ci-upstream-net-this-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-net-this-kasan-gce/syz-executor2189889590 <...> Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. execve("ci-upstream-net-this-kasan-gce/syz-executor2189889590", ["ci-upstream-net-this-kasan-gce/syz-executor2189889590"], 0x7ffed6f213e0 /* 10 vars */) = 0 brk(NULL) = 0x55555ffdc000 brk(0x55555ffdcd80) = 0x55555ffdcd80 arch_prctl(ARCH_SET_FS, 0x55555ffdc400) = 0 set_tid_address(0x55555ffdc6d0) = 5635 set_robust_list(0x55555ffdc6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-net-this-kasan-gce/syz-executor2189889590", 4096) = 59 getrandom("\xb4\xf8\xcc\xb0\xeb\xd5\x7e\x72", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555ffdcd80 brk(0x55555fffdd80) = 0x55555fffdd80 brk(0x55555fffe000) = 0x55555fffe000 mprotect(0x7f132ac0f000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-this-kasan-gce/strace-static-x86_64: Process 5636 attached , child_tidptr=0x55555ffdc6d0) = 5636 [pid 5635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] set_robust_list(0x55555ffdc6e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5636] getppid() = 0 [pid 5636] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5636] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5636] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5636] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5636] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5636] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5636] unshare(CLONE_NEWNS) = 0 [pid 5636] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5636] unshare(CLONE_NEWIPC) = 0 [pid 5636] unshare(CLONE_NEWCGROUP) = 0 [pid 5636] unshare(CLONE_NEWUTS) = 0 [pid 5636] unshare(CLONE_SYSVSEM) = 0 [pid 5636] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "16777216", 8) = 8 [pid 5636] close(3) = 0 [pid 5636] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "536870912", 9) = 9 [pid 5636] close(3) = 0 [pid 5636] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1024", 4) = 4 [pid 5636] close(3) = 0 [pid 5636] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "8192", 4) = 4 [pid 5636] close(3) = 0 [pid 5636] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1024", 4) = 4 [pid 5636] close(3) = 0 [pid 5636] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1024", 4) = 4 [pid 5636] close(3) = 0 [pid 5636] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5636] close(3) = 0 [pid 5636] getpid() = 1 [pid 5636] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< {parent_tid=[2]}, 88) = 2 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5667] set_robust_list(0x7f132ab389a0, 24) = 0 [pid 5667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5667] close(-1) = -1 EBADF (Bad file descriptor) [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = 1 [pid 5667] socket(AF_INET, SOCK_STREAM, IPPROTO_SCTP [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... socket resumed>) = 3 [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5667] socket(AF_UNIX, SOCK_STREAM, 0 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... socket resumed>) = 4 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5667] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER [pid 5636] <... futex resumed>) = 0 [pid 5667] <... socket resumed>) = 5 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5667] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 5636] <... futex resumed>) = 0 [pid 5667] <... socket resumed>) = 6 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] socket(AF_UNIX, SOCK_SEQPACKET, 0 [pid 5636] <... futex resumed>) = 0 [pid 5667] <... socket resumed>) = 7 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL) [pid 5636] <... futex resumed>) = 0 [pid 5667] <... socket resumed>) = 8 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = 1 [pid 5667] socket(AF_XDP, SOCK_RAW, 0 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... socket resumed>) = 9 [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] <... futex resumed>) = 0 [pid 5667] setsockopt(9, SOL_XDP, XDP_UMEM_REG, "\x00\x00\x10\x00\x00\x20\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... setsockopt resumed>) = 0 [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] setsockopt(9, SOL_XDP, XDP_TX_RING, [16], 4) = 0 [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = 1 [pid 5667] setsockopt(9, SOL_XDP, XDP_UMEM_COMPLETION_RING, [16], 4 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... setsockopt resumed>) = 0 [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] <... futex resumed>) = 0 [pid 5667] setsockopt(9, SOL_XDP, XDP_UMEM_FILL_RING, [16], 4 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... setsockopt resumed>) = 0 [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5667] <... futex resumed>) = 1 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] ioctl(7, SIOCGIFINDEX, {ifr_name="tunl0" [pid 5636] <... futex resumed>) = 0 [pid 5667] <... ioctl resumed>, ifr_ifindex=2}) = 0 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5667] bind(9, {sa_family=AF_XDP, sxdp_flags=XDP_COPY, sxdp_ifindex=if_nametoindex("bond0"), sxdp_queue_id=0, sxdp_shared_umem_fd=0x9}, 16 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... bind resumed>) = 0 [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5667] <... futex resumed>) = 1 [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] mmap(0x200000000000, 4096, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED, 9, 0x80000000 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... mmap resumed>) = 0x200000000000 [pid 5667] futex(0x7f132ac15b8c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5667] futex(0x7f132ac15b88, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] futex(0x7f132ac15b88, FUTEX_WAKE_PRIVATE, 1000000 [pid 5667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] <... futex resumed>) = 0 [pid 5667] pselect6(64, [], NULL, [0 1 2 3 4 5 6 7 8 9], NULL, NULL [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5636] futex(0x7f132ac15b8c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f132aaf7000 [pid 5636] mprotect(0x7f132aaf8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f132ab17990, parent_tid=0x7f132ab17990, exit_signal=0, stack=0x7f132aaf7000, stack_size=0x202c0, tls=0x7f132ab176c0}ci-upstream-net-this-kasan-gce/strace-static-x86_64: Process 5668 attached [pid 5668] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5636] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 5668] <... rseq resumed>) = 0 [pid 5668] set_robust_list(0x7f132ab179a0, 24) = 0 [pid 5668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5668] futex(0x7f132ac15b98, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=24, cmsg_level=0x10 /* SOL_??? */, cmsg_type=0, cmsg_data="\x00\x00\x00\x00\x00\x00\x00\x00"}], msg_controllen=24, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... futex resumed>) = 1 [pid 5668] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] <... futex resumed>) = 1 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 5668] <... futex resumed>) = 1 [pid 5668] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=19, insns=NULL, license="GPL", log_level=13, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_ANY_ALIGNMENT|BPF_F_TEST_STATE_FREQ|BPF_F_XDP_HAS_FRAGS, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, core_relo_cnt=0, fd_array=NULL, core_relos=NULL, core_relo_rec_size=16, log_true_size=0, prog_token_fd=0}, 148) = -1 EFAULT (Bad address) [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5668] futex(0x7f132ac15b98, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] <... futex