./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2207158732
<...>
DUID 00:04:c5:78:79:07:21:f0:b3:e0:09:b6:1a:d6:4d:97:86:4f
forked to background, child pid 3183
[ 21.485908][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.498381][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts.
execve("./syz-executor2207158732", ["./syz-executor2207158732"], 0x7ffde77b7080 /* 10 vars */) = 0
brk(NULL) = 0x5555565d4000
brk(0x5555565d4c40) = 0x5555565d4c40
arch_prctl(ARCH_SET_FS, 0x5555565d4300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2207158732", 4096) = 28
brk(0x5555565f5c40) = 0x5555565f5c40
brk(0x5555565f6000) = 0x5555565f6000
mprotect(0x7f3231653000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565d45d0) = 3605
./strace-static-x86_64: Process 3605 attached
[pid 3605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3605] setpgid(0, 0) = 0
[pid 3605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3605] write(3, "1000", 4) = 4
[pid 3605] close(3) = 0
[pid 3605] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid 3605] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x00\x00\x00\x37\x00\x09\x00\x00\x00\x00\x00\xd6\x03\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x00\x01\x80\x06\x00\x00\x00\x08\x00\x00\x00\x08\x00\x02\x00\xff\xff\xff\xff\x08\x00\x05\x00\x08\x00\x00\x00\x08\x00\x08\x80\x04\x00\x00\x00", iov_len=60}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60
[pid 3605] exit_group(0) = ?
[pid 3605] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3605, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565d45d0) = 3608
./strace-static-x86_64: Process 3608 attached
[pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3608] setpgid(0, 0) = 0
[pid 3608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3608] write(3, "1000", 4) = 4
[pid 3608] close(3) = 0
[pid 3608] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
syzkaller login: [ 36.988882][ T3605] device entered promiscuous mode
[ 37.008801][ T3608] ------------[ cut here ]------------
[ 37.014793][ T3608] Dropping previously announced user features
[ 37.022099][ T3608] WARNING: CPU: 0 PID: 3608 at net/openvswitch/datapath.c:1619 ovs_dp_cmd_new+0xdf5/0x1300
[ 37.032866][ T3608] Modules linked in:
[ 37.036779][ T3608] CPU: 0 PID: 3608 Comm: syz-executor220 Not tainted 6.0.0-syzkaller-07994-ge8bc52cb8df8 #0
[ 37.047221][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 37.059300][ T3608] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 37.065709][ T3608] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 b7 fe 53 f8 48 c7 c7 00 13 21 8b e8 c7 a5 16 00 <0f> 0b eb be 4c 89 e7 e8 9f 14 a1 f8 eb d5 e8 38 14 a1 f8 e9 3f ff
[ 37.085899][ T3608] RSP: 0018:ffffc90003d1f4e8 EFLAGS: 00010282
[ 37.092636][ T3608] RAX: 0000000000000000 RBX: ffff888016c88d00 RCX: 0000000000000000
[ 37.100949][ T3608] RDX: ffff888021c33b00 RSI: ffffffff8160f738 RDI: fffff520007a3e8f
[ 37.109167][ T3608] RBP: ffff888016c88700 R08: 0000000000000005 R09: 0000000000000000
[ 37.117495][ T3608] R10: 0000000080000000 R11: 676e6970706f7244 R12: ffff888016c88d68
[ 37.125821][ T3608] R13: 0000000000000008 R14: ffff888016c88758 R15: ffff8880274f3d80
[ 37.134165][ T3608] FS: 00005555565d4300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 37.143466][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.150463][ T3608] CR2: 000055cc2e6e0950 CR3: 0000000071089000 CR4: 00000000003506e0
[ 37.158701][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 37.167048][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 37.175341][ T3608] Call Trace:
[ 37.178852][ T3608]
[ 37.182143][ T3608] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 37.187762][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 37.195583][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 37.203341][ T3608] genl_family_rcv_msg_doit+0x228/0x320
[ 37.209280][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 37.217026][ T3608] ? ns_capable+0xd9/0x100
[ 37.221784][ T3608] genl_rcv_msg+0x441/0x780
[ 37.226549][ T3608] ? genl_get_cmd+0x480/0x480
