============================= WARNING: suspicious RCU usage 4.14.307-syzkaller #0 Not tainted ----------------------------- net/sched/act_sample.c:95 suspicious rcu_dereference_protected() usage! IPVS: ftp: loaded support on port[0] = 21 other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor.5/11423: #0: (rtnl_mutex){+.+.}, at: [] rtnl_lock net/core/rtnetlink.c:72 [inline] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x31d/0xb10 net/core/rtnetlink.c:4317 stack backtrace: CPU: 0 PID: 11423 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 tcf_sample_init+0x71c/0x8c0 net/sched/act_sample.c:95 tcf_action_init_1+0x51a/0x9e0 net/sched/act_api.c:691 tcf_action_init+0x26d/0x400 net/sched/act_api.c:760 tcf_action_add net/sched/act_api.c:1088 [inline] tc_ctl_action+0x2e3/0x510 net/sched/act_api.c:1140 rtnetlink_rcv_msg+0x3be/0xb10 net/core/rtnetlink.c:4322 netlink_rcv_skb+0x125/0x390 net/netlink/af_netlink.c:2461 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline] netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1328 netlink_sendmsg+0x651/0xbc0 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062 __sys_sendmsg+0xa3/0x120 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0x27/0x40 net/socket.c:2103 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fcc8a5790f9 RSP: 002b:00007fcc88aeb168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fcc8a698f80 RCX: 00007fcc8a5790f9 RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 RBP: 00007fcc8a5d4ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc9414abcf R14: 00007fcc88aeb300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 11461 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] get_empty_filp+0x86/0x3f0 fs/file_table.c:123 alloc_file+0x23/0x440 fs/file_table.c:164 __shmem_file_setup.part.0+0x198/0x3c0 mm/shmem.c:4294 __shmem_file_setup mm/shmem.c:4264 [inline] shmem_file_setup mm/shmem.c:4331 [inline] SYSC_memfd_create mm/shmem.c:3784 [inline] SyS_memfd_create+0x1fc/0x3c0 mm/shmem.c:3724 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc36845a0f9 RSP: 002b:00007fc3669cbf38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000005d0c RCX: 00007fc36845a0f9 RDX: 00007fc3669cbfdc RSI: 0000000000000000 RDI: 00007fc3684b4e81 RBP: 0000000000005d0c R08: 00007fc3669cbe20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005d40 R13: 00007fc3669cbfdc R14: 00007fc3669cbfe0 R15: 0000000020005e00 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 11518 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] kzalloc include/linux/slab.h:661 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x129/0x800 security/apparmor/lsm.c:431 security_file_alloc+0x66/0xa0 security/security.c:874 get_empty_filp+0x16b/0x3f0 fs/file_table.c:129 alloc_file+0x23/0x440 fs/file_table.c:164 __shmem_file_setup.part.0+0x198/0x3c0 mm/shmem.c:4294 __shmem_file_setup mm/shmem.c:4264 [inline] shmem_file_setup mm/shmem.c:4331 [inline] SYSC_memfd_create mm/shmem.c:3784 [inline] SyS_memfd_create+0x1fc/0x3c0 mm/shmem.c:3724 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc36845a0f9 RSP: 002b:00007fc3669cbf38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000005d0c RCX: 00007fc36845a0f9 RDX: 00007fc3669cbfdc RSI: 0000000000000000 RDI: 00007fc3684b4e81 RBP: 0000000000005d0c R08: 00007fc3669cbe20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005d40 R13: 00007fc3669cbfdc R14: 00007fc3669cbfe0 R15: 0000000020005e00 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 11547 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] mmap_region+0x7c1/0x1220 mm/mmap.c:1689 do_mmap+0x5b3/0xcb0 mm/mmap.c:1495 do_mmap_pgoff include/linux/mm.h:2187 [inline] vm_mmap_pgoff+0x14e/0x1a0 mm/util.c:366 SYSC_mmap_pgoff mm/mmap.c:1545 [inline] SyS_mmap_pgoff+0x3a2/0x500 mm/mmap.c:1503 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc36845a142 RSP: 002b:00007fc3669cbf28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007fc36845a142 RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000005d0a R13: 00007fc3669cbfdc R14: 00007fc3669cbfe0 R15: 0000000020005e02 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 1 CPU: 1 PID: 11567 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4165 [inline] __alloc_pages_nodemask+0x21e/0x2900 mm/page_alloc.c:4213 alloc_pages_current+0x155/0x260 mm/mempolicy.c:2108 alloc_pages include/linux/gfp.h:520 [inline] pte_alloc_one+0x15/0x100 arch/x86/mm/pgtable.c:30 __pte_alloc+0x25/0x2c0 mm/memory.c:683 do_anonymous_page mm/memory.c:3224 [inline] handle_pte_fault mm/memory.c:4113 [inline] __handle_mm_fault+0x3259/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 669cb700:0x1 RSP: 669cb660:0000000000000102 EFLAGS: 7fc3669cb670 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 11612 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 ptlock_alloc+0x1d/0x70 mm/memory.c:4871 ptlock_init include/linux/mm.h:1764 [inline] pgtable_page_ctor include/linux/mm.h:1798 [inline] pte_alloc_one+0x57/0x100 arch/x86/mm/pgtable.c:33 __pte_alloc+0x25/0x2c0 mm/memory.c:683 do_anonymous_page mm/memory.c:3224 [inline] handle_pte_fault mm/memory.c:4113 [inline] __handle_mm_fault+0x3259/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 669cb700:0x1 RSP: 669cb660:0000000000000102 EFLAGS: 7fc3669cb670 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 11637 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 anon_vma_chain_alloc mm/rmap.c:130 [inline] __anon_vma_prepare+0x5d/0x510 mm/rmap.c:184 anon_vma_prepare include/linux/rmap.h:157 [inline] do_anonymous_page mm/memory.c:3252 [inline] handle_pte_fault mm/memory.c:4113 [inline] __handle_mm_fault+0x2b43/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 669cb700:0x1 RSP: 669cb660:0000000000000102 EFLAGS: 7fc3669cb670 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 11671 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 anon_vma_alloc mm/rmap.c:82 [inline] __anon_vma_prepare+0x2ae/0x510 mm/rmap.c:191 anon_vma_prepare include/linux/rmap.h:157 [inline] do_anonymous_page mm/memory.c:3252 [inline] handle_pte_fault mm/memory.c:4113 [inline] __handle_mm_fault+0x2b43/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 669cb700:0x1 RSP: 669cb660:0000000000000102 EFLAGS: 7fc3669cb670 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 11713 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4165 [inline] __alloc_pages_nodemask+0x21e/0x2900 mm/page_alloc.c:4213 alloc_pages_vma+0xd2/0x6d0 mm/mempolicy.c:2072 alloc_zeroed_user_highpage_movable include/linux/highmem.h:184 [inline] do_anonymous_page mm/memory.c:3254 [inline] handle_pte_fault mm/memory.c:4113 [inline] __handle_mm_fault+0x25fa/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 669cb700:0x1 RSP: 669cb660:0000000000000102 EFLAGS: 7fc3669cb670 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF XFS (loop5): Mounting V4 Filesystem XFS (loop5): totally zeroed log XFS (loop5): Ending clean mount XFS (loop5): Unmounting Filesystem attempt to access beyond end of device loop5: rw=399361, want=65600, limit=65536 XFS (loop5): metadata I/O error: block 0x10000 ("xlog_iodone") error 5 numblks 64 XFS (loop5): xfs_do_force_shutdown(0x2) called from line 1244 of file fs/xfs/xfs_log.c. Return address = 0xffffffff825f6d1b FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 XFS (loop5): Log I/O Error Detected. Shutting down filesystem XFS (loop5): Please umount the filesystem and rectify the problem(s) CPU: 0 PID: 11757 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4165 [inline] __alloc_pages_nodemask+0x21e/0x2900 mm/page_alloc.c:4213 alloc_pages_vma+0xd2/0x6d0 mm/mempolicy.c:2072 alloc_zeroed_user_highpage_movable include/linux/highmem.h:184 [inline] do_anonymous_page mm/memory.c:3254 [inline] handle_pte_fault mm/memory.c:4113 [inline] __handle_mm_fault+0x25fa/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 669cb700:0x1 RSP: 669cb660:00000000000000e8 EFLAGS: 7fc3669cb670 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 11830 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4165 [inline] __alloc_pages_nodemask+0x21e/0x2900 mm/page_alloc.c:4213 alloc_pages_vma+0xd2/0x6d0 mm/mempolicy.c:2072 alloc_zeroed_user_highpage_movable include/linux/highmem.h:184 [inline] wp_page_copy+0xfdf/0x25c0 mm/memory.c:2606 do_wp_page+0x245/0x1db0 mm/memory.c:2905 handle_pte_fault mm/memory.c:4131 [inline] __handle_mm_fault+0x234f/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 669cb700:0x1 RSP: 669cb660:000000000000000c EFLAGS: 7fc3669cb670 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF XFS (loop5): Mounting V4 Filesystem XFS (loop5): totally zeroed log XFS (loop5): Ending clean mount XFS (loop5): Unmounting Filesystem FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 attempt to access beyond end of device CPU: 0 PID: 11861 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 loop5: rw=399361, want=65600, limit=65536 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4165 [inline] __alloc_pages_nodemask+0x21e/0x2900 mm/page_alloc.c:4213 XFS (loop5): metadata I/O error: block 0x10000 ("xlog_iodone") error 5 numblks 64 XFS (loop5): xfs_do_force_shutdown(0x2) called from line 1244 of file fs/xfs/xfs_log.c. Return address = 0xffffffff825f6d1b alloc_pages_vma+0xd2/0x6d0 mm/mempolicy.c:2072 alloc_zeroed_user_highpage_movable include/linux/highmem.h:184 [inline] wp_page_copy+0xfdf/0x25c0 mm/memory.c:2606 XFS (loop5): Log I/O Error Detected. Shutting down filesystem do_wp_page+0x245/0x1db0 mm/memory.c:2905 XFS (loop5): Please umount the filesystem and rectify the problem(s) handle_pte_fault mm/memory.c:4131 [inline] __handle_mm_fault+0x234f/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 669cb700:0x1 RSP: 669cb660:000000000000009d EFLAGS: 7fc3669cb670 Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF