./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor573185948 <...> forked to background, child pid 4654 no interfaces have a carrier [ 23.791316][ T4655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.800613][ T4655] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.84' (ECDSA) to the list of known hosts. execve("./syz-executor573185948", ["./syz-executor573185948"], 0x7ffc352b1b20 /* 10 vars */) = 0 brk(NULL) = 0x5555574ea000 brk(0x5555574eac40) = 0x5555574eac40 arch_prctl(ARCH_SET_FS, 0x5555574ea300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor573185948", 4096) = 27 brk(0x55555750bc40) = 0x55555750bc40 brk(0x55555750c000) = 0x55555750c000 mprotect(0x7f60ae730000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name=NULL, prog_fd=-1}}, 16) = -1 EBADF (Bad file descriptor) openat(AT_FDCWD, "/dev/sg0", O_WRONLY|O_NONBLOCK|0x4) = 3 syzkaller login: [ 40.687735][ T5075] ------------[ cut here ]------------ [ 40.693254][ T5075] WARNING: CPU: 0 PID: 5075 at lib/iov_iter.c:623 _copy_from_iter+0x2ad/0x1060 [ 40.702351][ T5075] Modules linked in: [ 40.706253][ T5075] CPU: 0 PID: 5075 Comm: syz-executor573 Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0 [ 40.716365][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 40.726454][ T5075] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 40.732169][ T5075] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 1e 8a 69 fd be 73 02 00 00 48 c7 c7 80 c0 a6 8a e8 5d 18 a6 fd e9 56 fe ff ff e8 03 8a 69 fd <0f> 0b 45 31 ff eb 8b e8 f7 89 69 fd 31 ff 89 ee e8 fe 85 69 fd 40 [ 40.751981][ T5075] RSP: 0018:ffffc90003def138 EFLAGS: 00010293 [ 40.758110][ T5075] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 40.766129][ T5075] RDX: ffff8880213257c0 RSI: ffffffff841b785d RDI: 0000000000000001 [ 40.774239][ T5075] RBP: 0000000000001000 R08: 0000000000000001 R09: 0000000000000000 [ 40.782261][ T5075] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 40.790246][ T5075] R13: ffffea000073ae00 R14: ffffc90003def370 R15: 0000000000001000 [ 40.798297][ T5075] FS: 00005555574ea300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 40.807439][ T5075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.814133][ T5075] CR2: 0000000020670000 CR3: 000000001d32f000 CR4: 0000000000350ef0 [ 40.822137][ T5075] Call Trace: [ 40.825479][ T5075] [ 40.828433][ T5075] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 40.834119][ T5075] ? bio_add_pc_page+0xbc/0x100 [ 40.839007][ T5075] copy_page_from_iter+0x233/0x3f0 [ 40.844208][ T5075] blk_rq_map_user_iov+0xb5d/0x16e0 [ 40.849441][ T5075] ? iovec_from_user+0xb1/0x3a0 [ 40.854340][ T5075] ? bio_map_user_iov+0x8a0/0x8a0 [ 40.859395][ T5075] ? import_iovec+0x110/0x160 [ 40.864122][ T5075] blk_rq_map_user_io.part.0+0x1d3/0x270 [ 40.869789][ T5075] ? blk_rq_map_user+0x150/0x150 [ 40.874806][ T5075] ? find_held_lock+0x2d/0x110 [ 40.879596][ T5075] ? sg_common_write.constprop.0+0xc89/0x1e00 [ 40.885751][ T5075] ? lock_downgrade+0x690/0x690 [ 40.890620][ T5075] ? sg_build_indirect+0x128/0xb20 [ 40.895783][ T5075] blk_rq_map_user_io+0xdf/0x200 [ 40.900748][ T5075] ? blk_rq_map_user_io.part.0+0x270/0x270 [ 40.906601][ T5075] ? wait_for_completion_io_timeout+0x20/0x20 [ 40.912738][ T5075] ? sg_build_indirect+0x525/0xb20 [ 40.917958][ T5075] sg_common_write.constprop.0+0xdcd/0x1e00 [ 40.923968][ T5075] ? sg_read+0x1520/0x1520 [ 40.928419][ T5075] ? copy_user_generic_string+0x30/0x50 [ 40.934066][ T5075] sg_new_write.isra.0+0x522/0xa90 [ 40.939202][ T5075] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 