================================================================== BUG: KASAN: global-out-of-bounds in dev_name include/linux/device.h:932 [inline] BUG: KASAN: global-out-of-bounds in __dev_printk+0x43/0x100 drivers/base/core.c:5019 Read of size 8 at addr ffffffff8c3db590 by task kworker/3:5/5851 CPU: 3 UID: 0 PID: 5851 Comm: kworker/3:5 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: events request_firmware_work_func Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x13d/0x4b0 mm/kasan/report.c:482 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595 dev_name include/linux/device.h:932 [inline] __dev_printk+0x43/0x100 drivers/base/core.c:5019 _dev_err+0xef/0x127 drivers/base/core.c:5062 uea_upload_pre_firmware.cold+0x80/0xfa drivers/usb/atm/ueagle-atm.c:606 request_firmware_work_func+0x13f/0x440 drivers/base/firmware_loader/main.c:1164 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322 process_scheduled_works kernel/workqueue.c:3405 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 The buggy address belongs to the variable: io_uring_pp_zc_ops+0x590/0x1be0 The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xc3db flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000002000 ffffea000030f6c8 ffffea000030f6c8 0000000000000000 raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner info is not present (never set?) Memory state around the buggy address: ffffffff8c3db480: 00 06 f9 f9 f9 f9 f9 f9 00 03 f9 f9 f9 f9 f9 f9 ffffffff8c3db500: 00 01 f9 f9 f9 f9 f9 f9 00 00 04 f9 f9 f9 f9 f9 >ffffffff8c3db580: 00 04 f9 f9 f9 f9 f9 f9 00 00 00 00 06 f9 f9 f9 ^ ffffffff8c3db600: f9 f9 f9 f9 00 00 00 00 02 f9 f9 f9 f9 f9 f9 f9 ffffffff8c3db680: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 ==================================================================