============================================ WARNING: possible recursive locking detected 4.14.290-syzkaller #0 Not tainted -------------------------------------------- syz-executor.3/10800 is trying to acquire lock: ((fb_notifier_list).rwsem){++++}, at: [] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] ((fb_notifier_list).rwsem){++++}, at: [] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] ((fb_notifier_list).rwsem){++++}, at: [] blocking_notifier_call_chain kernel/notifier.c:328 [inline] ((fb_notifier_list).rwsem){++++}, at: [] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 but task is already holding lock: ((fb_notifier_list).rwsem){++++}, at: [] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] ((fb_notifier_list).rwsem){++++}, at: [] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] ((fb_notifier_list).rwsem){++++}, at: [] blocking_notifier_call_chain kernel/notifier.c:328 [inline] ((fb_notifier_list).rwsem){++++}, at: [] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock((fb_notifier_list).rwsem); lock((fb_notifier_list).rwsem); *** DEADLOCK *** May be due to missing lock nesting notation 3 locks held by syz-executor.3/10800: #0: (console_lock){+.+.}, at: [] do_fb_ioctl+0x81a/0xa70 drivers/video/fbdev/core/fbmem.c:1223 #1: (&fb_info->lock){+.+.}, at: [] lock_fb_info drivers/video/fbdev/core/fbmem.c:82 [inline] #1: (&fb_info->lock){+.+.}, at: [] do_fb_ioctl+0x824/0xa70 drivers/video/fbdev/core/fbmem.c:1224 #2: ((fb_notifier_list).rwsem){++++}, at: [] __blocking_notifier_call_chain kernel/notifier.c:316 [inline] #2: ((fb_notifier_list).rwsem){++++}, at: [] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] #2: ((fb_notifier_list).rwsem){++++}, at: [] blocking_notifier_call_chain kernel/notifier.c:328 [inline] #2: ((fb_notifier_list).rwsem){++++}, at: [] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 stack backtrace: CPU: 0 PID: 10800 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 print_deadlock_bug kernel/locking/lockdep.c:1800 [inline] check_deadlock kernel/locking/lockdep.c:1847 [inline] validate_chain kernel/locking/lockdep.c:2448 [inline] __lock_acquire.cold+0x180/0x97c kernel/locking/lockdep.c:3491 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 down_read+0x36/0x80 kernel/locking/rwsem.c:24 __blocking_notifier_call_chain kernel/notifier.c:316 [inline] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] blocking_notifier_call_chain kernel/notifier.c:328 [inline] blocking_notifier_call_chain+0x63/0x90 kernel/notifier.c:325 fb_set_var+0xbc8/0xdc0 drivers/video/fbdev/core/fbmem.c:1065 fbcon_switch+0x3d9/0x19e0 drivers/video/fbdev/core/fbcon.c:2066 redraw_screen+0x32c/0x790 drivers/tty/vt/vt.c:689 fbcon_blank+0x986/0xd50 drivers/video/fbdev/core/fbcon.c:2204 do_unblank_screen+0x1fd/0x4e0 drivers/tty/vt/vt.c:3954 fbcon_fb_blanked drivers/video/fbdev/core/fbcon.c:2933 [inline] fbcon_event_notify+0x1445/0x1760 drivers/video/fbdev/core/fbcon.c:3051 notifier_call_chain+0x108/0x1a0 kernel/notifier.c:93 __blocking_notifier_call_chain kernel/notifier.c:317 [inline] __blocking_notifier_call_chain kernel/notifier.c:304 [inline] blocking_notifier_call_chain kernel/notifier.c:328 [inline] blocking_notifier_call_chain+0x79/0x90 kernel/notifier.c:325 fb_blank+0x14c/0x190 drivers/video/fbdev/core/fbmem.c:1093 do_fb_ioctl+0x894/0xa70 drivers/video/fbdev/core/fbmem.c:1229 fb_ioctl+0xdd/0x130 drivers/video/fbdev/core/fbmem.c:1253 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f8c5dac3209 RSP: 002b:00007f8c5c438168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f8c5dbd5f60 RCX: 00007f8c5dac3209 RDX: 0000000000000000 RSI: 0000000000004611 RDI: 0000000000000003 RBP: 00007f8c5db1d161 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc12a3516f R14: 00007f8c5c438300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 12311 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 sock_alloc_inode+0x19/0x250 net/socket.c:251 alloc_inode+0x5d/0x170 fs/inode.c:210 new_inode_pseudo+0x14/0xe0 fs/inode.c:899 sock_alloc+0x3c/0x270 net/socket.c:569 __sock_create+0x8a/0x620 net/socket.c:1239 sock_create net/socket.c:1315 [inline] SYSC_socket net/socket.c:1345 [inline] SyS_socket+0xd1/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d3492b887 RSP: 002b:00007f5d3329e0d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f5d34a3cf60 RCX: 00007f5d3492b887 RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 RBP: 00007f5d3329f1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000280 R11: 0000000000000286 R12: 00000000ffffffff R13: 00007ffddda5491f R14: 00007f5d3329f300 R15: 0000000000022000 socket: no more sockets FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 12346 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] sock_alloc_inode+0x5f/0x250 net/socket.c:254 alloc_inode+0x5d/0x170 fs/inode.c:210 new_inode_pseudo+0x14/0xe0 fs/inode.c:899 sock_alloc+0x3c/0x270 net/socket.c:569 __sock_create+0x8a/0x620 net/socket.c:1239 sock_create net/socket.c:1315 [inline] SYSC_socket net/socket.c:1345 [inline] SyS_socket+0xd1/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d3492b887 RSP: 002b:00007f5d3329e0d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f5d34a3cf60 RCX: 00007f5d3492b887 RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 RBP: 00007f5d3329f1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000280 R11: 0000000000000286 R12: 00000000ffffffff R13: 00007ffddda5491f R14: 00007f5d3329f300 R15: 0000000000022000 socket: no more sockets CPU: 1 PID: 12353 Comm: syz-executor.5 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc_track_caller+0x2bc/0x400 mm/slab.c:3735 memdup_user+0x22/0xa0 mm/util.c:165 strndup_user+0x5b/0xf0 mm/util.c:196 SYSC_request_key security/keys/keyctl.c:174 [inline] SyS_request_key+0xbe/0x2f0 security/keys/keyctl.c:156 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f0ab9353209 RSP: 002b:00007f0ab7cc8168 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 RAX: ffffffffffffffda RBX: 00007f0ab9465f60 RCX: 00007f0ab9353209 RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000020001500 RBP: 00007f0ab7cc81d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffed29514ff R14: 00007f0ab7cc8300 R15: 0000000000022000 CPU: 0 PID: 12368 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x2c1/0x400 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] sk_prot_alloc+0x1ba/0x290 net/core/sock.c:1484 sk_alloc+0x36/0xcd0 net/core/sock.c:1538 __netlink_create+0x63/0x270 net/netlink/af_netlink.c:618 netlink_create+0x276/0x520 net/netlink/af_netlink.c:681 __sock_create+0x303/0x620 net/socket.c:1275 sock_create net/socket.c:1315 [inline] SYSC_socket net/socket.c:1345 [inline] SyS_socket+0xd1/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d3492b887 RSP: 002b:00007f5d3329e0d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f5d34a3cf60 RCX: 00007f5d3492b887 RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 RBP: 00007f5d3329f1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000280 R11: 0000000000000286 R12: 00000000ffffffff R13: 00007ffddda5491f R14: 00007f5d3329f300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 12391 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 __d_alloc+0x2a/0xa20 fs/dcache.c:1623 sock_alloc_file+0xc8/0x2e0 net/socket.c:409 sock_map_fd net/socket.c:439 [inline] SYSC_socket net/socket.c:1349 [inline] SyS_socket+0x108/0x1b0 net/socket.c:1325 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d3492b887 RSP: 002b:00007f5d3329e0d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f5d34a3cf60 RCX: 00007f5d3492b887 RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 RBP: 00007f5d3329f1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000280 R11: 0000000000000286 R12: 00000000ffffffff R13: 00007ffddda5491f R14: 00007f5d3329f300 R15: 0000000000022000 CPU: 1 PID: 12400 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 sock_alloc_inode+0x19/0x250 net/socket.c:251 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 alloc_inode+0x5d/0x170 fs/inode.c:210 new_inode_pseudo+0x14/0xe0 fs/inode.c:899 sock_alloc+0x3c/0x270 net/socket.c:569 __sock_create+0x8a/0x620 net/socket.c:1239 sock_create net/socket.c:1315 [inline] SYSC_socket net/socket.c:1345 [inline] SyS_socket+0xd1/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f8c5dac3209 RSP: 002b:00007f8c5c438168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f8c5dbd5f60 RCX: 00007f8c5dac3209 RDX: 0000000000000073 RSI: 0000000000000002 RDI: 000000000000000a RBP: 00007f8c5c4381d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc12a3516f R14: 00007f8c5c438300 R15: 