overlayfs: unrecognized mount option "upperyir=./bus" or missing value
bond1 (unregistering): Released all slaves
======================================================
WARNING: possible circular locking dependency detected
4.19.211-syzkaller #0 Not tainted
------------------------------------------------------
kworker/0:2/19511 is trying to acquire lock:
00000000f718beac (&sb->s_type->i_mutex_key#10){++++}, at: inode_lock include/linux/fs.h:748 [inline]
00000000f718beac (&sb->s_type->i_mutex_key#10){++++}, at: __generic_file_fsync+0xb0/0x1f0 fs/libfs.c:989

but task is already holding lock:
00000000c506e8d1 ((work_completion)(&dio->complete_work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #2 ((work_completion)(&dio->complete_work)){+.+.}:
       worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
       kthread+0x33f/0x460 kernel/kthread.c:259
       ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415

-> #1 ((wq_completion)"dio/%s"sb->s_id){+.+.}:
       drain_workqueue+0x1a5/0x460 kernel/workqueue.c:2826
       destroy_workqueue+0x75/0x790 kernel/workqueue.c:4183
       __alloc_workqueue_key+0xb76/0xed0 kernel/workqueue.c:4160
       sb_init_dio_done_wq+0x34/0x90 fs/direct-io.c:623
       dio_set_defer_completion fs/direct-io.c:646 [inline]
       get_more_blocks fs/direct-io.c:724 [inline]
       do_direct_IO fs/direct-io.c:1003 [inline]
       do_blockdev_direct_IO fs/direct-io.c:1333 [inline]
       __blockdev_direct_IO+0x83a8/0xef40 fs/direct-io.c:1419
       ext4_direct_IO_write fs/ext4/inode.c:3777 [inline]
       ext4_direct_IO+0xae4/0x1c50 fs/ext4/inode.c:3915
       generic_file_direct_write+0x208/0x4a0 mm/filemap.c:3073
       __generic_file_write_iter+0x2d0/0x610 mm/filemap.c:3252
       ext4_file_write_iter+0x2fe/0xf20 fs/ext4/file.c:272
       call_write_iter include/linux/fs.h:1821 [inline]
       aio_write+0x37f/0x5c0 fs/aio.c:1574
       __io_submit_one fs/aio.c:1858 [inline]
       io_submit_one+0xecd/0x20c0 fs/aio.c:1909
       __do_sys_io_submit fs/aio.c:1953 [inline]
       __se_sys_io_submit+0x11b/0x4a0 fs/aio.c:1924
       do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

-> #0 (&sb->s_type->i_mutex_key#10){++++}:
       down_write+0x34/0x90 kernel/locking/rwsem.c:70
       inode_lock include/linux/fs.h:748 [inline]
       __generic_file_fsync+0xb0/0x1f0 fs/libfs.c:989
       ext4_sync_file+0xa35/0x1420 fs/ext4/fsync.c:118
       vfs_fsync_range+0x13a/0x220 fs/sync.c:197
       generic_write_sync include/linux/fs.h:2750 [inline]
       dio_complete+0x763/0xac0 fs/direct-io.c:329
       process_one_work+0x864/0x1570 kernel/workqueue.c:2153
       worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
       kthread+0x33f/0x460 kernel/kthread.c:259
       ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415

other info that might help us debug this:

Chain exists of:
  &sb->s_type->i_mutex_key#10 --> (wq_completion)"dio/%s"sb->s_id --> (work_completion)(&dio->complete_work)

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock((work_completion)(&dio->complete_work));
                               lock((wq_completion)"dio/%s"sb->s_id);
                               lock((work_completion)(&dio->complete_work));
  lock(&sb->s_type->i_mutex_key#10);

 *** DEADLOCK ***

2 locks held by kworker/0:2/19511:
 #0: 000000001f09c23e ((wq_completion)"dio/%s"sb->s_id){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124
 #1: 00000000c506e8d1 ((work_completion)(&dio->complete_work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128

stack backtrace:
CPU: 0 PID: 19511 Comm: kworker/0:2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Workqueue: dio/sda1 dio_aio_complete_work
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 print_circular_bug.constprop.0.cold+0x2d7/0x41e kernel/locking/lockdep.c:1222
 check_prev_add kernel/locking/lockdep.c:1866 [inline]
 check_prevs_add kernel/locking/lockdep.c:1979 [inline]
 validate_chain kernel/locking/lockdep.c:2420 [inline]
 __lock_acquire+0x30c9/0x3ff0 kernel/locking/lockdep.c:3416
 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908
 down_write+0x34/0x90 kernel/locking/rwsem.c:70
 inode_lock include/linux/fs.h:748 [inline]
 __generic_file_fsync+0xb0/0x1f0 fs/libfs.c:989
 ext4_sync_file+0xa35/0x1420 fs/ext4/fsync.c:118
 vfs_fsync_range+0x13a/0x220 fs/sync.c:197
 generic_write_sync include/linux/fs.h:2750 [inline]
 dio_complete+0x763/0xac0 fs/direct-io.c:329
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
audit: type=1804 audit(1675712353.138:110100): pid=1012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2388835756/syzkaller.BuRDJR/8545/bus" dev="sda1" ino=15633 res=1
netlink: 'syz-executor.2': attribute type 1 has an invalid length.
overlayfs: unrecognized mount option "upperyir=./bus" or missing value
device bond1 entered promiscuous mode
8021q: adding VLAN 0 to HW filter on device batadv2
bond1: making interface batadv2 the new active one
device batadv2 entered promiscuous mode
bond1: Enslaving batadv2 as an active interface with an up link
8021q: adding VLAN 0 to HW filter on device batadv3
bond1: Enslaving batadv3 as an active interface with an up link
bond1 (unregistering): Releasing active interface batadv2
device batadv2 left promiscuous mode
bond1 (unregistering): Releasing active interface batadv3
bond1 (unregistering): Released all slaves
netlink: 'syz-executor.3': attribute type 1 has an invalid length.
device bond1 entered promiscuous mode
8021q: adding VLAN 0 to HW filter on device batadv1
bond1: making interface batadv1 the new active one
device batadv1 entered promiscuous mode
bond1: Enslaving batadv1 as an active interface with an up link
bond1 (unregistering): Releasing active interface batadv1
device batadv1 left promiscuous mode
bond1 (unregistering): Released all slaves
netlink: 'syz-executor.2': attribute type 1 has an invalid length.
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 1517 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0xa/0xf lib/fault-inject.c:149
 __should_failslab+0x115/0x180 mm/failslab.c:32
 should_failslab+0x5/0x10 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2ab/0x3c0 mm/slab.c:3736
 kmalloc include/linux/slab.h:520 [inline]
 __do_sys_memfd_create mm/memfd.c:295 [inline]
 __se_sys_memfd_create+0xf8/0x440 mm/memfd.c:268
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f6cb44d30c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6cb2a44f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
RAX: ffffffffffffffda RBX: 0000000000000626 RCX: 00007f6cb44d30c9
RDX: 00007f6cb2a44fdc RSI: 0000000000000000 RDI: 00007f6cb452de81
RBP: 0000000000000626 R08: 00007f6cb2a44e20 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000600
R13: 00007f6cb2a44fdc R14: 00007f6cb2a44fe0 R15: 0000000020000c80
