kmem_cache_node           51KB         51KB
kmem_cache                82KB         82KB
oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=7074,uid=0
BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7074, name: syz-executor.7
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
4 locks held by syz-executor.7/7074:
 #0: ffff88800b4f4f90 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xa9/0x270 kernel/trace/blktrace.c:725
 #1: ffffffff852461a8 (relay_channels_mutex){+.+.}-{3:3}, at: relay_open kernel/relay.c:518 [inline]
 #1: ffffffff852461a8 (relay_channels_mutex){+.+.}-{3:3}, at: relay_open+0x39c/0x970 kernel/relay.c:477
 #2: ffffffff85278aa8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline]
 #2: ffffffff85278aa8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063
 #3: ffff888040aebe20 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline]
 #3: ffff888040aebe20 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline]
 #3: ffff888040aebe20 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 1 PID: 7074 Comm: syz-executor.7 Not tainted 5.16.0-next-20220120 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583
 __mutex_lock_common kernel/locking/mutex.c:577 [inline]
 __mutex_lock+0x9e/0x1480 kernel/locking/mutex.c:733
 futex_cleanup_begin kernel/futex/core.c:1058 [inline]
 futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893
 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003
 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114
 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline]
 __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063
 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394
 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271
 relay_alloc_buf kernel/relay.c:124 [inline]
 relay_create_buf kernel/relay.c:165 [inline]
 relay_open_buf.part.0+0x2a4/0xc00 kernel/relay.c:387
 relay_open_buf kernel/relay.c:384 [inline]
 relay_open kernel/relay.c:520 [inline]
 relay_open+0x4ec/0x970 kernel/relay.c:477
 do_blk_trace_setup+0x4c3/0xc80 kernel/trace/blktrace.c:549
 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:589
 blk_trace_ioctl+0x13b/0x270 kernel/trace/blktrace.c:730
 blkdev_ioctl+0x18d/0x7f0 block/ioctl.c:577
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl fs/ioctl.c:860 [inline]
 __x64_sys_ioctl+0x196/0x210 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f9bda0d5b19
Code: Unable to access opcode bytes at RIP 0x7f9bda0d5aef.
RSP: 002b:00007f9bd764b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f9bda1e8f60 RCX: 00007f9bda0d5b19
RDX: 00000000200001c0 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007f9bda12ff6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff57081c1f R14: 00007f9bd764b300 R15: 0000000000022000
 </TASK>

=============================
[ BUG: Invalid wait context ]
5.16.0-next-20220120 #1 Tainted: G        W        
-----------------------------
syz-executor.7/7074 is trying to lock:
ffff888040aec830 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_cleanup_begin kernel/futex/core.c:1058 [inline]
ffff888040aec830 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
other info that might help us debug this:
context-{4:4}
4 locks held by syz-executor.7/7074:
 #0: ffff88800b4f4f90 (&q->debugfs_mutex){+.+.}-{3:3}, at: blk_trace_ioctl+0xa9/0x270 kernel/trace/blktrace.c:725
 #1: ffffffff852461a8 (relay_channels_mutex){+.+.}-{3:3}, at: relay_open kernel/relay.c:518 [inline]
 #1: ffffffff852461a8 (relay_channels_mutex){+.+.}-{3:3}, at: relay_open+0x39c/0x970 kernel/relay.c:477
 #2: ffffffff85278aa8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_may_oom mm/page_alloc.c:4281 [inline]
 #2: ffffffff85278aa8 (oom_lock){+.+.}-{3:3}, at: __alloc_pages_slowpath.constprop.0+0xcc9/0x1f10 mm/page_alloc.c:5063
 #3: ffff888040aebe20 (&p->alloc_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline]
 #3: ffff888040aebe20 (&p->alloc_lock){+.+.}-{2:2}, at: task_lock include/linux/sched/task.h:170 [inline]
 #3: ffff888040aebe20 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 mm/oom_kill.c:144
stack backtrace:
CPU: 1 PID: 7074 Comm: syz-executor.7 Tainted: G        W         5.16.0-next-20220120 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 print_lock_invalid_wait_context kernel/locking/lockdep.c:4678 [inline]
 check_wait_context kernel/locking/lockdep.c:4739 [inline]
 __lock_acquire.cold+0xc8/0x3b4 kernel/locking/lockdep.c:4977
 lock_acquire kernel/locking/lockdep.c:5639 [inline]
 lock_acquire+0x1a2/0x4d0 kernel/locking/lockdep.c:5604
 __mutex_lock_common kernel/locking/mutex.c:600 [inline]
 __mutex_lock+0x136/0x1480 kernel/locking/mutex.c:733
 futex_cleanup_begin kernel/futex/core.c:1058 [inline]
 futex_exit_release+0x2d/0x220 kernel/futex/core.c:1110
 __oom_kill_process+0x373/0xf90 mm/oom_kill.c:893
 oom_kill_process+0xd7/0x5c0 mm/oom_kill.c:1003
 out_of_memory+0x11e7/0x14b0 mm/oom_kill.c:1114
 __alloc_pages_may_oom mm/page_alloc.c:4332 [inline]
 __alloc_pages_slowpath.constprop.0+0x1972/0x1f10 mm/page_alloc.c:5063
 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394
 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271
 relay_alloc_buf kernel/relay.c:124 [inline]
 relay_create_buf kernel/relay.c:165 [inline]
 relay_open_buf.part.0+0x2a4/0xc00 kernel/relay.c:387
 relay_open_buf kernel/relay.c:384 [inline]
 relay_open kernel/relay.c:520 [inline]
 relay_open+0x4ec/0x970 kernel/relay.c:477
 do_blk_trace_setup+0x4c3/0xc80 kernel/trace/blktrace.c:549
 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:589
 blk_trace_ioctl+0x13b/0x270 kernel/trace/blktrace.c:730
 blkdev_ioctl+0x18d/0x7f0 block/ioctl.c:577
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl fs/ioctl.c:860 [inline]
 __x64_sys_ioctl+0x196/0x210 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f9bda0d5b19
Code: Unable to access opcode bytes at RIP 0x7f9bda0d5aef.
RSP: 002b:00007f9bd764b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f9bda1e8f60 RCX: 00007f9bda0d5b19
RDX: 00000000200001c0 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007f9bda12ff6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff57081c1f R14: 00007f9bd764b300 R15: 0000000000022000
 </TASK>
Out of memory (oom_kill_allocating_task): Killed process 7074 (syz-executor.7) total-vm:93676kB, anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
syz-executor.7: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0
CPU: 1 PID: 7074 Comm: syz-executor.7 Tainted: G        W         5.16.0-next-20220120 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 warn_alloc.cold+0x95/0x18a mm/page_alloc.c:4238
 __alloc_pages_slowpath.constprop.0+0x1a21/0x1f10 mm/page_alloc.c:5125
 __alloc_pages+0x403/0x4e0 mm/page_alloc.c:5394
 alloc_pages+0x1a0/0x2f0 mm/mempolicy.c:2271
 relay_alloc_buf kernel/relay.c:124 [inline]
 relay_create_buf kernel/relay.c:165 [inline]
 relay_open_buf.part.0+0x2a4/0xc00 kernel/relay.c:387
 relay_open_buf kernel/relay.c:384 [inline]
 relay_open kernel/relay.c:520 [inline]
 relay_open+0x4ec/0x970 kernel/relay.c:477
 do_blk_trace_setup+0x4c3/0xc80 kernel/trace/blktrace.c:549
 __blk_trace_setup+0xca/0x180 kernel/trace/blktrace.c:589
 blk_trace_ioctl+0x13b/0x270 kernel/trace/blktrace.c:730
 blkdev_ioctl+0x18d/0x7f0 block/ioctl.c:577
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl fs/ioctl.c:860 [inline]
 __x64_sys_ioctl+0x196/0x210 fs/ioctl.c:860
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f9bda0d5b19
Code: Unable to access opcode bytes at RIP 0x7f9bda0d5aef.
RSP: 002b:00007f9bd764b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f9bda1e8f60 RCX: 00007f9bda0d5b19
RDX: 00000000200001c0 RSI: 00000000c0481273 RDI: 0000000000000003
RBP: 00007f9bda12ff6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff57081c1f R14: 00007f9bd764b300 R15: 0000000000022000
 </TASK>
Mem-Info:
active_anon:8453 inactive_anon:37554 isolated_anon:0
 active_file:15 inactive_file:145 isolated_file:19
 unevictable:0 dirty:0 writeback:0
 slab_reclaimable:8997 slab_unreclaimable:60362
 mapped:69699 shmem:154 pagetables:2335 bounce:0
 kernel_misc_reclaimable:0
 free:2198 free_pcp:0 free_cma:0
Node 0 active_anon:33812kB inactive_anon:150216kB active_file:60kB inactive_file:580kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:278796kB dirty:0kB writeback:0kB shmem:616kB writeback_tmp:0kB kernel_stack:5472kB pagetables:9340kB all_unreclaimable? no
Node 0 DMA free:6488kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 1617 1617 1617
Node 0 DMA32 free:2304kB boost:0kB min:5120kB low:6776kB high:8432kB reserved_highatomic:0KB active_anon:33812kB inactive_anon:150300kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:0kB present:2080640kB managed:1660804kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0
Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB
Node 0 DMA32: 386*4kB (UME) 84*8kB (UME) 25*16kB (UME) 6*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2808kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
311 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
524158 pages RAM
0 pages HighMem/MovableOnly
105117 pages reserved
loop4: detected capacity change from 0 to 16
EXT4-fs (loop4): VFS: Can't find ext4 filesystem
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 7139 Comm: syz-executor.1 Tainted: G        W         5.16.0-next-20220120 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail.cold+0x5/0xa lib/fault-inject.c:146
 should_failslab+0x5/0x10 mm/slab_common.c:1304
 slab_pre_alloc_hook mm/slab.h:707 [inline]
 slab_alloc_node mm/slub.c:3144 [inline]
 slab_alloc mm/slub.c:3238 [inline]
 kmem_cache_alloc+0x5b/0x480 mm/slub.c:3243
 mem_pool_alloc mm/kmemleak.c:430 [inline]
 create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:586
 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
 slab_post_alloc_hook mm/slab.h:735 [inline]
 slab_alloc_node mm/slub.c:3230 [inline]
 slab_alloc mm/slub.c:3238 [inline]
 kmem_cache_alloc+0x239/0x480 mm/slub.c:3243
 kmem_cache_zalloc include/linux/slab.h:705 [inline]
 __alloc_file+0x21/0x240 fs/file_table.c:132
 alloc_empty_file+0x6d/0x170 fs/file_table.c:181
 path_openat+0xe1/0x28a0 fs/namei.c:3595
 do_filp_open+0x1aa/0x400 fs/namei.c:3636
 do_sys_openat2+0x16d/0x4d0 fs/open.c:1214
 do_sys_open fs/open.c:1230 [inline]
 __do_sys_openat fs/open.c:1246 [inline]
 __se_sys_openat fs/open.c:1241 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1241
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f47da585a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f47d7b47ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f47da61c970 RCX: 00007f47da585a04
RDX: 0000000000000002 RSI: 00007f47d7b48000 RDI: 00000000ffffff9c
RBP: 00007f47d7b48000 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
 </TASK>
loop1: detected capacity change from 0 to 16
EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (2 blocks)
loop6: detected capacity change from 0 to 512
EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
EXT4-fs (loop6): group descriptors corrupted!
loop4: detected capacity change from 0 to 16
EXT4-fs (loop4): VFS: Can't find ext4 filesystem
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 7153 Comm: syz-executor.1 Tainted: G        W         5.16.0-next-20220120 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail.cold+0x5/0xa lib/fault-inject.c:146
 should_failslab+0x5/0x10 mm/slab_common.c:1304
 slab_pre_alloc_hook mm/slab.h:707 [inline]
 slab_alloc_node mm/slub.c:3144 [inline]
 slab_alloc mm/slub.c:3238 [inline]
 kmem_cache_alloc+0x5b/0x480 mm/slub.c:3243
 kmem_cache_zalloc include/linux/slab.h:705 [inline]
 lsm_file_alloc security/security.c:572 [inline]
 security_file_alloc+0x34/0x170 security/security.c:1508
 __alloc_file+0xb6/0x240 fs/file_table.c:137
 alloc_empty_file+0x6d/0x170 fs/file_table.c:181
 path_openat+0xe1/0x28a0 fs/namei.c:3595
 do_filp_open+0x1aa/0x400 fs/namei.c:3636
 do_sys_openat2+0x16d/0x4d0 fs/open.c:1214
 do_sys_open fs/open.c:1230 [inline]
 __do_sys_openat fs/open.c:1246 [inline]
 __se_sys_openat fs/open.c:1241 [inline]
 __x64_sys_openat+0x13f/0x1f0 fs/open.c:1241
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f47da585a04
Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
RSP: 002b:00007f47d7b47ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f47da61c970 RCX: 00007f47da585a04
RDX: 0000000000000002 RSI: 00007f47d7b48000 RDI: 00000000ffffff9c
RBP: 00007f47d7b48000 R08: 0000000000000000 R09: ffffffffffffffff
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
 </TASK>
loop6: detected capacity change from 0 to 512
EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
EXT4-fs (loop6): group descriptors corrupted!