./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor382549062 <...> Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. execve("./syz-executor382549062", ["./syz-executor382549062"], 0x7ffc16178480 /* 10 vars */) = 0 brk(NULL) = 0x555555bd9000 brk(0x555555bd9c40) = 0x555555bd9c40 arch_prctl(ARCH_SET_FS, 0x555555bd9300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor382549062", 4096) = 27 brk(0x555555bfac40) = 0x555555bfac40 brk(0x555555bfb000) = 0x555555bfb000 mprotect(0x7fef96506000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name=NULL, prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) openat(AT_FDCWD, "/dev/sg0", O_WRONLY|O_NONBLOCK|0x4) = 3 [ 55.752490][ T5080] ------------[ cut here ]------------ [ 55.758008][ T5080] WARNING: CPU: 1 PID: 5080 at lib/iov_iter.c:376 _copy_from_iter+0x2ad/0x10f0 [ 55.767313][ T5080] Modules linked in: [ 55.771268][ T5080] CPU: 1 PID: 5080 Comm: syz-executor382 Not tainted 6.3.0-rc4-next-20230331-syzkaller #0 [ 55.781221][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 55.791331][ T5080] RIP: 0010:_copy_from_iter+0x2ad/0x10f0 [ 55.796988][ T5080] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 0e 25 73 fd be 7c 01 00 00 48 c7 c7 00 a3 a6 8a e8 6d 2b b0 fd e9 56 fe ff ff e8 f3 24 73 fd <0f> 0b 45 31 ff eb 8b e8 e7 24 73 fd 31 ff 89 ee e8 be 20 73 fd 40 [ 55.816648][ T5080] RSP: 0018:ffffc90003a1f148 EFLAGS: 00010293 [ 55.822759][ T5080] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 55.830768][ T5080] RDX: ffff88807aebd7c0 RSI: ffffffff840fec5d RDI: 0000000000000001 [ 55.838812][ T5080] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 55.846790][ T5080] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000 [ 55.854800][ T5080] R13: ffffea0000a51e00 R14: ffffc90003a1f370 R15: 0000000000001000 [ 55.862826][ T5080] FS: 0000555555bd9300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 55.871835][ T5080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.878435][ T5080] CR2: 0000000020670000 CR3: 0000000027f65000 CR4: 00000000003506e0 [ 55.886462][ T5080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.894561][ T5080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.902578][ T5080] Call Trace: [ 55.905867][ T5080] [ 55.908855][ T5080] ? bio_add_hw_page+0x4b9/0x740 [ 55.913810][ T5080] ? hash_and_copy_to_iter+0x210/0x210 [ 55.919339][ T5080] ? bio_add_pc_page+0xbc/0x100 [ 55.924223][ T5080] ? bio_add_hw_page+0x740/0x740 [ 55.929197][ T5080] ? bio_kmalloc+0x41/0x70 [ 55.933638][ T5080] copy_page_from_iter+0x9f/0x110 [ 55.938710][ T5080] blk_rq_map_user_iov+0xb55/0x16d0 [ 55.943930][ T5080] ? iovec_from_user+0xb2/0x1d0 [ 55.948833][ T5080] ? bio_map_user_iov+0xf50/0xf50 [ 55.953956][ T5080] ? __import_iovec+0x21c/0x830 [ 55.958876][ T5080] ? import_iovec+0x110/0x160 [ 55.963570][ T5080] blk_rq_map_user_io.part.0+0x1dc/0x270 [ 55.969247][ T5080] ? blk_rq_map_user+0x150/0x150 [ 55.974202][ T5080] ? lock_sync+0x190/0x190 [ 55.978689][ T5080] ? find_held_lock+0x2d/0x110 [ 55.983513][ T5080] ? sg_common_write.constprop.0+0xc89/0x1e00 [ 55.989696][ T5080] ? lock_downgrade+0x690/0x690 [ 55.994586][ T5080] ? rcu_is_watching+0x12/0xb0 [ 55.999436][ T5080] blk_rq_map_user_io+0xdf/0x200 [ 56.004391][ T5080] ? blk_rq_map_user_io.part.0+0x270/0x270 [ 56.010246][ T5080] ? wait_for_completion_io_timeout+0x20/0x20 [ 56.016352][ T5080] ? sg_build_indirect+0x525/0xb20 [ 56.021536][ T5080] sg_common_write.constprop.0+0xdcd/0x1e00 [ 56.027460][ T5080] ? sg_read+0x1520/0x1520 [ 56.031935][ T5080] ? copy_user_short_string+0xa/0x40 [ 56.037245][ T5080] sg_new_write.isra.0+0x522/0xa90 [ 56.042418][ T5080] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 56.048646][ T5080] ? find_held_lock+0x2d/0x110 [ 56.053430][ T5080] ? __might_fault+0xe2/0x190 [ 56.058103][ T5080] ? lock_downgrade+0x690/0x690 [ 56.062993][ T5080] ? trace_lock_acquire+0x12d/0x180 [ 56.068218][ T5080] ? __might_fault+0xb2/0x190 [ 56.072940][ T5080] ? lock_acquire+0x32/0xc0 [ 56.077473][ T5080] ? __might_fault+0xb2/0x190 [ 56.082232][ T5080] sg_write.part.0+0x999/0xd90 [ 56.087019][ T5080] ? sg_new_write.isra.0+0xa90/0xa90 [ 56.092378][ T5080] ? aa_path_link+0x2f0/0x2f0 [ 56.097084][ T5080] ? __might_fault+0xe2/0x190 [ 56.101841][ T5080] ? lock_downgrade+0x690/0x690 [ 56.106725][ T5080] ? trace_lock_acquire+0x12d/0x180 [ 56.112010][ T5080] ? __might_fault+0xb2/0x190 [ 56.116739][ T5080] ? lock_acquire+0x32/0xc0 [ 56.121334][ T5080] ? __might_fault+0xb2/0x190 [ 56.126047][ T5080] ? apparmor_file_permission+0x272/0x4e0 [ 56.131952][ T5080] sg_write+0x8d/0xe0 [ 56.135959][ T5080] do_iter_write+0x443/0x7e0 [ 56.140602][ T5080] ? sg_write.part.0+0xd90/0xd90 [ 56.145565][ T5080] vfs_writev+0x1aa/0x670 [ 56.149950][ T5080] ? vfs_iter_write+0xa0/0xa0 [ 56.154651][ T5080] ? do_raw_spin_lock+0x124/0x2b0 [ 56.159762][ T5080] ? spin_bug+0x1c0/0x1c0 [ 56.164116][ T5080] ? ptrace_stop.part.0+0x60f/0x8e0 [ 56.169397][ T5080] ? find_held_lock+0x2d/0x110 [ 56.174196][ T5080] ? ptrace_notify+0xfe/0x140 [ 56.178932][ T5080] ? __fget_light+0x20a/0x270 [ 56.183632][ T5080] do_writev+0x133/0x2f0 [ 56.187897][ T5080] ? vfs_writev+0x670/0x670 [ 56.192446][ T5080] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.197663][ T5080] ? _raw_spin_unlock_irq+0x2e/0x50 [ 56.202916][ T5080] ? ptrace_notify+0xfe/0x140 [ 56.207614][ T5080] do_syscall_64+0x39/0xb0 [ 56.212084][ T5080] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.218016][ T5080] RIP: 0033:0x7fef96499699 [ 56.222483][ T5080] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.242142][ T5080] RSP: 002b:00007fff58c54cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 56.250673][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef96499699 [ 56.258786][ T5080] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 56.266773][ T5080] RBP: 00007fef964591a0 R08: 