Warning: Permanently added '[localhost]:51983' (ED25519) to the list of known hosts. executing program executing program executing program executing program [ 63.702373][ T5099] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 63.707233][ T5099] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 63.710998][ T5099] CPU: 0 UID: 0 PID: 5099 Comm: syz-executor178 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 63.714743][ T5099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.718743][ T5099] RIP: 0010:iter_file_splice_write+0xe07/0x1510 [ 63.721192][ T5099] Code: 00 00 fc ff df 41 80 3c 06 00 49 89 c6 74 08 4c 89 e7 e8 dc 65 de ff 49 c7 04 24 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 ca 64 de ff 48 8b 44 24 20 48 8b [ 63.727655][ T5099] RSP: 0018:ffffc9000b19f760 EFLAGS: 00010202 [ 63.729670][ T5099] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000000 [ 63.732369][ T5099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 63.735390][ T5099] RBP: ffffc9000b19fa10 R08: ffffffff822037f4 R09: 1ffffd4000240a46 [ 63.738386][ T5099] R10: dffffc0000000000 R11: fffff94000240a47 R12: ffff88804096a810 [ 63.741404][ T5099] R13: 0000000000000000 R14: dffffc0000000000 R15: 7ffffffffffeffff [ 63.744422][ T5099] FS: 0000555585b92380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 63.747794][ T5099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.750341][ T5099] CR2: 00007efe39842e00 CR3: 000000003f8ee000 CR4: 0000000000352ef0 [ 63.753334][ T5099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.756335][ T5099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.759422][ T5099] Call Trace: [ 63.760757][ T5099] <TASK> [ 63.761918][ T5099] ? __die_body+0x5f/0xb0 [ 63.763536][ T5099] ? die_addr+0xb0/0xe0 [ 63.765154][ T5099] ? exc_general_protection+0x3dd/0x5d0 [ 63.767313][ T5099] ? asm_exc_general_protection+0x26/0x30 [ 63.769451][ T5099] ? iter_file_splice_write+0xd84/0x1510 [ 63.771657][ T5099] ? iter_file_splice_write+0xe07/0x1510 [ 63.773755][ T5099] ? __pfx_iter_file_splice_write+0x10/0x10 [ 63.775954][ T5099] ? rcu_read_lock_any_held+0xb7/0x160 [ 63.778055][ T5099] ? __pfx_iter_file_splice_write+0x10/0x10 [ 63.780313][ T5099] direct_splice_actor+0x11b/0x220 [ 63.782379][ T5099] splice_direct_to_actor+0x586/0xc80 [ 63.784426][ T5099] ? __pfx_direct_splice_actor+0x10/0x10 [ 63.786602][ T5099] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 63.788887][ T5099] do_splice_direct+0x289/0x3e0 [ 63.790835][ T5099] ? __pfx_do_splice_direct+0x10/0x10 [ 63.792886][ T5099] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 63.795151][ T5099] ? rw_verify_area+0x1c3/0x6f0 [ 63.797024][ T5099] do_sendfile+0x561/0xe10 [ 63.798736][ T5099] ? __pfx_do_sendfile+0x10/0x10 [ 63.800590][ T5099] ? do_ftruncate+0x4a5/0x580 [ 63.802334][ T5099] __se_sys_sendfile64+0x17c/0x1e0 [ 63.804277][ T5099] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 63.806408][ T5099] ? do_syscall_64+0x100/0x230 [ 63.808141][ T5099] ? do_syscall_64+0xb6/0x230 [ 63.809868][ T5099] do_syscall_64+0xf3/0x230 [ 63.811658][ T5099] ? clear_bhb_loop+0x35/0x90 [ 63.813462][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.815660][ T5099] RIP: 0033:0x7efe3980fef9 [ 63.817401][ T5099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.824801][ T5099] RSP: 002b:00007ffcaf2ddc18 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 63.827895][ T5099] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007efe3980fef9 [ 63.830924][ T5099] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 63.833939][ T5099] RBP: 00007efe3985904e R08: 0000000000000006 R09: 0000000000000006 [ 63.837002][ T5099] R10: 000000007ffff000 R11: 0000000000000246 R12: 00007ffcaf2ddc2c [ 63.840104][ T5099] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 63.843201][ T5099] </TASK> [ 63.844421][ T5099] Modules linked in: [ 63.846179][ T5099] ---[ end trace 0000000000000000 ]--- [ 63.851537][ T5099] RIP: 0010:iter_file_splice_write+0xe07/0x1510 [ 63.853914][ T5099] Code: 00 00 fc ff df 41 80 3c 06 00 49 89 c6 74 08 4c 89 e7 e8 dc 65 de ff 49 c7 04 24 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 ca 64 de ff 48 8b 44 24 20 48 8b [ 63.861214][ T5099] RSP: 0018:ffffc9000b19f760 EFLAGS: 00010202 [ 63.864327][ T5099] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000000 [ 63.868322][ T5099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 63.871540][ T5099] RBP: ffffc9000b19fa10 R08: ffffffff822037f4 R09: 1ffffd4000240a46 [ 63.874959][ T5099] R10: dffffc0000000000 R11: fffff94000240a47 R12: ffff88804096a810 [ 63.878072][ T5099] R13: 0000000000000000 R14: dffffc0000000000 R15: 7ffffffffffeffff [ 63.881063][ T5099] FS: 0000555585b92380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 63.884794][ T5099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.887393][ T5099] CR2: 00007efe39842e00 CR3: 000000003f8ee000 CR4: 0000000000352ef0 [ 63.890498][ T5099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.893955][ T5099] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.897172][ T5099] Kernel panic - not syncing: Fatal exception [ 63.899782][ T5099] Kernel Offset: disabled [ 63.901476][ T5099] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:39:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=ffffffff9a715e80 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000b19ee90 R8 =ffffffff854a635b R9 =1ffff11006764046 R10=dffffc0000000000 R11=ffffffff854a6310 R12=dffffc0000000000 R13=ffffffff9a410f1d R14=0000000000000030 R15=00000000000003f8 RIP=ffffffff854a638e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555585b92380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efe39842e00 CR3=000000003f8ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000001 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961775f6f692e71 66622e6f696b6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf2ddc20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe3988f320 00007efe398835d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe39874f44 00007efe39888260 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f62612f73252f73 6e6f697463656e6e 6f632f657375662f 73662f7379732f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a47440a56000a56 4b4a4c5146404b4b 4a460a405650430a 56430a565c560a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000