./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor620287417
<...>
DUID 00:04:e7:a9:54:ba:d6:ca:b0:a9:a8:44:aa:dd:15:41:58:fb
forked to background, child pid 3186
[ 26.451445][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.461633][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.97' (ECDSA) to the list of known hosts.
execve("./syz-executor620287417", ["./syz-executor620287417"], 0x7fff3812cb10 /* 10 vars */) = 0
brk(NULL) = 0x5555566a4000
brk(0x5555566a4c40) = 0x5555566a4c40
arch_prctl(ARCH_SET_FS, 0x5555566a4300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor620287417", 4096) = 27
brk(0x5555566c5c40) = 0x5555566c5c40
brk(0x5555566c6000) = 0x5555566c6000
mprotect(0x7f0885666000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3616 attached
, child_tidptr=0x5555566a45d0) = 3616
[pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3616] setpgid(0, 0) = 0
[pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3616] write(3, "1000", 4) = 4
[pid 3616] close(3) = 0
[pid 3616] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid 3616] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x00\x00\x00\x37\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x00\x01\x80\x06\x00\x00\x00\x08\x00\x00\x00\x08\x00\x02\x00\xff\xff\xff\xff\x08\x00\x05\x00\x08\x00\x00\x00\x08\x00\x08\x80\x04\x00\x00\x00", iov_len=60}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60
[pid 3616] exit_group(0) = ?
[pid 3616] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3616, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3618 attached
, child_tidptr=0x5555566a45d0) = 3618
[pid 3618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3618] setpgid(0, 0) = 0
[pid 3618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3618] write(3, "1000", 4) = 4
[pid 3618] close(3) = 0
[pid 3618] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
syzkaller login: [ 49.089739][ T3616] device entered promiscuous mode
[ 49.122026][ T3618] ------------[ cut here ]------------
[ 49.127828][ T3618] Dropping previously announced user features
[ 49.134645][ T3618] WARNING: CPU: 1 PID: 3618 at net/openvswitch/datapath.c:1619 ovs_dp_cmd_new+0xdf5/0x1300
[ 49.145182][ T3618] Modules linked in:
[ 49.149801][ T3618] CPU: 1 PID: 3618 Comm: syz-executor620 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0
[ 49.160512][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 49.170826][ T3618] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 49.176413][ T3618] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 57 b9 53 f8 48 c7 c7 40 19 21 8b e8 27 a2 16 00 <0f> 0b eb be 4c 89 e7 e8 5f c7 a0 f8 eb d5 e8 f8 c6 a0 f8 e9 3f ff
[ 49.196366][ T3618] RSP: 0018:ffffc90003e1f4e8 EFLAGS: 00010282
[ 49.202823][ T3618] RAX: 0000000000000000 RBX: ffff8880169f5300 RCX: 0000000000000000
[ 49.211109][ T3618] RDX: ffff88807e243b00 RSI: ffffffff8160f6f8 RDI: fffff520007c3e8f
[ 49.219457][ T3618] RBP: ffff888016a78a00 R08: 0000000000000005 R09: 0000000000000000
[ 49.227469][ T3618] R10: 0000000080000000 R11: 0000000000000000 R12: ffff8880169f5368
[ 49.235871][ T3618] R13: 0000000000000008 R14: ffff888016a78a58 R15: ffff888145b02380
[ 49.244204][ T3618] FS: 00005555566a4300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 49.253506][ T3618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.260435][ T3618] CR2: 0000000020000916 CR3: 000000001c62f000 CR4: 00000000003506e0
[ 49.269086][ T3618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.277089][ T3618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.285519][ T3618] Call Trace:
[ 49.289091][ T3618]
[ 49.292055][ T3618] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 49.297468][ T3618] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 49.305418][ T3618] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 49.313044][ T3618] genl_family_rcv_msg_doit+0x228/0x320
