sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.0 not setting count and/or reply_len properly ------------[ cut here ]------------ WARNING: CPU: 0 PID: 12349 at lib/iov_iter.c:629 _copy_from_iter+0x2f1/0x1130 Modules linked in: CPU: 0 PID: 12349 Comm: syz-executor.0 Not tainted 6.1.0-rc7-next-20221202 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:_copy_from_iter+0x2f1/0x1130 Code: 37 ff 44 89 f3 e9 2f ff ff ff e8 5a 16 37 ff be 79 02 00 00 48 c7 c7 40 bd 9e 84 e8 b9 94 5a ff e9 13 fe ff ff e8 3f 16 37 ff <0f> 0b 45 31 f6 e9 77 ff ff ff e8 30 16 37 ff 31 ff 89 ee e8 f7 11 RSP: 0018:ffff888031d175e8 EFLAGS: 00010212 RAX: 0000000000005aa3 RBX: 0000000000000000 RCX: ffffc90002ee6000 RDX: 0000000000040000 RSI: ffffffff8211fe11 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 R13: ffffea0000ff1a00 R14: 0000000000001000 R15: ffff888031d17818 FS: 00007f71dd02b700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2f324000 CR3: 0000000031d66000 CR4: 0000000000350ef0 Call Trace: copy_page_from_iter+0xe3/0x180 blk_rq_map_user_iov+0xb0c/0x1650 blk_rq_map_user_io+0x1ee/0x220 sg_common_write.constprop.0+0xd84/0x15e0 sg_write.part.0+0x706/0xb20 sg_write+0x88/0xe0 vfs_write+0x358/0xe40 ksys_write+0x12b/0x260 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f71dfab5b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f71dd02b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f71dfbc8f60 RCX: 00007f71dfab5b19 RDX: 0000000000000125 RSI: 00000000200003c0 RDI: 0000000000000005 RBP: 00007f71dfb0ff6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc5c201aef R14: 00007f71dd02b300 R15: 0000000000022000 irq event stamp: 7551 hardirqs last enabled at (7583): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (7710): [] sysvec_apic_timer_interrupt+0xf/0xc0 softirqs last enabled at (3556): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (3257): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.0 not setting count and/or reply_len properly 9pnet_fd: Insufficient options for proto=fd 9pnet_fd: Insufficient options for proto=fd 9pnet_fd: Insufficient options for proto=fd 9pnet_fd: Insufficient options for proto=fd 9pnet_fd: Insufficient options for proto=fd 9pnet_fd: Insufficient options for proto=fd device lo entered promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode