device syz_tun entered promiscuous mode device syz_tun left promiscuous mode IPVS: ftp: loaded support on port[0] = 21 ntfs: volume version 3.1. ====================================================== WARNING: possible circular locking dependency detected 4.19.211-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.0/16697 is trying to acquire lock: 000000006771b0ed (&ni->mrec_lock){+.+.}, at: map_mft_record+0x3c/0xc70 fs/ntfs/mft.c:168 but task is already holding lock: 00000000f82522e9 (&rl->lock){++++}, at: ntfs_truncate+0x1a2/0x2820 fs/ntfs/inode.c:2390 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (&rl->lock){++++}: ntfs_read_block fs/ntfs/aops.c:265 [inline] ntfs_readpage+0x1909/0x21b0 fs/ntfs/aops.c:452 do_read_cache_page+0x533/0x1170 mm/filemap.c:2828 read_mapping_page include/linux/pagemap.h:402 [inline] ntfs_map_page fs/ntfs/aops.h:89 [inline] ntfs_sync_mft_mirror+0x24f/0x1d00 fs/ntfs/mft.c:494 write_mft_record_nolock+0x13d2/0x16c0 fs/ntfs/mft.c:801 write_mft_record fs/ntfs/mft.h:109 [inline] __ntfs_write_inode+0x609/0xe10 fs/ntfs/inode.c:3064 write_inode fs/fs-writeback.c:1244 [inline] __writeback_single_inode+0x733/0x11d0 fs/fs-writeback.c:1442 writeback_sb_inodes+0x537/0xef0 fs/fs-writeback.c:1647 wb_writeback+0x28d/0xcc0 fs/fs-writeback.c:1820 wb_do_writeback fs/fs-writeback.c:1965 [inline] wb_workfn+0x29b/0x1250 fs/fs-writeback.c:2006 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 -> #0 (&ni->mrec_lock){+.+.}: __mutex_lock_common kernel/locking/mutex.c:937 [inline] __mutex_lock+0xd7/0x1190 kernel/locking/mutex.c:1078 map_mft_record+0x3c/0xc70 fs/ntfs/mft.c:168 ntfs_truncate+0x202/0x2820 fs/ntfs/inode.c:2395 ntfs_truncate_vfs fs/ntfs/inode.c:2875 [inline] ntfs_setattr+0x1b6/0x620 fs/ntfs/inode.c:2925 notify_change+0x70b/0xfc0 fs/attr.c:334 do_truncate+0x134/0x1f0 fs/open.c:63 handle_truncate fs/namei.c:3009 [inline] do_last fs/namei.c:3427 [inline] path_openat+0x2308/0x2df0 fs/namei.c:3537 do_filp_open+0x18c/0x3f0 fs/namei.c:3567 do_sys_open+0x3b3/0x520 fs/open.c:1085 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&rl->lock); lock(&ni->mrec_lock); lock(&rl->lock); lock(&ni->mrec_lock); *** DEADLOCK *** 3 locks held by syz-executor.0/16697: #0: 0000000011551857 (sb_writers#28){.+.+}, at: sb_start_write include/linux/fs.h:1579 [inline] #0: 0000000011551857 (sb_writers#28){.+.+}, at: mnt_want_write+0x3a/0xb0 fs/namespace.c:360 #1: 00000000fcb9a3ea (&sb->s_type->i_mutex_key#34){+.+.}, at: inode_lock include/linux/fs.h:748 [inline] #1: 00000000fcb9a3ea (&sb->s_type->i_mutex_key#34){+.+.}, at: do_truncate+0x125/0x1f0 fs/open.c:61 #2: 00000000f82522e9 (&rl->lock){++++}, at: ntfs_truncate+0x1a2/0x2820 fs/ntfs/inode.c:2390 stack backtrace: CPU: 0 PID: 16697 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_circular_bug.constprop.0.cold+0x2d7/0x41e kernel/locking/lockdep.c:1222 check_prev_add kernel/locking/lockdep.c:1866 [inline] check_prevs_add kernel/locking/lockdep.c:1979 [inline] validate_chain kernel/locking/lockdep.c:2420 [inline] __lock_acquire+0x30c9/0x3ff0 kernel/locking/lockdep.c:3416 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 __mutex_lock_common kernel/locking/mutex.c:937 [inline] __mutex_lock+0xd7/0x1190 kernel/locking/mutex.c:1078 map_mft_record+0x3c/0xc70 fs/ntfs/mft.c:168 ntfs_truncate+0x202/0x2820 fs/ntfs/inode.c:2395 ntfs_truncate_vfs fs/ntfs/inode.c:2875 [inline] ntfs_setattr+0x1b6/0x620 fs/ntfs/inode.c:2925 F2FS-fs (loop4): Unrecognized mount option "noflush_=lfs" or missing value notify_change+0x70b/0xfc0 fs/attr.c:334 F2FS-fs (loop4): Unrecognized mount option "noflush_=lfs" or missing value do_truncate+0x134/0x1f0 fs/open.c:63 handle_truncate fs/namei.c:3009 [inline] do_last fs/namei.c:3427 [inline] path_openat+0x2308/0x2df0 fs/namei.c:3537 do_filp_open+0x18c/0x3f0 fs/namei.c:3567 do_sys_open+0x3b3/0x520 fs/open.c:1085 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fe2a39700c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe2a1ee2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 RAX: ffffffffffffffda RBX: 00007fe2a3a8ff80 RCX: 00007fe2a39700c9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 RBP: 00007fe2a39cbae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffffeea353f R14: 00007fe2a1ee2300 R15: 0000000000022000 IPVS: ftp: loaded support on port[0] = 21 audit: type=1800 audit(1673229100.624:257): pid=16832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=120 res=0 audit: type=1804 audit(1673229100.674:258): pid=16836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3664366238/syzkaller.Bs5V8U/112/bus" dev="sda1" ino=14439 res=1 ntfs: volume version 3.1. audit: type=1804 audit(1673229100.734:259): pid=16805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3190680550/syzkaller.zAfiiB/91/bus/bus" dev="loop3" ino=120 res=1 tmpfs: Bad value 'interleave=static :' for mount option 'mpol' audit: type=1804 audit(1673229100.744:260): pid=16805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3190680550/syzkaller.zAfiiB/91/bus/bus" dev="loop3" ino=120 res=1 tmpfs: Bad value 'interleave=static :' for mount option 'mpol' tmpfs: Bad value 'interleave=static :' for mount option 'mpol' audit: type=1804 audit(1673229100.814:261): pid=16859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3664366238/syzkaller.Bs5V8U/112/bus" dev="sda1" ino=14439 res=1 tmpfs: Bad value 'interleave=static :' for mount option 'mpol' audit: type=1804 audit(1673229100.964:262): pid=16836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3664366238/syzkaller.Bs5V8U/112/bus" dev="sda1" ino=14439 res=1 tmpfs: Bad value 'interleave=static :' for mount option 'mpol' audit: type=1800 audit(1673229101.464:263): pid=16913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=122 res=0 BTRFS info (device loop5): enabling inode map caching audit: type=1800 audit(1673229101.494:264): pid=16925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=14458 res=0 BTRFS info (device loop5): force clearing of disk cache BTRFS info (device loop5): disabling free space tree audit: type=1804 audit(1673229101.494:265): pid=16925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2953346595/syzkaller.3xGMes/125/file0" dev="sda1" ino=14458 res=1 BTRFS info (device loop5): has skinny extents audit: type=1804 audit(1673229101.504:266): pid=16925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2953346595/syzkaller.3xGMes/125/file0" dev="sda1" ino=14458 res=1 BTRFS info (device loop5): clearing free space tree BTRFS info (device loop5): clearing 1 ro feature flag BTRFS info (device loop5): clearing 2 ro feature flag FAT-fs (loop3): Unrecognized mount option "&…š‘œÉTŠ4™€ÑÌÜ┼áL'øpT\«][ðW\zJ" or missing value nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. IPVS: ftp: loaded support on port[0] = 21 NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds Remounting filesystem read-only NILFS error (device loop0): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 BTRFS info (device loop5): enabling inode map caching NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds BTRFS info (device loop5): force clearing of disk cache BTRFS info (device loop5): disabling free space tree BTRFS info (device loop5): has skinny extents BTRFS info (device loop5): clearing free space tree BTRFS info (device loop5): clearing 1 ro feature flag BTRFS info (device loop5): clearing 2 ro feature flag IPVS: ftp: loaded support on port[0] = 21 NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 Remounting filesystem read-only NILFS error (device loop4): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds Remounting filesystem read-only NILFS error (device loop0): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 Remounting filesystem read-only NILFS error (device loop2): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 IPVS: ftp: loaded support on port[0] = 21 NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 Remounting filesystem read-only NILFS error (device loop4): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 Remounting filesystem read-only NILFS error (device loop2): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds Remounting filesystem read-only NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 NILFS error (device loop2): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 netlink: 'syz-executor.0': attribute type 4 has an invalid length. Remounting filesystem read-only NILFS error (device loop4): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 1 CPU: 1 PID: 17384 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2ab/0x3c0 mm/slab.c:3736 kmalloc include/linux/slab.h:520 [inline] __do_sys_memfd_create mm/memfd.c:295 [inline] __se_sys_memfd_create+0xf8/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f90639210c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9061e92f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000a35 RCX: 00007f90639210c9 RDX: 00007f9061e92fdc RSI: 0000000000000000 RDI: 00007f906397be81 RBP: 0000000000000a35 R08: 00007f9061e92e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000a40 R13: 00007f9061e92fdc R14: 00007f9061e92fe0 R15: 0000000020001540 NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds netlink: 'syz-executor.1': attribute type 4 has an invalid length. NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds Remounting filesystem read-only NILFS error (device loop4): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 new mount options do not match the existing superblock, will be ignored NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 CPU: 0 PID: 17481 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 kauditd_printk_skb: 77 callbacks suppressed audit: type=1800 audit(1673229105.935:344): pid=17483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=14515 res=0 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 audit: type=1804 audit(1673229105.935:345): pid=17483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3190680550/syzkaller.zAfiiB/99/file0" dev="sda1" ino=14515 res=1 shmem_alloc_inode+0x18/0x40 mm/shmem.c:3609 alloc_inode+0x5d/0x180 fs/inode.c:211 new_inode_pseudo fs/inode.c:911 [inline] new_inode+0x1d/0xf0 fs/inode.c:940 shmem_get_inode+0x96/0x8d0 mm/shmem.c:2196 __shmem_file_setup.part.0+0x7a/0x2b0 mm/shmem.c:3965 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f90639210c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9061e92f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000a35 RCX: 00007f90639210c9 RDX: 00007f9061e92fdc RSI: 0000000000000000 RDI: 00007f906397be81 RBP: 0000000000000a35 R08: 00007f9061e92e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000a40 R13: 00007f9061e92fdc R14: 00007f9061e92fe0 R15: 0000000020001540 NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 17517 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 __d_alloc+0x2b/0xa10 fs/dcache.c:1612 d_alloc_pseudo+0x19/0x70 fs/dcache.c:1743 alloc_file_pseudo+0xc6/0x250 fs/file_table.c:224 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f90639210c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds RSP: 002b:00007f9061e92f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000a35 RCX: 00007f90639210c9 RDX: 00007f9061e92fdc RSI: 0000000000000000 RDI: 00007f906397be81 RBP: 0000000000000a35 R08: 00007f9061e92e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000a40 R13: 00007f9061e92fdc R14: 00007f9061e92fe0 R15: 0000000020001540 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 17557 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 kmem_cache_zalloc include/linux/slab.h:699 [inline] __alloc_file+0x21/0x340 fs/file_table.c:100 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 alloc_file+0x5e/0x4d0 fs/file_table.c:192 alloc_file_pseudo+0x165/0x250 fs/file_table.c:231 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f90639210c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9061e92f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000a35 RCX: 00007f90639210c9 RDX: 00007f9061e92fdc RSI: 0000000000000000 RDI: 00007f906397be81 RBP: 0000000000000a35 R08: 00007f9061e92e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000a40 R13: 00007f9061e92fdc R14: 00007f9061e92fe0 R15: 0000000020001540 CPU: 1 PID: 17560 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2ab/0x3c0 mm/slab.c:3736 kmalloc include/linux/slab.h:520 [inline] __do_sys_memfd_create mm/memfd.c:295 [inline] __se_sys_memfd_create+0xf8/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f4c033df0c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4c01950f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000a35 RCX: 00007f4c033df0c9 RDX: 00007f4c01950fdc RSI: 0000000000000000 RDI: 00007f4c03439e81 RBP: 0000000000000a35 R08: 00007f4c01950e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000a40 R13: 00007f4c01950fdc R14: 00007f4c01950fe0 R15: 0000000020001540 NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds device erspan1 entered promiscuous mode FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 17580 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc_trace+0x284/0x380 mm/slab.c:3623 kmalloc include/linux/slab.h:515 [inline] kzalloc include/linux/slab.h:709 [inline] aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline] apparmor_file_alloc_security+0x394/0xad0 security/apparmor/lsm.c:438 security_file_alloc+0x40/0x90 security/security.c:880 __alloc_file+0xd8/0x340 fs/file_table.c:105 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 alloc_file+0x5e/0x4d0 fs/file_table.c:192 alloc_file_pseudo+0x165/0x250 fs/file_table.c:231 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f90639210c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9061e92f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000a35 RCX: 00007f90639210c9 RDX: 00007f9061e92fdc RSI: 0000000000000000 RDI: 00007f906397be81 RBP: 0000000000000a35 R08: 00007f9061e92e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000a40 R13: 00007f9061e92fdc R14: 00007f9061e92fe0 R15: 0000000020001540 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 17601 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 shmem_alloc_inode+0x18/0x40 mm/shmem.c:3609 alloc_inode+0x5d/0x180 fs/inode.c:211 new_inode_pseudo fs/inode.c:911 [inline] new_inode+0x1d/0xf0 fs/inode.c:940 shmem_get_inode+0x96/0x8d0 mm/shmem.c:2196 __shmem_file_setup.part.0+0x7a/0x2b0 mm/shmem.c:3965 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f4c033df0c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4c01950f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000a35 RCX: 00007f4c033df0c9 RDX: 00007f4c01950fdc RSI: 0000000000000000 RDI: 00007f4c03439e81 RBP: 0000000000000a35 R08: 00007f4c01950e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000a40 R13: 00007f4c01950fdc R14: 00007f4c01950fe0 R15: 0000000020001540 CPU: 1 PID: 17621 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 getname_flags+0xce/0x590 fs/namei.c:140 do_sys_open+0x26c/0x520 fs/open.c:1079 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f7b801f80c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7b7e76a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f7b80317f80 RCX: 00007f7b801f80c9 RDX: 0000000000200002 RSI: 00000000200002c0 RDI: ffffffffffffff9c RBP: 00007f7b7e76a1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd3081bfdf R14: 00007f7b7e76a300 R15: 0000000000022000 CPU: 0 PID: 17628 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 vm_area_alloc+0x1c/0x110 kernel/fork.c:321 mmap_region+0xa2a/0x16b0 mm/mmap.c:1727 do_mmap+0x8e8/0x1080 mm/mmap.c:1530 do_mmap_pgoff include/linux/mm.h:2329 [inline] vm_mmap_pgoff+0x197/0x200 mm/util.c:357 ksys_mmap_pgoff+0x45f/0x5a0 mm/mmap.c:1580 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f9063921112 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64 RSP: 002b:00007f9061e92f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007f9063921112 RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000a33 R13: 00007f9061e92fdc R14: 00007f9061e92fe0 R15: 0000000020001542 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 17653 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 1 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 __should_failslab+0x115/0x180 mm/failslab.c:32 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 __d_alloc+0x2b/0xa10 fs/dcache.c:1612 d_alloc_pseudo+0x19/0x70 fs/dcache.c:1743 alloc_file_pseudo+0xc6/0x250 fs/file_table.c:224 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976 __shmem_file_setup mm/shmem.c:3959 [inline] shmem_file_setup+0x61/0x90 mm/shmem.c:4006 __do_sys_memfd_create mm/memfd.c:325 [inline] __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f4c033df0c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f4c01950f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000000000a35 RCX: 00007f4c033df0c9 RDX: 00007f4c01950fdc RSI: 0000000000000000 RDI: 00007f4c03439e81 RBP: 0000000000000a35 R08: 00007f4c01950e20 R09: ffffffffffffffff R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000a40 R13: 00007f4c01950fdc R14: 00007f4c01950fe0 R15: 0000000020001540 CPU: 0 PID: 17671 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197 alloc_pages include/linux/gfp.h:532 [inline] pte_alloc_one+0x16/0x190 arch/x86/mm/pgtable.c:35 __pte_alloc+0x21/0x340 mm/memory.c:665 do_anonymous_page+0xff4/0x1be0 mm/memory.c:3282 handle_pte_fault mm/memory.c:4173 [inline] __handle_mm_fault+0x227a/0x41c0 mm/memory.c:4299 handle_mm_fault+0x436/0xb10 mm/memory.c:4336 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x7f90638be197 Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 RSP: 002b:00007f9061e92600 EFLAGS: 00010246 RAX: 0000000000000001 RBX: 00007f9061e92660 RCX: 0000000000000001 RDX: 0000000000000101 RSI: 00007f9059a73000 RDI: 00007f9061e92700 RBP: 0000000000000102 R08: 0000000000000010 R09: 0000000000000000 R10: 0000000000000000 R11: 00007f9061e92670 R12: 00007f9061e92670 R13: 00007f9061e92700 R14: 0000000000000001 R15: 0000000000000000 syz-executor.2 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 syz-executor.2 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 17671 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 pagefault_out_of_memory+0x102/0x120 mm/oom_kill.c:1157 mm_fault_error+0x106/0x390 arch/x86/mm/fault.c:1040 __do_page_fault+0xc34/0xd60 arch/x86/mm/fault.c:1440 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0033:0x7f90638be197 Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01 RSP: 002b:00007f9061e92600 EFLAGS: 00010246 RAX: 0000000000000001 RBX: 00007f9061e92660 RCX: 0000000000000001 RDX: 0000000000000101 RSI: 00007f9059a73000 RDI: 00007f9061e92700 RBP: 0000000000000102 R08: 0000000000000010 R09: 0000000000000000 R10: 0000000000000000 R11: 00007f9061e92670 R12: 00007f9061e92670 R13: 00007f9061e92700 R14: 0000000000000001 R15: 0000000000000000 NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 device erspan1 entered promiscuous mode CPU: 0 PID: 17663 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393 Mem-Info: active_anon:334962 inactive_anon:8362 isolated_anon:0 active_file:3295 inactive_file:5666 isolated_file:0 unevictable:740 dirty:93 writeback:0 unstable:0 slab_reclaimable:18458 slab_unreclaimable:131693 mapped:31446 shmem:8089 pagetables:1292 bounce:0 free:1155319 free_pcp:473 free_cma:0 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 Node 0 active_anon:1339848kB inactive_anon:33448kB active_file:13180kB inactive_file:22660kB unevictable:2960kB isolated(anon):0kB isolated(file):0kB mapped:125784kB dirty:372kB writeback:0kB shmem:32356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1224704kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no cache_alloc_refill+0x273/0x340 mm/slab.c:3049 ____cache_alloc mm/slab.c:3132 [inline] __do_cache_alloc mm/slab.c:3354 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x346/0x370 mm/slab.c:3557 Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB getname_flags+0xce/0x590 fs/namei.c:140 do_sys_open+0x26c/0x520 fs/open.c:1079 lowmem_reserve[]: 0 2693 2695 2695 2695 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 Node 0 DMA32 free:566080kB min:35996kB low:44992kB high:53988kB active_anon:1339848kB inactive_anon:33448kB active_file:13180kB inactive_file:22660kB unevictable:2960kB writepending:372kB present:3129332kB managed:2763452kB mlocked:2960kB kernel_stack:8672kB pagetables:5168kB bounce:0kB free_pcp:1892kB local_pcp:524kB free_cma:0kB entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f7b801f80c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 lowmem_reserve[]: 0 0 1 1 1 RSP: 002b:00007f7b7e76a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007f7b80317f80 RCX: 00007f7b801f80c9 RDX: 0000000000200002 RSI: 00000000200002c0 RDI: ffffffffffffff9c RBP: 00007f7b7e76a1d0 R08: 0000000000000000 R09: 0000000000000000 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd3081bfdf R14: 00007f7b7e76a300 R15: 0000000000022000 NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Remounting filesystem read-only CPU: 1 PID: 17705 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 NILFS error (device loop4): nilfs_find_entry: dir 2 size 2231370752 exceeds block count 1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0xa/0xf lib/fault-inject.c:149 lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:4039280kB min:53876kB low:67344kB high:80812kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB __should_failslab+0x115/0x180 mm/failslab.c:32 lowmem_reserve[]: 0 0 0 0 0 should_failslab+0x5/0x10 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x277/0x370 mm/slab.c:3557 kmem_cache_zalloc include/linux/slab.h:699 [inline] __alloc_file+0x21/0x340 fs/file_table.c:100 alloc_empty_file+0x6d/0x170 fs/file_table.c:150 alloc_file+0x5e/0x4d0 fs/file_table.c:192