======================================================
WARNING: possible circular locking dependency detected
4.17.0+ #84 Not tainted
------------------------------------------------------
syz-executor4/31699 is trying to acquire lock:
000000000dfc261d (&(&u->lock)->rlock/1){+.+.}, at: sk_diag_dump_icons net/unix/diag.c:82 [inline]
000000000dfc261d (&(&u->lock)->rlock/1){+.+.}, at: sk_diag_fill.isra.5+0xa43/0x10d0 net/unix/diag.c:144

but task is already holding lock:
00000000de46a26a (rlock-AF_UNIX){+.+.}, at: spin_lock include/linux/spinlock.h:310 [inline]
00000000de46a26a (rlock-AF_UNIX){+.+.}, at: sk_diag_dump_icons net/unix/diag.c:64 [inline]
00000000de46a26a (rlock-AF_UNIX){+.+.}, at: sk_diag_fill.isra.5+0x94e/0x10d0 net/unix/diag.c:144
dccp_xmit_packet: Payload too large (65423) for featneg.

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (rlock-AF_UNIX){+.+.}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x96/0xc0 kernel/locking/spinlock.c:152
       skb_queue_tail+0x26/0x150 net/core/skbuff.c:2915
       unix_dgram_sendmsg+0xf77/0x1730 net/unix/af_unix.c:1796
       sock_sendmsg_nosec net/socket.c:645 [inline]
       sock_sendmsg+0xd5/0x120 net/socket.c:655
       ___sys_sendmsg+0x525/0x940 net/socket.c:2161
       __sys_sendmmsg+0x240/0x6f0 net/socket.c:2256
       __do_sys_sendmmsg net/socket.c:2285 [inline]
       __se_sys_sendmmsg net/socket.c:2282 [inline]
       __x64_sys_sendmmsg+0x9d/0x100 net/socket.c:2282
       do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

-> #0 (&(&u->lock)->rlock/1){+.+.}:
       lock_acquire+0x1dc/0x520 kernel/locking/lockdep.c:3924
       _raw_spin_lock_nested+0x28/0x40 kernel/locking/spinlock.c:354
       sk_diag_dump_icons net/unix/diag.c:82 [inline]
       sk_diag_fill.isra.5+0xa43/0x10d0 net/unix/diag.c:144
       sk_diag_dump net/unix/diag.c:178 [inline]
       unix_diag_dump+0x35f/0x550 net/unix/diag.c:206
       netlink_dump+0x507/0xd20 net/netlink/af_netlink.c:2226
       __netlink_dump_start+0x51a/0x780 net/netlink/af_netlink.c:2323
       netlink_dump_start include/linux/netlink.h:214 [inline]
       unix_diag_handler_dump+0x3f4/0x7b0 net/unix/diag.c:307
       __sock_diag_cmd net/core/sock_diag.c:230 [inline]
       sock_diag_rcv_msg+0x2e0/0x3d0 net/core/sock_diag.c:261
       netlink_rcv_skb+0x172/0x440 net/netlink/af_netlink.c:2448
       sock_diag_rcv+0x2a/0x40 net/core/sock_diag.c:272
       netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline]
       netlink_unicast+0x58b/0x740 net/netlink/af_netlink.c:1336
       netlink_sendmsg+0x9f0/0xfa0 net/netlink/af_netlink.c:1901
       sock_sendmsg_nosec net/socket.c:645 [inline]
       sock_sendmsg+0xd5/0x120 net/socket.c:655
       sock_write_iter+0x35a/0x5a0 net/socket.c:924
       call_write_iter include/linux/fs.h:1793 [inline]
       do_iter_readv_writev+0x87d/0xa70 fs/read_write.c:680
       do_iter_write+0x185/0x5f0 fs/read_write.c:959
       vfs_writev+0x1c7/0x330 fs/read_write.c:1004
       do_writev+0x112/0x2f0 fs/read_write.c:1039
       __do_sys_writev fs/read_write.c:1112 [inline]
       __se_sys_writev fs/read_write.c:1109 [inline]
       __x64_sys_writev+0x75/0xb0 fs/read_write.c:1109
       do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(rlock-AF_UNIX);
