./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1657665420
<...>
no interfaces have a carrier
forked to background, child pid 3185
[ 26.728020][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.739606][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.73' (ECDSA) to the list of known hosts.
execve("./syz-executor1657665420", ["./syz-executor1657665420"], 0x7ffd5a553b00 /* 10 vars */) = 0
brk(NULL) = 0x5555566b0000
brk(0x5555566b0c40) = 0x5555566b0c40
arch_prctl(ARCH_SET_FS, 0x5555566b0300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1657665420", 4096) = 28
brk(0x5555566d1c40) = 0x5555566d1c40
brk(0x5555566d2000) = 0x5555566d2000
mprotect(0x7fc8e06ac000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566b05d0) = 3608
./strace-static-x86_64: Process 3608 attached
[pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3608] setpgid(0, 0) = 0
[pid 3608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3608] write(3, "1000", 4) = 4
[pid 3608] close(3) = 0
[pid 3608] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
[pid 3608] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x3c\x00\x00\x00\x37\x00\x09\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x00\x01\x80\x06\x00\x00\x00\x08\x00\x00\x00\x08\x00\x02\x00\xff\xff\xff\xff\x08\x00\x05\x00\x08\x00\x00\x00\x08\x00\x08\x80\x04\x00\x00\x00", iov_len=60}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 60
[pid 3608] exit_group(0) = ?
[pid 3608] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3608, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566b05d0) = 3610
./strace-static-x86_64: Process 3610 attached
[pid 3610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3610] setpgid(0, 0) = 0
[pid 3610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3610] write(3, "1000", 4) = 4
[pid 3610] close(3) = 0
[pid 3610] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3
syzkaller login: [ 50.247242][ T3608] device entered promiscuous mode
[ 50.273037][ T3610] ------------[ cut here ]------------
[ 50.279517][ T3610] Dropping previously announced user features
[ 50.286984][ T3610] WARNING: CPU: 0 PID: 3610 at net/openvswitch/datapath.c:1619 ovs_dp_cmd_new+0xdf5/0x1300
[ 50.297711][ T3610] Modules linked in:
[ 50.302097][ T3610] CPU: 0 PID: 3610 Comm: syz-executor165 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0
[ 50.313371][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 50.324538][ T3610] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 50.330630][ T3610] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 57 b9 53 f8 48 c7 c7 40 19 21 8b e8 27 a2 16 00 <0f> 0b eb be 4c 89 e7 e8 5f c7 a0 f8 eb d5 e8 f8 c6 a0 f8 e9 3f ff
[ 50.351091][ T3610] RSP: 0018:ffffc90003caf4e8 EFLAGS: 00010282
[ 50.357854][ T3610] RAX: 0000000000000000 RBX: ffff88801714fd00 RCX: 0000000000000000
[ 50.366564][ T3610] RDX: ffff8880271f8000 RSI: ffffffff8160f6f8 RDI: fffff52000795e8f
[ 50.375242][ T3610] RBP: ffff888017036700 R08: 0000000000000005 R09: 0000000000000000
[ 50.383798][ T3610] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88801714fd68
[ 50.391830][ T3610] R13: 0000000000000008 R14: ffff888017036758 R15: ffff8881457f2700
[ 50.401070][ T3610] FS: 00005555566b0300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 50.410647][ T3610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.417710][ T3610] CR2: 00007f2e7487f378 CR3: 000000001f75a000 CR4: 00000000003506e0
[ 50.426212][ T3610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.434705][ T3610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.442792][ T3610] Call Trace:
[ 50.446801][ T3610]
[ 50.449862][ T3610] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 50.455796][ T3610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 50.463320][ T3610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 50.471155][ T3610] genl_family_rcv_msg_doit+0x228/0x320
[ 50.477266][ T3610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 50.485197][ T3610] ? ns_capable+0xd9/0x100
[ 50.489851][ T3610] genl_rcv_msg+0x441/0x780
[ 50.494840][ T3610] ? genl_get_cmd+0x480/0x480
[ 50.499733][ T3610] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 50.506001][ T3610] ? lock_release+0x780/0x780
[ 50.510808][ T3610] netlink_rcv_skb+0x153/0x420
[ 50.516136][ T3610] ? genl_get_cmd+0x480/0x480
[ 50.521343][ T3610] ? netlink_ack+0xd50/0xd50
[ 50.526492][ T3610] ? netlink_deliver_tap+0x1b1/0xc40
[ 50.531992][ T3610] genl_rcv+0x24/0x40
[ 50.536453][ T3610] netlink_unicast+0x543/0x7f0
[ 50.541431][ T3610] ? netlink_attachskb+0x880/0x880
[ 50.547034][ T3610] ? __phys_addr+0xc4/0x140
[ 50.551691][ T3610] ? __phys_addr_symbol+0x2c/0x70
[ 50.557198][ T3610] ? __check_object_size+0x2de/0x700
[ 50.562717][ T3610] netlink_sendmsg+0x917/0xe10
[ 50.568233][ T3610] ? netlink_unicast+0x7f0/0x7f0
[ 50.573765][ T3610] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 50.579184][ T3610] ? netlink_unicast+0x7f0/0x7f0
[ 50.584859][ T3610] sock_sendmsg+0xcf/0x120
[ 50.589480][ T3610] ____sys_sendmsg+0x712/0x8c0
[ 50.594713][ T3610] ? copy_msghdr_from_user+0xfc/0x150
[ 50.600228][ T3610] ? kernel_sendmsg+0x50/0x50
[ 50.605365][ T3610] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.611556][ T3610] ___sys_sendmsg+0x110/0x1b0
[ 50.616777][ T3610] ? do_recvmmsg+0x6e0/0x6e0
[ 50.621608][ T3610] ? lock_release+0x780/0x780
[ 50.626761][ T3610] ? ptrace_stop.part.0+0x5ec/0xa80
[ 50.632163][ T3610] ? do_raw_spin_lock+0x120/0x2a0
[ 50.637642][ T3610] ? rwlock_bug.part.0+0x90/0x90
[ 50.642698][ T3610] ? _raw_spin_lock_irq+0x41/0x50
[ 50.648367][ T3610] ? __fget_light+0x20a/0x270
[ 50.653182][ T3610] __sys_sendmsg+0xf3/0x1c0
[ 50.658293][ T3610] ? __sys_sendmsg_sock+0x30/0x30
[ 50.663460][ T3610] ? lock_downgrade+0x6e0/0x6e0
[ 50.668700][ T3610] ? lockdep_hardirqs_on+0x79/0x100
[ 50.674259][ T3610] ? _raw_spin_unlock_irq+0x2a/0x40
[ 50.679664][ T3610] ? ptrace_notify+0xfa/0x140
[ 50.684861][ T3610] do_syscall_64+0x35/0xb0
[ 50.689414][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.695859][ T3610] RIP: 0033:0x7fc8e063eee9
[ 50.700396][ T3610] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.720529][ T3610] RSP: 002b:00007ffda3c19da8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 50.729444][ T3610] RAX: ffffffffffffffda RBX: 000000000000c427 RCX: 00007fc8e063eee9
[ 50.745238][ T3610] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 50.755021][ T3610] RBP: 0000000000000000 R08: 00007ffda3c19f48 R09: 00007ffda3c19f48
[ 50.763208][ T3610] R10: 00007ffda3c19820 R11: 0000000000000246 R12: 00007ffda3c19dbc
[ 50.774786][ T3610] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 50.782906][ T3610]
[ 50.786637][ T3610] Kernel panic - not syncing: panic_on_warn set ...
[ 50.793245][ T3610] CPU: 1 PID: 3610 Comm: syz-executor165 Not tainted 6.0.0-syzkaller-02734-g0326074ff465 #0
[ 50.803331][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 50.813410][ T3610] Call Trace:
[ 50.816704][ T3610]
[ 50.819653][ T3610] dump_stack_lvl+0xcd/0x134
[ 50.824283][ T3610] panic+0x2c8/0x627
[ 50.828210][ T3610] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.834231][ T3610] ? __warn.cold+0x248/0x2c4
[ 50.838945][ T3610] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 50.843916][ T3610] __warn.cold+0x259/0x2c4
[ 50.848347][ T3610] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 50.853307][ T3610] report_bug+0x1bc/0x210
[ 50.857671][ T3610] handle_bug+0x3c/0x70
[ 50.861845][ T3610] exc_invalid_op+0x14/0x40
[ 50.866359][ T3610] asm_exc_invalid_op+0x16/0x20
[ 50.871228][ T3610] RIP: 0010:ovs_dp_cmd_new+0xdf5/0x1300