[ 49.318937][ T3618] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 49.326370][ T3618] ? ns_capable+0xd9/0x100
[ 49.331213][ T3618] genl_rcv_msg+0x441/0x780
[ 49.335769][ T3618] ? genl_get_cmd+0x480/0x480
[ 49.341175][ T3618] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 49.346596][ T3618] ? lock_release+0x780/0x780
[ 49.351753][ T3618] netlink_rcv_skb+0x153/0x420
[ 49.356563][ T3618] ? genl_get_cmd+0x480/0x480
[ 49.361669][ T3618] ? netlink_ack+0xd50/0xd50
[ 49.366306][ T3618] ? netlink_deliver_tap+0x1b1/0xc40
[ 49.372001][ T3618] genl_rcv+0x24/0x40
[ 49.376018][ T3618] netlink_unicast+0x543/0x7f0
[ 49.381434][ T3618] ? netlink_attachskb+0x880/0x880
[ 49.386803][ T3618] ? __phys_addr+0xc4/0x140
[ 49.391708][ T3618] ? __phys_addr_symbol+0x2c/0x70
[ 49.396780][ T3618] ? __check_object_size+0x2de/0x700
[ 49.402522][ T3618] netlink_sendmsg+0x917/0xe10
[ 49.407336][ T3618] ? netlink_unicast+0x7f0/0x7f0
[ 49.412680][ T3618] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 49.418326][ T3618] ? netlink_unicast+0x7f0/0x7f0
[ 49.423310][ T3618] sock_sendmsg+0xcf/0x120
[ 49.428104][ T3618] ____sys_sendmsg+0x712/0x8c0
[ 49.432904][ T3618] ? copy_msghdr_from_user+0xfc/0x150
[ 49.438717][ T3618] ? kernel_sendmsg+0x50/0x50
[ 49.443441][ T3618] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 49.449822][ T3618] ___sys_sendmsg+0x110/0x1b0
[ 49.454550][ T3618] ? do_recvmmsg+0x6e0/0x6e0
[ 49.459594][ T3618] ? lock_release+0x780/0x780
[ 49.464310][ T3618] ? ptrace_stop.part.0+0x5ec/0xa80
[ 49.470042][ T3618] ? do_raw_spin_lock+0x120/0x2a0
[ 49.475106][ T3618] ? rwlock_bug.part.0+0x90/0x90
[ 49.480479][ T3618] ? _raw_spin_lock_irq+0x41/0x50
[ 49.485554][ T3618] ? __fget_light+0x20a/0x270
[ 49.490923][ T3618] __sys_sendmsg+0xf3/0x1c0
[ 49.495686][ T3618] ? __sys_sendmsg_sock+0x30/0x30
[ 49.501134][ T3618] ? lock_downgrade+0x6e0/0x6e0
[ 49.506029][ T3618] ? lockdep_hardirqs_on+0x79/0x100
[ 49.511751][ T3618] ? _raw_spin_unlock_irq+0x2a/0x40
[ 49.516993][ T3618] ? ptrace_notify+0xfa/0x140
[ 49.522058][ T3618] do_syscall_64+0x35/0xb0
[ 49.526526][ T3618] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.532861][ T3618] RIP: 0033:0x7f08855f8ee9
[ 49.537312][ T3618] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.557436][ T3618] RSP: 002b:00007ffc575c4a38 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 49.566226][ T3618] RAX: ffffffffffffffda RBX: 000000000000bf9a RCX: 00007f08855f8ee9
[ 49.574524][ T3618] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 49.582870][ T3618] RBP: 0000000000000000 R08: 00007ffc575c4bd8 R09: 00007ffc575c4bd8
[ 49.591175][ T3618] R10: 00007ffc575c44b0 R11: 0000000000000246 R12: 00007ffc575c4a4c
[ 49.599867][ T3618] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 49.608166][ T3618]
[ 49.611215][ T3618] Kernel panic - not syncing: panic_on_warn set ...
[ 49.617809][ T3618] CPU: 1 PID: 3618 Comm: syz-executor620 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0
[ 49.627901][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 49.637977][ T3618] Call Trace:
[ 49.641285][ T3618]
[ 49.644231][ T3618] dump_stack_lvl+0xcd/0x134
[ 49.648855][ T3618] panic+0x2c8/0x627
[ 49.652778][ T3618] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 49.658798][ T3618] ? __warn.cold+0x248/0x2c4
[ 49.663417][ T3618] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 49.668385][ T3618] __warn.cold+0x259/0x2c4
[ 49.672827][ T3618] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 49.677969][ T3618] report_bug+0x1bc/0x210
[ 49.682335][ T3618] handle_bug+0x3c/0x70
[ 49.686510][ T3618] exc_invalid_op+0x14/0x40
[ 49.691042][ T3618] asm_exc_invalid_op+0x16/0x20
[ 49.695922][ T3618] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 49.701494][ T3618] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 57 b9 53 f8 48 c7 c7 40 19 21 8b e8 27 a2 16 00 <0f> 0b eb be 4c 89 e7 e8 5f c7 a0 f8 eb d5 e8 f8 c6 a0 f8 e9 3f ff