[ 37.231595][ T3608] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 37.237213][ T3608] ? lock_release+0x780/0x780
[ 37.242246][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.247965][ T3608] netlink_rcv_skb+0x153/0x420
[ 37.253147][ T3608] ? genl_get_cmd+0x480/0x480
[ 37.258071][ T3608] ? netlink_ack+0xd50/0xd50
[ 37.263017][ T3608] ? netlink_deliver_tap+0x1b1/0xc40
[ 37.268532][ T3608] genl_rcv+0x24/0x40
[ 37.272890][ T3608] netlink_unicast+0x543/0x7f0
[ 37.278089][ T3608] ? netlink_attachskb+0x880/0x880
[ 37.283479][ T3608] ? __phys_addr+0xc4/0x140
[ 37.294082][ T3608] ? __phys_addr_symbol+0x2c/0x70
[ 37.299557][ T3608] ? __check_object_size+0x2de/0x700
[ 37.305716][ T3608] netlink_sendmsg+0x917/0xe10
[ 37.310746][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 37.315708][ T3608] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 37.321423][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 37.326389][ T3608] sock_sendmsg+0xcf/0x120
[ 37.330995][ T3608] ____sys_sendmsg+0x712/0x8c0
[ 37.335794][ T3608] ? copy_msghdr_from_user+0xfc/0x150
[ 37.341622][ T3608] ? kernel_sendmsg+0x50/0x50
[ 37.346342][ T3608] ___sys_sendmsg+0x110/0x1b0
[ 37.351215][ T3608] ? do_recvmmsg+0x6e0/0x6e0
[ 37.355830][ T3608] ? __schedule+0xae7/0x52b0
[ 37.360668][ T3608] ? trace_hardirqs_on+0x2d/0x120
[ 37.365728][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.369594][ T27] openvswitch: cpu_id mismatch with handler threads
[ 37.371354][ T3608] ? lock_acquire+0x480/0x570
[ 37.383289][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.388785][ T3608] ? lock_acquire+0x480/0x570
[ 37.393655][ T3608] ? lock_release+0x780/0x780
[ 37.398353][ T3608] ? ptrace_stop.part.0+0x5ec/0xa80
[ 37.403758][ T3608] ? do_raw_spin_lock+0x120/0x2a0
[ 37.408810][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 37.413921][ T3608] ? __fget_light+0x20a/0x270
[ 37.418614][ T3608] __sys_sendmsg+0xf3/0x1c0
[ 37.423286][ T3608] ? __sys_sendmsg_sock+0x30/0x30
[ 37.428335][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 37.433698][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 37.439138][ T3608] ? ptrace_notify+0xfa/0x140
[ 37.444211][ T3608] do_syscall_64+0x35/0xb0
[ 37.448876][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 37.455166][ T3608] RIP: 0033:0x7f32315e5ee9
[ 37.459927][ T3608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 37.479932][ T3608] RSP: 002b:00007ffcda55c588 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 37.488592][ T3608] RAX: ffffffffffffffda RBX: 0000000000009057 RCX: 00007f32315e5ee9
[ 37.496973][ T3608] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 37.505319][ T3608] RBP: 0000000000000000 R08: 00007ffcda55c728 R09: 00007ffcda55c728
[ 37.513656][ T3608] R10: 00007ffcda55c000 R11: 0000000000000246 R12: 00007ffcda55c59c
[ 37.521977][ T3608] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 37.529405][ T27] openvswitch: cpu_id mismatch with handler threads
[ 37.530399][ T3608]
[ 37.540498][ T3608] Kernel panic - not syncing: panic_on_warn set ...
[ 37.547099][ T3608] CPU: 0 PID: 3608 Comm: syz-executor220 Not tainted 6.0.0-syzkaller-07994-ge8bc52cb8df8 #0
[ 37.557177][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 37.567331][ T3608] Call Trace:
[ 37.570616][ T3608]
[ 37.573557][ T3608] dump_stack_lvl+0xcd/0x134
[ 37.578518][ T3608] panic+0x2c8/0x622
[ 37.582445][ T3608] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 37.588458][ T3608] ? __warn.cold+0x248/0x2c4
[ 37.593083][ T3608] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 37.598040][ T3608] __warn.cold+0x259/0x2c4
[ 37.602494][ T3608] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 37.607514][ T3608] report_bug+0x1bc/0x210
[ 37.611886][ T3608] handle_bug+0x3c/0x70
[ 37.616068][ T3608] exc_invalid_op+0x14/0x40
[ 37.620597][ T3608] asm_exc_invalid_op+0x16/0x20
[ 37.625468][ T3608] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 37.631039][ T3608] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 b7 fe 53 f8 48 c7 c7 00 13 21 8b e8 c7 a5 16 00 <0f> 0b eb be 4c 89 e7 e8 9f 14 a1 f8 eb d5 e8 38 14 a1 f8 e9 3f ff
