general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 1 PID: 9997 Comm: syz-executor.4 Not tainted 6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a61700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d524000 CR3: 000000003ccaa000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f77174ebb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7714a61188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f77175fef60 RCX: 00007f77174ebb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f7717545f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8785d8ef R14: 00007f7714a61300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a61700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d524000 CR3: 000000003ccaa000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
loop2: detected capacity change from 0 to 264192
loop2: detected capacity change from 0 to 264192
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#2] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10034 Comm: syz-executor.4 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803da97c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803da97d60 RCX: ffffc9001209f000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88803a352000
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a1f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7714a3fff8 CR3: 000000003ccaa000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f77174ebb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7714a1f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f77175ff0e0 RCX: 00007f77174ebb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f7717545f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8785d8ef R14: 00007f7714a1f300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a1f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7714a3fff8 CR3: 000000003ccaa000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#3] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10046 Comm: syz-executor.4 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803cf67c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803cf67d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800f243900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a61700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7714a60ff8 CR3: 000000003979c000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f77174ebb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7714a61188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f77175fef60 RCX: 00007f77174ebb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f7717545f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8785d8ef R14: 00007f7714a61300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a61700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7714a60ff8 CR3: 000000003979c000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
loop2: detected capacity change from 0 to 264192
loop6: detected capacity change from 0 to 40
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#4] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 1 PID: 10075 Comm: syz-executor.3 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803be47c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803be47d60 RCX: ffffc9000563a000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800de8c500
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f1e778e1700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c328000 CR3: 000000003ccac000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f1e7a36bb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1e778e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f1e7a47ef60 RCX: 00007f1e7a36bb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f1e7a3c5f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffcc03b509f R14: 00007f1e778e1300 R15: 0000000000022000
 </TASK>
Modules linked in:
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#5] PREEMPT SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
RIP: 0010:do_iter_read+0x481/0x750
CPU: 0 PID: 10074 Comm: syz-executor.0 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00

RSP: 0018:ffff888039ef7c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888039ef7d60 RCX: ffffc90001c1d000
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88803c9a4500
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
FS:  00007fed061ef700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2bf28000 CR3: 000000003971c000 CR4: 0000000000350ef0
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
FS:  00007f1e778e1700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
Call Trace:
 <TASK>
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 vfs_readv+0xe5/0x160
CR2: 0000001b2c328000 CR3: 000000003ccac000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fed08c79b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fed061ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007fed08d8cf60 RCX: 00007fed08c79b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007fed08cd3f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc689b00af R14: 00007fed061ef300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fed061ef700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2bf28000 CR3: 000000003971c000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#6] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10078 Comm: syz-executor.1 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803be47c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803be47d60 RCX: ffffc90000813000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88803da8a500
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f3e7c438700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c128000 CR3: 000000000f046000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f3e7eec2b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3e7c438188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f3e7efd5f60 RCX: 00007f3e7eec2b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f3e7ef1cf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc63d11acf R14: 00007f3e7c438300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f3e7c438700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c128000 CR3: 000000000f046000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
syz-executor.6: attempt to access beyond end of device
loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
Buffer I/O error on dev loop6, logical block 10, lost async page write
loop6: detected capacity change from 0 to 40
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#7] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 1 PID: 10086 Comm: syz-executor.4 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803ce4fc78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803ce4fd60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802e210280
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a61700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7714a60ff8 CR3: 000000003d424000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f77174ebb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7714a61188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f77175fef60 RCX: 00007f77174ebb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f7717545f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8785d8ef R14: 00007f7714a61300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a61700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7714a60ff8 CR3: 000000003d424000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
syz-executor.6: attempt to access beyond end of device
loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Buffer I/O error on dev loop6, logical block 10, lost async page write
loop6: detected capacity change from 0 to 40
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#8] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10096 Comm: syz-executor.0 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803bb47c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803bb47d60 RCX: ffffc90001c1d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800f6b8280
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fed061ef700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2bf28000 CR3: 000000003cee8000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fed08c79b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fed061ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007fed08d8cf60 RCX: 00007fed08c79b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007fed08cd3f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc689b00af R14: 00007fed061ef300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#9] PREEMPT SMP KASAN NOPTI
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 1 PID: 10101 Comm: syz-executor.3 Tainted: G      D            6.3.0-rc3-next-20230327 #1
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
FS:  00007fed061ef700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
RSP: 0018:ffff88803c627c78 EFLAGS: 00010216
CR2: 0000001b2bf28000 CR3: 000000003cee8000 CR4: 0000000000350ef0
RAX: 0000000020000140 RBX: ffff88803c627d60 RCX: ffffc9000563a000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800c79f180
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f1e778e1700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c328000 CR3: 000000000fdae000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f1e7a36bb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1e778e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f1e7a47ef60 RCX: 00007f1e7a36bb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f1e7a3c5f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffcc03b509f R14: 00007f1e778e1300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#10] PREEMPT SMP KASAN NOPTI
RIP: 0010:do_iter_read+0x481/0x750
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10105 Comm: syz-executor.4 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803bb57c78 EFLAGS: 00010216


