------------[ cut here ]------------ WARNING: CPU: 1 PID: 10854 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 1 PID: 10854 Comm: syz-executor.5 Not tainted 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff888044c179d8 EFLAGS: 00010216 RAX: 0000000000002ac1 RBX: ffff888044c17a68 RCX: ffffc900033e5000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff888041d21800 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007f4c88c82700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff88e80af64 CR3: 000000004717a000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f4c8b70cb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4c88c82188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f4c8b81ff60 RCX: 00007f4c8b70cb19 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 RBP: 00007f4c8b766f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000409afb R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbff709bf R14: 00007f4c88c82300 R15: 0000000000022000 irq event stamp: 1263 hardirqs last enabled at (1273): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1284): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (958): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (953): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 blk_print_req_error: 2169 callbacks suppressed I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 buffer_io_error: 2204 callbacks suppressed Buffer I/O error on dev sr0, logical block 0, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 1, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 2, async page read ------------[ cut here ]------------ WARNING: CPU: 0 PID: 10868 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 3, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer Modules linked in: CPU: 0 PID: 10868 Comm: syz-executor.5 Tainted: G W 5.19.0-rc6-next-20220713 #1 I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Buffer I/O error on dev sr0, logical block 4, async page read RIP: 0010:iov_iter_pipe+0x240/0x2b0 sr 1:0:0:0: [sr0] tag#0 unaligned transfer Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 RSP: 0018:ffff8880458579d8 EFLAGS: 00010212 Buffer I/O error on dev sr0, logical block 5, async page read RAX: 0000000000000dd6 RBX: ffff888045857a68 RCX: ffffc900033e5000 sr 1:0:0:0: [sr0] tag#0 unaligned transfer RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 RBP: ffff88800f562800 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 Buffer I/O error on dev sr0, logical block 6, async page read R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 sr 1:0:0:0: [sr0] tag#0 unaligned transfer FS: 00007f4c88c82700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Buffer I/O error on dev sr0, logical block 7, async page read CR2: 0000001b2e025000 CR3: 00000000447f2000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600 Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f4c8b70cb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4c88c82188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f4c8b81ff60 RCX: 00007f4c8b70cb19 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 RBP: 00007f4c8b766f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000409afb R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbff709bf R14: 00007f4c88c82300 R15: 0000000000022000 irq event stamp: 1365 hardirqs last enabled at (1375): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1386): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (684): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (625): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer Buffer I/O error on dev sr0, logical block 0, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer Buffer I/O error on dev sr0, logical block 1, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer ------------[ cut here ]------------ WARNING: CPU: 0 PID: 10898 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 0 PID: 10898 Comm: syz-executor.5 Tainted: G W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff888045bb79d8 EFLAGS: 00010212 RAX: 0000000000000ca8 RBX: ffff888045bb7a68 RCX: ffffc900033e5000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff88800f561c00 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007f4c88c82700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f89aa2ff3a4 CR3: 00000000482d0000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600 sr 1:0:0:0: [sr0] tag#0 unaligned transfer Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 sr 1:0:0:0: [sr0] tag#0 unaligned transfer __x64_sys_sendfile64+0x1d1/0x210 sr 1:0:0:0: [sr0] tag#0 unaligned transfer do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f4c8b70cb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4c88c82188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f4c8b81ff60 RCX: 00007f4c8b70cb19 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 RBP: 00007f4c8b766f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000409afb R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbff709bf R14: 00007f4c88c82300 R15: 0000000000022000 irq event stamp: 1327 hardirqs last enabled at (1337): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1348): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (1124): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (1093): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 10915 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 1 PID: 10915 Comm: syz-executor.5 Tainted: G W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff8880456779d8 EFLAGS: 00010212 RAX: 0000000000000c03 RBX: ffff888045677a68 RCX: ffffc900033e5000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff888041d20800 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007f4c88c82700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4c88c81ff8 CR3: 00000000482d0000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f4c8b70cb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4c88c82188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f4c8b81ff60 RCX: 00007f4c8b70cb19 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 RBP: 00007f4c8b766f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000409afb R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbff709bf R14: 00007f4c88c82300 R15: 0000000000022000 irq event stamp: 1721 hardirqs last enabled at (1733): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1744): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (1592): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (1491): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. ================================================================== BUG: KASAN: slab-out-of-bounds in _copy_to_iter+0x493/0x1420 Read of size 4096 at addr ffff8880457c9000 by task syz-executor.4/10923 CPU: 0 PID: 10923 Comm: syz-executor.4 Tainted: G W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 print_report.cold+0x5e/0x5e5 kasan_report+0xb1/0x1c0 systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. kasan_check_range+0x35/0x1c0 memcpy+0x20/0x60 _copy_to_iter+0x493/0x1420 seq_read_iter+0xdcb/0x12b0 proc_reg_read_iter+0x20a/0x2e0 generic_file_splice_read+0x187/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff88e6f7b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff88bc6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007ff88e80af60 RCX: 00007ff88e6f7b19 systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 00007ff88e751f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffad9740ef R14: 00007ff88bc6d300 R15: 0000000000022000 Allocated by task 10923: kasan_save_stack+0x1e/0x40 __kasan_kmalloc+0x81/0xa0 kvmalloc_node+0x41/0x1e0 seq_read_iter+0x81c/0x12b0 systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. proc_reg_read_iter+0x20a/0x2e0 generic_file_splice_read+0x187/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd The buggy address belongs to the object at ffff8880457c8000 which belongs to the cache kmalloc-cg-4k of size 4096 The buggy address is located 0 bytes to the right of 4096-byte region [ffff8880457c8000, ffff8880457c9000) The buggy address belongs to the physical page: page:000000004a1fac35 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x457c8 head:000000004a1fac35 order:3 compound_mapcount:0 compound_pincount:0 memcg:ffff88800c954d81 flags: 0x100000000010200(slab|head|node=0|zone=1) raw: 0100000000010200 dead000000000100 dead000000000122 ffff88800784c280 raw: 0000000000000000 0000000080040004 00000001ffffffff ffff88800c954d81 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff8880457c8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8880457c8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff8880457c9000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff8880457c9080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff8880457c9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== hpet: Lost 3 RTC interrupts systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 10923 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 1 PID: 10923 Comm: syz-executor.4 Tainted: G B W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff88804661f9d8 EFLAGS: 00010246 RAX: 0000000000040000 RBX: ffff88804661fa68 RCX: ffffc90002de2000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff88800f562400 R08: 0000000000000004 R09: 0000000000000010 systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007ff88bc6d700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff88bc4c718 CR3: 00000000482d0000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff88e6f7b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff88bc6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007ff88e80af60 RCX: 00007ff88e6f7b19 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 00007ff88e751f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffad9740ef R14: 00007ff88bc6d300 R15: 0000000000022000 irq event stamp: 1703 hardirqs last enabled at (1703): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 hardirqs last disabled at (1702): [] __do_softirq+0x6be/0x8d0 softirqs last enabled at (1100): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (1085): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 10955 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 1 PID: 10955 Comm: syz-executor.4 Tainted: G B W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff888045ae79d8 EFLAGS: 00010212 RAX: 000000000000969e RBX: ffff888045ae7a68 RCX: ffffc90002de2000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff888041d21400 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007ff88bc6d700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f55e6d69018 CR3: 00000000482d0000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff88e6f7b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff88bc6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007ff88e80af60 RCX: 00007ff88e6f7b19 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 00007ff88e751f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffad9740ef R14: 00007ff88bc6d300 R15: 0000000000022000 irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 hardirqs last disabled at (0): [] copy_process+0x1dba/0x6d60 softirqs last enabled at (0): [] copy_process+0x1dfe/0x6d60 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]--- systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. ------------[ cut here ]------------ WARNING: CPU: 0 PID: 10969 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 0 PID: 10969 Comm: syz-executor.4 Tainted: G B W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff88801f0d79d8 EFLAGS: 00010216 RAX: 00000000000093b3 RBX: ffff88801f0d7a68 RCX: ffffc90002de2000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff88800f562c00 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007ff88bc6d700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4c8b81c000 CR3: 0000000046518000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000600 Call Trace: generic_file_splice_read+0x95/0x4d0 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 10972 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: do_splice_to+0x1bc/0x240 CPU: 1 PID: 10972 Comm: syz-executor.6 Tainted: G B W 5.19.0-rc6-next-20220713 #1 splice_direct_to_actor+0x2ac/0x8c0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff888043ad79d8 EFLAGS: 00010216 RAX: 000000000000982e RBX: ffff888043ad7a68 RCX: ffffc900041ec000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff888041d20000 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 do_splice_direct+0x1b8/0x290 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007fce56c54700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 do_sendfile+0xb1d/0x1280 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7fcff54718 CR3: 0000000048324000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: generic_file_splice_read+0x95/0x4d0 __x64_sys_sendfile64+0x1d1/0x210 do_splice_to+0x1bc/0x240 do_syscall_64+0x3b/0x90 splice_direct_to_actor+0x2ac/0x8c0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff88e6f7b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff88bc6d188 EFLAGS: 00000246 do_splice_direct+0x1b8/0x290 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007ff88e80af60 RCX: 00007ff88e6f7b19 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 do_sendfile+0xb1d/0x1280 RBP: 00007ff88e751f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 __x64_sys_sendfile64+0x1d1/0x210 R13: 00007fffad9740ef R14: 00007ff88bc6d300 R15: 0000000000022000 irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 do_syscall_64+0x3b/0x90 hardirqs last disabled at (0): [] copy_process+0x1dba/0x6d60 entry_SYSCALL_64_after_hwframe+0x63/0xcd softirqs last enabled at (0): [] copy_process+0x1dfe/0x6d60 RIP: 0033:0x7fce596deb19 softirqs last disabled at (0): [<0000000000000000>] 0x0 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fce56c54188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007fce597f1f60 RCX: 00007fce596deb19 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 00007fce59738f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 ---[ end trace 0000000000000000 ]--- R13: 00007ffcb9033d0f R14: 00007fce56c54300 R15: 0000000000022000 UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 hardirqs last disabled at (0): [] copy_process+0x1dba/0x6d60 softirqs last enabled at (0): [] copy_process+0x1dfe/0x6d60 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]--- systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 10988 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 1 PID: 10988 Comm: syz-executor.4 Tainted: G B W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff888043bdf9d8 EFLAGS: 00010212 RAX: 000000000000979c RBX: ffff888043bdfa68 RCX: ffffc90002de2000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff888041d21c00 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007ff88bc6d700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e228000 CR3: 000000000de70000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff88e6f7b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff88bc6d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007ff88e80af60 RCX: 00007ff88e6f7b19 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 00007ff88e751f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffad9740ef R14: 00007ff88bc6d300 R15: 0000000000022000 irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 hardirqs last disabled at (0): [] copy_process+0x1dba/0x6d60 softirqs last enabled at (0): [] copy_process+0x1dfe/0x6d60 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 10991 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 1 PID: 10991 Comm: syz-executor.6 Tainted: G B W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff888046daf9d8 EFLAGS: 00010216 RAX: 0000000000009372 RBX: ffff888046dafa68 RCX: ffffc900041ec000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff888008a96400 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007fce56c54700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e228000 CR3: 0000000043788000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fce596deb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fce56c54188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007fce597f1f60 RCX: 00007fce596deb19 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 00007fce59738f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcb9033d0f R14: 00007fce56c54300 R15: 0000000000022000 irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 hardirqs last disabled at (0): [] copy_process+0x1dba/0x6d60 softirqs last enabled at (0): [] copy_process+0x1dfe/0x6d60 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]--- systemd-journald[112]: /dev/kmsg buffer overrun, some messages lost. UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 11007 at lib/iov_iter.c:1026 iov_iter_pipe+0x240/0x2b0 Modules linked in: CPU: 1 PID: 11007 Comm: syz-executor.6 Tainted: G B W 5.19.0-rc6-next-20220713 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:iov_iter_pipe+0x240/0x2b0 Code: d0 7c 04 84 d2 75 34 44 89 63 24 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 6b 39 02 e8 d7 3d 3e ff 0f 0b e8 d0 3d 3e ff <0f> 0b e9 a8 fe ff ff e8 54 ad 70 ff e9 17 fe ff ff e8 ba ad 70 ff RSP: 0018:ffff8880458279d8 EFLAGS: 00010212 RAX: 00000000000095c5 RBX: ffff888045827a68 RCX: ffffc900041ec000 RDX: 0000000000040000 RSI: ffffffff8206ced0 RDI: 0000000000000004 RBP: ffff88800ddd7800 R08: 0000000000000004 R09: 0000000000000010 R10: 0000000000000010 R11: 0000000000000001 R12: 0000000000000010 R13: 0000000000000000 R14: 0000000000000010 R15: 0000000000000010 FS: 00007fce56c54700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff88e745c08 CR3: 0000000046766000 CR4: 0000000000350ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: generic_file_splice_read+0x95/0x4d0 do_splice_to+0x1bc/0x240 splice_direct_to_actor+0x2ac/0x8c0 do_splice_direct+0x1b8/0x290 do_sendfile+0xb1d/0x1280 __x64_sys_sendfile64+0x1d1/0x210 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fce596deb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fce56c54188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007fce597f1f60 RCX: 00007fce596deb19 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 RBP: 00007fce59738f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcb9033d0f R14: 00007fce56c54300 R15: 0000000000022000 irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 hardirqs last disabled at (0): [] copy_process+0x1dba/0x6d60 softirqs last enabled at (0): [] copy_process+0x1dfe/0x6d60 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]--- UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy misc raw-gadget: fail, usb_gadget_register_driver returned -16 warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. futex_wake_op: syz-executor.6 tries to shift op by 63; fix this program futex_wake_op: syz-executor.6 tries to shift op by 63; fix this program futex_wake_op: syz-executor.6 tries to shift op by 63; fix this program futex_wake_op: syz-executor.6 tries to shift op by 63; fix this program futex_wake_op: syz-executor.6 tries to shift op by 63; fix this program netlink: 'syz-executor.2': attribute type 28 has an invalid length. ---------------- Code disassembly (best guess), 1 bytes skipped: 0: ff c3 inc %ebx 2: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1) 9: 00 00 00 c: 0f 1f 40 00 nopl 0x0(%rax) 10: 48 89 f8 mov %rdi,%rax 13: 48 89 f7 mov %rsi,%rdi 16: 48 89 d6 mov %rdx,%rsi 19: 48 89 ca mov %rcx,%rdx 1c: 4d 89 c2 mov %r8,%r10 1f: 4d 89 c8 mov %r9,%r8 22: 4c 8b 4c 24 08 mov 0x8(%rsp),%r9 27: 0f 05 syscall * 29: 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax <-- trapping instruction 2f: 73 01 jae 0x32 31: c3 retq 32: 48 c7 c1 bc ff ff ff mov $0xffffffffffffffbc,%rcx 39: f7 d8 neg %eax 3b: 64 89 01 mov %eax,%fs:(%rcx) 3e: 48 rex.W