0000000000022000 CPU: 0 PID: 12423 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 socket: no more sockets Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] get_empty_filp+0x86/0x3f0 fs/file_table.c:123 alloc_file+0x23/0x440 fs/file_table.c:164 sock_alloc_file+0x113/0x2e0 net/socket.c:416 sock_map_fd net/socket.c:439 [inline] SYSC_socket net/socket.c:1349 [inline] SyS_socket+0x108/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d3492b887 RSP: 002b:00007f5d3329e0d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f5d34a3cf60 RCX: 00007f5d3492b887 RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 RBP: 00007f5d3329f1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000280 R11: 0000000000000286 R12: 00000000ffffffff R13: 00007ffddda5491f R14: 00007f5d3329f300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 12436 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] kzalloc include/linux/slab.h:661 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x129/0x800 security/apparmor/lsm.c:431 security_file_alloc+0x66/0xa0 security/security.c:874 get_empty_filp+0x16b/0x3f0 fs/file_table.c:129 alloc_file+0x23/0x440 fs/file_table.c:164 sock_alloc_file+0x113/0x2e0 net/socket.c:416 sock_map_fd net/socket.c:439 [inline] SYSC_socket net/socket.c:1349 [inline] SyS_socket+0x108/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d3492b887 RSP: 002b:00007f5d3329e0d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f5d34a3cf60 RCX: 00007f5d3492b887 RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 RBP: 00007f5d3329f1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020000280 R11: 0000000000000286 R12: 00000000ffffffff R13: 00007ffddda5491f R14: 00007f5d3329f300 R15: 0000000000022000 CPU: 0 PID: 12435 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] sock_alloc_inode+0x5f/0x250 net/socket.c:254 alloc_inode+0x5d/0x170 fs/inode.c:210 new_inode_pseudo+0x14/0xe0 fs/inode.c:899 sock_alloc+0x3c/0x270 net/socket.c:569 __sock_create+0x8a/0x620 net/socket.c:1239 sock_create net/socket.c:1315 [inline] SYSC_socket net/socket.c:1345 [inline] SyS_socket+0xd1/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f8c5dac3209 RSP: 002b:00007f8c5c438168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f8c5dbd5f60 RCX: 00007f8c5dac3209 RDX: 0000000000000073 RSI: 0000000000000002 RDI: 000000000000000a RBP: 00007f8c5c4381d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc12a3516f R14: 00007f8c5c438300 R15: 0000000000022000 socket: no more sockets FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 12463 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4131 [inline] __alloc_pages_nodemask+0x22c/0x2720 mm/page_alloc.c:4179 alloc_pages_vma+0xd2/0x6d0 mm/mempolicy.c:2071 alloc_zeroed_user_highpage_movable include/linux/highmem.h:184 [inline] do_anonymous_page mm/memory.c:3249 [inline] handle_pte_fault mm/memory.c:4108 [inline] __handle_mm_fault+0x25fa/0x4620 mm/memory.c:4234 handle_mm_fault+0x455/0x9c0 mm/memory.c:4271 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1123 RIP: 3329e140:0x4 RSP: 3329e0f0:0000000000000000 EFLAGS: 7f5d3329e0a8 CPU: 1 PID: 12467 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 sk_prot_alloc+0x5f/0x290 net/core/sock.c:1478 sk_alloc+0x36/0xcd0 net/core/sock.c:1538 inet6_create net/ipv6/af_inet6.c:183 [inline] inet6_create+0x2df/0xe20 net/ipv6/af_inet6.c:110 __sock_create+0x303/0x620 net/socket.c:1275 sock_create net/socket.c:1315 [inline] SYSC_socket net/socket.c:1345 [inline] SyS_socket+0xd1/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f8c5dac3209 RSP: 002b:00007f8c5c438168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f8c5dbd5f60 RCX: 00007f8c5dac3209 RDX: 0000000000000073 RSI: 0000000000000002 RDI: 000000000000000a RBP: 00007f8c5c4381d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc12a3516f R14: 00007f8c5c438300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 12498 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3297 [inline] kmem_cache_alloc_node+0x263/0x410 mm/slab.c:3640 __alloc_skb+0x5c/0x510 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:980 [inline] netlink_alloc_large_skb net/netlink/af_netlink.c:1168 [inline] netlink_sendmsg+0x91e/0xbc0 net/netlink/af_netlink.c:1868 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 SYSC_sendto