FAT-fs (loop6): bogus number of FAT sectors FAT-fs (loop6): Can't find a valid FAT filesystem ------------[ cut here ]------------ WARNING: CPU: 0 PID: 11664 at arch/x86/kernel/traps.c:1079 exc_debug+0xbb/0x140 Modules linked in: CPU: 0 PID: 11664 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220718 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:exc_debug+0xbb/0x140 Code: c6 40 74 3c 48 8b bd 80 00 00 00 e8 6f 51 e9 fc 84 c0 75 25 48 89 e6 48 89 ef e8 30 49 e9 fc 84 c0 75 22 f6 44 24 01 40 74 1b <0f> 0b 48 81 a5 90 00 00 00 ff fe ff ff eb 0c 80 e6 bf 48 89 14 24 RSP: 0018:fffffe0000016f28 EFLAGS: 00010002 RAX: 0000000000000000 RBX: 0000000000090202 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888043f13ef4 RBP: fffffe0000016f58 R08: 0000000000000000 R09: 0000000000010000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f4db5835700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d826000 CR3: 000000001d6a6000 CR4: 0000000000350ef0 DR0: 0000000020000340 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: <#DB> asm_exc_debug+0x1a/0x40 RIP: 0010:copy_user_generic_string+0x2c/0x50 Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 e3 e9 40 02 8d 0c ca 89 ca RSP: 0018:ffff88804584f9d0 EFLAGS: 00040202 RAX: 0000000000000001 RBX: 0000000000000ce4 RCX: 000000000000013b RDX: 0000000000000004 RSI: ffff888044424308 RDI: 0000000020000348 RBP: 00007fffffffe31c R08: 0000000000000000 R09: ffff888044424ce3 R10: ffffed100888499c R11: 0000000000000001 R12: 0000000020000040 R13: ffff888044424000 R14: 0000000000000000 R15: ffff888044424000 copyout+0xef/0x120 _copy_to_iter+0x576/0x1420 seq_read_iter+0xdcb/0x12b0 seq_read+0x16d/0x210 proc_reg_read+0x22a/0x300 vfs_read+0x253/0x930 ksys_read+0x127/0x250 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f4db82bfb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4db5835188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007f4db83d2f60 RCX: 00007f4db82bfb19 RDX: 00000000200000e9 RSI: 0000000020000040 RDI: 0000000000000008 RBP: 00007f4db8319f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd0b9db08f R14: 00007f4db5835300 R15: 0000000000022000 irq event stamp: 1428 hardirqs last enabled at (1427): [] __local_bh_enable_ip+0xa0/0x130 hardirqs last disabled at (1428): [] exc_debug+0x66/0x140 softirqs last enabled at (1426): [] ipv6_route_seq_stop+0x199/0x2c0 softirqs last disabled at (1386): [] ipv6_route_seq_start+0x9f/0x290 ---[ end trace 0000000000000000 ]--- loop7: detected capacity change from 0 to 264192 loop2: detected capacity change from 0 to 264192 loop5: detected capacity change from 0 to 264192 loop4: detected capacity change from 0 to 264192 loop6: detected capacity change from 0 to 264192 ---------------- Code disassembly (best guess): 0: cb lret 1: 83 fa 08 cmp $0x8,%edx 4: 72 27 jb 0x2d 6: 89 f9 mov %edi,%ecx 8: 83 e1 07 and $0x7,%ecx b: 74 15 je 0x22 d: 83 e9 08 sub $0x8,%ecx 10: f7 d9 neg %ecx 12: 29 ca sub %ecx,%edx 14: 8a 06 mov (%rsi),%al 16: 88 07 mov %al,(%rdi) 18: 48 ff c6 inc %rsi 1b: 48 ff c7 inc %rdi 1e: ff c9 dec %ecx 20: 75 f2 jne 0x14 22: 89 d1 mov %edx,%ecx 24: c1 e9 03 shr $0x3,%ecx 27: 83 e2 07 and $0x7,%edx * 2a: f3 48 a5 rep movsq %ds:(%rsi),%es:(%rdi) <-- trapping instruction 2d: 89 d1 mov %edx,%ecx 2f: f3 a4 rep movsb %ds:(%rsi),%es:(%rdi) 31: 31 c0 xor %eax,%eax 33: 0f 01 ca clac 36: e9 e3 e9 40 02 jmpq 0x240ea1e 3b: 8d 0c ca lea (%rdx,%rcx,8),%ecx 3e: 89 ca mov %ecx,%edx