./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor594390972
<...>
forked to background, child pid 3211
[ 32.705466][ T3212] 8021q: adding VLAN 0 to HW filter on device bond0
[ 32.729759][ T3212] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 33.140862][ T3303] sshd (3303) used greatest stack depth: 22376 bytes left
OK
syzkaller
Warning: Permanently added '10.128.1.146' (ECDSA) to the list of known hosts.
execve("./syz-executor594390972", ["./syz-executor594390972"], 0x7ffc6f693490 /* 10 vars */) = 0
brk(NULL) = 0x555556908000
brk(0x555556908c40) = 0x555556908c40
arch_prctl(ARCH_SET_FS, 0x555556908300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor594390972", 4096) = 27
brk(0x555556929c40) = 0x555556929c40
brk(0x55555692a000) = 0x55555692a000
mprotect(0x7f54dd525000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 3
ioctl(3, SIOCSARP, 0x20000500) = 0
socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 4
syzkaller login: [ 55.673175][ T3636] ------------[ cut here ]------------
[ 55.678843][ T3636] memcpy: detected field-spanning write (size 16) of single field "r->arp_ha.sa_data" at net/ipv4/arp.c:1128 (size 14)
[ 55.691708][ T3636] WARNING: CPU: 0 PID: 3636 at net/ipv4/arp.c:1128 arp_ioctl+0x7ef/0x840
[ 55.700180][ T3636] Modules linked in:
[ 55.704071][ T3636] CPU: 0 PID: 3636 Comm: syz-executor594 Not tainted 6.1.0-rc8-syzkaller-00154-g296a7b7eb792 #0
[ 55.714606][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 55.724704][ T3636] RIP: 0010:arp_ioctl+0x7ef/0x840
[ 55.729778][ T3636] Code: fc ff ff e8 03 9c 36 f9 b9 0e 00 00 00 4c 89 e6 48 c7 c2 20 d7 65 8b 48 c7 c7 00 d6 65 8b c6 05 49 ed f2 05 01 e8 70 93 5d 01 <0f> 0b e9 66 fc ff ff e8 d5 9b 36 f9 41 be fa ff ff ff e8 5a 14 6f
[ 55.749438][ T3636] RSP: 0018:ffffc90003b6fa70 EFLAGS: 00010286
[ 55.755501][ T3636] RAX: 0000000000000000 RBX: ffff88807859e828 RCX: 0000000000000000
[ 55.763541][ T3636] RDX: ffff8880225fba80 RSI: ffffffff8165785c RDI: fffff5200076df40
[ 55.771575][ T3636] RBP: 1ffff9200076df54 R08: 0000000000000005 R09: 0000000000000000
[ 55.779614][ T3636] R10: 0000000000000201 R11: 0000000000000000 R12: 0000000000000010
[ 55.787640][ T3636] R13: ffff88807859e800 R14: 0000000000000000 R15: ffff88807859e924
[ 55.795617][ T3636] FS: 0000555556908300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 55.804592][ T3636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.811309][ T3636] CR2: 0000000000458e30 CR3: 0000000073189000 CR4: 00000000003506f0
[ 55.819325][ T3636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.827310][ T3636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.835325][ T3636] Call Trace:
[ 55.838635][ T3636]
[ 55.841565][ T3636] ? arp_req_delete+0x520/0x520
[ 55.846429][ T3636] ? find_held_lock+0x2d/0x110
[ 55.851421][ T3636] inet_ioctl+0x2f9/0x380
[ 55.855805][ T3636] ? ipip_gro_complete+0x100/0x100
[ 55.860956][ T3636] ? lock_downgrade+0x6e0/0x6e0
[ 55.865847][ T3636] ? __kmem_cache_free+0xaf/0x3b0
[ 55.870932][ T3636] ? tomoyo_path_number_perm+0x166/0x550
[ 55.876592][ T3636] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 55.882458][ T3636] sock_do_ioctl+0xcc/0x230
[ 55.886989][ T3636] ? get_user_ifreq+0x250/0x250
[ 55.891896][ T3636] ? vfs_fileattr_set+0xbe0/0xbe0
[ 55.896954][ T3636] sock_ioctl+0x1f8/0x680
[ 55.901368][ T3636] ? br_ioctl_call+0xb0/0xb0
[ 55.905999][ T3636] ? lock_downgrade+0x6e0/0x6e0
[ 55.910959][ T3636] ? bpf_lsm_file_ioctl+0x9/0x10
[ 55.915924][ T3636] ? br_ioctl_call+0xb0/0xb0
[ 55.920590][ T3636] __x64_sys_ioctl+0x197/0x210
[ 55.925383][ T3636] do_syscall_64+0x39/0xb0
[ 55.929851][ T3636] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.935769][ T3636] RIP: 0033:0x7f54dd4b8c79
[ 55.940226][ T3636] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.959880][ T3636] RSP: 002b:00007ffe453afd58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.968332][ T3636] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54dd4b8c79
[ 55.976322][ T3636] RDX: 0000000020000500 RSI: 0000000000008954 RDI: 0000000000000004
[ 55.984338][ T3636] RBP: 00007f54dd47ce20 R08: 0000000000000000 R09: 0000000000000000
[ 55.992354][ T3636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54dd47ceb0
[ 56.000358][ T3636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.008379][ T3636]
[ 56.011395][ T3636] Kernel panic - not syncing: panic_on_warn set ...