                               lock(&(&u->lock)->rlock/1);
                               lock(rlock-AF_UNIX);
  lock(&(&u->lock)->rlock/1);

 *** DEADLOCK ***

5 locks held by syz-executor4/31699:
 #0: 00000000ec8dc3c4 (sock_diag_mutex){+.+.}, at: sock_diag_rcv+0x1b/0x40 net/core/sock_diag.c:271
 #1: 000000006edb87a2 (sock_diag_table_mutex){+.+.}, at: __sock_diag_cmd net/core/sock_diag.c:225 [inline]
 #1: 000000006edb87a2 (sock_diag_table_mutex){+.+.}, at: sock_diag_rcv_msg+0x169/0x3d0 net/core/sock_diag.c:261
 #2: 0000000029173676 (nlk_cb_mutex-SOCK_DIAG){+.+.}, at: netlink_dump+0x98/0xd20 net/netlink/af_netlink.c:2182
 #3: 00000000cf74e278 (unix_table_lock){+.+.}, at: spin_lock include/linux/spinlock.h:310 [inline]
 #3: 00000000cf74e278 (unix_table_lock){+.+.}, at: unix_diag_dump+0x10a/0x550 net/unix/diag.c:192
 #4: 00000000de46a26a (rlock-AF_UNIX){+.+.}, at: spin_lock include/linux/spinlock.h:310 [inline]
 #4: 00000000de46a26a (rlock-AF_UNIX){+.+.}, at: sk_diag_dump_icons net/unix/diag.c:64 [inline]
 #4: 00000000de46a26a (rlock-AF_UNIX){+.+.}, at: sk_diag_fill.isra.5+0x94e/0x10d0 net/unix/diag.c:144

stack backtrace:
CPU: 0 PID: 31699 Comm: syz-executor4 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 print_circular_bug.isra.36.cold.56+0x1bd/0x27d kernel/locking/lockdep.c:1227
 check_prev_add kernel/locking/lockdep.c:1867 [inline]
 check_prevs_add kernel/locking/lockdep.c:1980 [inline]
 validate_chain kernel/locking/lockdep.c:2421 [inline]
 __lock_acquire+0x343e/0x5140 kernel/locking/lockdep.c:3435
 lock_acquire+0x1dc/0x520 kernel/locking/lockdep.c:3924
 _raw_spin_lock_nested+0x28/0x40 kernel/locking/spinlock.c:354
 sk_diag_dump_icons net/unix/diag.c:82 [inline]
 sk_diag_fill.isra.5+0xa43/0x10d0 net/unix/diag.c:144
 sk_diag_dump net/unix/diag.c:178 [inline]
 unix_diag_dump+0x35f/0x550 net/unix/diag.c:206
 netlink_dump+0x507/0xd20 net/netlink/af_netlink.c:2226
 __netlink_dump_start+0x51a/0x780 net/netlink/af_netlink.c:2323
 netlink_dump_start include/linux/netlink.h:214 [inline]
 unix_diag_handler_dump+0x3f4/0x7b0 net/unix/diag.c:307
 __sock_diag_cmd net/core/sock_diag.c:230 [inline]
 sock_diag_rcv_msg+0x2e0/0x3d0 net/core/sock_diag.c:261
 netlink_rcv_skb+0x172/0x440 net/netlink/af_netlink.c:2448
 sock_diag_rcv+0x2a/0x40 net/core/sock_diag.c:272
 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline]
 netlink_unicast+0x58b/0x740 net/netlink/af_netlink.c:1336
 netlink_sendmsg+0x9f0/0xfa0 net/netlink/af_netlink.c:1901
 sock_sendmsg_nosec net/socket.c:645 [inline]
 sock_sendmsg+0xd5/0x120 net/socket.c:655
 sock_write_iter+0x35a/0x5a0 net/socket.c:924
 call_write_iter include/linux/fs.h:1793 [inline]
 do_iter_readv_writev+0x87d/0xa70 fs/read_write.c:680
 do_iter_write+0x185/0x5f0 fs/read_write.c:959
 vfs_writev+0x1c7/0x330 fs/read_write.c:1004
 do_writev+0x112/0x2f0 fs/read_write.c:1039
 __do_sys_writev fs/read_write.c:1112 [inline]
 __se_sys_writev fs/read_write.c:1109 [inline]
 __x64_sys_writev+0x75/0xb0 fs/read_write.c:1109
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007fd9b6e77c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
RAX: ffffffffffffffda RBX: 00007fd9b6e786d4 RCX: 0000000000455b29
RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000016
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004c078f R14: 00000000004d3f00 R15: 0000000000000000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 1
CPU: 1 PID: 32390 Comm: syz-executor2 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
 __should_failslab+0x124/0x180 mm/failslab.c:32
 should_failslab+0x9/0x14 mm/slab_common.c:1522
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 kmem_cache_alloc+0x2af/0x760 mm/slab.c:3552
 anon_vma_chain_alloc mm/rmap.c:128 [inline]
 __anon_vma_prepare+0xbc/0x700 mm/rmap.c:182
 anon_vma_prepare include/linux/rmap.h:153 [inline]
 do_huge_pmd_anonymous_page+0x1423/0x1d20 mm/huge_memory.c:675
 create_huge_pmd mm/memory.c:3863 [inline]
 __handle_mm_fault+0x2d61/0x4390 mm/memory.c:4067
 handle_mm_fault+0x53a/0xc70 mm/memory.c:4133
 __do_page_fault+0x60b/0xe40 arch/x86/mm/fault.c:1403
 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1478
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
RIP: 0010:__put_user_4+0x1c/0x30 arch/x86/lib/putuser.S:68
Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 ee 01 00 48 8b 9b 98 13 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 
RSP: 0018:ffff8801955efcf8 EFLAGS: 00010293
RAX: 0000000000000014 RBX: 00007fffffffeffd RCX: 0000000020000140
RDX: 0000000000000045 RSI: ffffffff81a83b23 RDI: 0000000000000286
RBP: ffff8801955efdf0 R08: 1ffff10032abdf7c R09: 0000000000000000
R10: ffffed003ad4c198 R11: ffff8801c7af2540 R12: 0000000000000014
R13: 0000000020000140 R14: 0000000000000001 R15: dffffc0000000000
 __do_sys_socketpair net/socket.c:1503 [inline]
 __se_sys_socketpair net/socket.c:1500 [inline]
 __x64_sys_socketpair+0x97/0xf0 net/socket.c:1500
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007f0bc060ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
RAX: ffffffffffffffda RBX: 00007f0bc060f6d4 RCX: 0000000000455b29
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000013
R13: 00000000004c1cbf R14: 00000000004d2da8 R15: 0000000000000000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 32452 Comm: syz-executor2 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 1
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
 __should_failslab+0x124/0x180 mm/failslab.c:32
 should_failslab+0x9/0x14 mm/slab_common.c:1522
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 kmem_cache_alloc+0x2af/0x760 mm/slab.c:3552
 anon_vma_alloc mm/rmap.c:81 [inline]
 __anon_vma_prepare+0x3b3/0x700 mm/rmap.c:189
 anon_vma_prepare include/linux/rmap.h:153 [inline]
 do_huge_pmd_anonymous_page+0x1423/0x1d20 mm/huge_memory.c:675
 create_huge_pmd mm/memory.c:3863 [inline]
 __handle_mm_fault+0x2d61/0x4390 mm/memory.c:4067
 handle_mm_fault+0x53a/0xc70 mm/memory.c:4133
 __do_page_fault+0x60b/0xe40 arch/x86/mm/fault.c:1403
 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1478
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
RIP: 0010:__put_user_4+0x1c/0x30 arch/x86/lib/putuser.S:68
Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 ee 01 00 48 8b 9b 98 13 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 
RSP: 0018:ffff880191117cf8 EFLAGS: 00010293
RAX: 0000000000000014 RBX: 00007fffffffeffd RCX: 0000000020000140
RDX: 0000000000000045 RSI: ffffffff81a83b23 RDI: 0000000000000286
