x570 [ 85.172671][ T5657] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 85.178032][ T5657] ? __pfx___report_bug+0x10/0x10 [ 85.183058][ T5657] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 85.188422][ T5657] report_bug+0x16a/0x220 [ 85.192745][ T5657] ? ip6_tnl_start_xmit+0x1066/0x1540 [ 85.198104][ T5657] ? ip6_tnl_start_xmit+0x1068/0x1540 [ 85.203459][ T5657] handle_bug+0x9c/0x200 [ 85.207688][ T5657] exc_invalid_op+0x1a/0x50 [ 85.212173][ T5657] asm_exc_invalid_op+0x1a/0x20 [ 85.217010][ T5657] RIP: 0010:ip6_tnl_start_xmit+0x1066/0x1540 [ 85.222978][ T5657] Code: f7 be 03 00 00 00 ba 04 00 00 00 e8 24 54 b2 ff 48 8b 5c 24 18 e9 23 ff ff ff e8 75 77 2d f7 e9 19 ff ff ff e8 6b 77 2d f7 90 <0f> 0b 90 e9 2c f1 ff ff 44 89 e7 44 89 fe e8 17 79 2d f7 45 39 fc [ 85.242575][ T5657] RSP: 0018:ffffc90003a5f180 EFLAGS: 00010293 [ 85.248628][ T5657] RAX: ffffffff8a9989f5 RBX: 1ffff1100fe35a3e RCX: ffff88807ceadd00 [ 85.256587][ T5657] RDX: 0000000000000000 RSI: 00000000ffffffc0 RDI: 0000000000000000 [ 85.264718][ T5657] RBP: ffffc90003a5f2d0 R08: ffff88807ceadd00 R09: 0000000000000002 [ 85.272673][ T5657] R10: 0000000000004888 R11: ffffffff8a997990 R12: 00000000ffffffc0 [ 85.280628][ T5657] R13: dffffc0000000000 R14: ffff88807f1ad218 R15: 0000000000000000 [ 85.288589][ T5657] ? __pfx_ip6_tnl_start_xmit+0x10/0x10 [ 85.294124][ T5657] ? ip6_tnl_start_xmit+0x1065/0x1540 [ 85.299493][ T5657] ? __pfx_ip6_tnl_start_xmit+0x10/0x10 [ 85.305031][ T5657] ? validate_xmit_skb+0xcac/0x14f0 [ 85.310218][ T5657] ? validate_xmit_xfrm+0x5d/0x1120 [ 85.315403][ T5657] ? __dev_direct_xmit+0x33c/0x730 [ 85.320505][ T5657] __dev_direct_xmit+0x4b6/0x730 [ 85.325470][ T5657] ? __pfx___dev_direct_xmit+0x10/0x10 [ 85.330919][ T5657] ? do_raw_spin_unlock+0xf5/0x210 [ 85.336018][ T5657] ? skb_put+0x112/0x210 [ 85.340246][ T5657] xsk_generic_xmit+0x272b/0x4730 [ 85.345260][ T5657] ? __lock_acquire+0x683/0x2cf0 [ 85.350202][ T5657] ? xsk_generic_xmit+0x107/0x4730 [ 85.355321][ T5657] ? xsk_poll+0xa6/0x670 [ 85.359549][ T5657] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 85.364914][ T5657] ? xsk_poll+0xa6/0x670 [ 85.369139][ T5657] ? xsk_poll+0xa6/0x670 [ 85.373369][ T5657] xsk_poll+0x326/0x670 [ 85.377509][ T5657] ? xsk_poll+0xa6/0x670 [ 85.381739][ T5657] sock_poll+0x338/0x3f0 [ 85.385976][ T5657] ? __pfx_sock_poll+0x10/0x10 [ 85.390725][ T5657] do_select+0x1067/0x17f0 [ 85.395133][ T5657] ? do_select+0xb81/0x17f0 [ 85.399634][ T5657] ? __pfx_do_select+0x10/0x10 [ 85.404384][ T5657] ? trace_sched_exit_tp+0x3a/0x130 [ 85.409570][ T5657] ? __lock_acquire+0x683/0x2cf0 [ 85.414502][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.419165][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.423829][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.428490][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.433152][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.437816][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.442479][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.447144][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.451808][ T5657] ? __pfx_pollwake+0x10/0x10 [ 85.456483][ T5657] core_sys_select+0x86d/0xb40 [ 85.461228][ T5657] ? __lock_acquire+0x683/0x2cf0 [ 85.466159][ T5657] ? __pfx_core_sys_select+0x10/0x10 [ 85.471443][ T5657] ? __pfx_set_user_sigmask+0x10/0x10 [ 85.476806][ T5657] __se_sys_pselect6+0x267/0x320 [ 85.481737][ T5657] ? __pfx___se_sys_pselect6+0x10/0x10 [ 85.487186][ T5657] ? __x64_sys_pselect6+0x21/0xf0 [ 85.492192][ T5657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.498254][ T5657] do_syscall_64+0x174/0x580 [ 85.502835][ T5657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.508887][ T5657] ? clear_bhb_loop+0x70/0xc0 [ 85.513555][ T5657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.519439][ T5657] RIP: 0033:0x7f41cf53d5e9 [ 85.523841][ T5657] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 85.543525][ T5657] RSP: 002b:00007f41cf5111c8 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 85.551934][ T5657] RAX: ffffffffffffffda RBX: 00007f41cf5eeb68 RCX: 00007f41cf53d5e9 [ 85.559892][ T5657] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 85.567845][ T5657] RBP: 00007f41cf5eeb60 R08: 0000000000000000 R09: 0000000000000000 [ 85.575801][ T5657] R10: 0000200000000040 R11: 0000000000000246 R12: 00007f41cf5bf9b0 [ 85.583756][ T5657] R13: 0000200000000000 R14: 00002000000006d0 R15: 00002000000006c0 [ 85.591729][ T5657] [ 85.595076][ T5657] Kernel Offset: disabled [ 85.599392][ T5657] Rebooting in 86400 seconds..