FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 ============================= CPU: 1 PID: 32586 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 WARNING: suspicious RCU usage Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 4.14.307-syzkaller #0 Not tainted slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] get_empty_filp+0x86/0x3f0 fs/file_table.c:123 alloc_file+0x23/0x440 fs/file_table.c:164 sock_alloc_file+0x113/0x2e0 net/socket.c:416 ----------------------------- SYSC_socketpair net/socket.c:1411 [inline] SyS_socketpair+0x20c/0x480 net/socket.c:1366 net/tipc/bearer.c:177 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f86590690f9 2 locks held by syz-executor.2/32585: RSP: 002b:00007f86575db168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 00007f8659188f80 RCX: 00007f86590690f9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 RBP: 00007f86575db1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffe68aa5df R14: 00007f86575db300 R15: 0000000000022000 #0: (cb_lock){++++}, at: [] genl_rcv+0x15/0x40 net/netlink/genetlink.c:635 #1: (genl_mutex){+.+.}, at: [] genl_lock net/netlink/genetlink.c:33 [inline] #1: (genl_mutex){+.+.}, at: [] genl_rcv_msg+0x112/0x140 net/netlink/genetlink.c:623 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 stack backtrace: CPU: 1 PID: 32609 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] kzalloc include/linux/slab.h:661 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x129/0x800 security/apparmor/lsm.c:431 security_file_alloc+0x66/0xa0 security/security.c:874 get_empty_filp+0x16b/0x3f0 fs/file_table.c:129 alloc_file+0x23/0x440 fs/file_table.c:164 sock_alloc_file+0x113/0x2e0 net/socket.c:416 SYSC_socketpair net/socket.c:1411 [inline] SyS_socketpair+0x20c/0x480 net/socket.c:1366 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f86590690f9 RSP: 002b:00007f86575db168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 00007f8659188f80 RCX: 00007f86590690f9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 RBP: 00007f86575db1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe68aa5df R14: 00007f86575db300 R15: 0000000000022000 CPU: 0 PID: 32585 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 tipc_bearer_find+0x1ff/0x2f0 net/tipc/bearer.c:177 tipc_nl_compat_link_set+0x40b/0xb90 net/tipc/netlink_compat.c:807 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __tipc_nl_compat_doit net/tipc/netlink_compat.c:316 [inline] tipc_nl_compat_doit+0x192/0x5d0 net/tipc/netlink_compat.c:364 tipc_nl_compat_handle net/tipc/netlink_compat.c:1215 [inline] tipc_nl_compat_recv+0xa0b/0xae0 net/tipc/netlink_compat.c:1297 genl_family_rcv_msg+0x572/0xb20 net/netlink/genetlink.c:600 genl_rcv_msg+0xaf/0x140 net/netlink/genetlink.c:625 netlink_rcv_skb+0x125/0x390 net/netlink/af_netlink.c:2461 genl_rcv+0x24/0x40 net/netlink/genetlink.c:636 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline] netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1328 netlink_sendmsg+0x651/0xbc0 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062 __sys_sendmsg+0xa3/0x120 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0x27/0x40 net/socket.c:2103 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f338b4a90f9 RSP: 002b:00007f3389a1b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f338b5c8f80 RCX: 00007f338b4a90f9 RDX: 0000000000040000 RSI: 0000000020000400 RDI: 0000000000000003 RBP: 00007f338b504ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffac48b7af R14: 00007f3389a1b300 R15: 0000000000022000 CPU: 1 PID: 32613 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 __d_alloc+0x2a/0xa20 fs/dcache.c:1623 sock_alloc_file+0xc8/0x2e0 net/socket.c:409 SYSC_socketpair net/socket.c:1417 [inline] SyS_socketpair+0x22e/0x480 net/socket.c:1366 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f86590690f9 RSP: 002b:00007f86575db168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 00007f8659188f80 RCX: 00007f86590690f9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 RBP: 00007f86575db1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe68aa5df R14: 00007f86575db300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 32624 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] get_empty_filp+0x86/0x3f0 fs/file_table.c:123 alloc_file+0x23/0x440 fs/file_table.c:164 sock_alloc_file+0x113/0x2e0 net/socket.c:416 SYSC_socketpair net/socket.c:1417 [inline] SyS_socketpair+0x22e/0x480 net/socket.c:1366 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f86590690f9 RSP: 002b:00007f86575db168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 00007f8659188f80 RCX: 00007f86590690f9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 RBP: 00007f86575db1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe68aa5df R14: 00007f86575db300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 32662 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] kzalloc include/linux/slab.h:661 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x129/0x800 security/apparmor/lsm.c:431 security_file_alloc+0x66/0xa0 security/security.c:874 get_empty_filp+0x16b/0x3f0 fs/file_table.c:129 alloc_file+0x23/0x440 fs/file_table.c:164 sock_alloc_file+0x113/0x2e0 net/socket.c:416 SYSC_socketpair net/socket.c:1417 [inline] SyS_socketpair+0x22e/0x480 net/socket.c:1366 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f86590690f9 RSP: 002b:00007f86575db168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 00007f8659188f80 RCX: 00007f86590690f9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 RBP: 00007f86575db1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007fffe68aa5df R14: 00007f86575db300 R15: 0000000000022000 netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. nla_parse: 24 callbacks suppressed netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'.