[ 50.876793][ T3610] Code: 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 21 c7 43 68 00 00 00 00 e9 30 fe ff ff e8 57 b9 53 f8 48 c7 c7 40 19 21 8b e8 27 a2 16 00 <0f> 0b eb be 4c 89 e7 e8 5f c7 a0 f8 eb d5 e8 f8 c6 a0 f8 e9 3f ff
[ 50.896411][ T3610] RSP: 0018:ffffc90003caf4e8 EFLAGS: 00010282
[ 50.902578][ T3610] RAX: 0000000000000000 RBX: ffff88801714fd00 RCX: 0000000000000000
[ 50.910646][ T3610] RDX: ffff8880271f8000 RSI: ffffffff8160f6f8 RDI: fffff52000795e8f
[ 50.918623][ T3610] RBP: ffff888017036700 R08: 0000000000000005 R09: 0000000000000000
[ 50.926602][ T3610] R10: 0000000080000000 R11: 0000000000000000 R12: ffff88801714fd68
[ 50.934581][ T3610] R13: 0000000000000008 R14: ffff888017036758 R15: ffff8881457f2700
[ 50.942568][ T3610] ? vprintk+0x88/0x90
[ 50.946659][ T3610] ? ovs_dp_cmd_new+0xdf5/0x1300
[ 50.951619][ T3610] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 50.957015][ T3610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290
[ 50.964579][ T3610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 50.971972][ T3610] genl_family_rcv_msg_doit+0x228/0x320
[ 50.977535][ T3610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290
[ 50.984931][ T3610] ? ns_capable+0xd9/0x100
[ 50.989368][ T3610] genl_rcv_msg+0x441/0x780
[ 50.993891][ T3610] ? genl_get_cmd+0x480/0x480
[ 50.998582][ T3610] ? ovs_dp_cmd_fill_info+0xc30/0xc30
[ 51.003969][ T3610] ? lock_release+0x780/0x780
[ 51.008658][ T3610] netlink_rcv_skb+0x153/0x420
[ 51.013435][ T3610] ? genl_get_cmd+0x480/0x480
[ 51.018128][ T3610] ? netlink_ack+0xd50/0xd50
[ 51.022737][ T3610] ? netlink_deliver_tap+0x1b1/0xc40
[ 51.028043][ T3610] genl_rcv+0x24/0x40
[ 51.032037][ T3610] netlink_unicast+0x543/0x7f0
[ 51.036819][ T3610] ? netlink_attachskb+0x880/0x880
[ 51.041940][ T3610] ? __phys_addr+0xc4/0x140
[ 51.046468][ T3610] ? __phys_addr_symbol+0x2c/0x70
[ 51.051514][ T3610] ? __check_object_size+0x2de/0x700
[ 51.056824][ T3610] netlink_sendmsg+0x917/0xe10
[ 51.061608][ T3610] ? netlink_unicast+0x7f0/0x7f0
[ 51.066562][ T3610] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 51.071865][ T3610] ? netlink_unicast+0x7f0/0x7f0
[ 51.076815][ T3610] sock_sendmsg+0xcf/0x120
[ 51.081252][ T3610] ____sys_sendmsg+0x712/0x8c0
[ 51.086028][ T3610] ? copy_msghdr_from_user+0xfc/0x150
[ 51.091411][ T3610] ? kernel_sendmsg+0x50/0x50
[ 51.096105][ T3610] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 51.102097][ T3610] ___sys_sendmsg+0x110/0x1b0
[ 51.106791][ T3610] ? do_recvmmsg+0x6e0/0x6e0
[ 51.111409][ T3610] ? lock_release+0x780/0x780
[ 51.116092][ T3610] ? ptrace_stop.part.0+0x5ec/0xa80
[ 51.121305][ T3610] ? do_raw_spin_lock+0x120/0x2a0
[ 51.126342][ T3610] ? rwlock_bug.part.0+0x90/0x90
[ 51.131287][ T3610] ? _raw_spin_lock_irq+0x41/0x50
[ 51.136332][ T3610] ? __fget_light+0x20a/0x270
[ 51.141029][ T3610] __sys_sendmsg+0xf3/0x1c0
[ 51.145544][ T3610] ? __sys_sendmsg_sock+0x30/0x30
[ 51.150581][ T3610] ? lock_downgrade+0x6e0/0x6e0
[ 51.155453][ T3610] ? lockdep_hardirqs_on+0x79/0x100
[ 51.160670][ T3610] ? _raw_spin_unlock_irq+0x2a/0x40
[ 51.165885][ T3610] ? ptrace_notify+0xfa/0x140
[ 51.170576][ T3610] do_syscall_64+0x35/0xb0
[ 51.175024][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 51.180936][ T3610] RIP: 0033:0x7fc8e063eee9
[ 51.185355][ T3610] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 51.204981][ T3610] RSP: 002b:00007ffda3c19da8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 51.213417][ T3610] RAX: ffffffffffffffda RBX: 000000000000c427 RCX: 00007fc8e063eee9
[ 51.221406][ T3610] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 51.229388][ T3610] RBP: 0000000000000000 R08: 00007ffda3c19f48 R09: 00007ffda3c19f48
[ 51.237365][ T3610] R10: 00007ffda3c19820 R11: 0000000000000246 R12: 00007ffda3c19dbc
[ 51.245343][ T3610] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 51.253337][ T3610]
[ 51.256695][ T3610] Kernel Offset: disabled
[ 51.261094][ T3610] Rebooting in 86400 seconds..