net/socket.c:1763 [inline] SyS_sendto+0x1c7/0x2c0 net/socket.c:1731 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d348dcfcc RSP: 002b:00007f5d3329e000 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f5d3329e0f0 RCX: 00007f5d348dcfcc RDX: 0000000000000020 RSI: 00007f5d3329e140 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00007f5d3329e054 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5d3329e0a8 R13: 00007f5d3329e140 R14: 0000000000000004 R15: 0000000000000000 CPU: 0 PID: 12497 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 __d_alloc+0x2a/0xa20 fs/dcache.c:1623 sock_alloc_file+0xc8/0x2e0 net/socket.c:409 sock_map_fd net/socket.c:439 [inline] SYSC_socket net/socket.c:1349 [inline] SyS_socket+0x108/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f8c5dac3209 RSP: 002b:00007f8c5c438168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f8c5dbd5f60 RCX: 00007f8c5dac3209 RDX: 0000000000000073 RSI: 0000000000000002 RDI: 000000000000000a RBP: 00007f8c5c4381d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc12a3516f R14: 00007f8c5c438300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 12528 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3297 [inline] kmem_cache_alloc_node_trace+0x25a/0x400 mm/slab.c:3659 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node_track_caller+0x38/0x70 mm/slab.c:3696 __kmalloc_reserve net/core/skbuff.c:137 [inline] __alloc_skb+0x96/0x510 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:980 [inline] netlink_alloc_large_skb net/netlink/af_netlink.c:1168 [inline] netlink_sendmsg+0x91e/0xbc0 net/netlink/af_netlink.c:1868 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 SYSC_sendto net/socket.c:1763 [inline] SyS_sendto+0x1c7/0x2c0 net/socket.c:1731 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d348dcfcc RSP: 002b:00007f5d3329e000 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f5d3329e0f0 RCX: 00007f5d348dcfcc RDX: 0000000000000020 RSI: 00007f5d3329e140 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00007f5d3329e054 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5d3329e0a8 R13: 00007f5d3329e140 R14: 0000000000000004 R15: 0000000000000000 CPU: 1 PID: 12531 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] get_empty_filp+0x86/0x3f0 fs/file_table.c:123 alloc_file+0x23/0x440 fs/file_table.c:164 sock_alloc_file+0x113/0x2e0 net/socket.c:416 sock_map_fd net/socket.c:439 [inline] SYSC_socket net/socket.c:1349 [inline] SyS_socket+0x108/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f8c5dac3209 RSP: 002b:00007f8c5c438168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f8c5dbd5f60 RCX: 00007f8c5dac3209 RDX: 0000000000000073 RSI: 0000000000000002 RDI: 000000000000000a RBP: 00007f8c5c4381d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc12a3516f R14: 00007f8c5c438300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 12582 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x40/0x3c0 mm/slab.c:3550 skb_clone+0x126/0x9a0 net/core/skbuff.c:1291 __netlink_deliver_tap_skb net/netlink/af_netlink.c:268 [inline] __netlink_deliver_tap net/netlink/af_netlink.c:293 [inline] netlink_deliver_tap+0x67e/0x860 net/netlink/af_netlink.c:304 netlink_deliver_tap_kernel net/netlink/af_netlink.c:313 [inline] netlink_unicast_kernel net/netlink/af_netlink.c:1295 [inline] netlink_unicast+0x485/0x610 net/netlink/af_netlink.c:1322 netlink_sendmsg+0x648/0xbc0 net/netlink/af_netlink.c:1893 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 SYSC_sendto net/socket.c:1763 [inline] SyS_sendto+0x1c7/0x2c0 net/socket.c:1731 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d348dcfcc RSP: 002b:00007f5d3329e000 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f5d3329e0f0 RCX: 00007f5d348dcfcc RDX: 0000000000000020 RSI: 00007f5d3329e140 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00007f5d3329e054 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5d3329e0a8 R13: 00007f5d3329e140 R14: 0000000000000004 R15: 0000000000000000 CPU: 0 PID: 12580 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] kzalloc include/linux/slab.h:661 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x129/0x800 security/apparmor/lsm.c:431 security_file_alloc+0x66/0xa0 security/security.c:874 get_empty_filp+0x16b/0x3f0 fs/file_table.c:129 