loop6: detected capacity change from 0 to 16383 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7675 at arch/x86/kernel/traps.c:1079 exc_debug+0xbb/0x140 Modules linked in: CPU: 0 PID: 7675 Comm: syz-executor.2 Not tainted 5.19.0-rc3-next-20220622 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:exc_debug+0xbb/0x140 Code: c6 40 74 3c 48 8b bd 80 00 00 00 e8 3f d1 eb fc 84 c0 75 25 48 89 e6 48 89 ef e8 00 c9 eb fc 84 c0 75 22 f6 44 24 01 40 74 1b <0f> 0b 48 81 a5 90 00 00 00 ff fe ff ff eb 0c 80 e6 bf 48 89 14 24 RSP: 0018:fffffe0000016f28 EFLAGS: 00010002 RAX: 0000000000000000 RBX: 0000000000010202 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888016e7bef4 RBP: fffffe0000016f58 R08: 0000000000000000 R09: 0000000000010000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f1f9b9ad700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e127000 CR3: 000000000e7fa000 CR4: 0000000000350ef0 DR0: 0000000020000100 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: <#DB> asm_exc_debug+0x1a/0x40 RIP: 0010:copy_user_generic_string+0x2c/0x40 Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 RSP: 0018:ffff88804284fac0 EFLAGS: 00040246 RAX: 0000000000000001 RBX: 0000000000000720 RCX: 00000000000000cb RDX: 0000000000000000 RSI: ffff888044a8a0c8 RDI: 0000000020000108 RBP: 0000000020000040 R08: 0000000000000000 R09: ffff888044a8a71f R10: ffffed10089514e3 R11: 0000000000000001 R12: ffff888044a8a000 R13: 00007fffffffe8e0 R14: 0000000000000000 R15: ffff88804284fd48 copyout.part.0+0xd1/0x100 _copy_to_iter+0x2b1/0x1820 seq_read_iter+0xdc7/0x12b0 new_sync_read+0x38a/0x5f0 vfs_read+0x490/0x5d0 ksys_read+0x127/0x250 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f1f9e437b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f1f9b9ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007f1f9e54af60 RCX: 00007f1f9e437b19 RDX: 00000000200000e9 RSI: 0000000020000040 RDI: 0000000000000005 RBP: 00007f1f9e491f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffccfb29baf R14: 00007f1f9b9ad300 R15: 0000000000022000 irq event stamp: 958 hardirqs last enabled at (957): [] prepend_path+0x943/0xe20 hardirqs last disabled at (958): [] exc_debug+0x66/0x140 softirqs last enabled at (910): [] __irq_exit_rcu+0x113/0x170 softirqs last disabled at (851): [] __irq_exit_rcu+0x113/0x170 ---[ end trace 0000000000000000 ]--- loop0: detected capacity change from 0 to 16383 nfs: Unknown parameter 'personality' nfs: Unknown parameter 'personality' loop5: detected capacity change from 0 to 16383 nfs: Unknown parameter 'personality' loop0: detected capacity change from 0 to 16383 nfs: Unknown parameter 'personality' loop7: detected capacity change from 0 to 16383 nfs: Unknown parameter 'personality' loop6: detected capacity change from 0 to 16383 nfs: Unknown parameter 'personality' loop5: detected capacity change from 0 to 16383 nfs: Unknown parameter 'personality' loop0: detected capacity change from 0 to 16383 nfs: Unknown parameter 'personality' loop3: detected capacity change from 0 to 16383 nfs: Unknown parameter 'personality' ---------------- Code disassembly (best guess): 0: cb lret 1: 83 fa 08 cmp $0x8,%edx 4: 72 27 jb 0x2d 6: 89 f9 mov %edi,%ecx 8: 83 e1 07 and $0x7,%ecx b: 74 15 je 0x22 d: 83 e9 08 sub $0x8,%ecx 10: f7 d9 neg %ecx 12: 29 ca sub %ecx,%edx 14: 8a 06 mov (%rsi),%al 16: 88 07 mov %al,(%rdi) 18: 48 ff c6 inc %rsi 1b: 48 ff c7 inc %rdi 1e: ff c9 dec %ecx 20: 75 f2 jne 0x14 22: 89 d1 mov %edx,%ecx 24: c1 e9 03 shr $0x3,%ecx 27: 83 e2 07 and $0x7,%edx * 2a: f3 48 a5 rep movsq %ds:(%rsi),%es:(%rdi) <-- trapping instruction 2d: 89 d1 mov %edx,%ecx 2f: f3 a4 rep movsb %ds:(%rsi),%es:(%rdi) 31: 31 c0 xor %eax,%eax 33: 0f 01 ca clac 36: c3 retq 37: 8d 0c ca lea (%rdx,%rcx,8),%ecx 3a: 89 ca mov %ecx,%edx 3c: eb 20 jmp 0x5e 3e: 0f .byte 0xf 3f: 01 .byte 0x1