RBP: ffff880191117df0 R08: 1ffff10032222f7c R09: 0000000000000000
R10: ffffed0035eb0028 R11: ffff8801c8b4e440 R12: 0000000000000014
R13: 0000000020000140 R14: 0000000000000001 R15: dffffc0000000000
 __do_sys_socketpair net/socket.c:1503 [inline]
 __se_sys_socketpair net/socket.c:1500 [inline]
 __x64_sys_socketpair+0x97/0xf0 net/socket.c:1500
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007f0bc060ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
RAX: ffffffffffffffda RBX: 00007f0bc060f6d4 RCX: 0000000000455b29
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000013
R13: 00000000004c1cbf R14: 00000000004d2da8 R15: 0000000000000001
CPU: 1 PID: 32461 Comm: syz-executor0 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
 should_fail_alloc_page mm/page_alloc.c:3057 [inline]
 prepare_alloc_pages mm/page_alloc.c:4325 [inline]
 __alloc_pages_nodemask+0x34e/0xd70 mm/page_alloc.c:4363
 alloc_pages_current+0x10c/0x210 mm/mempolicy.c:2093
 alloc_pages include/linux/gfp.h:492 [inline]
 pte_alloc_one+0x1b/0x1a0 arch/x86/mm/pgtable.c:35
 do_fault_around mm/memory.c:3595 [inline]
 do_read_fault mm/memory.c:3636 [inline]
 do_fault mm/memory.c:3741 [inline]
 handle_pte_fault mm/memory.c:3972 [inline]
 __handle_mm_fault+0x36e4/0x4390 mm/memory.c:4096
 handle_mm_fault+0x53a/0xc70 mm/memory.c:4133
 __do_page_fault+0x60b/0xe40 arch/x86/mm/fault.c:1403
 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1478
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
RIP: 0010:__get_user_4+0x21/0x30 arch/x86/lib/getuser.S:76
Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 98 13 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 
RSP: 0018:ffff8801b0dc7858 EFLAGS: 00010202
RAX: 0000000020000083 RBX: dffffc0000000000 RCX: ffffc90001e0c000
RDX: ffffffffffffffff RSI: ffffffff81a83b23 RDI: 0000000000000286
RBP: ffff8801b0dc7c60 R08: 1ffff100361b8ee8 R09: 0000000000000000
R10: ffff8801b0dc7c80 R11: ffff88019232e5c0 R12: ffff880193a94300
R13: 0000000000000021 R14: ffff880193a94300 R15: ffff880193a94330
 tcp_getsockopt+0xc1/0xe0 net/ipv4/tcp.c:3536
 sock_common_getsockopt+0x9a/0xe0 net/core/sock.c:3012
 __sys_getsockopt+0x1a5/0x370 net/socket.c:1984
 __do_sys_getsockopt net/socket.c:1995 [inline]
 __se_sys_getsockopt net/socket.c:1992 [inline]
 __x64_sys_getsockopt+0xbe/0x150 net/socket.c:1992
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007f67bcce7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
RAX: ffffffffffffffda RBX: 00007f67bcce86d4 RCX: 0000000000455b29
RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000020000080 R09: 0000000000000000
R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000014
R13: 00000000004bc373 R14: 00000000004ca1e0 R15: 0000000000000000
CPU: 0 PID: 32470 Comm: syz-executor2 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
 __should_failslab+0x124/0x180 mm/failslab.c:32
 should_failslab+0x9/0x14 mm/slab_common.c:1522
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 kmem_cache_alloc+0x2af/0x760 mm/slab.c:3552
 kmem_cache_zalloc include/linux/slab.h:696 [inline]
 alloc_mm_slot mm/khugepaged.c:369 [inline]
 __khugepaged_enter+0xb6/0x5d0 mm/khugepaged.c:405
 khugepaged_enter include/linux/khugepaged.h:54 [inline]
 do_huge_pmd_anonymous_page+0x1537/0x1d20 mm/huge_memory.c:677
