sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.5 not setting count and/or reply_len properly ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4321 at lib/iov_iter.c:629 _copy_from_iter+0x2f1/0x1130 Modules linked in: CPU: 1 PID: 4321 Comm: syz-executor.5 Not tainted 6.1.0-rc6-next-20221128 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:_copy_from_iter+0x2f1/0x1130 Code: 37 ff 44 89 f3 e9 2f ff ff ff e8 4a 77 37 ff be 79 02 00 00 48 c7 c7 40 b5 9e 84 e8 99 e4 5a ff e9 13 fe ff ff e8 2f 77 37 ff <0f> 0b 45 31 f6 e9 77 ff ff ff e8 20 77 37 ff 31 ff 89 ee e8 e7 72 RSP: 0018:ffff888044ecf5e8 EFLAGS: 00010212 RAX: 00000000000067e1 RBX: 0000000000000000 RCX: ffffc90006a00000 RDX: 0000000000040000 RSI: ffffffff8211a1c1 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 R13: ffffea0001187600 R14: 0000000000001000 R15: ffff888044ecf818 FS: 00007fdc33772700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2c622000 CR3: 000000001679c000 CR4: 0000000000350ee0 Call Trace: copy_page_from_iter+0xe3/0x180 blk_rq_map_user_iov+0xb0c/0x1650 blk_rq_map_user_io+0x1ee/0x220 sg_common_write.constprop.0+0xd84/0x15e0 sg_write.part.0+0x706/0xb20 sg_write+0x88/0xe0 vfs_write+0x358/0xe40 ksys_write+0x12b/0x260 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7fdc361fcb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fdc33772188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fdc3630ff60 RCX: 00007fdc361fcb19 RDX: 0000000000000125 RSI: 00000000200003c0 RDI: 0000000000000005 RBP: 00007fdc36256f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd5a46ef4f R14: 00007fdc33772300 R15: 0000000000022000 irq event stamp: 6353 hardirqs last enabled at (6395): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (6440): [] sysvec_apic_timer_interrupt+0xf/0xc0 softirqs last enabled at (4564): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (4545): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- audit: type=1400 audit(1669636226.967:10): avc: denied { read } for pid=4319 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.5 not setting count and/or reply_len properly 9pnet_fd: Insufficient options for proto=fd 9pnet_fd: Insufficient options for proto=fd sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.5 not setting count and/or reply_len properly syz-executor.1 (4376) used greatest stack depth: 24408 bytes left sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.5 not setting count and/or reply_len properly audit: type=1400 audit(1669636227.862:11): avc: denied { write } for pid=4399 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.1 not setting count and/or reply_len properly sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.1 not setting count and/or reply_len properly sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in; program syz-executor.5 not setting count and/or reply_len properly Bluetooth: MGMT ver 1.22 syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) device lo entered promiscuous mode syz-executor.0 (4593) used greatest stack depth: 24336 bytes left device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode ======================================================= WARNING: The mand mount option has been deprecated and and is ignored by this kernel. Remove the mand option from the mount to silence this warning. ======================================================= syz-executor.0 (4630) used greatest stack depth: 24096 bytes left