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 alloc_file+0x23/0x440 fs/file_table.c:164 sock_alloc_file+0x113/0x2e0 net/socket.c:416 sock_map_fd net/socket.c:439 [inline] SYSC_socket net/socket.c:1349 [inline] SyS_socket+0x108/0x1b0 net/socket.c:1325 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f8c5dac3209 RSP: 002b:00007f8c5c438168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffda RBX: 00007f8c5dbd5f60 RCX: 00007f8c5dac3209 RDX: 0000000000000073 RSI: 0000000000000002 RDI: 000000000000000a RBP: 00007f8c5c4381d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc12a3516f R14: 00007f8c5c438300 R15: 0000000000022000 CPU: 1 PID: 12602 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4131 [inline] __alloc_pages_nodemask+0x22c/0x2720 mm/page_alloc.c:4179 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 alloc_pages_current+0x155/0x260 mm/mempolicy.c:2107 alloc_pages include/linux/gfp.h:520 [inline] pmd_alloc_one arch/x86/include/asm/pgalloc.h:102 [inline] __pmd_alloc+0x37/0x3f0 mm/memory.c:4350 pmd_alloc include/linux/mm.h:1714 [inline] __handle_mm_fault+0x1398/0x4620 mm/memory.c:4201 handle_mm_fault+0x455/0x9c0 mm/memory.c:4271 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x25/0x50 arch/x86/entry/entry_64.S:1123 RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 arch/x86/lib/copy_user_64.S:67 RSP: 0018:ffff88809c847e48 EFLAGS: 00050202 RAX: ffffed1013908fd8 RBX: 0000000000000020 RCX: 0000000000000004 RDX: 0000000000000000 RSI: ffff88809c847ea0 RDI: 0000000020000000 RBP: ffff88809c847ea0 R08: 0000000000000000 R09: ffffed1013908fd7 R10: ffff88809c847ebf R11: ffff8880a27fa2c0 R12: 0000000020000000 R13: 00007ffffffff000 R14: 0000000020000020 R15: 0000000000000000 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline] _copy_to_user+0xaa/0xd0 lib/usercopy.c:28 copy_to_user include/linux/uaccess.h:155 [inline] SYSC_getitimer kernel/time/itimer.c:115 [inline] SyS_getitimer+0xbd/0xd0 kernel/time/itimer.c:107 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f0e9c75e209 RSP: 002b:00007f0e9b0d3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000024 RAX: ffffffffffffffda RBX: 00007f0e9c870f60 RCX: 00007f0e9c75e209 RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 RBP: 00007f0e9b0d31d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe3074a30f R14: 00007f0e9b0d3300 R15: 0000000000022000 CPU: 0 PID: 12608 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3297 [inline] kmem_cache_alloc_node+0x263/0x410 mm/slab.c:3640 __alloc_skb+0x5c/0x510 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:980 [inline] nlmsg_new include/net/netlink.h:511 [inline] ctrl_build_family_msg net/netlink/genetlink.c:807 [inline] ctrl_getfamily+0x309/0x530 net/netlink/genetlink.c:887 genl_family_rcv_msg+0x572/0xb20 net/netlink/genetlink.c:600 genl_rcv_msg+0xaf/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x125/0x390 net/netlink/af_netlink.c:2454 genl_rcv+0x24/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1296 [inline] netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1322 netlink_sendmsg+0x648/0xbc0 net/netlink/af_netlink.c:1893 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 SYSC_sendto net/socket.c:1763 [inline] SyS_sendto+0x1c7/0x2c0 net/socket.c:1731 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d348dcfcc RSP: 002b:00007f5d3329e000 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f5d3329e0f0 RCX: 00007f5d348dcfcc RDX: 0000000000000020 RSI: 00007f5d3329e140 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00007f5d3329e054 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5d3329e0a8 R13: 00007f5d3329e140 R14: 0000000000000004 R15: 0000000000000000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 12623 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 ptlock_alloc mm/memory.c:4866 [inline] ptlock_init include/linux/mm.h:1764 [inline] pgtable_pmd_page_ctor include/linux/mm.h:1856 [inline] pmd_alloc_one arch/x86/include/asm/pgalloc.h:105 [inline] __pmd_alloc+0xaf/0x3f0 mm/memory.c:4350 pmd_alloc include/linux/mm.h:1714 [inline] __handle_mm_fault+0x1398/0x4620 mm/memory.c:4201 handle_mm_fault+0x455/0x9c0 mm/memory.c:4271 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x25/0x50 arch/x86/entry/entry_64.S:1123 RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 