bisecting fixing commit since 4938296e03bd227e5020d63d418956fe52baf97c building syzkaller on 241790bb6f90cf276f6d68a7c6768be40880bef1 testing commit 4938296e03bd227e5020d63d418956fe52baf97c compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: ea89875e9d9b34abfbf4405f65f9da543797a10033a442da831381379e9d1b75 run #0: crashed: possible deadlock in generic_file_write_iter run #1: crashed: possible deadlock in generic_file_write_iter run #2: crashed: possible deadlock in corrupted run #3: crashed: possible deadlock in generic_file_write_iter run #4: crashed: possible deadlock in corrupted run #5: crashed: possible deadlock in corrupted run #6: crashed: possible deadlock in generic_file_write_iter run #7: crashed: possible deadlock in generic_file_write_iter run #8: crashed: possible deadlock in generic_file_write_iter run #9: crashed: possible deadlock in corrupted run #10: crashed: possible deadlock in generic_file_write_iter run #11: crashed: possible deadlock in generic_file_write_iter run #12: crashed: possible deadlock in corrupted run #13: crashed: possible deadlock in corrupted run #14: crashed: possible deadlock in corrupted run #15: crashed: possible deadlock in generic_file_write_iter run #16: crashed: possible deadlock in generic_file_write_iter run #17: crashed: possible deadlock in generic_file_write_iter run #18: crashed: possible deadlock in generic_file_write_iter run #19: crashed: possible deadlock in generic_file_write_iter testing current HEAD 59456c9cc40c8f75b5a7efa0fe1f211d9c6fcaf1 testing commit 59456c9cc40c8f75b5a7efa0fe1f211d9c6fcaf1 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 67e4e747de2089056bf0c0b318a1f1533bcdbd0ae90730955bd9a3eb76a13eeb run #0: crashed: possible deadlock in generic_file_write_iter run #1: crashed: possible deadlock in generic_file_write_iter run #2: crashed: possible deadlock in generic_file_write_iter run #3: crashed: possible deadlock in corrupted run #4: crashed: possible deadlock in generic_file_write_iter run #5: crashed: possible deadlock in generic_file_write_iter run #6: crashed: possible deadlock in generic_file_write_iter run #7: crashed: possible deadlock in generic_file_write_iter run #8: crashed: possible deadlock in generic_file_write_iter run #9: crashed: possible deadlock in generic_file_write_iter revisions tested: 2, total time: 23m50.083158003s (build: 16m46.03738803s, test: 6m34.11741994s) the crash still happens on HEAD commit msg: Linux 4.19.204 crash: possible deadlock in generic_file_write_iter R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdd73f916f R14: 00007f354463d300 R15: 0000000000022000 ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' ====================================================== WARNING: possible circular locking dependency detected 4.19.204-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.4/9869 is trying to acquire lock: 000000004f729dd2 ((wq_completion)"dio/%s"sb->s_id){+.+.}, at: flush_workqueue+0xcf/0x1350 kernel/workqueue.c:2658 but task is already holding lock: 00000000db17e6f5 (&sb->s_type->i_mutex_key#21){+.+.}, at: inode_lock include/linux/fs.h:748 [inline] 00000000db17e6f5 (&sb->s_type->i_mutex_key#21){+.+.}, at: generic_file_write_iter+0x97/0x660 mm/filemap.c:3320 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&sb->s_type->i_mutex_key#21){+.+.}: down_write+0x38/0x90 kernel/locking/rwsem.c:70 inode_lock include/linux/fs.h:748 [inline] __generic_file_fsync+0x8a/0x1a0 fs/libfs.c:989 fat_file_fsync+0x61/0x200 fs/fat/file.c:198 vfs_fsync_range+0xee/0x220 fs/sync.c:197 generic_write_sync include/linux/fs.h:2750 [inline] dio_complete+0x55b/0x970 fs/direct-io.c:329 dio_aio_complete_work+0x17/0x20 fs/direct-io.c:341 process_one_work+0x7b9/0x15a0 kernel/workqueue.c:2153 worker_thread+0x85/0xb60 kernel/workqueue.c:2296 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 -> #1 ((work_completion)(&dio->complete_work)){+.+.}: process_one_work+0x76c/0x15a0 kernel/workqueue.c:2129 worker_thread+0x85/0xb60 kernel/workqueue.c:2296 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 -> #0 ((wq_completion)"dio/%s"sb->s_id){+.+.}: lock_acquire+0x180/0x3a0 kernel/locking/lockdep.c:3908 flush_workqueue+0xf2/0x1350 kernel/workqueue.c:2661 drain_workqueue+0x148/0x3a0 kernel/workqueue.c:2826 destroy_workqueue+0x68/0x5d0 kernel/workqueue.c:4183 __alloc_workqueue_key+0x965/0xbb0 kernel/workqueue.c:4160 sb_init_dio_done_wq+0x32/0x80 fs/direct-io.c:623 do_blockdev_direct_IO fs/direct-io.c:1285 [inline] __blockdev_direct_IO+0x5bc/0xc5f0 fs/direct-io.c:1419 blockdev_direct_IO include/linux/fs.h:3059 [inline] fat_direct_IO+0x182/0x2d0 fs/fat/inode.c:282 generic_file_direct_write+0x1ee/0x410 mm/filemap.c:3073 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe other info that might help us debug this: Chain exists of: (wq_completion)"dio/%s"sb->s_id --> (work_completion)(&dio->complete_work) --> &sb->s_type->i_mutex_key#21 Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&sb->s_type->i_mutex_key#21); lock((work_completion)(&dio->complete_work)); lock(&sb->s_type->i_mutex_key#21); lock((wq_completion)"dio/%s"sb->s_id); *** DEADLOCK *** 1 lock held by syz-executor.4/9869: #0: 00000000db17e6f5 (&sb->s_type->i_mutex_key#21){+.+.}, at: inode_lock include/linux/fs.h:748 [inline] #0: 00000000db17e6f5 (&sb->s_type->i_mutex_key#21){+.+.}, at: generic_file_write_iter+0x97/0x660 mm/filemap.c:3320 stack backtrace: CPU: 1 PID: 9869 Comm: syz-executor.4 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 print_circular_bug.isra.17.cold.34+0x2e3/0x41e kernel/locking/lockdep.c:1222 check_prev_add kernel/locking/lockdep.c:1866 [inline] check_prevs_add kernel/locking/lockdep.c:1979 [inline] validate_chain kernel/locking/lockdep.c:2420 [inline] __lock_acquire+0x35c2/0x47c0 kernel/locking/lockdep.c:3416 lock_acquire+0x180/0x3a0 kernel/locking/lockdep.c:3908 flush_workqueue+0xf2/0x1350 kernel/workqueue.c:2661 drain_workqueue+0x148/0x3a0 kernel/workqueue.c:2826 destroy_workqueue+0x68/0x5d0 kernel/workqueue.c:4183 __alloc_workqueue_key+0x965/0xbb0 kernel/workqueue.c:4160 sb_init_dio_done_wq+0x32/0x80 fs/direct-io.c:623 do_blockdev_direct_IO fs/direct-io.c:1285 [inline] __blockdev_direct_IO+0x5bc/0xc5f0 fs/direct-io.c:1419 blockdev_direct_IO include/linux/fs.h:3059 [inline] fat_direct_IO+0x182/0x2d0 fs/fat/inode.c:282 generic_file_direct_write+0x1ee/0x410 mm/filemap.c:3073 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5e6c0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f5e6c0ba000 RBP: 00007f5e6c0e31d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc24f7ed7f R14: 00007f5e6c0e3300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 9936 Comm: syz-executor.1 Not tainted 4.19.204-syzkaller #0 ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fcb1d3b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fcb1d38f000 RBP: 00007fcb1d3b81d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc9e29b3ff R14: 00007fcb1d3b8300 R15: 0000000000022000 CPU: 1 PID: 9942 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 FAT-fs (loop1): Unrecognized mount option "./bus" or missing value call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6289ef1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6289ec8000 RBP: 00007f6289ef11d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdff8965af R14: 00007f6289ef1300 R15: 0000000000022000 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 9973 Comm: syz-executor.0 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd0caac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fd0caaa0000 RBP: 00007fd0caac91d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffeaa4cc8f R14: 00007fd0caac9300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 9978 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6289f12188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6289ee9000 RBP: 00007f6289f121d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdff8965af R14: 00007f6289f12300 R15: 0000000000022000 CPU: 0 PID: 9987 Comm: syz-executor.5 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f354463d188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f3544614000 RBP: 00007f354463d1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdd73f916f R14: 00007f354463d300 R15: 0000000000022000 CPU: 1 PID: 9992 Comm: syz-executor.4 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5e6c0e3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f5e6c0ba000 RBP: 00007f5e6c0e31d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc24f7ed7f R14: 00007f5e6c0e3300 R15: 0000000000022000 CPU: 0 PID: 9986 Comm: syz-executor.3 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6f4d530188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6f4d507000 RBP: 00007f6f4d5301d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd74cf697f R14: 00007f6f4d530300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 10016 Comm: syz-executor.1 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fcb1d3b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fcb1d38f000 RBP: 00007fcb1d3b81d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc9e29b3ff R14: 00007fcb1d3b8300 R15: 0000000000022000 CPU: 0 PID: 10017 Comm: syz-executor.0 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd0caac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fd0caaa0000 RBP: 