40.945409][ T5075] ? find_held_lock+0x2d/0x110 [ 40.950210][ T5075] ? __might_fault+0xd9/0x180 [ 40.954947][ T5075] ? lock_downgrade+0x690/0x690 [ 40.959831][ T5075] sg_write.part.0+0x999/0xd90 [ 40.964655][ T5075] ? sg_new_write.isra.0+0xa90/0xa90 [ 40.969979][ T5075] ? find_held_lock+0x2d/0x110 [ 40.974836][ T5075] ? aa_path_link+0x2f0/0x2f0 [ 40.979636][ T5075] ? __might_fault+0xd9/0x180 [ 40.984358][ T5075] ? lock_downgrade+0x690/0x690 [ 40.989246][ T5075] ? apparmor_file_permission+0x272/0x4e0 [ 40.995061][ T5075] sg_write+0x8d/0xe0 [ 40.999083][ T5075] do_iter_write+0x4ef/0x700 [ 41.003738][ T5075] vfs_writev+0x1aa/0x670 [ 41.008087][ T5075] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 41.013342][ T5075] ? vfs_iter_write+0xa0/0xa0 [ 41.018039][ T5075] ? do_raw_spin_lock+0x124/0x2b0 [ 41.023116][ T5075] ? spin_bug+0x1c0/0x1c0 [ 41.027479][ T5075] ? find_held_lock+0x2d/0x110 [ 41.032294][ T5075] ? ptrace_notify+0xfe/0x140 [ 41.036991][ T5075] ? __fget_light+0x20a/0x270 [ 41.041665][ T5075] do_writev+0x133/0x2f0 [ 41.046107][ T5075] ? vfs_writev+0x670/0x670 [ 41.050658][ T5075] ? lockdep_hardirqs_on+0x7d/0x100 [ 41.055992][ T5075] ? _raw_spin_unlock_irq+0x2e/0x50 [ 41.061205][ T5075] ? ptrace_notify+0xfe/0x140 [ 41.065929][ T5075] do_syscall_64+0x39/0xb0 [ 41.070362][ T5075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.076320][ T5075] RIP: 0033:0x7f60ae6c3699 [ 41.080780][ T5075] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.100463][ T5075] RSP: 002b:00007fff3f168d48 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 41.108942][ T5075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60ae6c3699 [ 41.116986][ T5075] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 41.125006][ T5075] RBP: 00007f60ae6831a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.133656][ T5075] R10: 000000000000ffff R11: 0000000000000246 R12: 00007f60ae683230 [ 41.141631][ T5075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.149762][ T5075] [ 41.152815][ T5075] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 41.160084][ T5075] CPU: 0 PID: 5075 Comm: syz-executor573 Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0 [ 41.170153][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 41.180215][ T5075] Call Trace: [ 41.183504][ T5075] [ 41.186431][ T5075] dump_stack_lvl+0xd9/0x150 [ 41.191030][ T5075] panic+0x61b/0x6c0 [ 41.194937][ T5075] ? panic_smp_self_stop+0x90/0x90 [ 41.200055][ T5075] ? show_trace_log_lvl+0x285/0x390 [ 41.205269][ T5075] ? _copy_from_iter+0x2ad/0x1060 [ 41.210330][ T5075] check_panic_on_warn+0xb1/0xc0 [ 41.215278][ T5075] __warn+0xf2/0x4f0 [ 41.219174][ T5075] ? _copy_from_iter+0x2ad/0x1060 [ 41.224201][ T5075] report_bug+0x2da/0x500 [ 41.228628][ T5075] handle_bug+0x3c/0x70 [ 41.232877][ T5075] exc_invalid_op+0x18/0x50 [ 41.237380][ T5075] asm_exc_invalid_op+0x1a/0x20 [ 41.242241][ T5075] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 41.247872][ T5075] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 1e 8a 69 fd be 73 02 00 00 48 c7 c7 80 c0 a6 8a e8 5d 18 a6 fd e9 56 fe ff ff e8 03 8a 69 fd <0f> 0b 45 31 ff eb 8b e8 f7 89 69 fd 31 ff 89 ee e8 fe 85 69 fd 40 [ 41.267487][ T5075] RSP: 0018:ffffc90003def138 EFLAGS: 00010293 [ 41.273559][ T5075] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 41.281527][ T5075] RDX: ffff8880213257c0 RSI: ffffffff841b785d RDI: 0000000000000001 [ 41.289588][ T5075] RBP: 0000000000001000 R08: 0000000000000001 R09: 0000000000000000 [ 41.297573][ T5075] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 41.305548][ T5075] R13: ffffea000073ae00 R14: ffffc90003def370 R15: 0000000000001000 [ 41.313529][ T5075] ? _copy_from_iter+0x2ad/0x1060 [ 41.318559][ T5075] ? _copy_from_iter+0x2ad/0x1060 [ 41.323586][ T5075] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 41.329222][ T5075] ? bio_add_pc_page+0xbc/0x100 [ 41.334083][ T5075] copy_page_from_iter+0x233/0x3f0 [ 41.339209][ T5075] blk_rq_map_user_iov+0xb5d/0x16e0 [ 41.344510][ T5075] ? iovec_from_user+0xb1/0x3a0 [ 41.349361][ T5075] ? bio_map_user_iov+0x8a0/0x8a0 [ 41.354398][ T5075] ? import_iovec+0x110/0x160 [ 41.359074][ T5075] blk_rq_map_user_io.part.0+0x1d3/0x270 [ 41.364716][ T5075] ? blk_rq_map_user+0x150/0x150 [ 41.369673][ T5075] ? find_held_lock+0x2d/0x110 [ 41.374433][ T5075] ? sg_common_write.constprop.0+0xc89/0x1e00 [ 41.380505][ T5075] ? lock_downgrade+0x690/0x690 [ 41.385352][ T5075] ? sg_build_indirect+0x128/0xb20 [ 41.390470][ T5075] blk_rq_map_user_io+0xdf/0x200 [ 41.395416][ T5075] ? blk_rq_map_user_io.part.0+0x270/0x270 [ 41.401236][ T5075] ? wait_for_completion_io_timeout+0x20/0x20 [ 41.407316][ T5075] ? sg_build_indirect+0x525/0xb20 [ 41.412435][ T5075] sg_common_write.constprop.0+0xdcd/0x1e00 [ 41.418338][ T5075] ? sg_read+0x1520/0x1520 [ 41.422756][ T5075] ? copy_user_generic_string+0x30/0x50 [ 41.428304][ T5075] sg_new_write.isra.0+0x522/0xa90 [ 41.433509][ T5075] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 41.439668][ T5075] ? find_held_lock+0x2d/0x110 [ 41.444429][ T5075] ? __might_fault+0xd9/0x180 [ 41.449103][ T5075] ? lock_downgrade+0x690/0x690 [ 41.453973][ T5075] sg_write.part.0+0x999/0xd90 [ 41.458745][ T5075] ? sg_new_write.isra.0+0xa90/0xa90 [ 41.464034][ T5075] ? find_held_lock+0x2d/0x110 [ 41.468896][ T5075] ? aa_path_link+0x2f0/0x2f0 [ 41.473584][ T5075] ? __might_fault+0xd9/0x180 [ 41.478260][ T5075] ? lock_downgrade+0x690/0x690 [ 41.483119][ T5075] ? apparmor_file_permission+0x272/0x4e0 [ 41.488844][ T5075] sg_write+0x8d/0xe0 [ 41.492832][ T5075] do_iter_write+0x4ef/0x700 [ 41.497424][ T5075] vfs_writev+0x1aa/0x670 [ 41.501743][ T5075] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 41.506935][ T5075] ? vfs_iter_write+0xa0/0xa0 [ 41.511603][ T5075] ? do_raw_spin_lock+0x124/0x2b0 [ 41.516639][ T5075] ? spin_bug+0x1c0/0x1c0 [ 41.520975][ T5075] ? find_held_lock+0x2d/0x110 [ 41.525734][ T5075] ? ptrace_notify+0xfe/0x140 [ 41.530405][ T5075] ? __fget_light+0x20a/0x270 [ 41.535080][ T5075] do_writev+0x133/0x2f0 [ 41.539314][ T5075] ? vfs_writev+0x670/0x670 [ 41.543814][ T5075] ? lockdep_hardirqs_on+0x7d/0x100 [ 41.549018][ T5075] ? _raw_spin_unlock_irq+0x2e/0x50 [ 41.554210][ T5075] ? ptrace_notify+0xfe/0x140 [ 41.558886][ T5075] do_syscall_64+0x39/0xb0 [ 41.563300][ T5075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.569198][ T5075] RIP: 0033:0x7f60ae6c3699 [ 41.573607][ T5075] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.593216][ T5075] RSP: 002b:00007fff3f168d48 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 41.601625][ T5075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60ae6c3699 [ 41.609594][ T5075] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 41.617561][ T5075] RBP: 00007f60ae6831a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.625524][ T5075] R10: 000000000000ffff R11: 0000000000000246 R12: 00007f60ae683230 [ 41.633576][ T5075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.641551][ T5075] [ 41.645397][ T5075] Kernel Offset: disabled [ 41.649778][ T5075] Rebooting in 86400 seconds..