 create_huge_pmd mm/memory.c:3863 [inline]
 __handle_mm_fault+0x2d61/0x4390 mm/memory.c:4067
 handle_mm_fault+0x53a/0xc70 mm/memory.c:4133
 __do_page_fault+0x60b/0xe40 arch/x86/mm/fault.c:1403
 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1478
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
RIP: 0010:__put_user_4+0x1c/0x30 arch/x86/lib/putuser.S:68
Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 ee 01 00 48 8b 9b 98 13 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 
RSP: 0018:ffff8801b46dfcf8 EFLAGS: 00010293
RAX: 0000000000000014 RBX: 00007fffffffeffd RCX: 0000000020000140
RDX: 0000000000000045 RSI: ffffffff81a83b23 RDI: 0000000000000286
RBP: ffff8801b46dfdf0 R08: 1ffff100368dbf7c R09: 0000000000000000
R10: ffffed003647f710 R11: ffff8801942d84c0 R12: 0000000000000014
R13: 0000000020000140 R14: 0000000000000001 R15: dffffc0000000000
 __do_sys_socketpair net/socket.c:1503 [inline]
 __se_sys_socketpair net/socket.c:1500 [inline]
 __x64_sys_socketpair+0x97/0xf0 net/socket.c:1500
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007f0bc060ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
RAX: ffffffffffffffda RBX: 00007f0bc060f6d4 RCX: 0000000000455b29
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000013
R13: 00000000004c1cbf R14: 00000000004d2da8 R15: 0000000000000002
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 32704 Comm: syz-executor3 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
 __should_failslab+0x124/0x180 mm/failslab.c:32
 should_failslab+0x9/0x14 mm/slab_common.c:1522
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 kmem_cache_alloc+0x47/0x760 mm/slab.c:3552
 dst_alloc+0xbb/0x1d0 net/core/dst.c:105
 rt_dst_alloc+0xfa/0x500 net/ipv4/route.c:1576
 __mkroute_output net/ipv4/route.c:2271 [inline]
 ip_route_output_key_hash_rcu+0xa45/0x3380 net/ipv4/route.c:2498
 ip_route_output_key_hash+0x23a/0x390 net/ipv4/route.c:2327
 __ip_route_output_key include/net/route.h:124 [inline]
 ip_route_connect include/net/route.h:303 [inline]
 __ip4_datagram_connect+0xb20/0xff0 net/ipv4/datagram.c:51
 __ip6_datagram_connect+0x83d/0x1470 net/ipv6/datagram.c:152
 ip6_datagram_connect+0x2f/0x50 net/ipv6/datagram.c:273
 inet_dgram_connect+0x154/0x2e0 net/ipv4/af_inet.c:571
 __sys_connect+0x37d/0x4c0 net/socket.c:1709
 __do_sys_connect net/socket.c:1720 [inline]
 __se_sys_connect net/socket.c:1717 [inline]
 __x64_sys_connect+0x73/0xb0 net/socket.c:1717
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007f4947220c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
RAX: ffffffffffffffda RBX: 00007f49472216d4 RCX: 0000000000455b29
RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
R13: 00000000004bb945 R14: 00000000004c87a0 R15: 0000000000000000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 32707 Comm: syz-executor4 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
 __should_failslab+0x124/0x180 mm/failslab.c:32
 should_failslab+0x9/0x14 mm/slab_common.c:1522
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 kmem_cache_alloc+0x2af/0x760 mm/slab.c:3552
 anon_vma_chain_alloc mm/rmap.c:128 [inline]
 __anon_vma_prepare+0xbc/0x700 mm/rmap.c:182
 anon_vma_prepare include/linux/rmap.h:153 [inline]
 do_huge_pmd_anonymous_page+0x1423/0x1d20 mm/huge_memory.c:675
 create_huge_pmd mm/memory.c:3863 [inline]
 __handle_mm_fault+0x2d61/0x4390 mm/memory.c:4067
 handle_mm_fault+0x53a/0xc70 mm/memory.c:4133
 __do_page_fault+0x60b/0xe40 arch/x86/mm/fault.c:1403
 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1478
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 arch/x86/lib/copy_user_64.S:65
Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 
RSP: 0018:ffff8801907c7998 EFLAGS: 00010202
RAX: ffffed00320f8f4c RBX: 0000000000000010 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000020000240 RDI: ffff8801907c7a50
RBP: ffff8801907c79d0 R08: ffffed00320f8f4c R09: ffffed00320f8f4a
R10: ffffed00320f8f4b R11: ffff8801907c7a5f R12: 0000000020000250
R13: 0000000020000240 R14: ffff8801907c7a50 R15: 00007ffffffff000
 copy_from_user include/linux/uaccess.h:147 [inline]
 sock_do_ioctl+0x29a/0x3e0 net/socket.c:984
 sock_ioctl+0x30d/0x680 net/socket.c:1097
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x1cf/0x16f0 fs/ioctl.c:684
 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701
 __do_sys_ioctl fs/ioctl.c:708 [inline]
 __se_sys_ioctl fs/ioctl.c:706 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:706
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007fd9b6e77c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fd9b6e786d4 RCX: 0000000000455b29
RDX: 0000000020000240 RSI: 0000000000008912 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
R13: 00000000004bc5aa R14: 00000000004ca4f8 R15: 0000000000000000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 310 Comm: syz-executor4 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
 __should_failslab+0x124/0x180 mm/failslab.c:32
 should_failslab+0x9/0x14 mm/slab_common.c:1522
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 kmem_cache_alloc+0x2af/0x760 mm/slab.c:3552
 anon_vma_alloc mm/rmap.c:81 [inline]
 __anon_vma_prepare+0x3b3/0x700 mm/rmap.c:189
 anon_vma_prepare include/linux/rmap.h:153 [inline]
 do_huge_pmd_anonymous_page+0x1423/0x1d20 mm/huge_memory.c:675
 create_huge_pmd mm/memory.c:3863 [inline]
 __handle_mm_fault+0x2d61/0x4390 mm/memory.c:4067
 handle_mm_fault+0x53a/0xc70 mm/memory.c:4133
 __do_page_fault+0x60b/0xe40 arch/x86/mm/fault.c:1403
 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1478
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 arch/x86/lib/copy_user_64.S:65
Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 
RSP: 0018:ffff8801c9ad7998 EFLAGS: 00010202
RAX: ffffed003935af4c RBX: 0000000000000010 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000020000240 RDI: ffff8801c9ad7a50
RBP: ffff8801c9ad79d0 R08: ffffed003935af4c R09: ffffed003935af4a
R10: ffffed003935af4b R11: ffff8801c9ad7a5f R12: 0000000020000250
R13: 0000000020000240 R14: ffff8801c9ad7a50 R15: 00007ffffffff000
 copy_from_user include/linux/uaccess.h:147 [inline]
 sock_do_ioctl+0x29a/0x3e0 net/socket.c:984
 sock_ioctl+0x30d/0x680 net/socket.c:1097
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x1cf/0x16f0 fs/ioctl.c:684
 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701
 __do_sys_ioctl fs/ioctl.c:708 [inline]
 __se_sys_ioctl fs/ioctl.c:706 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:706
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007fd9b6e77c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fd9b6e786d4 RCX: 0000000000455b29
RDX: 0000000020000240 RSI: 0000000000008912 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
R13: 00000000004bc5aa R14: 00000000004ca4f8 R15: 0000000000000001
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 355 Comm: syz-executor4 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
 __should_failslab+0x124/0x180 mm/failslab.c:32
 should_failslab+0x9/0x14 mm/slab_common.c:1522
 slab_pre_alloc_hook mm/slab.h:423 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 kmem_cache_alloc+0x2af/0x760 mm/slab.c:3552
 kmem_cache_zalloc include/linux/slab.h:696 [inline]
 alloc_mm_slot mm/khugepaged.c:369 [inline]
 __khugepaged_enter+0xb6/0x5d0 mm/khugepaged.c:405
 khugepaged_enter include/linux/khugepaged.h:54 [inline]
 do_huge_pmd_anonymous_page+0x1537/0x1d20 mm/huge_memory.c:677
 create_huge_pmd mm/memory.c:3863 [inline]
 __handle_mm_fault+0x2d61/0x4390 mm/memory.c:4067
 handle_mm_fault+0x53a/0xc70 mm/memory.c:4133
 __do_page_fault+0x60b/0xe40 arch/x86/mm/fault.c:1403
 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1478
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160
RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 arch/x86/lib/copy_user_64.S:65
Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 
RSP: 0018:ffff88019511f998 EFLAGS: 00010202
RAX: ffffed0032a23f4c RBX: 0000000000000010 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000020000240 RDI: ffff88019511fa50
RBP: ffff88019511f9d0 R08: ffffed0032a23f4c R09: ffffed0032a23f4a
R10: ffffed0032a23f4b R11: ffff88019511fa5f R12: 0000000020000250
R13: 0000000020000240 R14: ffff88019511fa50 R15: 00007ffffffff000
 copy_from_user include/linux/uaccess.h:147 [inline]
 sock_do_ioctl+0x29a/0x3e0 net/socket.c:984
 sock_ioctl+0x30d/0x680 net/socket.c:1097
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x1cf/0x16f0 fs/ioctl.c:684
 ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701
 __do_sys_ioctl fs/ioctl.c:708 [inline]
 __se_sys_ioctl fs/ioctl.c:706 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:706
 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455b29
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
RSP: 002b:00007fd9b6e77c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fd9b6e786d4 RCX: 0000000000455b29
RDX: 0000000020000240 RSI: 0000000000008912 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014
R13: 00000000004bc5aa R14: 00000000004ca4f8 R15: 0000000000000002
FAULT_INJECTION: forcing a failure.
name fail_page_alloc, interval 1, probability 0, space 0, times 0
CPU: 1 PID: 395 Comm: syz-executor4 Not tainted 4.17.0+ #84
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold.4+0xa/0x1a lib/fault-inject.c:149
 should_fail_alloc_page mm/page_alloc.c:3057 [inline]
 prepare_alloc_pages mm/page_alloc.c:4325 [inline]
 __alloc_pages_nodemask+0x34e/0xd70 mm/page_alloc.c:4363
 alloc_pages_current+0x10c/0x210 mm/mempolicy.c:2093
 alloc_pages include/linux/gfp.h:492 [inline]
 pte_alloc_one+0x1b/0x1a0 arch/x86/mm/pgtable.c:35
 do_huge_pmd_anonymous_page+0xe1c/0x1d20 mm/huge_memory.c:686
 create_huge_pmd mm/memory.c:3863 [inline]
 __handle_mm_fault+0x2d61/0x4390 mm/memory.c:4067