================================ WARNING: inconsistent lock state 4.15.0-rc9+ #283 Not tainted -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. syz-fuzzer/3676 [HC0[0]:SC1[1]:HE1:SE0] takes: (&(&est->lock)->rlock){+.?.}, at: [<00000000e39c3460>] spin_lock include/linux/spinlock.h:310 [inline] (&(&est->lock)->rlock){+.?.}, at: [<00000000e39c3460>] est_fetch_counters+0x4f/0x150 net/core/gen_estimator.c:70 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:3914 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:310 [inline] est_fetch_counters+0x4f/0x150 net/core/gen_estimator.c:70 gen_new_estimator+0x317/0x770 net/core/gen_estimator.c:162 xt_rateest_tg_checkentry+0x487/0xaa0 net/netfilter/xt_RATEEST.c:135 xt_check_target+0x22c/0x7d0 net/netfilter/x_tables.c:845 check_target net/ipv6/netfilter/ip6_tables.c:538 [inline] find_check_entry.isra.7+0x935/0xcf0 net/ipv6/netfilter/ip6_tables.c:580 translate_table+0xf52/0x1690 net/ipv6/netfilter/ip6_tables.c:749 do_replace net/ipv6/netfilter/ip6_tables.c:1167 [inline] do_ip6t_set_ctl+0x370/0x5f0 net/ipv6/netfilter/ip6_tables.c:1693 nf_sockopt net/netfilter/nf_sockopt.c:106 [inline] nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115 ipv6_setsockopt+0x115/0x150 net/ipv6/ipv6_sockglue.c:928 udpv6_setsockopt+0x45/0x80 net/ipv6/udp.c:1452 sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2968 SYSC_setsockopt net/socket.c:1831 [inline] SyS_setsockopt+0x189/0x360 net/socket.c:1810 entry_SYSCALL_64_fastpath+0x29/0xa0 irq event stamp: 237202 hardirqs last enabled at (237202): [<000000001bee2042>] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (237202): [<000000001bee2042>] _raw_spin_unlock_irq+0x27/0x70 kernel/locking/spinlock.c:192 hardirqs last disabled at (237201): [<00000000148aac81>] __raw_spin_lock_irq include/linux/spinlock_api_smp.h:126 [inline] hardirqs last disabled at (237201): [<00000000148aac81>] _raw_spin_lock_irq+0x3c/0x80 kernel/locking/spinlock.c:160 softirqs last enabled at (236848): [<00000000fb62da71>] __do_softirq+0x7a0/0xb85 kernel/softirq.c:311 softirqs last disabled at (237199): [<0000000038c38b55>] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (237199): [<0000000038c38b55>] irq_exit+0x1cc/0x200 kernel/softirq.c:405 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&(&est->lock)->rlock); lock(&(&est->lock)->rlock); *** DEADLOCK *** 1 lock held by syz-fuzzer/3676: #0: ((&est->timer)){+.-.}, at: [<0000000072b790b6>] lockdep_copy_map include/linux/lockdep.h:178 [inline] #0: ((&est->timer)){+.-.}, at: [<0000000072b790b6>] call_timer_fn+0x1c6/0x820 kernel/time/timer.c:1308 stack backtrace: CPU: 1 PID: 3676 Comm: syz-fuzzer Not tainted 4.15.0-rc9+ #283 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 print_usage_bug+0x377/0x38c kernel/locking/lockdep.c:2537 valid_state kernel/locking/lockdep.c:2550 [inline] mark_lock_irq kernel/locking/lockdep.c:2744 [inline] mark_lock+0xf61/0x1430 kernel/locking/lockdep.c:3142 mark_irqflags kernel/locking/lockdep.c:3020 [inline] __lock_acquire+0x173a/0x3e00 kernel/locking/lockdep.c:3383 lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:3914 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:310 [inline] est_fetch_counters+0x4f/0x150 net/core/gen_estimator.c:70 est_timer+0x97/0x7c0 net/core/gen_estimator.c:85 call_timer_fn+0x228/0x820 kernel/time/timer.c:1318 expire_timers kernel/time/timer.c:1355 [inline] __run_timers+0x7ee/0xb70 kernel/time/timer.c:1658 run_timer_softirq+0x4c/0x70 kernel/time/timer.c:1684 __do_softirq+0x2d7/0xb85 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x1cc/0x200 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:541 [inline] smp_apic_timer_interrupt+0x16b/0x700 arch/x86/kernel/apic/apic.c:1052 apic_timer_interrupt+0xa9/0xb0 