[ 49.721126][ T3618] RSP: 0018:ffffc90003e1f4e8 EFLAGS: 00010282
[ 49.727219][ T3618] RAX: 0000000000000000 RBX: ffff8880169f5300 RCX: 0000000000000000
[ 49.735237][ T3618] RDX: ffff88807e243b00 RSI: ffffffff8160f6f8 RDI: fffff520007c3e8f
[ 49.743257][ T3618] RBP: ffff888016a78a00 R08: 0000000000000005 R09: 0000000000000000
[ 49.751255][ T3618] R10: 0000000080000000 R11: 0000000000000000 R12: ffff8880169f5368
[ 49.759256][ T3618] R13: 0000000000000008 R14: ffff888016a78a58 R15: ffff888145b02380
[ 49.767278][ T3618] ? vprintk+0x88/0x90
[ 49.771383][ T3618] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 49.776363][ T3618] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 49.781861][ T3618] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 49.789274][ T3618] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 49.796602][ T3618] genl_family_rcv_msg_doit+0x228/0x320
[ 49.802183][ T3618] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 49.809605][ T3618] ? ns_capable+0xd9/0x100
[ 49.814062][ T3618] genl_rcv_msg+0x441/0x780
[ 49.818601][ T3618] ? genl_get_cmd+0x480/0x480
[ 49.823327][ T3618] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 49.828735][ T3618] ? lock_release+0x780/0x780
[ 49.833473][ T3618] netlink_rcv_skb+0x153/0x420
[ 49.838279][ T3618] ? genl_get_cmd+0x480/0x480
[ 49.842994][ T3618] ? netlink_ack+0xd50/0xd50
[ 49.847627][ T3618] ? netlink_deliver_tap+0x1b1/0xc40
[ 49.852952][ T3618] genl_rcv+0x24/0x40
[ 49.856964][ T3618] netlink_unicast+0x543/0x7f0
[ 49.861768][ T3618] ? netlink_attachskb+0x880/0x880
[ 49.866910][ T3618] ? __phys_addr+0xc4/0x140
[ 49.871456][ T3618] ? __phys_addr_symbol+0x2c/0x70
[ 49.876519][ T3618] ? __check_object_size+0x2de/0x700
[ 49.881850][ T3618] netlink_sendmsg+0x917/0xe10
[ 49.886651][ T3618] ? netlink_unicast+0x7f0/0x7f0
[ 49.891626][ T3618] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 49.896948][ T3618] ? netlink_unicast+0x7f0/0x7f0
[ 49.901917][ T3618] sock_sendmsg+0xcf/0x120
[ 49.906360][ T3618] ____sys_sendmsg+0x712/0x8c0
[ 49.911154][ T3618] ? copy_msghdr_from_user+0xfc/0x150
[ 49.916563][ T3618] ? kernel_sendmsg+0x50/0x50
[ 49.921280][ T3618] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 49.927296][ T3618] ___sys_sendmsg+0x110/0x1b0
[ 49.932004][ T3618] ? do_recvmmsg+0x6e0/0x6e0
[ 49.936641][ T3618] ? lock_release+0x780/0x780
[ 49.941347][ T3618] ? ptrace_stop.part.0+0x5ec/0xa80
[ 49.946578][ T3618] ? do_raw_spin_lock+0x120/0x2a0
[ 49.951636][ T3618] ? rwlock_bug.part.0+0x90/0x90
[ 49.956600][ T3618] ? _raw_spin_lock_irq+0x41/0x50
[ 49.961672][ T3618] ? __fget_light+0x20a/0x270
[ 49.966390][ T3618] __sys_sendmsg+0xf3/0x1c0
[ 49.970924][ T3618] ? __sys_sendmsg_sock+0x30/0x30
[ 49.975983][ T3618] ? lock_downgrade+0x6e0/0x6e0
[ 49.980871][ T3618] ? lockdep_hardirqs_on+0x79/0x100
[ 49.986102][ T3618] ? _raw_spin_unlock_irq+0x2a/0x40
[ 49.991333][ T3618] ? ptrace_notify+0xfa/0x140
[ 49.996042][ T3618] do_syscall_64+0x35/0xb0
[ 50.000499][ T3618] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.006441][ T3618] RIP: 0033:0x7f08855f8ee9
[ 50.010877][ T3618] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.030515][ T3618] RSP: 002b:00007ffc575c4a38 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 50.038970][ T3618] RAX: ffffffffffffffda RBX: 000000000000bf9a RCX: 00007f08855f8ee9
[ 50.046971][ T3618] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 50.054976][ T3618] RBP: 0000000000000000 R08: 00007ffc575c4bd8 R09: 00007ffc575c4bd8
[ 50.062973][ T3618] R10: 00007ffc575c44b0 R11: 0000000000000246 R12: 00007ffc575c4a4c
[ 50.070971][ T3618] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 50.078989][ T3618]
[ 50.082339][ T3618] Kernel Offset: disabled
[ 50.086737][ T3618] Rebooting in 86400 seconds..