RAX: 0000000020000140 RBX: ffff88803bb57d60 RCX: ffffc90011c9d000
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800dd47680
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f7714a61700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d528000 CR3: 000000003ccae000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f77174ebb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7714a61188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f77175fef60 RCX: 00007f77174ebb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f7717545f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe8785d8ef R14: 00007f7714a61300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RIP: 0010:do_iter_read+0x481/0x750
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0

FS:  00007f1e778e1700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
CR2: 0000001b2c328000 CR3: 000000000fdae000 CR4: 0000000000350ee0
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#11] PREEMPT SMP KASAN NOPTI
FS:  00007f7714a61700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 1 PID: 10102 Comm: syz-executor.1 Tainted: G      D            6.3.0-rc3-next-20230327 #1
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
CR2: 0000001b2d528000 CR3: 000000003ccae000 CR4: 0000000000350ef0
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
RSP: 0018:ffff88803d59fc78 EFLAGS: 00010216
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
RAX: 0000000020000140 RBX: ffff88803d59fd60 RCX: ffffc90000813000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800d56b180
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f3e7c438700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c128000 CR3: 0000000019c36000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f3e7eec2b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3e7c438188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f3e7efd5f60 RCX: 00007f3e7eec2b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f3e7ef1cf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc63d11acf R14: 00007f3e7c438300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#12] PREEMPT SMP KASAN NOPTI
RIP: 0010:do_iter_read+0x481/0x750
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
CPU: 0 PID: 10111 Comm: syz-executor.2 Tainted: G      D            6.3.0-rc3-next-20230327 #1
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750

RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RSP: 0018:ffff88803de3fc78 EFLAGS: 00010216
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000

RAX: 0000000020000140 RBX: ffff88803de3fd60 RCX: ffffc9000362a000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800d93e280
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fe946f71700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c229000 CR3: 0000000010232000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fe949a1cb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe946f71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007fe949b30020 RCX: 00007fe949a1cb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007fe949a76f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffce6bb601f R14: 00007fe946f71300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
FS:  00007f3e7c438700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000

CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
CR2: 0000001b2c128000 CR3: 0000000019c36000 CR4: 0000000000350ee0
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fe946f71700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c229000 CR3: 0000000010232000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
syz-executor.6: attempt to access beyond end of device
loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
Buffer I/O error on dev loop6, logical block 10, lost async page write
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#13] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10116 Comm: syz-executor.6 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88800faa7c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88800faa7d60 RCX: ffffc90005037000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800dab8280
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f3ed0d57700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c728000 CR3: 000000003de9e000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f3ed37e1b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3ed0d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f3ed38f4f60 RCX: 00007f3ed37e1b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f3ed383bf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff929594df R14: 00007f3ed0d57300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f3ed0d57700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c728000 CR3: 000000003de9e000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#14] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 1 PID: 10119 Comm: syz-executor.0 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88800fd7fc78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88800fd7fd60 RCX: ffffc90001c1d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9fd180
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fed061ef700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2bf28000 CR3: 00000000160a6000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fed08c79b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fed061ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007fed08d8cf60 RCX: 00007fed08c79b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007fed08cd3f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc689b00af R14: 00007fed061ef300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fed061ef700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2bf28000 CR3: 00000000160a6000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#15] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 1 PID: 10125 Comm: syz-executor.2 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803be37c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803be37d60 RCX: ffffc90003429000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800d2e4a00
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fe946f92700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c229000 CR3: 000000003b322000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fe949a1cb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe946f92188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007fe949b2ff60 RCX: 00007fe949a1cb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007fe949a76f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffce6bb601f R14: 00007fe946f92300 R15: 0000000000022000
 </TASK>
Modules linked in:
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#16] PREEMPT SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10133 Comm: syz-executor.6 Tainted: G      D            6.3.0-rc3-next-20230327 #1
RIP: 0010:do_iter_read+0x481/0x750
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RSP: 0018:ffff88803919fc78 EFLAGS: 00010216


RAX: 0000000020000140 RBX: ffff88803919fd60 RCX: ffffc90005037000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff888032a4d900
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f3ed0d57700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c728000 CR3: 000000003a372000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f3ed37e1b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3ed0d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f3ed38f4f60 RCX: 00007f3ed37e1b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f3ed383bf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff929594df R14: 00007f3ed0d57300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fe946f92700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c229000 CR3: 000000003b322000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#17] PREEMPT SMP KASAN NOPTI
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]

