./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3432436354
<...>
DUID 00:04:91:bc:de:6a:11:68:5e:b9:f7:f7:da:c6:96:db:93:18
forked to background, child pid 3186
[ 26.666230][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.676932][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts.
execve("./syz-executor3432436354", ["./syz-executor3432436354"], 0x7ffe8a3272d0 /* 10 vars */) = 0
brk(NULL) = 0x555557455000
brk(0x555557455c40) = 0x555557455c40
arch_prctl(ARCH_SET_FS, 0x555557455300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3432436354", 4096) = 28
brk(0x555557476c40) = 0x555557476c40
brk(0x555557477000) = 0x555557477000
mprotect(0x7fa537612000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3609 attached
, child_tidptr=0x5555574555d0) = 3609
[pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3609] setpgid(0, 0) = 0
[pid 3609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3609] write(3, "1000", 4) = 4
[pid 3609] close(3) = 0
[pid 3609] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid 3609] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x37\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x00\x01\x80\x06\x00\x00\x00\x08\x00\x00\x00\x08\x00\x02\x00\xff\xff\xff\xff\x08\x00\x05\x00\x08\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 52
[pid 3609] exit_group(0) = ?
[pid 3609] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3609, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574555d0) = 3611
./strace-static-x86_64: Process 3611 attached
[pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3611] setpgid(0, 0) = 0
[pid 3611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3611] write(3, "1000", 4) = 4
[pid 3611] close(3) = 0
[pid 3611] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
syzkaller login: [ 45.049100][ T3609] device entered promiscuous mode
[ 45.082543][ T3611] ------------[ cut here ]------------
[ 45.088777][ T3611] Dropping previously announced user features
[ 45.096352][ T3611] WARNING: CPU: 1 PID: 3611 at net/openvswitch/datapath.c:1619 ovs_dp_cmd_new+0xdf5/0x1300
[ 45.107907][ T3611] Modules linked in:
[ 45.112342][ T3611] CPU: 1 PID: 3611 Comm: syz-executor343 Not tainted 6.0.0-syzkaller-02750-gaabf6155dfb8 #0
[ 45.123176][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 45.134024][ T3611] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 45.140748][ T3611] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 27 ba 53 f8 48 c7 c7 80 19 21 8b e8 f7 a2 16 00 <0f> 0b eb be 4c 89 e7 e8 2f c8 a0 f8 eb d5 e8 c8 c7 a0 f8 e9 3f ff
[ 45.161291][ T3611] RSP: 0018:ffffc90003d4f4e8 EFLAGS: 00010282
[ 45.168207][ T3611] RAX: 0000000000000000 RBX: ffff888026ab9a00 RCX: 0000000000000000
[ 45.177086][ T3611] RDX: ffff88802294d880 RSI: ffffffff8160f6f8 RDI: fffff520007a9e8f
[ 45.185895][ T3611] RBP: ffff888016ef0f00 R08: 0000000000000005 R09: 0000000000000000
[ 45.194402][ T3611] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888026ab9a68
[ 45.203328][ T3611] R13: 0000000000000008 R14: ffff888016ef0f58 R15: ffff888016eec480
[ 45.212163][ T3611] FS: 0000555557455300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 45.222009][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 45.229488][ T3611] CR2: 0000000020000916 CR3: 000000001d077000 CR4: 00000000003506e0
[ 45.238307][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 45.247148][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 45.256335][ T3611] Call Trace:
[ 45.260162][ T3611]
[ 45.263610][ T3611] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 45.270003][ T3611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 45.278284][ T3611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 45.286497][ T3611] genl_family_rcv_msg_doit+0x228/0x320
[ 45.292606][ T3611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 45.301014][ T3611] ? ns_capable+0xd9/0x100
[ 45.306272][ T3611] genl_rcv_msg+0x441/0x780
[ 45.311352][ T3611] ? genl_get_cmd+0x480/0x480
[ 45.316991][ T3611] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 45.322921][ T3611] ? lock_release+0x780/0x780
[ 45.328601][ T3611] netlink_rcv_skb+0x153/0x420
[ 45.333876][ T3611] ? genl_get_cmd+0x480/0x480
[ 45.339538][ T3611] ? netlink_ack+0xd50/0xd50
[ 45.344636][ T3611] ? netlink_deliver_tap+0x1b1/0xc40
[ 45.351005][ T3611] genl_rcv+0x24/0x40
[ 45.355841][ T3611] netlink_unicast+0x543/0x7f0
[ 45.361143][ T3611] ? netlink_attachskb+0x880/0x880
[ 45.367378][ T3611] ? __phys_addr+0xc4/0x140
[ 45.372418][ T3611] ? __phys_addr_symbol+0x2c/0x70
[ 45.378408][ T3611] ? __check_object_size+0x2de/0x700
[ 45.384233][ T3611] netlink_sendmsg+0x917/0xe10
[ 45.389886][ T3611] ? netlink_unicast+0x7f0/0x7f0
[ 45.395691][ T3611] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 45.401508][ T3611] ? netlink_unicast+0x7f0/0x7f0
[ 45.407380][ T3611] sock_sendmsg+0xcf/0x120
[ 45.412326][ T3611] ____sys_sendmsg+0x712/0x8c0
[ 45.418131][ T3611] ? copy_msghdr_from_user+0xfc/0x150
[ 45.424026][ T3611] ? kernel_sendmsg+0x50/0x50
[ 45.429586][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 45.436438][ T3611] ___sys_sendmsg+0x110/0x1b0
[ 45.441641][ T3611] ? do_recvmmsg+0x6e0/0x6e0
[ 45.447164][ T3611] ? lock_release+0x780/0x780
[ 45.452369][ T3611] ? ptrace_stop.part.0+0x5ec/0xa80
[ 45.458530][ T3611] ? do_raw_spin_lock+0x120/0x2a0
[ 45.464067][ T3611] ? rwlock_bug.part.0+0x90/0x90
[ 45.470219][ T3611] ? _raw_spin_lock_irq+0x41/0x50
[ 45.476564][ T3611] ? __fget_light+0x20a/0x270
[ 45.481792][ T3611] __sys_sendmsg+0xf3/0x1c0
[ 45.487243][ T3611] ? __sys_sendmsg_sock+0x30/0x30
[ 45.492798][ T3611] ? lock_downgrade+0x6e0/0x6e0
[ 45.498820][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 45.504552][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40
[ 45.510793][ T3611] ? ptrace_notify+0xfa/0x140
[ 45.516346][ T3611] do_syscall_64+0x35/0xb0
[ 45.521304][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 45.528128][ T3611] RIP: 0033:0x7fa5375a5e89
[ 45.552280][ T3611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 45.572912][ T3611] RSP: 002b:00007ffe5f9d10c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 45.582082][ T3611] RAX: ffffffffffffffda RBX: 000000000000afd6 RCX: 00007fa5375a5e89
[ 45.590863][ T3611] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 45.599331][ T3611] RBP: 0000000000000000 R08: 00007ffe5f9d1268 R09: 00007ffe5f9d1268
[ 45.608065][ T3611] R10: 00007ffe5f9d0b40 R11: 0000000000000246 R12: 00007ffe5f9d10dc
[ 45.616388][ T3611] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 45.624423][ T3611]
[ 45.627772][ T3611] Kernel panic - not syncing: panic_on_warn set ...
[ 45.634728][ T3611] CPU: 0 PID: 3611 Comm: syz-executor343 Not tainted 6.0.0-syzkaller-02750-gaabf6155dfb8 #0
[ 45.644827][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 45.654901][ T3611] Call Trace:
[ 45.658203][ T3611]
[ 45.661151][ T3611] dump_stack_lvl+0xcd/0x134
[ 45.665779][ T3611] panic+0x2c8/0x627
[ 45.669709][ T3611] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 45.675737][ T3611] ? __warn.cold+0x248/0x2c4
[ 45.680365][ T3611] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 45.685341][ T3611] __warn.cold+0x259/0x2c4
[ 45.689790][ T3611] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 45.694762][ T3611] report_bug+0x1bc/0x210
[ 45.699132][ T3611] handle_bug+0x3c/0x70
[ 45.703340][ T3611] exc_invalid_op+0x14/0x40
[ 45.707875][ T3611] asm_exc_invalid_op+0x16/0x20
[ 45.712769][ T3611] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 45.718362][ T3611] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 27 ba 53 f8 48 c7 c7 80 19 21 8b e8 f7 a2 16 00 <0f> 0b eb be 4c 89 e7 e8 2f c8 a0 f8 eb d5 e8 c8 c7 a0 f8 e9 3f ff
[ 45.738004][ T3611] RSP: 0018:ffffc90003d4f4e8 EFLAGS: 00010282
[ 45.744116][ T3611] RAX: 0000000000000000 RBX: ffff888026ab9a00 RCX: 0000000000000000
[ 45.752117][ T3611] RDX: ffff88802294d880 RSI: ffffffff8160f6f8 RDI: fffff520007a9e8f
[ 45.760119][ T3611] RBP: ffff888016ef0f00 R08: 0000000000000005 R09: 0000000000000000
[ 45.768123][ T3611] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888026ab9a68
[ 45.776123][ T3611] R13: 0000000000000008 R14: ffff888016ef0f58 R15: ffff888016eec480
[ 45.784137][ T3611] ? vprintk+0x88/0x90
[ 45.788247][ T3611] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 45.793245][ T3611] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 45.798668][ T3611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 45.806083][ T3611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 45.813421][ T3611] genl_family_rcv_msg_doit+0x228/0x320
[ 45.819018][ T3611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 45.826451][ T3611] ? ns_capable+0xd9/0x100
[ 45.830930][ T3611] genl_rcv_msg+0x441/0x780
[ 45.835571][ T3611] ? genl_get_cmd+0x480/0x480
[ 45.840302][ T3611] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 45.845716][ T3611] ? lock_release+0x780/0x780
[ 45.850434][ T3611] netlink_rcv_skb+0x153/0x420
[ 45.855236][ T3611] ? genl_get_cmd+0x480/0x480
[ 45.859954][ T3611] ? netlink_ack+0xd50/0xd50
[ 45.864588][ T3611] ? netlink_deliver_tap+0x1b1/0xc40
[ 45.869921][ T3611] genl_rcv+0x24/0x40
[ 45.873939][ T3611] netlink_unicast+0x543/0x7f0
[ 45.878745][ T3611] ? netlink_attachskb+0x880/0x880
[ 45.883887][ T3611] ? __phys_addr+0xc4/0x140
[ 45.888435][ T3611] ? __phys_addr_symbol+0x2c/0x70
[ 45.893501][ T3611] ? __check_object_size+0x2de/0x700
[ 45.898922][ T3611] netlink_sendmsg+0x917/0xe10
[ 45.903724][ T3611] ? netlink_unicast+0x7f0/0x7f0
[ 45.908713][ T3611] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 45.914041][ T3611] ? netlink_unicast+0x7f0/0x7f0
[ 45.919014][ T3611] sock_sendmsg+0xcf/0x120
[ 45.923462][ T3611] ____sys_sendmsg+0x712/0x8c0
[ 45.928350][ T3611] ? copy_msghdr_from_user+0xfc/0x150
[ 45.933757][ T3611] ? kernel_sendmsg+0x50/0x50
[ 45.938480][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 45.944498][ T3611] ___sys_sendmsg+0x110/0x1b0
[ 45.949218][ T3611] ? do_recvmmsg+0x6e0/0x6e0
[ 45.953856][ T3611] ? lock_release+0x780/0x780
[ 45.958564][ T3611] ? ptrace_stop.part.0+0x5ec/0xa80
[ 45.963795][ T3611] ? do_raw_spin_lock+0x120/0x2a0
[ 45.968851][ T3611] ? rwlock_bug.part.0+0x90/0x90
[ 45.973828][ T3611] ? _raw_spin_lock_irq+0x41/0x50
[ 45.978897][ T3611] ? __fget_light+0x20a/0x270
[ 45.983617][ T3611] __sys_sendmsg+0xf3/0x1c0
[ 45.988155][ T3611] ? __sys_sendmsg_sock+0x30/0x30
[ 45.993214][ T3611] ? lock_downgrade+0x6e0/0x6e0
[ 45.998105][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 46.003338][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40
[ 46.008605][ T3611] ? ptrace_notify+0xfa/0x140
[ 46.013321][ T3611] do_syscall_64+0x35/0xb0
[ 46.017778][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 46.023709][ T3611] RIP: 0033:0x7fa5375a5e89
[ 46.028320][ T3611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 46.048073][ T3611] RSP: 002b:00007ffe5f9d10c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 46.056525][ T3611] RAX: ffffffffffffffda RBX: 000000000000afd6 RCX: 00007fa5375a5e89
[ 46.064531][ T3611] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 46.072621][ T3611] RBP: 0000000000000000 R08: 00007ffe5f9d1268 R09: 00007ffe5f9d1268
[ 46.080622][ T3611] R10: 00007ffe5f9d0b40 R11: 0000000000000246 R12: 00007ffe5f9d10dc
[ 46.088627][ T3611] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 46.096649][ T3611]
[ 46.099888][ T3611] Kernel Offset: disabled
[ 46.104292][ T3611] Rebooting in 86400 seconds..