bisecting fixing commit since 9b15f7fae677336e04b9e026ff91854e43165455 building syzkaller on 5d7b90f1af2e3bf33992b75e7fcf0bab6bf49bd6 testing commit 9b15f7fae677336e04b9e026ff91854e43165455 with gcc (GCC) 8.4.1 20210217 kernel signature: 5051ce4048cefb245664e895eaf6d8d6a48cea1f35ab9d7b7259aa4ed7fbde58 run #0: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #1: crashed: WARNING in corrupted run #2: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #3: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #4: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #5: crashed: WARNING in corrupted run #6: crashed: WARNING in corrupted run #7: crashed: WARNING in corrupted run #8: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #9: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #10: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #11: crashed: WARNING in corrupted run #12: crashed: WARNING in corrupted run #13: crashed: WARNING in corrupted run #14: crashed: WARNING in corrupted run #15: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #16: crashed: WARNING in corrupted run #17: crashed: WARNING in corrupted run #18: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #19: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet testing current HEAD 9a2dc0e6c531d595bcdf2c66d0be131679bd02df testing commit 9a2dc0e6c531d595bcdf2c66d0be131679bd02df with gcc (GCC) 8.4.1 20210217 kernel signature: 6e398c6fba4a675c38601a5846a403c6422c068c592adf26011c2b3fe39e9967 run #0: crashed: WARNING in corrupted run #1: crashed: WARNING in corrupted run #2: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #3: crashed: WARNING in corrupted run #4: crashed: WARNING in corrupted run #5: crashed: WARNING in corrupted run #6: crashed: WARNING in corrupted run #7: crashed: WARNING in corrupted run #8: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet run #9: crashed: WARNING in batadv_iv_send_outstanding_bat_ogm_packet revisions tested: 2, total time: 29m28.04213375s (build: 21m27.5334157s, test: 6m30.952850281s) the crash still happens on HEAD commit msg: Linux 4.19.194 crash: WARNING in batadv_iv_send_outstanding_bat_ogm_packet sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 WARNING: CPU: 1 PID: 31 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] WARNING: CPU: 1 PID: 31 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 Modules linked in: CPU: 1 PID: 31 Comm: kworker/u4:2 Not tainted 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 Code: 87 e8 73 6b ea ff 0f 0b e9 f9 56 cd ff 48 c7 c7 a0 b9 d9 87 e8 60 6b ea ff e9 e8 56 cd ff 48 c7 c7 60 b6 d9 87 e8 4f 6b ea ff <0f> 0b e9 d5 56 cd ff 48 c7 c7 60 b6 d9 87 e8 3c 6b ea ff 0f 0b 4c RSP: 0018:ffff8881f5207ce0 EFLAGS: 00010282 RAX: 0000000000000024 RBX: ffff8881d89a55c8 RCX: 0000000000000000 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 RDX: 0000000000000000 RSI: ffffffff8767b920 RDI: ffffffff8a1899a0 RBP: ffff8881f5207d58 R08: ffffed103ed25079 R09: ffffed103ed25078 R10: ffffed103ed25078 R11: ffff8881f69283c7 R12: ffff8881e2860c00 R13: ffff8881d89a5660 R14: ffff8881d89a5580 R15: ffff8881e6d9edc0 FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f79b0585000 CR3: 000000000846d002 CR4: 00000000001606e0 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: entry_SYSCALL_64_after_hwframe+0x49/0xbe process_one_work+0x830/0x1670 kernel/workqueue.c:2152 RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f79708e1198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 worker_thread+0x85/0xb60 kernel/workqueue.c:2295 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 kthread+0x347/0x410 kernel/kthread.c:259 R13: 00007f79708e16bc R14: 0000000000000006 R15: 0000000000000001 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 irq event stamp: 875416 hardirqs last enabled at (875415): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (875415): [] _raw_spin_unlock_irq+0x27/0x80 kernel/locking/spinlock.c:192 hardirqs last disabled at (875416): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (875412): [] __do_softirq+0x62d/0x919 kernel/softirq.c:318 CPU: 0 PID: 7224 Comm: syz-executor.0 Not tainted 4.19.194-syzkaller #0 softirqs last disabled at (874997): [] invoke_softirq kernel/softirq.c:372 [inline] softirqs last disabled at (874997): [] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ---[ end trace 6dfd2fdda7f4e79a ]--- Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc_track_caller+0x2ce/0x760 mm/slab.c:3742 kstrdup+0x2c/0x60 mm/util.c:56 kstrdup_const+0x1f/0x30 mm/util.c:77 __kernfs_new_node+0xb0/0x6f0 fs/kernfs/dir.c:629 kernfs_new_node+0x62/0x110 fs/kernfs/dir.c:693 kernfs_create_link+0xb4/0x230 fs/kernfs/symlink.c:40 sysfs_do_create_link_sd.isra.2+0x7d/0xf0 fs/sysfs/symlink.c:43 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline] sysfs_create_link+0x43/0xb0 fs/sysfs/symlink.c:91 netdev_adjacent_sysfs_add+0x9c/0xd0 net/core/dev.c:6948 __netdev_adjacent_dev_insert net/core/dev.c:7003 [inline] __netdev_adjacent_dev_insert+0x46d/0x7b0 net/core/dev.c:6971 __netdev_adjacent_dev_link_lists net/core/dev.c:7080 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7109 [inline] __netdev_upper_dev_link+0x1e8/0x790 net/core/dev.c:7168 netdev_master_upper_dev_link+0x17/0x20 net/core/dev.c:7232 batadv_hardif_enable_interface+0x1f8/0x9e0 net/batman-adv/hard-interface.c:773 batadv_softif_slave_add+0x7f/0xd0 net/batman-adv/soft-interface.c:898 do_set_master net/core/rtnetlink.c:2321 [inline] do_set_master+0x171/0x200 net/core/rtnetlink.c:2295 do_setlink+0x941/0x2e10 net/core/rtnetlink.c:2455 rtnl_newlink+0x97f/0x1340 net/core/rtnetlink.c:3077 rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:4778 netlink_rcv_skb+0x13e/0x3d0 net/netlink/af_netlink.c:2455 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3a72519198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f3a725196bc R14: 0000000000000006 R15: 0000000000000001 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 7247 Comm: syz-executor.2 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 ------------[ cut here ]------------ alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 WARNING: CPU: 1 PID: 2351 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] WARNING: CPU: 1 PID: 2351 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 Modules linked in: CPU: 1 PID: 2351 Comm: kworker/u4:3 Tainted: G W 4.19.194-syzkaller #0 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 Code: 87 e8 73 6b ea ff 0f 0b e9 f9 56 cd ff 48 c7 c7 a0 b9 d9 87 e8 60 6b ea ff e9 e8 56 cd ff 48 c7 c7 60 b6 d9 87 e8 4f 6b ea ff <0f> 0b e9 d5 56 cd ff 48 c7 c7 60 b6 d9 87 e8 3c 6b ea ff 0f 0b 4c RSP: 0018:ffff8881ea9efce0 EFLAGS: 00010282 RAX: 0000000000000024 RBX: ffff8881d9bf17c8 RCX: 0000000000000000 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 RDX: 0000000000000000 RSI: ffffffff8767b920 RDI: ffffffff8a1899a0 RBP: ffff8881ea9efd58 R08: ffffed103ed25079 R09: ffffed103ed25078 R10: ffffed103ed25078 R11: ffff8881f69283c7 R12: ffff8881df1900c0 R13: ffff8881d9bf1860 R14: ffff8881d9bf1780 R15: ffff8881ee7ca4c0 FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 CR2: 00007f79b0594000 CR3: 000000000846d006 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: process_one_work+0x830/0x1670 kernel/workqueue.c:2152 worker_thread+0x85/0xb60 kernel/workqueue.c:2295 kthread+0x347/0x410 kernel/kthread.c:259 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 irq event stamp: 489338 hardirqs last enabled at (489337): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (489337): [] _raw_spin_unlock_irq+0x27/0x80 kernel/locking/spinlock.c:192 hardirqs last disabled at (489338): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (489316): [] spin_unlock_bh include/linux/spinlock.h:374 [inline] softirqs last enabled at (489316): [] batadv_forw_packet_steal+0x107/0x180 net/batman-adv/send.c:606 softirqs last disabled at (489314): [] spin_lock_bh include/linux/spinlock.h:334 [inline] softirqs last disabled at (489314): [] batadv_forw_packet_steal+0x1b/0x180 net/batman-adv/send.c:595 ---[ end trace 6dfd2fdda7f4e79b ]--- __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8b3cc6b198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f8b3cc6b6bc R14: 0000000000000006 R15: 0000000000000001 CPU: 1 PID: 7253 Comm: syz-executor.1 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc_track_caller+0x2ce/0x760 mm/slab.c:3742 kstrdup+0x2c/0x60 mm/util.c:56 kstrdup_const+0x1f/0x30 mm/util.c:77 __kernfs_new_node+0xb0/0x6f0 fs/kernfs/dir.c:629 kernfs_new_node+0x62/0x110 fs/kernfs/dir.c:693 kernfs_create_link+0xb4/0x230 fs/kernfs/symlink.c:40 sysfs_do_create_link_sd.isra.2+0x7d/0xf0 fs/sysfs/symlink.c:43 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline] sysfs_create_link+0x43/0xb0 fs/sysfs/symlink.c:91 netdev_adjacent_sysfs_add+0x9c/0xd0 net/core/dev.c:6948 __netdev_adjacent_dev_insert net/core/dev.c:7003 [inline] __netdev_adjacent_dev_insert+0x46d/0x7b0 net/core/dev.c:6971 __netdev_adjacent_dev_link_lists net/core/dev.c:7080 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7109 [inline] __netdev_upper_dev_link+0x1e8/0x790 net/core/dev.c:7168 netdev_master_upper_dev_link+0x17/0x20 net/core/dev.c:7232 batadv_hardif_enable_interface+0x1f8/0x9e0 net/batman-adv/hard-interface.c:773 batadv_softif_slave_add+0x7f/0xd0 net/batman-adv/soft-interface.c:898 do_set_master net/core/rtnetlink.c:2321 [inline] do_set_master+0x171/0x200 net/core/rtnetlink.c:2295 do_setlink+0x941/0x2e10 net/core/rtnetlink.c:2455 rtnl_newlink+0x97f/0x1340 net/core/rtnetlink.c:3077 rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:4778 netlink_rcv_skb+0x13e/0x3d0 net/netlink/af_netlink.c:2455 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa820538198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fa8205386bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7238 Comm: syz-executor.4 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node+0x262/0x720 mm/slab.c:3647 __alloc_skb+0xa7/0x580 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb32a97c198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fb32a97c6bc R14: 0000000000000006 R15: 0000000000000001 CPU: 1 PID: 7255 Comm: syz-executor.5 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ------------[ cut here ]------------ Call Trace: WARNING: CPU: 0 PID: 2351 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] WARNING: CPU: 0 PID: 2351 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 Modules linked in: fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 CPU: 0 PID: 2351 Comm: kworker/u4:3 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 Code: 87 e8 73 6b ea ff 0f 0b e9 f9 56 cd ff 48 c7 c7 a0 b9 d9 87 e8 60 6b ea ff e9 e8 56 cd ff 48 c7 c7 60 b6 d9 87 e8 4f 6b ea ff <0f> 0b e9 d5 56 cd ff 48 c7 c7 60 b6 d9 87 e8 3c 6b ea ff 0f 0b 4c RSP: 0018:ffff8881ea9efce0 EFLAGS: 00010282 __should_failslab+0xba/0xf0 mm/failslab.c:32 RAX: 0000000000000024 RBX: ffff8881e99ac888 RCX: 0000000000000000 should_failslab+0x9/0x20 mm/slab_common.c:1588 RDX: 0000000000000000 RSI: ffffffff8767b920 RDI: ffffffff8a1899a0 RBP: ffff8881ea9efd58 R08: ffffed103ed05079 R09: ffffed103ed05078 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc_track_caller+0x2ce/0x760 mm/slab.c:3742 R10: ffffed103ed05078 R11: ffff8881f68283c7 R12: ffff8881e0380a00 R13: ffff8881e99ac920 R14: ffff8881e99ac840 R15: ffff8881e71fd6c0 FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kstrdup+0x2c/0x60 mm/util.c:56 CR2: 00007f3a72518f88 CR3: 000000000846d001 CR4: 00000000001606f0 kstrdup_const+0x1f/0x30 mm/util.c:77 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 __kernfs_new_node+0xb0/0x6f0 fs/kernfs/dir.c:629 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: process_one_work+0x830/0x1670 kernel/workqueue.c:2152 worker_thread+0x85/0xb60 kernel/workqueue.c:2295 kthread+0x347/0x410 kernel/kthread.c:259 kernfs_new_node+0x62/0x110 fs/kernfs/dir.c:693 kernfs_create_link+0xb4/0x230 fs/kernfs/symlink.c:40 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 sysfs_do_create_link_sd.isra.2+0x7d/0xf0 fs/sysfs/symlink.c:43 irq event stamp: 522834 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline] sysfs_create_link+0x43/0xb0 fs/sysfs/symlink.c:91 hardirqs last enabled at (522833): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (522833): [] _raw_spin_unlock_irq+0x27/0x80 kernel/locking/spinlock.c:192 netdev_adjacent_sysfs_add+0x9c/0xd0 net/core/dev.c:6948 hardirqs last disabled at (522834): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (522812): [] spin_unlock_bh include/linux/spinlock.h:374 [inline] softirqs last enabled at (522812): [] batadv_forw_packet_steal+0x107/0x180 net/batman-adv/send.c:606 softirqs last disabled at (522810): [] spin_lock_bh include/linux/spinlock.h:334 [inline] softirqs last disabled at (522810): [] batadv_forw_packet_steal+0x1b/0x180 net/batman-adv/send.c:595 ---[ end trace 6dfd2fdda7f4e79c ]--- __netdev_adjacent_dev_insert net/core/dev.c:7003 [inline] __netdev_adjacent_dev_insert+0x46d/0x7b0 net/core/dev.c:6971 __netdev_adjacent_dev_link_lists net/core/dev.c:7080 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7109 [inline] __netdev_upper_dev_link+0x1e8/0x790 net/core/dev.c:7168 netdev_master_upper_dev_link+0x17/0x20 net/core/dev.c:7232 batadv_hardif_enable_interface+0x1f8/0x9e0 net/batman-adv/hard-interface.c:773 batadv_softif_slave_add+0x7f/0xd0 net/batman-adv/soft-interface.c:898 do_set_master net/core/rtnetlink.c:2321 [inline] do_set_master+0x171/0x200 net/core/rtnetlink.c:2295 do_setlink+0x941/0x2e10 net/core/rtnetlink.c:2455 rtnl_newlink+0x97f/0x1340 net/core/rtnetlink.c:3077 rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:4778 netlink_rcv_skb+0x13e/0x3d0 net/netlink/af_netlink.c:2455 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f79708e1198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f79708e16bc R14: 0000000000000006 R15: 0000000000000001 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 7268 Comm: syz-executor.2 Tainted: G W 4.19.194-syzkaller #0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8b3cc6b198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f8b3cc6b6bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7278 Comm: syz-executor.0 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3a72519198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f3a725196bc R14: 0000000000000006 R15: 0000000000000001 CPU: 1 PID: 7285 Comm: syz-executor.3 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ------------[ cut here ]------------ Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 WARNING: CPU: 0 PID: 2351 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] WARNING: CPU: 0 PID: 2351 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] kmem_cache_alloc_trace+0x2cb/0x740 mm/slab.c:3623 Modules linked in: CPU: 0 PID: 2351 Comm: kworker/u4:3 Tainted: G W 4.19.194-syzkaller #0 kmalloc include/linux/slab.h:515 [inline] __netdev_adjacent_dev_insert net/core/dev.c:6989 [inline] __netdev_adjacent_dev_insert+0xf6/0x7b0 net/core/dev.c:6971 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 __netdev_adjacent_dev_link_lists net/core/dev.c:7080 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7109 [inline] __netdev_upper_dev_link+0x1e8/0x790 net/core/dev.c:7168 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 Code: 87 e8 73 6b ea ff 0f 0b e9 f9 56 cd ff 48 c7 c7 a0 b9 d9 87 e8 60 6b ea ff e9 e8 56 cd ff 48 c7 c7 60 b6 d9 87 e8 4f 6b ea ff <0f> 0b e9 d5 56 cd ff 48 c7 c7 60 b6 d9 87 e8 3c 6b ea ff 0f 0b 4c netdev_master_upper_dev_link+0x17/0x20 net/core/dev.c:7232 RSP: 0018:ffff8881ea9efce0 EFLAGS: 00010282 batadv_hardif_enable_interface+0x1f8/0x9e0 net/batman-adv/hard-interface.c:773 RAX: 0000000000000024 RBX: ffff8881d69fb588 RCX: 0000000000000000 batadv_softif_slave_add+0x7f/0xd0 net/batman-adv/soft-interface.c:898 RDX: 0000000000000000 RSI: ffffffff8767b920 RDI: ffffffff8a1899a0 RBP: ffff8881ea9efd58 R08: ffffed103ed05079 R09: ffffed103ed05078 do_set_master net/core/rtnetlink.c:2321 [inline] do_set_master+0x171/0x200 net/core/rtnetlink.c:2295 R10: ffffed103ed05078 R11: ffff8881f68283c7 R12: ffff8881df3444c0 do_setlink+0x941/0x2e10 net/core/rtnetlink.c:2455 R13: ffff8881d69fb620 R14: ffff8881d69fb540 R15: ffff8881d1104dc0 FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f79b05bf048 CR3: 000000000846d001 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 rtnl_newlink+0x97f/0x1340 net/core/rtnetlink.c:3077 Call Trace: process_one_work+0x830/0x1670 kernel/workqueue.c:2152 worker_thread+0x85/0xb60 kernel/workqueue.c:2295 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 irq event stamp: 550380 hardirqs last enabled at (550379): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (550379): [] _raw_spin_unlock_irq+0x27/0x80 kernel/locking/spinlock.c:192 hardirqs last disabled at (550380): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (550358): [] spin_unlock_bh include/linux/spinlock.h:374 [inline] softirqs last enabled at (550358): [] batadv_forw_packet_steal+0x107/0x180 net/batman-adv/send.c:606 softirqs last disabled at (550356): [] spin_lock_bh include/linux/spinlock.h:334 [inline] softirqs last disabled at (550356): [] batadv_forw_packet_steal+0x1b/0x180 net/batman-adv/send.c:595 ---[ end trace 6dfd2fdda7f4e79d ]--- rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:4778 netlink_rcv_skb+0x13e/0x3d0 net/netlink/af_netlink.c:2455 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fbcfe024198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fbcfe0246bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7280 Comm: syz-executor.4 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node+0x262/0x720 mm/slab.c:3647 __alloc_skb+0xa7/0x580 net/core/skbuff.c:193 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb32a97c198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fb32a97c6bc R14: 0000000000000006 R15: 0000000000000001 CPU: 1 PID: 7266 Comm: syz-executor.1 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa820538198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fa8205386bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7288 Comm: syz-executor.5 Tainted: G W 4.19.194-syzkaller #0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f79708e1198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f79708e16bc R14: 0000000000000005 R15: 0000000000000001 CPU: 1 PID: 7308 Comm: syz-executor.0 Tainted: G W 4.19.194-syzkaller #0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3a72519198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f3a725196bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7309 Comm: syz-executor.3 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc_track_caller+0x2ce/0x760 mm/slab.c:3742 kstrdup+0x2c/0x60 mm/util.c:56 kstrdup_const+0x1f/0x30 mm/util.c:77 __kernfs_new_node+0xb0/0x6f0 fs/kernfs/dir.c:629 kernfs_new_node+0x62/0x110 fs/kernfs/dir.c:693 kernfs_create_link+0xb4/0x230 fs/kernfs/symlink.c:40 sysfs_do_create_link_sd.isra.2+0x7d/0xf0 fs/sysfs/symlink.c:43 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline] sysfs_create_link+0x43/0xb0 fs/sysfs/symlink.c:91 netdev_adjacent_sysfs_add+0x9c/0xd0 net/core/dev.c:6948 __netdev_adjacent_dev_insert net/core/dev.c:7003 [inline] __netdev_adjacent_dev_insert+0x46d/0x7b0 net/core/dev.c:6971 __netdev_adjacent_dev_link_lists net/core/dev.c:7080 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7109 [inline] __netdev_upper_dev_link+0x1e8/0x790 net/core/dev.c:7168 netdev_master_upper_dev_link+0x17/0x20 net/core/dev.c:7232 batadv_hardif_enable_interface+0x1f8/0x9e0 net/batman-adv/hard-interface.c:773 batadv_softif_slave_add+0x7f/0xd0 net/batman-adv/soft-interface.c:898 do_set_master net/core/rtnetlink.c:2321 [inline] do_set_master+0x171/0x200 net/core/rtnetlink.c:2295 do_setlink+0x941/0x2e10 net/core/rtnetlink.c:2455 rtnl_newlink+0x97f/0x1340 net/core/rtnetlink.c:3077 rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:4778 netlink_rcv_skb+0x13e/0x3d0 net/netlink/af_netlink.c:2455 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fbcfe024198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fbcfe0246bc R14: 0000000000000006 R15: 0000000000000001 CPU: 1 PID: 7297 Comm: syz-executor.2 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8b3cc6b198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f8b3cc6b6bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7310 Comm: syz-executor.4 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb32a97c198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fb32a97c6bc R14: 0000000000000006 R15: 0000000000000001 CPU: 1 PID: 7323 Comm: syz-executor.5 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc_track_caller+0x2ce/0x760 mm/slab.c:3742 kstrdup+0x2c/0x60 mm/util.c:56 kstrdup_const+0x1f/0x30 mm/util.c:77 __kernfs_new_node+0xb0/0x6f0 fs/kernfs/dir.c:629 kernfs_new_node+0x62/0x110 fs/kernfs/dir.c:693 kernfs_create_link+0xb4/0x230 fs/kernfs/symlink.c:40 sysfs_do_create_link_sd.isra.2+0x7d/0xf0 fs/sysfs/symlink.c:43 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline] sysfs_create_link+0x43/0xb0 fs/sysfs/symlink.c:91 netdev_adjacent_sysfs_add+0x9c/0xd0 net/core/dev.c:6948 __netdev_adjacent_dev_insert net/core/dev.c:7003 [inline] __netdev_adjacent_dev_insert+0x46d/0x7b0 net/core/dev.c:6971 __netdev_adjacent_dev_link_lists net/core/dev.c:7080 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7109 [inline] __netdev_upper_dev_link+0x1e8/0x790 net/core/dev.c:7168 netdev_master_upper_dev_link+0x17/0x20 net/core/dev.c:7232 batadv_hardif_enable_interface+0x1f8/0x9e0 net/batman-adv/hard-interface.c:773 batadv_softif_slave_add+0x7f/0xd0 net/batman-adv/soft-interface.c:898 do_set_master net/core/rtnetlink.c:2321 [inline] do_set_master+0x171/0x200 net/core/rtnetlink.c:2295 do_setlink+0x941/0x2e10 net/core/rtnetlink.c:2455 rtnl_newlink+0x97f/0x1340 net/core/rtnetlink.c:3077 rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:4778 netlink_rcv_skb+0x13e/0x3d0 net/netlink/af_netlink.c:2455 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f79708e1198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f79708e16bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7319 Comm: syz-executor.1 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa820538198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fa8205386bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7332 Comm: syz-executor.3 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc_track_caller+0x2ce/0x760 mm/slab.c:3742 kstrdup+0x2c/0x60 mm/util.c:56 kstrdup_const+0x1f/0x30 mm/util.c:77 ------------[ cut here ]------------ __kernfs_new_node+0xb0/0x6f0 fs/kernfs/dir.c:629 kernfs_new_node+0x62/0x110 fs/kernfs/dir.c:693 kernfs_create_link+0xb4/0x230 fs/kernfs/symlink.c:40 sysfs_do_create_link_sd.isra.2+0x7d/0xf0 fs/sysfs/symlink.c:43 WARNING: CPU: 1 PID: 2351 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] WARNING: CPU: 1 PID: 2351 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline] sysfs_create_link+0x43/0xb0 fs/sysfs/symlink.c:91 Modules linked in: netdev_adjacent_sysfs_add+0x9c/0xd0 net/core/dev.c:6948 CPU: 1 PID: 2351 Comm: kworker/u4:3 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 __netdev_adjacent_dev_insert net/core/dev.c:7003 [inline] __netdev_adjacent_dev_insert+0x46d/0x7b0 net/core/dev.c:6971 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet __netdev_adjacent_dev_link_lists net/core/dev.c:7080 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7109 [inline] __netdev_upper_dev_link+0x1e8/0x790 net/core/dev.c:7168 RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 Code: 87 e8 73 6b ea ff 0f 0b e9 f9 56 cd ff 48 c7 c7 a0 b9 d9 87 e8 60 6b ea ff e9 e8 56 cd ff 48 c7 c7 60 b6 d9 87 e8 4f 6b ea ff <0f> 0b e9 d5 56 cd ff 48 c7 c7 60 b6 d9 87 e8 3c 6b ea ff 0f 0b 4c RSP: 0018:ffff8881ea9efce0 EFLAGS: 00010282 netdev_master_upper_dev_link+0x17/0x20 net/core/dev.c:7232 RAX: 0000000000000024 RBX: ffff8881e9d86e48 RCX: 0000000000000000 batadv_hardif_enable_interface+0x1f8/0x9e0 net/batman-adv/hard-interface.c:773 RDX: 0000000000000000 RSI: ffffffff8767b920 RDI: ffffffff8a1899a0 RBP: ffff8881ea9efd58 R08: ffffed103ed25079 R09: ffffed103ed25078 batadv_softif_slave_add+0x7f/0xd0 net/batman-adv/soft-interface.c:898 R10: ffffed103ed25078 R11: ffff8881f69283c7 R12: ffff8881df3444c0 R13: ffff8881e9d86ee0 R14: ffff8881e9d86e00 R15: ffff8881d1817b40 do_set_master net/core/rtnetlink.c:2321 [inline] do_set_master+0x171/0x200 net/core/rtnetlink.c:2295 FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 do_setlink+0x941/0x2e10 net/core/rtnetlink.c:2455 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055caa5f81140 CR3: 000000000846d003 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: process_one_work+0x830/0x1670 kernel/workqueue.c:2152 rtnl_newlink+0x97f/0x1340 net/core/rtnetlink.c:3077 worker_thread+0x85/0xb60 kernel/workqueue.c:2295 kthread+0x347/0x410 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 irq event stamp: 651572 hardirqs last enabled at (651571): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (651571): [] _raw_spin_unlock_irq+0x27/0x80 kernel/locking/spinlock.c:192 hardirqs last disabled at (651572): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (651550): [] spin_unlock_bh include/linux/spinlock.h:374 [inline] softirqs last enabled at (651550): [] batadv_forw_packet_steal+0x107/0x180 net/batman-adv/send.c:606 softirqs last disabled at (651548): [] spin_lock_bh include/linux/spinlock.h:334 [inline] softirqs last disabled at (651548): [] batadv_forw_packet_steal+0x1b/0x180 net/batman-adv/send.c:595 ---[ end trace 6dfd2fdda7f4e79e ]--- rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:4778 netlink_rcv_skb+0x13e/0x3d0 net/netlink/af_netlink.c:2455 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fbcfe024198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fbcfe0246bc R14: 0000000000000006 R15: 0000000000000001 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 7343 Comm: syz-executor.0 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3a72519198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007f3a725196bc R14: 0000000000000006 R15: 0000000000000001 CPU: 0 PID: 7354 Comm: syz-executor.3 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc mm/slab.c:3383 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc_track_caller+0x2ce/0x760 mm/slab.c:3742 kstrdup+0x2c/0x60 mm/util.c:56 kstrdup_const+0x1f/0x30 mm/util.c:77 __kernfs_new_node+0xb0/0x6f0 fs/kernfs/dir.c:629 kernfs_new_node+0x62/0x110 fs/kernfs/dir.c:693 kernfs_create_link+0xb4/0x230 fs/kernfs/symlink.c:40 sysfs_do_create_link_sd.isra.2+0x7d/0xf0 fs/sysfs/symlink.c:43 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline] sysfs_create_link+0x43/0xb0 fs/sysfs/symlink.c:91 netdev_adjacent_sysfs_add+0x9c/0xd0 net/core/dev.c:6948 __netdev_adjacent_dev_insert net/core/dev.c:7003 [inline] __netdev_adjacent_dev_insert+0x46d/0x7b0 net/core/dev.c:6971 __netdev_adjacent_dev_link_lists net/core/dev.c:7080 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7109 [inline] __netdev_upper_dev_link+0x1e8/0x790 net/core/dev.c:7168 netdev_master_upper_dev_link+0x17/0x20 net/core/dev.c:7232 batadv_hardif_enable_interface+0x1f8/0x9e0 net/batman-adv/hard-interface.c:773 batadv_softif_slave_add+0x7f/0xd0 net/batman-adv/soft-interface.c:898 do_set_master net/core/rtnetlink.c:2321 [inline] do_set_master+0x171/0x200 net/core/rtnetlink.c:2295 do_setlink+0x941/0x2e10 net/core/rtnetlink.c:2455 rtnl_newlink+0x97f/0x1340 net/core/rtnetlink.c:3077 rtnetlink_rcv_msg+0x34f/0x8f0 net/core/rtnetlink.c:4778 netlink_rcv_skb+0x13e/0x3d0 net/netlink/af_netlink.c:2455 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 ------------[ cut here ]------------ netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 WARNING: CPU: 1 PID: 31 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] WARNING: CPU: 1 PID: 31 at net/batman-adv/bat_iv_ogm.c:597 batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 Modules linked in: ___sys_sendmsg+0x647/0x950 net/socket.c:2115 CPU: 1 PID: 31 Comm: kworker/u4:2 Tainted: G W 4.19.194-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:batadv_iv_ogm_emit net/batman-adv/bat_iv_ogm.c:597 [inline] RIP: 0010:batadv_iv_send_outstanding_bat_ogm_packet.cold.25+0x30/0x37 net/batman-adv/bat_iv_ogm.c:1857 Code: 87 e8 73 6b ea ff 0f 0b e9 f9 56 cd ff 48 c7 c7 a0 b9 d9 87 e8 60 6b ea ff e9 e8 56 cd ff 48 c7 c7 60 b6 d9 87 e8 4f 6b ea ff <0f> 0b e9 d5 56 cd ff 48 c7 c7 60 b6 d9 87 e8 3c 6b ea ff 0f 0b 4c RSP: 0018:ffff8881f5207ce0 EFLAGS: 00010282 RAX: 0000000000000024 RBX: ffff8881e8c6b408 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8767b920 RDI: ffffffff8a1899a0 RBP: ffff8881f5207d58 R08: ffffed103ed25079 R09: ffffed103ed25078 R10: ffffed103ed25078 R11: ffff8881f69283c7 R12: ffff8881e3e182c0 R13: ffff8881e8c6b4a0 R14: ffff8881e8c6b3c0 R15: ffff8881e5e43b00 FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000940004 CR3: 000000000846d001 CR4: 00000000001606e0 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: process_one_work+0x830/0x1670 kernel/workqueue.c:2152 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 worker_thread+0x85/0xb60 kernel/workqueue.c:2295 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 kthread+0x347/0x410 kernel/kthread.c:259 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fbcfe024198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000000009cb RCX: 0000000000463fd9 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 RBP: 000000000000002e R08: 0000000000000000 R09: 0000000000000000 irq event stamp: 1294970 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000053bf00 R13: 00007fbcfe0246bc R14: 0000000000000006 R15: 0000000000000001 hardirqs last enabled at (1294969): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (1294969): [] _raw_spin_unlock_irq+0x27/0x80 kernel/locking/spinlock.c:192 hardirqs last disabled at (1294970): [] trace_hardirqs_off_thunk+0x1a/0x1c CPU: 0 PID: 7342 Comm: syz-executor.5 Tainted: G W 4.19.194-syzkaller #0 softirqs last enabled at (1294966): [] __do_softirq+0x62d/0x919 kernel/softirq.c:318 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 softirqs last disabled at (1294947): [] invoke_softirq kernel/softirq.c:372 [inline] softirqs last disabled at (1294947): [] irq_exit+0x17f/0x1c0 kernel/softirq.c:412 ---[ end trace 6dfd2fdda7f4e79f ]--- Call Trace: FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x171 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0xa lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x20 mm/slab_common.c:1588 slab_pre_alloc_hook mm/slab.h:424 [inline] slab_alloc_node mm/slab.c:3304 [inline] kmem_cache_alloc_node_trace+0x265/0x730 mm/slab.c:3666 __do_kmalloc_node mm/slab.c:3688 [inline] __kmalloc_node_track_caller+0x3c/0x70 mm/slab.c:3703 __kmalloc_reserve.isra.41+0x2c/0xc0 net/core/skbuff.c:137 __alloc_skb+0xd7/0x580 net/core/skbuff.c:205 alloc_skb include/linux/skbuff.h:995 [inline] nlmsg_new include/net/netlink.h:511 [inline] netlink_ack+0x217/0xa70 net/netlink/af_netlink.c:2389 netlink_rcv_skb+0x2a8/0x3d0 net/netlink/af_netlink.c:2461 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4796 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x443/0x650 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x764/0xc60 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:622 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:632 ___sys_sendmsg+0x647/0x950 net/socket.c:2115 __sys_sendmsg+0xd9/0x180 net/socket.c:2153 __do_sys_sendmsg net/socket.c:2162 [inline] __se_sys_sendmsg net/socket.c:2160 [inline] __x64_sys_sendmsg+0x73/0xb0 net/socket.c:2160 do_syscall_64+0xd0/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x463fd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f79708e1198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e