./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor329077615 <...> Warning: Permanently added '10.128.1.109' (ECDSA) to the list of known hosts. execve("./syz-executor329077615", ["./syz-executor329077615"], 0x7ffc5abdeaf0 /* 10 vars */) = 0 brk(NULL) = 0x5555573cb000 brk(0x5555573cbc40) = 0x5555573cbc40 arch_prctl(ARCH_SET_FS, 0x5555573cb300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor329077615", 4096) = 27 brk(0x5555573ecc40) = 0x5555573ecc40 brk(0x5555573ed000) = 0x5555573ed000 mprotect(0x7fa460ba1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_TIPC, SOCK_STREAM, 0) = 3 syzkaller login: [ 56.582068][ T5300] ------------[ cut here ]------------ [ 56.588238][ T5300] WARNING: CPU: 0 PID: 5300 at lib/iov_iter.c:629 _copy_from_iter+0x2ae/0xf40 [ 56.597164][ T5300] Modules linked in: [ 56.601076][ T5300] CPU: 0 PID: 5300 Comm: syz-executor329 Not tainted 6.1.0-syzkaller-07445-g7e68dd7d07a2 #0 [ 56.611213][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.621321][ T5300] RIP: 0010:_copy_from_iter+0x2ae/0xf40 [ 56.626934][ T5300] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 1d 2d 79 fd be 79 02 00 00 48 c7 c7 a0 35 a6 8a e8 1c 4a b2 fd e9 55 fe ff ff e8 02 2d 79 fd <0f> 0b 45 31 ff eb 8b e8 f6 2c 79 fd 31 ff 89 ee e8 5d 29 79 fd 40 [ 56.646627][ T5300] RSP: 0018:ffffc90003abf830 EFLAGS: 00010293 [ 56.652693][ T5300] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.660715][ T5300] RDX: ffff88801a6257c0 RSI: ffffffff8407860e RDI: 0000000000000001 [ 56.668795][ T5300] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 56.676832][ T5300] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003abfd00 [ 56.684954][ T5300] R13: ffffc90003abfd00 R14: ffff888021c23900 R15: 0000000000000000 [ 56.692938][ T5300] FS: 00005555573cb300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.702130][ T5300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.708860][ T5300] CR2: 000000000045ad50 CR3: 0000000026676000 CR4: 00000000003506f0 [ 56.716891][ T5300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.724917][ T5300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.732883][ T5300] Call Trace: [ 56.736269][ T5300] [ 56.739225][ T5300] ? csum_and_copy_from_iter+0x12e0/0x12e0 [ 56.745298][ T5300] ? memset+0x24/0x50 [ 56.749306][ T5300] ? __build_skb_around+0x276/0x3a0 [ 56.754632][ T5300] ? __alloc_skb+0x185/0x310 [ 56.759250][ T5300] ? __check_object_size+0x31/0x5a0 [ 56.764616][ T5300] tipc_msg_build+0x2d4/0x10a0 [ 56.769406][ T5300] ? tipc_msg_assemble+0x510/0x510 [ 56.774570][ T5300] ? __tipc_node_link_down+0x1540/0x1540 [ 56.780219][ T5300] ? __local_bh_enable_ip+0xa4/0x130 [ 56.785595][ T5300] __tipc_sendmsg+0xada/0x1870 [ 56.790392][ T5300] ? tipc_sendmcast+0xe60/0xe60 [ 56.795318][ T5300] ? __init_waitqueue_head+0x150/0x150 [ 56.800804][ T5300] ? mark_held_locks+0x9f/0xe0 [ 56.805670][ T5300] ? __local_bh_enable_ip+0xa4/0x130 [ 56.810991][ T5300] tipc_connect+0x57b/0x6b0 [ 56.815598][ T5300] ? tipc_sendmsg+0x70/0x70 [ 56.820147][ T5300] ? bpf_lsm_socket_connect+0x9/0x10 [ 56.825549][ T5300] ? tipc_sendmsg+0x70/0x70 [ 56.830071][ T5300] __sys_connect_file+0x153/0x1a0 [ 56.835152][ T5300] __sys_connect+0x165/0x1a0 [ 56.839848][ T5300] ? __sys_connect_file+0x1a0/0x1a0 [ 56.845126][ T5300] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.850340][ T5300] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.855702][ T5300] ? _raw_spin_unlock_irq+0x2e/0x50 [ 56.860919][ T5300] __x64_sys_connect+0x73/0xb0 [ 56.866132][ T5300] do_syscall_64+0x39/0xb0 [ 56.870571][ T5300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.876522][ T5300] RIP: 0033:0x7fa460b34b19 [ 56.880955][ T5300] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.900641][ T5300] RSP: 002b:00007ffe68a2f588 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 56.909122][ T5300] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa460b34b19 [ 56.917175][ T5300] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 56.925205][ T5300] RBP: 