00007fd0caac91d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffeaa4cc8f R14: 00007fd0caac9300 R15: 0000000000022000 FAT-fs (loop1): Unrecognized mount option "./bus" or missing value FAT-fs (loop0): Unrecognized mount option "./bus" or missing value FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 10028 Comm: syz-executor.5 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f354463d188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f3544614000 RBP: 00007f354463d1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdd73f916f R14: 00007f354463d300 R15: 0000000000022000 CPU: 0 PID: 10039 Comm: syz-executor.3 Not tainted 4.19.204-syzkaller #0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6f4d50f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6f4d4e6000 RBP: 00007f6f4d50f1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd74cf697f R14: 00007f6f4d50f300 R15: 0000000000022000 CPU: 1 PID: 10040 Comm: syz-executor.4 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5e6c0c2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f5e6c099000 RBP: 00007f5e6c0c21d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc24f7ed7f R14: 00007f5e6c0c2300 R15: 0000000000022000 CPU: 1 PID: 10029 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6289f12188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6289ee9000 RBP: 00007f6289f121d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdff8965af R14: 00007f6289f12300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 10050 Comm: syz-executor.0 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd0caaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fd0caac1000 RBP: 00007fd0caaea1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffeaa4cc8f R14: 00007fd0caaea300 R15: 0000000000022000 CPU: 1 PID: 10065 Comm: syz-executor.1 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x23c/0x25a0 mm/page_alloc.c:4393 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa5/0x8b0 mm/slab.c:2682 cache_alloc_refill+0x2ac/0x380 mm/slab.c:3049 ____cache_alloc mm/slab.c:3132 [inline] __do_cache_alloc mm/slab.c:3354 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x361/0x390 mm/slab.c:3557 aio_get_req fs/aio.c:1027 [inline] __io_submit_one fs/aio.c:1818 [inline] io_submit_one+0xeb/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fcb1d397188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fcb1d36e000 RBP: 00007fcb1d3971d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc9e29b3ff R14: 00007fcb1d397300 R15: 0000000000022000 CPU: 0 PID: 10062 Comm: syz-executor.4 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5e6c0c2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f5e6c099000 RBP: 00007f5e6c0c21d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc24f7ed7f R14: 00007f5e6c0c2300 R15: 0000000000022000 CPU: 1 PID: 10063 Comm: syz-executor.3 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6f4d50f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6f4d4e6000 RBP: 00007f6f4d50f1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd74cf697f R14: 00007f6f4d50f300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 10073 Comm: syz-executor.5 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f354463d188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f3544614000 RBP: 00007f354463d1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdd73f916f R14: 00007f354463d300 R15: 0000000000022000 CPU: 0 PID: 10087 Comm: syz-executor.4 Not tainted 4.19.204-syzkaller #0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5e6c0c2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f5e6c099000 RBP: 00007f5e6c0c21d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc24f7ed7f R14: 00007f5e6c0c2300 R15: 0000000000022000 CPU: 1 PID: 10090 Comm: syz-executor.0 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd0caac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fd0caaa0000 RBP: 00007fd0caac91d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fffeaa4cc8f R14: 00007fd0caac9300 R15: 0000000000022000 CPU: 0 PID: 10085 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x2b5/0x3d0 mm/slab.c:3736 kmalloc_array include/linux/slab.h:637 [inline] kcalloc include/linux/slab.h:648 [inline] ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580 ext4_overwrite_io fs/ext4/file.c:152 [inline] ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6289ef1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6289ec8000 RBP: 00007f6289ef11d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdff8965af R14: 00007f6289ef1300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 10095 Comm: syz-executor.3 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6f4d530188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6f4d507000 RBP: 00007f6f4d5301d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd74cf697f R14: 00007f6f4d530300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 10107 Comm: syz-executor.1 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x47/0x390 mm/slab.c:3557 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505 mempool_alloc+0x118/0x320 mm/mempool.c:385 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493 bio_alloc include/linux/bio.h:437 [inline] mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730 fat_writepages+0x10/0x20 fs/fat/inode.c:198 do_writepages+0xca/0x240 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446 filemap_write_and_wait_range mm/filemap.c:679 [inline] filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323 call_write_iter include/linux/fs.h:1821 [inline] aio_write+0x2e4/0x560 fs/aio.c:1574 __io_submit_one fs/aio.c:1858 [inline] io_submit_one+0x764/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fcb1d3d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fcb1d3b0000 RBP: 00007fcb1d3d91d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc9e29b3ff R14: 00007fcb1d3d9300 R15: 0000000000022000 CPU: 0 PID: 10131 Comm: syz-executor.3 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:3088 [inline] prepare_alloc_pages mm/page_alloc.c:4346 [inline] __alloc_pages_nodemask+0x23c/0x25a0 mm/page_alloc.c:4393 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa5/0x8b0 mm/slab.c:2682 cache_alloc_refill+0x2ac/0x380 mm/slab.c:3049 ____cache_alloc mm/slab.c:3132 [inline] __do_cache_alloc mm/slab.c:3354 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x361/0x390 mm/slab.c:3557 aio_get_req fs/aio.c:1027 [inline] __io_submit_one fs/aio.c:1818 [inline] io_submit_one+0xeb/0x1db0 fs/aio.c:1909 __do_sys_io_submit fs/aio.c:1953 [inline] __se_sys_io_submit+0x112/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6f4d530188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f6f4d507000 RBP: 00007f6f4d5301d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd74cf697f R14: 00007f6f4d530300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 10136 Comm: syz-executor.5 Not tainted 4.19.204-syzkaller #0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc+0x28e/0x390 mm/slab.c:3557 ptlock_alloc+0x1d/0x70 mm/memory.c:4969 ptlock_init include/linux/mm.h:1900 [inline] pgtable_page_ctor include/linux/mm.h:1934 [inline] pte_alloc_one+0x4e/0x130 arch/x86/mm/pgtable.c:38 do_fault_around mm/memory.c:3769 [inline] do_read_fault mm/memory.c:3810 [inline] do_fault mm/memory.c:3944 [inline] handle_pte_fault mm/memory.c:4175 [inline] __handle_mm_fault+0x2b69/0x4100 mm/memory.c:4299 handle_mm_fault+0x3dd/0x8b0 mm/memory.c:4336 __do_page_fault+0x4dc/0xab0 arch/x86/mm/fault.c:1412 do_page_fault+0x64/0x3b0 arch/x86/mm/fault.c:1487 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205 RIP: 0010:__get_user_4+0x21/0x30 arch/x86/lib/getuser.S:78 Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 80 df 01 00 48 3b 82 58 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 RSP: 0018:ffff88807dc5fd68 EFLAGS: 00010206 RAX: 00007f35445f3003 RBX: 1ffff1100fb8bfaf RCX: 0000000000000001 RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000282 RBP: ffff88807dc5fe00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00007f35445f3000 R13: ffff88809980f200 R14: ffffffffffffffea R15: ffff88807dc5fdd8 __do_sys_io_submit fs/aio.c:1935 [inline] __se_sys_io_submit+0x9e/0x390 fs/aio.c:1924 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f354461c188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f35445f3000 RBP: 00007f354461c1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffdd73f916f R14: 00007f354461c300 R15: 0000000000022000 CPU: 0 PID: 10137 Comm: syz-executor.4 Not tainted 4.19.204-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x17c/0x226 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.2+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1590 ---------------- Code disassembly (best guess): 0: 50 push %rax 1: ff 31 pushq (%rcx) 3: c0 0f 1f rorb $0x1f,(%rdi) 6: 00 c3 add %al,%bl 8: 90 nop 9: 48 83 c0 03 add $0x3,%rax d: 72 55 jb 0x64 f: 65 48 8b 14 25 80 df mov %gs:0x1df80,%rdx 16: 01 00 18: 48 3b 82 58 14 00 00 cmp 0x1458(%rdx),%rax 1f: 73 43 jae 0x64 21: 48 19 d2 sbb %rdx,%rdx 24: 48 21 d0 and %rdx,%rax 27: 0f 1f 00 nopl (%rax) * 2a: 8b 50 fd mov -0x3(%rax),%edx <-- trapping instruction 2d: 31 c0 xor %eax,%eax 2f: 0f 1f 00 nopl (%rax) 32: c3 retq 33: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) 39: 48 83 c0 07 add $0x7,%rax 3d: 72 25 jb 0x64 3f: 65 gs