------------[ cut here ]------------
WARNING: CPU: 0 PID: 13516 at lib/iov_iter.c:629 _copy_from_iter+0x2bf/0x1150
Modules linked in:
CPU: 0 PID: 13516 Comm: syz-executor.7 Not tainted 6.2.0-rc1-next-20221226 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:_copy_from_iter+0x2bf/0x1150
Code: 5d 41 5e 41 5f e9 a5 9f 2f 02 e8 9c a3 37 ff be 79 02 00 00 48 c7 c7 80 cb 9e 84 e8 6b 18 5b ff e9 48 fe ff ff e8 81 a3 37 ff <0f> 0b 45 31 f6 eb 87 e8 75 a3 37 ff 31 ff 89 ee e8 3c 9f 37 ff 40
RSP: 0018:ffff888033ccf5e8 EFLAGS: 00010212
RAX: 00000000000054a8 RBX: 0000000000000000 RCX: ffffc9000618c000
RDX: 0000000000040000 RSI: ffffffff821139ff RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff888033ccf818
R13: ffffea00011e6400 R14: 0000000000001000 R15: ffff888033ccf818
FS: 00007f5b20a82700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000200005c0 CR3: 000000004494c000 CR4: 0000000000350ef0
Call Trace:
copy_page_from_iter+0xe3/0x180
blk_rq_map_user_iov+0xb0c/0x1650
blk_rq_map_user_io+0x1ee/0x220
sg_common_write.constprop.0+0xd84/0x15e0
sg_write.part.0+0x698/0xa90
sg_write+0x88/0xe0
vfs_write+0x2cf/0xd90
ksys_write+0x12b/0x260
do_syscall_64+0x3f/0x90
entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f5b2350cb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5b20a82188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f5b2361ff60 RCX: 00007f5b2350cb19
RDX: 0000000000000125 RSI: 00000000200003c0 RDI: 0000000000000005
RBP: 00007f5b23566f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe6055843f R14: 00007f5b20a82300 R15: 0000000000022000
irq event stamp: 2881
hardirqs last enabled at (2901): [] __up_console_sem+0x78/0x80
hardirqs last disabled at (2946): [] __up_console_sem+0x5d/0x80
softirqs last enabled at (728): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (591): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
device lo left promiscuous mode
device lo entered promiscuous mode
device lo entered promiscuous mode
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.7 not setting count and/or reply_len properly
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.5 not setting count and/or reply_len properly
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.7 not setting count and/or reply_len properly
device lo left promiscuous mode
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.5 not setting count and/or reply_len properly
device lo entered promiscuous mode
device lo left promiscuous mode
device lo left promiscuous mode
device lo entered promiscuous mode
device lo entered promiscuous mode
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.4 not setting count and/or reply_len properly
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.5 not setting count and/or reply_len properly
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.7 not setting count and/or reply_len properly
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.4 not setting count and/or reply_len properly
netlink: 'syz-executor.5': attribute type 49 has an invalid length.
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.4 not setting count and/or reply_len properly
EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none.
EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none.
EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none.
EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none.
EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. Quota mode: none.
device sit0 entered promiscuous mode
device sit0 left promiscuous mode
device sit0 entered promiscuous mode
device sit0 left promiscuous mode
tmpfs: Bad value for 'nr_inodes'
device sit0 entered promiscuous mode
device sit0 left promiscuous mode
device sit0 entered promiscuous mode
device sit0 left promiscuous mode
device sit0 entered promiscuous mode
device sit0 left promiscuous mode
device sit0 entered promiscuous mode
device sit0 left promiscuous mode
device sit0 entered promiscuous mode
device sit0 left promiscuous mode
device sit0 entered promiscuous mode
device sit0 left promiscuous mode
Process accounting resumed
Process accounting resumed
cgroup: fork rejected by pids controller in /syz3
Bluetooth: Wrong link type (-71)
netlink: 420 bytes leftover after parsing attributes in process `syz-executor.7'.
No source specified
No source specified
Bluetooth: Wrong link type (-71)
Bluetooth: Wrong link type (-71)
Bluetooth: Wrong link type (-71)
Bluetooth: Wrong link type (-71)
Bluetooth: hci6: link tx timeout
Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa
netlink: 'syz-executor.0': attribute type 1 has an invalid length.
netlink: 'syz-executor.0': attribute type 1 has an invalid length.
Bluetooth: Wrong link type (-71)
Bluetooth: hci6: link tx timeout
Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa
device lo entered promiscuous mode
Bluetooth: Wrong link type (-71)
Bluetooth: hci0: link tx timeout
Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa