./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2662036856
<...>
forked to background, child pid 4667
[ 21.060607][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.070490][ T4668] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 21.324123][ T4745] sshd (4745) used greatest stack depth: 22288 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts.
execve("./syz-executor2662036856", ["./syz-executor2662036856"], 0x7ffc44ac51b0 /* 10 vars */) = 0
brk(NULL) = 0x555557450000
brk(0x555557450c40) = 0x555557450c40
arch_prctl(ARCH_SET_FS, 0x555557450300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2662036856", 4096) = 28
brk(0x555557471c40) = 0x555557471c40
brk(0x555557472000) = 0x555557472000
mprotect(0x7f1b286e4000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/sg0", O_RDONLY) = 3
syzkaller login: [ 55.733545][ T4998] ------------[ cut here ]------------
[ 55.739520][ T4998] WARNING: CPU: 1 PID: 4998 at lib/iov_iter.c:644 _copy_from_iter+0x2f3/0x1290
[ 55.748495][ T4998] Modules linked in:
[ 55.752385][ T4998] CPU: 1 PID: 4998 Comm: syz-executor266 Not tainted 6.4.0-rc4-syzkaller-00099-g1874a42a7d74 #0
[ 55.762895][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 55.772961][ T4998] RIP: 0010:_copy_from_iter+0x2f3/0x1290
[ 55.778612][ T4998] Code: 72 ff ff 89 c3 e9 23 ff ff ff e8 d8 d4 72 fd be 88 02 00 00 48 c7 c7 80 bd a6 8a e8 f7 e2 af fd e9 17 fe ff ff e8 bd d4 72 fd <0f> 0b 45 31 ff e9 6b ff ff ff e8 ae d4 72 fd 31 ff 89 ee e8 85 d0
[ 55.798351][ T4998] RSP: 0018:ffffc90003aff688 EFLAGS: 00010293
[ 55.804400][ T4998] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 55.812484][ T4998] RDX: ffff888029a23b80 RSI: ffffffff84116f63 RDI: 0000000000000001
[ 55.820477][ T4998] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 55.828469][ T4998] R10: 0000000000000000 R11: ffffffff8a0f5e59 R12: 0000000000000021
[ 55.836441][ T4998] R13: ffffea000065e200 R14: ffffc90003aff8c0 R15: 0000000000000021
[ 55.844444][ T4998] FS: 0000555557450300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 55.853393][ T4998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.859992][ T4998] CR2: 00007ff7a85f1b10 CR3: 0000000021676000 CR4: 0000000000350ee0
[ 55.867983][ T4998] Call Trace:
[ 55.871241][ T4998]
[ 55.874149][ T4998] ? __warn+0xe6/0x390
[ 55.878240][ T4998] ? _copy_from_iter+0x2f3/0x1290
[ 55.883273][ T4998] ? report_bug+0x2da/0x500
[ 55.887812][ T4998] ? handle_bug+0x3c/0x70
[ 55.892143][ T4998] ? exc_invalid_op+0x18/0x50
[ 55.896834][ T4998] ? asm_exc_invalid_op+0x1a/0x20
[ 55.901877][ T4998] ? do_syscall_64+0x39/0xb0
[ 55.906448][ T4998] ? _copy_from_iter+0x2f3/0x1290
[ 55.911486][ T4998] ? _copy_from_iter+0x2f3/0x1290
[ 55.916618][ T4998] ? _copy_from_iter+0x2f3/0x1290
[ 55.921619][ T4998] ? __lock_acquire+0x28bf/0x5f30
[ 55.926667][ T4998] ? bio_add_hw_page+0x4ba/0x740
[ 55.931625][ T4998] ? hash_and_copy_to_iter+0x210/0x210
[ 55.937113][ T4998] ? bio_add_pc_page+0xbc/0x100
[ 55.941973][ T4998] ? bio_add_hw_page+0x740/0x740
[ 55.946930][ T4998] ? bio_kmalloc+0x41/0x70
[ 55.951359][ T4998] copy_page_from_iter+0x9f/0x110
[ 55.956362][ T4998] blk_rq_map_user_iov+0xb55/0x16d0
[ 55.961579][ T4998] ? find_held_lock+0x2d/0x110
[ 55.966353][ T4998] ? bio_map_user_iov+0x8a0/0x8a0
[ 55.971392][ T4998] ? sg_common_write.constprop.0+0xc89/0x1e00
[ 55.977578][ T4998] ? __mutex_lock+0x231/0x1350
[ 55.982322][ T4998] blk_rq_map_user_io+0x1cd/0x200
[ 55.987361][ T4998] ? blk_rq_map_user_io.part.0+0x270/0x270
[ 55.993166][ T4998] ? wait_for_completion_io_timeout+0x20/0x20
[ 55.999256][ T4998] ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 56.005081][ T4998] sg_common_write.constprop.0+0xdcd/0x1e00
[ 56.011022][ T4998] ? sg_read+0x1520/0x1520
[ 56.015544][ T4998] ? capable+0xe1/0x120
[ 56.019717][ T4998] sg_new_write.isra.0+0x522/0xa90
[ 56.024840][ T4998] ? sg_common_write.constprop.0+0x1e00/0x1e00
[ 56.031036][ T4998] ? scsi_block_when_processing_errors+0x298/0x350
[ 56.037563][ T4998] ? scsi_check_sense+0x1130/0x1130
[ 56.042756][ T4998] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 56.048670][ T4998] ? do_vfs_ioctl+0x132/0x1670
[ 56.053450][ T4998] sg_ioctl+0x9a8/0x2700
[ 56.057713][ T4998] ? sg_write+0xe0/0xe0
[ 56.061878][ T4998] ? ptrace_notify+0xfe/0x140
[ 56.066581][ T4998] ? lock_downgrade+0x690/0x690
[ 56.071447][ T4998] ? bpf_lsm_file_ioctl+0x9/0x10
[ 56.076367][ T4998] ? sg_write+0xe0/0xe0
[ 56.080539][ T4998] __x64_sys_ioctl+0x197/0x210
[ 56.085329][ T4998] do_syscall_64+0x39/0xb0
[ 56.089774][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.095700][ T4998] RIP: 0033:0x7f1b286776c9
[ 56.100128][ T4998] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.119752][ T4998] RSP: 002b:00007ffe4c931ba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 56.128175][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b286776c9
[ 56.136145][ T4998] RDX: 0000000020000180 RSI: 0000000000002285 RDI: 0000000000000003
[ 56.144137][ T4998] RBP: 00007f1b286371d0 R08: 0000000000000000 R09: 0000000000000000
[ 56.152126][ T4998] R10: 000000000000ffff R11: 0000000000000246 R12: 00007f1b28637260
[ 56.160107][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.168098][ T4998]
[ 56.171096][ T4998] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 56.178351][ T4998] CPU: 1 PID: 4998 Comm: syz-executor266 Not tainted 6.4.0-rc4-syzkaller-00099-g1874a42a7d74 #0
[ 56.188738][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 56.198771][ T4998] Call Trace:
[ 56.202028][ T4998]
[ 56.204939][ T4998] dump_stack_lvl+0xd9/0x150
[ 56.209519][ T4998] panic+0x686/0x730
[ 56.213396][ T4998] ? panic_smp_self_stop+0xa0/0xa0
[ 56.218495][ T4998] ? show_trace_log_lvl+0x284/0x390
[ 56.223684][ T4998] ? _copy_from_iter+0x2f3/0x1290
[ 56.228685][ T4998] check_panic_on_warn+0xb1/0xc0
[ 56.233603][ T4998] __warn+0xf2/0x390
[ 56.237481][ T4998] ? _copy_from_iter+0x2f3/0x1290
[ 56.242484][ T4998] report_bug+0x2da/0x500
[ 56.246805][ T4998] handle_bug+0x3c/0x70
[ 56.250942][ T4998] exc_invalid_op+0x18/0x50
[ 56.255418][ T4998] asm_exc_invalid_op+0x1a/0x20
[ 56.260248][ T4998] RIP: 0010:_copy_from_iter+0x2f3/0x1290
[ 56.265858][ T4998] Code: 72 ff ff 89 c3 e9 23 ff ff ff e8 d8 d4 72 fd be 88 02 00 00 48 c7 c7 80 bd a6 8a e8 f7 e2 af fd e9 17 fe ff ff e8 bd d4 72 fd <0f> 0b 45 31 ff e9 6b ff ff ff e8 ae d4 72 fd 31 ff 89 ee e8 85 d0
[ 56.285440][ T4998] RSP: 0018:ffffc90003aff688 EFLAGS: 00010293
[ 56.291486][ T4998] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 56.299523][ T4998] RDX: ffff888029a23b80 RSI: ffffffff84116f63 RDI: 0000000000000001
[ 56.307493][ T4998] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 56.315438][ T4998] R10: 0000000000000000 R11: ffffffff8a0f5e59 R12: 0000000000000021
[ 56.323389][ T4998] R13: ffffea000065e200 R14: ffffc90003aff8c0 R15: 0000000000000021
[ 56.331341][ T4998] ? do_syscall_64+0x39/0xb0
[ 56.335921][ T4998] ? _copy_from_iter+0x2f3/0x1290
[ 56.340928][ T4998] ? _copy_from_iter+0x2f3/0x1290
[ 56.345930][ T4998] ? __lock_acquire+0x28bf/0x5f30
[ 56.350937][ T4998] ? bio_add_hw_page+0x4ba/0x740
[ 56.355857][ T4998] ? hash_and_copy_to_iter+0x210/0x210
[ 56.361297][ T4998] ? bio_add_pc_page+0xbc/0x100
[ 56.366126][ T4998] ? bio_add_hw_page+0x740/0x740
[ 56.371054][ T4998] ? bio_kmalloc+0x41/0x70
[ 56.375454][ T4998] copy_page_from_iter+0x9f/0x110
[ 56.380454][ T4998] blk_rq_map_user_iov+0xb55/0x16d0
[ 56.385633][ T4998] ? find_held_lock+0x2d/0x110
[ 56.390391][ T4998] ? bio_map_user_iov+0x8a0/0x8a0
[ 56.395391][ T4998] ? sg_common_write.constprop.0+0xc89/0x1e00
[ 56.401444][ T4998] ? __mutex_lock+0x231/0x1350
[ 56.406190][ T4998] blk_rq_map_user_io+0x1cd/0x200
[ 56.411190][ T4998] ? blk_rq_map_user_io.part.0+0x270/0x270
[ 56.416975][ T4998] ? wait_for_completion_io_timeout+0x20/0x20
[ 56.423020][ T4998] ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 56.428817][ T4998] sg_common_write.constprop.0+0xdcd/0x1e00
[ 56.434698][ T4998] ? sg_read+0x1520/0x1520
[ 56.439099][ T4998] ? capable+0xe1/0x120
[ 56.443239][ T4998] sg_new_write.isra.0+0x522/0xa90
[ 56.448334][ T4998] ? sg_common_write.constprop.0+0x1e00/0x1e00
[ 56.454473][ T4998] ? scsi_block_when_processing_errors+0x298/0x350
[ 56.460959][ T4998] ? scsi_check_sense+0x1130/0x1130
[ 56.466135][ T4998] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 56.472020][ T4998] ? do_vfs_ioctl+0x132/0x1670
[ 56.476773][ T4998] sg_ioctl+0x9a8/0x2700
[ 56.480999][ T4998] ? sg_write+0xe0/0xe0
[ 56.485133][ T4998] ? ptrace_notify+0xfe/0x140
[ 56.489788][ T4998] ? lock_downgrade+0x690/0x690
[ 56.494636][ T4998] ? bpf_lsm_file_ioctl+0x9/0x10
[ 56.499559][ T4998] ? sg_write+0xe0/0xe0
[ 56.503709][ T4998] __x64_sys_ioctl+0x197/0x210
[ 56.508454][ T4998] do_syscall_64+0x39/0xb0
[ 56.512939][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.518815][ T4998] RIP: 0033:0x7f1b286776c9
[ 56.523205][ T4998] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.542877][ T4998] RSP: 002b:00007ffe4c931ba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 56.551268][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b286776c9
[ 56.559220][ T4998] RDX: 0000000020000180 RSI: 0000000000002285 RDI: 0000000000000003
[ 56.567167][ T4998] RBP: 00007f1b286371d0 R08: 0000000000000000 R09: 0000000000000000
[ 56.575115][ T4998] R10: 000000000000ffff R11: 0000000000000246 R12: 00007f1b28637260
[ 56.583062][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.591017][ T4998]
[ 56.595046][ T4998] Kernel Offset: disabled
[ 56.599407][ T4998] Rebooting in 86400 seconds..