IPVS: ftp: loaded support on port[0] = 21 ====================================================== WARNING: possible circular locking dependency detected 4.19.195-syzkaller #0 Not tainted ------------------------------------------------------ kworker/u4:0/7 is trying to acquire lock: 000000006b4b7846 ((wq_completion)"events"){+.+.}, at: flush_workqueue+0xe8/0x13e0 kernel/workqueue.c:2658 but task is already holding lock: 00000000356a94f4 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:520 which lock already depends on the new lock. FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 1 the existing dependency chain (in reverse order) is: -> #3 (pernet_ops_rwsem){++++}: unregister_netdevice_notifier+0x7b/0x330 net/core/dev.c:1708 bcm_release+0x94/0x700 net/can/bcm.c:1525 __sock_release+0xcd/0x2a0 net/socket.c:579 sock_close+0x15/0x20 net/socket.c:1140 __fput+0x2ce/0x890 fs/file_table.c:278 task_work_run+0x148/0x1c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 CPU: 0 PID: 23832 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 entry_SYSCALL_64_after_hwframe+0x49/0xbe Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 -> #2 (&sb->s_type->i_mutex_key#13){+.+.}: Call Trace: inode_lock include/linux/fs.h:748 [inline] __sock_release+0x86/0x2a0 net/socket.c:578 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 sock_close+0x15/0x20 net/socket.c:1140 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __fput+0x2ce/0x890 fs/file_table.c:278 delayed_fput+0x56/0x70 fs/file_table.c:304 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 -> #1 ((delayed_fput_work).work){+.+.}: worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 -> #0 ((wq_completion)"events"){+.+.}: flush_workqueue+0x117/0x13e0 kernel/workqueue.c:2661 flush_scheduled_work include/linux/workqueue.h:599 [inline] tipc_exit_net+0x38/0x60 net/tipc/core.c:100 ops_exit_list+0xa5/0x150 net/core/net_namespace.c:153 cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:553 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 other info that might help us debug this: alloc_pages_vma+0xf2/0x780 mm/mempolicy.c:2161 Chain exists of: (wq_completion)"events" --> &sb->s_type->i_mutex_key#13 --> pernet_ops_rwsem shmem_alloc_page+0x11c/0x1f0 mm/shmem.c:1494 Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(pernet_ops_rwsem); shmem_alloc_and_acct_page+0x15a/0x850 mm/shmem.c:1519 lock(&sb->s_type->i_mutex_key#13); shmem_getpage_gfp+0x4e9/0x37f0 mm/shmem.c:1797 lock(pernet_ops_rwsem); lock((wq_completion)"events"); *** DEADLOCK *** 3 locks held by kworker/u4:0/7: #0: 000000006b8ae46c ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 00000000c9342181 (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 shmem_getpage mm/shmem.c:132 [inline] shmem_write_begin+0xff/0x1e0 mm/shmem.c:2446 #2: 00000000356a94f4 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:520 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170 stack backtrace: __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295 generic_file_write_iter+0x3f8/0x730 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x51b/0x770 fs/read_write.c:487 vfs_write+0x1f3/0x540 fs/read_write.c:549 ksys_pwrite64 fs/read_write.c:653 [inline] __do_sys_pwrite64 fs/read_write.c:663 [inline] __se_sys_pwrite64 fs/read_write.c:660 [inline] __x64_sys_pwrite64+0x1f7/0x250 fs/read_write.c:660 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x419777 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f22cd923f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 RDX: 000000000000012b RSI: 0000000020010000 RDI: 0000000000000004 RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Started in network mode Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_circular_bug.constprop.0.cold+0x2d7/0x41e kernel/locking/lockdep.c:1222 check_prev_add kernel/locking/lockdep.c:1866 [inline] check_prevs_add kernel/locking/lockdep.c:1979 [inline] validate_chain kernel/locking/lockdep.c:2420 [inline] __lock_acquire+0x30c9/0x3ff0 kernel/locking/lockdep.c:3416 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 Own node identity 9, cluster identity 4711 flush_workqueue+0x117/0x13e0 kernel/workqueue.c:2661 32-bit node address hash set to 9 flush_scheduled_work include/linux/workqueue.h:599 [inline] tipc_exit_net+0x38/0x60 net/tipc/core.c:100 ops_exit_list+0xa5/0x150 net/core/net_namespace.c:153 cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:553 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 audit: type=1804 audit(1624733693.090:4993): pid=23831 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir867782493/syzkaller.zKklat/567/bus" dev="sda1" ino=14979 res=1 device geneve2 entered promiscuous mode IPVS: ftp: loaded support on port[0] = 21 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 23892 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x3f/0x370 mm/slab.c:3557 radix_tree_node_alloc.constprop.0+0x1e4/0x320 lib/radix-tree.c:398 IPVS: ftp: loaded support on port[0] = 21 __radix_tree_create+0x314/0x540 lib/radix-tree.c:839 __radix_tree_insert+0xbb/0x5f0 lib/radix-tree.c:994 IPVS: ftp: loaded support on port[0] = 21 radix_tree_insert include/linux/radix-tree.h:300 [inline] shmem_add_to_page_cache+0x616/0xbb0 mm/shmem.c:629 IPVS: ftp: loaded support on port[0] = 21 shmem_getpage_gfp+0x2004/0x37f0 mm/shmem.c:1836 Started in network mode Own node identity 9, cluster identity 4711 shmem_getpage mm/shmem.c:132 [inline] shmem_write_begin+0xff/0x1e0 mm/shmem.c:2446 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170 32-bit node address hash set to 9 __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295 generic_file_write_iter+0x3f8/0x730 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x51b/0x770 fs/read_write.c:487 vfs_write+0x1f3/0x540 fs/read_write.c:549 ksys_pwrite64 fs/read_write.c:653 [inline] __do_sys_pwrite64 fs/read_write.c:663 [inline] __se_sys_pwrite64 fs/read_write.c:660 [inline] __x64_sys_pwrite64+0x1f7/0x250 fs/read_write.c:660 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x419777 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f22cd923f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 RDX: 000000000000012b RSI: 0000000020010000 RDI: 0000000000000004 RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 Started in network mode Own node identity 9, cluster identity 4711 32-bit node address hash set to 9 CPU: 0 PID: 23921 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 alloc_pages_vma+0xf2/0x780 mm/mempolicy.c:2161 shmem_alloc_page+0x11c/0x1f0 mm/shmem.c:1494 shmem_alloc_and_acct_page+0x15a/0x850 mm/shmem.c:1519 shmem_getpage_gfp+0x4e9/0x37f0 mm/shmem.c:1797 shmem_getpage mm/shmem.c:132 [inline] shmem_write_begin+0xff/0x1e0 mm/shmem.c:2446 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170 __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295 generic_file_write_iter+0x3f8/0x730 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x51b/0x770 fs/read_write.c:487 vfs_write+0x1f3/0x540 fs/read_write.c:549 ksys_pwrite64 fs/read_write.c:653 [inline] __do_sys_pwrite64 fs/read_write.c:663 [inline] __se_sys_pwrite64 fs/read_write.c:660 [inline] __x64_sys_pwrite64+0x1f7/0x250 fs/read_write.c:660 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x419777 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f22cd923f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 RDX: 0000000000000226 RSI: 0000000020010800 RDI: 0000000000000004 RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000100ea0 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000260 R15: 0000000000000004 Started in network mode Own node identity 9, cluster identity 4711 32-bit node address hash set to 9 device geneve2 entered promiscuous mode IPVS: ftp: loaded support on port[0] = 21 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 23996 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x3f/0x370 mm/slab.c:3557 radix_tree_node_alloc.constprop.0+0x1e4/0x320 lib/radix-tree.c:398 radix_tree_extend+0x191/0x4b0 lib/radix-tree.c:637 __radix_tree_create+0x448/0x540 lib/radix-tree.c:828 __radix_tree_insert+0xbb/0x5f0 lib/radix-tree.c:994 radix_tree_insert include/linux/radix-tree.h:300 [inline] shmem_add_to_page_cache+0x616/0xbb0 mm/shmem.c:629 shmem_getpage_gfp+0x2004/0x37f0 mm/shmem.c:1836 shmem_getpage mm/shmem.c:132 [inline] shmem_write_begin+0xff/0x1e0 mm/shmem.c:2446 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170 __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295 generic_file_write_iter+0x3f8/0x730 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x51b/0x770 fs/read_write.c:487 vfs_write+0x1f3/0x540 fs/read_write.c:549 ksys_pwrite64 fs/read_write.c:653 [inline] __do_sys_pwrite64 fs/read_write.c:663 [inline] __se_sys_pwrite64 fs/read_write.c:660 [inline] __x64_sys_pwrite64+0x1f7/0x250 fs/read_write.c:660 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x419777 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f22cd923f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 RDX: 0000000000000226 RSI: 0000000020010800 RDI: 0000000000000004 RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000100ea0 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000260 R15: 0000000000000004 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 24053 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 overlayfs: conflicting lowerdir path should_failslab+0x5/0x10 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x3f/0x370 mm/slab.c:3557 radix_tree_node_alloc.constprop.0+0x1e4/0x320 lib/radix-tree.c:398 __radix_tree_create+0x314/0x540 lib/radix-tree.c:839 __radix_tree_insert+0xbb/0x5f0 lib/radix-tree.c:994 overlayfs: workdir and upperdir must reside under the same mount radix_tree_insert include/linux/radix-tree.h:300 [inline] shmem_add_to_page_cache+0x616/0xbb0 mm/shmem.c:629 shmem_getpage_gfp+0x2004/0x37f0 mm/shmem.c:1836 shmem_getpage mm/shmem.c:132 [inline] shmem_write_begin+0xff/0x1e0 mm/shmem.c:2446 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170 __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295 generic_file_write_iter+0x3f8/0x730 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x51b/0x770 fs/read_write.c:487 vfs_write+0x1f3/0x540 fs/read_write.c:549 ksys_pwrite64 fs/read_write.c:653 [inline] __do_sys_pwrite64 fs/read_write.c:663 [inline] __se_sys_pwrite64 fs/read_write.c:660 [inline] __x64_sys_pwrite64+0x1f7/0x250 fs/read_write.c:660 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x419777 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f22cd923f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 RDX: 0000000000000226 RSI: 0000000020010800 RDI: 0000000000000004 RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000100ea0 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000260 R15: 0000000000000004 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 Left network mode FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 24085 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 alloc_pages_vma+0xf2/0x780 mm/mempolicy.c:2161 shmem_alloc_page+0x11c/0x1f0 mm/shmem.c:1494 shmem_alloc_and_acct_page+0x15a/0x850 mm/shmem.c:1519 shmem_getpage_gfp+0x4e9/0x37f0 mm/shmem.c:1797 IPVS: ftp: loaded support on port[0] = 21 shmem_getpage mm/shmem.c:132 [inline] shmem_write_begin+0xff/0x1e0 mm/shmem.c:2446 generic_perform_write+0x1f8/0x4d0 mm/filemap.c:3170 __generic_file_write_iter+0x24b/0x610 mm/filemap.c:3295 generic_file_write_iter+0x3f8/0x730 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x51b/0x770 fs/read_write.c:487 vfs_write+0x1f3/0x540 fs/read_write.c:549 ksys_pwrite64 fs/read_write.c:653 [inline] __do_sys_pwrite64 fs/read_write.c:663 [inline] __se_sys_pwrite64 fs/read_write.c:660 [inline] __x64_sys_pwrite64+0x1f7/0x250 fs/read_write.c:660 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x419777 Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b RSP: 002b:00007f22cd923f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 RDX: 0000000000000226 RSI: 0000000020010800 RDI: 0000000000000004 RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000100ea0 R11: 0000000000000293 R12: 0000000000000004 R13: 0000000000000004 R14: 0000000020000260 R15: 0000000000000004 kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 CPU: 1 PID: 24199 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 getname_flags+0xce/0x590 fs/namei.c:140 do_sys_open+0x26c/0x520 fs/open.c:1079 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4196c4 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f22cd923ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 