------------[ cut here ]------------
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
WARNING: CPU: 1 PID: 16953 at drivers/scsi/scsi_lib.c:1032 scsi_alloc_sgtables+0x9af/0xbb0 drivers/scsi/scsi_lib.c:1032
fail_dump lib/fault-inject.c:52 [inline]
should_fail.cold+0x5/0xa lib/fault-inject.c:146
Modules linked in:
should_failslab+0x5/0x10 mm/slab_common.c:1304
slab_pre_alloc_hook mm/slab.h:716 [inline]
slab_alloc_node mm/slub.c:3144 [inline]
slab_alloc mm/slub.c:3238 [inline]
kmem_cache_alloc+0x5b/0x480 mm/slub.c:3243
getname_flags.part.0+0x50/0x4f0 fs/namei.c:138
getname_flags include/linux/audit.h:323 [inline]
getname+0x8e/0xd0 fs/namei.c:217
do_sys_openat2+0xf5/0x4d0 fs/open.c:1208
CPU: 1 PID: 16953 Comm: syz-executor.0 Not tainted 5.16.0-rc6-next-20211224 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
do_sys_open fs/open.c:1230 [inline]
__do_sys_openat fs/open.c:1246 [inline]
__se_sys_openat fs/open.c:1241 [inline]
__x64_sys_openat+0x13f/0x1f0 fs/open.c:1241
RIP: 0010:scsi_alloc_sgtables+0x9af/0xbb0 drivers/scsi/scsi_lib.c:1032
Code: 48 c1 e8 03 80 3c 10 00 0f 85 54 01 00 00 48 c7 c0 00 00 00 80 48 2b 05 7f 41 40 02 48 89 04 24 e9 66 fd ff ff e8 c1 0b 94 fe <0f> 0b 41 bc 0a 00 00 00 e9 83 fa ff ff 41 bc 09 00 00 00 e9 78 fa
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RSP: 0018:ffff88802abdf590 EFLAGS: 00010216
RIP: 0033:0x7f49600f0a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f495d6b2e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: 0000000000000413 RBX: ffff88800df07100 RCX: ffffc90009a14000
RAX: ffffffffffffffda RBX: 00007f4960187970 RCX: 00007f49600f0a04
RDX: 0000000000000002 RSI: 00007f495d6b2f40 RDI: 00000000ffffff9c
RBP: 00007f495d6b2f40 R08: 0000000000000000 R09: 0000000000000000
RDX: 0000000000040000 RSI: ffffffff82af132f RDI: 0000000000000003
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000
R13: 0000000000000004 R14: 0000000020001c58 R15: 0000000000000001
R10: ffffffff82af12c2 R11: 0000000000000000 R12: ffff88800df0701c
R13: ffff888009aac000 R14: ffff88800df07000 R15: 0000000000000001
FS: 00007f0ed7e41700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2de22000 CR3: 00000000178b0000 CR4: 0000000000350ee0
Call Trace:
scsi_setup_scsi_cmnd drivers/scsi/scsi_lib.c:1219 [inline]
scsi_prepare_cmd drivers/scsi/scsi_lib.c:1614 [inline]
scsi_queue_rq+0x251f/0x3140 drivers/scsi/scsi_lib.c:1730
loop7: detected capacity change from 0 to 1
blk_mq_dispatch_rq_list+0x6c2/0x2170 block/blk-mq.c:1851
__blk_mq_sched_dispatch_requests+0x20b/0x410 block/blk-mq-sched.c:299
blk_mq_sched_dispatch_requests+0xfb/0x180 block/blk-mq-sched.c:332
__blk_mq_run_hw_queue+0xf9/0x350 block/blk-mq.c:1968
__blk_mq_delay_run_hw_queue+0x584/0x660 block/blk-mq.c:2045
blk_mq_run_hw_queue+0x30f/0x480 block/blk-mq.c:2096
blk_mq_sched_insert_request+0x2e5/0x3e0 block/blk-mq-sched.c:451
blk_execute_rq+0xcc/0x340 block/blk-mq.c:1231
sg_io+0x67c/0x1210 drivers/scsi/scsi_ioctl.c:485
scsi_ioctl_sg_io drivers/scsi/scsi_ioctl.c:866 [inline]
scsi_ioctl+0x52b/0x1580 drivers/scsi/scsi_ioctl.c:921
sr_block_ioctl+0x1cb/0x210 drivers/scsi/sr.c:586
blkdev_ioctl+0x362/0x7f0 block/ioctl.c:588
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:874 [inline]
__se_sys_ioctl fs/ioctl.c:860 [inline]
__x64_sys_ioctl+0x196/0x210 fs/ioctl.c:860
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f0eda8cbb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f0ed7e41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f0eda9def60 RCX: 00007f0eda8cbb19
RDX: 0000000020000340 RSI: 0000000000002285 RDI: 0000000000000003
RBP: 00007f0eda925f6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
R13: 00007ffc3bfe7b4f R14: 00007f0ed7e41300 R15: 0000000000022000
CPU: 0 PID: 16964 Comm: syz-executor.2 Not tainted 5.16.0-rc6-next-20211224 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
irq event stamp: 1087
fail_dump lib/fault-inject.c:52 [inline]
should_fail.cold+0x5/0xa lib/fault-inject.c:146
hardirqs last enabled at (1099): [] asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
should_failslab+0x5/0x10 mm/slab_common.c:1304
hardirqs last disabled at (1108): [] sysvec_apic_timer_interrupt+0xb/0xc0 arch/x86/kernel/apic/apic.c:1097
slab_pre_alloc_hook mm/slab.h:716 [inline]
slab_alloc_node mm/slub.c:3144 [inline]
slab_alloc mm/slub.c:3238 [inline]
kmem_cache_alloc+0x5b/0x480 mm/slub.c:3243
softirqs last enabled at (0): [] copy_process+0x19ef/0x6e20 kernel/fork.c:2120
mem_pool_alloc mm/kmemleak.c:430 [inline]
create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:586
softirqs last disabled at (0): [<0000000000000000>] 0x0
kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
slab_post_alloc_hook mm/slab.h:744 [inline]
slab_alloc_node mm/slub.c:3230 [inline]
slab_alloc mm/slub.c:3238 [inline]
kmem_cache_alloc+0x239/0x480 mm/slub.c:3243
---[ end trace 0000000000000000 ]---
getname_flags.part.0+0x50/0x4f0 fs/namei.c:138
loop3: detected capacity change from 0 to 1
getname_flags include/linux/audit.h:323 [inline]
getname+0x8e/0xd0 fs/namei.c:217
do_sys_openat2+0xf5/0x4d0 fs/open.c:1208
do_sys_open fs/open.c:1230 [inline]
__do_sys_openat fs/open.c:1246 [inline]
__se_sys_openat fs/open.c:1241 [inline]
__x64_sys_openat+0x13f/0x1f0 fs/open.c:1241
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f49600f0a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f495d691e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f4960187970 RCX: 00007f49600f0a04
RDX: 0000000000000002 RSI: 00007f495d691f40 RDI: 00000000ffffff9c
RBP: 00007f495d691f40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000004 R14: 0000000020001c58 R15: 0000000000000001
loop6: detected capacity change from 0 to 1
loop2: detected capacity change from 0 to 1
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 16973 Comm: syz-executor.3 Tainted: G W 5.16.0-rc6-next-20211224 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
fail_dump lib/fault-inject.c:52 [inline]
should_fail.cold+0x5/0xa lib/fault-inject.c:146
should_failslab+0x5/0x10 mm/slab_common.c:1304
slab_pre_alloc_hook mm/slab.h:716 [inline]
slab_alloc_node mm/slub.c:3144 [inline]
slab_alloc mm/slub.c:3238 [inline]
kmem_cache_alloc+0x5b/0x480 mm/slub.c:3243
kmem_cache_zalloc include/linux/slab.h:705 [inline]
lsm_file_alloc security/security.c:572 [inline]
security_file_alloc+0x34/0x170 security/security.c:1508
__alloc_file+0xb6/0x240 fs/file_table.c:137
alloc_empty_file+0x6d/0x170 fs/file_table.c:181
alloc_file+0x59/0x590 fs/file_table.c:223
alloc_file_pseudo+0x16a/0x250 fs/file_table.c:263
__shmem_file_setup mm/shmem.c:4078 [inline]
__shmem_file_setup+0x144/0x310 mm/shmem.c:4052
__do_sys_memfd_create+0x1c6/0x4f0 mm/memfd.c:305
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7faf3b68cb19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007faf38c01e98 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
RAX: ffffffffffffffda RBX: 0000000020001c40 RCX: 00007faf3b68cb19
RDX: 000000000000000e RSI: 0000000000000000 RDI: 00007faf3b6e60fb
RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000
R13: 00007ffc83cadfaf R14: 000000000000000e R15: 0000000000022000
CPU: 0 PID: 16975 Comm: syz-executor.2 Tainted: G W 5.16.0-rc6-next-20211224 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
fail_dump lib/fault-inject.c:52 [inline]
should_fail.cold+0x5/0xa lib/fault-inject.c:146
strncpy_from_user+0x34/0x3e0 lib/strncpy_from_user.c:118
getname_flags.part.0+0x95/0x4f0 fs/namei.c:149
getname_flags include/linux/audit.h:323 [inline]
getname+0x8e/0xd0 fs/namei.c:217
do_sys_openat2+0xf5/0x4d0 fs/open.c:1208
do_sys_open fs/open.c:1230 [inline]
__do_sys_openat fs/open.c:1246 [inline]
__se_sys_openat fs/open.c:1241 [inline]
__x64_sys_openat+0x13f/0x1f0 fs/open.c:1241
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f49600f0a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f495d6b2e20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f4960187970 RCX: 00007f49600f0a04
RDX: 0000000000000002 RSI: 00007f495d6b2f40 RDI: 00000000ffffff9c
RBP: 00007f495d6b2f40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000004 R14: 0000000020001c58 R15: 0000000000000001
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 16977 Comm: syz-executor.4 Tainted: G W 5.16.0-rc6-next-20211224 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
fail_dump lib/fault-inject.c:52 [inline]
should_fail.cold+0x5/0xa lib/fault-inject.c:146
should_failslab+0x5/0x10 mm/slab_common.c:1304
slab_pre_alloc_hook mm/slab.h:716 [inline]
slab_alloc_node mm/slub.c:3144 [inline]
slab_alloc mm/slub.c:3238 [inline]
kmem_cache_alloc+0x5b/0x480 mm/slub.c:3243
mem_pool_alloc mm/kmemleak.c:430 [inline]
create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:586
kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
slab_post_alloc_hook mm/slab.h:744 [inline]
slab_alloc_node mm/slub.c:3230 [inline]
slab_alloc mm/slub.c:3238 [inline]
__kmalloc+0x25b/0x440 mm/slub.c:4420
kmalloc include/linux/slab.h:586 [inline]
kzalloc include/linux/slab.h:715 [inline]
apply_wqattrs_prepare+0xab/0x880 kernel/workqueue.c:3974
apply_workqueue_attrs_locked+0xc1/0x140 kernel/workqueue.c:4086
apply_workqueue_attrs kernel/workqueue.c:4123 [inline]
alloc_and_link_pwqs kernel/workqueue.c:4247 [inline]
alloc_workqueue+0xb1a/0xeb0 kernel/workqueue.c:4355
loop_configure+0x6ec/0x1950 drivers/block/loop.c:1009
lo_ioctl+0x7c5/0x18b0 drivers/block/loop.c:1545
blkdev_ioctl+0x362/0x7f0 block/ioctl.c:588
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:874 [inline]
__se_sys_ioctl fs/ioctl.c:860 [inline]
__x64_sys_ioctl+0x196/0x210 fs/ioctl.c:860
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fab292f88d7
Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fab2686de98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fab29342970 RCX: 00007fab292f88d7
RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
R13: 0000000000000004 R14: 0000000020001c58 R15: 0000000000000001
loop4: detected capacity change from 0 to 1
----------------
Code disassembly (best guess):
0: 84 00 test %al,(%rax)
2: 00 00 add %al,(%rax)
4: 00 00 add %al,(%rax)
6: 44 89 54 24 0c mov %r10d,0xc(%rsp)
b: e8 96 f9 ff ff callq 0xfffff9a6
10: 44 8b 54 24 0c mov 0xc(%rsp),%r10d
15: 44 89 e2 mov %r12d,%edx
18: 48 89 ee mov %rbp,%rsi
1b: 41 89 c0 mov %eax,%r8d
1e: bf 9c ff ff ff mov $0xffffff9c,%edi
23: b8 01 01 00 00 mov $0x101,%eax
28: 0f 05 syscall
* 2a: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction
30: 77 34 ja 0x66
32: 44 89 c7 mov %r8d,%edi
35: 89 44 24 0c mov %eax,0xc(%rsp)
39: e8 c8 f9 ff ff callq 0xfffffa06
3e: 8b .byte 0x8b
3f: 44 rex.R