./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1451385095
<...>
DUID 00:04:79:1d:56:62:bc:67:69:7e:f5:c2:9b:6f:b3:f3:7d:3d
forked to background, child pid 3187
[ 27.283220][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.294305][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.200' (ECDSA) to the list of known hosts.
execve("./syz-executor1451385095", ["./syz-executor1451385095"], 0x7ffe22f31840 /* 10 vars */) = 0
brk(NULL) = 0x555556769000
brk(0x555556769c40) = 0x555556769c40
arch_prctl(ARCH_SET_FS, 0x555556769300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1451385095", 4096) = 28
brk(0x55555678ac40) = 0x55555678ac40
brk(0x55555678b000) = 0x55555678b000
mprotect(0x7efed4efc000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3610 attached
, child_tidptr=0x5555567695d0) = 3610
[pid 3610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3610] setpgid(0, 0) = 0
[pid 3610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3610] write(3, "1000", 4) = 4
[pid 3610] close(3) = 0
[pid 3610] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid 3610] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x00\x00\x00\x37\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x00\x01\x80\x06\x00\x00\x00\x08\x00\x00\x00\x08\x00\x02\x00\xff\xff\xff\xff\x08\x00\x05\x00\x08\x00\x00\x00\x08\x00\x08\x80\x04\x00\x00\x00", iov_len=60}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60
[pid 3610] exit_group(0) = ?
[pid 3610] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3610, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555567695d0) = 3613
./strace-static-x86_64: Process 3613 attached
[pid 3613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3613] setpgid(0, 0) = 0
[pid 3613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3613] write(3, "1000", 4) = 4
[pid 3613] close(3) = 0
[pid 3613] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
syzkaller login: [ 49.643902][ T3610] device entered promiscuous mode
[ 49.676789][ T3613] ------------[ cut here ]------------
[ 49.682872][ T3613] Dropping previously announced user features
[ 49.689708][ T3613] WARNING: CPU: 0 PID: 3613 at net/openvswitch/datapath.c:1619 ovs_dp_cmd_new+0xdf5/0x1300
[ 49.700182][ T3613] Modules linked in:
[ 49.705004][ T3613] CPU: 0 PID: 3613 Comm: syz-executor145 Not tainted 6.0.0-syzkaller-02750-gaabf6155dfb8 #0
[ 49.715832][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 49.727250][ T3613] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 49.733711][ T3613] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 27 ba 53 f8 48 c7 c7 80 19 21 8b e8 f7 a2 16 00 <0f> 0b eb be 4c 89 e7 e8 2f c8 a0 f8 eb d5 e8 c8 c7 a0 f8 e9 3f ff
[ 49.754379][ T3613] RSP: 0018:ffffc90003d4f4e8 EFLAGS: 00010282
[ 49.760997][ T3613] RAX: 0000000000000000 RBX: ffff8880256bb200 RCX: 0000000000000000
[ 49.769944][ T3613] RDX: ffff88801e515880 RSI: ffffffff8160f6f8 RDI: fffff520007a9e8f
[ 49.778795][ T3613] RBP: ffff8880256bb400 R08: 0000000000000005 R09: 0000000000000000
[ 49.787879][ T3613] R10: 0000000080000000 R11: 0000000000000000 R12: ffff8880256bb268
[ 49.796714][ T3613] R13: 0000000000000008 R14: ffff8880256bb458 R15: ffff888026ccd980
[ 49.805534][ T3613] FS: 0000555556769300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 49.815306][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.822783][ T3613] CR2: 000055b4eb569528 CR3: 00000000718c6000 CR4: 00000000003506e0
[ 49.831396][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.840318][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.849139][ T3613] Call Trace:
[ 49.853206][ T3613]
[ 49.856668][ T3613] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 49.862970][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 49.870905][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 49.879111][ T3613] genl_family_rcv_msg_doit+0x228/0x320
