------------[ cut here ]------------ WARNING: CPU: 1 PID: 14655 at arch/x86/kernel/traps.c:1079 exc_debug+0xbb/0x140 Modules linked in: CPU: 1 PID: 14655 Comm: syz-executor.6 Not tainted 5.19.0-rc4-next-20220627 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:exc_debug+0xbb/0x140 Code: c6 40 74 3c 48 8b bd 80 00 00 00 e8 3f d6 ee fc 84 c0 75 25 48 89 e6 48 89 ef e8 10 ce ee fc 84 c0 75 22 f6 44 24 01 40 74 1b <0f> 0b 48 81 a5 90 00 00 00 ff fe ff ff eb 0c 80 e6 bf 48 89 14 24 RSP: 0018:fffffe000005df28 EFLAGS: 00010002 RAX: 0000000000000000 RBX: 00000000000d0202 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff88801e2ca434 RBP: fffffe000005df58 R08: 0000000000000000 R09: 0000000000010000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007ff84937c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2df28000 CR3: 0000000045292000 CR4: 0000000000350ee0 DR0: 0000000020000200 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: <#DB> asm_exc_debug+0x1a/0x40 RIP: 0010:copy_user_generic_string+0x2c/0x40 Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 RSP: 0018:ffff88804807fa78 EFLAGS: 00040202 RAX: 0000000000000001 RBX: 00000000000000f4 RCX: 000000000000000d RDX: 0000000000000004 RSI: ffff88801a39e088 RDI: 0000000020000208 RBP: 0000000020000180 R08: 0000000000000000 R09: ffff88801a39e0f3 R10: ffffed1003473c1e R11: 0000000000000001 R12: ffff88801a39e000 R13: 00007fffffffef0c R14: 0000000000000000 R15: ffff88804807fd00 copyout.part.0+0xd1/0x100 _copy_to_iter+0x2b1/0x1810 seq_read_iter+0xdc7/0x12b0 seq_read+0x2c7/0x420 proc_reg_read+0x226/0x300 vfs_read+0x1ea/0x5d0 __x64_sys_pread64+0x1f7/0x250 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7ff84be27b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff84937c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 RAX: ffffffffffffffda RBX: 00007ff84bf3b020 RCX: 00007ff84be27b19 RDX: 0000000000002f00 RSI: 0000000020000180 RDI: 0000000000000008 RBP: 00007ff84be81f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000079 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdbf561c6f R14: 00007ff84937c300 R15: 0000000000022000 irq event stamp: 942 hardirqs last enabled at (941): [] mod_objcg_state+0x3ab/0x9e0 hardirqs last disabled at (942): [] exc_debug+0x66/0x140 softirqs last enabled at (866): [] __irq_exit_rcu+0x113/0x170 softirqs last disabled at (859): [] __irq_exit_rcu+0x113/0x170 ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: cb lret 1: 83 fa 08 cmp $0x8,%edx 4: 72 27 jb 0x2d 6: 89 f9 mov %edi,%ecx 8: 83 e1 07 and $0x7,%ecx b: 74 15 je 0x22 d: 83 e9 08 sub $0x8,%ecx 10: f7 d9 neg %ecx 12: 29 ca sub %ecx,%edx 14: 8a 06 mov (%rsi),%al 16: 88 07 mov %al,(%rdi) 18: 48 ff c6 inc %rsi 1b: 48 ff c7 inc %rdi 1e: ff c9 dec %ecx 20: 75 f2 jne 0x14 22: 89 d1 mov %edx,%ecx 24: c1 e9 03 shr $0x3,%ecx 27: 83 e2 07 and $0x7,%edx * 2a: f3 48 a5 rep movsq %ds:(%rsi),%es:(%rdi) <-- trapping instruction 2d: 89 d1 mov %edx,%ecx 2f: f3 a4 rep movsb %ds:(%rsi),%es:(%rdi) 31: 31 c0 xor %eax,%eax 33: 0f 01 ca clac 36: c3 retq 37: 8d 0c ca lea (%rdx,%rcx,8),%ecx 3a: 89 ca mov %ecx,%edx 3c: eb 20 jmp 0x5e 3e: 0f .byte 0xf 3f: 01 .byte 0x1