00007fa460af8cc0 R08: 0000000000000000 R09: 0000000000000000 [ 56.933188][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa460af8d50 [ 56.941281][ T5300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.949349][ T5300] [ 56.952374][ T5300] Kernel panic - not syncing: panic_on_warn set ... [ 56.958943][ T5300] CPU: 0 PID: 5300 Comm: syz-executor329 Not tainted 6.1.0-syzkaller-07445-g7e68dd7d07a2 #0 [ 56.969002][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.979044][ T5300] Call Trace: [ 56.982314][ T5300] [ 56.985274][ T5300] dump_stack_lvl+0xd1/0x138 [ 56.989862][ T5300] panic+0x2cc/0x626 [ 56.993760][ T5300] ? panic_print_sys_info.part.0+0x110/0x110 [ 56.999740][ T5300] ? __warn.cold+0x24b/0x350 [ 57.004326][ T5300] ? _copy_from_iter+0x2ae/0xf40 [ 57.009263][ T5300] __warn.cold+0x25c/0x350 [ 57.013686][ T5300] ? _copy_from_iter+0x2ae/0xf40 [ 57.018613][ T5300] report_bug+0x1c0/0x210 [ 57.022938][ T5300] handle_bug+0x3c/0x70 [ 57.027086][ T5300] exc_invalid_op+0x18/0x50 [ 57.031607][ T5300] asm_exc_invalid_op+0x1a/0x20 [ 57.036461][ T5300] RIP: 0010:_copy_from_iter+0x2ae/0xf40 [ 57.041998][ T5300] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 1d 2d 79 fd be 79 02 00 00 48 c7 c7 a0 35 a6 8a e8 1c 4a b2 fd e9 55 fe ff ff e8 02 2d 79 fd <0f> 0b 45 31 ff eb 8b e8 f6 2c 79 fd 31 ff 89 ee e8 5d 29 79 fd 40 [ 57.061606][ T5300] RSP: 0018:ffffc90003abf830 EFLAGS: 00010293 [ 57.067681][ T5300] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.075655][ T5300] RDX: ffff88801a6257c0 RSI: ffffffff8407860e RDI: 0000000000000001 [ 57.083639][ T5300] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 57.091612][ T5300] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003abfd00 [ 57.099586][ T5300] R13: ffffc90003abfd00 R14: ffff888021c23900 R15: 0000000000000000 [ 57.107574][ T5300] ? _copy_from_iter+0x2ae/0xf40 [ 57.112531][ T5300] ? csum_and_copy_from_iter+0x12e0/0x12e0 [ 57.118365][ T5300] ? memset+0x24/0x50 [ 57.122368][ T5300] ? __build_skb_around+0x276/0x3a0 [ 57.127590][ T5300] ? __alloc_skb+0x185/0x310 [ 57.132195][ T5300] ? __check_object_size+0x31/0x5a0 [ 57.137929][ T5300] tipc_msg_build+0x2d4/0x10a0 [ 57.142713][ T5300] ? tipc_msg_assemble+0x510/0x510 [ 57.147835][ T5300] ? __tipc_node_link_down+0x1540/0x1540 [ 57.153472][ T5300] ? __local_bh_enable_ip+0xa4/0x130 [ 57.158790][ T5300] __tipc_sendmsg+0xada/0x1870 [ 57.163574][ T5300] ? tipc_sendmcast+0xe60/0xe60 [ 57.168443][ T5300] ? __init_waitqueue_head+0x150/0x150 [ 57.173932][ T5300] ? mark_held_locks+0x9f/0xe0 [ 57.178712][ T5300] ? __local_bh_enable_ip+0xa4/0x130 [ 57.184020][ T5300] tipc_connect+0x57b/0x6b0 [ 57.188544][ T5300] ? tipc_sendmsg+0x70/0x70 [ 57.193072][ T5300] ? bpf_lsm_socket_connect+0x9/0x10 [ 57.198377][ T5300] ? tipc_sendmsg+0x70/0x70 [ 57.202977][ T5300] __sys_connect_file+0x153/0x1a0 [ 57.208016][ T5300] __sys_connect+0x165/0x1a0 [ 57.212615][ T5300] ? __sys_connect_file+0x1a0/0x1a0 [ 57.217841][ T5300] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.223043][ T5300] ? lockdep_hardirqs_on+0x7d/0x100 [ 57.228252][ T5300] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.233464][ T5300] __x64_sys_connect+0x73/0xb0 [ 57.238238][ T5300] do_syscall_64+0x39/0xb0 [ 57.242678][ T5300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.248656][ T5300] RIP: 0033:0x7fa460b34b19 [ 57.253076][ T5300] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.272688][ T5300] RSP: 002b:00007ffe68a2f588 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 57.281108][ T5300] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa460b34b19 [ 57.289081][ T5300] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 57.297140][ T5300] RBP: 00007fa460af8cc0 R08: 0000000000000000 R09: 0000000000000000 [ 57.305131][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa460af8d50 [ 57.313118][ T5300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.321201][ T5300] [ 57.324272][ T5300] Kernel Offset: disabled [ 57.328668][ T5300] Rebooting in 86400 seconds..