arch/x86/lib/copy_user_64.S:67 RSP: 0018:ffff888083c27e48 EFLAGS: 00050202 RAX: ffffed1010784fd8 RBX: 0000000000000020 RCX: 0000000000000004 RDX: 0000000000000000 RSI: ffff888083c27ea0 RDI: 0000000020000000 RBP: ffff888083c27ea0 R08: 0000000000000000 R09: ffffed1010784fd7 R10: ffff888083c27ebf R11: ffff8880800fc680 R12: 0000000020000000 R13: 00007ffffffff000 R14: 0000000020000020 R15: 0000000000000000 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline] _copy_to_user+0xaa/0xd0 lib/usercopy.c:28 copy_to_user include/linux/uaccess.h:155 [inline] SYSC_getitimer kernel/time/itimer.c:115 [inline] SyS_getitimer+0xbd/0xd0 kernel/time/itimer.c:107 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f0e9c75e209 RSP: 002b:00007f0e9b0d3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000024 RAX: ffffffffffffffda RBX: 00007f0e9c870f60 RCX: 00007f0e9c75e209 RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 RBP: 00007f0e9b0d31d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe3074a30f R14: 00007f0e9b0d3300 R15: 0000000000022000 CPU: 0 PID: 12626 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3297 [inline] kmem_cache_alloc_node_trace+0x25a/0x400 mm/slab.c:3659 __do_kmalloc_node mm/slab.c:3681 [inline] __kmalloc_node_track_caller+0x38/0x70 mm/slab.c:3696 __kmalloc_reserve net/core/skbuff.c:137 [inline] __alloc_skb+0x96/0x510 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:980 [inline] nlmsg_new include/net/netlink.h:511 [inline] ctrl_build_family_msg net/netlink/genetlink.c:807 [inline] ctrl_getfamily+0x309/0x530 net/netlink/genetlink.c:887 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 genl_family_rcv_msg+0x572/0xb20 net/netlink/genetlink.c:600 genl_rcv_msg+0xaf/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x125/0x390 net/netlink/af_netlink.c:2454 genl_rcv+0x24/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1296 [inline] netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1322 netlink_sendmsg+0x648/0xbc0 net/netlink/af_netlink.c:1893 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 SYSC_sendto net/socket.c:1763 [inline] SyS_sendto+0x1c7/0x2c0 net/socket.c:1731 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5d348dcfcc RSP: 002b:00007f5d3329e000 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f5d3329e0f0 RCX: 00007f5d348dcfcc RDX: 0000000000000020 RSI: 00007f5d3329e140 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00007f5d3329e054 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5d3329e0a8 R13: 00007f5d3329e140 R14: 0000000000000004 R15: 0000000000000000 CPU: 1 PID: 12642 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 anon_vma_chain_alloc mm/rmap.c:129 [inline] __anon_vma_prepare+0x5d/0x4f0 mm/rmap.c:183 anon_vma_prepare include/linux/rmap.h:154 [inline] do_huge_pmd_anonymous_page+0xd38/0x1700 mm/huge_memory.c:682 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 create_huge_pmd mm/memory.c:4002 [inline] __handle_mm_fault+0x2ac4/0x4620 mm/memory.c:4205 handle_mm_fault+0x455/0x9c0 mm/memory.c:4271 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x25/0x50 arch/x86/entry/entry_64.S:1123 RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 arch/x86/lib/copy_user_64.S:67 RSP: 0018:ffff8880a830fe48 EFLAGS: 00050202 RAX: ffffed1015061fd8 RBX: 0000000000000020 RCX: 0000000000000004 RDX: 0000000000000000 RSI: ffff8880a830fea0 RDI: 0000000020000000 RBP: ffff8880a830fea0 R08: 0000000000000000 R09: ffffed1015061fd7 R10: ffff8880a830febf R11: ffff888096666240 R12: 0000000020000000 R13: 00007ffffffff000 R14: 0000000020000020 R15: 0000000000000000 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline] _copy_to_user+0xaa/0xd0 lib/usercopy.c:28 copy_to_user include/linux/uaccess.h:155 [inline] SYSC_getitimer kernel/time/itimer.c:115 [inline] SyS_getitimer+0xbd/0xd0 kernel/time/itimer.c:107 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f0e9c75e209 RSP: 002b:00007f0e9b0d3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000024 RAX: ffffffffffffffda RBX: 00007f0e9c870f60 RCX: 00007f0e9c75e209 RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 RBP: 00007f0e9b0d31d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe3074a30f R14: 00007f0e9b0d3300 R15: 0000000000022000 CPU: 0 PID: 12661 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 Call Trace: