./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1528087325 <...> forked to background, child pid 3186 no interfaces have a carrier [ 26.842664][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.854158][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.56' (ECDSA) to the list of known hosts. execve("./syz-executor1528087325", ["./syz-executor1528087325"], 0x7ffdc3e44060 /* 10 vars */) = 0 brk(NULL) = 0x5555571aa000 brk(0x5555571aac40) = 0x5555571aac40 arch_prctl(ARCH_SET_FS, 0x5555571aa300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1528087325", 4096) = 28 brk(0x5555571cbc40) = 0x5555571cbc40 brk(0x5555571cc000) = 0x5555571cc000 mprotect(0x7f49a36d1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 3 ioctl(3, SIOCSARP, 0x20000040) = 0 socket(AF_INET, SOCK_DGRAM, IPPROTO_UDPLITE) = 4 syzkaller login: [ 49.824117][ T3608] ------------[ cut here ]------------ [ 49.829711][ T3608] memcpy: detected field-spanning write (size 16) of single field "r->arp_ha.sa_data" at net/ipv4/arp.c:1128 (size 14) [ 49.842503][ T3608] WARNING: CPU: 0 PID: 3608 at net/ipv4/arp.c:1128 arp_ioctl+0x7eb/0x840 [ 49.850969][ T3608] Modules linked in: [ 49.854860][ T3608] CPU: 0 PID: 3608 Comm: syz-executor152 Not tainted 6.0.0-syzkaller-03015-g2bca25eaeba6 #0 [ 49.865059][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 49.875162][ T3608] RIP: 0010:arp_ioctl+0x7eb/0x840 [ 49.880235][ T3608] Code: fc ff ff e8 07 2e 8e f9 b9 0e 00 00 00 4c 89 e6 48 c7 c2 40 55 02 8b 48 c7 c7 20 54 02 8b c6 05 ea 34 de 05 01 e8 c1 56 51 01 <0f> 0b e9 66 fc ff ff e8 d9 2d 8e f9 41 be fa ff ff ff e8 fe 5c 6f [ 49.899892][ T3608] RSP: 0018:ffffc90003befa70 EFLAGS: 00010286 [ 49.905961][ T3608] RAX: 0000000000000000 RBX: ffff8880762f9828 RCX: 0000000000000000 [ 49.913995][ T3608] RDX: ffff88807cfbd880 RSI: ffffffff8160f6f8 RDI: fffff5200077df40 [ 49.922003][ T3608] RBP: 1ffff9200077df54 R08: 0000000000000005 R09: 0000000000000000 [ 49.930013][ T3608] R10: 0000000000000201 R11: 0000000000000000 R12: 0000000000000010 [ 49.938025][ T3608] R13: ffff8880762f9800 R14: 0000000000000000 R15: ffff8880762f9924 [ 49.945992][ T3608] FS: 00005555571aa300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 49.954965][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.961586][ T3608] CR2: 0000000000458e30 CR3: 00000000735eb000 CR4: 00000000003506f0 [ 49.969633][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.977647][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.985704][ T3608] Call Trace: [ 49.989043][ T3608] [ 49.991997][ T3608] ? arp_req_delete+0x520/0x520 [ 49.996895][ T3608] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 50.002747][ T3608] ? find_held_lock+0x2d/0x110 [ 50.007570][ T3608] inet_ioctl+0x27f/0x320 [ 50.011927][ T3608] ? ipip_gro_complete+0x100/0x100 [ 50.017082][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 50.021959][ T3608] ? tomoyo_path_number_perm+0x441/0x590 [ 50.027634][ T3608] ? kfree+0xe2/0x580 [ 50.031642][ T3608] ? tomoyo_path_number_perm+0x24e/0x590 [ 50.037349][ T3608] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 50.043185][ T3608] sock_do_ioctl+0xcc/0x230 [ 50.047731][ T3608] ? get_user_ifreq+0x250/0x250 [ 50.052599][ T3608] ? vfs_fileattr_set+0xbe0/0xbe0 [ 50.057686][ T3608] sock_ioctl+0x2f1/0x640 [ 50.062034][ T3608] ? br_ioctl_call+0xa0/0xa0 [ 50.066674][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 50.071551][ T3608] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.076804][ T3608] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.081765][ T3608] ? br_ioctl_call+0xa0/0xa0 [ 50.086404][ T3608] __x64_sys_ioctl+0x193/0x200 [ 50.091200][ T3608] do_syscall_64+0x35/0xb0 [ 50.095681][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.101627][ T3608] RIP: 0033:0x7f49a3664c49 [ 50.106056][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.125712][ T3608] RSP: 002b:00007ffd29e80838 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.134175][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49a3664c49 [ 50.142232][ T3608] RDX: 0000000020000040 RSI: 0000000000008954 RDI: 0000000000000004 [ 50.150281][ T3608] RBP: 00007f49a3628df0 R08: 0000000000000000 R09: 0000000000000000 [ 50.158312][ T3608] R10: 00000000000000ff R11: 0000000000000246 R12: 00007f49a3628e80 [ 50.166504][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.174507][ T3608] [ 50.177572][ T3608] Kernel panic - not syncing: panic_on_warn set ... [ 50.184160][ T3608] CPU: 0 PID: 3608 Comm: syz-executor152 Not tainted 6.0.0-syzkaller-03015-g2bca25eaeba6 #0 [ 50.194220][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 50.204265][ T3608] Call Trace: [ 50.207537][ T3608] [ 50.210460][ T3608] dump_stack_lvl+0xcd/0x134 [ 50.215052][ T3608] panic+0x2c8/0x627 [ 50.218942][ T3608] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.224921][ T3608] ? __warn.cold+0x248/0x2c4 [ 50.229511][ T3608] ? arp_ioctl+0x7eb/0x840 [ 50.233920][ T3608] __warn.cold+0x259/0x2c4 [ 50.238329][ T3608] ? __wake_up_klogd.part.0+0x99/0xf0 [ 50.243700][ T3608] ? arp_ioctl+0x7eb/0x840 [ 50.248113][ T3608] report_bug+0x1bc/0x210 [ 50.252439][ T3608] handle_bug+0x3c/0x70 [ 50.256588][ T3608] exc_invalid_op+0x14/0x40 [ 50.261084][ T3608] asm_exc_invalid_op+0x16/0x20 [ 50.265935][ T3608] RIP: 0010:arp_ioctl+0x7eb/0x840 [ 50.270956][ T3608] Code: fc ff ff e8 07 2e 8e f9 b9 0e 00 00 00 4c 89 e6 48 c7 c2 40 55 02 8b 48 c7 c7 20 54 02 8b c6 05 ea 34 de 05 01 e8 c1 56 51 01 <0f> 0b e9 66 fc ff ff e8 d9 2d 8e f9 41 be fa ff ff ff e8 fe 5c 6f [ 50.290559][ T3608] RSP: 0018:ffffc90003befa70 EFLAGS: 00010286 [ 50.296616][ T3608] RAX: 0000000000000000 RBX: ffff8880762f9828 RCX: 0000000000000000 [ 50.304579][ T3608] RDX: ffff88807cfbd880 RSI: ffffffff8160f6f8 RDI: fffff5200077df40 [ 50.312541][ T3608] RBP: 1ffff9200077df54 R08: 0000000000000005 R09: 0000000000000000 [ 50.320503][ T3608] R10: 0000000000000201 R11: 0000000000000000 R12: 0000000000000010 [ 50.328465][ T3608] R13: ffff8880762f9800 R14: 0000000000000000 R15: ffff8880762f9924 [ 50.336437][ T3608] ? vprintk+0x88/0x90 [ 50.340509][ T3608] ? arp_req_delete+0x520/0x520 [ 50.345359][ T3608] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 50.351384][ T3608] ? find_held_lock+0x2d/0x110 [ 50.356190][ T3608] inet_ioctl+0x27f/0x320 [ 50.360558][ T3608] ? ipip_gro_complete+0x100/0x100 [ 50.365673][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 50.370520][ T3608] ? tomoyo_path_number_perm+0x441/0x590 [ 50.376156][ T3608] ? kfree+0xe2/0x580 [ 50.380168][ T3608] ? tomoyo_path_number_perm+0x24e/0x590 [ 50.385802][ T3608] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 50.391616][ T3608] sock_do_ioctl+0xcc/0x230 [ 50.396130][ T3608] ? get_user_ifreq+0x250/0x250 [ 50.400985][ T3608] ? vfs_fileattr_set+0xbe0/0xbe0 [ 50.406017][ T3608] sock_ioctl+0x2f1/0x640 [ 50.410360][ T3608] ? br_ioctl_call+0xa0/0xa0 [ 50.414952][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 50.419814][ T3608] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.425018][ T3608] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.429955][ T3608] ? br_ioctl_call+0xa0/0xa0 [ 50.434552][ T3608] __x64_sys_ioctl+0x193/0x200 [ 50.439337][ T3608] do_syscall_64+0x35/0xb0 [ 50.443748][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.449641][ T3608] RIP: 0033:0x7f49a3664c49 [ 50.454046][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.473644][ T3608] RSP: 002b:00007ffd29e80838 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.482136][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49a3664c49 [ 50.490103][ T3608] RDX: 0000000020000040 RSI: 0000000000008954 RDI: 0000000000000004 [ 50.498064][ T3608] RBP: 00007f49a3628df0 R08: 0000000000000000 R09: 0000000000000000 [ 50.506026][ T3608] R10: 00000000000000ff R11: 0000000000000246 R12: 00007f49a3628e80 [ 50.513985][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.521957][ T3608] [ 50.525334][ T3608] Kernel Offset: disabled [ 50.529734][ T3608] Rebooting in 86400 seconds..