CPU: 1 PID: 10131 Comm: syz-executor.1 Tainted: G      D            6.3.0-rc3-next-20230327 #1
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
RSP: 0018:ffff888038bdfc78 EFLAGS: 00010216
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
RAX: 0000000020000140 RBX: ffff888038bdfd60 RCX: ffffc90000813000
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
FS:  00007f3ed0d57700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff888032a68780
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
FS:  00007f3e7c438700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CR2: 0000001b2c728000 CR3: 000000003a372000 CR4: 0000000000350ef0
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
CR2: 0000001b2c128000 CR3: 0000000039e8a000 CR4: 0000000000350ee0
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f3e7eec2b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3e7c438188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f3e7efd5f60 RCX: 00007f3e7eec2b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f3e7ef1cf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc63d11acf R14: 00007f3e7c438300 R15: 0000000000022000
 </TASK>
Modules linked in:
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#18] PREEMPT SMP KASAN NOPTI
---[ end trace 0000000000000000 ]---
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10129 Comm: syz-executor.3 Tainted: G      D            6.3.0-rc3-next-20230327 #1
RIP: 0010:do_iter_read+0x481/0x750
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RSP: 0018:ffff88803b1d7c78 EFLAGS: 00010216

RAX: 0000000020000140 RBX: ffff88803b1d7d60 RCX: ffffc9000563a000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff888039ddd400
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f1e778e1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c328000 CR3: 000000000d554000 CR4: 0000000000350ef0
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f1e7a36bb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1e778e1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f1e7a47ef60 RCX: 00007f1e7a36bb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f1e7a3c5f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffcc03b509f R14: 00007f1e778e1300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
FS:  00007f3e7c438700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033

RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
CR2: 0000001b2c128000 CR3: 0000000039e8a000 CR4: 0000000000350ee0
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f1e778e1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c328000 CR3: 000000000d554000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#19] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 0 PID: 10158 Comm: syz-executor.2 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803d597c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803d597d60 RCX: ffffc90003429000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff888019087680
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fe946f92700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c228000 CR3: 000000003bd32000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fe949a1cb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe946f92188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007fe949b2ff60 RCX: 00007fe949a1cb19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007fe949a76f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffce6bb601f R14: 00007fe946f92300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007fe946f92700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2c228000 CR3: 000000003bd32000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
general protection fault, probably for non-canonical address 0xdffffc0004000028: 0000 [#20] PREEMPT SMP KASAN NOPTI
KASAN: probably user-memory-access in range [0x0000000020000140-0x0000000020000147]
CPU: 1 PID: 10157 Comm: syz-executor.6 Tainted: G      D            6.3.0-rc3-next-20230327 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff88803dcbfc78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff88803dcbfd60 RCX: ffffc90005037000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88800e560a00
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f3ed0d57700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f77185383a4 CR3: 000000003b2a4000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 vfs_readv+0xe5/0x160
 __x64_sys_preadv+0x233/0x310
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f3ed37e1b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3ed0d57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
RAX: ffffffffffffffda RBX: 00007f3ed38f4f60 RCX: 00007f3ed37e1b19
RDX: 0000000000000001 RSI: 0000000020001140 RDI: 0000000000000006
RBP: 00007f3ed383bf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff929594df R14: 00007f3ed0d57300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:do_iter_read+0x481/0x750
Code: 00 0f 85 52 02 00 00 4d 8b 7c 24 28 e8 48 2c c6 ff 48 8b 44 24 18 80 38 00 0f 85 1c 02 00 00 48 8b 43 18 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 ef 01 00 00 48 8b 4c 24 20 48 8b 30 80 39 00
RSP: 0018:ffff888016817c78 EFLAGS: 00010216
RAX: 0000000020000140 RBX: ffff888016817d60 RCX: ffffc90011c9d000
RDX: 0000000004000028 RSI: ffffffff81855c98 RDI: 0000000000000007
RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001000 R11: 0000000000000001 R12: ffff88802c9e7900
R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff849238e0
FS:  00007f3ed0d57700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f77185383a4 CR3: 000000003b2a4000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
----------------
Code disassembly (best guess):
   0:	00 0f                	add    %cl,(%rdi)
   2:	85 52 02             	test   %edx,0x2(%rdx)
   5:	00 00                	add    %al,(%rax)
   7:	4d 8b 7c 24 28       	mov    0x28(%r12),%r15
   c:	e8 48 2c c6 ff       	callq  0xffc62c59
  11:	48 8b 44 24 18       	mov    0x18(%rsp),%rax
  16:	80 38 00             	cmpb   $0x0,(%rax)
  19:	0f 85 1c 02 00 00    	jne    0x23b
  1f:	48 8b 43 18          	mov    0x18(%rbx),%rax
  23:	48 89 c2             	mov    %rax,%rdx
  26:	48 c1 ea 03          	shr    $0x3,%rdx
* 2a:	42 80 3c 32 00       	cmpb   $0x0,(%rdx,%r14,1) <-- trapping instruction
  2f:	0f 85 ef 01 00 00    	jne    0x224
  35:	48 8b 4c 24 20       	mov    0x20(%rsp),%rcx
  3a:	48 8b 30             	mov    (%rax),%rsi
  3d:	80 39 00             	cmpb   $0x0,(%rcx)