[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 33.819518] audit: type=1400 audit(1590823555.719:8): avc: denied { execmem } for pid=6130 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 33.830815] IPVS: ftp: loaded support on port[0] = 21 [ 34.242834] can: request_module (can-proto-0) failed. [ 35.369720] can: request_module (can-proto-0) failed. [ 35.395825] audit: type=1400 audit(1590823557.300:9): avc: denied { create } for pid=6108 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. 2020/05/30 07:26:05 parsed 1 programs 2020/05/30 07:26:05 executed programs: 0 [ 44.032480] audit: type=1400 audit(1590823565.942:10): avc: denied { execmem } for pid=6248 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 44.102613] IPVS: ftp: loaded support on port[0] = 21 [ 44.113055] IPVS: ftp: loaded support on port[0] = 21 [ 44.116485] IPVS: ftp: loaded support on port[0] = 21 [ 44.157236] IPVS: ftp: loaded support on port[0] = 21 [ 44.176074] IPVS: ftp: loaded support on port[0] = 21 [ 44.186181] IPVS: ftp: loaded support on port[0] = 21 [ 44.347017] chnl_net:caif_netlink_parms(): no params data found [ 44.401686] chnl_net:caif_netlink_parms(): no params data found [ 44.492197] chnl_net:caif_netlink_parms(): no params data found [ 44.503790] chnl_net:caif_netlink_parms(): no params data found [ 44.557290] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.564707] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.574905] device bridge_slave_0 entered promiscuous mode [ 44.586300] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.592712] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.599501] device bridge_slave_1 entered promiscuous mode [ 44.627342] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.636045] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.643627] device bridge_slave_0 entered promiscuous mode [ 44.662225] chnl_net:caif_netlink_parms(): no params data found [ 44.685243] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.692544] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.699973] device bridge_slave_1 entered promiscuous mode [ 44.708992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.727489] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.761372] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.767756] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.774926] device bridge_slave_0 entered promiscuous mode [ 44.785654] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.793112] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.799914] device bridge_slave_1 entered promiscuous mode [ 44.823193] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 44.831920] team0: Port device team_slave_0 added [ 44.837578] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 44.845638] team0: Port device team_slave_1 added [ 44.873767] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 44.881502] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.887837] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.896285] device bridge_slave_0 entered promiscuous mode [ 44.903403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 44.916428] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.923662] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.931887] device bridge_slave_0 entered promiscuous mode [ 44.943262] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 44.951014] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.957336] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.964604] device bridge_slave_1 entered promiscuous mode [ 44.970958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 44.981670] chnl_net:caif_netlink_parms(): no params data found [ 44.992089] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.998444] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.005861] device bridge_slave_1 entered promiscuous mode [ 45.013338] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.023117] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.076546] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.085743] team0: Port device team_slave_0 added [ 45.093714] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.132628] device hsr_slave_0 entered promiscuous mode [ 45.170466] device hsr_slave_1 entered promiscuous mode [ 45.222260] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.229396] team0: Port device team_slave_1 added [ 45.235775] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.243553] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.251883] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.259648] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.267209] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.274674] team0: Port device team_slave_0 added [ 45.279661] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.286306] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.293397] device bridge_slave_0 entered promiscuous mode [ 45.299772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.312191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.320205] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.332818] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.340840] team0: Port device team_slave_1 added [ 45.345918] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.352431] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.359233] device bridge_slave_1 entered promiscuous mode [ 45.376059] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.384045] team0: Port device team_slave_0 added [ 45.393531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.415743] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 45.453263] device hsr_slave_0 entered promiscuous mode [ 45.500234] device hsr_slave_1 entered promiscuous mode [ 45.560412] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.567578] team0: Port device team_slave_1 added [ 45.573954] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.581369] team0: Port device team_slave_0 added [ 45.586488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.595281] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 45.607270] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.614666] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.622548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.629704] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.636870] team0: Port device team_slave_1 added [ 45.660712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.667931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.675377] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 45.712350] device hsr_slave_0 entered promiscuous mode [ 45.750197] device hsr_slave_1 entered promiscuous mode [ 45.790353] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 45.797507] team0: Port device team_slave_0 added [ 45.803913] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 45.812619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.819547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 45.838477] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 45.845982] team0: Port device team_slave_1 added [ 45.851561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 45.858656] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 45.913612] device hsr_slave_0 entered promiscuous mode [ 45.960348] device hsr_slave_1 entered promiscuous mode [ 46.010450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 46.017644] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.024996] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.082356] device hsr_slave_0 entered promiscuous mode [ 46.120473] device hsr_slave_1 entered promiscuous mode [ 46.160778] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.221861] device hsr_slave_0 entered promiscuous mode [ 46.270254] device hsr_slave_1 entered promiscuous mode [ 46.334253] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.346173] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.353891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.365712] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 46.373714] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 46.412800] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.441963] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.454479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.475114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.486633] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.499642] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.509526] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.519582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.527693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.539437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.546834] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.553471] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.565035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.574241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.584295] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.592665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.600827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.608327] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.614795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.621830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.629490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.638392] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.644780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.651946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.658791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.665848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.675570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.684596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.694018] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.701910] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 46.708425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.719638] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.725952] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.734411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 46.745055] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.753692] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 46.762654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.771081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.778550] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.784937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.792250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.799045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.805983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.813051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.821927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 46.835443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.844138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.851354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.859040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.866738] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.873125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.880964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.889428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 46.904414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.911521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.919528] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.927744] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.935435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.946083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.954142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.962016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.972041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.982157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.992458] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 46.998512] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.008135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.016271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.024385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.033509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.043794] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.053249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.062814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.071495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.078898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.086929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.094794] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.101189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.108118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.115539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.124018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.135266] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.143399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.152019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.162555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.171276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.178085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.186073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.193824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.201104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.207962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.216073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.223895] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.230290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.237118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.244990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.252638] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.258956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.265780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.273802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.281663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.289499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.298279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.306353] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.312630] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.321737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.331896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.341112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.348963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.360745] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.366771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.377803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.386504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.396953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.407939] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.416410] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 47.426001] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 47.433649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.441208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.448690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.457028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.464882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.472781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.480471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.487965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.495708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.502706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.509530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.517331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.525188] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.531583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.538669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.546763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.557593] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.565214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.575329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 47.584406] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 47.590955] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.596972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.605517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.613208] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.619619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.626523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.634392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.641962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.649648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.658090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.665184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.674065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 