0000000000000000 R09: 0000000000000000 [ 56.274804][ T5080] R10: 000000000000ffff R11: 0000000000000246 R12: 00007fef96459230 [ 56.282824][ T5080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.290847][ T5080] [ 56.294397][ T5080] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.301668][ T5080] CPU: 1 PID: 5080 Comm: syz-executor382 Not tainted 6.3.0-rc4-next-20230331-syzkaller #0 [ 56.311544][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 56.321584][ T5080] Call Trace: [ 56.324870][ T5080] [ 56.327807][ T5080] dump_stack_lvl+0xd9/0x150 [ 56.332420][ T5080] panic+0x688/0x730 [ 56.336321][ T5080] ? panic_smp_self_stop+0x90/0x90 [ 56.341428][ T5080] ? show_trace_log_lvl+0x285/0x390 [ 56.346631][ T5080] ? _copy_from_iter+0x2ad/0x10f0 [ 56.351652][ T5080] check_panic_on_warn+0xb1/0xc0 [ 56.356586][ T5080] __warn+0xf2/0x390 [ 56.360496][ T5080] ? _copy_from_iter+0x2ad/0x10f0 [ 56.365513][ T5080] report_bug+0x2da/0x500 [ 56.369847][ T5080] handle_bug+0x3c/0x70 [ 56.373998][ T5080] exc_invalid_op+0x18/0x50 [ 56.378495][ T5080] asm_exc_invalid_op+0x1a/0x20 [ 56.383359][ T5080] RIP: 0010:_copy_from_iter+0x2ad/0x10f0 [ 56.389003][ T5080] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 0e 25 73 fd be 7c 01 00 00 48 c7 c7 00 a3 a6 8a e8 6d 2b b0 fd e9 56 fe ff ff e8 f3 24 73 fd <0f> 0b 45 31 ff eb 8b e8 e7 24 73 fd 31 ff 89 ee e8 be 20 73 fd 40 [ 56.408606][ T5080] RSP: 0018:ffffc90003a1f148 EFLAGS: 00010293 [ 56.414685][ T5080] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.422676][ T5080] RDX: ffff88807aebd7c0 RSI: ffffffff840fec5d RDI: 0000000000000001 [ 56.430647][ T5080] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 56.438620][ T5080] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000 [ 56.446591][ T5080] R13: ffffea0000a51e00 R14: ffffc90003a1f370 R15: 0000000000001000 [ 56.454572][ T5080] ? _copy_from_iter+0x2ad/0x10f0 [ 56.459610][ T5080] ? _copy_from_iter+0x2ad/0x10f0 [ 56.464645][ T5080] ? bio_add_hw_page+0x4b9/0x740 [ 56.469596][ T5080] ? hash_and_copy_to_iter+0x210/0x210 [ 56.475071][ T5080] ? bio_add_pc_page+0xbc/0x100 [ 56.479923][ T5080] ? bio_add_hw_page+0x740/0x740 [ 56.484861][ T5080] ? bio_kmalloc+0x41/0x70 [ 56.489294][ T5080] copy_page_from_iter+0x9f/0x110 [ 56.494330][ T5080] blk_rq_map_user_iov+0xb55/0x16d0 [ 56.499547][ T5080] ? iovec_from_user+0xb2/0x1d0 [ 56.504407][ T5080] ? bio_map_user_iov+0xf50/0xf50 [ 56.509448][ T5080] ? __import_iovec+0x21c/0x830 [ 56.514327][ T5080] ? import_iovec+0x110/0x160 [ 56.519025][ T5080] blk_rq_map_user_io.part.0+0x1dc/0x270 [ 56.524693][ T5080] ? blk_rq_map_user+0x150/0x150 [ 56.529647][ T5080] ? lock_sync+0x190/0x190 [ 56.534076][ T5080] ? find_held_lock+0x2d/0x110 [ 56.538850][ T5080] ? sg_common_write.constprop.0+0xc89/0x1e00 [ 56.544930][ T5080] ? lock_downgrade+0x690/0x690 [ 56.549789][ T5080] ? rcu_is_watching+0x12/0xb0 [ 56.554580][ T5080] blk_rq_map_user_io+0xdf/0x200 [ 56.559526][ T5080] ? blk_rq_map_user_io.part.0+0x270/0x270 [ 56.565349][ T5080] ? wait_for_completion_io_timeout+0x20/0x20 [ 56.571425][ T5080] ? sg_build_indirect+0x525/0xb20 [ 56.576640][ T5080] sg_common_write.constprop.0+0xdcd/0x1e00 [ 56.582554][ T5080] ? sg_read+0x1520/0x1520 [ 56.586982][ T5080] ? copy_user_short_string+0xa/0x40 [ 56.592289][ T5080] sg_new_write.isra.0+0x522/0xa90 [ 56.597412][ T5080] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 56.603582][ T5080] ? find_held_lock+0x2d/0x110 [ 56.608355][ T5080] ? __might_fault+0xe2/0x190 [ 56.613067][ T5080] ? lock_downgrade+0x690/0x690 [ 56.617927][ T5080] ? trace_lock_acquire+0x12d/0x180 [ 56.623135][ T5080] ? __might_fault+0xb2/0x190 [ 56.627842][ T5080] ? lock_acquire+0x32/0xc0 [ 56.632357][ T5080] ? __might_fault+0xb2/0x190 [ 56.637140][ T5080] sg_write.part.0+0x999/0xd90 [ 56.641929][ T5080] ? sg_new_write.isra.0+0xa90/0xa90 [ 56.647233][ T5080] ? aa_path_link+0x2f0/0x2f0 [ 56.651928][ T5080] ? __might_fault+0xe2/0x190 [ 56.656636][ T5080] ? lock_downgrade+0x690/0x690 [ 56.661510][ T5080] ? trace_lock_acquire+0x12d/0x180 [ 56.666734][ T5080] ? __might_fault+0xb2/0x190 [ 56.671451][ T5080] ? lock_acquire+0x32/0xc0 [ 56.675977][ T5080] ? __might_fault+0xb2/0x190 [ 56.680678][ T5080] ? apparmor_file_permission+0x272/0x4e0 [ 56.686420][ T5080] sg_write+0x8d/0xe0 [ 56.690416][ T5080] do_iter_write+0x443/0x7e0 [ 56.695021][ T5080] ? sg_write.part.0+0xd90/0xd90 [ 56.699970][ T5080] vfs_writev+0x1aa/0x670 [ 56.704314][ T5080] ? vfs_iter_write+0xa0/0xa0 [ 56.709003][ T5080] ? do_raw_spin_lock+0x124/0x2b0 [ 56.714045][ T5080] ? spin_bug+0x1c0/0x1c0 [ 56.718397][ T5080] ? ptrace_stop.part.0+0x60f/0x8e0 [ 56.723625][ T5080] ? find_held_lock+0x2d/0x110 [ 56.728424][ T5080] ? ptrace_notify+0xfe/0x140 [ 56.733119][ T5080] ? __fget_light+0x20a/0x270 [ 56.737826][ T5080] do_writev+0x133/0x2f0 [ 56.742094][ T5080] ? vfs_writev+0x670/0x670 [ 56.746616][ T5080] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.751830][ T5080] ? _raw_spin_unlock_irq+0x2e/0x50 [ 56.757043][ T5080] ? ptrace_notify+0xfe/0x140 [ 56.761732][ T5080] do_syscall_64+0x39/0xb0 [ 56.766165][ T5080] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.772073][ T5080] RIP: 0033:0x7fef96499699 [ 56.776492][ T5080] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.796106][ T5080] RSP: 002b:00007fff58c54cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 56.804610][ T5080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef96499699 [ 56.812614][ T5080] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 56.820586][ T5080] RBP: 00007fef964591a0 R08: 0000000000000000 R09: 0000000000000000 [ 56.828586][ T5080] R10: 000000000000ffff R11: 0000000000000246 R12: 00007fef96459230 [ 56.836562][ T5080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.844547][ T5080] [ 56.847723][ T5080] Kernel Offset: disabled [ 56.852107][ T5080] Rebooting in 86400 seconds..