./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor652862631
<...>
forked to background, child pid 3182
no interfaces have a carri[ 18.373691][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0
er
[ 18.383135][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts.
execve("./syz-executor652862631", ["./syz-executor652862631"], 0x7ffc0a780280 /* 10 vars */) = 0
brk(NULL) = 0x555555be5000
brk(0x555555be5c40) = 0x555555be5c40
arch_prctl(ARCH_SET_FS, 0x555555be5300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor652862631", 4096) = 27
brk(0x555555c06c40) = 0x555555c06c40
brk(0x555555c07000) = 0x555555c07000
mprotect(0x7f0ff3cf6000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555be55d0) = 3611
./strace-static-x86_64: Process 3611 attached
[pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3611] setpgid(0, 0) = 0
[pid 3611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3611] write(3, "1000", 4) = 4
[pid 3611] close(3) = 0
[pid 3611] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid 3611] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x37\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x00\x01\x80\x06\x00\x00\x00\x08\x00\x00\x00\x08\x00\x02\x00\xff\xff\xff\xff\x08\x00\x05\x00\x08\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 52
[pid 3611] exit_group(0) = ?
[pid 3611] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3611, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555be55d0) = 3613
./strace-static-x86_64: Process 3613 attached
[pid 3613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3613] setpgid(0, 0) = 0
[pid 3613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3613] write(3, "1000", 4) = 4
[pid 3613] close(3) = 0
[pid 3613] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
syzkaller login: [ 36.402855][ T3611] device entered promiscuous mode
[ 36.419149][ T3613] ------------[ cut here ]------------
[ 36.425027][ T3613] Dropping previously announced user features
[ 36.432523][ T3613] WARNING: CPU: 0 PID: 3613 at net/openvswitch/datapath.c:1619 ovs_dp_cmd_new+0xdf5/0x1300
[ 36.443289][ T3613] Modules linked in:
[ 36.447519][ T3613] CPU: 0 PID: 3613 Comm: syz-executor652 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0
[ 36.458391][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 36.469300][ T3613] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 36.475364][ T3613] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 e7 bc 53 f8 48 c7 c7 80 29 21 8b e8 ea a0 16 00 <0f> 0b eb be 4c 89 e7 e8 3f 24 a1 f8 eb d5 e8 d8 23 a1 f8 e9 3f ff
[ 36.495543][ T3613] RSP: 0018:ffffc90003c8f4e8 EFLAGS: 00010282
[ 36.502123][ T3613] RAX: 0000000000000000 RBX: ffff888016a42600 RCX: 0000000000000000
[ 36.510803][ T3613] RDX: ffff888076930000 RSI: ffffffff81612e28 RDI: fffff52000791e8f
[ 36.519140][ T3613] RBP: ffff888016a42000 R08: 0000000000000005 R09: 0000000000000000
[ 36.527794][ T3613] R10: 0000000080000000 R11: 676e6970706f7244 R12: ffff888016a42668
[ 36.536304][ T3613] R13: 0000000000000008 R14: ffff888016a42058 R15: ffff88801d5bbd00
[ 36.544820][ T3613] FS: 0000555555be5300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 36.554336][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.561900][ T3613] CR2: 0000000020000916 CR3: 0000000071bb7000 CR4: 0000000000350ef0
[ 36.570183][ T3613] Call Trace:
[ 36.574306][ T3613]
[ 36.577529][ T3613] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 36.583520][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 36.591393][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 36.598984][ T3613] genl_family_rcv_msg_doit+0x228/0x320
[ 36.605097][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 36.612973][ T3613] ? ns_capable+0xd9/0x100
[ 36.617708][ T3613] genl_rcv_msg+0x441/0x780
[ 36.622714][ T3613] ? genl_get_cmd+0x480/0x480
[ 36.627687][ T3613] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 36.633651][ T3613] ? lock_release+0x780/0x780
