./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2596026869 <...> Warning: Permanently added '10.128.1.111' (ECDSA) to the list of known hosts. execve("./syz-executor2596026869", ["./syz-executor2596026869"], 0x7ffe746f29d0 /* 10 vars */) = 0 brk(NULL) = 0x5555557a8000 brk(0x5555557a8c40) = 0x5555557a8c40 arch_prctl(ARCH_SET_FS, 0x5555557a8300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2596026869", 4096) = 28 brk(0x5555557c9c40) = 0x5555557c9c40 brk(0x5555557ca000) = 0x5555557ca000 mprotect(0x7fdf3c552000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557a85d0) = 3612 ./strace-static-x86_64: Process 3612 attached [pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3612] setpgid(0, 0) = 0 [pid 3612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1000", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 3612] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x37\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x00\x01\x80\x06\x00\x00\x00\x08\x00\x00\x00\x08\x00\x02\x00\xff\xff\xff\xff\x08\x00\x05\x00\x08\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 52 [pid 3612] exit_group(0) = ? [pid 3612] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3612, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557a85d0) = 3616 ./strace-static-x86_64: Process 3616 attached [pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3616] setpgid(0, 0) = 0 [pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3616] write(3, "1000", 4) = 4 [pid 3616] close(3) = 0 [pid 3616] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [ 34.946713][ T3612] device  entered promiscuous mode [ 34.977636][ T3616] ------------[ cut here ]------------ [ 34.983505][ T3616] Dropping previously announced user features [ 34.990425][ T3616] WARNING: CPU: 1 PID: 3616 at net/openvswitch/datapath.c:1619 ovs_dp_cmd_new+0xdf5/0x1300 [ 35.001414][ T3616] Modules linked in: [ 35.005585][ T3616] CPU: 1 PID: 3616 Comm: syz-executor259 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0 [ 35.015935][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 35.026425][ T3616] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300 [ 35.032246][ T3616] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 e7 bc 53 f8 48 c7 c7 80 29 21 8b e8 ea a0 16 00 <0f> 0b eb be 4c 89 e7 e8 3f 24 a1 f8 eb d5 e8 d8 23 a1 f8 e9 3f ff [ 35.052335][ T3616] RSP: 0018:ffffc90003fff4e8 EFLAGS: 00010282 [ 35.058661][ T3616] RAX: 0000000000000000 RBX: ffff888012745400 RCX: 0000000000000000 [ 35.067172][ T3616] RDX: ffff888026d99d80 RSI: ffffffff81612e28 RDI: fffff520007ffe8f [ 35.075558][ T3616] RBP: ffff888026029b00 R08: 0000000000000005 R09: 0000000000000000 [ 35.083852][ T3616] R10: 0000000080000000 R11: 676e6970706f7244 R12: ffff888012745468 [ 35.092174][ T3616] R13: 0000000000000008 R14: ffff888026029b58 R15: ffff8881459fed00 [ 35.100231][ T3616] FS: 00005555557a8300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 35.109621][ T3616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.118681][ T3616] CR2: 0000558991961950 CR3: 00000000746c9000 CR4: 0000000000350ef0 [ 35.126725][ T3616] Call Trace: [ 35.130002][ T3616] [ 35.132956][ T3616] ? ovs_dp_cmd_fill_info+0xc30/0xc30 [ 35.138342][ T3616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 35.145771][ T3616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 35.153089][ T3616] genl_family_rcv_msg_doit+0x228/0x320 [ 35.158672][ T3616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 35.166113][ T3616] ? ns_capable+0xd9/0x100 [ 35.170577][ T3616] genl_rcv_msg+0x441/0x780 [ 35.175095][ T3616] ? genl_get_cmd+0x480/0x480 [ 35.179784][ T3616] ? ovs_dp_cmd_fill_info+0xc30/0xc30 [ 35.185209][ T3616] ? lock_release+0x780/0x780 [ 35.189891][ T3616] ? rcu_read_lock_sched_held+0xd/0x70 [ 35.195397][ T3616] netlink_rcv_skb+0x153/0x420 [ 35.200176][ T3616] ? genl_get_cmd+0x480/0x480 [ 35.205488][ T3616] ? netlink_ack+0xd50/0xd50 [ 35.212287][ T3616] ? netlink_deliver_tap+0x1b1/0xc40 [ 35.217585][ T3616] genl_rcv+0x24/0x40 [ 35.223292][ T3616] netlink_unicast+0x543/0x7f0 [ 35.230563][ T3616] ? netlink_attachskb+0x880/0x880 [ 35.235682][ T3616] ? __phys_addr+0xc4/0x140 [ 35.240169][ T3616] ? __phys_addr_symbol+0x2c/0x70 [ 35.255623][ T3616] ? __check_object_size+0x2de/0x700 [ 35.261061][ T3616] netlink_sendmsg+0x917/0xe10 [ 35.265845][ T3616] ? netlink_unicast+0x7f0/0x7f0 [ 35.270844][ T3616] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 35.276144][ T3616] ? netlink_unicast+0x7f0/0x7f0 [ 35.282006][ T3616] sock_sendmsg+0xcf/0x120 [ 35.286443][ T3616] ____sys_sendmsg+0x712/0x8c0 [ 35.291286][ T3616] ? copy_msghdr_from_user+0xfc/0x150 [ 35.296672][ T3616] ? kernel_sendmsg+0x50/0x50 [ 35.301451][ T3616] ___sys_sendmsg+0x110/0x1b0 [ 35.306145][ T3616] ? do_recvmmsg+0x6e0/0x6e0 [ 35.310993][ T3616] ? __schedule+0xae7/0x5270 [ 35.315739][ T3616] ? trace_hardirqs_on+0x2d/0x120 [ 35.320838][ T3616] ? rcu_read_lock_sched_held+0xd/0x70 [ 35.326320][ T3616] ? lock_acquire+0x480/0x570 [ 35.332845][ T3616] ? rcu_read_lock_sched_held+0xd/0x70 [ 35.338328][ T3616] ? lock_acquire+0x480/0x570 [ 35.343088][ T3616] ? lock_release+0x780/0x780 [ 35.348826][ T3616] ? ptrace_stop.part.0+0x49a/0x8c0 [ 35.354076][ T3616] ? do_raw_spin_lock+0x120/0x2a0 [ 35.359115][ T3616] ? rwlock_bug.part.0+0x90/0x90 [ 35.364124][ T3616] ? __fget_light+0x20a/0x270 [ 35.368821][ T3616] __sys_sendmsg+0xf3/0x1c0 [ 35.373390][ T3616] ? __sys_sendmsg_sock+0x30/0x30 [ 35.378432][ T3616] ? lock_downgrade+0x6e0/0x6e0 [ 35.383347][ T3616] ? _raw_spin_unlock_irq+0x2a/0x40 [ 35.388569][ T3616] ? ptrace_notify+0xfa/0x140 [ 35.393375][ T3616] do_syscall_64+0x35/0xb0 [ 35.397820][ T3616] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 35.403769][ T3616] RIP: 0033:0x7fdf3c4e5e89 [ 35.408192][ T3616] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 35.428179][ T3616] RSP: 002b:00007fff933e5698 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.436802][ T3616] RAX: ffffffffffffffda RBX: 0000000000008861 RCX: 00007fdf3c4e5e89 [ 35.444841][ T3616] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 35.452865][ T3616] RBP: 0000000000000000 R08: 00007fff933e5838 R09: 00007fff933e5838 [ 35.460892][ T3616] R10: 00007fff933e5110 R11: 0000000000000246 R12: 00007fff933e56ac [ 35.468872][ T3616] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 35.476890][ T3616] [ 35.479911][ T3616] Kernel panic - not syncing: panic_on_warn set ... [ 35.486486][ T3616] CPU: 0 PID: 3616 Comm: syz-executor259 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0 [ 35.496558][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 35.506619][ T3616] Call Trace: [ 35.509896][ T3616] [ 35.512839][ T3616] dump_stack_lvl+0xcd/0x134 [ 35.517533][ T3616] panic+0x2c8/0x622 [ 35.521447][ T3616] ? panic_print_sys_info.part.0+0x10b/0x10b [ 35.527453][ T3616] ? __warn.cold+0x248/0x2c4 [ 35.532058][ T3616] ? ovs_dp_cmd_new+0xdf5/0x1300 [ 35.537006][ T3616] __warn.cold+0x259/0x2c4 [ 35.541448][ T3616] ? ovs_dp_cmd_new+0xdf5/0x1300 [ 35.546409][ T3616] report_bug+0x1bc/0x210 [ 35.550768][ T3616] handle_bug+0x3c/0x70 [ 35.554946][ T3616] exc_invalid_op+0x14/0x40 [ 35.559478][ T3616] asm_exc_invalid_op+0x16/0x20 [ 35.564312][ T3616] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300 [ 35.569855][ T3616] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 e7 bc 53 f8 48 c7 c7 80 29 21 8b e8 ea a0 16 00 <0f> 0b eb be 4c 89 e7 e8 3f 24 a1 f8 eb d5 e8 d8 23 a1 f8 e9 3f ff [ 35.589445][ T3616] RSP: 0018:ffffc90003fff4e8 EFLAGS: 00010282 [ 35.595491][ T3616] RAX: 0000000000000000 RBX: ffff888012745400 RCX: 0000000000000000 [ 35.603444][ T3616] RDX: ffff888026d99d80 RSI: ffffffff81612e28 RDI: fffff520007ffe8f [ 35.611396][ T3616] RBP: ffff888026029b00 R08: 0000000000000005 R09: 0000000000000000 [ 35.619353][ T3616] R10: 0000000080000000 R11: 676e6970706f7244 R12: ffff888012745468 [ 35.627306][ T3616] R13: 0000000000000008 R14: ffff888026029b58 R15: ffff8881459fed00 [ 35.635260][ T3616] ? vprintk+0x88/0x90 [ 35.639316][ T3616] ? ovs_dp_cmd_new+0xdf5/0x1300 [ 35.644241][ T3616] ? ovs_dp_cmd_fill_info+0xc30/0xc30 [ 35.649597][ T3616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 35.656953][ T3616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 35.664308][ T3616] genl_family_rcv_msg_doit+0x228/0x320 [ 35.669840][ T3616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 35.677195][ T3616] ? ns_capable+0xd9/0x100 [ 35.681615][ T3616] genl_rcv_msg+0x441/0x780 [ 35.686103][ T3616] ? genl_get_cmd+0x480/0x480 [ 35.690772][ T3616] ? ovs_dp_cmd_fill_info+0xc30/0xc30 [ 35.696129][ T3616] ? lock_release+0x780/0x780 [ 35.700799][ T3616] ? rcu_read_lock_sched_held+0xd/0x70 [ 35.706278][ T3616] netlink_rcv_skb+0x153/0x420 [ 35.711037][ T3616] ? genl_get_cmd+0x480/0x480 [ 35.715729][ T3616] ? netlink_ack+0xd50/0xd50 [ 35.720304][ T3616] ? netlink_deliver_tap+0x1b1/0xc40 [ 35.725574][ T3616] genl_rcv+0x24/0x40 [ 35.729538][ T3616] netlink_unicast+0x543/0x7f0 [ 35.734285][ T3616] ? netlink_attachskb+0x880/0x880 [ 35.739376][ T3616] ? __phys_addr+0xc4/0x140 [ 35.743863][ T3616] ? __phys_addr_symbol+0x2c/0x70 [ 35.748870][ T3616] ? __check_object_size+0x2de/0x700 [ 35.754147][ T3616] netlink_sendmsg+0x917/0xe10 [ 35.758895][ T3616] ? netlink_unicast+0x7f0/0x7f0 [ 35.763817][ T3616] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 35.769089][ T3616] ? netlink_unicast+0x7f0/0x7f0 [ 35.774010][ T3616] sock_sendmsg+0xcf/0x120 [ 35.778424][ T3616] ____sys_sendmsg+0x712/0x8c0 [ 35.783174][ T3616] ? copy_msghdr_from_user+0xfc/0x150 [ 35.788530][ T3616] ? kernel_sendmsg+0x50/0x50 [ 35.793199][ T3616] ___sys_sendmsg+0x110/0x1b0 [ 35.797871][ T3616] ? do_recvmmsg+0x6e0/0x6e0 [ 35.802475][ T3616] ? __schedule+0xae7/0x5270 [ 35.807050][ T3616] ? trace_hardirqs_on+0x2d/0x120 [ 35.812064][ T3616] ? rcu_read_lock_sched_held+0xd/0x70 [ 35.817509][ T3616] ? lock_acquire+0x480/0x570 [ 35.822172][ T3616] ? rcu_read_lock_sched_held+0xd/0x70 [ 35.827627][ T3616] ? lock_acquire+0x480/0x570 [ 35.832299][ T3616] ? lock_release+0x780/0x780 [ 35.836984][ T3616] ? ptrace_stop.part.0+0x49a/0x8c0 [ 35.842168][ T3616] ? do_raw_spin_lock+0x120/0x2a0 [ 35.847175][ T3616] ? rwlock_bug.part.0+0x90/0x90 [ 35.852099][ T3616] ? __fget_light+0x20a/0x270 [ 35.856766][ T3616] __sys_sendmsg+0xf3/0x1c0 [ 35.861251][ T3616] ? __sys_sendmsg_sock+0x30/0x30 [ 35.866258][ T3616] ? lock_downgrade+0x6e0/0x6e0 [ 35.871094][ T3616] ? _raw_spin_unlock_irq+0x2a/0x40 [ 35.876274][ T3616] ? ptrace_notify+0xfa/0x140 [ 35.880952][ T3616] do_syscall_64+0x35/0xb0 [ 35.885354][ T3616] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 35.891236][ T3616] RIP: 0033:0x7fdf3c4e5e89 [ 35.895635][ T3616] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 35.915226][ T3616] RSP: 002b:00007fff933e5698 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.923619][ T3616] RAX: ffffffffffffffda RBX: 0000000000008861 RCX: 00007fdf3c4e5e89 [ 35.931581][ T3616] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 35.939554][ T3616] RBP: 0000000000000000 R08: 00007fff933e5838 R09: 00007fff933e5838 [ 35.947506][ T3616] R10: 00007fff933e5110 R11: 0000000000000246 R12: 00007fff933e56ac [ 35.955459][ T3616] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 35.963433][ T3616] [ 35.967344][ T3616] Kernel Offset: disabled [ 35.971663][ T3616] Rebooting in 86400 seconds..