FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 ------------[ cut here ]------------ CPU: 0 PID: 15276 Comm: syz-executor.0 Not tainted 5.10.249 #1 WARNING: CPU: 1 PID: 15266 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 arch/x86/mm/pat/memtype.c:1019 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 Modules linked in: copyin lib/iov_iter.c:155 [inline] copy_page_from_iter_iovec lib/iov_iter.c:303 [inline] copy_page_from_iter+0x40a/0x900 lib/iov_iter.c:940 tun_build_skb+0x2d9/0xfc0 drivers/net/tun.c:1692 CPU: 1 PID: 15266 Comm: syz-executor.5 Not tainted 5.10.249 #1 tun_get_user+0x6c1/0x3310 drivers/net/tun.c:1832 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:get_pat_info+0x216/0x270 arch/x86/mm/pat/memtype.c:1019 tun_chr_write_iter+0xe1/0x1e0 drivers/net/tun.c:2059 Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 81 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 6a 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 55 a8 5a 00 e9 call_write_iter include/linux/fs.h:2039 [inline] new_sync_write+0x42c/0x660 fs/read_write.c:518 RSP: 0018:ffff88804b3bf890 EFLAGS: 00010212 vfs_write+0x7c0/0xb10 fs/read_write.c:605 ksys_write+0x12d/0x260 fs/read_write.c:658 RAX: 00000000000139a2 RBX: ffff888017f44d00 RCX: ffffc9000962e000 RDX: 0000000000040000 RSI: ffffffff81125466 RDI: 0000000000000007 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 RBP: ffff88804b3bf948 R08: 0000000000000000 R09: ffff88804b3bf818 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f1793cfb5ff R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 RSP: 002b:00007f17912be150 EFLAGS: 00000293 R13: 1ffff11009677f12 R14: 0000000000000000 R15: ffff888017f44d50 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f1793e5bf60 RCX: 00007f1793cfb5ff RDX: 000000000000002e RSI: 0000000020000080 RDI: 00000000000000f0 FS: 00007f7c26e23700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 RBP: 00007f17912be1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007fff13edfdef R14: 00007f17912be300 R15: 0000000000022000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) CR2: 00007f99579b0fe8 CR3: 000000003ff88000 CR4: 0000000000350ee0 Call Trace: untrack_pfn+0xdc/0x240 arch/x86/mm/pat/memtype.c:1121 unmap_single_vma+0x1bc/0x300 mm/memory.c:1499 zap_page_range_single+0x2ce/0x450 mm/memory.c:1603 remap_pfn_range_notrack mm/memory.c:2363 [inline] remap_pfn_range+0x139/0x160 mm/memory.c:2388 io_uring_mmap+0x398/0x530 io_uring/io_uring.c:9805 call_mmap include/linux/fs.h:2044 [inline] mmap_file+0x5e/0xe0 mm/util.c:1080 __mmap_region mm/mmap.c:1817 [inline] mmap_region+0xc4d/0x1500 mm/mmap.c:2957 do_mmap+0x868/0x1370 mm/mmap.c:1594 vm_mmap_pgoff+0x198/0x1f0 mm/util.c:539 ksys_mmap_pgoff+0x41c/0x560 mm/mmap.c:1645 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f7c298adb62 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 RSP: 002b:00007f7c26e230f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f7c298adb62 RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffb000 RBP: 0000000020ffb000 R08: 0000000000000004 R09: 0000000000000000 R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 R13: 0000000020ffc000 R14: 0000000020000100 R15: 0000000020ffb000 irq event stamp: 1293 hardirqs last enabled at (1303): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2567 hardirqs last disabled at (1312): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2482 softirqs last enabled at (822): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (741): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace 511052c8bfa40e2b ]--- FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 15284 Comm: syz-executor.0 Tainted: G W 5.10.249 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x167 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 should_failslab+0x5/0x20 mm/slab_common.c:1200 slab_pre_alloc_hook mm/slab.h:512 [inline] slab_alloc_node mm/slub.c:2826 [inline] slab_alloc mm/slub.c:2909 [inline] kmem_cache_alloc+0x5b/0x310 mm/slub.c:2914 __build_skb+0x21/0x60 net/core/skbuff.c:318 build_skb+0x1a/0x220 net/core/skbuff.c:334 __tun_build_skb+0x2c/0x260 drivers/net/tun.c:1619 tun_build_skb+0x67a/0xfc0 drivers/net/tun.c:1747 tun_get_user+0x6c1/0x3310 drivers/net/tun.c:1832 tun_chr_write_iter+0xe1/0x1e0 drivers/net/tun.c:2059 call_write_iter include/linux/fs.h:2039 [inline] new_sync_write+0x42c/0x660 fs/read_write.c:518 vfs_write+0x7c0/0xb10 fs/read_write.c:605 ksys_write+0x12d/0x260 fs/read_write.c:658 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7f1793cfb5ff Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 RSP: 002b:00007f17912be150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f1793e5bf60 RCX: 00007f1793cfb5ff RDX: 000000000000002e RSI: 0000000020000080 RDI: 00000000000000f0 RBP: 00007f17912be1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 R13: 00007fff13edfdef R14: 00007f17912be300 R15: 0000000000022000 netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. ---------------- Code disassembly (best guess): 0: 89 54 24 18 mov %edx,0x18(%rsp) 4: 48 89 74 24 10 mov %rsi,0x10(%rsp) 9: 89 7c 24 08 mov %edi,0x8(%rsp) d: e8 99 fd ff ff callq 0xfffffdab 12: 48 8b 54 24 18 mov 0x18(%rsp),%rdx 17: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 1c: 41 89 c0 mov %eax,%r8d 1f: 8b 7c 24 08 mov 0x8(%rsp),%edi 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall * 2a: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 31 ja 0x63 32: 44 89 c7 mov %r8d,%edi 35: 48 89 44 24 08 mov %rax,0x8(%rsp) 3a: e8 cc fd ff ff callq 0xfffffe0b 3f: 48 rex.W