./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2978556357 <...> Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. execve("./syz-executor2978556357", ["./syz-executor2978556357"], 0x7ffd2ad15730 /* 10 vars */) = 0 brk(NULL) = 0x555555891000 brk(0x555555891c40) = 0x555555891c40 arch_prctl(ARCH_SET_FS, 0x555555891300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2978556357", 4096) = 28 brk(0x5555558b2c40) = 0x5555558b2c40 brk(0x5555558b3000) = 0x5555558b3000 mprotect(0x7f8fa6771000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_TIPC, SOCK_STREAM, 0) = 3 syzkaller login: [ 57.385269][ T5074] ------------[ cut here ]------------ [ 57.390897][ T5074] WARNING: CPU: 0 PID: 5074 at lib/iov_iter.c:629 _copy_from_iter+0x2ad/0x1060 [ 57.400546][ T5074] Modules linked in: [ 57.404465][ T5074] CPU: 0 PID: 5074 Comm: syz-executor297 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 57.416327][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 57.426533][ T5074] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 57.432388][ T5074] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 2e 58 6d fd be 79 02 00 00 48 c7 c7 a0 a5 a6 8a e8 0d 6b a7 fd e9 56 fe ff ff e8 13 58 6d fd <0f> 0b 45 31 ff eb 8b e8 07 58 6d fd 31 ff 89 ee e8 0e 54 6d fd 40 [ 57.452162][ T5074] RSP: 0018:ffffc90003b9f808 EFLAGS: 00010293 [ 57.458246][ T5074] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.466336][ T5074] RDX: ffff888021139d40 RSI: ffffffff84175d0d RDI: 0000000000000001 [ 57.474582][ T5074] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 57.482608][ T5074] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003b9fd00 [ 57.490646][ T5074] R13: ffff8880249128f8 R14: ffffc90003b9fd00 R15: 0000000000000000 [ 57.498629][ T5074] FS: 0000555555891300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 57.507608][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.514225][ T5074] CR2: 00007f8fa674bfb8 CR3: 0000000077c66000 CR4: 00000000003506e0 [ 57.522234][ T5074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.530252][ T5074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.538245][ T5074] Call Trace: [ 57.541580][ T5074] [ 57.544529][ T5074] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 57.550211][ T5074] ? __build_skb_around+0x276/0x3a0 [ 57.555436][ T5074] ? __alloc_skb+0x185/0x310 [ 57.560073][ T5074] ? __check_object_size+0x31/0x6e0 [ 57.565297][ T5074] tipc_msg_build+0x2d4/0x10c0 [ 57.570118][ T5074] ? tipc_msg_assemble+0x540/0x540 [ 57.575255][ T5074] ? tipc_node_find_by_name+0x420/0x420 [ 57.580846][ T5074] ? __local_bh_enable_ip+0xa4/0x130 [ 57.586161][ T5074] __tipc_sendmsg+0xada/0x1890 [ 57.590982][ T5074] ? tipc_sendmcast+0xc50/0xc50 [ 57.595852][ T5074] ? print_usage_bug.part.0+0x660/0x660 [ 57.601662][ T5074] ? __init_waitqueue_head+0x150/0x150 [ 57.607131][ T5074] ? mark_held_locks+0x9f/0xe0 [ 57.611980][ T5074] ? __local_bh_enable_ip+0xa4/0x130 [ 57.617307][ T5074] tipc_connect+0x567/0x690 [ 57.621947][ T5074] ? tipc_sendmsg+0x70/0x70 [ 57.626504][ T5074] ? bpf_lsm_socket_connect+0x9/0x10 [ 57.631849][ T5074] ? tipc_sendmsg+0x70/0x70 [ 57.636376][ T5074] __sys_connect_file+0x153/0x1a0 [ 57.641452][ T5074] __sys_connect+0x165/0x1a0 [ 57.646066][ T5074] ? __sys_connect_file+0x1a0/0x1a0 [ 57.651328][ T5074] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.656548][ T5074] ? lockdep_hardirqs_on+0x7d/0x100 [ 57.661798][ T5074] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.667022][ T5074] __x64_sys_connect+0x73/0xb0 [ 57.671830][ T5074] do_syscall_64+0x39/0xb0 [ 57.676273][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.682229][ T5074] RIP: 0033:0x7f8fa6704b19 [ 57.686662][ T5074] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.706314][ T5074] RSP: 002b:00007ffe124e7d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 57.714771][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fa6704b19 [ 57.722802][ T5074] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 57.730806][ T5074] RBP: 00007f8fa66c8cc0 R08: 0000000000000000 R09: 0000000000000000 [ 57.738828][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8fa66c8d50 [ 57.746831][ T5074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.754878][ T5074] [ 57.757923][ T5074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.765208][ T5074] CPU: 1 PID: 5074 Comm: syz-executor297 Not tainted 6.2.0-rc5-next-20230127-syzkaller-08766-ge2f86c02fdc9 #0 [ 57.776845][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 57.786904][ T5074] Call Trace: [ 57.790184][ T5074] [ 57.793119][ T5074] dump_stack_lvl+0xd9/0x150 [ 57.797727][ T5074] panic+0x61b/0x6c0 [ 57.801642][ T5074] ? panic_smp_self_stop+0x90/0x90 [ 57.806772][ T5074] ? asm_sysvec_call_function_single+0x1a/0x20 [ 57.812949][ T5074] ? lockdep_hardirqs_on+0x7d/0x100 [ 57.818161][ T5074] ? asm_sysvec_call_function_single+0x1a/0x20 [ 57.824334][ T5074] ? _copy_from_iter+0x2ad/0x1060 [ 57.829382][ T5074] ? _copy_from_iter+0x2ad/0x1060 [ 57.834429][ T5074] check_panic_on_warn+0xb1/0xc0 [ 57.839394][ T5074] __warn+0xf2/0x4f0 [ 57.843307][ T5074] ? _copy_from_iter+0x2ad/0x1060 [ 57.848351][ T5074] report_bug+0x206/0x2b0 [ 57.852696][ T5074] handle_bug+0x3c/0x70 [ 57.856876][ T5074] exc_invalid_op+0x18/0x50 [ 57.861403][ T5074] asm_exc_invalid_op+0x1a/0x20 [ 57.866266][ T5074] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 57.871924][ T5074] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 2e 58 6d fd be 79 02 00 00 48 c7 c7 a0 a5 a6 8a e8 0d 6b a7 fd e9 56 fe ff ff e8 13 58 6d fd <0f> 0b 45 31 ff eb 8b e8 07 58 6d fd 31 ff 89 ee e8 0e 54 6d fd 40 [ 57.891549][ T5074] RSP: 0018:ffffc90003b9f808 EFLAGS: 00010293 [ 57.897628][ T5074] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.905608][ T5074] RDX: ffff888021139d40 RSI: ffffffff84175d0d RDI: 0000000000000001 [ 57.913588][ T5074] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 57.921568][ T5074] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003b9fd00 [ 57.929560][ T5074] R13: ffff8880249128f8 R14: ffffc90003b9fd00 R15: 0000000000000000 [ 57.937553][ T5074] ? _copy_from_iter+0x2ad/0x1060 [ 57.942608][ T5074] ? _copy_from_iter+0x2ad/0x1060 [ 57.947663][ T5074] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 57.953316][ T5074] ? __build_skb_around+0x276/0x3a0 [ 57.958538][ T5074] ? __alloc_skb+0x185/0x310 [ 57.963144][ T5074] ? __check_object_size+0x31/0x6e0 [ 57.968364][ T5074] tipc_msg_build+0x2d4/0x10c0 [ 57.973159][ T5074] ? tipc_msg_assemble+0x540/0x540 [ 57.978290][ T5074] ? tipc_node_find_by_name+0x420/0x420 [ 57.983848][ T5074] ? __local_bh_enable_ip+0xa4/0x130 [ 57.989162][ T5074] __tipc_sendmsg+0xada/0x1890 [ 57.993952][ T5074] ? tipc_sendmcast+0xc50/0xc50 [ 57.998819][ T5074] ? print_usage_bug.part.0+0x660/0x660 [ 58.004390][ T5074] ? __init_waitqueue_head+0x150/0x150 [ 58.009879][ T5074] ? mark_held_locks+0x9f/0xe0 [ 58.014659][ T5074] ? __local_bh_enable_ip+0xa4/0x130 [ 58.019962][ T5074] tipc_connect+0x567/0x690 [ 58.024501][ T5074] ? tipc_sendmsg+0x70/0x70 [ 58.029046][ T5074] ? bpf_lsm_socket_connect+0x9/0x10 [ 58.034359][ T5074] ? tipc_sendmsg+0x70/0x70 [ 58.038886][ T5074] __sys_connect_file+0x153/0x1a0 [ 58.043945][ T5074] __sys_connect+0x165/0x1a0 [ 58.048568][ T5074] ? __sys_connect_file+0x1a0/0x1a0 [ 58.053803][ T5074] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.059021][ T5074] ? lockdep_hardirqs_on+0x7d/0x100 [ 58.064236][ T5074] ? _raw_spin_unlock_irq+0x2e/0x50 [ 58.069470][ T5074] __x64_sys_connect+0x73/0xb0 [ 58.074260][ T5074] do_syscall_64+0x39/0xb0 [ 58.078719][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.084659][ T5074] RIP: 0033:0x7f8fa6704b19 [ 58.089096][ T5074] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.108814][ T5074] RSP: 002b:00007ffe124e7d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 58.117252][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fa6704b19 [ 58.125237][ T5074] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 58.133219][ T5074] RBP: 00007f8fa66c8cc0 R08: 0000000000000000 R09: 0000000000000000 [ 58.141200][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8fa66c8d50 [ 58.149177][ T5074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.157173][ T5074] [ 58.160342][ T5074] Kernel Offset: disabled [ 58.164729][ T5074] Rebooting in 86400 seconds..