sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.1 not setting count and/or reply_len properly
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5147 at lib/iov_iter.c:629 _copy_from_iter+0x2f1/0x1130
Modules linked in:
CPU: 1 PID: 5147 Comm: syz-executor.1 Not tainted 6.1.0-rc7-next-20221201 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:_copy_from_iter+0x2f1/0x1130
Code: 37 ff 44 89 f3 e9 2f ff ff ff e8 ba 20 37 ff be 79 02 00 00 48 c7 c7 00 b8 9e 84 e8 49 97 5a ff e9 13 fe ff ff e8 9f 20 37 ff <0f> 0b 45 31 f6 e9 77 ff ff ff e8 90 20 37 ff 31 ff 89 ee e8 57 1c
RSP: 0018:ffff88804741f5e8 EFLAGS: 00010216
RAX: 0000000000003ff7 RBX: 0000000000000000 RCX: ffffc90000be7000
RDX: 0000000000040000 RSI: ffffffff8211efb1 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000
R13: ffffea00011d0a00 R14: 0000000000001000 R15: ffff88804741f818
FS: 00007f1768187700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2bf22000 CR3: 000000001c90a000 CR4: 0000000000350ee0
Call Trace:
copy_page_from_iter+0xe3/0x180
blk_rq_map_user_iov+0xb0c/0x1650
blk_rq_map_user_io+0x1ee/0x220
sg_common_write.constprop.0+0xd84/0x15e0
sg_write.part.0+0x706/0xb20
sg_write+0x88/0xe0
vfs_write+0x358/0xe40
ksys_write+0x12b/0x260
do_syscall_64+0x3f/0x90
entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7f176ac53b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1768187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f176ad670e0 RCX: 00007f176ac53b19
RDX: 0000000000000125 RSI: 00000000200003c0 RDI: 0000000000000004
RBP: 00007f176acadf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd28ade9f R14: 00007f1768187300 R15: 0000000000022000
irq event stamp: 891
hardirqs last enabled at (901): [] __up_console_sem+0x78/0x80
hardirqs last disabled at (912): [] __up_console_sem+0x5d/0x80
softirqs last enabled at (562): [] __irq_exit_rcu+0x11b/0x180
softirqs last disabled at (553): [] __irq_exit_rcu+0x11b/0x180
---[ end trace 0000000000000000 ]---
syz-executor.0: attempt to access beyond end of device
loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
buffer_io_error: 10 callbacks suppressed
Buffer I/O error on dev loop0, logical block 10, lost async page write
sg_write: data in/out 917468/251 bytes for SCSI command 0x0-- guessing data in;
program syz-executor.1 not setting count and/or reply_len properly
sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
blk_print_req_error: 1 callbacks suppressed
I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
Buffer I/O error on dev sr0, logical block 0, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
Buffer I/O error on dev sr0, logical block 1, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
Buffer I/O error on dev sr0, logical block 2, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
Buffer I/O error on dev sr0, logical block 3, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
Buffer I/O error on dev sr0, logical block 4, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
Buffer I/O error on dev sr0, logical block 5, async page read
sr 1:0:0:0: [sr0] tag#0 unaligned transfer
I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
Buffer I/O error on dev sr0, logical block 6, async page read
Buffer I/O error on dev sr0, logical block 7, async page read
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
netlink: 'syz-executor.2': attribute type 6 has an invalid length.
device lo entered promiscuous mode
device lo left promiscuous mode
device lo entered promiscuous mode
device lo entered promiscuous mode
device lo left promiscuous mode
device lo entered promiscuous mode
device lo left promiscuous mode
device lo left promiscuous mode
device lo entered promiscuous mode
device lo entered promiscuous mode
device lo left promiscuous mode
device lo entered promiscuous mode