47.683055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.692067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 47.703732] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 47.711017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.718501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.727713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.735538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.743354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.751074] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.757413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.764602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.774139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 47.782885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.792631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.802674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.810179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.817650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.825850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.833955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.842275] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.848601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.855460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.864087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 47.873404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.883001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 47.892537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 47.899350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.907513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.915292] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.921679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.929683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.937312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.945114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.952928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.960837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.968307] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 47.974583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.983316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 47.994198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.005830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.019829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.027504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.047614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.056255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.066779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.076721] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.091902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.105503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.116318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.126129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.128377] FAULT_INJECTION: forcing a failure. [ 48.128377] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.135544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.150739] CPU: 1 PID: 7148 Comm: syz-executor.3 Not tainted 4.19.125-syzkaller #0 [ 48.155404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 48.160989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.160993] Call Trace: [ 48.161006] dump_stack+0x123/0x177 [ 48.161016] should_fail.cold.4+0x5/0x13 [ 48.161024] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 48.161032] ? __lock_acquire+0x26bc/0x4980 [ 48.161043] __alloc_pages_nodemask+0x1d5/0x710 [ 48.161050] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 48.161063] alloc_pages_current+0xd6/0x1b0 [ 48.161073] skb_page_frag_refill+0x20b/0x400 [ 48.161081] sk_page_frag_refill+0x46/0x1b0 [ 48.161087] sk_alloc_sg+0x108/0x760 [ 48.161092] ? lockdep_hardirqs_on+0x421/0x5c0 [ 48.161099] ? lock_sock_nested+0x82/0x100 [ 48.161110] alloc_encrypted_sg+0x81/0x100 [ 48.161117] tls_sw_sendpage+0x4f8/0xc00 [ 48.161134] ? tls_sw_sendmsg+0x1020/0x1020 [ 48.161141] ? pipe_lock+0x4f/0x60 [ 48.161151] inet_sendpage+0x122/0x600 [ 48.175437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.177334] ? kernel_sendpage+0xd0/0xd0 [ 48.185649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.188582] kernel_sendpage+0x60/0xd0 [ 48.195687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.197969] ? lock_downgrade+0x860/0x860 [ 48.203825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.207620] ? pipe_lock+0x4f/0x60 [ 48.213015] FAULT_INJECTION: forcing a failure. [ 48.213015] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.216416] sock_sendpage+0x6d/0xd0 [ 48.221364] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.224418] pipe_to_sendpage+0x212/0x430 [ 48.250523] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.253208] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.253220] __splice_from_pipe+0x2cb/0x720 [ 48.274125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.274460] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.332901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.334246] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.365154] splice_from_pipe+0xbb/0x120 [ 48.369241] ? splice_shrink_spd+0xa0/0xa0 [ 48.373475] ? rw_verify_area+0xb8/0x2b0 [ 48.377538] generic_splice_sendpage+0x10/0x20 [ 48.382114] do_splice+0x4fd/0x12d0 [ 48.385739] ? ksys_dup3+0x2e0/0x2e0 [ 48.389451] ? opipe_prep.part.13+0x320/0x320 [ 48.393944] ? __fget_light+0x174/0x1e0 [ 48.397912] __x64_sys_splice+0x248/0x300 [ 48.402079] do_syscall_64+0xd0/0x4e0 [ 48.405875] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.411054] RIP: 0033:0x4592c9 [ 48.414234] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.433116] RSP: 002b:00007f21c44c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 48.440810] RAX: ffffffffffffffda RBX: 00007f21c44c5c90 RCX: 00000000004592c9 [ 48.448054] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.455300] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 48.462546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21c44c66d4 [ 48.469797] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 48.490457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.498058] CPU: 1 PID: 7159 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 [ 48.505029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.505864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.505868] Call Trace: [ 48.505881] dump_stack+0x123/0x177 [ 48.505893] should_fail.cold.4+0x5/0x13 [ 48.505900] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 48.505910] ? __lock_acquire+0x792/0x4980 [ 48.533251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.537660] __alloc_pages_nodemask+0x1d5/0x710 [ 48.537670] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 48.537681] ? __lock_acquire+0x792/0x4980 [ 48.537691] alloc_pages_current+0xd6/0x1b0 [ 48.545266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.548914] skb_page_frag_refill+0x20b/0x400 [ 48.548929] sk_page_frag_refill+0x46/0x1b0 [ 48.548935] sk_alloc_sg+0x108/0x760 [ 48.548944] ? lockdep_hardirqs_on+0x421/0x5c0 [ 48.556572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.558594] ? lock_sock_nested+0x82/0x100 [ 48.558606] alloc_encrypted_sg+0x81/0x100 [ 48.558614] tls_sw_sendpage+0x4f8/0xc00 [ 48.558629] ? tls_sw_sendmsg+0x1020/0x1020 [ 48.566796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 48.567165] ? pipe_lock+0x4f/0x60 [ 48.583617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 48.586724] inet_sendpage+0x122/0x600 [ 48.586734] ? kernel_sendpage+0xd0/0xd0 [ 48.586740] kernel_sendpage+0x60/0xd0 [ 48.586747] ? lock_downgrade+0x860/0x860 [ 48.586755] ? pipe_lock+0x4f/0x60 [ 48.597222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.598335] sock_sendpage+0x6d/0xd0 [ 48.605293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.606766] pipe_to_sendpage+0x212/0x430 [ 48.606775] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.606788] __splice_from_pipe+0x2cb/0x720 [ 48.606796] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.616321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.621974] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.621980] splice_from_pipe+0xbb/0x120 [ 48.621987] ? splice_shrink_spd+0xa0/0xa0 [ 48.621999] ? rw_verify_area+0xb8/0x2b0 [ 48.622010] generic_splice_sendpage+0x10/0x20 [ 48.622015] do_splice+0x4fd/0x12d0 [ 48.622025] ? ksys_dup3+0x2e0/0x2e0 [ 48.622033] ? opipe_prep.part.13+0x320/0x320 [ 48.622044] ? __fget_light+0x174/0x1e0 [ 48.622051] __x64_sys_splice+0x248/0x300 [ 48.622062] do_syscall_64+0xd0/0x4e0 [ 48.622072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.622077] RIP: 0033:0x4592c9 [ 48.622082] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.622086] RSP: 002b:00007f3694dbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 48.622091] RAX: ffffffffffffffda RBX: 00007f3694dbcc90 RCX: 00000000004592c9 [ 48.622094] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.622098] RBP: 000000000075bfc8 R08: 0000000100000300 R09: 0000000000000000 [ 48.622101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694dbd6d4 [ 48.622104] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 48.650022] FAULT_INJECTION: forcing a failure. [ 48.650022] name failslab, interval 1, probability 0, space 0, times 1 [ 48.663698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.687826] CPU: 1 PID: 7170 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 48.691547] FAULT_INJECTION: forcing a failure. [ 48.691547] name failslab, interval 1, probability 0, space 0, times 1 [ 48.694975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.694979] Call Trace: [ 48.718741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.720285] dump_stack+0x123/0x177 [ 48.720297] should_fail.cold.4+0x5/0x13 [ 48.720306] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 48.720314] ? lock_downgrade+0x860/0x860 [ 48.720326] __should_failslab+0xba/0xf0 [ 48.720334] should_failslab+0x9/0x14 [ 48.720340] __kmalloc+0x2dd/0x770 [ 48.720350] ? tls_push_record+0xf3/0x1720 [ 48.720356] ? __sk_mem_schedule+0x5f/0xc0 [ 48.720363] tls_push_record+0xf3/0x1720 [ 48.720368] ? lockdep_hardirqs_on+0x421/0x5c0 [ 48.720379] ? alloc_encrypted_sg+0x81/0x100 [ 48.720385] tls_sw_sendpage+0x458/0xc00 [ 48.720401] ? tls_sw_sendmsg+0x1020/0x1020 [ 48.720408] ? pipe_lock+0x4f/0x60 [ 48.720419] inet_sendpage+0x122/0x600 [ 48.720425] ? kernel_sendpage+0xd0/0xd0 [ 48.720430] kernel_sendpage+0x60/0xd0 [ 48.720434] ? lock_downgrade+0x860/0x860 [ 48.720439] ? pipe_lock+0x4f/0x60 [ 48.720444] sock_sendpage+0x6d/0xd0 [ 48.720451] pipe_to_sendpage+0x212/0x430 [ 48.720457] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.720464] ? kasan_check_write+0x14/0x20 [ 48.720468] ? anon_pipe_buf_release+0x149/0x1f0 [ 48.720474] __splice_from_pipe+0x2cb/0x720 [ 48.720480] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.720486] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.720491] splice_from_pipe+0xbb/0x120 [ 48.720497] ? splice_shrink_spd+0xa0/0xa0 [ 48.720508] ? rw_verify_area+0xb8/0x2b0 [ 48.720515] generic_splice_sendpage+0x10/0x20 [ 48.720520] do_splice+0x4fd/0x12d0 [ 48.720528] ? ksys_dup3+0x2e0/0x2e0 [ 48.720535] ? opipe_prep.part.13+0x320/0x320 [ 48.720544] ? __fget_light+0x174/0x1e0 [ 48.720552] __x64_sys_splice+0x248/0x300 [ 48.720563] do_syscall_64+0xd0/0x4e0 [ 48.720572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.720577] RIP: 0033:0x4592c9 [ 48.720583] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.720586] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 48.720591] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 48.720595] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.720598] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 48.720601] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 48.720604] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 48.721759] CPU: 1 PID: 7169 Comm: syz-executor.4 Not tainted 4.19.125-syzkaller #0 [ 48.743089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 48.745889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.751083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 48.767983] Call Trace: [ 48.767997] dump_stack+0x123/0x177 [ 48.768008] should_fail.cold.4+0x5/0x13 [ 48.768015] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 48.768022] ? lock_downgrade+0x860/0x860 [ 48.768033] __should_failslab+0xba/0xf0 [ 48.768041] should_failslab+0x9/0x14 [ 48.768049] kmem_cache_alloc_node+0x26b/0x730 [ 48.793570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.797522] __alloc_skb+0xa7/0x580 [ 48.797530] ? skb_scrub_packet+0x3c0/0x3c0 [ 48.797537] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 48.797543] ? finish_task_switch+0x14a/0x720 [ 48.797548] ? finish_task_switch+0x11c/0x720 [ 48.809026] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 48.812119] sk_stream_alloc_skb+0x9e/0x810 [ 48.812126] ? tcp_send_mss+0x1d/0x220 [ 48.812133] do_tcp_sendpages+0x772/0x1e10 [ 48.812142] ? __lock_is_held+0xb5/0x140 [ 48.812159] ? sk_stream_alloc_skb+0x810/0x810 [ 48.812165] ? __local_bh_enable_ip+0x160/0x260 [ 48.812171] ? lock_sock_nested+0xc5/0x100 [ 48.812177] ? lockdep_hardirqs_on+0x421/0x5c0 [ 48.812181] ? __local_bh_enable_ip+0x160/0x260 [ 48.812189] ? kasan_check_read+0x11/0x20 [ 48.812197] tcp_sendpage_locked+0x63/0xa0 [ 48.812204] tcp_sendpage+0x37/0x50 [ 48.812213] inet_sendpage+0x122/0x600 [ 48.812220] ? kernel_sendpage+0xd0/0xd0 [ 48.812226] kernel_sendpage+0x60/0xd0 [ 48.812230] ? lock_downgrade+0x860/0x860 [ 48.812239] ? pipe_lock+0x4f/0x60 [ 48.832918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.838265] sock_sendpage+0x6d/0xd0 [ 48.838276] pipe_to_sendpage+0x212/0x430 [ 48.838285] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.838296] __splice_from_pipe+0x2cb/0x720 [ 48.838302] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.861764] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 48.868374] ? generic_pipe_buf_nosteal+0x10/0x10 [ 48.868380] splice_from_pipe+0xbb/0x120 [ 48.868387] ? splice_shrink_spd+0xa0/0xa0 [ 48.868399] ? rw_verify_area+0xb8/0x2b0 [ 48.868406] generic_splice_sendpage+0x10/0x20 [ 48.868411] do_splice+0x4fd/0x12d0 [ 48.883257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.885301] ? ksys_dup3+0x2e0/0x2e0 [ 48.885313] ? opipe_prep.part.13+0x320/0x320 [ 48.885320] ? __fget_light+0x174/0x1e0 [ 48.885328] __x64_sys_splice+0x248/0x300 [ 49.348690] do_syscall_64+0xd0/0x4e0 [ 49.352469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.357633] RIP: 0033:0x4592c9 [ 49.360801] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.379681] RSP: 002b:00007f780c85ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 49.387468] RAX: ffffffffffffffda RBX: 00007f780c85ec90 RCX: 00000000004592c9 [ 49.394715] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 2020/05/30 07:26:11 executed programs: 6 [ 49.401960] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 49.409202] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f780c85f6d4 [ 49.416449] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 49.435734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.452050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.465950] FAULT_INJECTION: forcing a failure. [ 49.465950] name failslab, interval 1, probability 0, space 0, times 0 [ 49.477835] FAULT_INJECTION: forcing a failure. [ 49.477835] name failslab, interval 1, probability 0, space 0, times 0 [ 49.490926] FAULT_INJECTION: forcing a failure. [ 49.490926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 49.491113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.503679] CPU: 1 PID: 7180 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 49.517772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.527110] Call Trace: [ 49.529683] dump_stack+0x123/0x177 [ 49.533296] should_fail.cold.4+0x5/0x13 [ 49.537358] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 49.542471] ? lock_downgrade+0x860/0x860 [ 49.546600] __should_failslab+0xba/0xf0 [ 49.550639] should_failslab+0x9/0x14 [ 49.554413] __kmalloc+0x2dd/0x770 [ 49.557937] ? tls_push_record+0xf3/0x1720 [ 49.562146] ? __sk_mem_schedule+0x5f/0xc0 [ 49.566374] tls_push_record+0xf3/0x1720 [ 49.570409] ? lockdep_hardirqs_on+0x421/0x5c0 [ 49.574971] ? alloc_encrypted_sg+0x81/0x100 [ 49.579356] tls_sw_sendpage+0x458/0xc00 [ 49.583397] ? tls_sw_sendmsg+0x1020/0x1020 [ 49.587694] ? pipe_lock+0x4f/0x60 [ 49.591233] inet_sendpage+0x122/0x600 [ 49.595098] ? kernel_sendpage+0xd0/0xd0 [ 49.599133] kernel_sendpage+0x60/0xd0 [ 49.602996] ? lock_downgrade+0x860/0x860 [ 49.607119] ? pipe_lock+0x4f/0x60 [ 49.610634] sock_sendpage+0x6d/0xd0 [ 49.614327] pipe_to_sendpage+0x212/0x430 [ 49.618450] ? generic_pipe_buf_nosteal+0x10/0x10 [ 49.623267] ? kasan_check_write+0x14/0x20 [ 49.627479] ? anon_pipe_buf_release+0x149/0x1f0 [ 49.632236] __splice_from_pipe+0x2cb/0x720 [ 49.636533] ? generic_pipe_buf_nosteal+0x10/0x10 [ 49.641352] ? generic_pipe_buf_nosteal+0x10/0x10 [ 49.646167] splice_from_pipe+0xbb/0x120 [ 49.650203] ? splice_shrink_spd+0xa0/0xa0 [ 49.654417] ? rw_verify_area+0xb8/0x2b0 [ 49.658455] generic_splice_sendpage+0x10/0x20 [ 49.663010] do_splice+0x4fd/0x12d0 [ 49.666613] ? ksys_dup3+0x2e0/0x2e0 [ 49.670302] ? opipe_prep.part.13+0x320/0x320 [ 49.674774] ? __fget_light+0x174/0x1e0 [ 49.678740] __x64_sys_splice+0x248/0x300 [ 49.682867] do_syscall_64+0xd0/0x4e0 [ 49.686647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.691810] RIP: 0033:0x4592c9 [ 49.694978] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.713875] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 49.721556] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 49.728814] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 49.736060] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 49.743307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 49.750554] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 49.770662] CPU: 1 PID: 7178 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 [ 49.778480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.787832] Call Trace: [ 49.790419] dump_stack+0x123/0x177 [ 49.793837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.794042] should_fail.cold.4+0x5/0x13 [ 49.805176] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 49.810281] ? lock_downgrade+0x860/0x860 [ 49.814432] __should_failslab+0xba/0xf0 [ 49.817376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.818486] should_failslab+0x9/0x14 [ 49.818494] __kmalloc+0x2dd/0x770 [ 49.818505] ? tls_push_record+0xf3/0x1720 [ 49.818512] ? __sk_mem_schedule+0x5f/0xc0 [ 49.818520] tls_push_record+0xf3/0x1720 [ 49.818526] ? lockdep_hardirqs_on+0x421/0x5c0 [ 49.818537] ? alloc_encrypted_sg+0x81/0x100 [ 49.841568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 49.845316] tls_sw_sendpage+0x458/0xc00 [ 49.864975] ? tls_sw_sendmsg+0x1020/0x1020 [ 49.869301] ? pipe_lock+0x4f/0x60 [ 49.871959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 49.872837] inet_sendpage+0x122/0x600 [ 49.872847] ? kernel_sendpage+0xd0/0xd0 [ 49.872853] kernel_sendpage+0x60/0xd0 [ 49.872860] ? lock_downgrade+0x860/0x860 [ 49.872868] ? pipe_lock+0x4f/0x60 [ 49.898970] sock_sendpage+0x6d/0xd0 [ 49.902682] pipe_to_sendpage+0x212/0x430 [ 49.906828] ? generic_pipe_buf_nosteal+0x10/0x10 [ 49.907731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.911663] ? kasan_check_write+0x14/0x20 [ 49.911671] ? anon_pipe_buf_release+0x149/0x1f0 [ 49.911681] __splice_from_pipe+0x2cb/0x720 [ 49.911688] ? generic_pipe_buf_nosteal+0x10/0x10 [ 49.911697] ? generic_pipe_buf_nosteal+0x10/0x10 [ 49.911702] splice_from_pipe+0xbb/0x120 [ 49.911707] ? splice_shrink_spd+0xa0/0xa0 [ 49.911717] ? rw_verify_area+0xb8/0x2b0 [ 49.911723] generic_splice_sendpage+0x10/0x20 [ 49.911728] do_splice+0x4fd/0x12d0 [ 49.911736] ? ksys_dup3+0x2e0/0x2e0 [ 49.911743] ? opipe_prep.part.13+0x320/0x320 [ 49.911750] ? __fget_light+0x174/0x1e0 [ 49.911757] __x64_sys_splice+0x248/0x300 [ 49.911767] do_syscall_64+0xd0/0x4e0 [ 49.911778] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.911783] RIP: 0033:0x4592c9 [ 49.911789] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.911792] RSP: 002b:00007f3694dddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 49.911798] RAX: ffffffffffffffda RBX: 00007f3694dddc90 RCX: 00000000004592c9 [ 49.911801] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 49.911804] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 49.911807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694dde6d4 [ 49.911810] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 50.057154] FAULT_INJECTION: forcing a failure. [ 50.057154] name failslab, interval 1, probability 0, space 0, times 0 [ 50.058984] CPU: 0 PID: 7174 Comm: syz-executor.2 Not tainted 4.19.125-syzkaller #0 [ 50.076123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.085465] Call Trace: [ 50.088042] dump_stack+0x123/0x177 [ 50.091654] should_fail.cold.4+0x5/0x13 [ 50.095712] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 50.100799] ? __lock_acquire+0x792/0x4980 [ 50.105019] __alloc_pages_nodemask+0x1d5/0x710 [ 50.109668] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 50.114666] ? __lock_acquire+0x792/0x4980 [ 50.118889] alloc_pages_current+0xd6/0x1b0 [ 50.123190] skb_page_frag_refill+0x20b/0x400 [ 50.127669] sk_page_frag_refill+0x46/0x1b0 [ 50.131975] sk_alloc_sg+0x108/0x760 [ 50.135668] ? lockdep_hardirqs_on+0x421/0x5c0 [ 50.140228] ? lock_sock_nested+0x82/0x100 [ 50.144451] alloc_encrypted_sg+0x81/0x100 [ 50.148672] tls_sw_sendpage+0x4f8/0xc00 [ 50.152738] ? tls_sw_sendmsg+0x1020/0x1020 [ 50.157042] ? pipe_lock+0x4f/0x60 [ 50.160565] inet_sendpage+0x122/0x600 [ 50.164439] ? kernel_sendpage+0xd0/0xd0 [ 50.168482] kernel_sendpage+0x60/0xd0 [ 50.172351] ? lock_downgrade+0x860/0x860 [ 50.176496] ? pipe_lock+0x4f/0x60 [ 50.180016] sock_sendpage+0x6d/0xd0 [ 50.183710] pipe_to_sendpage+0x212/0x430 [ 50.187834] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.192658] __splice_from_pipe+0x2cb/0x720 [ 50.196963] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.201805] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.206644] splice_from_pipe+0xbb/0x120 [ 50.210715] ? splice_shrink_spd+0xa0/0xa0 [ 50.214938] ? rw_verify_area+0xb8/0x2b0 [ 50.218979] generic_splice_sendpage+0x10/0x20 [ 50.223538] do_splice+0x4fd/0x12d0 [ 50.227162] ? ksys_dup3+0x2e0/0x2e0 [ 50.230861] ? opipe_prep.part.13+0x320/0x320 [ 50.235354] ? __fget_light+0x174/0x1e0 [ 50.239307] __x64_sys_splice+0x248/0x300 [ 50.243437] do_syscall_64+0xd0/0x4e0 [ 50.247223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.252392] RIP: 0033:0x4592c9 [ 50.255568] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.274466] RSP: 002b:00007f09c60abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 50.282157] RAX: ffffffffffffffda RBX: 00007f09c60abc90 RCX: 00000000004592c9 [ 50.289417] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 50.296667] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 50.304032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09c60ac6d4 [ 50.311280] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 50.318555] CPU: 1 PID: 7192 Comm: syz-executor.4 Not tainted 4.19.125-syzkaller #0 [ 50.326357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.335711] Call Trace: [ 50.338296] dump_stack+0x123/0x177 [ 50.341925] should_fail.cold.4+0x5/0x13 [ 50.345988] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 50.351087] ? lock_downgrade+0x860/0x860 [ 50.355238] __should_failslab+0xba/0xf0 [ 50.359296] should_failslab+0x9/0x14 [ 50.363104] kmem_cache_alloc_node+0x26b/0x730 [ 50.367690] __alloc_skb+0xa7/0x580 [ 50.371314] ? skb_scrub_packet+0x3c0/0x3c0 [ 50.374186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.375634] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 50.375646] ? finish_task_switch+0x14a/0x720 [ 50.375651] ? finish_task_switch+0x11c/0x720 [ 50.386308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 50.390804] sk_stream_alloc_skb+0x9e/0x810 [ 50.390810] ? tcp_send_mss+0x1d/0x220 [ 50.390816] do_tcp_sendpages+0x772/0x1e10 [ 50.390825] ? __lock_is_held+0xb5/0x140 [ 50.390836] ? sk_stream_alloc_skb+0x810/0x810 [ 50.390841] ? __local_bh_enable_ip+0x160/0x260 [ 50.390847] ? lock_sock_nested+0xc5/0x100 [ 50.390852] ? lockdep_hardirqs_on+0x421/0x5c0 [ 50.390855] ? __local_bh_enable_ip+0x160/0x260 [ 50.390864] ? kasan_check_read+0x11/0x20 [ 50.390872] tcp_sendpage_locked+0x63/0xa0 [ 50.390880] tcp_sendpage+0x37/0x50 [ 50.390889] inet_sendpage+0x122/0x600 [ 50.390897] ? kernel_sendpage+0xd0/0xd0 [ 50.390903] kernel_sendpage+0x60/0xd0 [ 50.390907] ? lock_downgrade+0x860/0x860 [ 50.390913] ? pipe_lock+0x4f/0x60 [ 50.390919] sock_sendpage+0x6d/0xd0 [ 50.390928] pipe_to_sendpage+0x212/0x430 [ 50.390936] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.390947] __splice_from_pipe+0x2cb/0x720 [ 50.390953] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.390961] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.502939] splice_from_pipe+0xbb/0x120 [ 50.506985] ? splice_shrink_spd+0xa0/0xa0 [ 50.511206] ? rw_verify_area+0xb8/0x2b0 [ 50.515245] generic_splice_sendpage+0x10/0x20 [ 50.519812] do_splice+0x4fd/0x12d0 [ 50.523416] ? ksys_dup3+0x2e0/0x2e0 [ 50.527105] ? opipe_prep.part.13+0x320/0x320 [ 50.531591] ? __fget_light+0x174/0x1e0 [ 50.535542] __x64_sys_splice+0x248/0x300 [ 50.539756] do_syscall_64+0xd0/0x4e0 [ 50.543534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.548702] RIP: 0033:0x4592c9 [ 50.551870] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.570840] RSP: 002b:00007f780c85ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 50.578523] RAX: ffffffffffffffda RBX: 00007f780c85ec90 RCX: 00000000004592c9 [ 50.585768] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 50.593032] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 50.600284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f780c85f6d4 [ 50.607545] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 50.619561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.626997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.665087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.673654] FAULT_INJECTION: forcing a failure. [ 50.673654] name failslab, interval 1, probability 0, space 0, times 0 [ 50.687302] FAULT_INJECTION: forcing a failure. [ 50.687302] name failslab, interval 1, probability 0, space 0, times 0 [ 50.691501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.698998] FAULT_INJECTION: forcing a failure. [ 50.698998] name failslab, interval 1, probability 0, space 0, times 0 [ 50.707141] FAULT_INJECTION: forcing a failure. [ 50.707141] name failslab, interval 1, probability 0, space 0, times 0 [ 50.728428] CPU: 1 PID: 7209 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 [ 50.736227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.737030] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 50.745586] Call Trace: [ 50.745599] dump_stack+0x123/0x177 [ 50.745609] should_fail.cold.4+0x5/0x13 [ 50.745617] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 50.745624] ? lock_downgrade+0x860/0x860 [ 50.745635] __should_failslab+0xba/0xf0 [ 50.745643] should_failslab+0x9/0x14 [ 50.745648] __kmalloc+0x2dd/0x770 [ 50.745658] ? tls_push_record+0xf3/0x1720 [ 50.745664] ? __sk_mem_schedule+0x5f/0xc0 [ 50.745671] tls_push_record+0xf3/0x1720 [ 50.745680] ? lockdep_hardirqs_on+0x421/0x5c0 [ 50.774308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.775302] ? alloc_encrypted_sg+0x81/0x100 [ 50.775311] tls_sw_sendpage+0x458/0xc00 [ 50.775328] ? tls_sw_sendmsg+0x1020/0x1020 [ 50.775336] ? pipe_lock+0x4f/0x60 [ 50.775347] inet_sendpage+0x122/0x600 [ 50.825832] ? kernel_sendpage+0xd0/0xd0 [ 50.829890] kernel_sendpage+0x60/0xd0 [ 50.833771] ? lock_downgrade+0x860/0x860 [ 50.837916] ? pipe_lock+0x4f/0x60 [ 50.841449] sock_sendpage+0x6d/0xd0 [ 50.845155] pipe_to_sendpage+0x212/0x430 [ 50.849299] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.854135] ? kasan_check_write+0x14/0x20 [ 50.858360] ? anon_pipe_buf_release+0x149/0x1f0 [ 50.863112] __splice_from_pipe+0x2cb/0x720 [ 50.867427] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.872247] ? generic_pipe_buf_nosteal+0x10/0x10 [ 50.877080] splice_from_pipe+0xbb/0x120 [ 50.881119] ? splice_shrink_spd+0xa0/0xa0 [ 50.885331] ? rw_verify_area+0xb8/0x2b0 [ 50.889370] generic_splice_sendpage+0x10/0x20 [ 50.893926] do_splice+0x4fd/0x12d0 [ 50.897538] ? ksys_dup3+0x2e0/0x2e0 [ 50.901230] ? opipe_prep.part.13+0x320/0x320 [ 50.905701] ? __fget_light+0x174/0x1e0 [ 50.909650] __x64_sys_splice+0x248/0x300 [ 50.913781] do_syscall_64+0xd0/0x4e0 [ 50.917579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 50.922745] RIP: 0033:0x4592c9 [ 50.925915] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 50.944797] RSP: 002b:00007f3694dddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 50.952493] RAX: ffffffffffffffda RBX: 00007f3694dddc90 RCX: 00000000004592c9 [ 50.959739] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 50.966986] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 50.974247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694dde6d4 [ 50.981516] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 50.992246] CPU: 0 PID: 7210 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 51.000054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.009399] Call Trace: [ 51.011196] FAULT_INJECTION: forcing a failure. [ 51.011196] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 51.011990] dump_stack+0x123/0x177 [ 51.012002] should_fail.cold.4+0x5/0x13 [ 51.012011] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 51.012019] ? lock_downgrade+0x860/0x860 [ 51.012031] __should_failslab+0xba/0xf0 [ 51.044847] should_failslab+0x9/0x14 [ 51.048636] __kmalloc+0x2dd/0x770 [ 51.052167] ? tls_push_record+0xf3/0x1720 [ 51.056395] ? __sk_mem_schedule+0x5f/0xc0 [ 51.060621] tls_push_record+0xf3/0x1720 [ 51.064669] ? lockdep_hardirqs_on+0x421/0x5c0 [ 51.069235] ? alloc_encrypted_sg+0x81/0x100 [ 51.073620] tls_sw_sendpage+0x458/0xc00 [ 51.077665] ? tls_sw_sendmsg+0x1020/0x1020 [ 51.081989] ? pipe_lock+0x4f/0x60 [ 51.085528] inet_sendpage+0x122/0x600 [ 51.089397] ? kernel_sendpage+0xd0/0xd0 [ 51.093475] kernel_sendpage+0x60/0xd0 [ 51.097357] ? lock_downgrade+0x860/0x860 [ 51.101480] ? pipe_lock+0x4f/0x60 [ 51.104998] sock_sendpage+0x6d/0xd0 [ 51.108689] pipe_to_sendpage+0x212/0x430 [ 51.112829] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.117652] ? kasan_check_write+0x14/0x20 [ 51.121862] ? anon_pipe_buf_release+0x149/0x1f0 [ 51.126614] __splice_from_pipe+0x2cb/0x720 [ 51.130913] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.135747] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.140567] splice_from_pipe+0xbb/0x120 [ 51.144622] ? splice_shrink_spd+0xa0/0xa0 [ 51.148835] ? rw_verify_area+0xb8/0x2b0 [ 51.152882] generic_splice_sendpage+0x10/0x20 [ 51.157440] do_splice+0x4fd/0x12d0 [ 51.161046] ? ksys_dup3+0x2e0/0x2e0 [ 51.164738] ? opipe_prep.part.13+0x320/0x320 [ 51.169209] ? __fget_light+0x174/0x1e0 [ 51.173163] __x64_sys_splice+0x248/0x300 [ 51.177290] do_syscall_64+0xd0/0x4e0 [ 51.181080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.186246] RIP: 0033:0x4592c9 [ 51.189421] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.208321] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 51.216005] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 51.223263] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.230534] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 51.237797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 51.245052] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 51.252313] CPU: 1 PID: 7213 Comm: syz-executor.4 Not tainted 4.19.125-syzkaller #0 [ 51.253446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.260102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.260106] Call Trace: [ 51.260118] dump_stack+0x123/0x177 [ 51.260130] should_fail.cold.4+0x5/0x13 [ 51.260138] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 51.260146] ? lock_downgrade+0x860/0x860 [ 51.260159] __should_failslab+0xba/0xf0 [ 51.260167] should_failslab+0x9/0x14 [ 51.260173] __kmalloc+0x2dd/0x770 [ 51.260182] ? tls_push_record+0xf3/0x1720 [ 51.260188] ? __sk_mem_schedule+0x5f/0xc0 [ 51.260196] tls_push_record+0xf3/0x1720 [ 51.319214] ? lockdep_hardirqs_on+0x421/0x5c0 [ 51.323821] ? alloc_encrypted_sg+0x81/0x100 [ 51.328216] tls_sw_sendpage+0x458/0xc00 [ 51.332259] ? tls_sw_sendmsg+0x1020/0x1020 [ 51.336566] ? pipe_lock+0x4f/0x60 [ 51.340087] inet_sendpage+0x122/0x600 [ 51.343952] ? kernel_sendpage+0xd0/0xd0 [ 51.347988] kernel_sendpage+0x60/0xd0 [ 51.351871] ? lock_downgrade+0x860/0x860 [ 51.356009] ? pipe_lock+0x4f/0x60 [ 51.359524] sock_sendpage+0x6d/0xd0 [ 51.363215] pipe_to_sendpage+0x212/0x430 [ 51.367342] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.372161] ? kasan_check_write+0x14/0x20 [ 51.376385] ? anon_pipe_buf_release+0x149/0x1f0 [ 51.381126] __splice_from_pipe+0x2cb/0x720 [ 51.385426] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.390249] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.395066] splice_from_pipe+0xbb/0x120 [ 51.399102] ? splice_shrink_spd+0xa0/0xa0 [ 51.403313] ? rw_verify_area+0xb8/0x2b0 [ 51.407350] generic_splice_sendpage+0x10/0x20 [ 51.411910] do_splice+0x4fd/0x12d0 [ 51.415537] ? ksys_dup3+0x2e0/0x2e0 [ 51.419228] ? opipe_prep.part.13+0x320/0x320 [ 51.423699] ? __fget_light+0x174/0x1e0 [ 51.427650] __x64_sys_splice+0x248/0x300 [ 51.431776] do_syscall_64+0xd0/0x4e0 [ 51.435554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.440717] RIP: 0033:0x4592c9 [ 51.443886] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.462854] RSP: 002b:00007f780c8c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 51.470537] RAX: ffffffffffffffda RBX: 00007f780c8c1c90 RCX: 00000000004592c9 [ 51.477797] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.485065] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 51.492317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f780c8c26d4 [ 51.499651] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 51.516517] FAULT_INJECTION: forcing a failure. [ 51.516517] name failslab, interval 1, probability 0, space 0, times 0 [ 51.525002] CPU: 1 PID: 7208 Comm: syz-executor.3 Not tainted 4.19.125-syzkaller #0 [ 51.535546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.544907] Call Trace: [ 51.547493] dump_stack+0x123/0x177 [ 51.551128] should_fail.cold.4+0x5/0x13 [ 51.555187] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 51.560288] ? lock_downgrade+0x860/0x860 [ 51.564417] __should_failslab+0xba/0xf0 [ 51.568463] should_failslab+0x9/0x14 [ 51.572239] __kmalloc+0x2dd/0x770 [ 51.575785] ? tls_push_record+0xf3/0x1720 [ 51.579995] ? __sk_mem_schedule+0x5f/0xc0 [ 51.584207] tls_push_record+0xf3/0x1720 [ 51.588244] ? lockdep_hardirqs_on+0x421/0x5c0 [ 51.592805] ? alloc_encrypted_sg+0x81/0x100 [ 51.597189] tls_sw_sendpage+0x458/0xc00 [ 51.601231] ? tls_sw_sendmsg+0x1020/0x1020 [ 51.605531] ? pipe_lock+0x4f/0x60 [ 51.609050] inet_sendpage+0x122/0x600 [ 51.612914] ? kernel_sendpage+0xd0/0xd0 [ 51.616950] kernel_sendpage+0x60/0xd0 [ 51.620812] ? lock_downgrade+0x860/0x860 [ 51.624934] ? pipe_lock+0x4f/0x60 [ 51.628454] sock_sendpage+0x6d/0xd0 [ 51.632153] pipe_to_sendpage+0x212/0x430 [ 51.636276] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.641115] ? kasan_check_write+0x14/0x20 [ 51.645326] ? anon_pipe_buf_release+0x149/0x1f0 [ 51.650059] __splice_from_pipe+0x2cb/0x720 [ 51.654357] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.659192] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.664008] splice_from_pipe+0xbb/0x120 [ 51.668048] ? splice_shrink_spd+0xa0/0xa0 [ 51.672262] ? rw_verify_area+0xb8/0x2b0 [ 51.676303] generic_splice_sendpage+0x10/0x20 [ 51.680864] do_splice+0x4fd/0x12d0 [ 51.684476] ? ksys_dup3+0x2e0/0x2e0 [ 51.688182] ? opipe_prep.part.13+0x320/0x320 [ 51.692654] ? __fget_light+0x174/0x1e0 [ 51.696606] __x64_sys_splice+0x248/0x300 [ 51.700731] do_syscall_64+0xd0/0x4e0 [ 51.704509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.709675] RIP: 0033:0x4592c9 [ 51.712843] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 51.731737] RSP: 002b:00007f21c44c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 51.739419] RAX: ffffffffffffffda RBX: 00007f21c44c5c90 RCX: 00000000004592c9 [ 51.746666] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 51.753912] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 51.761162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21c44c66d4 [ 51.768407] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 51.782647] CPU: 0 PID: 7222 Comm: syz-executor.0 Not tainted 4.19.125-syzkaller #0 [ 51.790482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.799837] Call Trace: [ 51.802423] dump_stack+0x123/0x177 [ 51.806053] should_fail.cold.4+0x5/0x13 [ 51.810135] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 51.815223] ? lock_downgrade+0x860/0x860 [ 51.819369] __should_failslab+0xba/0xf0 [ 51.823415] should_failslab+0x9/0x14 [ 51.827205] kmem_cache_alloc_node+0x26b/0x730 [ 51.831784] __alloc_skb+0xa7/0x580 [ 51.835398] ? skb_scrub_packet+0x3c0/0x3c0 [ 51.839710] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 51.845237] ? finish_task_switch+0x14a/0x720 [ 51.849712] ? finish_task_switch+0x11c/0x720 [ 51.854194] sk_stream_alloc_skb+0x9e/0x810 [ 51.858499] ? tcp_send_mss+0x1d/0x220 [ 51.862371] do_tcp_sendpages+0x772/0x1e10 [ 51.866591] ? __lock_is_held+0xb5/0x140 [ 51.870634] ? sk_stream_alloc_skb+0x810/0x810 [ 51.875193] ? __local_bh_enable_ip+0x160/0x260 [ 51.879865] ? lock_sock_nested+0xc5/0x100 [ 51.884097] ? lockdep_hardirqs_on+0x421/0x5c0 [ 51.888663] ? __local_bh_enable_ip+0x160/0x260 [ 51.893312] ? kasan_check_read+0x11/0x20 [ 51.897437] tcp_sendpage_locked+0x63/0xa0 [ 51.901659] tcp_sendpage+0x37/0x50 [ 51.905266] inet_sendpage+0x122/0x600 [ 51.909146] ? kernel_sendpage+0xd0/0xd0 [ 51.913183] kernel_sendpage+0x60/0xd0 [ 51.917063] ? lock_downgrade+0x860/0x860 [ 51.921188] ? pipe_lock+0x4f/0x60 [ 51.924723] sock_sendpage+0x6d/0xd0 [ 51.928440] pipe_to_sendpage+0x212/0x430 [ 51.932671] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.937502] __splice_from_pipe+0x2cb/0x720 [ 51.941805] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.946626] ? generic_pipe_buf_nosteal+0x10/0x10 [ 51.951444] splice_from_pipe+0xbb/0x120 [ 51.955483] ? splice_shrink_spd+0xa0/0xa0 [ 51.959697] ? rw_verify_area+0xb8/0x2b0 [ 51.963734] generic_splice_sendpage+0x10/0x20 [ 51.968306] do_splice+0x4fd/0x12d0 [ 51.971913] ? ksys_dup3+0x2e0/0x2e0 [ 51.975605] ? opipe_prep.part.13+0x320/0x320 [ 51.980094] ? __fget_light+0x174/0x1e0 [ 51.984045] __x64_sys_splice+0x248/0x300 [ 51.988172] do_syscall_64+0xd0/0x4e0 [ 51.991953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 51.997130] RIP: 0033:0x4592c9 [ 52.000300] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.019181] RSP: 002b:00007f644a550c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 52.026872] RAX: ffffffffffffffda RBX: 00007f644a550c90 RCX: 00000000004592c9 [ 52.034138] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.041405] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 52.048653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f644a5516d4 [ 52.055919] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 52.063178] CPU: 1 PID: 7207 Comm: syz-executor.2 Not tainted 4.19.125-syzkaller #0 [ 52.070979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.080330] Call Trace: [ 52.082917] dump_stack+0x123/0x177 [ 52.086535] should_fail.cold.4+0x5/0x13 [ 52.090605] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 52.095700] ? __lock_acquire+0x792/0x4980 [ 52.099935] __alloc_pages_nodemask+0x1d5/0x710 [ 52.104604] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 52.109621] ? __lock_acquire+0x792/0x4980 [ 52.113859] alloc_pages_current+0xd6/0x1b0 [ 52.118181] skb_page_frag_refill+0x20b/0x400 [ 52.122678] sk_page_frag_refill+0x46/0x1b0 [ 52.127017] sk_alloc_sg+0x108/0x760 [ 52.130711] ? lockdep_hardirqs_on+0x421/0x5c0 [ 52.135270] ? lock_sock_nested+0x82/0x100 [ 52.139484] alloc_encrypted_sg+0x81/0x100 [ 52.143695] tls_sw_sendpage+0x4f8/0xc00 [ 52.147736] ? tls_sw_sendmsg+0x1020/0x1020 [ 52.152031] ? pipe_lock+0x4f/0x60 [ 52.155552] inet_sendpage+0x122/0x600 [ 52.159422] ? kernel_sendpage+0xd0/0xd0 [ 52.163464] kernel_sendpage+0x60/0xd0 [ 52.167327] ? lock_downgrade+0x860/0x860 [ 52.171450] ? pipe_lock+0x4f/0x60 [ 52.175226] sock_sendpage+0x6d/0xd0 [ 52.178918] pipe_to_sendpage+0x212/0x430 [ 52.183063] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.187902] __splice_from_pipe+0x2cb/0x720 [ 52.192201] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.197021] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.201838] splice_from_pipe+0xbb/0x120 [ 52.205873] ? splice_shrink_spd+0xa0/0xa0 [ 52.210104] ? rw_verify_area+0xb8/0x2b0 [ 52.214143] generic_splice_sendpage+0x10/0x20 [ 52.218699] do_splice+0x4fd/0x12d0 [ 52.222303] ? ksys_dup3+0x2e0/0x2e0 [ 52.226009] ? opipe_prep.part.13+0x320/0x320 [ 52.230480] ? __fget_light+0x174/0x1e0 [ 52.234962] __x64_sys_splice+0x248/0x300 [ 52.239089] do_syscall_64+0xd0/0x4e0 [ 52.242867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.248047] RIP: 0033:0x4592c9 [ 52.251215] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.270094] RSP: 002b:00007f09c60abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 52.277775] RAX: ffffffffffffffda RBX: 00007f09c60abc90 RCX: 00000000004592c9 [ 52.285037] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.292291] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 52.299543] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09c60ac6d4 [ 52.306793] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 52.329251] FAULT_INJECTION: forcing a failure. [ 52.329251] name failslab, interval 1, probability 0, space 0, times 0 [ 52.343488] CPU: 0 PID: 7231 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 52.351300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.360652] Call Trace: [ 52.363239] dump_stack+0x123/0x177 [ 52.366870] should_fail.cold.4+0x5/0x13 [ 52.370931] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 52.376050] ? lock_downgrade+0x860/0x860 [ 52.380195] __should_failslab+0xba/0xf0 [ 52.384685] should_failslab+0x9/0x14 [ 52.388463] kmem_cache_alloc_node+0x26b/0x730 [ 52.393028] __alloc_skb+0xa7/0x580 [ 52.396631] ? skb_scrub_packet+0x3c0/0x3c0 [ 52.400928] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 52.406455] ? finish_task_switch+0x14a/0x720 [ 52.410922] ? finish_task_switch+0x11c/0x720 [ 52.415398] sk_stream_alloc_skb+0x9e/0x810 [ 52.419695] ? tcp_send_mss+0x1d/0x220 [ 52.423558] do_tcp_sendpages+0x772/0x1e10 [ 52.427770] ? __lock_is_held+0xb5/0x140 [ 52.431810] ? sk_stream_alloc_skb+0x810/0x810 [ 52.436368] ? __local_bh_enable_ip+0x160/0x260 [ 52.441034] ? lock_sock_nested+0xc5/0x100 [ 52.445243] ? lockdep_hardirqs_on+0x421/0x5c0 [ 52.449798] ? __local_bh_enable_ip+0x160/0x260 [ 52.454445] ? kasan_check_read+0x11/0x20 [ 52.458583] tcp_sendpage_locked+0x63/0xa0 [ 52.462794] tcp_sendpage+0x37/0x50 [ 52.466400] inet_sendpage+0x122/0x600 [ 52.470265] ? kernel_sendpage+0xd0/0xd0 [ 52.474300] kernel_sendpage+0x60/0xd0 [ 52.478160] ? lock_downgrade+0x860/0x860 [ 52.482285] ? pipe_lock+0x4f/0x60 [ 52.485820] sock_sendpage+0x6d/0xd0 [ 52.489511] pipe_to_sendpage+0x212/0x430 [ 52.493706] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.498533] __splice_from_pipe+0x2cb/0x720 [ 52.502836] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.507676] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.512497] splice_from_pipe+0xbb/0x120 [ 52.516537] ? splice_shrink_spd+0xa0/0xa0 [ 52.520750] ? rw_verify_area+0xb8/0x2b0 [ 52.524785] generic_splice_sendpage+0x10/0x20 [ 52.529341] do_splice+0x4fd/0x12d0 [ 52.532945] ? ksys_dup3+0x2e0/0x2e0 [ 52.536635] ? opipe_prep.part.13+0x320/0x320 [ 52.541109] ? __fget_light+0x174/0x1e0 [ 52.545062] __x64_sys_splice+0x248/0x300 [ 52.549190] do_syscall_64+0xd0/0x4e0 [ 52.552967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.558130] RIP: 0033:0x4592c9 [ 52.561298] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.580191] RSP: 002b:00007ff9bb254c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 52.587900] RAX: ffffffffffffffda RBX: 00007ff9bb254c90 RCX: 00000000004592c9 [ 52.595147] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.602390] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 52.609633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2556d4 [ 52.616894] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 52.647006] FAULT_INJECTION: forcing a failure. [ 52.647006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.667591] CPU: 1 PID: 7234 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 [ 52.675417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.684771] Call Trace: [ 52.687350] dump_stack+0x123/0x177 [ 52.690979] should_fail.cold.4+0x5/0x13 [ 52.695035] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 52.700116] ? __lock_acquire+0x792/0x4980 [ 52.704329] __alloc_pages_nodemask+0x1d5/0x710 [ 52.708979] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 52.713974] ? __lock_acquire+0x792/0x4980 [ 52.718196] alloc_pages_current+0xd6/0x1b0 [ 52.722496] skb_page_frag_refill+0x20b/0x400 [ 52.726972] sk_page_frag_refill+0x46/0x1b0 [ 52.731269] sk_alloc_sg+0x108/0x760 [ 52.734972] ? lockdep_hardirqs_on+0x421/0x5c0 [ 52.739534] ? lock_sock_nested+0x82/0x100 [ 52.743767] alloc_encrypted_sg+0x81/0x100 [ 52.748002] tls_sw_sendpage+0x4f8/0xc00 [ 52.752070] ? tls_sw_sendmsg+0x1020/0x1020 [ 52.756375] ? pipe_lock+0x4f/0x60 [ 52.759896] inet_sendpage+0x122/0x600 [ 52.763771] ? kernel_sendpage+0xd0/0xd0 [ 52.767828] kernel_sendpage+0x60/0xd0 [ 52.771694] ? lock_downgrade+0x860/0x860 [ 52.775817] ? pipe_lock+0x4f/0x60 [ 52.779332] sock_sendpage+0x6d/0xd0 [ 52.783040] pipe_to_sendpage+0x212/0x430 [ 52.787165] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.791990] __splice_from_pipe+0x2cb/0x720 [ 52.796305] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.801123] ? generic_pipe_buf_nosteal+0x10/0x10 [ 52.805958] splice_from_pipe+0xbb/0x120 [ 52.809997] ? splice_shrink_spd+0xa0/0xa0 [ 52.814233] ? rw_verify_area+0xb8/0x2b0 [ 52.818269] generic_splice_sendpage+0x10/0x20 [ 52.822838] do_splice+0x4fd/0x12d0 [ 52.826452] ? ksys_dup3+0x2e0/0x2e0 [ 52.830144] ? opipe_prep.part.13+0x320/0x320 [ 52.834635] ? __fget_light+0x174/0x1e0 [ 52.838585] __x64_sys_splice+0x248/0x300 [ 52.842726] do_syscall_64+0xd0/0x4e0 [ 52.846506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 52.851687] RIP: 0033:0x4592c9 [ 52.854858] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 52.873751] RSP: 002b:00007f3694dbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 52.881435] RAX: ffffffffffffffda RBX: 00007f3694dbcc90 RCX: 00000000004592c9 [ 52.888771] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.896020] RBP: 000000000075bfc8 R08: 0000000100000300 R09: 0000000000000000 [ 52.903283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694dbd6d4 [ 52.910616] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 52.929309] FAULT_INJECTION: forcing a failure. [ 52.929309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.945997] CPU: 0 PID: 7246 Comm: syz-executor.3 Not tainted 4.19.125-syzkaller #0 [ 52.953819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.963169] Call Trace: [ 52.965751] dump_stack+0x123/0x177 [ 52.969380] should_fail.cold.4+0x5/0x13 [ 52.973444] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 52.978544] ? __lock_acquire+0x792/0x4980 [ 52.982785] __alloc_pages_nodemask+0x1d5/0x710 [ 52.987477] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 52.992492] ? __lock_acquire+0x792/0x4980 [ 52.996728] alloc_pages_current+0xd6/0x1b0 [ 53.001048] skb_page_frag_refill+0x20b/0x400 [ 53.005552] sk_page_frag_refill+0x46/0x1b0 [ 53.009871] sk_alloc_sg+0x108/0x760 [ 53.013578] ? lockdep_hardirqs_on+0x421/0x5c0 [ 53.018161] ? lock_sock_nested+0x82/0x100 [ 53.022396] alloc_encrypted_sg+0x81/0x100 [ 53.026633] tls_sw_sendpage+0x4f8/0xc00 [ 53.030700] ? tls_sw_sendmsg+0x1020/0x1020 [ 53.035013] ? pipe_lock+0x4f/0x60 [ 53.038586] inet_sendpage+0x122/0x600 [ 53.042451] ? kernel_sendpage+0xd0/0xd0 [ 53.046554] kernel_sendpage+0x60/0xd0 [ 53.050422] ? lock_downgrade+0x860/0x860 [ 53.054547] ? pipe_lock+0x4f/0x60 [ 53.058118] sock_sendpage+0x6d/0xd0 [ 53.061808] pipe_to_sendpage+0x212/0x430 [ 53.065933] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.070801] __splice_from_pipe+0x2cb/0x720 [ 53.075098] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.079916] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.084733] splice_from_pipe+0xbb/0x120 [ 53.088770] ? splice_shrink_spd+0xa0/0xa0 [ 53.092983] ? rw_verify_area+0xb8/0x2b0 [ 53.097020] generic_splice_sendpage+0x10/0x20 [ 53.101574] do_splice+0x4fd/0x12d0 [ 53.105176] ? ksys_dup3+0x2e0/0x2e0 [ 53.108867] ? opipe_prep.part.13+0x320/0x320 [ 53.113352] ? __fget_light+0x174/0x1e0 [ 53.117307] __x64_sys_splice+0x248/0x300 [ 53.121431] do_syscall_64+0xd0/0x4e0 [ 53.125211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.130375] RIP: 0033:0x4592c9 [ 53.133561] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.152444] RSP: 002b:00007f21c44a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 53.160162] RAX: ffffffffffffffda RBX: 00007f21c44a4c90 RCX: 00000000004592c9 [ 53.167449] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.174707] RBP: 000000000075bfc8 R08: 0000000100000300 R09: 0000000000000000 [ 53.181951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21c44a56d4 [ 53.189211] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 53.225880] FAULT_INJECTION: forcing a failure. [ 53.225880] name failslab, interval 1, probability 0, space 0, times 0 [ 53.239686] FAULT_INJECTION: forcing a failure. [ 53.239686] name failslab, interval 1, probability 0, space 0, times 0 [ 53.253148] CPU: 0 PID: 7258 Comm: syz-executor.2 Not tainted 4.19.125-syzkaller #0 [ 53.260952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.270300] Call Trace: [ 53.272871] dump_stack+0x123/0x177 [ 53.276481] should_fail.cold.4+0x5/0x13 [ 53.280519] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 53.285597] ? lock_downgrade+0x860/0x860 [ 53.289722] __should_failslab+0xba/0xf0 [ 53.293779] should_failslab+0x9/0x14 [ 53.297583] __kmalloc+0x2dd/0x770 [ 53.301104] ? tls_push_record+0xf3/0x1720 [ 53.305312] ? __sk_mem_schedule+0x5f/0xc0 [ 53.309522] tls_push_record+0xf3/0x1720 [ 53.313558] ? lockdep_hardirqs_on+0x421/0x5c0 [ 53.318118] ? alloc_encrypted_sg+0x81/0x100 [ 53.322501] tls_sw_sendpage+0x458/0xc00 [ 53.326542] ? tls_sw_sendmsg+0x1020/0x1020 [ 53.330840] ? pipe_lock+0x4f/0x60 [ 53.334361] inet_sendpage+0x122/0x600 [ 53.338239] ? kernel_sendpage+0xd0/0xd0 [ 53.342306] kernel_sendpage+0x60/0xd0 [ 53.346188] ? lock_downgrade+0x860/0x860 [ 53.350336] ? pipe_lock+0x4f/0x60 [ 53.353860] sock_sendpage+0x6d/0xd0 [ 53.357559] pipe_to_sendpage+0x212/0x430 [ 53.361686] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.366507] ? kasan_check_write+0x14/0x20 [ 53.370744] ? anon_pipe_buf_release+0x149/0x1f0 [ 53.375597] __splice_from_pipe+0x2cb/0x720 [ 53.379895] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.384714] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.389530] splice_from_pipe+0xbb/0x120 [ 53.393566] ? splice_shrink_spd+0xa0/0xa0 [ 53.397780] ? rw_verify_area+0xb8/0x2b0 [ 53.401816] generic_splice_sendpage+0x10/0x20 [ 53.406372] do_splice+0x4fd/0x12d0 [ 53.409977] ? ksys_dup3+0x2e0/0x2e0 [ 53.413666] ? opipe_prep.part.13+0x320/0x320 [ 53.418139] ? __fget_light+0x174/0x1e0 [ 53.422089] __x64_sys_splice+0x248/0x300 [ 53.426214] do_syscall_64+0xd0/0x4e0 [ 53.429993] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.435157] RIP: 0033:0x4592c9 [ 53.438327] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.457219] RSP: 002b:00007f09c60abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 53.464903] RAX: ffffffffffffffda RBX: 00007f09c60abc90 RCX: 00000000004592c9 [ 53.472148] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.479394] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 53.486641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09c60ac6d4 [ 53.493888] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 53.515258] CPU: 0 PID: 7259 Comm: syz-executor.0 Not tainted 4.19.125-syzkaller #0 [ 53.523077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.532429] Call Trace: [ 53.535110] dump_stack+0x123/0x177 [ 53.538740] should_fail.cold.4+0x5/0x13 [ 53.542802] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 53.547904] ? lock_downgrade+0x860/0x860 [ 53.552058] __should_failslab+0xba/0xf0 [ 53.556127] should_failslab+0x9/0x14 [ 53.559928] __kmalloc+0x2dd/0x770 [ 53.563467] ? tls_push_record+0xf3/0x1720 [ 53.567698] ? __sk_mem_schedule+0x5f/0xc0 [ 53.571933] tls_push_record+0xf3/0x1720 [ 53.575993] ? lockdep_hardirqs_on+0x421/0x5c0 [ 53.580583] ? alloc_encrypted_sg+0x81/0x100 [ 53.584990] tls_sw_sendpage+0x458/0xc00 [ 53.589053] ? tls_sw_sendmsg+0x1020/0x1020 [ 53.593375] ? pipe_lock+0x4f/0x60 [ 53.596916] inet_sendpage+0x122/0x600 [ 53.600807] ? kernel_sendpage+0xd0/0xd0 [ 53.604857] kernel_sendpage+0x60/0xd0 [ 53.608726] ? lock_downgrade+0x860/0x860 [ 53.612872] ? pipe_lock+0x4f/0x60 [ 53.616388] sock_sendpage+0x6d/0xd0 [ 53.620082] pipe_to_sendpage+0x212/0x430 [ 53.624206] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.629025] ? kasan_check_write+0x14/0x20 [ 53.633234] ? anon_pipe_buf_release+0x149/0x1f0 [ 53.637992] __splice_from_pipe+0x2cb/0x720 [ 53.642289] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.647109] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.651927] splice_from_pipe+0xbb/0x120 [ 53.655978] ? splice_shrink_spd+0xa0/0xa0 [ 53.660191] ? rw_verify_area+0xb8/0x2b0 [ 53.664227] generic_splice_sendpage+0x10/0x20 [ 53.668783] do_splice+0x4fd/0x12d0 [ 53.672387] ? ksys_dup3+0x2e0/0x2e0 [ 53.676078] ? opipe_prep.part.13+0x320/0x320 [ 53.680548] ? __fget_light+0x174/0x1e0 [ 53.684499] __x64_sys_splice+0x248/0x300 [ 53.688626] do_syscall_64+0xd0/0x4e0 [ 53.692436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.697599] RIP: 0033:0x4592c9 [ 53.700766] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.719654] RSP: 002b:00007f644a5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 53.727337] RAX: ffffffffffffffda RBX: 00007f644a5b3c90 RCX: 00000000004592c9 [ 53.734583] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 53.741827] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 53.749160] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f644a5b46d4 [ 53.756430] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 53.765924] FAULT_INJECTION: forcing a failure. [ 53.765924] name failslab, interval 1, probability 0, space 0, times 0 [ 53.783075] FAULT_INJECTION: forcing a failure. [ 53.783075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.796051] FAULT_INJECTION: forcing a failure. [ 53.796051] name failslab, interval 1, probability 0, space 0, times 0 [ 53.797493] CPU: 0 PID: 7280 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 53.815043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.824381] Call Trace: [ 53.826951] dump_stack+0x123/0x177 [ 53.830587] should_fail.cold.4+0x5/0x13 [ 53.834631] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 53.839711] ? lock_downgrade+0x860/0x860 [ 53.843841] __should_failslab+0xba/0xf0 [ 53.847887] should_failslab+0x9/0x14 [ 53.851668] kmem_cache_alloc_node+0x26b/0x730 [ 53.856232] __alloc_skb+0xa7/0x580 [ 53.859845] ? skb_scrub_packet+0x3c0/0x3c0 [ 53.864150] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 53.869677] ? finish_task_switch+0x14a/0x720 [ 53.874154] ? finish_task_switch+0x11c/0x720 [ 53.878631] sk_stream_alloc_skb+0x9e/0x810 [ 53.882937] ? tcp_send_mss+0x1d/0x220 [ 53.886807] do_tcp_sendpages+0x772/0x1e10 [ 53.891022] ? __lock_is_held+0xb5/0x140 [ 53.895074] ? sk_stream_alloc_skb+0x810/0x810 [ 53.899639] ? __local_bh_enable_ip+0x160/0x260 [ 53.904288] ? lock_sock_nested+0xc5/0x100 [ 53.908692] ? lockdep_hardirqs_on+0x421/0x5c0 [ 53.913267] ? __local_bh_enable_ip+0x160/0x260 [ 53.917915] ? kasan_check_read+0x11/0x20 [ 53.922041] tcp_sendpage_locked+0x63/0xa0 [ 53.926269] tcp_sendpage+0x37/0x50 [ 53.929877] inet_sendpage+0x122/0x600 [ 53.933742] ? kernel_sendpage+0xd0/0xd0 [ 53.937781] kernel_sendpage+0x60/0xd0 [ 53.941646] ? lock_downgrade+0x860/0x860 [ 53.945772] ? pipe_lock+0x4f/0x60 [ 53.949289] sock_sendpage+0x6d/0xd0 [ 53.952999] pipe_to_sendpage+0x212/0x430 [ 53.957126] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.961965] __splice_from_pipe+0x2cb/0x720 [ 53.966270] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.971096] ? generic_pipe_buf_nosteal+0x10/0x10 [ 53.975915] splice_from_pipe+0xbb/0x120 [ 53.979973] ? splice_shrink_spd+0xa0/0xa0 [ 53.984189] ? rw_verify_area+0xb8/0x2b0 [ 53.988227] generic_splice_sendpage+0x10/0x20 [ 53.992787] do_splice+0x4fd/0x12d0 [ 53.996409] ? ksys_dup3+0x2e0/0x2e0 [ 54.000101] ? opipe_prep.part.13+0x320/0x320 [ 54.004578] ? __fget_light+0x174/0x1e0 [ 54.008531] __x64_sys_splice+0x248/0x300 [ 54.012660] do_syscall_64+0xd0/0x4e0 [ 54.016456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.021623] RIP: 0033:0x4592c9 [ 54.024811] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.043696] RSP: 002b:00007ff9bb254c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 54.051383] RAX: ffffffffffffffda RBX: 00007ff9bb254c90 RCX: 00000000004592c9 [ 54.058650] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 54.065900] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 54.073168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2556d4 [ 54.080416] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 54.087678] CPU: 1 PID: 7277 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 [ 54.095476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.104834] Call Trace: [ 54.107418] dump_stack+0x123/0x177 [ 54.111047] should_fail.cold.4+0x5/0x13 [ 54.115109] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 54.120209] ? lock_downgrade+0x860/0x860 [ 54.124353] __should_failslab+0xba/0xf0 [ 54.128395] should_failslab+0x9/0x14 [ 54.132175] kmem_cache_alloc_node+0x26b/0x730 [ 54.136739] __alloc_skb+0xa7/0x580 [ 54.140343] ? skb_scrub_packet+0x3c0/0x3c0 [ 54.144657] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 54.150178] ? finish_task_switch+0x14a/0x720 [ 54.154662] ? finish_task_switch+0x11c/0x720 [ 54.159157] sk_stream_alloc_skb+0x9e/0x810 [ 54.163469] ? tcp_send_mss+0x1d/0x220 [ 54.167347] do_tcp_sendpages+0x772/0x1e10 [ 54.171575] ? __lock_is_held+0xb5/0x140 [ 54.175638] ? sk_stream_alloc_skb+0x810/0x810 [ 54.180220] ? __local_bh_enable_ip+0x160/0x260 [ 54.184867] ? lock_sock_nested+0xc5/0x100 [ 54.189077] ? lockdep_hardirqs_on+0x421/0x5c0 [ 54.193633] ? __local_bh_enable_ip+0x160/0x260 [ 54.198277] ? kasan_check_read+0x11/0x20 [ 54.202403] tcp_sendpage_locked+0x63/0xa0 [ 54.206613] tcp_sendpage+0x37/0x50 [ 54.210221] inet_sendpage+0x122/0x600 [ 54.214088] ? kernel_sendpage+0xd0/0xd0 [ 54.218121] kernel_sendpage+0x60/0xd0 [ 54.221987] ? lock_downgrade+0x860/0x860 [ 54.226112] ? pipe_lock+0x4f/0x60 [ 54.229625] sock_sendpage+0x6d/0xd0 [ 54.233333] pipe_to_sendpage+0x212/0x430 [ 54.237456] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.242277] __splice_from_pipe+0x2cb/0x720 [ 54.246572] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.251391] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.256206] splice_from_pipe+0xbb/0x120 [ 54.260250] ? splice_shrink_spd+0xa0/0xa0 [ 54.264481] ? rw_verify_area+0xb8/0x2b0 [ 54.268517] generic_splice_sendpage+0x10/0x20 [ 54.273072] do_splice+0x4fd/0x12d0 [ 54.276681] ? ksys_dup3+0x2e0/0x2e0 [ 54.280385] ? opipe_prep.part.13+0x320/0x320 [ 54.284858] ? __fget_light+0x174/0x1e0 [ 54.288808] __x64_sys_splice+0x248/0x300 [ 54.292941] do_syscall_64+0xd0/0x4e0 [ 54.296722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.301887] RIP: 0033:0x4592c9 [ 54.305055] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.323938] RSP: 002b:00007f3694d7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 54.331618] RAX: ffffffffffffffda RBX: 00007f3694d7ac90 RCX: 00000000004592c9 [ 54.338863] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 54.346107] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 54.353367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694d7b6d4 [ 54.360612] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 54.383752] CPU: 0 PID: 7267 Comm: syz-executor.4 Not tainted 4.19.125-syzkaller #0 [ 54.391588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.400939] Call Trace: [ 54.403508] dump_stack+0x123/0x177 [ 54.407115] should_fail.cold.4+0x5/0x13 [ 54.411154] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 54.416235] ? __lock_acquire+0x792/0x4980 [ 54.420465] __alloc_pages_nodemask+0x1d5/0x710 [ 54.425112] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 54.430120] ? __lock_acquire+0x792/0x4980 [ 54.434332] alloc_pages_current+0xd6/0x1b0 [ 54.438631] skb_page_frag_refill+0x20b/0x400 [ 54.443102] sk_page_frag_refill+0x46/0x1b0 [ 54.447399] sk_alloc_sg+0x108/0x760 [ 54.451089] ? lockdep_hardirqs_on+0x421/0x5c0 [ 54.455661] ? lock_sock_nested+0x82/0x100 [ 54.459873] alloc_encrypted_sg+0x81/0x100 [ 54.464099] tls_sw_sendpage+0x4f8/0xc00 [ 54.468141] ? tls_sw_sendmsg+0x1020/0x1020 [ 54.472440] ? pipe_lock+0x4f/0x60 [ 54.475960] inet_sendpage+0x122/0x600 [ 54.479826] ? kernel_sendpage+0xd0/0xd0 [ 54.483879] kernel_sendpage+0x60/0xd0 [ 54.487757] ? lock_downgrade+0x860/0x860 [ 54.491881] ? pipe_lock+0x4f/0x60 [ 54.495397] sock_sendpage+0x6d/0xd0 [ 54.499088] pipe_to_sendpage+0x212/0x430 [ 54.503226] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.508067] __splice_from_pipe+0x2cb/0x720 [ 54.512402] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.517232] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.522143] splice_from_pipe+0xbb/0x120 [ 54.526180] ? splice_shrink_spd+0xa0/0xa0 [ 54.530396] ? rw_verify_area+0xb8/0x2b0 [ 54.534449] generic_splice_sendpage+0x10/0x20 [ 54.539007] do_splice+0x4fd/0x12d0 [ 54.542623] ? ksys_dup3+0x2e0/0x2e0 [ 54.546316] ? opipe_prep.part.13+0x320/0x320 [ 54.550795] ? __fget_light+0x174/0x1e0 [ 54.554755] __x64_sys_splice+0x248/0x300 [ 54.558881] do_syscall_64+0xd0/0x4e0 [ 54.562658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.567829] RIP: 0033:0x4592c9 [ 54.570997] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.589879] RSP: 002b:00007f780c8c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 54.597561] RAX: ffffffffffffffda RBX: 00007f780c8c1c90 RCX: 00000000004592c9 [ 54.604808] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 54.612052] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 54.619299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f780c8c26d4 [ 54.626544] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 2020/05/30 07:26:16 executed programs: 30 [ 54.638538] FAULT_INJECTION: forcing a failure. [ 54.638538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 54.659388] FAULT_INJECTION: forcing a failure. [ 54.659388] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 54.680419] FAULT_INJECTION: forcing a failure. [ 54.680419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 54.698993] FAULT_INJECTION: forcing a failure. [ 54.698993] name failslab, interval 1, probability 0, space 0, times 0 [ 54.713714] FAULT_INJECTION: forcing a failure. [ 54.713714] name failslab, interval 1, probability 0, space 0, times 0 [ 54.713862] CPU: 1 PID: 7286 Comm: syz-executor.0 Not tainted 4.19.125-syzkaller #0 [ 54.732704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.742056] Call Trace: [ 54.744640] dump_stack+0x123/0x177 [ 54.748353] should_fail.cold.4+0x5/0x13 [ 54.752410] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 54.757507] ? __lock_acquire+0x792/0x4980 [ 54.761739] __alloc_pages_nodemask+0x1d5/0x710 [ 54.766406] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 54.771447] ? __lock_acquire+0x792/0x4980 [ 54.775700] alloc_pages_current+0xd6/0x1b0 [ 54.780014] skb_page_frag_refill+0x20b/0x400 [ 54.784501] sk_page_frag_refill+0x46/0x1b0 [ 54.788835] sk_alloc_sg+0x108/0x760 [ 54.792542] ? lockdep_hardirqs_on+0x421/0x5c0 [ 54.797140] ? lock_sock_nested+0x82/0x100 [ 54.801387] alloc_encrypted_sg+0x81/0x100 [ 54.805607] tls_sw_sendpage+0x4f8/0xc00 [ 54.809666] ? tls_sw_sendmsg+0x1020/0x1020 [ 54.813980] ? pipe_lock+0x4f/0x60 [ 54.817515] inet_sendpage+0x122/0x600 [ 54.821399] ? kernel_sendpage+0xd0/0xd0 [ 54.825444] kernel_sendpage+0x60/0xd0 [ 54.829313] ? lock_downgrade+0x860/0x860 [ 54.833465] ? pipe_lock+0x4f/0x60 [ 54.836985] sock_sendpage+0x6d/0xd0 [ 54.843025] pipe_to_sendpage+0x212/0x430 [ 54.847177] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.852025] __splice_from_pipe+0x2cb/0x720 [ 54.856428] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.861261] ? generic_pipe_buf_nosteal+0x10/0x10 [ 54.866093] splice_from_pipe+0xbb/0x120 [ 54.870135] ? splice_shrink_spd+0xa0/0xa0 [ 54.874353] ? rw_verify_area+0xb8/0x2b0 [ 54.878393] generic_splice_sendpage+0x10/0x20 [ 54.882952] do_splice+0x4fd/0x12d0 [ 54.886574] ? ksys_dup3+0x2e0/0x2e0 [ 54.890278] ? opipe_prep.part.13+0x320/0x320 [ 54.894757] ? __fget_light+0x174/0x1e0 [ 54.898720] __x64_sys_splice+0x248/0x300 [ 54.902847] do_syscall_64+0xd0/0x4e0 [ 54.906644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 54.911813] RIP: 0033:0x4592c9 [ 54.915000] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 54.933900] RSP: 002b:00007f644a5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 54.941586] RAX: ffffffffffffffda RBX: 00007f644a5b3c90 RCX: 00000000004592c9 [ 54.948834] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 54.956085] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 54.963349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f644a5b46d4 [ 54.970797] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 54.978078] CPU: 0 PID: 7287 Comm: syz-executor.2 Not tainted 4.19.125-syzkaller #0 [ 54.985872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.995221] Call Trace: [ 54.997803] dump_stack+0x123/0x177 [ 55.001414] should_fail.cold.4+0x5/0x13 [ 55.005453] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 55.010536] ? __lock_acquire+0x792/0x4980 [ 55.014754] __alloc_pages_nodemask+0x1d5/0x710 [ 55.019401] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 55.024397] ? __lock_acquire+0x792/0x4980 [ 55.028624] alloc_pages_current+0xd6/0x1b0 [ 55.032927] skb_page_frag_refill+0x20b/0x400 [ 55.037400] sk_page_frag_refill+0x46/0x1b0 [ 55.041702] sk_alloc_sg+0x108/0x760 [ 55.045392] ? lockdep_hardirqs_on+0x421/0x5c0 [ 55.049954] ? lock_sock_nested+0x82/0x100 [ 55.054171] alloc_encrypted_sg+0x81/0x100 [ 55.058400] tls_sw_sendpage+0x4f8/0xc00 [ 55.062444] ? tls_sw_sendmsg+0x1020/0x1020 [ 55.066756] ? pipe_lock+0x4f/0x60 [ 55.070280] inet_sendpage+0x122/0x600 [ 55.074145] ? kernel_sendpage+0xd0/0xd0 [ 55.078182] kernel_sendpage+0x60/0xd0 [ 55.082044] ? lock_downgrade+0x860/0x860 [ 55.086171] ? pipe_lock+0x4f/0x60 [ 55.089702] sock_sendpage+0x6d/0xd0 [ 55.093396] pipe_to_sendpage+0x212/0x430 [ 55.097528] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.102357] __splice_from_pipe+0x2cb/0x720 [ 55.106656] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.111480] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.116305] splice_from_pipe+0xbb/0x120 [ 55.120344] ? splice_shrink_spd+0xa0/0xa0 [ 55.124557] ? rw_verify_area+0xb8/0x2b0 [ 55.128596] generic_splice_sendpage+0x10/0x20 [ 55.133154] do_splice+0x4fd/0x12d0 [ 55.136762] ? ksys_dup3+0x2e0/0x2e0 [ 55.140454] ? opipe_prep.part.13+0x320/0x320 [ 55.144956] ? __fget_light+0x174/0x1e0 [ 55.148911] __x64_sys_splice+0x248/0x300 [ 55.153039] do_syscall_64+0xd0/0x4e0 [ 55.156818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.162013] RIP: 0033:0x4592c9 [ 55.165183] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.184071] RSP: 002b:00007f09c60abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.191764] RAX: ffffffffffffffda RBX: 00007f09c60abc90 RCX: 00000000004592c9 [ 55.199029] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.206277] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 55.213539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09c60ac6d4 [ 55.220803] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 55.228081] CPU: 1 PID: 7284 Comm: syz-executor.3 Not tainted 4.19.125-syzkaller #0 [ 55.235878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.245228] Call Trace: [ 55.247816] dump_stack+0x123/0x177 [ 55.251443] should_fail.cold.4+0x5/0x13 [ 55.255503] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 55.260603] ? __lock_acquire+0x792/0x4980 [ 55.264830] __alloc_pages_nodemask+0x1d5/0x710 [ 55.269922] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 55.274932] ? __lock_acquire+0x792/0x4980 [ 55.279165] alloc_pages_current+0xd6/0x1b0 [ 55.283486] skb_page_frag_refill+0x20b/0x400 [ 55.293912] sk_page_frag_refill+0x46/0x1b0 [ 55.298240] sk_alloc_sg+0x108/0x760 [ 55.301955] ? lockdep_hardirqs_on+0x421/0x5c0 [ 55.306542] ? lock_sock_nested+0x82/0x100 [ 55.310788] alloc_encrypted_sg+0x81/0x100 [ 55.315021] tls_sw_sendpage+0x4f8/0xc00 [ 55.319078] ? tls_sw_sendmsg+0x1020/0x1020 [ 55.323393] ? pipe_lock+0x4f/0x60 [ 55.326935] inet_sendpage+0x122/0x600 [ 55.330819] ? kernel_sendpage+0xd0/0xd0 [ 55.335111] kernel_sendpage+0x60/0xd0 [ 55.338999] ? lock_downgrade+0x860/0x860 [ 55.343155] ? pipe_lock+0x4f/0x60 [ 55.346691] sock_sendpage+0x6d/0xd0 [ 55.350408] pipe_to_sendpage+0x212/0x430 [ 55.354548] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.359387] __splice_from_pipe+0x2cb/0x720 [ 55.363700] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.368532] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.373362] splice_from_pipe+0xbb/0x120 [ 55.377409] ? splice_shrink_spd+0xa0/0xa0 [ 55.381635] ? rw_verify_area+0xb8/0x2b0 [ 55.385679] generic_splice_sendpage+0x10/0x20 [ 55.390239] do_splice+0x4fd/0x12d0 [ 55.393868] ? ksys_dup3+0x2e0/0x2e0 [ 55.397560] ? opipe_prep.part.13+0x320/0x320 [ 55.402032] ? __fget_light+0x174/0x1e0 [ 55.406014] __x64_sys_splice+0x248/0x300 [ 55.410144] do_syscall_64+0xd0/0x4e0 [ 55.413922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.419099] RIP: 0033:0x4592c9 [ 55.422271] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.441161] RSP: 002b:00007f21c44c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.448872] RAX: ffffffffffffffda RBX: 00007f21c44c5c90 RCX: 00000000004592c9 [ 55.456118] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.463381] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 55.470630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21c44c66d4 [ 55.477876] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 55.493853] CPU: 0 PID: 7295 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 55.501789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.511139] Call Trace: [ 55.513723] dump_stack+0x123/0x177 [ 55.517341] should_fail.cold.4+0x5/0x13 [ 55.521407] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 55.526490] ? lock_downgrade+0x860/0x860 [ 55.530724] __should_failslab+0xba/0xf0 [ 55.534784] should_failslab+0x9/0x14 [ 55.538562] __kmalloc+0x2dd/0x770 [ 55.542089] ? tls_push_record+0xf3/0x1720 [ 55.546305] ? __sk_mem_schedule+0x5f/0xc0 [ 55.550548] tls_push_record+0xf3/0x1720 [ 55.554601] ? lockdep_hardirqs_on+0x421/0x5c0 [ 55.559176] ? alloc_encrypted_sg+0x81/0x100 [ 55.563636] tls_sw_sendpage+0x458/0xc00 [ 55.567683] ? tls_sw_sendmsg+0x1020/0x1020 [ 55.571983] ? pipe_lock+0x4f/0x60 [ 55.575505] inet_sendpage+0x122/0x600 [ 55.579370] ? kernel_sendpage+0xd0/0xd0 [ 55.583405] kernel_sendpage+0x60/0xd0 [ 55.587272] ? lock_downgrade+0x860/0x860 [ 55.591406] ? pipe_lock+0x4f/0x60 [ 55.594933] sock_sendpage+0x6d/0xd0 [ 55.598627] pipe_to_sendpage+0x212/0x430 [ 55.602755] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.607579] ? kasan_check_write+0x14/0x20 [ 55.611804] ? anon_pipe_buf_release+0x149/0x1f0 [ 55.616540] __splice_from_pipe+0x2cb/0x720 [ 55.620838] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.625660] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.630495] splice_from_pipe+0xbb/0x120 [ 55.634531] ? splice_shrink_spd+0xa0/0xa0 [ 55.638755] ? rw_verify_area+0xb8/0x2b0 [ 55.642817] generic_splice_sendpage+0x10/0x20 [ 55.647374] do_splice+0x4fd/0x12d0 [ 55.650981] ? ksys_dup3+0x2e0/0x2e0 [ 55.654674] ? opipe_prep.part.13+0x320/0x320 [ 55.659146] ? __fget_light+0x174/0x1e0 [ 55.663099] __x64_sys_splice+0x248/0x300 [ 55.667246] do_syscall_64+0xd0/0x4e0 [ 55.671046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.676238] RIP: 0033:0x4592c9 [ 55.679406] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.698284] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.705967] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 55.713215] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.720553] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 55.727807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 55.735059] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 55.742325] CPU: 1 PID: 7298 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 [ 55.750125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.759487] Call Trace: [ 55.762074] dump_stack+0x123/0x177 [ 55.765699] should_fail.cold.4+0x5/0x13 [ 55.769766] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 55.774865] ? lock_downgrade+0x860/0x860 [ 55.779024] __should_failslab+0xba/0xf0 [ 55.783086] should_failslab+0x9/0x14 [ 55.786874] __kmalloc+0x2dd/0x770 [ 55.790397] ? tls_push_record+0xf3/0x1720 [ 55.794607] ? __sk_mem_schedule+0x5f/0xc0 [ 55.798817] tls_push_record+0xf3/0x1720 [ 55.802855] ? lockdep_hardirqs_on+0x421/0x5c0 [ 55.807414] ? alloc_encrypted_sg+0x81/0x100 [ 55.811801] tls_sw_sendpage+0x458/0xc00 [ 55.815857] ? tls_sw_sendmsg+0x1020/0x1020 [ 55.820156] ? pipe_lock+0x4f/0x60 [ 55.823674] inet_sendpage+0x122/0x600 [ 55.827538] ? kernel_sendpage+0xd0/0xd0 [ 55.831575] kernel_sendpage+0x60/0xd0 [ 55.835437] ? lock_downgrade+0x860/0x860 [ 55.839560] ? pipe_lock+0x4f/0x60 [ 55.843074] sock_sendpage+0x6d/0xd0 [ 55.846772] pipe_to_sendpage+0x212/0x430 [ 55.850911] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.855733] ? kasan_check_write+0x14/0x20 [ 55.859941] ? anon_pipe_buf_release+0x149/0x1f0 [ 55.864673] __splice_from_pipe+0x2cb/0x720 [ 55.868972] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.873796] ? generic_pipe_buf_nosteal+0x10/0x10 [ 55.878614] splice_from_pipe+0xbb/0x120 [ 55.882663] ? splice_shrink_spd+0xa0/0xa0 [ 55.886876] ? rw_verify_area+0xb8/0x2b0 [ 55.890913] generic_splice_sendpage+0x10/0x20 [ 55.895493] do_splice+0x4fd/0x12d0 [ 55.899096] ? ksys_dup3+0x2e0/0x2e0 [ 55.902789] ? opipe_prep.part.13+0x320/0x320 [ 55.907260] ? __fget_light+0x174/0x1e0 [ 55.911227] __x64_sys_splice+0x248/0x300 [ 55.915356] do_syscall_64+0xd0/0x4e0 [ 55.919135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.924299] RIP: 0033:0x4592c9 [ 55.927468] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 55.946363] RSP: 002b:00007f3694dddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.954064] RAX: ffffffffffffffda RBX: 00007f3694dddc90 RCX: 00000000004592c9 [ 55.961309] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.968570] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 55.975902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694dde6d4 [ 55.983147] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 55.996509] FAULT_INJECTION: forcing a failure. [ 55.996509] name failslab, interval 1, probability 0, space 0, times 0 [ 56.009315] CPU: 1 PID: 7314 Comm: syz-executor.0 Not tainted 4.19.125-syzkaller #0 [ 56.017122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.026474] Call Trace: [ 56.029059] dump_stack+0x123/0x177 [ 56.032686] should_fail.cold.4+0x5/0x13 [ 56.036748] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 56.041847] ? lock_downgrade+0x860/0x860 [ 56.046002] __should_failslab+0xba/0xf0 [ 56.050063] should_failslab+0x9/0x14 [ 56.053907] kmem_cache_alloc_node+0x26b/0x730 [ 56.058492] __alloc_skb+0xa7/0x580 [ 56.062100] ? skb_scrub_packet+0x3c0/0x3c0 [ 56.066398] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 56.071910] ? finish_task_switch+0x14a/0x720 [ 56.076378] ? finish_task_switch+0x11c/0x720 [ 56.080857] sk_stream_alloc_skb+0x9e/0x810 [ 56.085171] ? tcp_send_mss+0x1d/0x220 [ 56.089033] do_tcp_sendpages+0x772/0x1e10 [ 56.093260] ? __lock_is_held+0xb5/0x140 [ 56.097300] ? sk_stream_alloc_skb+0x810/0x810 [ 56.101872] ? __local_bh_enable_ip+0x160/0x260 [ 56.106516] ? lock_sock_nested+0xc5/0x100 [ 56.110741] ? lockdep_hardirqs_on+0x421/0x5c0 [ 56.115297] ? __local_bh_enable_ip+0x160/0x260 [ 56.119957] ? kasan_check_read+0x11/0x20 [ 56.124083] tcp_sendpage_locked+0x63/0xa0 [ 56.128295] tcp_sendpage+0x37/0x50 [ 56.131899] inet_sendpage+0x122/0x600 [ 56.135765] ? kernel_sendpage+0xd0/0xd0 [ 56.139801] kernel_sendpage+0x60/0xd0 [ 56.143665] ? lock_downgrade+0x860/0x860 [ 56.147808] ? pipe_lock+0x4f/0x60 [ 56.151341] sock_sendpage+0x6d/0xd0 [ 56.155032] pipe_to_sendpage+0x212/0x430 [ 56.159158] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.163981] __splice_from_pipe+0x2cb/0x720 [ 56.168276] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.173097] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.177921] splice_from_pipe+0xbb/0x120 [ 56.181958] ? splice_shrink_spd+0xa0/0xa0 [ 56.186195] ? rw_verify_area+0xb8/0x2b0 [ 56.190242] generic_splice_sendpage+0x10/0x20 [ 56.194800] do_splice+0x4fd/0x12d0 [ 56.198409] ? ksys_dup3+0x2e0/0x2e0 [ 56.202118] ? opipe_prep.part.13+0x320/0x320 [ 56.206608] ? __fget_light+0x174/0x1e0 [ 56.210561] __x64_sys_splice+0x248/0x300 [ 56.214706] do_syscall_64+0xd0/0x4e0 [ 56.218484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.223666] RIP: 0033:0x4592c9 [ 56.226836] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.245731] RSP: 002b:00007f644a550c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 56.253414] RAX: ffffffffffffffda RBX: 00007f644a550c90 RCX: 00000000004592c9 [ 56.260662] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 56.267911] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 56.275157] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f644a5516d4 [ 56.282415] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 56.315631] FAULT_INJECTION: forcing a failure. [ 56.315631] name failslab, interval 1, probability 0, space 0, times 0 [ 56.328113] FAULT_INJECTION: forcing a failure. [ 56.328113] name failslab, interval 1, probability 0, space 0, times 0 [ 56.344017] FAULT_INJECTION: forcing a failure. [ 56.344017] name failslab, interval 1, probability 0, space 0, times 0 [ 56.352032] FAULT_INJECTION: forcing a failure. [ 56.352032] name failslab, interval 1, probability 0, space 0, times 0 [ 56.372833] CPU: 1 PID: 7325 Comm: syz-executor.4 Not tainted 4.19.125-syzkaller #0 [ 56.380648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.390001] Call Trace: [ 56.392586] dump_stack+0x123/0x177 [ 56.396214] should_fail.cold.4+0x5/0x13 [ 56.400273] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 56.405385] ? lock_downgrade+0x860/0x860 [ 56.409536] __should_failslab+0xba/0xf0 [ 56.413597] should_failslab+0x9/0x14 [ 56.417385] __kmalloc+0x2dd/0x770 [ 56.420958] ? tls_push_record+0xf3/0x1720 [ 56.425184] ? __sk_mem_schedule+0x5f/0xc0 [ 56.429415] tls_push_record+0xf3/0x1720 [ 56.433477] ? lockdep_hardirqs_on+0x421/0x5c0 [ 56.438061] ? alloc_encrypted_sg+0x81/0x100 [ 56.442467] tls_sw_sendpage+0x458/0xc00 [ 56.446533] ? tls_sw_sendmsg+0x1020/0x1020 [ 56.450855] ? pipe_lock+0x4f/0x60 [ 56.454403] inet_sendpage+0x122/0x600 [ 56.458286] ? kernel_sendpage+0xd0/0xd0 [ 56.462344] kernel_sendpage+0x60/0xd0 [ 56.466228] ? lock_downgrade+0x860/0x860 [ 56.470369] ? pipe_lock+0x4f/0x60 [ 56.473907] sock_sendpage+0x6d/0xd0 [ 56.477616] pipe_to_sendpage+0x212/0x430 [ 56.481756] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.486591] ? kasan_check_write+0x14/0x20 [ 56.490857] ? anon_pipe_buf_release+0x149/0x1f0 [ 56.495605] __splice_from_pipe+0x2cb/0x720 [ 56.499923] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.504757] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.509590] splice_from_pipe+0xbb/0x120 [ 56.513658] ? splice_shrink_spd+0xa0/0xa0 [ 56.517878] ? rw_verify_area+0xb8/0x2b0 [ 56.521925] generic_splice_sendpage+0x10/0x20 [ 56.526490] do_splice+0x4fd/0x12d0 [ 56.530102] ? ksys_dup3+0x2e0/0x2e0 [ 56.533840] ? opipe_prep.part.13+0x320/0x320 [ 56.538328] ? __fget_light+0x174/0x1e0 [ 56.542293] __x64_sys_splice+0x248/0x300 [ 56.546435] do_syscall_64+0xd0/0x4e0 [ 56.550227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.555419] RIP: 0033:0x4592c9 [ 56.558594] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.559639] FAULT_INJECTION: forcing a failure. [ 56.559639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.577485] RSP: 002b:00007f780c8c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 56.577492] RAX: ffffffffffffffda RBX: 00007f780c8c1c90 RCX: 00000000004592c9 [ 56.577495] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 56.577498] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 56.577501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f780c8c26d4 [ 56.577503] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 56.582393] CPU: 1 PID: 7326 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 56.641171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.650534] Call Trace: [ 56.653118] dump_stack+0x123/0x177 [ 56.656734] should_fail.cold.4+0x5/0x13 [ 56.660792] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 56.665876] ? lock_downgrade+0x860/0x860 [ 56.670027] __should_failslab+0xba/0xf0 [ 56.674087] should_failslab+0x9/0x14 [ 56.677872] __kmalloc+0x2dd/0x770 [ 56.681412] ? tls_push_record+0xf3/0x1720 [ 56.685627] ? __sk_mem_schedule+0x5f/0xc0 [ 56.689866] tls_push_record+0xf3/0x1720 [ 56.693917] ? lockdep_hardirqs_on+0x421/0x5c0 [ 56.698490] ? alloc_encrypted_sg+0x81/0x100 [ 56.702885] tls_sw_sendpage+0x458/0xc00 [ 56.706939] ? tls_sw_sendmsg+0x1020/0x1020 [ 56.711241] ? pipe_lock+0x4f/0x60 [ 56.714765] inet_sendpage+0x122/0x600 [ 56.718644] ? kernel_sendpage+0xd0/0xd0 [ 56.722700] kernel_sendpage+0x60/0xd0 [ 56.726574] ? lock_downgrade+0x860/0x860 [ 56.730699] ? pipe_lock+0x4f/0x60 [ 56.734223] sock_sendpage+0x6d/0xd0 [ 56.737922] pipe_to_sendpage+0x212/0x430 [ 56.742047] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.746873] ? kasan_check_write+0x14/0x20 [ 56.751111] ? anon_pipe_buf_release+0x149/0x1f0 [ 56.755846] __splice_from_pipe+0x2cb/0x720 [ 56.760152] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.764978] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.769801] splice_from_pipe+0xbb/0x120 [ 56.773848] ? splice_shrink_spd+0xa0/0xa0 [ 56.778064] ? rw_verify_area+0xb8/0x2b0 [ 56.782109] generic_splice_sendpage+0x10/0x20 [ 56.786670] do_splice+0x4fd/0x12d0 [ 56.790279] ? ksys_dup3+0x2e0/0x2e0 [ 56.793971] ? opipe_prep.part.13+0x320/0x320 [ 56.798449] ? __fget_light+0x174/0x1e0 [ 56.802414] __x64_sys_splice+0x248/0x300 [ 56.806552] do_syscall_64+0xd0/0x4e0 [ 56.810346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.815537] RIP: 0033:0x4592c9 [ 56.818711] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 56.837602] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 56.845299] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 56.852565] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 56.859818] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 56.867073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 56.874345] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 56.881611] CPU: 0 PID: 7324 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 [ 56.889406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.898741] Call Trace: [ 56.901310] dump_stack+0x123/0x177 [ 56.904919] should_fail.cold.4+0x5/0x13 [ 56.908965] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 56.914060] ? lock_downgrade+0x860/0x860 [ 56.918216] __should_failslab+0xba/0xf0 [ 56.922269] should_failslab+0x9/0x14 [ 56.926059] __kmalloc+0x2dd/0x770 [ 56.929583] ? tls_push_record+0xf3/0x1720 [ 56.933805] ? __sk_mem_schedule+0x5f/0xc0 [ 56.938037] tls_push_record+0xf3/0x1720 [ 56.942094] ? lockdep_hardirqs_on+0x421/0x5c0 [ 56.946663] ? alloc_encrypted_sg+0x81/0x100 [ 56.951075] tls_sw_sendpage+0x458/0xc00 [ 56.955120] ? tls_sw_sendmsg+0x1020/0x1020 [ 56.959429] ? pipe_lock+0x4f/0x60 [ 56.962952] inet_sendpage+0x122/0x600 [ 56.966819] ? kernel_sendpage+0xd0/0xd0 [ 56.970873] kernel_sendpage+0x60/0xd0 [ 56.974740] ? lock_downgrade+0x860/0x860 [ 56.978864] ? pipe_lock+0x4f/0x60 [ 56.982382] sock_sendpage+0x6d/0xd0 [ 56.986076] pipe_to_sendpage+0x212/0x430 [ 56.990203] ? generic_pipe_buf_nosteal+0x10/0x10 [ 56.995025] ? kasan_check_write+0x14/0x20 [ 56.999251] ? anon_pipe_buf_release+0x149/0x1f0 [ 57.003987] __splice_from_pipe+0x2cb/0x720 [ 57.008292] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.013129] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.017950] splice_from_pipe+0xbb/0x120 [ 57.021991] ? splice_shrink_spd+0xa0/0xa0 [ 57.026206] ? rw_verify_area+0xb8/0x2b0 [ 57.030246] generic_splice_sendpage+0x10/0x20 [ 57.034808] do_splice+0x4fd/0x12d0 [ 57.038421] ? ksys_dup3+0x2e0/0x2e0 [ 57.042111] ? opipe_prep.part.13+0x320/0x320 [ 57.046597] ? __fget_light+0x174/0x1e0 [ 57.050551] __x64_sys_splice+0x248/0x300 [ 57.054682] do_syscall_64+0xd0/0x4e0 [ 57.058460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.063637] RIP: 0033:0x4592c9 [ 57.066823] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.085704] RSP: 002b:00007f3694dddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.093388] RAX: ffffffffffffffda RBX: 00007f3694dddc90 RCX: 00000000004592c9 [ 57.100658] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.107913] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 57.115164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694dde6d4 [ 57.122411] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 57.129673] CPU: 1 PID: 7330 Comm: syz-executor.0 Not tainted 4.19.125-syzkaller #0 [ 57.137498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.146848] Call Trace: [ 57.149433] dump_stack+0x123/0x177 [ 57.153059] should_fail.cold.4+0x5/0x13 [ 57.157119] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 57.162220] ? lock_downgrade+0x860/0x860 [ 57.166371] __should_failslab+0xba/0xf0 [ 57.170429] should_failslab+0x9/0x14 [ 57.174220] __kmalloc+0x2dd/0x770 [ 57.177758] ? tls_push_record+0xf3/0x1720 [ 57.181986] ? __sk_mem_schedule+0x5f/0xc0 [ 57.186236] tls_push_record+0xf3/0x1720 [ 57.190287] ? lockdep_hardirqs_on+0x421/0x5c0 [ 57.194868] ? alloc_encrypted_sg+0x81/0x100 [ 57.199293] tls_sw_sendpage+0x458/0xc00 [ 57.203358] ? tls_sw_sendmsg+0x1020/0x1020 [ 57.207712] ? pipe_lock+0x4f/0x60 [ 57.211246] inet_sendpage+0x122/0x600 [ 57.215136] ? kernel_sendpage+0xd0/0xd0 [ 57.219190] kernel_sendpage+0x60/0xd0 [ 57.223099] ? lock_downgrade+0x860/0x860 [ 57.227241] ? pipe_lock+0x4f/0x60 [ 57.230778] sock_sendpage+0x6d/0xd0 [ 57.234520] pipe_to_sendpage+0x212/0x430 [ 57.238667] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.243504] ? kasan_check_write+0x14/0x20 [ 57.247743] ? anon_pipe_buf_release+0x149/0x1f0 [ 57.253717] __splice_from_pipe+0x2cb/0x720 [ 57.258040] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.262882] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.267716] splice_from_pipe+0xbb/0x120 [ 57.271769] ? splice_shrink_spd+0xa0/0xa0 [ 57.276002] ? rw_verify_area+0xb8/0x2b0 [ 57.280072] generic_splice_sendpage+0x10/0x20 [ 57.284652] do_splice+0x4fd/0x12d0 [ 57.288276] ? ksys_dup3+0x2e0/0x2e0 [ 57.291990] ? opipe_prep.part.13+0x320/0x320 [ 57.296483] ? __fget_light+0x174/0x1e0 [ 57.300451] __x64_sys_splice+0x248/0x300 [ 57.304595] do_syscall_64+0xd0/0x4e0 [ 57.308393] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.313623] RIP: 0033:0x4592c9 [ 57.316801] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.335697] RSP: 002b:00007f644a5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.343484] RAX: ffffffffffffffda RBX: 00007f644a5b3c90 RCX: 00000000004592c9 [ 57.350743] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.357998] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 57.365273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f644a5b46d4 [ 57.372530] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 57.379818] CPU: 0 PID: 7320 Comm: syz-executor.2 Not tainted 4.19.125-syzkaller #0 [ 57.387614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.396950] Call Trace: [ 57.399517] dump_stack+0x123/0x177 [ 57.403124] should_fail.cold.4+0x5/0x13 [ 57.407164] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 57.412267] ? __lock_acquire+0x792/0x4980 [ 57.416481] __alloc_pages_nodemask+0x1d5/0x710 [ 57.421128] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 57.426122] ? __lock_acquire+0x792/0x4980 [ 57.430337] alloc_pages_current+0xd6/0x1b0 [ 57.434636] skb_page_frag_refill+0x20b/0x400 [ 57.439109] sk_page_frag_refill+0x46/0x1b0 [ 57.443406] sk_alloc_sg+0x108/0x760 [ 57.447116] ? lockdep_hardirqs_on+0x421/0x5c0 [ 57.451676] ? lock_sock_nested+0x82/0x100 [ 57.455902] alloc_encrypted_sg+0x81/0x100 [ 57.460116] tls_sw_sendpage+0x4f8/0xc00 [ 57.464195] ? tls_sw_sendmsg+0x1020/0x1020 [ 57.468510] ? pipe_lock+0x4f/0x60 [ 57.472041] inet_sendpage+0x122/0x600 [ 57.475914] ? kernel_sendpage+0xd0/0xd0 [ 57.479959] kernel_sendpage+0x60/0xd0 [ 57.483832] ? lock_downgrade+0x860/0x860 [ 57.487966] ? pipe_lock+0x4f/0x60 [ 57.491500] sock_sendpage+0x6d/0xd0 [ 57.495220] pipe_to_sendpage+0x212/0x430 [ 57.499350] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.504192] __splice_from_pipe+0x2cb/0x720 [ 57.508505] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.513335] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.518155] splice_from_pipe+0xbb/0x120 [ 57.522195] ? splice_shrink_spd+0xa0/0xa0 [ 57.526411] ? rw_verify_area+0xb8/0x2b0 [ 57.530467] generic_splice_sendpage+0x10/0x20 [ 57.535112] do_splice+0x4fd/0x12d0 [ 57.538721] ? ksys_dup3+0x2e0/0x2e0 [ 57.542411] ? opipe_prep.part.13+0x320/0x320 [ 57.546883] ? __fget_light+0x174/0x1e0 [ 57.550835] __x64_sys_splice+0x248/0x300 [ 57.554960] do_syscall_64+0xd0/0x4e0 [ 57.558754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.563919] RIP: 0033:0x4592c9 [ 57.567088] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.586226] RSP: 002b:00007f09c60abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.593910] RAX: ffffffffffffffda RBX: 00007f09c60abc90 RCX: 00000000004592c9 [ 57.601168] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.608415] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 57.615664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09c60ac6d4 [ 57.622917] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 57.637273] FAULT_INJECTION: forcing a failure. [ 57.637273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 57.652281] CPU: 1 PID: 7347 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 57.660088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.669441] Call Trace: [ 57.672017] dump_stack+0x123/0x177 [ 57.675642] should_fail.cold.4+0x5/0x13 [ 57.679704] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 57.684804] ? __lock_acquire+0x792/0x4980 [ 57.689039] __alloc_pages_nodemask+0x1d5/0x710 [ 57.693702] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 57.698718] ? __lock_acquire+0x792/0x4980 [ 57.702952] alloc_pages_current+0xd6/0x1b0 [ 57.707269] skb_page_frag_refill+0x20b/0x400 [ 57.711764] sk_page_frag_refill+0x46/0x1b0 [ 57.716081] sk_alloc_sg+0x108/0x760 [ 57.719790] ? lockdep_hardirqs_on+0x421/0x5c0 [ 57.724379] ? lock_sock_nested+0x82/0x100 [ 57.728611] alloc_encrypted_sg+0x81/0x100 [ 57.732839] tls_sw_sendpage+0x4f8/0xc00 [ 57.736904] ? tls_sw_sendmsg+0x1020/0x1020 [ 57.741226] ? pipe_lock+0x4f/0x60 [ 57.744763] inet_sendpage+0x122/0x600 [ 57.748648] ? kernel_sendpage+0xd0/0xd0 [ 57.752705] kernel_sendpage+0x60/0xd0 [ 57.756583] ? lock_downgrade+0x860/0x860 [ 57.760728] ? pipe_lock+0x4f/0x60 [ 57.764269] sock_sendpage+0x6d/0xd0 [ 57.767977] pipe_to_sendpage+0x212/0x430 [ 57.772121] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.776966] __splice_from_pipe+0x2cb/0x720 [ 57.781274] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.786095] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.790929] splice_from_pipe+0xbb/0x120 [ 57.794966] ? splice_shrink_spd+0xa0/0xa0 [ 57.799181] ? rw_verify_area+0xb8/0x2b0 [ 57.803221] generic_splice_sendpage+0x10/0x20 [ 57.807778] do_splice+0x4fd/0x12d0 [ 57.811385] ? ksys_dup3+0x2e0/0x2e0 [ 57.815077] ? opipe_prep.part.13+0x320/0x320 [ 57.819551] ? __fget_light+0x174/0x1e0 [ 57.823503] __x64_sys_splice+0x248/0x300 [ 57.827738] do_syscall_64+0xd0/0x4e0 [ 57.831519] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.836683] RIP: 0033:0x4592c9 [ 57.839850] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.858728] RSP: 002b:00007ff9bb296c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.866415] RAX: ffffffffffffffda RBX: 00007ff9bb296c90 RCX: 00000000004592c9 [ 57.873659] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.880905] RBP: 000000000075bfc8 R08: 0000000100000300 R09: 0000000000000000 [ 57.888150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2976d4 [ 57.895403] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 57.954231] FAULT_INJECTION: forcing a failure. [ 57.954231] name failslab, interval 1, probability 0, space 0, times 0 [ 57.954332] FAULT_INJECTION: forcing a failure. [ 57.954332] name failslab, interval 1, probability 0, space 0, times 0 [ 57.966262] FAULT_INJECTION: forcing a failure. [ 57.966262] name failslab, interval 1, probability 0, space 0, times 0 [ 57.978140] FAULT_INJECTION: forcing a failure. [ 57.978140] name failslab, interval 1, probability 0, space 0, times 0 [ 57.991359] CPU: 0 PID: 7363 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 [ 58.000577] FAULT_INJECTION: forcing a failure. [ 58.000577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.007109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.007112] Call Trace: [ 58.007124] dump_stack+0x123/0x177 [ 58.007137] should_fail.cold.4+0x5/0x13 [ 58.007145] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 58.007152] ? lock_downgrade+0x860/0x860 [ 58.007163] __should_failslab+0xba/0xf0 [ 58.051830] should_failslab+0x9/0x14 [ 58.055609] __kmalloc+0x2dd/0x770 [ 58.059130] ? tls_push_record+0xf3/0x1720 [ 58.063341] ? __sk_mem_schedule+0x5f/0xc0 [ 58.067569] tls_push_record+0xf3/0x1720 [ 58.071608] ? lockdep_hardirqs_on+0x421/0x5c0 [ 58.076172] ? alloc_encrypted_sg+0x81/0x100 [ 58.080561] tls_sw_sendpage+0x458/0xc00 [ 58.084608] ? tls_sw_sendmsg+0x1020/0x1020 [ 58.088924] ? pipe_lock+0x4f/0x60 [ 58.092449] inet_sendpage+0x122/0x600 [ 58.096336] ? kernel_sendpage+0xd0/0xd0 [ 58.100372] kernel_sendpage+0x60/0xd0 [ 58.104237] ? lock_downgrade+0x860/0x860 [ 58.108376] ? pipe_lock+0x4f/0x60 [ 58.111893] sock_sendpage+0x6d/0xd0 [ 58.115587] pipe_to_sendpage+0x212/0x430 [ 58.119712] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.124539] ? kasan_check_write+0x14/0x20 [ 58.128769] ? anon_pipe_buf_release+0x149/0x1f0 [ 58.133505] __splice_from_pipe+0x2cb/0x720 [ 58.137817] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.142643] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.147466] splice_from_pipe+0xbb/0x120 [ 58.151505] ? splice_shrink_spd+0xa0/0xa0 [ 58.155722] ? rw_verify_area+0xb8/0x2b0 [ 58.159762] generic_splice_sendpage+0x10/0x20 [ 58.164322] do_splice+0x4fd/0x12d0 [ 58.167936] ? ksys_dup3+0x2e0/0x2e0 [ 58.171643] ? opipe_prep.part.13+0x320/0x320 [ 58.176120] ? __fget_light+0x174/0x1e0 [ 58.180072] __x64_sys_splice+0x248/0x300 [ 58.184215] do_syscall_64+0xd0/0x4e0 [ 58.188018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.193199] RIP: 0033:0x4592c9 [ 58.196375] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.215264] RSP: 002b:00007f3694dddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.222995] RAX: ffffffffffffffda RBX: 00007f3694dddc90 RCX: 00000000004592c9 [ 58.230260] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.237508] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 58.244756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694dde6d4 [ 58.252022] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 58.259374] CPU: 1 PID: 7357 Comm: syz-executor.0 Not tainted 4.19.125-syzkaller #0 [ 58.267175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.276523] Call Trace: [ 58.279107] dump_stack+0x123/0x177 [ 58.282736] should_fail.cold.4+0x5/0x13 [ 58.286809] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 58.291915] ? __lock_acquire+0x792/0x4980 [ 58.296149] ? __lock_is_held+0xb5/0x140 [ 58.300209] __alloc_pages_nodemask+0x1d5/0x710 [ 58.304876] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 58.309888] ? mark_held_locks+0xc7/0x130 [ 58.314025] alloc_pages_current+0xd6/0x1b0 [ 58.318364] skb_page_frag_refill+0x20b/0x400 [ 58.322856] sk_page_frag_refill+0x46/0x1b0 [ 58.327163] sk_alloc_sg+0x108/0x760 [ 58.330874] ? lockdep_hardirqs_on+0x421/0x5c0 [ 58.335548] ? lock_sock_nested+0x82/0x100 [ 58.339776] alloc_encrypted_sg+0x81/0x100 [ 58.344006] tls_sw_sendpage+0x4f8/0xc00 [ 58.348057] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 58.352796] ? tls_sw_sendmsg+0x1020/0x1020 [ 58.357095] ? tls_sw_sendmsg+0x1020/0x1020 [ 58.361418] inet_sendpage+0x122/0x600 [ 58.365292] ? kernel_sendpage+0xd0/0xd0 [ 58.369329] kernel_sendpage+0x60/0xd0 [ 58.373197] ? lock_downgrade+0x860/0x860 [ 58.377342] ? pipe_lock+0x4f/0x60 [ 58.380864] sock_sendpage+0x6d/0xd0 [ 58.384584] pipe_to_sendpage+0x212/0x430 [ 58.388718] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.393548] __splice_from_pipe+0x2cb/0x720 [ 58.397853] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.402677] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.407497] splice_from_pipe+0xbb/0x120 [ 58.411561] ? splice_shrink_spd+0xa0/0xa0 [ 58.415784] ? rw_verify_area+0xb8/0x2b0 [ 58.419834] generic_splice_sendpage+0x10/0x20 [ 58.424399] do_splice+0x4fd/0x12d0 [ 58.428051] ? ksys_dup3+0x2e0/0x2e0 [ 58.431772] ? opipe_prep.part.13+0x320/0x320 [ 58.436246] ? __fget_light+0x174/0x1e0 [ 58.440204] __x64_sys_splice+0x248/0x300 [ 58.444338] do_syscall_64+0xd0/0x4e0 [ 58.448116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.453284] RIP: 0033:0x4592c9 [ 58.456458] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.475344] RSP: 002b:00007f644a5b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.483037] RAX: ffffffffffffffda RBX: 00007f644a5b3c90 RCX: 00000000004592c9 [ 58.490292] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.497550] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 58.504810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f644a5b46d4 [ 58.512067] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 58.525710] CPU: 1 PID: 7369 Comm: syz-executor.4 Not tainted 4.19.125-syzkaller #0 [ 58.533526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.542870] Call Trace: [ 58.545442] dump_stack+0x123/0x177 [ 58.549062] should_fail.cold.4+0x5/0x13 [ 58.553110] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 58.558198] ? lock_downgrade+0x860/0x860 [ 58.562337] __should_failslab+0xba/0xf0 [ 58.566379] should_failslab+0x9/0x14 [ 58.570160] __kmalloc+0x2dd/0x770 [ 58.573682] ? tls_push_record+0xf3/0x1720 [ 58.577894] ? __sk_mem_schedule+0x5f/0xc0 [ 58.582111] tls_push_record+0xf3/0x1720 [ 58.586172] ? lockdep_hardirqs_on+0x421/0x5c0 [ 58.590741] ? alloc_encrypted_sg+0x81/0x100 [ 58.595133] tls_sw_sendpage+0x458/0xc00 [ 58.599192] ? tls_sw_sendmsg+0x1020/0x1020 [ 58.603499] ? pipe_lock+0x4f/0x60 [ 58.607021] inet_sendpage+0x122/0x600 [ 58.610893] ? kernel_sendpage+0xd0/0xd0 [ 58.614931] kernel_sendpage+0x60/0xd0 [ 58.618798] ? lock_downgrade+0x860/0x860 [ 58.622932] ? pipe_lock+0x4f/0x60 [ 58.626473] sock_sendpage+0x6d/0xd0 [ 58.630198] pipe_to_sendpage+0x212/0x430 [ 58.634341] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.639170] ? kasan_check_write+0x14/0x20 [ 58.643388] ? anon_pipe_buf_release+0x149/0x1f0 [ 58.648124] __splice_from_pipe+0x2cb/0x720 [ 58.652427] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.657249] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.662078] splice_from_pipe+0xbb/0x120 [ 58.666135] ? splice_shrink_spd+0xa0/0xa0 [ 58.670350] ? rw_verify_area+0xb8/0x2b0 [ 58.674394] generic_splice_sendpage+0x10/0x20 [ 58.678965] do_splice+0x4fd/0x12d0 [ 58.682580] ? ksys_dup3+0x2e0/0x2e0 [ 58.686277] ? opipe_prep.part.13+0x320/0x320 [ 58.690751] ? __fget_light+0x174/0x1e0 [ 58.694703] __x64_sys_splice+0x248/0x300 [ 58.698927] do_syscall_64+0xd0/0x4e0 [ 58.702732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.707900] RIP: 0033:0x4592c9 [ 58.711101] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.730002] RSP: 002b:00007f780c8c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.737691] RAX: ffffffffffffffda RBX: 00007f780c8c1c90 RCX: 00000000004592c9 [ 58.744940] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.752194] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 58.759447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f780c8c26d4 [ 58.766701] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 