RDX: 0000000000000002 RSI: 00007f22cd924000 RDI: 00000000ffffff9c RBP: 00007f22cd924000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 00000000200002a8 R15: 0000000000000007 Started in network mode Own node identity 9, cluster identity 4711 32-bit node address hash set to 9 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 24256 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 cache_alloc_refill+0x273/0x340 mm/slab.c:3049 ____cache_alloc mm/slab.c:3132 [inline] __do_cache_alloc mm/slab.c:3354 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x346/0x370 mm/slab.c:3557 getname_flags+0xce/0x590 fs/namei.c:140 do_sys_open+0x26c/0x520 fs/open.c:1079 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4196c4 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f22cd923ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 RDX: 0000000000000002 RSI: 00007f22cd924000 RDI: 00000000ffffff9c RBP: 00007f22cd924000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 00000000200002a8 R15: 0000000000000007 IPVS: ftp: loaded support on port[0] = 21 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Left network mode IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 CPU: 1 PID: 24280 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 kmem_cache_zalloc include/linux/slab.h:699 [inline] __alloc_file+0x21/0x330 fs/file_table.c:100 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 path_openat+0xe9/0x2df0 fs/namei.c:3526 do_filp_open+0x18c/0x3f0 fs/namei.c:3567 do_sys_open+0x3b3/0x520 fs/open.c:1085 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4196c4 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f22cd923ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 RDX: 0000000000000002 RSI: 00007f22cd924000 RDI: 00000000ffffff9c RBP: 00007f22cd924000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 00000000200002a8 R15: 0000000000000007 IPVS: ftp: loaded support on port[0] = 21 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 CPU: 1 PID: 24372 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc_trace+0x284/0x380 mm/slab.c:3623 kmalloc include/linux/slab.h:515 [inline] kzalloc include/linux/slab.h:709 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x394/0xad0 security/apparmor/lsm.c:438 security_file_alloc+0x40/0x90 security/security.c:880 __alloc_file+0xc9/0x330 fs/file_table.c:105 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 path_openat+0xe9/0x2df0 fs/namei.c:3526 do_filp_open+0x18c/0x3f0 fs/namei.c:3567 do_sys_open+0x3b3/0x520 fs/open.c:1085 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4196c4 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f22cd923ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 RDX: 0000000000000002 RSI: 00007f22cd924000 RDI: 00000000ffffff9c RBP: 00007f22cd924000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 00000000200002a8 R15: 0000000000000007 Started in network mode Own node identity 9, cluster identity 4711 32-bit node address hash set to 9 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 24449 Comm: syz-executor.3 Not tainted 4.19.195-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 __d_alloc+0x2b/0xa10 fs/dcache.c:1612 d_alloc+0x4a/0x230 fs/dcache.c:1696 d_alloc_parallel+0xeb/0x19e0 fs/dcache.c:2443 lookup_open+0x4ea/0x1a20 fs/namei.c:3148 IPVS: ftp: loaded support on port[0] = 21 do_last fs/namei.c:3327 [inline] path_openat+0x1804/0x2df0 fs/namei.c:3537 do_filp_open+0x18c/0x3f0 fs/namei.c:3567 do_sys_open+0x3b3/0x520 fs/open.c:1085 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4196c4 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007f22cd923ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 Started in network mode RDX: 0000000000000002 RSI: 00007f22cd924000 RDI: 00000000ffffff9c RBP: 00007f22cd924000 R08: 0000000000000000 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 0000000000000004 R14: 00000000200002a8 R15: 0000000000000007 Own node identity 9, cluster identity 4711 32-bit node address hash set to 9 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 Left network mode IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21