./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor168406831
<...>
forked to background, child pid 3209
[ 35.749838][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0
[ 35.781263][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 36.240576][ T3303] sshd (3303) used greatest stack depth: 22376 bytes left
OK
syzkaller
Warning: Permanently added '10.128.1.64' (ECDSA) to the list of known hosts.
execve("./syz-executor168406831", ["./syz-executor168406831"], 0x7ffd44fd6b40 /* 10 vars */) = 0
brk(NULL) = 0x5555560f4000
brk(0x5555560f4c40) = 0x5555560f4c40
arch_prctl(ARCH_SET_FS, 0x5555560f4300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor168406831", 4096) = 27
brk(0x555556115c40) = 0x555556115c40
brk(0x555556116000) = 0x555556116000
mprotect(0x7f8622368000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 3
ioctl(3, SIOCSARP, 0x20000500) = 0
socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 4
syzkaller login: [ 60.121995][ T3634] ------------[ cut here ]------------
[ 60.127611][ T3634] memcpy: detected field-spanning write (size 16) of single field "r->arp_ha.sa_data" at net/ipv4/arp.c:1128 (size 14)
[ 60.141503][ T3634] WARNING: CPU: 1 PID: 3634 at net/ipv4/arp.c:1128 arp_ioctl+0x7ef/0x840
[ 60.150015][ T3634] Modules linked in:
[ 60.154332][ T3634] CPU: 1 PID: 3634 Comm: syz-executor168 Not tainted 6.1.0-rc8-syzkaller-00137-g01de1123322e #0
[ 60.164807][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 60.174928][ T3634] RIP: 0010:arp_ioctl+0x7ef/0x840
[ 60.180162][ T3634] Code: fc ff ff e8 c3 9c 36 f9 b9 0e 00 00 00 4c 89 e6 48 c7 c2 20 d7 65 8b 48 c7 c7 00 d6 65 8b c6 05 09 ee f2 05 01 e8 30 94 5d 01 <0f> 0b e9 66 fc ff ff e8 95 9c 36 f9 41 be fa ff ff ff e8 5a 14 6f
[ 60.199999][ T3634] RSP: 0018:ffffc900039cfa70 EFLAGS: 00010286
[ 60.206124][ T3634] RAX: 0000000000000000 RBX: ffff888022432828 RCX: 0000000000000000
[ 60.214143][ T3634] RDX: ffff888026c63a80 RSI: ffffffff8165785c RDI: fffff52000739f40
[ 60.222685][ T3634] RBP: 1ffff92000739f54 R08: 0000000000000005 R09: 0000000000000000
[ 60.230736][ T3634] R10: 0000000000000201 R11: 0000000000000000 R12: 0000000000000010
[ 60.238944][ T3634] R13: ffff888022432800 R14: 0000000000000000 R15: ffff888022432924
[ 60.247149][ T3634] FS: 00005555560f4300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 60.256152][ T3634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.262801][ T3634] CR2: 0000000000458e30 CR3: 000000007ca48000 CR4: 00000000003506e0
[ 60.271009][ T3634] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.279298][ T3634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.287534][ T3634] Call Trace:
[ 60.291049][ T3634]
[ 60.294071][ T3634] ? arp_req_delete+0x520/0x520
[ 60.299391][ T3634] ? find_held_lock+0x2d/0x110
[ 60.304405][ T3634] inet_ioctl+0x2f9/0x380
[ 60.308949][ T3634] ? ipip_gro_complete+0x100/0x100
[ 60.314148][ T3634] ? lock_downgrade+0x6e0/0x6e0
[ 60.319036][ T3634] ? __kmem_cache_free+0xaf/0x3b0
[ 60.324116][ T3634] ? tomoyo_path_number_perm+0x166/0x550
[ 60.329887][ T3634] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 60.335788][ T3634] sock_do_ioctl+0xcc/0x230
[ 60.340352][ T3634] ? get_user_ifreq+0x250/0x250
[ 60.345276][ T3634] ? vfs_fileattr_set+0xbe0/0xbe0
[ 60.350341][ T3634] sock_ioctl+0x1f8/0x680
[ 60.354730][ T3634] ? br_ioctl_call+0xb0/0xb0
[ 60.359618][ T3634] ? lock_downgrade+0x6e0/0x6e0
[ 60.364549][ T3634] ? bpf_lsm_file_ioctl+0x9/0x10
[ 60.369509][ T3634] ? br_ioctl_call+0xb0/0xb0
[ 60.374157][ T3634] __x64_sys_ioctl+0x197/0x210
[ 60.378972][ T3634] do_syscall_64+0x39/0xb0
[ 60.383461][ T3634] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.389467][ T3634] RIP: 0033:0x7f86222fbc79
[ 60.393923][ T3634] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 60.414278][ T3634] RSP: 002b:00007ffcd6e2afc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 60.422806][ T3634] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86222fbc79
[ 60.430926][ T3634] RDX: 0000000020000500 RSI: 0000000000008954 RDI: 0000000000000004
[ 60.438897][ T3634] RBP: 00007f86222bfe20 R08: 0000000000000000 R09: 0000000000000000
[ 60.446913][ T3634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86222bfeb0
[ 60.455102][ T3634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 60.463169][ T3634]
[ 60.466307][ T3634] Kernel panic - not syncing: panic_on_warn set ...
[ 60.472885][ T3634] CPU: 1 PID: 3634 Comm: syz-executor168 Not tainted 6.1.0-rc8-syzkaller-00137-g01de1123322e #0
[ 60.483828][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 60.494634][ T3634] Call Trace:
[ 60.497927][ T3634]
[ 60.500948][ T3634] dump_stack_lvl+0xd1/0x138
[ 60.505628][ T3634] panic+0x2cc/0x626
[ 60.509533][ T3634] ? panic_print_sys_info.part.0+0x110/0x110
[ 60.515808][ T3634] ? __warn.cold+0x24b/0x350
[ 60.520402][ T3634] ? arp_ioctl+0x7ef/0x840
[ 60.524830][ T3634] __warn.cold+0x25c/0x350
[ 60.529272][ T3634] ? __wake_up_klogd.part.0+0x99/0xf0
[ 60.534750][ T3634] ? arp_ioctl+0x7ef/0x840
[ 60.539228][ T3634] report_bug+0x1c0/0x210
[ 60.543616][ T3634] handle_bug+0x3c/0x70
[ 60.547817][ T3634] exc_invalid_op+0x18/0x50
[ 60.552340][ T3634] asm_exc_invalid_op+0x1a/0x20
[ 60.557194][ T3634] RIP: 0010:arp_ioctl+0x7ef/0x840
[ 60.562405][ T3634] Code: fc ff ff e8 c3 9c 36 f9 b9 0e 00 00 00 4c 89 e6 48 c7 c2 20 d7 65 8b 48 c7 c7 00 d6 65 8b c6 05 09 ee f2 05 01 e8 30 94 5d 01 <0f> 0b e9 66 fc ff ff e8 95 9c 36 f9 41 be fa ff ff ff e8 5a 14 6f
[ 60.583149][ T3634] RSP: 0018:ffffc900039cfa70 EFLAGS: 00010286
[ 60.589304][ T3634] RAX: 0000000000000000 RBX: ffff888022432828 RCX: 0000000000000000
[ 60.597618][ T3634] RDX: ffff888026c63a80 RSI: ffffffff8165785c RDI: fffff52000739f40
[ 60.605602][ T3634] RBP: 1ffff92000739f54 R08: 0000000000000005 R09: 0000000000000000
[ 60.613872][ T3634] R10: 0000000000000201 R11: 0000000000000000 R12: 0000000000000010
[ 60.622039][ T3634] R13: ffff888022432800 R14: 0000000000000000 R15: ffff888022432924
[ 60.630103][ T3634] ? vprintk+0x8c/0xa0
[ 60.634184][ T3634] ? arp_req_delete+0x520/0x520
[ 60.639066][ T3634] ? find_held_lock+0x2d/0x110
[ 60.643835][ T3634] inet_ioctl+0x2f9/0x380
[ 60.648162][ T3634] ? ipip_gro_complete+0x100/0x100
[ 60.653264][ T3634] ? lock_downgrade+0x6e0/0x6e0
[ 60.658224][ T3634] ? __kmem_cache_free+0xaf/0x3b0
[ 60.663260][ T3634] ? tomoyo_path_number_perm+0x166/0x550
[ 60.669522][ T3634] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 60.675350][ T3634] sock_do_ioctl+0xcc/0x230
[ 60.679866][ T3634] ? get_user_ifreq+0x250/0x250
[ 60.684719][ T3634] ? vfs_fileattr_set+0xbe0/0xbe0
[ 60.689760][ T3634] sock_ioctl+0x1f8/0x680
[ 60.694095][ T3634] ? br_ioctl_call+0xb0/0xb0
[ 60.698684][ T3634] ? lock_downgrade+0x6e0/0x6e0
[ 60.703546][ T3634] ? bpf_lsm_file_ioctl+0x9/0x10
[ 60.708486][ T3634] ? br_ioctl_call+0xb0/0xb0
[ 60.713201][ T3634] __x64_sys_ioctl+0x197/0x210
[ 60.717968][ T3634] do_syscall_64+0x39/0xb0
[ 60.722384][ T3634] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.728357][ T3634] RIP: 0033:0x7f86222fbc79
[ 60.732792][ T3634] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 60.752496][ T3634] RSP: 002b:00007ffcd6e2afc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 60.760925][ T3634] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86222fbc79
[ 60.768983][ T3634] RDX: 0000000020000500 RSI: 0000000000008954 RDI: 0000000000000004
[ 60.776953][ T3634] RBP: 00007f86222bfe20 R08: 0000000000000000 R09: 0000000000000000
[ 60.785008][ T3634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86222bfeb0
[ 60.793075][ T3634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 60.801323][ T3634]
[ 60.808189][ T3634] Kernel Offset: disabled
[ 60.812611][ T3634] Rebooting in 86400 seconds..