bisecting fixing commit since 4938296e03bd227e5020d63d418956fe52baf97c
building syzkaller on 241790bb6f90cf276f6d68a7c6768be40880bef1
testing commit 4938296e03bd227e5020d63d418956fe52baf97c
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 42e6db10cf58a233b4489892e4a1de2b596efc5e3e15ce0875b759eee820becc
run #0: crashed: possible deadlock in generic_file_write_iter
run #1: crashed: possible deadlock in generic_file_write_iter
run #2: crashed: possible deadlock in generic_file_write_iter
run #3: crashed: possible deadlock in generic_file_write_iter
run #4: crashed: possible deadlock in corrupted
run #5: crashed: possible deadlock in corrupted
run #6: crashed: possible deadlock in generic_file_write_iter
run #7: crashed: possible deadlock in generic_file_write_iter
run #8: crashed: possible deadlock in generic_file_write_iter
run #9: crashed: possible deadlock in corrupted
run #10: crashed: possible deadlock in generic_file_write_iter
run #11: crashed: possible deadlock in generic_file_write_iter
run #12: crashed: possible deadlock in generic_file_write_iter
run #13: crashed: possible deadlock in generic_file_write_iter
run #14: crashed: possible deadlock in generic_file_write_iter
run #15: crashed: possible deadlock in corrupted
run #16: crashed: possible deadlock in generic_file_write_iter
run #17: crashed: possible deadlock in generic_file_write_iter
run #18: crashed: possible deadlock in corrupted
run #19: crashed: possible deadlock in generic_file_write_iter
testing current HEAD b172b44fcb1771e083aad806fa96f3f60e2ddfac
testing commit b172b44fcb1771e083aad806fa96f3f60e2ddfac
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 26749afaf97d0a1f40eb52771691fdbd27327b4e0ac8600c06aa812aada76619
run #0: crashed: possible deadlock in corrupted
run #1: crashed: possible deadlock in corrupted
run #2: crashed: possible deadlock in corrupted
run #3: crashed: possible deadlock in generic_file_write_iter
run #4: crashed: possible deadlock in generic_file_write_iter
run #5: crashed: possible deadlock in generic_file_write_iter
run #6: crashed: possible deadlock in generic_file_write_iter
run #7: crashed: possible deadlock in corrupted
run #8: crashed: possible deadlock in __generic_file_fsync
run #9: crashed: possible deadlock in generic_file_write_iter
revisions tested: 2, total time: 29m52.19813846s (build: 22m14.737460939s, test: 6m51.563707916s)
the crash still happens on HEAD
commit msg: Linux 4.19.206
crash: possible deadlock in generic_file_write_iter
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f959260e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
======================================================
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
WARNING: possible circular locking dependency detected
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f95925e5000
4.19.206-syzkaller #0 Not tainted
RBP: 00007f959260e1d0 R08: 0000000000000000 R09: 0000000000000000
------------------------------------------------------
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
syz-executor.1/9993 is trying to acquire lock:
R13: 00007ffcb48e543f R14: 00007f959260e300 R15: 0000000000022000
000000003a462ce2 ((wq_completion)"dio/%s"sb->s_id){+.+.}, at: flush_workqueue+0xcf/0x1350 kernel/workqueue.c:2658
CPU: 1 PID: 10011 Comm: syz-executor.0 Not tainted 4.19.206-syzkaller #0

but task is already holding lock:
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
000000000a730b88 (&sb->s_type->i_mutex_key#21){+.+.}, at: inode_lock include/linux/fs.h:748 [inline]
000000000a730b88 (&sb->s_type->i_mutex_key#21){+.+.}, at: generic_file_write_iter+0x97/0x660 mm/filemap.c:3320
Call Trace:

which lock already depends on the new lock.