[ 36.638753][ T3613] ? rcu_read_lock_sched_held+0xd/0x70
[ 36.646737][ T3613] netlink_rcv_skb+0x153/0x420
[ 36.652863][ T3613] ? genl_get_cmd+0x480/0x480
[ 36.657783][ T3613] ? netlink_ack+0xd50/0xd50
[ 36.663193][ T3613] ? netlink_deliver_tap+0x1b1/0xc40
[ 36.668504][ T3613] genl_rcv+0x24/0x40
[ 36.672550][ T3613] netlink_unicast+0x543/0x7f0
[ 36.677343][ T3613] ? netlink_attachskb+0x880/0x880
[ 36.682619][ T3613] ? __phys_addr+0xc4/0x140
[ 36.687311][ T3613] ? __phys_addr_symbol+0x2c/0x70
[ 36.692394][ T3613] ? __check_object_size+0x2de/0x700
[ 36.697704][ T3613] netlink_sendmsg+0x917/0xe10
[ 36.702622][ T3613] ? netlink_unicast+0x7f0/0x7f0
[ 36.707590][ T3613] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 36.712953][ T3613] ? netlink_unicast+0x7f0/0x7f0
[ 36.717912][ T3613] sock_sendmsg+0xcf/0x120
[ 36.722422][ T3613] ____sys_sendmsg+0x712/0x8c0
[ 36.727217][ T3613] ? copy_msghdr_from_user+0xfc/0x150
[ 36.732656][ T3613] ? kernel_sendmsg+0x50/0x50
[ 36.737373][ T3613] ___sys_sendmsg+0x110/0x1b0
[ 36.742108][ T3613] ? do_recvmmsg+0x6e0/0x6e0
[ 36.746710][ T3613] ? __schedule+0xae7/0x5270
[ 36.751361][ T3613] ? trace_hardirqs_on+0x2d/0x120
[ 36.756422][ T3613] ? rcu_read_lock_sched_held+0xd/0x70
[ 36.761957][ T3613] ? lock_acquire+0x480/0x570
[ 36.766659][ T3613] ? rcu_read_lock_sched_held+0xd/0x70
[ 36.772193][ T3613] ? lock_acquire+0x480/0x570
[ 36.776891][ T3613] ? lock_release+0x780/0x780
[ 36.781727][ T3613] ? ptrace_stop.part.0+0x49a/0x8c0
[ 36.787221][ T3613] ? do_raw_spin_lock+0x120/0x2a0
[ 36.792574][ T3613] ? rwlock_bug.part.0+0x90/0x90
[ 36.797806][ T3613] ? __fget_light+0x20a/0x270
[ 36.802937][ T3613] __sys_sendmsg+0xf3/0x1c0
[ 36.807766][ T3613] ? __sys_sendmsg_sock+0x30/0x30
[ 36.813267][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 36.818453][ T3613] ? _raw_spin_unlock_irq+0x2a/0x40
[ 36.824007][ T3613] ? ptrace_notify+0xfa/0x140
[ 36.828987][ T3613] do_syscall_64+0x35/0xb0
[ 36.833762][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 36.839961][ T3613] RIP: 0033:0x7f0ff3c89e89
[ 36.844717][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 36.864683][ T3613] RSP: 002b:00007ffe20313518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 36.873458][ T3613] RAX: ffffffffffffffda RBX: 0000000000008e13 RCX: 00007f0ff3c89e89
[ 36.881838][ T3613] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 36.890086][ T3613] RBP: 0000000000000000 R08: 00007ffe203136b8 R09: 00007ffe203136b8
[ 36.898414][ T3613] R10: 00007ffe20312f90 R11: 0000000000000246 R12: 00007ffe2031352c
[ 36.906736][ T3613] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 36.915051][ T3613]
[ 36.918354][ T3613] Kernel panic - not syncing: panic_on_warn set ...
[ 36.925124][ T3613] CPU: 1 PID: 3613 Comm: syz-executor652 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0
[ 36.935209][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 36.945277][ T3613] Call Trace:
[ 36.948655][ T3613]
[ 36.951589][ T3613] dump_stack_lvl+0xcd/0x134
[ 36.956210][ T3613] panic+0x2c8/0x622
[ 36.960126][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 36.966137][ T3613] ? __warn.cold+0x248/0x2c4
[ 36.970718][ T3613] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 36.975637][ T3613] __warn.cold+0x259/0x2c4
[ 36.980035][ T3613] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 36.984963][ T3613] report_bug+0x1bc/0x210
[ 36.989279][ T3613] handle_bug+0x3c/0x70
[ 36.993419][ T3613] exc_invalid_op+0x14/0x40
[ 36.997906][ T3613] asm_exc_invalid_op+0x16/0x20
[ 37.002739][ T3613] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 37.008266][ T3613] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 e7 bc 53 f8 48 c7 c7 80 29 21 8b e8 ea a0 16 00 <0f> 0b eb be 4c 89 e7 e8 3f 24 a1 f8 eb d5 e8 d8 23 a1 f8 e9 3f ff
[ 37.027864][ T3613] RSP: 0018:ffffc90003c8f4e8 EFLAGS: 00010282
[ 37.033920][ T3613] RAX: 0000000000000000 RBX: ffff888016a42600 RCX: 0000000000000000
[ 37.041879][ T3613] RDX: ffff888076930000 RSI: ffffffff81612e28 RDI: fffff52000791e8f
[ 37.049837][ T3613] RBP: ffff888016a42000 R08: 0000000000000005 R09: 0000000000000000
[ 37.057796][ T3613] R10: 0000000080000000 R11: 676e6970706f7244 R12: ffff888016a42668
[ 37.065756][ T3613] R13: 0000000000000008 R14: ffff888016a42058 R15: ffff88801d5bbd00
[ 37.073809][ T3613] ? vprintk+0x88/0x90
[ 37.077872][ T3613] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 37.082806][ T3613] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 37.088174][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 37.095542][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 37.102828][ T3613] genl_family_rcv_msg_doit+0x228/0x320
[ 37.108366][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 37.115734][ T3613] ? ns_capable+0xd9/0x100
[ 37.120583][ T3613] genl_rcv_msg+0x441/0x780
[ 37.125081][ T3613] ? genl_get_cmd+0x480/0x480
[ 37.129746][ T3613] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 37.135107][ T3613] ? lock_release+0x780/0x780
[ 37.139773][ T3613] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.145229][ T3613] netlink_rcv_skb+0x153/0x420
[ 37.149985][ T3613] ? genl_get_cmd+0x480/0x480
[ 37.154653][ T3613] ? netlink_ack+0xd50/0xd50
[ 37.159233][ T3613] ? netlink_deliver_tap+0x1b1/0xc40
[ 37.164509][ T3613] genl_rcv+0x24/0x40
[ 37.168482][ T3613] netlink_unicast+0x543/0x7f0
[ 37.173235][ T3613] ? netlink_attachskb+0x880/0x880
[ 37.178342][ T3613] ? __phys_addr+0xc4/0x140
[ 37.182834][ T3613] ? __phys_addr_symbol+0x2c/0x70
[ 37.187850][ T3613] ? __check_object_size+0x2de/0x700
[ 37.193131][ T3613] netlink_sendmsg+0x917/0xe10
[ 37.197888][ T3613] ? netlink_unicast+0x7f0/0x7f0
[ 37.202816][ T3613] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 37.208118][ T3613] ? netlink_unicast+0x7f0/0x7f0
[ 37.213064][ T3613] sock_sendmsg+0xcf/0x120
[ 37.217481][ T3613] ____sys_sendmsg+0x712/0x8c0
[ 37.222240][ T3613] ? copy_msghdr_from_user+0xfc/0x150
[ 37.227625][ T3613] ? kernel_sendmsg+0x50/0x50
[ 37.232302][ T3613] ___sys_sendmsg+0x110/0x1b0
[ 37.236973][ T3613] ? do_recvmmsg+0x6e0/0x6e0
[ 37.241551][ T3613] ? __schedule+0xae7/0x5270
[ 37.246136][ T3613] ? trace_hardirqs_on+0x2d/0x120
[ 37.251158][ T3613] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.256615][ T3613] ? lock_acquire+0x480/0x570
[ 37.261283][ T3613] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.266738][ T3613] ? lock_acquire+0x480/0x570
[ 37.271404][ T3613] ? lock_release+0x780/0x780
[ 37.276066][ T3613] ? ptrace_stop.part.0+0x49a/0x8c0
[ 37.281256][ T3613] ? do_raw_spin_lock+0x120/0x2a0
[ 37.286270][ T3613] ? rwlock_bug.part.0+0x90/0x90
[ 37.291196][ T3613] ? __fget_light+0x20a/0x270
[ 37.295866][ T3613] __sys_sendmsg+0xf3/0x1c0
[ 37.300361][ T3613] ? __sys_sendmsg_sock+0x30/0x30
[ 37.305374][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 37.310216][ T3613] ? _raw_spin_unlock_irq+0x2a/0x40
[ 37.315403][ T3613] ? ptrace_notify+0xfa/0x140
[ 37.320072][ T3613] do_syscall_64+0x35/0xb0
[ 37.324487][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 37.330374][ T3613] RIP: 0033:0x7f0ff3c89e89
[ 37.334775][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 37.354377][ T3613] RSP: 002b:00007ffe20313518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 37.362782][ T3613] RAX: ffffffffffffffda RBX: 0000000000008e13 RCX: 00007f0ff3c89e89
[ 37.370740][ T3613] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 37.378696][ T3613] RBP: 0000000000000000 R08: 00007ffe203136b8 R09: 00007ffe203136b8
[ 37.386915][ T3613] R10: 00007ffe20312f90 R11: 0000000000000246 R12: 00007ffe2031352c
[ 37.394874][ T3613] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 37.402865][ T3613]
[ 37.406618][ T3613] Kernel Offset: disabled
[ 37.410927][ T3613] Rebooting in 86400 seconds..