WARNING: can't dereference registers at ffff88809f6a4628 for ip common_interrupt+0x93/0x93 arch/x86/entry/entry_64.S:576 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 13486 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x154 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x40/0x3c0 mm/slab.c:3550 kmem_cache_zalloc include/linux/slab.h:651 [inline] fill_pool lib/debugobjects.c:110 [inline] __debug_object_init+0x57d/0x7a0 lib/debugobjects.c:341 debug_object_init lib/debugobjects.c:393 [inline] debug_object_activate+0x274/0x450 lib/debugobjects.c:474 debug_rcu_head_queue kernel/rcu/rcu.h:152 [inline] __call_rcu.constprop.0+0x31/0x7e0 kernel/rcu/tree.c:3050 task_work_run+0x113/0x190 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x45cba9 RSP: 002b:00007f2c7687bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 000000000050ca80 RCX: 000000000045cba9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000cb6 R14: 00000000004cf091 R15: 00007f2c7687c6d4 ip_tables: iptables: counters copy to user failed while replacing table ip_tables: iptables: counters copy to user failed while replacing table nla_parse: 14 callbacks suppressed netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004 netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. audit: type=1800 audit(1594574461.754:71): pid=13719 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16217 res=0 HTB: quantum of class FFFF0002 is big. Consider r2q change. print_req_error: I/O error, dev loop4, sector 0 HTB: quantum of class FFFF0002 is big. Consider r2q change. audit: type=1800 audit(1594574462.484:72): pid=13781 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16217 res=0 HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. nla_parse: 15 callbacks suppressed netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. HTB: quantum of class FFFF0002 is big. Consider r2q change. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. HTB: quantum of class FFFF0002 is big. Consider r2q change. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. HTB: quantum of class FFFF0002 is big. Consider r2q change. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. HTB: quantum of class FFFF0002 is big. Consider r2q change. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. HTB: quantum of class FFFF0002 is big. Consider r2q change. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. HTB: quantum of class FFFF0002 is big. Consider r2q change. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. HTB: quantum of class FFFF0002 is big. Consider r2q change. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. HTB: quantum of class FFFF0002 is big. Consider r2q change. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change. HTB: quantum of class FFFF0002 is big. Consider r2q change.