 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118

the existing dependency chain (in reverse order) is:

-> #2 (&sb->s_type->i_mutex_key#21){+.+.}:
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
       down_write+0x38/0x90 kernel/locking/rwsem.c:70
       inode_lock include/linux/fs.h:748 [inline]
       __generic_file_fsync+0x8a/0x1a0 fs/libfs.c:989
 __should_failslab+0xba/0xf0 mm/failslab.c:32
       fat_file_fsync+0x61/0x200 fs/fat/file.c:198
 should_failslab+0x9/0x20 mm/slab_common.c:1590
       vfs_fsync_range+0xee/0x220 fs/sync.c:197
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
       generic_write_sync include/linux/fs.h:2750 [inline]
       dio_complete+0x55b/0x970 fs/direct-io.c:329
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
       dio_aio_complete_work+0x17/0x20 fs/direct-io.c:341
 mempool_alloc+0x118/0x320 mm/mempool.c:385
       process_one_work+0x7b9/0x15a0 kernel/workqueue.c:2153
       worker_thread+0x85/0xb60 kernel/workqueue.c:2296
       kthread+0x347/0x410 kernel/kthread.c:259
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
       ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415

-> #1 ((work_completion)(&dio->complete_work)){+.+.}:
       process_one_work+0x76c/0x15a0 kernel/workqueue.c:2129
       worker_thread+0x85/0xb60 kernel/workqueue.c:2296
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
       kthread+0x347/0x410 kernel/kthread.c:259
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
       ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415

-> #0 ((wq_completion)"dio/%s"sb->s_id){+.+.}:
       lock_acquire+0x180/0x3a0 kernel/locking/lockdep.c:3908
       flush_workqueue+0xf2/0x1350 kernel/workqueue.c:2661
       drain_workqueue+0x148/0x3a0 kernel/workqueue.c:2826
       destroy_workqueue+0x68/0x5d0 kernel/workqueue.c:4183
       __alloc_workqueue_key+0x965/0xbb0 kernel/workqueue.c:4160
       sb_init_dio_done_wq+0x32/0x80 fs/direct-io.c:623
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
       do_blockdev_direct_IO fs/direct-io.c:1285 [inline]
       __blockdev_direct_IO+0x5bc/0xc5f0 fs/direct-io.c:1419
       blockdev_direct_IO include/linux/fs.h:3059 [inline]
       fat_direct_IO+0x182/0x2d0 fs/fat/inode.c:282
       generic_file_direct_write+0x1ee/0x410 mm/filemap.c:3073
       __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
       generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
       call_write_iter include/linux/fs.h:1821 [inline]
       aio_write+0x2e4/0x560 fs/aio.c:1574
       __io_submit_one fs/aio.c:1858 [inline]
       io_submit_one+0x764/0x1db0 fs/aio.c:1909
       __do_sys_io_submit fs/aio.c:1953 [inline]
       __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
       __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
       do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

other info that might help us debug this:

 fat_writepages+0x10/0x20 fs/fat/inode.c:198
Chain exists of:
  (wq_completion)"dio/%s"sb->s_id --> (work_completion)(&dio->complete_work) --> &sb->s_type->i_mutex_key#21

 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&sb->s_type->i_mutex_key#21);
                               lock((work_completion)(&dio->complete_work));
                               lock(&sb->s_type->i_mutex_key#21);
  lock((wq_completion)"dio/%s"sb->s_id);
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446

 *** DEADLOCK ***

1 lock held by syz-executor.1/9993:
 #0: 000000000a730b88 (&sb->s_type->i_mutex_key#21){+.+.}, at: inode_lock include/linux/fs.h:748 [inline]
 #0: 000000000a730b88 (&sb->s_type->i_mutex_key#21){+.+.}, at: generic_file_write_iter+0x97/0x660 mm/filemap.c:3320
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673

stack backtrace:
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2526f5e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f2526f35000
RBP: 00007f2526f5e1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffdf63115ff R14: 00007f2526f5e300 R15: 0000000000022000
CPU: 0 PID: 9993 Comm: syz-executor.1 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 print_circular_bug.isra.17.cold.34+0x2e3/0x41e kernel/locking/lockdep.c:1222
 check_prev_add kernel/locking/lockdep.c:1866 [inline]
 check_prevs_add kernel/locking/lockdep.c:1979 [inline]
 validate_chain kernel/locking/lockdep.c:2420 [inline]
 __lock_acquire+0x35c2/0x47c0 kernel/locking/lockdep.c:3416
 lock_acquire+0x180/0x3a0 kernel/locking/lockdep.c:3908
 flush_workqueue+0xf2/0x1350 kernel/workqueue.c:2661
 drain_workqueue+0x148/0x3a0 kernel/workqueue.c:2826
 destroy_workqueue+0x68/0x5d0 kernel/workqueue.c:4183
 __alloc_workqueue_key+0x965/0xbb0 kernel/workqueue.c:4160
 sb_init_dio_done_wq+0x32/0x80 fs/direct-io.c:623
 do_blockdev_direct_IO fs/direct-io.c:1285 [inline]
 __blockdev_direct_IO+0x5bc/0xc5f0 fs/direct-io.c:1419
 blockdev_direct_IO include/linux/fs.h:3059 [inline]
 fat_direct_IO+0x182/0x2d0 fs/fat/inode.c:282
 generic_file_direct_write+0x1ee/0x410 mm/filemap.c:3073
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa323b45188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fa323b1c000
RBP: 00007fa323b451d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd75af917f R14: 00007fa323b45300 R15: 0000000000022000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 10034 Comm: syz-executor.3 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f74b0b19188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f74b0af0000
RBP: 00007f74b0b191d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fff10554f4f R14: 00007f74b0b19300 R15: 0000000000022000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 10035 Comm: syz-executor.4 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1bb68ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f1bb68c6000
RBP: 00007f1bb68ef1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe06a5c06f R14: 00007f1bb68ef300 R15: 0000000000022000
CPU: 0 PID: 10036 Comm: syz-executor.1 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa323b24188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fa323afb000
RBP: 00007fa323b241d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd75af917f R14: 00007fa323b24300 R15: 0000000000022000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 10042 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3f7c6ad188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f3f7c684000
RBP: 00007f3f7c6ad1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe1af9b15f R14: 00007f3f7c6ad300 R15: 0000000000022000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 10049 Comm: syz-executor.0 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2526f7f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f2526f35000
RBP: 00007f2526f7f1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffdf63115ff R14: 00007f2526f7f300 R15: 0000000000022000
CPU: 1 PID: 10053 Comm: syz-executor.4 Not tainted 4.19.206-syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1bb68ef188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f1bb68c6000
RBP: 00007f1bb68ef1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe06a5c06f R14: 00007f1bb68ef300 R15: 0000000000022000
CPU: 0 PID: 10064 Comm: syz-executor.1 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa323b24188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fa323afb000
RBP: 00007fa323b241d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd75af917f R14: 00007fa323b24300 R15: 0000000000022000
CPU: 1 PID: 10065 Comm: syz-executor.2 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f95925cc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f95925a3000
RBP: 00007f95925cc1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffcb48e543f R14: 00007f95925cc300 R15: 0000000000022000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 10095 Comm: syz-executor.0 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2526f5e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f2526f35000
RBP: 00007f2526f5e1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffdf63115ff R14: 00007f2526f5e300 R15: 0000000000022000
CPU: 0 PID: 10103 Comm: syz-executor.4 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 should_fail_alloc_page mm/page_alloc.c:3088 [inline]
 prepare_alloc_pages mm/page_alloc.c:4346 [inline]
 __alloc_pages_nodemask+0x23c/0x25a0 mm/page_alloc.c:4393
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa5/0x8b0 mm/slab.c:2682
 cache_alloc_refill+0x2ac/0x380 mm/slab.c:3049
 ____cache_alloc mm/slab.c:3132 [inline]
 __do_cache_alloc mm/slab.c:3354 [inline]
 slab_alloc mm/slab.c:3389 [inline]
 kmem_cache_alloc+0x361/0x390 mm/slab.c:3557
 aio_get_req fs/aio.c:1027 [inline]
 __io_submit_one fs/aio.c:1818 [inline]
 io_submit_one+0xeb/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1bb68ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f1bb68a5000
RBP: 00007f1bb68ce1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe06a5c06f R14: 00007f1bb68ce300 R15: 0000000000022000
CPU: 1 PID: 10107 Comm: syz-executor.2 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f95925ed188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f95925c4000
RBP: 00007f95925ed1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffcb48e543f R14: 00007f95925ed300 R15: 0000000000022000
CPU: 0 PID: 10077 Comm: syz-executor.3 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f74b0b3a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f74b0b11000
RBP: 00007f74b0b3a1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fff10554f4f R14: 00007f74b0b3a300 R15: 0000000000022000
CPU: 1 PID: 10076 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3f7c6ad188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f3f7c663000
RBP: 00007f3f7c6ad1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe1af9b15f R14: 00007f3f7c6ad300 R15: 0000000000022000
CPU: 0 PID: 10102 Comm: syz-executor.1 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa323b24188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fa323afb000
RBP: 00007fa323b241d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd75af917f R14: 00007fa323b24300 R15: 0000000000022000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 10141 Comm: syz-executor.3 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f74b0b3a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f74b0b11000
RBP: 00007f74b0b3a1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fff10554f4f R14: 00007f74b0b3a300 R15: 0000000000022000
CPU: 0 PID: 10138 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 should_fail_alloc_page mm/page_alloc.c:3088 [inline]
 prepare_alloc_pages mm/page_alloc.c:4346 [inline]
 __alloc_pages_nodemask+0x23c/0x25a0 mm/page_alloc.c:4393
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa5/0x8b0 mm/slab.c:2682
 cache_alloc_refill+0x2ac/0x380 mm/slab.c:3049
 ____cache_alloc mm/slab.c:3132 [inline]
 __do_cache_alloc mm/slab.c:3354 [inline]
 slab_alloc mm/slab.c:3389 [inline]
 kmem_cache_alloc+0x361/0x390 mm/slab.c:3557
 aio_get_req fs/aio.c:1027 [inline]
 __io_submit_one fs/aio.c:1818 [inline]
 io_submit_one+0xeb/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f3f7c6ad188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f3f7c684000
RBP: 00007f3f7c6ad1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe1af9b15f R14: 00007f3f7c6ad300 R15: 0000000000022000
CPU: 1 PID: 10131 Comm: syz-executor.1 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa323b45188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007fa323b1c000
RBP: 00007fa323b451d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffd75af917f R14: 00007fa323b45300 R15: 0000000000022000
CPU: 1 PID: 10154 Comm: syz-executor.2 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f95925e4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f95925e5000
RBP: 00007f95925e41d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffcb48e543f R14: 00007f95925e4300 R15: 0000000000022000
CPU: 0 PID: 10130 Comm: syz-executor.4 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1bb6910188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f1bb68e7000
RBP: 00007f1bb69101d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe06a5c06f R14: 00007f1bb6910300 R15: 0000000000022000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 10169 Comm: syz-executor.3 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 __do_kmalloc mm/slab.c:3725 [inline]
 __kmalloc+0x2b5/0x3d0 mm/slab.c:3736
 kmalloc_array include/linux/slab.h:637 [inline]
 kcalloc include/linux/slab.h:648 [inline]
 ext4_find_extent+0x615/0xa80 fs/ext4/extents.c:894
 ext4_ext_map_blocks+0x197/0x51d0 fs/ext4/extents.c:4312
 ext4_map_blocks+0xad3/0x16a0 fs/ext4/inode.c:580
 ext4_overwrite_io fs/ext4/file.c:152 [inline]
 ext4_file_write_iter+0x489/0xe50 fs/ext4/file.c:263
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f74b0b19188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f74b0af0000
RBP: 00007f74b0b191d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fff10554f4f R14: 00007f74b0b19300 R15: 0000000000022000
FAT-fs (loop3): Unrecognized mount option "./bus" or missing value
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 10186 Comm: syz-executor.2 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x28e/0x390 mm/slab.c:3557
 ptlock_alloc+0x1d/0x70 mm/memory.c:4969
 ptlock_init include/linux/mm.h:1900 [inline]
 pgtable_page_ctor include/linux/mm.h:1934 [inline]
 pte_alloc_one+0x4e/0x130 arch/x86/mm/pgtable.c:38
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 do_fault_around mm/memory.c:3769 [inline]
 do_read_fault mm/memory.c:3810 [inline]
 do_fault mm/memory.c:3944 [inline]
 handle_pte_fault mm/memory.c:4175 [inline]
 __handle_mm_fault+0x2b69/0x4100 mm/memory.c:4299
 handle_mm_fault+0x3dd/0x8b0 mm/memory.c:4336
 __do_page_fault+0x4dc/0xab0 arch/x86/mm/fault.c:1412
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 do_page_fault+0x64/0x3b0 arch/x86/mm/fault.c:1487
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0010:__get_user_4+0x21/0x30 arch/x86/lib/getuser.S:78
Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 c0 df 01 00 48 3b 82 58 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65
RSP: 0018:ffff88807e7a7d68 EFLAGS: 00010206
RAX: 00007f95925e5003 RBX: 1ffff1100fcf4faf RCX: 0000000000000001
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000282
RBP: ffff88807e7a7e00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00007f95925e5000
R13: ffff8880986804c0 R14: ffffffffffffffea R15: ffff88807e7a7dd8
 __do_sys_io_submit fs/aio.c:1935 [inline]
 __se_sys_io_submit+0x9e/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f959260e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f95925e5000
RBP: 00007f959260e1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffcb48e543f R14: 00007f959260e300 R15: 0000000000022000
CPU: 1 PID: 10182 Comm: syz-executor.4 Not tainted 4.19.206-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
 do_writepages+0xca/0x240 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x236/0x300 mm/filemap.c:446
 filemap_write_and_wait_range mm/filemap.c:679 [inline]
 filemap_write_and_wait_range+0x30/0x90 mm/filemap.c:673
 generic_file_direct_write+0x193/0x410 mm/filemap.c:3049
 __generic_file_write_iter+0x279/0x590 mm/filemap.c:3252
 generic_file_write_iter+0x302/0x660 mm/filemap.c:3323
 call_write_iter include/linux/fs.h:1821 [inline]
 aio_write+0x2e4/0x560 fs/aio.c:1574
 __io_submit_one fs/aio.c:1858 [inline]
 io_submit_one+0x764/0x1db0 fs/aio.c:1909
 __do_sys_io_submit fs/aio.c:1953 [inline]
 __se_sys_io_submit+0x112/0x390 fs/aio.c:1924
 __x64_sys_io_submit+0x6e/0xb0 fs/aio.c:1924
 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665e9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1bb6910188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
RDX: 0000000020000540 RSI: 0000000000000002 RDI: 00007f1bb68e7000
RBP: 00007f1bb69101d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe06a5c06f R14: 00007f1bb6910300 R15: 0000000000022000
CPU: 0 PID: 10185 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x17c/0x226 lib/dump_stack.c:118
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.2+0x5/0xa lib/fault-inject.c:149
 __should_failslab+0xba/0xf0 mm/failslab.c:32
 should_failslab+0x9/0x20 mm/slab_common.c:1590
 slab_pre_alloc_hook mm/slab.h:424 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x47/0x390 mm/slab.c:3557
 mempool_alloc_slab+0x3a/0x50 mm/mempool.c:505
 mempool_alloc+0x118/0x320 mm/mempool.c:385
 bio_alloc_bioset+0x1a5/0x520 block/bio.c:493
 bio_alloc include/linux/bio.h:437 [inline]
 mpage_alloc.isra.0+0x37/0x220 fs/mpage.c:79
 __mpage_writepage+0xcaa/0x15c0 fs/mpage.c:636
 write_cache_pages+0x5bc/0xf70 mm/page-writeback.c:2240
 mpage_writepages+0xc2/0x1f0 fs/mpage.c:730
 fat_writepages+0x10/0x20 fs/fat/inode.c:198
----------------
Code disassembly (best guess):
   0:	50                   	push   %rax
   1:	ff 31                	pushq  (%rcx)
   3:	c0 0f 1f             	rorb   $0x1f,(%rdi)
   6:	00 c3                	add    %al,%bl
   8:	90                   	nop
   9:	48 83 c0 03          	add    $0x3,%rax
   d:	72 55                	jb     0x64
   f:	65 48 8b 14 25 c0 df 	mov    %gs:0x1dfc0,%rdx
  16:	01 00
  18:	48 3b 82 58 14 00 00 	cmp    0x1458(%rdx),%rax
  1f:	73 43                	jae    0x64
  21:	48 19 d2             	sbb    %rdx,%rdx
  24:	48 21 d0             	and    %rdx,%rax
  27:	0f 1f 00             	nopl   (%rax)
* 2a:	8b 50 fd             	mov    -0x3(%rax),%edx <-- trapping instruction
  2d:	31 c0                	xor    %eax,%eax
  2f:	0f 1f 00             	nopl   (%rax)
  32:	c3                   	retq
  33:	66 0f 1f 44 00 00    	nopw   0x0(%rax,%rax,1)
  39:	48 83 c0 07          	add    $0x7,%rax
  3d:	72 25                	jb     0x64
  3f:	65                   	gs