./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1731159732 <...> DUID 00:04:e6:bc:8e:bc:c3:7a:f3:fc:35:c5:a5:4f:9b:64:01:ce forked to background, child pid 4653 [ 35.680711][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.700240][ T4654] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.173' (ECDSA) to the list of known hosts. execve("./syz-executor1731159732", ["./syz-executor1731159732"], 0x7ffcce046b50 /* 10 vars */) = 0 brk(NULL) = 0x55555595a000 brk(0x55555595ac40) = 0x55555595ac40 arch_prctl(ARCH_SET_FS, 0x55555595a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1731159732", 4096) = 28 brk(0x55555597bc40) = 0x55555597bc40 brk(0x55555597c000) = 0x55555597c000 mprotect(0x7fc3ee651000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_TIPC, SOCK_STREAM, 0) = 3 syzkaller login: [ 59.911989][ T5078] ------------[ cut here ]------------ [ 59.917560][ T5078] WARNING: CPU: 0 PID: 5078 at lib/iov_iter.c:629 _copy_from_iter+0x2ad/0x1060 [ 59.926623][ T5078] Modules linked in: [ 59.930646][ T5078] CPU: 0 PID: 5078 Comm: syz-executor173 Not tainted 6.2.0-rc7-next-20230208-syzkaller #0 [ 59.940584][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 59.950692][ T5078] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 59.956330][ T5078] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 0e b1 6c fd be 79 02 00 00 48 c7 c7 e0 9a a6 8a e8 ed e3 a6 fd e9 56 fe ff ff e8 f3 b0 6c fd <0f> 0b 45 31 ff eb 8b e8 e7 b0 6c fd 31 ff 89 ee e8 ee ac 6c fd 40 [ 59.975978][ T5078] RSP: 0018:ffffc90003b4f808 EFLAGS: 00010293 [ 59.982087][ T5078] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 59.990120][ T5078] RDX: ffff888021b19d40 RSI: ffffffff8417bced RDI: 0000000000000001 [ 59.998166][ T5078] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 60.006146][ T5078] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003b4fd00 [ 60.014154][ T5078] R13: ffff88802317c0f8 R14: ffffc90003b4fd00 R15: 0000000000000000 [ 60.022165][ T5078] FS: 000055555595a300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 60.031149][ T5078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.037745][ T5078] CR2: 000000000045ad50 CR3: 0000000079c2d000 CR4: 00000000003506f0 [ 60.045753][ T5078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.053763][ T5078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.061778][ T5078] Call Trace: [ 60.065066][ T5078] [ 60.068075][ T5078] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 60.073742][ T5078] ? __build_skb_around+0x276/0x3a0 [ 60.078988][ T5078] ? __alloc_skb+0x185/0x310 [ 60.083600][ T5078] ? __check_object_size+0x31/0x6e0 [ 60.088859][ T5078] tipc_msg_build+0x2d4/0x10c0 [ 60.093668][ T5078] ? tipc_msg_assemble+0x540/0x540 [ 60.098827][ T5078] ? tipc_node_find_by_name+0x420/0x420 [ 60.104416][ T5078] ? __local_bh_enable_ip+0xa4/0x130 [ 60.109787][ T5078] __tipc_sendmsg+0xada/0x1890 [ 60.114610][ T5078] ? tipc_sendmcast+0xc50/0xc50 [ 60.119564][ T5078] ? print_usage_bug.part.0+0x660/0x660 [ 60.125144][ T5078] ? __init_waitqueue_head+0x150/0x150 [ 60.130668][ T5078] ? mark_held_locks+0x9f/0xe0 [ 60.135455][ T5078] ? __local_bh_enable_ip+0xa4/0x130 [ 60.140807][ T5078] tipc_connect+0x567/0x690 [ 60.145341][ T5078] ? tipc_sendmsg+0x70/0x70 [ 60.149913][ T5078] ? bpf_lsm_socket_connect+0x9/0x10 [ 60.155236][ T5078] ? tipc_sendmsg+0x70/0x70 [ 60.159783][ T5078] __sys_connect_file+0x153/0x1a0 [ 60.164836][ T5078] __sys_connect+0x165/0x1a0 [ 60.169558][ T5078] ? __sys_connect_file+0x1a0/0x1a0 [ 60.174809][ T5078] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.180072][ T5078] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.185299][ T5078] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.190560][ T5078] __x64_sys_connect+0x73/0xb0 [ 60.195351][ T5078] do_syscall_64+0x39/0xb0 [ 60.199843][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.205764][ T5078] RIP: 0033:0x7fc3ee5e4b19 [ 60.210219][ T5078] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.229913][ T5078] RSP: 002b:00007fff8a8fe298 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 60.238425][ T5078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3ee5e4b19 [ 60.246420][ T5078] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 