arch/x86/entry/entry_64.S:937 RIP: 0010:kasan_check_write+0xf/0x20 mm/kasan/kasan.c:278 RSP: 0018:ffff8801bc74fce0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff11 RAX: ffff8801bc7605c0 RBX: 000000c420035f18 RCX: ffffffff825ab787 RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff8801bc74fd48 RBP: ffff8801bc74fce0 R08: 0000000000000000 R09: 1ffff100378e9f7a R10: ffff8801bc74fb98 R11: 0000000000000000 R12: 0000000000000010 R13: ffff8801bc74fd48 R14: 00007ffffffff000 R15: 000000c420035f28 _copy_from_user+0xb7/0x110 lib/usercopy.c:12 copy_from_user include/linux/uaccess.h:147 [inline] get_timespec64+0x75/0x170 kernel/time/time.c:849 do_pselect fs/select.c:710 [inline] SYSC_pselect6 fs/select.c:770 [inline] SyS_pselect6+0x180/0x650 fs/select.c:755 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x45d911 RSP: 002b:000000c420035f18 EFLAGS: 00000246 ORIG_RAX: 000000000000010e RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d911 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 000000c420035f28 R08: 000000c420035f18 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000430130 R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 QAT: Invalid ioctl QAT: Invalid ioctl QAT: Invalid ioctl QAT: Invalid ioctl FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 11821 Comm: syz-executor2 Not tainted 4.15.0-rc9+ #283 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3289 [inline] kmem_cache_alloc_node_trace+0x5a/0x750 mm/slab.c:3651 kmalloc_node include/linux/slab.h:537 [inline] kzalloc_node include/linux/slab.h:699 [inline] __get_vm_area_node+0xae/0x340 mm/vmalloc.c:1402 __vmalloc_node_range+0xa3/0x650 mm/vmalloc.c:1754 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vmalloc+0x45/0x50 mm/vmalloc.c:1840 ip_set_sockfn_get+0x2c1/0xc70 net/netfilter/ipset/ip_set_core.c:1920 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x6a/0xc0 net/netfilter/nf_sockopt.c:122 ip_getsockopt+0x15c/0x220 net/ipv4/ip_sockglue.c:1573 udp_getsockopt+0x45/0x80 net/ipv4/udp.c:2480 ipv6_getsockopt+0xf3/0x2e0 net/ipv6/ipv6_sockglue.c:1363 tcp_getsockopt+0x82/0xd0 net/ipv4/tcp.c:3329 sock_common_getsockopt+0x95/0xd0 net/core/sock.c:2927 SYSC_getsockopt net/socket.c:1862 [inline] SyS_getsockopt+0x178/0x340 net/socket.c:1844 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007f6c11fe6c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007f6c11fe6aa0 RCX: 0000000000453299 RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 00007f6c11fe6a90 R08: 0000000020000ffc R09: 0000000000000000 R10: 0000000020001000 R11: 0000000000000212 R12: 00000000004b8096 R13: 00007f6c11fe6bc8 R14: 00000000004b8096 R15: 0000000000000000 syz-executor2: vmalloc: allocation failure: 8 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) syz-executor2 cpuset=/ mems_allowed=0 CPU: 1 PID: 11821 Comm: syz-executor2 Not tainted 4.15.0-rc9+ #283 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 warn_alloc+0x19a/0x2b0 mm/page_alloc.c:3299 __vmalloc_node_range+0x4f0/0x650 mm/vmalloc.c:1775 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vmalloc+0x45/0x50 mm/vmalloc.c:1840 ip_set_sockfn_get+0x2c1/0xc70 net/netfilter/ipset/ip_set_core.c:1920 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x6a/0xc0 net/netfilter/nf_sockopt.c:122 ip_getsockopt+0x15c/0x220 net/ipv4/ip_sockglue.c:1573 udp_getsockopt+0x45/0x80 net/ipv4/udp.c:2480 ipv6_getsockopt+0xf3/0x2e0 net/ipv6/ipv6_sockglue.c:1363 tcp_getsockopt+0x82/0xd0 net/ipv4/tcp.c:3329 sock_common_getsockopt+0x95/0xd0 net/core/sock.c:2927 SYSC_getsockopt net/socket.c:1862 [inline] SyS_getsockopt+0x178/0x340 net/socket.c:1844 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007f6c11fe6c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007f6c11fe6aa0 RCX: 