[ 56.017967][ T3636] CPU: 0 PID: 3636 Comm: syz-executor594 Not tainted 6.1.0-rc8-syzkaller-00154-g296a7b7eb792 #0
[ 56.028365][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 56.038582][ T3636] Call Trace:
[ 56.041850][ T3636]
[ 56.044773][ T3636] dump_stack_lvl+0xd1/0x138
[ 56.049365][ T3636] panic+0x2cc/0x626
[ 56.053260][ T3636] ? panic_print_sys_info.part.0+0x110/0x110
[ 56.059248][ T3636] ? __warn.cold+0x24b/0x350
[ 56.063840][ T3636] ? arp_ioctl+0x7ef/0x840
[ 56.068264][ T3636] __warn.cold+0x25c/0x350
[ 56.072710][ T3636] ? __wake_up_klogd.part.0+0x99/0xf0
[ 56.078110][ T3636] ? arp_ioctl+0x7ef/0x840
[ 56.082552][ T3636] report_bug+0x1c0/0x210
[ 56.086908][ T3636] handle_bug+0x3c/0x70
[ 56.091091][ T3636] exc_invalid_op+0x18/0x50
[ 56.095619][ T3636] asm_exc_invalid_op+0x1a/0x20
[ 56.100494][ T3636] RIP: 0010:arp_ioctl+0x7ef/0x840
[ 56.105543][ T3636] Code: fc ff ff e8 03 9c 36 f9 b9 0e 00 00 00 4c 89 e6 48 c7 c2 20 d7 65 8b 48 c7 c7 00 d6 65 8b c6 05 49 ed f2 05 01 e8 70 93 5d 01 <0f> 0b e9 66 fc ff ff e8 d5 9b 36 f9 41 be fa ff ff ff e8 5a 14 6f
[ 56.125160][ T3636] RSP: 0018:ffffc90003b6fa70 EFLAGS: 00010286
[ 56.131239][ T3636] RAX: 0000000000000000 RBX: ffff88807859e828 RCX: 0000000000000000
[ 56.139231][ T3636] RDX: ffff8880225fba80 RSI: ffffffff8165785c RDI: fffff5200076df40
[ 56.147215][ T3636] RBP: 1ffff9200076df54 R08: 0000000000000005 R09: 0000000000000000
[ 56.155195][ T3636] R10: 0000000000000201 R11: 0000000000000000 R12: 0000000000000010
[ 56.163175][ T3636] R13: ffff88807859e800 R14: 0000000000000000 R15: ffff88807859e924
[ 56.171198][ T3636] ? vprintk+0x8c/0xa0
[ 56.175310][ T3636] ? arp_req_delete+0x520/0x520
[ 56.180220][ T3636] ? find_held_lock+0x2d/0x110
[ 56.185031][ T3636] inet_ioctl+0x2f9/0x380
[ 56.189394][ T3636] ? ipip_gro_complete+0x100/0x100
[ 56.194521][ T3636] ? lock_downgrade+0x6e0/0x6e0
[ 56.199406][ T3636] ? __kmem_cache_free+0xaf/0x3b0
[ 56.204478][ T3636] ? tomoyo_path_number_perm+0x166/0x550
[ 56.210142][ T3636] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 56.215983][ T3636] sock_do_ioctl+0xcc/0x230
[ 56.220517][ T3636] ? get_user_ifreq+0x250/0x250
[ 56.225398][ T3636] ? vfs_fileattr_set+0xbe0/0xbe0
[ 56.230464][ T3636] sock_ioctl+0x1f8/0x680
[ 56.234844][ T3636] ? br_ioctl_call+0xb0/0xb0
[ 56.239472][ T3636] ? lock_downgrade+0x6e0/0x6e0
[ 56.244370][ T3636] ? bpf_lsm_file_ioctl+0x9/0x10
[ 56.249339][ T3636] ? br_ioctl_call+0xb0/0xb0
[ 56.253977][ T3636] __x64_sys_ioctl+0x197/0x210
[ 56.258777][ T3636] do_syscall_64+0x39/0xb0
[ 56.263233][ T3636] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.269155][ T3636] RIP: 0033:0x7f54dd4b8c79
[ 56.273583][ T3636] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.293206][ T3636] RSP: 002b:00007ffe453afd58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 56.301632][ T3636] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54dd4b8c79
[ 56.309701][ T3636] RDX: 0000000020000500 RSI: 0000000000008954 RDI: 0000000000000004
[ 56.317685][ T3636] RBP: 00007f54dd47ce20 R08: 0000000000000000 R09: 0000000000000000
[ 56.325665][ T3636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54dd47ceb0
[ 56.333647][ T3636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.341644][ T3636]
[ 56.344827][ T3636] Kernel Offset: disabled
[ 56.349221][ T3636] Rebooting in 86400 seconds..