60.254466][ T5078] RBP: 00007fc3ee5a8cc0 R08: 0000000000000000 R09: 0000000000000000 [ 60.262479][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3ee5a8d50 [ 60.270485][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.278520][ T5078] [ 60.281540][ T5078] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 60.288813][ T5078] CPU: 0 PID: 5078 Comm: syz-executor173 Not tainted 6.2.0-rc7-next-20230208-syzkaller #0 [ 60.298695][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 60.308743][ T5078] Call Trace: [ 60.312032][ T5078] [ 60.314955][ T5078] dump_stack_lvl+0xd9/0x150 [ 60.319550][ T5078] panic+0x61b/0x6c0 [ 60.323464][ T5078] ? panic_smp_self_stop+0x90/0x90 [ 60.328572][ T5078] ? show_trace_log_lvl+0x285/0x390 [ 60.333884][ T5078] ? _copy_from_iter+0x2ad/0x1060 [ 60.338915][ T5078] check_panic_on_warn+0xb1/0xc0 [ 60.343863][ T5078] __warn+0xf2/0x4f0 [ 60.347763][ T5078] ? _copy_from_iter+0x2ad/0x1060 [ 60.352795][ T5078] report_bug+0x2da/0x500 [ 60.357156][ T5078] handle_bug+0x3c/0x70 [ 60.361326][ T5078] exc_invalid_op+0x18/0x50 [ 60.365844][ T5078] asm_exc_invalid_op+0x1a/0x20 [ 60.370718][ T5078] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 60.376378][ T5078] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 0e b1 6c fd be 79 02 00 00 48 c7 c7 e0 9a a6 8a e8 ed e3 a6 fd e9 56 fe ff ff e8 f3 b0 6c fd <0f> 0b 45 31 ff eb 8b e8 e7 b0 6c fd 31 ff 89 ee e8 ee ac 6c fd 40 [ 60.396017][ T5078] RSP: 0018:ffffc90003b4f808 EFLAGS: 00010293 [ 60.402102][ T5078] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 60.410081][ T5078] RDX: ffff888021b19d40 RSI: ffffffff8417bced RDI: 0000000000000001 [ 60.418055][ T5078] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 60.426033][ T5078] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003b4fd00 [ 60.434011][ T5078] R13: ffff88802317c0f8 R14: ffffc90003b4fd00 R15: 0000000000000000 [ 60.442010][ T5078] ? _copy_from_iter+0x2ad/0x1060 [ 60.447101][ T5078] ? _copy_from_iter+0x2ad/0x1060 [ 60.452166][ T5078] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 60.457822][ T5078] ? __build_skb_around+0x276/0x3a0 [ 60.463046][ T5078] ? __alloc_skb+0x185/0x310 [ 60.467657][ T5078] ? __check_object_size+0x31/0x6e0 [ 60.472882][ T5078] tipc_msg_build+0x2d4/0x10c0 [ 60.477682][ T5078] ? tipc_msg_assemble+0x540/0x540 [ 60.482820][ T5078] ? tipc_node_find_by_name+0x420/0x420 [ 60.488400][ T5078] ? __local_bh_enable_ip+0xa4/0x130 [ 60.493727][ T5078] __tipc_sendmsg+0xada/0x1890 [ 60.498531][ T5078] ? tipc_sendmcast+0xc50/0xc50 [ 60.503409][ T5078] ? print_usage_bug.part.0+0x660/0x660 [ 60.508986][ T5078] ? __init_waitqueue_head+0x150/0x150 [ 60.514476][ T5078] ? mark_held_locks+0x9f/0xe0 [ 60.519259][ T5078] ? __local_bh_enable_ip+0xa4/0x130 [ 60.524569][ T5078] tipc_connect+0x567/0x690 [ 60.529100][ T5078] ? tipc_sendmsg+0x70/0x70 [ 60.533644][ T5078] ? bpf_lsm_socket_connect+0x9/0x10 [ 60.538951][ T5078] ? tipc_sendmsg+0x70/0x70 [ 60.543475][ T5078] __sys_connect_file+0x153/0x1a0 [ 60.548521][ T5078] __sys_connect+0x165/0x1a0 [ 60.553127][ T5078] ? __sys_connect_file+0x1a0/0x1a0 [ 60.558357][ T5078] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.563579][ T5078] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.568798][ T5078] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.574022][ T5078] __x64_sys_connect+0x73/0xb0 [ 60.578802][ T5078] do_syscall_64+0x39/0xb0 [ 60.583245][ T5078] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.589157][ T5078] RIP: 0033:0x7fc3ee5e4b19 [ 60.593580][ T5078] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.613197][ T5078] RSP: 002b:00007fff8a8fe298 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 60.621623][ T5078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3ee5e4b19 [ 60.629604][ T5078] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 60.637583][ T5078] RBP: 00007fc3ee5a8cc0 R08: 0000000000000000 R09: 0000000000000000 [ 60.645563][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3ee5a8d50 [ 60.653542][ T5078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.661536][ T5078] [ 60.664693][ T5078] Kernel Offset: disabled [ 60.669089][ T5078] Rebooting in 86400 seconds..