audit: type=1800 audit(1672331420.468:77): pid=12430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=14084 res=0 REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. ====================================================== WARNING: possible circular locking dependency detected 4.19.211-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.5/12292 is trying to acquire lock: 00000000bb3ada6e (sb_writers#22){.+.+}, at: sb_start_write include/linux/fs.h:1579 [inline] 00000000bb3ada6e (sb_writers#22){.+.+}, at: mnt_want_write_file+0x63/0x1d0 fs/namespace.c:418 but task is already holding lock: 000000002eeb4756 (&sbi->lock){+.+.}, at: reiserfs_write_lock+0x75/0xf0 fs/reiserfs/lock.c:27 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&sbi->lock){+.+.}: reiserfs_write_lock+0x75/0xf0 fs/reiserfs/lock.c:27 reiserfs_lookup+0x171/0x490 fs/reiserfs/namei.c:363 __lookup_slow+0x246/0x4a0 fs/namei.c:1672 lookup_one_len+0x163/0x190 fs/namei.c:2544 reiserfs_lookup_privroot+0x92/0x280 fs/reiserfs/xattr.c:970 reiserfs_fill_super+0x1f12/0x2d80 fs/reiserfs/super.c:2187 mount_bdev+0x2fc/0x3b0 fs/super.c:1158 mount_fs+0xa3/0x310 fs/super.c:1261 vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961 vfs_kern_mount fs/namespace.c:951 [inline] do_new_mount fs/namespace.c:2492 [inline] do_mount+0x115c/0x2f50 fs/namespace.c:2822 ksys_mount+0xcf/0x130 fs/namespace.c:3038 __do_sys_mount fs/namespace.c:3052 [inline] __se_sys_mount fs/namespace.c:3049 [inline] __x64_sys_mount+0xba/0x150 fs/namespace.c:3049 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe -> #1 (&type->i_mutex_dir_key#10){+.+.}: inode_lock include/linux/fs.h:748 [inline] do_last fs/namei.c:3324 [inline] path_openat+0x1071/0x2df0 fs/namei.c:3537 do_filp_open+0x18c/0x3f0 fs/namei.c:3567 do_sys_open+0x3b3/0x520 fs/open.c:1085 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe -> #0 (sb_writers#22){.+.+}: percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:36 [inline] percpu_down_read include/linux/percpu-rwsem.h:59 [inline] __sb_start_write+0x6e/0x2a0 fs/super.c:1366 sb_start_write include/linux/fs.h:1579 [inline] mnt_want_write_file+0x63/0x1d0 fs/namespace.c:418 reiserfs_ioctl+0x1a7/0x9a0 fs/reiserfs/ioctl.c:110 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe other info that might help us debug this: Chain exists of: sb_writers#22 --> &type->i_mutex_dir_key#10 --> &sbi->lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&sbi->lock); lock(&type->i_mutex_dir_key#10); lock(&sbi->lock); lock(sb_writers#22); *** DEADLOCK *** 1 lock held by syz-executor.5/12292: #0: 000000002eeb4756 (&sbi->lock){+.+.}, at: reiserfs_write_lock+0x75/0xf0 fs/reiserfs/lock.c:27 stack backtrace: CPU: 1 PID: 12292 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_circular_bug.constprop.0.cold+0x2d7/0x41e kernel/locking/lockdep.c:1222 check_prev_add kernel/locking/lockdep.c:1866 [inline] check_prevs_add kernel/locking/lockdep.c:1979 [inline] validate_chain kernel/locking/lockdep.c:2420 [inline] __lock_acquire+0x30c9/0x3ff0 kernel/locking/lockdep.c:3416 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:36 [inline] percpu_down_read include/linux/percpu-rwsem.h:59 [inline] __sb_start_write+0x6e/0x2a0 fs/super.c:1366 sb_start_write include/linux/fs.h:1579 [inline] mnt_want_write_file+0x63/0x1d0 fs/namespace.c:418 reiserfs_ioctl+0x1a7/0x9a0 fs/reiserfs/ioctl.c:110 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:501 [inline] do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f3877e370a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f38763a9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3877f56f80 RCX: 00007f3877e370a9 RDX: 0000000020000000 RSI: 0000000040087602 RDI: 0000000000000005 RBP: 00007f3877e92ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe04a4622f R14: 00007f38763a9300 R15: 0000000000022000 32-bit node address hash set to 4ef0464d netlink: 'syz-executor.4': attribute type 16 has an invalid length. Enabling of bearer rejected, already enabled IPVS: ftp: loaded support on port[0] = 21 netlink: 'syz-executor.4': attribute type 16 has an invalid length. REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal IPVS: ftp: loaded support on port[0] = 21 REISERFS (device loop5): using ordered data mode reiserfs: using flush barriers REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 REISERFS (device loop5): checking transaction log (loop5) hfsplus: unable to parse mount options REISERFS (device loop5): Using r5 hash to sort names REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. EXT4-fs warning (device sda1): ext4_ioctl:814: Setting inode version is not supported with metadata_csum enabled. REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal REISERFS (device loop5): using ordered data mode reiserfs: using flush barriers REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 REISERFS (device loop5): checking transaction log (loop5) UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) REISERFS (device loop5): Using r5 hash to sort names REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. loop1: p1 p2 p3 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) device bond1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready hfsplus: unable to parse mount options UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 8021q: adding VLAN 0 to HW filter on device bond1 caif:caif_disconnect_client(): nothing to disconnect caif:caif_disconnect_client(): nothing to disconnect UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) caif:caif_disconnect_client(): nothing to disconnect loop1: p1 p2 p3 loop3: p1 p2 p3 loop5: p1 p2 p3 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) loop3: p1 p2 p3 loop1: p1 p2 p3 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) loop2: p1 p2 p3 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 1 CPU: 0 PID: 12988 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2ab/0x3c0 mm/slab.c:3736 kmalloc include/linux/slab.h:520 [inline] __do_sys_memfd_create mm/memfd.c:295 [inline] __se_sys_memfd_create+0xf8/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f64d9d690a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f64d82daf38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f64d9d690a9 RDX: 00007f64d82dafdc RSI: 0000000000000000 RDI: 00007f64d9dc3e81 RBP: 0000000000000bee R08: 00007f64d82dae20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f64d82dafdc R14: 00007f64d82dafe0 R15: 0000000020000cc0 device bond2 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready 8021q: adding VLAN 0 to HW filter on device bond2 loop5: p1 p2 p3 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 caif:caif_disconnect_client(): nothing to disconnect CPU: 1 PID: 13038 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 shmem_alloc_inode+0x18/0x40 mm/shmem.c:3609 alloc_inode+0x5d/0x180 fs/inode.c:211 new_inode_pseudo fs/inode.c:911 [inline] new_inode+0x1d/0xf0 fs/inode.c:940 shmem_get_inode+0x96/0x8d0 mm/shmem.c:2196 __shmem_file_setup.part.0+0x7a/0x2b0 mm/shmem.c:3965 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f64d9d690a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f64d82daf38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f64d9d690a9 RDX: 00007f64d82dafdc RSI: 0000000000000000 RDI: 00007f64d9dc3e81 RBP: 0000000000000bee R08: 00007f64d82dae20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f64d82dafdc R14: 00007f64d82dafe0 R15: 0000000020000cc0 loop2: p1 p2 p3 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 13058 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 __d_alloc+0x2b/0xa10 fs/dcache.c:1612 d_alloc_pseudo+0x19/0x70 fs/dcache.c:1743 alloc_file_pseudo+0xc6/0x250 fs/file_table.c:224 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f64d9d690a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f64d82daf38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f64d9d690a9 RDX: 00007f64d82dafdc RSI: 0000000000000000 RDI: 00007f64d9dc3e81 RBP: 0000000000000bee R08: 00007f64d82dae20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f64d82dafdc R14: 00007f64d82dafe0 R15: 0000000020000cc0 device bond3 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready 8021q: adding VLAN 0 to HW filter on device bond3 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 caif:caif_disconnect_client(): nothing to disconnect CPU: 0 PID: 13106 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 kmem_cache_zalloc include/linux/slab.h:699 [inline] __alloc_file+0x21/0x340 fs/file_table.c:100 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 alloc_file+0x5e/0x4d0 fs/file_table.c:192 alloc_file_pseudo+0x165/0x250 fs/file_table.c:231 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f64d9d690a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f64d82daf38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f64d9d690a9 RDX: 00007f64d82dafdc RSI: 0000000000000000 RDI: 00007f64d9dc3e81 RBP: 0000000000000bee R08: 00007f64d82dae20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f64d82dafdc R14: 00007f64d82dafe0 R15: 0000000020000cc0 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 13135 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2ab/0x3c0 mm/slab.c:3736 kmalloc include/linux/slab.h:520 [inline] __do_sys_memfd_create mm/memfd.c:295 [inline] __se_sys_memfd_create+0xf8/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f85e17d70a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f85dfd48f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f85e17d70a9 RDX: 00007f85dfd48fdc RSI: 0000000000000000 RDI: 00007f85e1831e81 RBP: 0000000000000bee R08: 00007f85dfd48e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f85dfd48fdc R14: 00007f85dfd48fe0 R15: 0000000020000cc0 CPU: 0 PID: 13129 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc_trace+0x284/0x380 mm/slab.c:3623 kmalloc include/linux/slab.h:515 [inline] kzalloc include/linux/slab.h:709 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x394/0xad0 security/apparmor/lsm.c:438 security_file_alloc+0x40/0x90 security/security.c:880 __alloc_file+0xd8/0x340 fs/file_table.c:105 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 alloc_file+0x5e/0x4d0 fs/file_table.c:192 alloc_file_pseudo+0x165/0x250 fs/file_table.c:231 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f64d9d690a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f64d82daf38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f64d9d690a9 RDX: 00007f64d82dafdc RSI: 0000000000000000 RDI: 00007f64d9dc3e81 RBP: 0000000000000bee R08: 00007f64d82dae20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f64d82dafdc R14: 00007f64d82dafe0 R15: 0000000020000cc0 device bond4 entered promiscuous mode loop5: p1 p2 p3 IPv6: ADDRCONF(NETDEV_UP): bond4: link is not ready 8021q: adding VLAN 0 to HW filter on device bond4 loop2: p1 p2 p3 caif:caif_disconnect_client(): nothing to disconnect FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 13188 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 vm_area_alloc+0x1c/0x110 kernel/fork.c:321 mmap_region+0xa2a/0x16b0 mm/mmap.c:1727 do_mmap+0x8e8/0x1080 mm/mmap.c:1530 do_mmap_pgoff include/linux/mm.h:2329 [inline] vm_mmap_pgoff+0x197/0x200 mm/util.c:357 ksys_mmap_pgoff+0x45f/0x5a0 mm/mmap.c:1580 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f64d9d690f2 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64 RSP: 002b:00007f64d82daf28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007f64d9d690f2 RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000bec R13: 00007f64d82dafdc R14: 00007f64d82dafe0 R15: 0000000020000cc2 CPU: 0 PID: 13195 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 device bond5 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond5: link is not ready __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 shmem_alloc_inode+0x18/0x40 mm/shmem.c:3609 8021q: adding VLAN 0 to HW filter on device bond5 alloc_inode+0x5d/0x180 fs/inode.c:211 new_inode_pseudo fs/inode.c:911 [inline] new_inode+0x1d/0xf0 fs/inode.c:940 shmem_get_inode+0x96/0x8d0 mm/shmem.c:2196 __shmem_file_setup.part.0+0x7a/0x2b0 mm/shmem.c:3965 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f85e17d70a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f85dfd48f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f85e17d70a9 RDX: 00007f85dfd48fdc RSI: 0000000000000000 RDI: 00007f85e1831e81 RBP: 0000000000000bee R08: 00007f85dfd48e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f85dfd48fdc R14: 00007f85dfd48fe0 R15: 0000000020000cc0 caif:caif_disconnect_client(): nothing to disconnect FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 1 CPU: 0 PID: 13236 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] pte_alloc_one+0x16/0x190 arch/x86/mm/pgtable.c:35 __pte_alloc+0x21/0x340 mm/memory.c:665 do_anonymous_page+0xff4/0x1be0 mm/memory.c:3282 handle_pte_fault mm/memory.c:4173 [inline] __handle_mm_fault+0x227a/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x7f64d9d06197 Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 RSP: 002b:00007f64d82da600 EFLAGS: 00010246 RAX: 0000000000000001 RBX: 00007f64d82da660 RCX: 0000000000000001 RDX: 0000000000000101 RSI: 00007f64cfebb000 RDI: 00007f64d82da700 RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 00007f64d82da670 R12: 00007f64d82da670 R13: 00007f64d82da700 R14: 0000000000000001 R15: 0000000000000000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 syz-executor.1 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 syz-executor.1 cpuset=/ mems_allowed=0-1 CPU: 0 PID: 13244 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 __d_alloc+0x2b/0xa10 fs/dcache.c:1612 d_alloc_pseudo+0x19/0x70 fs/dcache.c:1743 alloc_file_pseudo+0xc6/0x250 fs/file_table.c:224 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f85e17d70a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f85dfd48f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f85e17d70a9 RDX: 00007f85dfd48fdc RSI: 0000000000000000 RDI: 00007f85e1831e81 RBP: 0000000000000bee R08: 00007f85dfd48e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f85dfd48fdc R14: 00007f85dfd48fe0 R15: 0000000020000cc0 CPU: 1 PID: 13236 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 device bond6 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond6: link is not ready pagefault_out_of_memory+0x102/0x120 mm/oom_kill.c:1157 mm_fault_error+0x106/0x390 arch/x86/mm/fault.c:1040 __do_page_fault+0xc34/0xd60 arch/x86/mm/fault.c:1440 8021q: adding VLAN 0 to HW filter on device bond6 caif:caif_disconnect_client(): nothing to disconnect page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x7f64d9d06197 Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 RSP: 002b:00007f64d82da600 EFLAGS: 00010246 RAX: 0000000000000001 RBX: 00007f64d82da660 RCX: 0000000000000001 RDX: 0000000000000101 RSI: 00007f64cfebb000 RDI: 00007f64d82da700 RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 00007f64d82da670 R12: 00007f64d82da670 R13: 00007f64d82da700 R14: 0000000000000001 R15: 0000000000000000 Mem-Info: active_anon:311695 inactive_anon:6243 isolated_anon:0 active_file:5613 inactive_file:11761 isolated_file:0 unevictable:0 dirty:100 writeback:0 unstable:0 slab_reclaimable:18680 slab_unreclaimable:127008 mapped:30815 shmem:9310 pagetables:1532 bounce:0 free:1178301 free_pcp:424 free_cma:0 loop5: p1 p2 p3 Node 0 active_anon:1246688kB inactive_anon:24072kB active_file:22332kB inactive_file:47044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123260kB dirty:400kB writeback:0kB shmem:36240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1136640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 13299 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 kmem_cache_zalloc include/linux/slab.h:699 [inline] __alloc_file+0x21/0x340 fs/file_table.c:100 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 alloc_file+0x5e/0x4d0 fs/file_table.c:192 alloc_file_pseudo+0x165/0x250 fs/file_table.c:231 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f85e17d70a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f85dfd48f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f85e17d70a9 RDX: 00007f85dfd48fdc RSI: 0000000000000000 RDI: 00007f85e1831e81 RBP: 0000000000000bee R08: 00007f85dfd48e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f85dfd48fdc R14: 00007f85dfd48fe0 R15: 0000000020000cc0 Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no device bond7 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond7: link is not ready 8021q: adding VLAN 0 to HW filter on device bond7 loop2: p1 p2 p3 loop5: p1 p2 p3 Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB caif:caif_disconnect_client(): nothing to disconnect lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:663344kB min:35996kB low:44992kB high:53988kB active_anon:1244868kB inactive_anon:24972kB active_file:22332kB inactive_file:47044kB unevictable:0kB writepending:400kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:9152kB pagetables:6276kB bounce:0kB free_pcp:1560kB local_pcp:1076kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:4039220kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB loop5: p1 p2 p3 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 DMA32: 7165*4kB (UME) 588*8kB (UME) 695*16kB (UME) 449*32kB (UME) 502*64kB (UM) 250*128kB (UME) 101*256kB (UME) 39*512kB (UM) 11*1024kB (UME) 7*2048kB (UM) 113*4096kB (UM) = 657252kB FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 device bond8 entered promiscuous mode CPU: 0 PID: 13400 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 IPv6: ADDRCONF(NETDEV_UP): bond8: link is not ready Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 Node 1 Normal: 95*4kB (UME) 415*8kB (UME) 276*16kB (UME) 90*32kB (UME) 21*64kB (UM) 20*128kB (UME) 10*256kB (U) 7*512kB (UME) 2*1024kB (M) 1*2048kB (U) 980*4096kB (M) = 4039220kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 8021q: adding VLAN 0 to HW filter on device bond8 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 cache_alloc_refill+0x273/0x340 mm/slab.c:3049 ____cache_alloc mm/slab.c:3132 [inline] __do_cache_alloc mm/slab.c:3354 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x346/0x370 mm/slab.c:3557 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB kmem_cache_zalloc include/linux/slab.h:699 [inline] __alloc_file+0x21/0x340 fs/file_table.c:100 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 alloc_file+0x5e/0x4d0 fs/file_table.c:192 26719 total pagecache pages alloc_file_pseudo+0x165/0x250 fs/file_table.c:231 0 pages in swap cache __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 Swap cache stats: add 0, delete 0, find 0/0 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 Free swap = 0kB do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 Total swap = 0kB entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f85e17d70a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 2097051 pages RAM RSP: 002b:00007f85dfd48f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f85e17d70a9 RDX: 00007f85dfd48fdc RSI: 0000000000000000 RDI: 00007f85e1831e81 RBP: 0000000000000bee R08: 00007f85dfd48e20 R09: ffffffffffffffff 0 pages HighMem/MovableOnly R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f85dfd48fdc R14: 00007f85dfd48fe0 R15: 0000000020000cc0 caif:caif_disconnect_client(): nothing to disconnect 369649 pages reserved UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 0 pages cma reserved Out of memory (oom_kill_allocating_task): Kill process 13236 (syz-executor.1) score 0 or sacrifice child Killed process 13235 (syz-executor.1) total-vm:195848kB, anon-rss:2516kB, file-rss:14336kB, shmem-rss:0kB oom_reaper: reaped process 13235 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) device bond9 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond9: link is not ready FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 8021q: adding VLAN 0 to HW filter on device bond9 CPU: 0 PID: 13470 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 caif:caif_disconnect_client(): nothing to disconnect Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc_trace+0x284/0x380 mm/slab.c:3623 kmalloc include/linux/slab.h:515 [inline] kzalloc include/linux/slab.h:709 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x394/0xad0 security/apparmor/lsm.c:438 security_file_alloc+0x40/0x90 security/security.c:880 __alloc_file+0xd8/0x340 fs/file_table.c:105 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 alloc_file+0x5e/0x4d0 fs/file_table.c:192 alloc_file_pseudo+0x165/0x250 fs/file_table.c:231 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f85e17d70a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f85dfd48f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000bee RCX: 00007f85e17d70a9 RDX: 00007f85dfd48fdc RSI: 0000000000000000 RDI: 00007f85e1831e81 RBP: 0000000000000bee R08: 00007f85dfd48e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000c00 R13: 00007f85dfd48fdc R14: 00007f85dfd48fe0 R15: 0000000020000cc0 loop2: p1 p2 p3 loop5: p1 p2 p3 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 13494 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 device bond10 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond10: link is not ready should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 8021q: adding VLAN 0 to HW filter on device bond10 caif:caif_disconnect_client(): nothing to disconnect alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] pte_alloc_one+0x16/0x190 arch/x86/mm/pgtable.c:35 __pte_alloc+0x21/0x340 mm/memory.c:665 do_anonymous_page+0xff4/0x1be0 mm/memory.c:3282 handle_pte_fault mm/memory.c:4173 [inline] __handle_mm_fault+0x227a/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x7f85e1774197 Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 