R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' ================================================ kobject: 'loop5' (00000000b669d385): kobject_uevent_env WARNING: lock held when returning to user space! 5.0.0-rc1+ #17 Not tainted ------------------------------------------------ syz-executor0/12557 is leaving the kernel with locks still held! 1 lock held by syz-executor0/12557: #0: 000000008c7984bd (crtc_ww_class_acquire){+.+.}, at: set_property_atomic+0xb4/0x330 drivers/gpu/drm/drm_mode_object.c:462 kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' CPU: 1 PID: 12571 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #17 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0x15 lib/fault-inject.c:149 __should_failslab+0x121/0x190 mm/failslab.c:32 should_failslab+0x9/0x14 mm/slab_common.c:1603 slab_pre_alloc_hook mm/slab.h:423 [inline] slab_alloc mm/slab.c:3367 [inline] __do_kmalloc mm/slab.c:3709 [inline] __kmalloc+0x2dc/0x740 mm/slab.c:3720 kmalloc_array include/linux/slab.h:668 [inline] kcalloc include/linux/slab.h:679 [inline] drm_atomic_state_init+0x176/0x3c0 drivers/gpu/drm/drm_atomic.c:86 drm_atomic_state_alloc drivers/gpu/drm/drm_atomic.c:123 [inline] drm_atomic_state_alloc+0xcf/0x120 drivers/gpu/drm/drm_atomic.c:113 set_property_atomic+0xbc/0x330 drivers/gpu/drm/drm_mode_object.c:464 drm_mode_obj_set_property_ioctl+0x43f/0x780 drivers/gpu/drm/drm_mode_object.c:522 drm_connector_property_set_ioctl+0x1b5/0x2c0 drivers/gpu/drm/drm_connector.c:1841 drm_ioctl_kernel+0x278/0x340 drivers/gpu/drm/drm_ioctl.c:758 drm_ioctl+0x592/0xb50 drivers/gpu/drm/drm_ioctl.c:858 drm_compat_ioctl+0x241/0x310 drivers/gpu/drm/drm_ioc32.c:966 cgroup: fork rejected by pids controller in /syz1 __do_compat_sys_ioctl fs/compat_ioctl.c:1052 [inline] __se_compat_sys_ioctl fs/compat_ioctl.c:998 [inline] __ia32_compat_sys_ioctl+0x197/0x620 fs/compat_ioctl.c:998 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 kobject: 'loop5' (00000000b669d385): kobject_uevent_env RIP: 0023:0xf7f66869 Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5f620cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004010aeab RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 12636 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #17 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0x15 lib/fault-inject.c:149 kobject: 'loop3' (00000000908879e6): kobject_uevent_env __should_failslab+0x121/0x190 mm/failslab.c:32 should_failslab+0x9/0x14 mm/slab_common.c:1603 slab_pre_alloc_hook mm/slab.h:423 [inline] slab_alloc mm/slab.c:3367 [inline] __do_kmalloc mm/slab.c:3709 [inline] __kmalloc+0x2dc/0x740 mm/slab.c:3720 kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kmalloc_array include/linux/slab.h:668 [inline] kcalloc include/linux/slab.h:679 [inline] drm_atomic_state_init+0x212/0x3c0 drivers/gpu/drm/drm_atomic.c:90 kobject: 'loop5' (00000000b669d385): kobject_uevent_env drm_atomic_state_alloc drivers/gpu/drm/drm_atomic.c:123 [inline] drm_atomic_state_alloc+0xcf/0x120 drivers/gpu/drm/drm_atomic.c:113 set_property_atomic+0xbc/0x330 drivers/gpu/drm/drm_mode_object.c:464 drm_mode_obj_set_property_ioctl+0x43f/0x780 drivers/gpu/drm/drm_mode_object.c:522 kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' drm_connector_property_set_ioctl+0x1b5/0x2c0 drivers/gpu/drm/drm_connector.c:1841 kobject: 'loop5' (00000000b669d385): kobject_uevent_env drm_ioctl_kernel+0x278/0x340 drivers/gpu/drm/drm_ioctl.c:758 drm_ioctl+0x592/0xb50 drivers/gpu/drm/drm_ioctl.c:858 kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' drm_compat_ioctl+0x241/0x310 drivers/gpu/drm/drm_ioc32.c:966 __do_compat_sys_ioctl fs/compat_ioctl.c:1052 [inline] __se_compat_sys_ioctl fs/compat_ioctl.c:998 [inline] __ia32_compat_sys_ioctl+0x197/0x620 fs/compat_ioctl.c:998 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f66869 Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5f620cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004010aeab RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 kobject: 'loop5' (00000000b669d385): kobject_uevent_env RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 kobject: 'loop5' (00000000b669d385): kobject_uevent_env CPU: 1 PID: 13152 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 dump_header+0x1e6/0x116c mm/oom_kill.c:451 kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' oom_kill_process.cold+0x10/0x9d4 mm/oom_kill.c:966 out_of_memory+0x885/0x1420 mm/oom_kill.c:1133 mem_cgroup_out_of_memory+0x160/0x210 mm/memcontrol.c:1393 kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' mem_cgroup_oom mm/memcontrol.c:1721 [inline] try_charge+0x12a9/0x19b0 mm/memcontrol.c:2283 kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' mem_cgroup_try_charge+0x43a/0xdb0 mm/memcontrol.c:5913 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:5928 shmem_getpage_gfp+0xa85/0x4b70 mm/shmem.c:1790 kobject: 'loop1' (0000000031e7016b): kobject_uevent_env kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' shmem_getpage mm/shmem.c:134 [inline] shmem_write_begin+0x105/0x1e0 mm/shmem.c:2385 generic_perform_write+0x2a0/0x6b0 mm/filemap.c:3208 __generic_file_write_iter+0x25e/0x630 mm/filemap.c:3333 kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env generic_file_write_iter+0x34e/0x6a0 mm/filemap.c:3361 kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' call_write_iter include/linux/fs.h:1862 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x764/0xb40 fs/read_write.c:487 kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' vfs_write+0x20c/0x580 fs/read_write.c:549 ksys_write+0x105/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __ia32_sys_write+0x71/0xb0 fs/read_write.c:607 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f6b869 Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5f670cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 RDX: 00000000ffffff1b RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 memory: usage 307200kB, limit 307200kB, failcnt 349 kobject: 'loop3' (00000000908879e6): kobject_uevent_env memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' Memory cgroup stats for /syz4: cache:260032KB rss:38844KB rss_huge:36864KB shmem:259904KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:260068KB active_anon:38812KB inactive_file:48KB active_file:20KB unevictable:0KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=12353,uid=0 Memory cgroup out of memory: Kill process 12353 (syz-executor4) score 1112 or sacrifice child Killed process 12353 (syz-executor4) total-vm:70260kB, anon-rss:4236kB, file-rss:33460kB, shmem-rss:0kB oom_reaper: reaped process 12353 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 CPU: 1 PID: 13152 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 dump_header+0x1e6/0x116c mm/oom_kill.c:451 oom_kill_process.cold+0x10/0x9d4 mm/oom_kill.c:966 out_of_memory+0x885/0x1420 mm/oom_kill.c:1133 mem_cgroup_out_of_memory+0x160/0x210 mm/memcontrol.c:1393 mem_cgroup_oom mm/memcontrol.c:1721 [inline] try_charge+0x12a9/0x19b0 mm/memcontrol.c:2283 mem_cgroup_try_charge+0x43a/0xdb0 mm/memcontrol.c:5913 mem_cgroup_try_charge_delay+0x1f/0xa0 mm/memcontrol.c:5928 shmem_getpage_gfp+0xa85/0x4b70 mm/shmem.c:1790 shmem_getpage mm/shmem.c:134 [inline] shmem_write_begin+0x105/0x1e0 mm/shmem.c:2385 generic_perform_write+0x2a0/0x6b0 mm/filemap.c:3208 __generic_file_write_iter+0x25e/0x630 mm/filemap.c:3333 generic_file_write_iter+0x34e/0x6a0 mm/filemap.c:3361 call_write_iter include/linux/fs.h:1862 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x764/0xb40 fs/read_write.c:487 vfs_write+0x20c/0x580 fs/read_write.c:549 ksys_write+0x105/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __ia32_sys_write+0x71/0xb0 fs/read_write.c:607 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x333/0xf98 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f6b869 Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f5f670cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 RDX: 00000000ffffff1b RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 memory: usage 307096kB, limit 307200kB, failcnt 432 memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 Memory cgroup stats for /syz4: cache:259960KB rss:34660KB rss_huge:32768KB shmem:259832KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:259804KB active_anon:34600KB inactive_file:64KB active_file:4KB unevictable:0KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=13008,uid=0 Memory cgroup out of memory: Kill process 13008 (syz-executor4) score 1106 or sacrifice child Killed process 13008 (syz-executor4) total-vm:70328kB, anon-rss:2188kB, file-rss:33464kB, shmem-rss:0kB oom_reaper: reaped process 13008 (syz-executor4), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB syz-executor4 (13152) used greatest stack depth: 17744 bytes left kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000908879e6): kobject_uevent_env kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (00000000b669d385): kobject_uevent_env kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (000000007201ae1e): kobject_uevent_env kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4'