should_failslab+0xdb/0x130 mm/failslab.c:32
 slab_pre_alloc_hook mm/slab.h:421 [inline]
 slab_alloc_node mm/slab.c:3297 [inline]
 kmem_cache_alloc_node+0x56/0x780 mm/slab.c:3640
 __alloc_skb+0x9c/0x500 net/core/skbuff.c:193
 alloc_skb include/linux/skbuff.h:980 [inline]
 bt_skb_alloc include/net/bluetooth/bluetooth.h:336 [inline]
 h4_recv_buf+0x4c2/0xc80 drivers/bluetooth/hci_h4.c:197
 h4_recv+0xd2/0x1f0 drivers/bluetooth/hci_h4.c:131
general protection fault: 0000 [#1] PREEMPT SMP KASAN
 hci_uart_tty_receive+0x1f4/0x4d0 drivers/bluetooth/hci_ldisc.c:616
Modules linked in:
CPU: 1 PID: 2246 Comm: kworker/u4:3 Not tainted 4.14.147 #0
 tiocsti drivers/tty/tty_io.c:2186 [inline]
 tty_ioctl+0xded/0x1320 drivers/tty/tty_io.c:2572
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound flush_to_ldisc
task: ffff8880a1e186c0 task.stack: ffff8880a1e20000
RIP: 0010:skb_put+0x31/0x1c0 net/core/skbuff.c:1694
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x7ae/0x1060 fs/ioctl.c:684
RSP: 0018:ffff8880a1e27b48 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff8880832e1140 RCX: ffff888097527d40
RDX: 0000000000000019 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffff8880a1e27b70 R08: 000000000000309a R09: ffffffff88c98950
R10: 0000000000000006 R11: ffff8880a1e186c0 R12: 0000000000000000
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
R13: 0000000000000002 R14: ffff88808a49d6e0 R15: 00000000000000c8
FS:  0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000960004 CR3: 00000000999e1000 CR4: 00000000001426e0
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
RIP: 0033:0x459a59
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
RSP: 002b:00007f54e0dfec78 EFLAGS: 00000246
Call Trace:
 ORIG_RAX: 0000000000000010
 skb_put_data include/linux/skbuff.h:2079 [inline]
 ll_recv+0x501/0x1010 drivers/bluetooth/hci_ll.c:416
RAX: ffffffffffffffda RBX: 00007f54e0dfec90 RCX: 0000000000459a59
 hci_uart_tty_receive+0x1f4/0x4d0 drivers/bluetooth/hci_ldisc.c:616
RDX: 0000000020000080 RSI: 0000000000005412 RDI: 0000000000000003
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
 tty_ldisc_receive_buf+0x14d/0x1a0 drivers/tty/tty_buffer.c:459
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54e0dff6d4
 tty_port_default_receive_buf+0x73/0xa0 drivers/tty/tty_port.c:37
R13: 00000000004c43cc R14: 00000000004d8a90 R15: 0000000000000004
 receive_buf drivers/tty/tty_buffer.c:475 [inline]
 flush_to_ldisc+0x1ec/0x400 drivers/tty/tty_buffer.c:527
CPU: 0 PID: 9768 Comm: syz-executor.3 Not tainted 4.14.147 #0
 process_one_work+0x863/0x1600 kernel/workqueue.c:2114
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
 kthread+0x319/0x430 kernel/kthread.c:232
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0x10f/0x159 lib/fault-inject.c:149
 should_failslab+0xdb/0x130 mm/failslab.c:32
 slab_pre_alloc_hook mm/slab.h:421 [inline]
 slab_alloc mm/slab.c:3376 [inline]
 __do_kmalloc mm/slab.c:3718 [inline]
 __kmalloc+0x2f0/0x7a0 mm/slab.c:3729
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 
41 
 kmalloc include/linux/slab.h:493 [inline]
 rw_copy_check_uvector+0x1d8/0x290 fs/read_write.c:776
56 
 import_iovec+0xa2/0x370 lib/iov_iter.c:1411
41 
55 
41 
89 
 vfs_readv+0xb3/0x130 fs/read_write.c:979
f5 
41 
54 
49 
89 
 do_preadv+0x15d/0x200 fs/read_write.c:1065
fc 
4d 
8d 
 SYSC_preadv fs/read_write.c:1115 [inline]
 SyS_preadv+0x31/0x40 fs/read_write.c:1110
bc 
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
24 
c8 
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
00 
RIP: 0033:0x459a59
00 
RSP: 002b:00007f3228e65c78 EFLAGS: 00000246
00 
 ORIG_RAX: 0000000000000127
53 
RAX: ffffffffffffffda RBX: 00007f3228e65c90 RCX: 0000000000459a59
e8 
RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000004
10 
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
6a 
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3228e666d4
8d 
R13: 00000000004c6fa5 R14: 00000000004dc6c0 R15: 0000000000000005
fc 
CPU: 0 PID: 9769 Comm: syz-executor.0 Not tainted 4.14.147 #0
4c 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
89 
Call Trace:
fa 
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x197 lib/dump_stack.c:53
48 
 fail_dump lib/fault-inject.c:51 [inline]
 should_fail.cold+0x10f/0x159 lib/fault-inject.c:149
b8 
00 
 should_failslab+0xdb/0x130 mm/failslab.c:32
00 
 slab_pre_alloc_hook mm/slab.h:421 [inline]
 slab_alloc_node mm/slab.c:3297 [inline]
 kmem_cache_alloc_node+0x56/0x780 mm/slab.c:3640
00 
00 
00 
 __alloc_skb+0x9c/0x500 net/core/skbuff.c:193
fc 
ff 
 alloc_skb include/linux/skbuff.h:980 [inline]
 bt_skb_alloc include/net/bluetooth/bluetooth.h:336 [inline]
 ll_recv+0x3cf/0x1010 drivers/bluetooth/hci_ll.c:516
df 
 hci_uart_tty_receive+0x1f4/0x4d0 drivers/bluetooth/hci_ldisc.c:616
48 
c1 
ea 
 tiocsti drivers/tty/tty_io.c:2186 [inline]
 tty_ioctl+0xded/0x1320 drivers/tty/tty_io.c:2572
03 
<0f> 
b6 
14 
02 
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:500 [inline]
 do_vfs_ioctl+0x7ae/0x1060 fs/ioctl.c:684
4c 
89 
f8 
83 
e0 
07 
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
83 
c0 
 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
03 
38 
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
d0 
RIP: 0033:0x459a59
7c 
RSP: 002b:00007feb53a4dc78 EFLAGS: 00000246
08 
 ORIG_RAX: 0000000000000010
84 
RAX: ffffffffffffffda RBX: 00007feb53a4dc90 RCX: 0000000000459a59
d2 
RDX: 0000000020000080 RSI: 0000000000005412 RDI: 0000000000000003
0f 
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
85 
R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb53a4e6d4
R13: 00000000004c43cc R14: 00000000004d8a90 R15: 0000000000000004
RIP: skb_put+0x31/0x1c0 net/core/skbuff.c:1694 RSP: ffff8880a1e27b48
---[ end trace 5a4b5e5e66c3529a ]---
Bluetooth: Can't allocate mem for new packet