resumed>) = 0 [pid 5668] socket(AF_VSOCK, SOCK_SEQPACKET, 0 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... socket resumed>) = 10 [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 95.094038][ T5667] ------------[ cut here ]------------ [ 95.094055][ T5667] len > ((int)(~0U >> 1)) [ 95.094069][ T5667] WARNING: ./include/linux/skbuff.h:2864 at ipip_tunnel_xmit+0x330/0x4c0, CPU#0: syz-executor218/5667 [ 95.115549][ T5667] Modules linked in: [ 95.119717][ T5667] CPU: 0 UID: 0 PID: 5667 Comm: syz-executor218 Not tainted syzkaller #0 PREEMPT(full) [ 95.129528][ T5667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [pid 5668] futex(0x7f132ac15b98, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = 0 [ 95.139671][ T5667] RIP: 0010:ipip_tunnel_xmit+0x330/0x4c0 [ 95.145406][ T5667] Code: ff ff ff 4d 8d bd 4c 0f 00 00 e8 0b b8 5b f7 4c 89 f7 4c 89 ee 4c 89 fa 89 e9 e8 fb b5 fc ff e9 28 ff ff ff e8 f1 b7 5b f7 90 <0f> 0b 90 e9 cc fd ff ff 44 89 e7 44 89 fe e8 ed b9 5b f7 45 39 fc [ 95.165092][ T5667] RSP: 0018:ffffc90003d17298 EFLAGS: 00010293 [ 95.171231][ T5667] RAX: ffffffff8a6c1a8f RBX: dffffc0000000000 RCX: ffff88807e749f40 [ 95.179236][ T5667] RDX: 0000000000000000 RSI: 00000000ffffff40 RDI: 0000000000000000 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = 1 [pid 5668] socket(AF_VSOCK, SOCK_SEQPACKET, 0) = 11 [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] futex(0x7f132ac15b98, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] ioctl(-1, TUNSETIFF, 0 [pid 5636] <... futex resumed>) = 0 [pid 5668] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5668] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5636] <... futex resumed>) = 0 [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] write(-1, NULL, 206336 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5668] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] futex(0x7f132ac15b98, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = 1 [pid 5668] mmap(0x200000000000, 12288, PROT_READ|PROT_GROWSUP, MAP_PRIVATE|MAP_FIXED, -1, 0 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] openat(AT_FDCWD, NULL, O_RDWR|O_PATH [pid 5636] <... futex resumed>) = 0 [ 95.187309][ T5667] RBP: 0000000000000000 R08: ffff88807e749f40 R09: 0000000000000002 [ 95.195345][ T5667] R10: 0000000000004888 R11: ffffffff8a6c1760 R12: 00000000ffffff40 [ 95.203495][ T5667] R13: ffff888023708498 R14: ffff8880237083c0 R15: 0000000000000000 [ 95.211532][ T5667] FS: 00007f132ab386c0(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 95.220557][ T5667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.227187][ T5667] CR2: 00002000000000c0 CR3: 0000000072606000 CR4: 00000000003526f0 [ 95.235248][ T5667] Call Trace: [ 95.238583][ T5667] [pid 5668] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5668] futex(0x7f132ac15b98, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] <... futex resumed>) = 0 [pid 5668] openat(-1, NULL, O_RDONLY [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] futex(0x7f132ac15b98, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f132ac15b98, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = 1 [pid 5668] ioctl(-1, BTRFS_IOC_CLONE or FICLONE, -1 [pid 5636] futex(0x7f132ac15b9c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 5668] futex(0x7f132ac15b9c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5668] <... futex resumed>) = 0 [ 95.241584][ T5667] ? __dev_direct_xmit+0x33c/0x730 [ 95.246752][ T5667] __dev_direct_xmit+0x4b6/0x730 [ 95.251806][ T5667] ? __pfx___dev_direct_xmit+0x10/0x10 [ 95.257333][ T5667] ? do_raw_spin_unlock+0xf5/0x200 [ 95.262541][ T5667] ? skb_put+0x112/0x210 [ 95.266837][ T5667] xsk_generic_xmit+0x272b/0x4730 [ 95.271936][ T5667] ? __lock_acquire+0x747/0x2de0 [ 95.276948][ T5667] ? xsk_generic_xmit+0x107/0x4730 [ 95.282236][ T5667] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 95.287731][ T5667] ? xsk_poll+0xa6/0x670 [ 95.292036][ T5667] ? xsk_poll+0xa6/0x670 [ 95.296304][ T5667] xsk_poll+0x326/0x670 [ 95.300518][ T5667] ? xsk_poll+0xa6/0x670 [ 95.304786][ T5667] sock_poll+0x338/0x3f0 [ 95.309059][ T5667] ? __pfx_sock_poll+0x10/0x10 [ 95.313882][ T5667] do_select+0x1067/0x17f0 [ 95.318338][ T5667] ? do_select+0xc61/0x17f0 [ 95.322926][ T5667] ? __pfx_do_select+0x10/0x10 [ 95.327717][ T5667] ? __lock_acquire+0x747/0x2de0 [ 95.332715][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.337422][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.342188][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.346900][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.351647][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.356382][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.361147][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.365878][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.370640][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.375444][ T5667] core_sys_select+0x86d/0xb40 [ 95.380297][ T5667] ? __lock_acquire+0x747/0x2de0 [ 95.385274][ T5667] ? __pfx_core_sys_select+0x10/0x10 [ 95.390640][ T5667] ? __pfx_set_user_sigmask+0x10/0x10 [ 95.396062][ T5667] __se_sys_pselect6+0x267/0x320 [ 95.401058][ T5667] ? __pfx___se_sys_pselect6+0x10/0x10 [ 95.406548][ T5667] ? __x64_sys_pselect6+0x21/0xf0 [ 95.411641][ T5667] do_syscall_64+0x166/0x520 [ 95.416265][ T5667] ? trace_irq_disable+0x3b/0x140 [ 95.421347][ T5667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.427447][ T5667] ? clear_bhb_loop+0x70/0xc0 [ 95.432178][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.438108][ T5667] RIP: 0033:0x7f132ab64069 [ 95.442601][ T5667] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 95.462291][ T5667] RSP: 002b:00007f132ab381c8 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 95.470785][ T5667] RAX: ffffffffffffffda RBX: 00007f132ac15b88 RCX: 00007f132ab64069 [ 95.478795][ T5667] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 95.486863][ T5667] RBP: 00007f132ac15b80 R08: 0000000000000000 R09: 0000000000000000 [ 95.494918][ T5667] R10: 0000200000000040 R11: 0000000000000246 R12: 00007f132abe0028 [ 95.502971][ T5667] R13: 0000200000000000 R14: 0000200000000450 R15: 0000200000000440 [ 95.511029][ T5667] [ 95.514094][ T5667] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.521421][ T5667] CPU: 0 UID: 0 PID: 5667 Comm: syz-executor218 Not tainted syzkaller #0 PREEMPT(full) [ 95.531169][ T5667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.541257][ T5667] Call Trace: [ 95.544559][ T5667] [ 95.547510][ T5667] vpanic+0x56d/0xa60 [ 95.551524][ T5667] ? __pfx__printk+0x10/0x10 [ 95.556127][ T5667] ? __pfx_vpanic+0x10/0x10 [ 95.560660][ T5667] ? is_bpf_text_address+0x292/0x2b0 [ 95.565984][ T5667] ? is_bpf_text_address+0x26/0x2b0 [ 95.571220][ T5667] panic+0xc5/0xd0 [ 95.574967][ T5667] ? __pfx_panic+0x10/0x10 [ 95.579420][ T5667] __warn+0x315/0x4c0 [ 95.583431][ T5667] ? ipip_tunnel_xmit+0x330/0x4c0 [ 95.588479][ T5667] ? ipip_tunnel_xmit+0x330/0x4c0 [ 95.593520][ T5667] __report_bug+0x276/0x570 [ 95.598070][ T5667] ? ipip_tunnel_xmit+0x330/0x4c0 [ 95.603115][ T5667] ? __pfx___report_bug+0x10/0x10 [ 95.608184][ T5667] ? skb_network_protocol+0x234/0x400 [ 95.613583][ T5667] ? netif_skb_features+0xb7a/0x1410 [ 95.618917][ T5667] ? netif_skb_features+0xc83/0x1410 [ 95.624253][ T5667] ? ipip_tunnel_xmit+0x330/0x4c0 [ 95.629308][ T5667] report_bug+0x16b/0x220 [ 95.633671][ T5667] ? ipip_tunnel_xmit+0x330/0x4c0 [ 95.638726][ T5667] ? ipip_tunnel_xmit+0x332/0x4c0 [ 95.643772][ T5667] handle_bug+0x9c/0x200 [ 95.648050][ T5667] exc_invalid_op+0x1a/0x50 [ 95.652590][ T5667] asm_exc_invalid_op+0x1a/0x20 [ 95.657468][ T5667] RIP: 0010:ipip_tunnel_xmit+0x330/0x4c0 [ 95.663150][ T5667] Code: ff ff ff 4d 8d bd 4c 0f 00 00 e8 0b b8 5b f7 4c 89 f7 4c 89 ee 4c 89 fa 89 e9 e8 fb b5 fc ff e9 28 ff ff ff e8 f1 b7 5b f7 90 <0f> 0b 90 e9 cc fd ff ff 44 89 e7 44 89 fe e8 ed b9 5b f7 45 39 fc [ 95.682781][ T5667] RSP: 0018:ffffc90003d17298 EFLAGS: 00010293 [ 95.688875][ T5667] RAX: ffffffff8a6c1a8f RBX: dffffc0000000000 RCX: ffff88807e749f40 [ 95.696881][ T5667] RDX: 0000000000000000 RSI: 00000000ffffff40 RDI: 0000000000000000 [ 95.704885][ T5667] RBP: 0000000000000000 R08: ffff88807e749f40 R09: 0000000000000002 [ 95.712883][ T5667] R10: 0000000000004888 R11: ffffffff8a6c1760 R12: 00000000ffffff40 [ 95.720874][ T5667] R13: ffff888023708498 R14: ffff8880237083c0 R15: 0000000000000000 [ 95.728878][ T5667] ? __pfx_ipip_tunnel_xmit+0x10/0x10 [ 95.734285][ T5667] ? ipip_tunnel_xmit+0x32f/0x4c0 [ 95.739361][ T5667] ? ipip_tunnel_xmit+0x32f/0x4c0 [ 95.744446][ T5667] ? __dev_direct_xmit+0x33c/0x730 [ 95.749607][ T5667] __dev_direct_xmit+0x4b6/0x730 [ 95.754593][ T5667] ? __pfx___dev_direct_xmit+0x10/0x10 [ 95.760087][ T5667] ? do_raw_spin_unlock+0xf5/0x200 [ 95.765228][ T5667] ? skb_put+0x112/0x210 [ 95.769500][ T5667] xsk_generic_xmit+0x272b/0x4730 [ 95.774558][ T5667] ? __lock_acquire+0x747/0x2de0 [ 95.779539][ T5667] ? xsk_generic_xmit+0x107/0x4730 [ 95.784672][ T5667] ? __pfx_xsk_generic_xmit+0x10/0x10 [ 95.790066][ T5667] ? xsk_poll+0xa6/0x670 [ 95.794326][ T5667] ? xsk_poll+0xa6/0x670 [ 95.798583][ T5667] xsk_poll+0x326/0x670 [ 95.802759][ T5667] ? xsk_poll+0xa6/0x670 [ 95.807038][ T5667] sock_poll+0x338/0x3f0 [ 95.811321][ T5667] ? __pfx_sock_poll+0x10/0x10 [ 95.816118][ T5667] do_select+0x1067/0x17f0 [ 95.820557][ T5667] ? do_select+0xc61/0x17f0 [ 95.825117][ T5667] ? __pfx_do_select+0x10/0x10 [ 95.829910][ T5667] ? __lock_acquire+0x747/0x2de0 [ 95.834980][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.839696][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.844410][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.849121][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.853830][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.858573][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.863357][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.868070][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.872778][ T5667] ? __pfx_pollwake+0x10/0x10 [ 95.877503][ T5667] core_sys_select+0x86d/0xb40 [ 95.882291][ T5667] ? __lock_acquire+0x747/0x2de0 [ 95.887780][ T5667] ? __pfx_core_sys_select+0x10/0x10 [ 95.893370][ T5667] ? __pfx_set_user_sigmask+0x10/0x10 [ 95.898862][ T5667] __se_sys_pselect6+0x267/0x320 [ 95.903828][ T5667] ? __pfx___se_sys_pselect6+0x10/0x10 [ 95.909319][ T5667] ? __x64_sys_pselect6+0x21/0xf0 [ 95.914368][ T5667] do_syscall_64+0x166/0x520 [ 95.918978][ T5667] ? trace_irq_disable+0x3b/0x140 [ 95.924017][ T5667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.930103][ T5667] ? clear_bhb_loop+0x70/0xc0 [ 95.934800][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.940723][ T5667] RIP: 0033:0x7f132ab64069 [ 95.945158][ T5667] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 95.964774][ T5667] RSP: 002b:00007f132ab381c8 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 95.973203][ T5667] RAX: ffffffffffffffda RBX: 00007f132ac15b88 RCX: 00007f132ab64069 [ 95.981188][ T5667] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 95.989165][ T5667] RBP: 00007f132ac15b80 R08: 0000000000000000 R09: 0000000000000000 [ 95.997167][ T5667] R10: 0000200000000040 R11: 0000000000000246 R12: 00007f132abe0028 [ 96.005154][ T5667] R13: 0000200000000000 R14: 0000200000000450 R15: 0000200000000440 [ 96.013152][ T5667] [ 96.016770][ T5667] Kernel Offset: disabled [ 96.021107][ T5667] Rebooting in 86400 seconds..