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 1533 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0xa/0xf lib/fault-inject.c:149
 __should_failslab+0x115/0x180 mm/failslab.c:32
 should_failslab+0x5/0x10 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x277/0x370 mm/slab.c:3557
 shmem_alloc_inode+0x18/0x40 mm/shmem.c:3609
 alloc_inode+0x5d/0x180 fs/inode.c:211
 new_inode_pseudo fs/inode.c:911 [inline]
 new_inode+0x1d/0xf0 fs/inode.c:940
 shmem_get_inode+0x96/0x8d0 mm/shmem.c:2196
 __shmem_file_setup.part.0+0x7a/0x2b0 mm/shmem.c:3965
 __shmem_file_setup mm/shmem.c:3959 [inline]
 shmem_file_setup+0x61/0x90 mm/shmem.c:4006
 __do_sys_memfd_create mm/memfd.c:325 [inline]
 __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f6cb44d30c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6cb2a44f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
RAX: ffffffffffffffda RBX: 0000000000000626 RCX: 00007f6cb44d30c9
RDX: 00007f6cb2a44fdc RSI: 0000000000000000 RDI: 00007f6cb452de81
RBP: 0000000000000626 R08: 00007f6cb2a44e20 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000600
R13: 00007f6cb2a44fdc R14: 00007f6cb2a44fe0 R15: 0000000020000c80
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 1567 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0xa/0xf lib/fault-inject.c:149
 __should_failslab+0x115/0x180 mm/failslab.c:32
 should_failslab+0x5/0x10 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x277/0x370 mm/slab.c:3557
 __d_alloc+0x2b/0xa10 fs/dcache.c:1612
 d_alloc_pseudo+0x19/0x70 fs/dcache.c:1743
 alloc_file_pseudo+0xc6/0x250 fs/file_table.c:224
 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976
 __shmem_file_setup mm/shmem.c:3959 [inline]
 shmem_file_setup+0x61/0x90 mm/shmem.c:4006
 __do_sys_memfd_create mm/memfd.c:325 [inline]
 __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f6cb44d30c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6cb2a44f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
RAX: ffffffffffffffda RBX: 0000000000000626 RCX: 00007f6cb44d30c9
RDX: 00007f6cb2a44fdc RSI: 0000000000000000 RDI: 00007f6cb452de81
RBP: 0000000000000626 R08: 00007f6cb2a44e20 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000600
R13: 00007f6cb2a44fdc R14: 00007f6cb2a44fe0 R15: 0000000020000c80
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 1607 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0xa/0xf lib/fault-inject.c:149
 __should_failslab+0x115/0x180 mm/failslab.c:32
 should_failslab+0x5/0x10 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x277/0x370 mm/slab.c:3557
 kmem_cache_zalloc include/linux/slab.h:699 [inline]
 __alloc_file+0x21/0x340 fs/file_table.c:100
 alloc_empty_file+0x6d/0x170 fs/file_table.c:150
 alloc_file+0x5e/0x4d0 fs/file_table.c:192
 alloc_file_pseudo+0x165/0x250 fs/file_table.c:231
 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976
 __shmem_file_setup mm/shmem.c:3959 [inline]
 shmem_file_setup+0x61/0x90 mm/shmem.c:4006
 __do_sys_memfd_create mm/memfd.c:325 [inline]
 __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f6cb44d30c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6cb2a44f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
RAX: ffffffffffffffda RBX: 0000000000000626 RCX: 00007f6cb44d30c9
RDX: 00007f6cb2a44fdc RSI: 0000000000000000 RDI: 00007f6cb452de81
RBP: 0000000000000626 R08: 00007f6cb2a44e20 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000600
R13: 00007f6cb2a44fdc R14: 00007f6cb2a44fe0 R15: 0000000020000c80
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 1633 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0xa/0xf lib/fault-inject.c:149
 __should_failslab+0x115/0x180 mm/failslab.c:32
 should_failslab+0x5/0x10 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc_trace+0x284/0x380 mm/slab.c:3623
 kmalloc include/linux/slab.h:515 [inline]
 kzalloc include/linux/slab.h:709 [inline]
 aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline]
 apparmor_file_alloc_security+0x394/0xad0 security/apparmor/lsm.c:438
 security_file_alloc+0x40/0x90 security/security.c:880
 __alloc_file+0xd8/0x340 fs/file_table.c:105
 alloc_empty_file+0x6d/0x170 fs/file_table.c:150
 alloc_file+0x5e/0x4d0 fs/file_table.c:192
 alloc_file_pseudo+0x165/0x250 fs/file_table.c:231
 __shmem_file_setup.part.0+0x102/0x2b0 mm/shmem.c:3976
 __shmem_file_setup mm/shmem.c:3959 [inline]
 shmem_file_setup+0x61/0x90 mm/shmem.c:4006
 __do_sys_memfd_create mm/memfd.c:325 [inline]
 __se_sys_memfd_create+0x26b/0x440 mm/memfd.c:268
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f6cb44d30c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6cb2a44f38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
RAX: ffffffffffffffda RBX: 0000000000000626 RCX: 00007f6cb44d30c9
RDX: 00007f6cb2a44fdc RSI: 0000000000000000 RDI: 00007f6cb452de81
RBP: 0000000000000626 R08: 00007f6cb2a44e20 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000600
R13: 00007f6cb2a44fdc R14: 00007f6cb2a44fe0 R15: 0000000020000c80
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 1652 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0xa/0xf lib/fault-inject.c:149
 __should_failslab+0x115/0x180 mm/failslab.c:32
 should_failslab+0x5/0x10 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x277/0x370 mm/slab.c:3557
 vm_area_alloc+0x1c/0x110 kernel/fork.c:321
 mmap_region+0xa2a/0x16b0 mm/mmap.c:1727
 do_mmap+0x8e8/0x1080 mm/mmap.c:1530
 do_mmap_pgoff include/linux/mm.h:2329 [inline]
 vm_mmap_pgoff+0x197/0x200 mm/util.c:357
 ksys_mmap_pgoff+0x45f/0x5a0 mm/mmap.c:1580
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f6cb44d3112
Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64
RSP: 002b:00007f6cb2a44f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007f6cb44d3112
RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000624
R13: 00007f6cb2a44fdc R14: 00007f6cb2a44fe0 R15: 0000000020000c82
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 1
CPU: 1 PID: 1674 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0xa/0xf lib/fault-inject.c:149
 should_fail_alloc_page mm/page_alloc.c:3088 [inline]
 prepare_alloc_pages mm/page_alloc.c:4346 [inline]
 __alloc_pages_nodemask+0x239/0x2890 mm/page_alloc.c:4393
 alloc_pages_current+0x193/0x2a0 mm/mempolicy.c:2197
 alloc_pages include/linux/gfp.h:532 [inline]
 pte_alloc_one+0x16/0x190 arch/x86/mm/pgtable.c:35
 __pte_alloc+0x21/0x340 mm/memory.c:665
 do_anonymous_page+0xff4/0x1be0 mm/memory.c:3282
 handle_pte_fault mm/memory.c:4173 [inline]
 __handle_mm_fault+0x227a/0x41c0 mm/memory.c:4299
 handle_mm_fault+0x436/0xb10 mm/memory.c:4336
 __do_page_fault+0x68e/0xd60 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x7f6cb4470197
Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01
RSP: 002b:00007f6cb2a44600 EFLAGS: 00010246
RAX: 0000000000000001 RBX: 00007f6cb2a44660 RCX: 0000000000000001
RDX: 0000000000000101 RSI: 00007f6caa625000 RDI: 00007f6cb2a44700
RBP: 0000000000000102 R08: 0000000000000030 R09: 0000000000000000
R10: 0000000000000000 R11: 00007f6cb2a44670 R12: 00007f6cb2a44670
R13: 00007f6cb2a44700 R14: 0000000000000001 R15: 0000000000000000
syz-executor.2 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000
syz-executor.2 cpuset=/ mems_allowed=0-1
CPU: 1 PID: 1674 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 pagefault_out_of_memory+0x102/0x120 mm/oom_kill.c:1157
 mm_fault_error+0x106/0x390 arch/x86/mm/fault.c:1040
 __do_page_fault+0xc34/0xd60 arch/x86/mm/fault.c:1440
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x7f6cb4470197
Code: 78 48 63 d5 48 01 c2 49 3b 55 08 77 56 8d 55 ff 85 ed 74 35 0f 1f 80 00 00 00 00 48 39 c1 77 1c 49 8b 75 00 49 89 c1 49 29 c9 <46> 0f b6 0c 0e 45 84 c9 74 08 44 88 0c 06 49 8b 45 10 48 83 c0 01
RSP: 002b:00007f6cb2a44600 EFLAGS: 00010246
RAX: 0000000000000001 RBX: 00007f6cb2a44660 RCX: 0000000000000001
RDX: 0000000000000101 RSI: 00007f6caa625000 RDI: 00007f6cb2a44700
RBP: 0000000000000102 R08: 0000000000000030 R09: 0000000000000000
R10: 0000000000000000 R11: 00007f6cb2a44670 R12: 00007f6cb2a44670
R13: 00007f6cb2a44700 R14: 0000000000000001 R15: 0000000000000000
Mem-Info:
active_anon:349159 inactive_anon:41956 isolated_anon:0
 active_file:22908 inactive_file:23034 isolated_file:0
 unevictable:0 dirty:4178 writeback:0 unstable:0
 slab_reclaimable:29899 slab_unreclaimable:196214
 mapped:34595 shmem:71579 pagetables:1561 bounce:0
 free:993293 free_pcp:881 free_cma:0
Node 0 active_anon:1381716kB inactive_anon:167288kB active_file:91492kB inactive_file:75492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128480kB dirty:324kB writeback:0kB shmem:272824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 206848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 1 active_anon:14920kB inactive_anon:636kB active_file:140kB inactive_file:16644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11400kB dirty:16388kB writeback:0kB shmem:13592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:1016kB inactive_anon:8kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:8kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:48kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2693 2695 2695 2695
Node 0 DMA32 free:43280kB min:35996kB low:44992kB high:53988kB active_anon:1380700kB inactive_anon:167280kB active_file:91492kB inactive_file:75480kB unevictable:0kB writepending:316kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:8864kB pagetables:5128kB bounce:0kB free_pcp:1608kB local_pcp:872kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:3917692kB min:53876kB low:67344kB high:80812kB active_anon:14820kB inactive_anon:5236kB active_file:8340kB inactive_file:5344kB unevictable:0kB writepending:13112kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:1152kB pagetables:1216kB bounce:0kB free_pcp:2652kB local_pcp:1264kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 36*4kB (UME) 27*8kB (UMEH) 18*16kB (UMH) 8*32kB (UMH) 5*64kB (MEH) 2*128kB (UE) 1*256kB (U) 4*512kB (UMEH) 1*1024kB (E) 3*2048kB (ME) 0*4096kB = 10952kB
Node 0 DMA32: 3390*4kB (UMEH) 944*8kB (UMEH) 403*16kB (UMEH) 463*32kB (UMEH) 14*64kB (UMH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43272kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 450*4kB (UME) 254*8kB (UME) 173*16kB (UME) 182*32kB (UME) 71*64kB (UME) 58*128kB (UM) 29*256kB (UME) 13*512kB (M) 6*1024kB (M) 13*2048kB (M) 943*4096kB (UM) = 3933768kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
113446 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
2097051 pages RAM
0 pages HighMem/MovableOnly
369649 pages reserved
0 pages cma reserved
Out of memory (oom_kill_allocating_task): Kill process 1674 (syz-executor.2) score 0 or sacrifice child
Killed process 1670 (syz-executor.2) total-vm:195848kB, anon-rss:472kB, file-rss:14336kB, shmem-rss:0kB
oom_reaper: reaped process 1670 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB