./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1573494226 <...> Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. execve("./syz-executor1573494226", ["./syz-executor1573494226"], 0x7ffed01a95d0 /* 10 vars */) = 0 brk(NULL) = 0x555557129000 brk(0x555557129c40) = 0x555557129c40 arch_prctl(ARCH_SET_FS, 0x555557129300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1573494226", 4096) = 28 brk(0x55555714ac40) = 0x55555714ac40 brk(0x55555714b000) = 0x55555714b000 mprotect(0x7f19f4392000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571295d0) = 3607 ./strace-static-x86_64: Process 3607 attached [pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3607] setpgid(0, 0) = 0 [pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1000", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 3607] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x00\x00\x00\x37\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x00\x01\x80\x06\x00\x00\x00\x08\x00\x00\x00\x08\x00\x02\x00\xff\xff\xff\xff\x08\x00\x05\x00\x08\x00\x00\x00\x08\x00\x08\x80\x04\x00\x00\x00", iov_len=60}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60 [pid 3607] exit_group(0) = ? [pid 3607] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3607, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555571295d0) = 3609 ./strace-static-x86_64: Process 3609 attached [pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3609] setpgid(0, 0) = 0 [pid 3609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1000", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 syzkaller login: [ 36.780397][ T3607] device  entered promiscuous mode [ 36.800558][ T3609] ------------[ cut here ]------------ [ 36.806105][ T3609] Dropping previously announced user features [ 36.813410][ T3609] WARNING: CPU: 0 PID: 3609 at net/openvswitch/datapath.c:1619 ovs_dp_cmd_new+0xdf5/0x1300 [ 36.823944][ T3609] Modules linked in: [ 36.828142][ T3609] CPU: 0 PID: 3609 Comm: syz-executor157 Not tainted 6.0.0-syzkaller-07994-ge8bc52cb8df8 #0 [ 36.838839][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 36.849184][ T3609] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300 [ 36.854813][ T3609] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 b7 fe 53 f8 48 c7 c7 00 13 21 8b e8 c7 a5 16 00 <0f> 0b eb be 4c 89 e7 e8 9f 14 a1 f8 eb d5 e8 38 14 a1 f8 e9 3f ff [ 36.874849][ T3609] RSP: 0018:ffffc90003daf4e8 EFLAGS: 00010282 [ 36.881256][ T3609] RAX: 0000000000000000 RBX: ffff88814b107000 RCX: 0000000000000000 [ 36.889568][ T3609] RDX: ffff8880215f5880 RSI: ffffffff8160f738 RDI: fffff520007b5e8f [ 36.897892][ T3609] RBP: ffff8880126d2700 R08: 0000000000000005 R09: 0000000000000000 [ 36.905943][ T3609] R10: 0000000080000000 R11: 676e6970706f7244 R12: ffff88814b107068 [ 36.914254][ T3609] R13: 0000000000000008 R14: ffff8880126d2758 R15: ffff88801cfc0300 [ 36.922544][ T3609] FS: 0000555557129300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 36.932221][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.939117][ T3609] CR2: 0000000020000916 CR3: 00000000720c4000 CR4: 00000000003506f0 [ 36.947439][ T3609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.955533][ T3609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.963873][ T3609] Call Trace: [ 36.967472][ T3609] [ 36.970477][ T3609] ? ovs_dp_cmd_fill_info+0xc30/0xc30 [ 36.975927][ T3609] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 36.983763][ T3609] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 36.991478][ T3609] genl_family_rcv_msg_doit+0x228/0x320 [ 36.997368][ T3609] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 37.004829][ T3609] ? ns_capable+0xd9/0x100 [ 37.009629][ T3609] genl_rcv_msg+0x441/0x780 [ 37.014212][ T3609] ? genl_get_cmd+0x480/0x480 [ 37.019250][ T3609] ? ovs_dp_cmd_fill_info+0xc30/0xc30 [ 37.024720][ T3609] ? lock_release+0x780/0x780 [ 37.029770][ T3609] ? rcu_read_lock_sched_held+0xd/0x70 [ 37.035366][ T3609] netlink_rcv_skb+0x153/0x420 [ 37.040609][ T3609] ? genl_get_cmd+0x480/0x480 [ 37.045562][ T3609] ? netlink_ack+0xd50/0xd50 [ 37.050561][ T3609] ? netlink_deliver_tap+0x1b1/0xc40 [ 37.055962][ T3609] genl_rcv+0x24/0x40 [ 37.060271][ T3609] netlink_unicast+0x543/0x7f0 [ 37.079853][ T3609] ? netlink_attachskb+0x880/0x880 [ 37.085124][ T3609] ? __phys_addr+0xc4/0x140 [ 37.090896][ T3609] ? __phys_addr_symbol+0x2c/0x70 [ 37.096122][ T3609] ? __check_object_size+0x2de/0x700 [ 37.101921][ T3609] netlink_sendmsg+0x917/0xe10 [ 37.106773][ T3609] ? netlink_unicast+0x7f0/0x7f0 [ 37.112414][ T3609] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 37.118051][ T3609] ? netlink_unicast+0x7f0/0x7f0 [ 37.123109][ T3609] sock_sendmsg+0xcf/0x120 [ 37.127170][ T145] openvswitch: cpu_id mismatch with handler threads [ 37.127869][ T3609] ____sys_sendmsg+0x712/0x8c0 [ 37.139626][ T3609] ? copy_msghdr_from_user+0xfc/0x150 [ 37.145075][ T3609] ? kernel_sendmsg+0x50/0x50 [ 37.150348][ T3609] ___sys_sendmsg+0x110/0x1b0 [ 37.155140][ T3609] ? do_recvmmsg+0x6e0/0x6e0 [ 37.160067][ T3609] ? __schedule+0xae7/0x52b0 [ 37.164782][ T3609] ? trace_hardirqs_on+0x2d/0x120 [ 37.170157][ T3609] ? rcu_read_lock_sched_held+0xd/0x70 [ 37.175781][ T3609] ? lock_acquire+0x480/0x570 [ 37.180788][ T3609] ? rcu_read_lock_sched_held+0xd/0x70 [ 37.186382][ T3609] ? lock_acquire+0x480/0x570 [ 37.191422][ T3609] ? lock_release+0x780/0x780 [ 37.196230][ T3609] ? ptrace_stop.part.0+0x5ec/0xa80 [ 37.201850][ T3609] ? do_raw_spin_lock+0x120/0x2a0 [ 37.206952][ T3609] ? rwlock_bug.part.0+0x90/0x90 [ 37.212301][ T3609] ? __fget_light+0x20a/0x270 [ 37.217269][ T3609] __sys_sendmsg+0xf3/0x1c0 [ 37.221849][ T3609] ? __sys_sendmsg_sock+0x30/0x30 [ 37.226893][ T3609] ? lock_downgrade+0x6e0/0x6e0 [ 37.232341][ T3609] ? _raw_spin_unlock_irq+0x2a/0x40 [ 37.237836][ T3609] ? ptrace_notify+0xfa/0x140 [ 37.242591][ T3609] do_syscall_64+0x35/0xb0 [ 37.247424][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 37.253408][ T3609] RIP: 0033:0x7f19f4324ee9 [ 37.258382][ T3609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.278470][ T3609] RSP: 002b:00007ffe48c5ff68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.287314][ T3609] RAX: ffffffffffffffda RBX: 0000000000008f93 RCX: 00007f19f4324ee9 [ 37.295360][ T3609] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 37.303738][ T3609] RBP: 0000000000000000 R08: 00007ffe48c60108 R09: 00007ffe48c60108 [ 37.311978][ T3609] R10: 00007ffe48c5f9e0 R11: 0000000000000246 R12: 00007ffe48c5ff7c [ 37.320256][ T3609] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 37.328571][ T3609] [ 37.331703][ T3609] Kernel panic - not syncing: panic_on_warn set ... [ 37.338296][ T3609] CPU: 0 PID: 3609 Comm: syz-executor157 Not tainted 6.0.0-syzkaller-07994-ge8bc52cb8df8 #0 [ 37.348371][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 37.358439][ T3609] Call Trace: [ 37.361724][ T3609] [ 37.364662][ T3609] dump_stack_lvl+0xcd/0x134 [ 37.369272][ T3609] panic+0x2c8/0x622 [ 37.370746][ T3186] openvswitch: cpu_id mismatch with handler threads [ 37.373198][ T3609] ? panic_print_sys_info.part.0+0x10b/0x10b [ 37.385837][ T3609] ? __warn.cold+0x248/0x2c4 [ 37.387234][ T145] openvswitch: cpu_id mismatch with handler threads [ 37.387410][ T145] openvswitch: cpu_id mismatch with handler threads [ 37.397029][ T3609] ? ovs_dp_cmd_new+0xdf5/0x1300 [ 37.408515][ T3609] __warn.cold+0x259/0x2c4 [ 37.412939][ T3609] ? ovs_dp_cmd_new+0xdf5/0x1300 [ 37.417896][ T3609] report_bug+0x1bc/0x210 [ 37.422241][ T3609] handle_bug+0x3c/0x70 [ 37.426389][ T3609] exc_invalid_op+0x14/0x40 [ 37.430884][ T3609] asm_exc_invalid_op+0x16/0x20 [ 37.435726][ T3609] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300 [ 37.441264][ T3609] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 b7 fe 53 f8 48 c7 c7 00 13 21 8b e8 c7 a5 16 00 <0f> 0b eb be 4c 89 e7 e8 9f 14 a1 f8 eb d5 e8 38 14 a1 f8 e9 3f ff [ 37.460864][ T3609] RSP: 0018:ffffc90003daf4e8 EFLAGS: 00010282 [ 37.466929][ T3609] RAX: 0000000000000000 RBX: ffff88814b107000 RCX: 0000000000000000 [ 37.474905][ T3609] RDX: ffff8880215f5880 RSI: ffffffff8160f738 RDI: fffff520007b5e8f [ 37.482865][ T3609] RBP: ffff8880126d2700 R08: 0000000000000005 R09: 0000000000000000 [ 37.490829][ T3609] R10: 0000000080000000 R11: 676e6970706f7244 R12: ffff88814b107068 [ 37.498789][ T3609] R13: 0000000000000008 R14: ffff8880126d2758 R15: ffff88801cfc0300 [ 37.506754][ T3609] ? vprintk+0x88/0x90 [ 37.510817][ T3609] ? ovs_dp_cmd_new+0xdf5/0x1300 [ 37.515752][ T3609] ? ovs_dp_cmd_fill_info+0xc30/0xc30 [ 37.522618][ T3609] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 37.530009][ T3609] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 37.537311][ T3609] genl_family_rcv_msg_doit+0x228/0x320 [ 37.542871][ T3609] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 37.550240][ T3609] ? ns_capable+0xd9/0x100 [ 37.554661][ T3609] genl_rcv_msg+0x441/0x780 [ 37.559253][ T3609] ? genl_get_cmd+0x480/0x480 [ 37.563924][ T3609] ? ovs_dp_cmd_fill_info+0xc30/0xc30 [ 37.569307][ T3609] ? lock_release+0x780/0x780 [ 37.573992][ T3609] ? rcu_read_lock_sched_held+0xd/0x70 [ 37.579487][ T3609] netlink_rcv_skb+0x153/0x420 [ 37.584272][ T3609] ? genl_get_cmd+0x480/0x480 [ 37.588945][ T3609] ? netlink_ack+0xd50/0xd50 [ 37.593529][ T3609] ? netlink_deliver_tap+0x1b1/0xc40 [ 37.598806][ T3609] genl_rcv+0x24/0x40 [ 37.602800][ T3609] netlink_unicast+0x543/0x7f0 [ 37.607577][ T3609] ? netlink_attachskb+0x880/0x880 [ 37.613204][ T3609] ? __phys_addr+0xc4/0x140 [ 37.617732][ T3609] ? __phys_addr_symbol+0x2c/0x70 [ 37.622775][ T3609] ? __check_object_size+0x2de/0x700 [ 37.628088][ T3609] netlink_sendmsg+0x917/0xe10 [ 37.632844][ T3609] ? netlink_unicast+0x7f0/0x7f0 [ 37.637777][ T3609] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 37.643061][ T3609] ? netlink_unicast+0x7f0/0x7f0 [ 37.647998][ T3609] sock_sendmsg+0xcf/0x120 [ 37.652432][ T3609] ____sys_sendmsg+0x712/0x8c0 [ 37.657219][ T3609] ? copy_msghdr_from_user+0xfc/0x150 [ 37.662674][ T3609] ? kernel_sendmsg+0x50/0x50 [ 37.667367][ T3609] ___sys_sendmsg+0x110/0x1b0 [ 37.672054][ T3609] ? do_recvmmsg+0x6e0/0x6e0 [ 37.676631][ T3609] ? __schedule+0xae7/0x52b0 [ 37.681236][ T3609] ? trace_hardirqs_on+0x2d/0x120 [ 37.686352][ T3609] ? rcu_read_lock_sched_held+0xd/0x70 [ 37.691836][ T3609] ? lock_acquire+0x480/0x570 [ 37.696512][ T3609] ? rcu_read_lock_sched_held+0xd/0x70 [ 37.701971][ T3609] ? lock_acquire+0x480/0x570 [ 37.706638][ T3609] ? lock_release+0x780/0x780 [ 37.711307][ T3609] ? ptrace_stop.part.0+0x5ec/0xa80 [ 37.716500][ T3609] ? do_raw_spin_lock+0x120/0x2a0 [ 37.721523][ T3609] ? rwlock_bug.part.0+0x90/0x90 [ 37.726468][ T3609] ? __fget_light+0x20a/0x270 [ 37.731142][ T3609] __sys_sendmsg+0xf3/0x1c0 [ 37.735646][ T3609] ? __sys_sendmsg_sock+0x30/0x30 [ 37.740685][ T3609] ? lock_downgrade+0x6e0/0x6e0 [ 37.745535][ T3609] ? _raw_spin_unlock_irq+0x2a/0x40 [ 37.750732][ T3609] ? ptrace_notify+0xfa/0x140 [ 37.755405][ T3609] do_syscall_64+0x35/0xb0 [ 37.759815][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 37.765797][ T3609] RIP: 0033:0x7f19f4324ee9 [ 37.770203][ T3609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.789823][ T3609] RSP: 002b:00007ffe48c5ff68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.798230][ T3609] RAX: ffffffffffffffda RBX: 0000000000008f93 RCX: 00007f19f4324ee9 [ 37.806199][ T3609] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 37.814167][ T3609] RBP: 0000000000000000 R08: 00007ffe48c60108 R09: 00007ffe48c60108 [ 37.822139][ T3609] R10: 00007ffe48c5f9e0 R11: 0000000000000246 R12: 00007ffe48c5ff7c [ 37.830106][ T3609] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 37.838086][ T3609] [ 37.841257][ T3609] Kernel Offset: disabled [ 37.845577][ T3609] Rebooting in 86400 seconds..