RSP: 002b:00007f85dfd48600 EFLAGS: 00010246 RAX: 0000000000000001 RBX: 00007f85dfd48660 RCX: 0000000000000001 RDX: 0000000000000101 RSI: 00007f85d7929000 RDI: 00007f85dfd48700 RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 00007f85dfd48670 R12: 00007f85dfd48670 R13: 00007f85dfd48700 R14: 0000000000000001 R15: 0000000000000000 syz-executor.0 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 syz-executor.0 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 13494 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 dump_header+0x15d/0xc3f mm/oom_kill.c:443 device bond11 entered promiscuous mode oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 IPv6: ADDRCONF(NETDEV_UP): bond11: link is not ready out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 8021q: adding VLAN 0 to HW filter on device bond11 pagefault_out_of_memory+0x102/0x120 mm/oom_kill.c:1157 mm_fault_error+0x106/0x390 arch/x86/mm/fault.c:1040 __do_page_fault+0xc34/0xd60 arch/x86/mm/fault.c:1440 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x7f85e1774197 Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 RSP: 002b:00007f85dfd48600 EFLAGS: 00010246 RAX: 0000000000000001 RBX: 00007f85dfd48660 RCX: 0000000000000001 RDX: 0000000000000101 RSI: 00007f85d7929000 RDI: 00007f85dfd48700 RBP: 0000000000000102 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 00007f85dfd48670 R12: 00007f85dfd48670 R13: 00007f85dfd48700 R14: 0000000000000001 R15: 0000000000000000 Mem-Info: active_anon:310136 inactive_anon:6495 isolated_anon:0 active_file:5622 inactive_file:11781 isolated_file:0 unevictable:0 dirty:118 writeback:0 unstable:0 slab_reclaimable:18545 slab_unreclaimable:127559 mapped:30844 shmem:9572 pagetables:1519 bounce:0 free:1178475 free_pcp:543 free_cma:0 Node 0 active_anon:1240444kB inactive_anon:25980kB active_file:22368kB inactive_file:47124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123376kB dirty:472kB writeback:0kB shmem:38288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1140736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:660948kB min:35996kB low:44992kB high:53988kB active_anon:1240444kB inactive_anon:25980kB active_file:22368kB inactive_file:47124kB unevictable:0kB writepending:472kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:9120kB pagetables:6076kB bounce:0kB free_pcp:2092kB local_pcp:1032kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB device bond12 entered promiscuous mode lowmem_reserve[]: 0 0 0 0 0 IPv6: ADDRCONF(NETDEV_UP): bond12: link is not ready Node 1 Normal free:4039220kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 8021q: adding VLAN 0 to HW filter on device bond12 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB Node 0 DMA32: 7050*4kB (UME) 778*8kB (UME) 721*16kB (UME) 473*32kB (UME) 433*64kB (UM) 251*128kB (UME) 101*256kB (UME) 39*512kB (UM) 11*1024kB (UME) 11*2048kB (UM) 113*4096kB (UM) = 663400kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 95*4kB (UME) 415*8kB (UME) 276*16kB (UME) 90*32kB (UME) 21*64kB (UM) 20*128kB (UME) 10*256kB (U) 7*512kB (UME) 2*1024kB (M) 1*2048kB (U) 980*4096kB (M) = 4039220kB UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB device bond13 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond13: link is not ready Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 8021q: adding VLAN 0 to HW filter on device bond13 loop5: p1 p2 p3 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 26987 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 2097051 pages RAM loop2: p1 p2 p3 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved Out of memory (oom_kill_allocating_task): Kill process 13494 (syz-executor.0) score 0 or sacrifice child Killed process 13479 (syz-executor.0) total-vm:195848kB, anon-rss:2516kB, file-rss:14336kB, shmem-rss:0kB loop5: p1 p2 p3 loop5: p1 p2 p3 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) device bond14 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond14: link is not ready 8021q: adding VLAN 0 to HW filter on device bond14 caif:caif_disconnect_client(): nothing to disconnect loop2: p1 p2 p3 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) loop5: p1 p2 p3 UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) device bond15 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond15: link is not ready