0000000000453299 RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 00007f6c11fe6a90 R08: 0000000020000ffc R09: 0000000000000000 R10: 0000000020001000 R11: 0000000000000212 R12: 00000000004b8096 R13: 00007f6c11fe6bc8 R14: 00000000004b8096 R15: 0000000000000000 Mem-Info: active_anon:63979 inactive_anon:58 isolated_anon:0 active_file:3589 inactive_file:8344 isolated_file:0 unevictable:0 dirty:43 writeback:0 unstable:0 slab_reclaimable:9783 slab_unreclaimable:84674 mapped:24094 shmem:65 pagetables:758 bounce:0 free:1429082 free_pcp:338 free_cma:0 Node 0 active_anon:255916kB inactive_anon:232kB active_file:14356kB inactive_file:33376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96376kB dirty:172kB writeback:0kB shmem:260kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2868 6378 6378 Node 0 DMA32 free:2939228kB min:30320kB low:37900kB high:45480kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2940052kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:824kB local_pcp:132kB free_cma:0kB lowmem_reserve[]: 0 0 3510 3510 Node 0 Normal free:2761192kB min:37096kB low:46368kB high:55640kB active_anon:255916kB inactive_anon:232kB active_file:14356kB inactive_file:33376kB unevictable:0kB writepending:172kB present:4718592kB managed:3594340kB mlocked:0kB kernel_stack:4224kB pagetables:3032kB bounce:0kB free_pcp:528kB local_pcp:316kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 DMA32: 5*4kB (UM) 5*8kB (UM) 4*16kB (UM) 3*32kB (UM) 2*64kB (M) 2*128kB (M) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 715*4096kB (M) = 2939228kB Node 0 Normal: 58*4kB (UM) 112*8kB (UME) 33*16kB (UME) 544*32kB (UME) 721*64kB (UME) 214*128kB (UM) 86*256kB (UM) 27*512kB (UME) 13*1024kB (UME) 3*2048kB (U) 638*4096kB (UM) = 2761144kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 11997 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 328404 pages reserved CPU: 1 PID: 11816 Comm: syz-executor1 Not tainted 4.15.0-rc9+ #283 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3289 [inline] kmem_cache_alloc_node_trace+0x5a/0x750 mm/slab.c:3651 kmalloc_node include/linux/slab.h:537 [inline] kzalloc_node include/linux/slab.h:699 [inline] __get_vm_area_node+0xae/0x340 mm/vmalloc.c:1402 __vmalloc_node_range+0xa3/0x650 mm/vmalloc.c:1754 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vmalloc+0x45/0x50 mm/vmalloc.c:1840 ip_set_sockfn_get+0x2c1/0xc70 net/netfilter/ipset/ip_set_core.c:1920 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x6a/0xc0 net/netfilter/nf_sockopt.c:122 ip_getsockopt+0x15c/0x220 net/ipv4/ip_sockglue.c:1573 udp_getsockopt+0x45/0x80 net/ipv4/udp.c:2480 ipv6_getsockopt+0xf3/0x2e0 net/ipv6/ipv6_sockglue.c:1363 tcp_getsockopt+0x82/0xd0 net/ipv4/tcp.c:3329 sock_common_getsockopt+0x95/0xd0 net/core/sock.c:2927 SYSC_getsockopt net/socket.c:1862 [inline] SyS_getsockopt+0x178/0x340 net/socket.c:1844 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007fac94b8cc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007fac94b8caa0 RCX: 0000000000453299 RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 00007fac94b8ca90 R08: 0000000020000ffc R09: 0000000000000000 R10: 0000000020001000 R11: 0000000000000212 R12: 00000000004b8096 R13: 00007fac94b8cbc8 R14: 00000000004b8096 R15: 0000000000000000 syz-executor1: vmalloc: allocation failure: 8 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) syz-executor1 cpuset=/ mems_allowed=0 CPU: 1 PID: 11816 Comm: syz-executor1 Not tainted 4.15.0-rc9+ #283 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 warn_alloc+0x19a/0x2b0 mm/page_alloc.c:3299 __vmalloc_node_range+0x4f0/0x650 mm/vmalloc.c:1775 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vmalloc+0x45/0x50 mm/vmalloc.c:1840 ip_set_sockfn_get+0x2c1/0xc70 net/netfilter/ipset/ip_set_core.c:1920 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x6a/0xc0 net/netfilter/nf_sockopt.c:122 ip_getsockopt+0x15c/0x220 net/ipv4/ip_sockglue.c:1573 udp_getsockopt+0x45/0x80 net/ipv4/udp.c:2480 ipv6_getsockopt+0xf3/0x2e0 net/ipv6/ipv6_sockglue.c:1363 tcp_getsockopt+0x82/0xd0 net/ipv4/tcp.c:3329 sock_common_getsockopt+0x95/0xd0 net/core/sock.c:2927 SYSC_getsockopt net/socket.c:1862 [inline] SyS_getsockopt+0x178/0x340 net/socket.c:1844 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007fac94b8cc58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007fac94b8caa0 RCX: 0000000000453299 RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 00007fac94b8ca90 R08: 0000000020000ffc R09: 0000000000000000 R10: 0000000020001000 R11: 0000000000000212 R12: 00000000004b8096 R13: 00007fac94b8cbc8 R14: 00000000004b8096 R15: 0000000000000000 Mem-Info: active_anon:62380 inactive_anon:58 isolated_anon:0 active_file:3589 inactive_file:8357 isolated_file:0 unevictable:0 dirty:71 writeback:0 unstable:0 slab_reclaimable:9788 slab_unreclaimable:84103 mapped:24090 shmem:65 pagetables:697 bounce:0 free:1431364 free_pcp:570 free_cma:0 Node 0 active_anon:249520kB inactive_anon:232kB active_file:14356kB inactive_file:33428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96360kB dirty:284kB writeback:0kB shmem:260kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2868 6378 6378 Node 0 DMA32 free:2939228kB min:30320kB low:37900kB high:45480kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2940052kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:824kB local_pcp:132kB free_cma:0kB lowmem_reserve[]: 0 0 3510 3510 Node 0 Normal free:2770320kB min:37096kB low:46368kB high:55640kB active_anon:249520kB inactive_anon:232kB active_file:14356kB inactive_file:33428kB unevictable:0kB writepending:284kB present:4718592kB managed:3594340kB mlocked:0kB kernel_stack:3872kB pagetables:2788kB bounce:0kB free_pcp:1332kB local_pcp:716kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 DMA32: 5*4kB (UM) 5*8kB (UM) 4*16kB (UM) 3*32kB (UM) 2*64kB (M) 2*128kB (M) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 715*4096kB (M) = 2939228kB Node 0 Normal: 106*4kB (UME) 134*8kB (UME) 44*16kB (UME) 560*32kB (UME) 721*64kB (UME) 222*128kB (UM) 88*256kB (UM) 28*512kB (UME) 13*1024kB (UME) 6*2048kB (UM) 638*4096kB (UM) = 2770392kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 12017 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 328404 pages reserved FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 11831 Comm: syz-executor2 Not tainted 4.15.0-rc9+ #283 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3289 [inline] kmem_cache_alloc_node_trace+0x5a/0x750 mm/slab.c:3651 kmalloc_node include/linux/slab.h:537 [inline] alloc_vmap_area+0x11c/0x8c0 mm/vmalloc.c:419 __get_vm_area_node+0xe8/0x340 mm/vmalloc.c:1409 __vmalloc_node_range+0xa3/0x650 mm/vmalloc.c:1754 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vmalloc+0x45/0x50 mm/vmalloc.c:1840 ip_set_sockfn_get+0x2c1/0xc70 net/netfilter/ipset/ip_set_core.c:1920 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x6a/0xc0 net/netfilter/nf_sockopt.c:122 ip_getsockopt+0x15c/0x220 net/ipv4/ip_sockglue.c:1573 udp_getsockopt+0x45/0x80 net/ipv4/udp.c:2480 ipv6_getsockopt+0xf3/0x2e0 net/ipv6/ipv6_sockglue.c:1363 tcp_getsockopt+0x82/0xd0 net/ipv4/tcp.c:3329 sock_common_getsockopt+0x95/0xd0 net/core/sock.c:2927 SYSC_getsockopt net/socket.c:1862 [inline] SyS_getsockopt+0x178/0x340 net/socket.c:1844 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007f6c11fe6c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007f6c11fe6aa0 RCX: 0000000000453299 RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 00007f6c11fe6a90 R08: 0000000020000ffc R09: 0000000000000000 R10: 0000000020001000 R11: 0000000000000212 R12: 00000000004b8096 R13: 00007f6c11fe6bc8 R14: 00000000004b8096 R15: 0000000000000000 syz-executor2: vmalloc: allocation failure: 8 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) syz-executor2 cpuset=/ mems_allowed=0 CPU: 0 PID: 11831 Comm: syz-executor2 Not tainted 4.15.0-rc9+ #283 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 warn_alloc+0x19a/0x2b0 mm/page_alloc.c:3299 __vmalloc_node_range+0x4f0/0x650 mm/vmalloc.c:1775 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc_node_flags mm/vmalloc.c:1818 [inline] vmalloc+0x45/0x50 mm/vmalloc.c:1840 ip_set_sockfn_get+0x2c1/0xc70 net/netfilter/ipset/ip_set_core.c:1920 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x6a/0xc0 net/netfilter/nf_sockopt.c:122 ip_getsockopt+0x15c/0x220 net/ipv4/ip_sockglue.c:1573 udp_getsockopt+0x45/0x80 net/ipv4/udp.c:2480 ipv6_getsockopt+0xf3/0x2e0 net/ipv6/ipv6_sockglue.c:1363 tcp_getsockopt+0x82/0xd0 net/ipv4/tcp.c:3329 sock_common_getsockopt+0x95/0xd0 net/core/sock.c:2927 SYSC_getsockopt net/socket.c:1862 [inline] SyS_getsockopt+0x178/0x340 net/socket.c:1844 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007f6c11fe6c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007f6c11fe6aa0 RCX: 0000000000453299 RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000013 RBP: 00007f6c11fe6a90 R08: 0000000020000ffc R09: 0000000000000000 R10: 0000000020001000 R11: 0000000000000212 R12: 00000000004b8096 R13: 00007f6c11fe6bc8 R14: 00000000004b8096 R15: 0000000000000000 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 1 CPU: 0 PID: 12145 Comm: syz-executor4 Not tainted 4.15.0-rc9+ #283 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2948 [inline] prepare_alloc_pages mm/page_alloc.c:4187 [inline] __alloc_pages_nodemask+0x338/0xd80 mm/page_alloc.c:4226 alloc_pages_current+0xb6/0x1e0 mm/mempolicy.c:2036 alloc_pages include/linux/gfp.h:492 [inline] skb_page_frag_refill+0x358/0x5f0 net/core/sock.c:2201 tun_build_skb.isra.49+0x2e1/0x17d0 drivers/net/tun.c:1459 tun_get_user+0x1693/0x3710 drivers/net/tun.c:1628 tun_chr_write_iter+0xb9/0x160 drivers/net/tun.c:1809 call_write_iter include/linux/fs.h:1772 [inline] do_iter_readv_writev+0x525/0x7f0 fs/read_write.c:653 do_iter_write+0x154/0x540 fs/read_write.c:932 vfs_writev+0x18a/0x340 fs/read_write.c:977 do_writev+0xfc/0x2a0 fs/read_write.c:1012 SYSC_writev fs/read_write.c:1085 [inline] SyS_writev+0x27/0x30 fs/read_write.c:1082 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453171 RSP: 002b:00007fbe8dec3b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 RAX: ffffffffffffffda RBX: 00007fbe8dec3aa0 RCX: 0000000000453171 RDX: 0000000000000001 RSI: 00007fbe8dec3bd0 RDI: 0000000000000012 RBP: 00007fbe8dec3a90 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000000002a R11: 0000000000000293 R12: 00000000004b8096 R13: 00007fbe8dec3bc8 R14: 00000000004b8096 R15: 0000000000000000 kauditd_printk_skb: 63 callbacks suppressed audit: type=1326 audit(1517132277.984:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=12718 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0x7ffc0000 audit: type=1326 audit(1517132277.984:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=12718 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x453299 code=0x7ffc0000 audit: type=1400 audit(1517132278.251:619): avc: denied { map } for pid=12827 comm="syz-executor6" path="socket:[29783]" dev="sockfs" ino=29783 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=1 audit: type=1400 audit(1517132278.935:620): avc: denied { setattr } for pid=13060 comm="syz-executor0" name="loginuid" dev="proc" ino=29658 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 QAT: Invalid ioctl QAT: Invalid ioctl