[ 37.637065][ T3184] openvswitch: cpu_id mismatch with handler threads
[ 37.650658][ T3608] RSP: 0018:ffffc90003d1f4e8 EFLAGS: 00010282
[ 37.663292][ T3608] RAX: 0000000000000000 RBX: ffff888016c88d00 RCX: 0000000000000000
[ 37.671263][ T3608] RDX: ffff888021c33b00 RSI: ffffffff8160f738 RDI: fffff520007a3e8f
[ 37.679234][ T3608] RBP: ffff888016c88700 R08: 0000000000000005 R09: 0000000000000000
[ 37.687204][ T3608] R10: 0000000080000000 R11: 676e6970706f7244 R12: ffff888016c88d68
[ 37.695170][ T3608] R13: 0000000000000008 R14: ffff888016c88758 R15: ffff8880274f3d80
[ 37.703147][ T3608] ? vprintk+0x88/0x90
[ 37.707225][ T3608] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 37.712168][ T3608] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 37.717542][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 37.724919][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 37.732210][ T3608] genl_family_rcv_msg_doit+0x228/0x320
[ 37.737760][ T3608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 37.745141][ T3608] ? ns_capable+0xd9/0x100
[ 37.749565][ T3608] genl_rcv_msg+0x441/0x780
[ 37.754076][ T3608] ? genl_get_cmd+0x480/0x480
[ 37.758754][ T3608] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 37.764131][ T3608] ? lock_release+0x780/0x780
[ 37.768807][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.774281][ T3608] netlink_rcv_skb+0x153/0x420
[ 37.779048][ T3608] ? genl_get_cmd+0x480/0x480
[ 37.783728][ T3608] ? netlink_ack+0xd50/0xd50
[ 37.788320][ T3608] ? netlink_deliver_tap+0x1b1/0xc40
[ 37.793609][ T3608] genl_rcv+0x24/0x40
[ 37.797594][ T3608] netlink_unicast+0x543/0x7f0
[ 37.802361][ T3608] ? netlink_attachskb+0x880/0x880
[ 37.807471][ T3608] ? __phys_addr+0xc4/0x140
[ 37.811992][ T3608] ? __phys_addr_symbol+0x2c/0x70
[ 37.817029][ T3608] ? __check_object_size+0x2de/0x700
[ 37.822328][ T3608] netlink_sendmsg+0x917/0xe10
[ 37.827094][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 37.832033][ T3608] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 37.837327][ T3608] ? netlink_unicast+0x7f0/0x7f0
[ 37.842269][ T3608] sock_sendmsg+0xcf/0x120
[ 37.846700][ T3608] ____sys_sendmsg+0x712/0x8c0
[ 37.851478][ T3608] ? copy_msghdr_from_user+0xfc/0x150
[ 37.856859][ T3608] ? kernel_sendmsg+0x50/0x50
[ 37.861552][ T3608] ___sys_sendmsg+0x110/0x1b0
[ 37.866232][ T3608] ? do_recvmmsg+0x6e0/0x6e0
[ 37.870827][ T3608] ? __schedule+0xae7/0x52b0
[ 37.875423][ T3608] ? trace_hardirqs_on+0x2d/0x120
[ 37.880462][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.885944][ T3608] ? lock_acquire+0x480/0x570
[ 37.890620][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 37.896094][ T3608] ? lock_acquire+0x480/0x570
[ 37.900780][ T3608] ? lock_release+0x780/0x780
[ 37.905460][ T3608] ? ptrace_stop.part.0+0x5ec/0xa80
[ 37.910669][ T3608] ? do_raw_spin_lock+0x120/0x2a0
[ 37.915697][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 37.920642][ T3608] ? __fget_light+0x20a/0x270
[ 37.925326][ T3608] __sys_sendmsg+0xf3/0x1c0
[ 37.929834][ T3608] ? __sys_sendmsg_sock+0x30/0x30
[ 37.934863][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 37.939722][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 37.944923][ T3608] ? ptrace_notify+0xfa/0x140
[ 37.949605][ T3608] do_syscall_64+0x35/0xb0
[ 37.954044][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 37.959939][ T3608] RIP: 0033:0x7f32315e5ee9
[ 37.964354][ T3608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 37.983963][ T3608] RSP: 002b:00007ffcda55c588 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 37.992726][ T3608] RAX: ffffffffffffffda RBX: 0000000000009057 RCX: 00007f32315e5ee9
[ 38.000695][ T3608] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 38.008669][ T3608] RBP: 0000000000000000 R08: 00007ffcda55c728 R09: 00007ffcda55c728
[ 38.016640][ T3608] R10: 00007ffcda55c000 R11: 0000000000000246 R12: 00007ffcda55c59c
[ 38.024620][ T3608] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 38.032607][ T3608]
[ 38.035783][ T3608] Kernel Offset: disabled
[ 38.040110][ T3608] Rebooting in 86400 seconds..