netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. xt_hashlimit: overflow, try lower: 0/0 WARNING: can't dereference registers at ffff8880a4cce628 for ip common_interrupt+0x93/0x93 arch/x86/entry/entry_64.S:576 usb usb8: usbfs: process 11689 (syz-executor.0) did not claim interface 0 before use netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. usb usb8: usbfs: process 11696 (syz-executor.4) did not claim interface 0 before use usb usb8: usbfs: process 11714 (syz-executor.4) did not claim interface 0 before use netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. usb usb8: usbfs: process 11730 (syz-executor.4) did not claim interface 0 before use netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. usb usb8: usbfs: process 11743 (syz-executor.4) did not claim interface 0 before use usb usb8: usbfs: process 11758 (syz-executor.4) did not claim interface 0 before use usb usb8: usbfs: process 11774 (syz-executor.4) did not claim interface 0 before use usb usb8: usbfs: process 11776 (syz-executor.4) did not claim interface 0 before use xt_hashlimit: overflow, try lower: 0/0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 11851 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x154 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3297 [inline] kmem_cache_alloc_node+0x263/0x410 mm/slab.c:3640 __alloc_skb+0x5c/0x510 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:980 [inline] netlink_alloc_large_skb net/netlink/af_netlink.c:1159 [inline] netlink_sendmsg+0x901/0xb80 net/netlink/af_netlink.c:1853 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062 __sys_sendmsg+0xa3/0x120 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0x27/0x40 net/socket.c:2103 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x45e219 RSP: 002b:00007f982cd8dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 RDX: 0000000000000000 RSI: 0000000020004840 RDI: 0000000000000004 RBP: 00007f982cd8dca0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc4d3a34ef R14: 00007f982cd8e9c0 R15: 000000000119bf8c binder: 11880:11884 ioctl 40046205 0 returned -22 usb usb8: usbfs: process 11888 (syz-executor.0) did not claim interface 0 before use usb usb8: usbfs: process 11888 (syz-executor.0) did not claim interface 0 before use binder: 11895:11897 ioctl 40046205 0 returned -22 usb usb8: usbfs: process 11888 (syz-executor.0) did not claim interface 0 before use binder: 11904:11906 ioctl 40046205 0 returned -22 usb usb8: usbfs: process 11888 (syz-executor.0) did not claim interface 0 before use usb usb8: usbfs: process 11894 (syz-executor.0) did not claim interface 0 before use usb usb8: usbfs: process 11927 (syz-executor.0) did not claim interface 0 before use usb usb8: usbfs: process 11929 (syz-executor.0) did not claim interface 0 before use FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 11928 Comm: syz-executor.3 Not tainted 4.14.213-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x154 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] kzalloc include/linux/slab.h:661 [inline] binder_get_thread drivers/android/binder.c:4246 [inline] binder_get_thread+0x1a9/0x830 drivers/android/binder.c:4237 binder_ioctl+0x170/0xf78 drivers/android/binder.c:4544 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x45e219 RSP: 002b:00007f59be311c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 RDX: 0000000020000400 RSI: 0000000040046205 RDI: 0000000000000003 RBP: 00007f59be311ca0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc898e0a0f R14: 00007f59be3129c0 R15: 000000000119bf8c binder: 11925:11928 ioctl 40046205 20000400 returned -12 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 12024 Comm: syz-executor.4 Not tainted 4.14.213-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x154 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc+0x28e/0x3c0 mm/slab.c:3550 getname_flags+0xc8/0x550 fs/namei.c:138 getname fs/namei.c:209 [inline] user_path_mountpoint_at+0x23/0x40 fs/namei.c:2775 SYSC_umount fs/namespace.c:1730 [inline] SyS_umount+0x125/0xeb0 fs/namespace.c:1714 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x45e219 RSP: 002b:00007f86ab41dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 RBP: 00007f86ab41dca0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc87a3427f R14: 00007f86ab41e9c0 R15: 000000000119bf8c FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 12043 Comm: syz-executor.4 Not tainted 4.14.213-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x154 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4131 [inline] __alloc_pages_nodemask+0x22c/0x2720 mm/page_alloc.c:4179 __alloc_pages include/linux/gfp.h:484 [inline] __alloc_pages_node include/linux/gfp.h:497 [inline] kmem_getpages mm/slab.c:1419 [inline] cache_grow_begin+0x8f/0x420 mm/slab.c:2676 cache_alloc_refill+0x273/0x350 mm/slab.c:3043 ____cache_alloc mm/slab.c:3125 [inline] __do_cache_alloc mm/slab.c:3347 [inline] slab_alloc mm/slab.c:3382 [inline] kmem_cache_alloc+0x333/0x3c0 mm/slab.c:3550 getname_flags+0xc8/0x550 fs/namei.c:138 getname fs/namei.c:209 [inline] user_path_mountpoint_at+0x23/0x40 fs/namei.c:2775 SYSC_umount fs/namespace.c:1730 [inline] SyS_umount+0x125/0xeb0 fs/namespace.c:1714 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x45e219 RSP: 002b:00007f86ab41dc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 RBP: 00007f86ab41dca0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc87a3427f R14: 00007f86ab41e9c0 R15: 000000000119bf8c usb usb8: usbfs: process 12063 (syz-executor.3) did not claim interface 0 before use usb usb8: usbfs: process 12063 (syz-executor.3) did not claim interface 0 before use usb usb8: usbfs: process 12063 (syz-executor.3) did not claim interface 0 before use usb usb8: usbfs: process 12063 (syz-executor.3) did not claim interface 0 before use FAULT_INJECTION: forcing a failure. name fail_page_alloc, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 12083 Comm: syz-executor.1 Not tainted 4.14.213-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x154 lib/fault-inject.c:149 should_fail_alloc_page mm/page_alloc.c:2898 [inline] prepare_alloc_pages mm/page_alloc.c:4131 [inline] __alloc_pages_nodemask+0x22c/0x2720 mm/page_alloc.c:4179 alloc_pages_vma+0xd2/0x6d0 mm/mempolicy.c:2077 alloc_zeroed_user_highpage_movable include/linux/highmem.h:184 [inline] do_anonymous_page mm/memory.c:3226 [inline] handle_pte_fault mm/memory.c:4080 [inline] __handle_mm_fault+0x25fa/0x4620 mm/memory.c:4206 handle_mm_fault+0x306/0x7a0 mm/memory.c:4243 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1123 RIP: 27fc9e9f:0x7f8a95eee9c0 RSP: 119bf80:00007f8a95eedca0 EFLAGS: 00000000 netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. syz-executor.1 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. syz-executor.1 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 12083 Comm: syz-executor.1 Not tainted 4.14.213-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x283 lib/dump_stack.c:58 dump_header+0x178/0x82f mm/oom_kill.c:424 oom_kill_process.cold+0x10/0xa69 mm/oom_kill.c:863 out_of_memory mm/oom_kill.c:1075 [inline] out_of_memory+0xe3e/0x1190 mm/oom_kill.c:1025 pagefault_out_of_memory+0xbb/0xc9 mm/oom_kill.c:1117 mm_fault_error+0xad/0x2c0 arch/x86/mm/fault.c:1070 __do_page_fault+0x93c/0xad0 arch/x86/mm/fault.c:1470 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1123 RIP: 27fc9e9f:0x7f8a95eee9c0 netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. RSP: 119bf80:00007f8a95eedca0 EFLAGS: 00000000 netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. Mem-Info: active_anon:313315 inactive_anon:9065 isolated_anon:0 active_file:11842 inactive_file:93712 isolated_file:0 unevictable:0 dirty:644 writeback:16 unstable:0 slab_reclaimable:20413 slab_unreclaimable:167227 mapped:64519 shmem:11322 pagetables:13928 bounce:0 free:998410 free_pcp:603 free_cma:0 Node 0 active_anon:1220320kB inactive_anon:35192kB active_file:44292kB inactive_file:351288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:257976kB dirty:2068kB writeback:0kB shmem:44176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 923648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 1 active_anon:31540kB inactive_anon:68kB active_file:3076kB inactive_file:22660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:508kB writeback:64kB shmem:112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:4204kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:100kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2717 2718 2718 2718 Node 0 DMA32 free:39056kB min:36200kB low:45248kB high:54296kB active_anon:1216016kB inactive_anon:35192kB active_file:44292kB inactive_file:351288kB unevictable:0kB writepending:2068kB present:3129332kB managed:2788168kB mlocked:0kB kernel_stack:20704kB pagetables:43292kB bounce:0kB free_pcp:980kB local_pcp:304kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:3950932kB min:53696kB low:67120kB high:80544kB active_anon:31540kB inactive_anon:68kB active_file:3076kB inactive_file:22660kB unevictable:0kB writepending:572kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:4224kB pagetables:11728kB bounce:0kB free_pcp:1168kB local_pcp:620kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 1*4kB (M) 1*8kB (E) 2*16kB (ME) 2*32kB (UE) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11052kB Node 0 DMA32: 188*4kB (UME) 358*8kB (UME) 87*16kB (UME) 12*32kB (UME) 22*64kB (UME) 2*128kB (M) 56*256kB (UE) 28*512kB (UE) 3*1024kB (U) 0*2048kB 0*4096kB = 38800kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 238*4kB (UME) 114*8kB (UME) 43*16kB (UME) 35*32kB (UME) 16*64kB (UME) 7*128kB (UME) 4*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (U) 962*4096kB (M) = 3951064kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 44257 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 363838 pages reserved 0 pages cma reserved Out of memory (oom_kill_allocating_task): Kill process 12083 (syz-executor.1) score 0 or sacrifice child Killed process 12083 (syz-executor.1) total-vm:93348kB, anon-rss:1824kB, file-rss:35848kB, shmem-rss:0kB oom_reaper: reaped process 12083 (syz-executor.1), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. audit: type=1326 audit(1609486779.855:11860): auid=0 uid=0 gid=0 ses=4 pid=12214 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0