[ 49.885510][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 49.893721][ T3613] ? ns_capable+0xd9/0x100
[ 49.898698][ T3613] genl_rcv_msg+0x441/0x780
[ 49.904163][ T3613] ? genl_get_cmd+0x480/0x480
[ 49.909379][ T3613] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 49.915654][ T3613] ? lock_release+0x780/0x780
[ 49.920870][ T3613] netlink_rcv_skb+0x153/0x420
[ 49.926647][ T3613] ? genl_get_cmd+0x480/0x480
[ 49.931843][ T3613] ? netlink_ack+0xd50/0xd50
[ 49.937629][ T3613] ? netlink_deliver_tap+0x1b1/0xc40
[ 49.943703][ T3613] genl_rcv+0x24/0x40
[ 49.948282][ T3613] netlink_unicast+0x543/0x7f0
[ 49.954046][ T3613] ? netlink_attachskb+0x880/0x880
[ 49.959708][ T3613] ? __phys_addr+0xc4/0x140
[ 49.965116][ T3613] ? __phys_addr_symbol+0x2c/0x70
[ 49.970697][ T3613] ? __check_object_size+0x2de/0x700
[ 49.976940][ T3613] netlink_sendmsg+0x917/0xe10
[ 49.982565][ T3613] ? netlink_unicast+0x7f0/0x7f0
[ 49.988073][ T3613] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 49.994263][ T3613] ? netlink_unicast+0x7f0/0x7f0
[ 49.999727][ T3613] sock_sendmsg+0xcf/0x120
[ 50.005074][ T3613] ____sys_sendmsg+0x712/0x8c0
[ 50.010386][ T3613] ? copy_msghdr_from_user+0xfc/0x150
[ 50.016699][ T3613] ? kernel_sendmsg+0x50/0x50
[ 50.021908][ T3613] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.028917][ T3613] ___sys_sendmsg+0x110/0x1b0
[ 50.034436][ T3613] ? do_recvmmsg+0x6e0/0x6e0
[ 50.039559][ T3613] ? lock_release+0x780/0x780
[ 50.045384][ T3613] ? ptrace_stop.part.0+0x5ec/0xa80
[ 50.051135][ T3613] ? do_raw_spin_lock+0x120/0x2a0
[ 50.057248][ T3613] ? rwlock_bug.part.0+0x90/0x90
[ 50.062736][ T3613] ? _raw_spin_lock_irq+0x41/0x50
[ 50.067998][ T3613] ? __fget_light+0x20a/0x270
[ 50.073280][ T3613] __sys_sendmsg+0xf3/0x1c0
[ 50.078005][ T3613] ? __sys_sendmsg_sock+0x30/0x30
[ 50.083533][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 50.088610][ T3613] ? lockdep_hardirqs_on+0x79/0x100
[ 50.094707][ T3613] ? _raw_spin_unlock_irq+0x2a/0x40
[ 50.100373][ T3613] ? ptrace_notify+0xfa/0x140
[ 50.105611][ T3613] do_syscall_64+0x35/0xb0
[ 50.110279][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.116692][ T3613] RIP: 0033:0x7efed4e8eee9
[ 50.121249][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.171871][ T3613] RSP: 002b:00007ffe1b5c25a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 50.181116][ T3613] RAX: ffffffffffffffda RBX: 000000000000c1bd RCX: 00007efed4e8eee9
[ 50.189956][ T3613] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 50.198880][ T3613] RBP: 0000000000000000 R08: 00007ffe1b5c2748 R09: 00007ffe1b5c2748
[ 50.207520][ T3613] R10: 00007ffe1b5c2020 R11: 0000000000000246 R12: 00007ffe1b5c25bc
[ 50.216185][ T3613] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 50.224972][ T3613]
[ 50.228112][ T3613] Kernel panic - not syncing: panic_on_warn set ...
[ 50.234719][ T3613] CPU: 1 PID: 3613 Comm: syz-executor145 Not tainted 6.0.0-syzkaller-02750-gaabf6155dfb8 #0
[ 50.244812][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 50.254895][ T3613] Call Trace:
[ 50.258201][ T3613]
[ 50.261150][ T3613] dump_stack_lvl+0xcd/0x134
[ 50.265771][ T3613] panic+0x2c8/0x627
[ 50.269686][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.275684][ T3613] ? __warn.cold+0x248/0x2c4
[ 50.280290][ T3613] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 50.285243][ T3613] __warn.cold+0x259/0x2c4
[ 50.289667][ T3613] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 50.294619][ T3613] report_bug+0x1bc/0x210
[ 50.298964][ T3613] handle_bug+0x3c/0x70
[ 50.303129][ T3613] exc_invalid_op+0x14/0x40
[ 50.307737][ T3613] asm_exc_invalid_op+0x16/0x20
[ 50.312608][ T3613] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 50.318169][ T3613] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 27 ba 53 f8 48 c7 c7 80 19 21 8b e8 f7 a2 16 00 <0f> 0b eb be 4c 89 e7 e8 2f c8 a0 f8 eb d5 e8 c8 c7 a0 f8 e9 3f ff
[ 50.337795][ T3613] RSP: 0018:ffffc90003d4f4e8 EFLAGS: 00010282
[ 50.343871][ T3613] RAX: 0000000000000000 RBX: ffff8880256bb200 RCX: 0000000000000000
[ 50.351850][ T3613] RDX: ffff88801e515880 RSI: ffffffff8160f6f8 RDI: fffff520007a9e8f
[ 50.359827][ T3613] RBP: ffff8880256bb400 R08: 0000000000000005 R09: 0000000000000000
[ 50.367888][ T3613] R10: 0000000080000000 R11: 0000000000000000 R12: ffff8880256bb268
[ 50.375875][ T3613] R13: 0000000000000008 R14: ffff8880256bb458 R15: ffff888026ccd980
[ 50.383872][ T3613] ? vprintk+0x88/0x90
[ 50.387966][ T3613] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 50.392931][ T3613] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 50.398339][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 50.405739][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 50.413048][ T3613] genl_family_rcv_msg_doit+0x228/0x320
[ 50.418613][ T3613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 50.426022][ T3613] ? ns_capable+0xd9/0x100
[ 50.430469][ T3613] genl_rcv_msg+0x441/0x780
[ 50.434992][ T3613] ? genl_get_cmd+0x480/0x480
[ 50.439689][ T3613] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 50.445081][ T3613] ? lock_release+0x780/0x780
[ 50.449790][ T3613] netlink_rcv_skb+0x153/0x420
[ 50.454576][ T3613] ? genl_get_cmd+0x480/0x480
[ 50.459271][ T3613] ? netlink_ack+0xd50/0xd50
[ 50.463880][ T3613] ? netlink_deliver_tap+0x1b1/0xc40
[ 50.469190][ T3613] genl_rcv+0x24/0x40
[ 50.473191][ T3613] netlink_unicast+0x543/0x7f0
[ 50.477971][ T3613] ? netlink_attachskb+0x880/0x880
[ 50.483096][ T3613] ? __phys_addr+0xc4/0x140
[ 50.487626][ T3613] ? __phys_addr_symbol+0x2c/0x70
[ 50.492671][ T3613] ? __check_object_size+0x2de/0x700
[ 50.497981][ T3613] netlink_sendmsg+0x917/0xe10
[ 50.502762][ T3613] ? netlink_unicast+0x7f0/0x7f0
[ 50.507718][ T3613] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 50.513027][ T3613] ? netlink_unicast+0x7f0/0x7f0
[ 50.517986][ T3613] sock_sendmsg+0xcf/0x120
[ 50.522428][ T3613] ____sys_sendmsg+0x712/0x8c0
[ 50.527202][ T3613] ? copy_msghdr_from_user+0xfc/0x150
[ 50.532686][ T3613] ? kernel_sendmsg+0x50/0x50
[ 50.537381][ T3613] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.543377][ T3613] ___sys_sendmsg+0x110/0x1b0
[ 50.548071][ T3613] ? do_recvmmsg+0x6e0/0x6e0
[ 50.552709][ T3613] ? lock_release+0x780/0x780
[ 50.557396][ T3613] ? ptrace_stop.part.0+0x5ec/0xa80
[ 50.562612][ T3613] ? do_raw_spin_lock+0x120/0x2a0
[ 50.567646][ T3613] ? rwlock_bug.part.0+0x90/0x90
[ 50.572594][ T3613] ? _raw_spin_lock_irq+0x41/0x50
[ 50.577652][ T3613] ? __fget_light+0x20a/0x270
[ 50.582349][ T3613] __sys_sendmsg+0xf3/0x1c0
[ 50.586869][ T3613] ? __sys_sendmsg_sock+0x30/0x30
[ 50.591915][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 50.596785][ T3613] ? lockdep_hardirqs_on+0x79/0x100
[ 50.601996][ T3613] ? _raw_spin_unlock_irq+0x2a/0x40
[ 50.607209][ T3613] ? ptrace_notify+0xfa/0x140
[ 50.611909][ T3613] do_syscall_64+0x35/0xb0
[ 50.616348][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.622261][ T3613] RIP: 0033:0x7efed4e8eee9
[ 50.626682][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.646383][ T3613] RSP: 002b:00007ffe1b5c25a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 50.654806][ T3613] RAX: ffffffffffffffda RBX: 000000000000c1bd RCX: 00007efed4e8eee9
[ 50.662783][ T3613] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 50.670762][ T3613] RBP: 0000000000000000 R08: 00007ffe1b5c2748 R09: 00007ffe1b5c2748
[ 50.678743][ T3613] R10: 00007ffe1b5c2020 R11: 0000000000000246 R12: 00007ffe1b5c25bc
[ 50.686723][ T3613] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 50.694805][ T3613]
[ 50.698249][ T3613] Kernel Offset: disabled
[ 50.702650][ T3613] Rebooting in 86400 seconds..