58.797755] CPU: 0 PID: 7366 Comm: syz-executor.3 Not tainted 4.19.125-syzkaller #0 [ 58.805573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.814909] Call Trace: [ 58.817479] dump_stack+0x123/0x177 [ 58.821108] should_fail.cold.4+0x5/0x13 [ 58.825148] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 58.830228] ? lock_downgrade+0x860/0x860 [ 58.834358] __should_failslab+0xba/0xf0 [ 58.838403] should_failslab+0x9/0x14 [ 58.842179] __kmalloc+0x2dd/0x770 [ 58.845713] ? tls_push_record+0xf3/0x1720 [ 58.849922] ? __sk_mem_schedule+0x5f/0xc0 [ 58.854148] tls_push_record+0xf3/0x1720 [ 58.858192] ? lockdep_hardirqs_on+0x421/0x5c0 [ 58.862770] ? alloc_encrypted_sg+0x81/0x100 [ 58.867158] tls_sw_sendpage+0x458/0xc00 [ 58.871203] ? tls_sw_sendmsg+0x1020/0x1020 [ 58.875503] ? pipe_lock+0x4f/0x60 [ 58.879021] inet_sendpage+0x122/0x600 [ 58.882884] ? kernel_sendpage+0xd0/0xd0 [ 58.886935] kernel_sendpage+0x60/0xd0 [ 58.890797] ? lock_downgrade+0x860/0x860 [ 58.894919] ? pipe_lock+0x4f/0x60 [ 58.898435] sock_sendpage+0x6d/0xd0 [ 58.902124] pipe_to_sendpage+0x212/0x430 [ 58.906249] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.911089] ? kasan_check_write+0x14/0x20 [ 58.915303] ? anon_pipe_buf_release+0x149/0x1f0 [ 58.920033] __splice_from_pipe+0x2cb/0x720 [ 58.924330] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.929150] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.933968] splice_from_pipe+0xbb/0x120 [ 58.938004] ? splice_shrink_spd+0xa0/0xa0 [ 58.942219] ? rw_verify_area+0xb8/0x2b0 [ 58.946269] generic_splice_sendpage+0x10/0x20 [ 58.950829] do_splice+0x4fd/0x12d0 [ 58.954434] ? ksys_dup3+0x2e0/0x2e0 [ 58.958151] ? opipe_prep.part.13+0x320/0x320 [ 58.962635] ? __fget_light+0x174/0x1e0 [ 58.966585] __x64_sys_splice+0x248/0x300 [ 58.970717] do_syscall_64+0xd0/0x4e0 [ 58.974529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.979694] RIP: 0033:0x4592c9 [ 58.982862] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.001739] RSP: 002b:00007f21c44c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.009422] RAX: ffffffffffffffda RBX: 00007f21c44c5c90 RCX: 00000000004592c9 [ 59.016683] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.023926] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 59.031170] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21c44c66d4 [ 59.038416] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 59.052684] CPU: 1 PID: 7368 Comm: syz-executor.2 Not tainted 4.19.125-syzkaller #0 [ 59.060510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.069866] Call Trace: [ 59.072456] dump_stack+0x123/0x177 [ 59.076091] should_fail.cold.4+0x5/0x13 [ 59.080157] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 59.085252] ? lock_downgrade+0x860/0x860 [ 59.089402] __should_failslab+0xba/0xf0 [ 59.093465] should_failslab+0x9/0x14 [ 59.097264] __kmalloc+0x2dd/0x770 [ 59.100801] ? tls_push_record+0xf3/0x1720 [ 59.105030] ? __sk_mem_schedule+0x5f/0xc0 [ 59.109262] tls_push_record+0xf3/0x1720 [ 59.113320] ? lockdep_hardirqs_on+0x421/0x5c0 [ 59.117915] ? alloc_encrypted_sg+0x81/0x100 [ 59.122359] tls_sw_sendpage+0x458/0xc00 [ 59.126438] ? tls_sw_sendmsg+0x1020/0x1020 [ 59.130768] ? pipe_lock+0x4f/0x60 [ 59.134313] inet_sendpage+0x122/0x600 [ 59.138196] ? kernel_sendpage+0xd0/0xd0 [ 59.142250] kernel_sendpage+0x60/0xd0 [ 59.146136] ? lock_downgrade+0x860/0x860 [ 59.150278] ? pipe_lock+0x4f/0x60 [ 59.153819] sock_sendpage+0x6d/0xd0 [ 59.157527] pipe_to_sendpage+0x212/0x430 [ 59.161679] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.166528] ? kasan_check_write+0x14/0x20 [ 59.170761] ? anon_pipe_buf_release+0x149/0x1f0 [ 59.175564] __splice_from_pipe+0x2cb/0x720 [ 59.179881] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.184715] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.189535] splice_from_pipe+0xbb/0x120 [ 59.193572] ? splice_shrink_spd+0xa0/0xa0 [ 59.197784] ? rw_verify_area+0xb8/0x2b0 [ 59.201823] generic_splice_sendpage+0x10/0x20 [ 59.206379] do_splice+0x4fd/0x12d0 [ 59.209993] ? ksys_dup3+0x2e0/0x2e0 [ 59.213680] ? opipe_prep.part.13+0x320/0x320 [ 59.218153] ? __fget_light+0x174/0x1e0 [ 59.222121] __x64_sys_splice+0x248/0x300 [ 59.226274] do_syscall_64+0xd0/0x4e0 [ 59.230054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.235218] RIP: 0033:0x4592c9 [ 59.238388] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.257267] RSP: 002b:00007f09c60abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.264954] RAX: ffffffffffffffda RBX: 00007f09c60abc90 RCX: 00000000004592c9 [ 59.272200] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.279448] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 59.286712] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09c60ac6d4 [ 59.293959] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 59.327171] FAULT_INJECTION: forcing a failure. [ 59.327171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.327305] FAULT_INJECTION: forcing a failure. [ 59.327305] name failslab, interval 1, probability 0, space 0, times 0 [ 59.340835] CPU: 1 PID: 7374 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 59.354545] FAULT_INJECTION: forcing a failure. [ 59.354545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.358171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.358175] Call Trace: [ 59.358187] dump_stack+0x123/0x177 [ 59.358198] should_fail.cold.4+0x5/0x13 [ 59.358207] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 59.358216] ? __lock_acquire+0x792/0x4980 [ 59.358229] __alloc_pages_nodemask+0x1d5/0x710 [ 59.358236] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 59.358243] ? __lock_acquire+0x792/0x4980 [ 59.358252] alloc_pages_current+0xd6/0x1b0 [ 59.358261] skb_page_frag_refill+0x20b/0x400 [ 59.358269] sk_page_frag_refill+0x46/0x1b0 [ 59.358276] sk_alloc_sg+0x108/0x760 [ 59.370217] FAULT_INJECTION: forcing a failure. [ 59.370217] name failslab, interval 1, probability 0, space 0, times 0 [ 59.379441] ? lockdep_hardirqs_on+0x421/0x5c0 [ 59.379450] ? lock_sock_nested+0x82/0x100 [ 59.379460] alloc_encrypted_sg+0x81/0x100 [ 59.379469] tls_sw_sendpage+0x4f8/0xc00 [ 59.379486] ? tls_sw_sendmsg+0x1020/0x1020 [ 59.379493] ? pipe_lock+0x4f/0x60 [ 59.379506] inet_sendpage+0x122/0x600 [ 59.379513] ? kernel_sendpage+0xd0/0xd0 [ 59.379518] kernel_sendpage+0x60/0xd0 [ 59.379522] ? lock_downgrade+0x860/0x860 [ 59.379526] ? pipe_lock+0x4f/0x60 [ 59.379531] sock_sendpage+0x6d/0xd0 [ 59.379539] pipe_to_sendpage+0x212/0x430 [ 59.379546] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.497932] __splice_from_pipe+0x2cb/0x720 [ 59.502279] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.507117] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.511948] splice_from_pipe+0xbb/0x120 [ 59.516019] ? splice_shrink_spd+0xa0/0xa0 [ 59.520250] ? rw_verify_area+0xb8/0x2b0 [ 59.524306] generic_splice_sendpage+0x10/0x20 [ 59.528880] do_splice+0x4fd/0x12d0 [ 59.532497] ? ksys_dup3+0x2e0/0x2e0 [ 59.536194] ? opipe_prep.part.13+0x320/0x320 [ 59.540678] ? __fget_light+0x174/0x1e0 [ 59.544683] __x64_sys_splice+0x248/0x300 [ 59.548822] do_syscall_64+0xd0/0x4e0 [ 59.552621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.557791] RIP: 0033:0x4592c9 [ 59.560967] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.579859] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.587559] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 59.594820] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.602086] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 59.609331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 59.616586] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 59.625152] CPU: 1 PID: 7396 Comm: syz-executor.0 Not tainted 4.19.125-syzkaller #0 [ 59.632951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.642297] Call Trace: [ 59.644876] dump_stack+0x123/0x177 [ 59.648503] should_fail.cold.4+0x5/0x13 [ 59.652561] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 59.657657] ? lock_downgrade+0x860/0x860 [ 59.661806] __should_failslab+0xba/0xf0 [ 59.665858] should_failslab+0x9/0x14 [ 59.669649] kmem_cache_alloc_node+0x26b/0x730 [ 59.674231] __alloc_skb+0xa7/0x580 [ 59.677838] ? skb_scrub_packet+0x3c0/0x3c0 [ 59.682141] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 59.687666] ? finish_task_switch+0x14a/0x720 [ 59.692145] ? finish_task_switch+0x11c/0x720 [ 59.696640] sk_stream_alloc_skb+0x9e/0x810 [ 59.700938] ? tcp_send_mss+0x1d/0x220 [ 59.704803] do_tcp_sendpages+0x772/0x1e10 [ 59.709031] ? __lock_is_held+0xb5/0x140 [ 59.713070] ? sk_stream_alloc_skb+0x810/0x810 [ 59.717627] ? __local_bh_enable_ip+0x160/0x260 [ 59.722273] ? lock_sock_nested+0xc5/0x100 [ 59.726488] ? lockdep_hardirqs_on+0x421/0x5c0 [ 59.731043] ? __local_bh_enable_ip+0x160/0x260 [ 59.735706] ? kasan_check_read+0x11/0x20 [ 59.739832] tcp_sendpage_locked+0x63/0xa0 [ 59.744042] tcp_sendpage+0x37/0x50 [ 59.747646] inet_sendpage+0x122/0x600 [ 59.751510] ? kernel_sendpage+0xd0/0xd0 [ 59.755544] kernel_sendpage+0x60/0xd0 [ 59.759407] ? lock_downgrade+0x860/0x860 [ 59.763529] ? pipe_lock+0x4f/0x60 [ 59.767046] sock_sendpage+0x6d/0xd0 [ 59.770738] pipe_to_sendpage+0x212/0x430 [ 59.774861] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.779681] __splice_from_pipe+0x2cb/0x720 [ 59.783992] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.788813] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.793647] splice_from_pipe+0xbb/0x120 [ 59.797684] ? splice_shrink_spd+0xa0/0xa0 [ 59.801912] ? rw_verify_area+0xb8/0x2b0 [ 59.805948] generic_splice_sendpage+0x10/0x20 [ 59.810508] do_splice+0x4fd/0x12d0 [ 59.814131] ? ksys_dup3+0x2e0/0x2e0 [ 59.817825] ? opipe_prep.part.13+0x320/0x320 [ 59.822296] ? __fget_light+0x174/0x1e0 [ 59.826249] __x64_sys_splice+0x248/0x300 [ 59.830377] do_syscall_64+0xd0/0x4e0 [ 59.834157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.839322] RIP: 0033:0x4592c9 [ 59.842493] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.861370] RSP: 002b:00007f644a550c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.869053] RAX: ffffffffffffffda RBX: 00007f644a550c90 RCX: 00000000004592c9 [ 59.876300] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.883546] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 59.890792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f644a5516d4 [ 59.898037] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 59.915518] CPU: 0 PID: 7383 Comm: syz-executor.3 Not tainted 4.19.125-syzkaller #0 [ 59.923333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.932677] Call Trace: [ 59.935247] dump_stack+0x123/0x177 [ 59.938857] should_fail.cold.4+0x5/0x13 [ 59.942895] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 59.947990] ? __lock_acquire+0x792/0x4980 [ 59.952202] __alloc_pages_nodemask+0x1d5/0x710 [ 59.956848] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 59.961848] ? __lock_acquire+0x792/0x4980 [ 59.966072] alloc_pages_current+0xd6/0x1b0 [ 59.970385] skb_page_frag_refill+0x20b/0x400 [ 59.974867] sk_page_frag_refill+0x46/0x1b0 [ 59.979167] sk_alloc_sg+0x108/0x760 [ 59.982860] ? lockdep_hardirqs_on+0x421/0x5c0 [ 59.987420] ? lock_sock_nested+0x82/0x100 [ 59.991631] alloc_encrypted_sg+0x81/0x100 [ 59.995841] tls_sw_sendpage+0x4f8/0xc00 [ 59.999894] ? tls_sw_sendmsg+0x1020/0x1020 [ 60.004192] ? pipe_lock+0x4f/0x60 [ 60.007710] inet_sendpage+0x122/0x600 [ 60.011584] ? kernel_sendpage+0xd0/0xd0 [ 60.016141] kernel_sendpage+0x60/0xd0 [ 60.020003] ? lock_downgrade+0x860/0x860 [ 60.024126] ? pipe_lock+0x4f/0x60 [ 60.027652] sock_sendpage+0x6d/0xd0 [ 60.031351] pipe_to_sendpage+0x212/0x430 [ 60.035479] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.040299] __splice_from_pipe+0x2cb/0x720 [ 60.044600] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.049424] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.054252] splice_from_pipe+0xbb/0x120 [ 60.058287] ? splice_shrink_spd+0xa0/0xa0 [ 60.062500] ? rw_verify_area+0xb8/0x2b0 [ 60.066537] generic_splice_sendpage+0x10/0x20 [ 60.071099] do_splice+0x4fd/0x12d0 [ 60.074708] ? ksys_dup3+0x2e0/0x2e0 [ 60.078398] ? opipe_prep.part.13+0x320/0x320 [ 60.082870] ? __fget_light+0x174/0x1e0 [ 60.086819] __x64_sys_splice+0x248/0x300 [ 60.090954] do_syscall_64+0xd0/0x4e0 [ 60.094737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.099903] RIP: 0033:0x4592c9 [ 60.103086] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.121969] RSP: 002b:00007f21c44c5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 60.129658] RAX: ffffffffffffffda RBX: 00007f21c44c5c90 RCX: 00000000004592c9 [ 60.136910] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.144159] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 60.151410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f21c44c66d4 [ 60.158655] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 60.166686] CPU: 1 PID: 7397 Comm: syz-executor.5 Not tainted 4.19.125-syzkaller #0 2020/05/30 07:26:22 executed programs: 53 [ 60.174481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.183824] Call Trace: [ 60.186404] dump_stack+0x123/0x177 [ 60.190030] should_fail.cold.4+0x5/0x13 [ 60.194085] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 60.199183] ? lock_downgrade+0x860/0x860 [ 60.203333] __should_failslab+0xba/0xf0 [ 60.207390] should_failslab+0x9/0x14 [ 60.211182] kmem_cache_alloc_node+0x26b/0x730 [ 60.215772] __alloc_skb+0xa7/0x580 [ 60.219399] ? skb_scrub_packet+0x3c0/0x3c0 [ 60.223718] ? __ww_mutex_lock.constprop.15+0x1080/0x2fd0 [ 60.229009] FAULT_INJECTION: forcing a failure. [ 60.229009] name failslab, interval 1, probability 0, space 0, times 0 [ 60.229242] ? finish_task_switch+0x14a/0x720 [ 60.244883] ? finish_task_switch+0x11c/0x720 [ 60.249356] sk_stream_alloc_skb+0x9e/0x810 [ 60.253652] ? tcp_send_mss+0x1d/0x220 [ 60.257512] do_tcp_sendpages+0x772/0x1e10 [ 60.261722] ? __lock_is_held+0xb5/0x140 [ 60.265766] ? sk_stream_alloc_skb+0x810/0x810 [ 60.270321] ? __local_bh_enable_ip+0x160/0x260 [ 60.274962] ? lock_sock_nested+0xc5/0x100 [ 60.279169] ? lockdep_hardirqs_on+0x421/0x5c0 [ 60.283722] ? __local_bh_enable_ip+0x160/0x260 [ 60.288365] ? kasan_check_read+0x11/0x20 [ 60.292488] tcp_sendpage_locked+0x63/0xa0 [ 60.296697] tcp_sendpage+0x37/0x50 [ 60.300462] inet_sendpage+0x122/0x600 [ 60.304341] ? kernel_sendpage+0xd0/0xd0 [ 60.308396] kernel_sendpage+0x60/0xd0 [ 60.312264] ? lock_downgrade+0x860/0x860 [ 60.316404] ? pipe_lock+0x4f/0x60 [ 60.319922] sock_sendpage+0x6d/0xd0 [ 60.323613] pipe_to_sendpage+0x212/0x430 [ 60.327737] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.332559] __splice_from_pipe+0x2cb/0x720 [ 60.336855] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.341682] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.346508] splice_from_pipe+0xbb/0x120 [ 60.350543] ? splice_shrink_spd+0xa0/0xa0 [ 60.354755] ? rw_verify_area+0xb8/0x2b0 [ 60.358790] generic_splice_sendpage+0x10/0x20 [ 60.363346] do_splice+0x4fd/0x12d0 [ 60.366947] ? ksys_dup3+0x2e0/0x2e0 [ 60.370649] ? opipe_prep.part.13+0x320/0x320 [ 60.375124] ? __fget_light+0x174/0x1e0 [ 60.379091] __x64_sys_splice+0x248/0x300 [ 60.383217] do_syscall_64+0xd0/0x4e0 [ 60.386994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.392156] RIP: 0033:0x4592c9 [ 60.395323] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.414211] RSP: 002b:00007f3694d7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 60.421893] RAX: ffffffffffffffda RBX: 00007f3694d7ac90 RCX: 00000000004592c9 [ 60.429137] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.436380] RBP: 000000000075c118 R08: 0000000100000300 R09: 0000000000000000 [ 60.443624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3694d7b6d4 [ 60.450867] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 60.469924] FAULT_INJECTION: forcing a failure. [ 60.469924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.495295] CPU: 1 PID: 7413 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 60.503110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.512578] Call Trace: [ 60.515158] dump_stack+0x123/0x177 [ 60.518781] should_fail.cold.4+0x5/0x13 [ 60.522839] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 60.527936] ? lock_downgrade+0x860/0x860 [ 60.532085] __should_failslab+0xba/0xf0 [ 60.536140] should_failslab+0x9/0x14 [ 60.539933] __kmalloc+0x2dd/0x770 [ 60.543464] ? tls_push_record+0xf3/0x1720 [ 60.547687] ? __sk_mem_schedule+0x5f/0xc0 [ 60.552027] tls_push_record+0xf3/0x1720 [ 60.556075] ? lockdep_hardirqs_on+0x421/0x5c0 [ 60.560653] ? alloc_encrypted_sg+0x81/0x100 [ 60.565057] tls_sw_sendpage+0x458/0xc00 [ 60.569123] ? tls_sw_sendmsg+0x1020/0x1020 [ 60.573439] ? pipe_lock+0x4f/0x60 [ 60.576975] inet_sendpage+0x122/0x600 [ 60.580858] ? kernel_sendpage+0xd0/0xd0 [ 60.584915] kernel_sendpage+0x60/0xd0 [ 60.588795] ? lock_downgrade+0x860/0x860 [ 60.592930] ? pipe_lock+0x4f/0x60 [ 60.596457] sock_sendpage+0x6d/0xd0 [ 60.600160] pipe_to_sendpage+0x212/0x430 [ 60.604327] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.609160] ? kasan_check_write+0x14/0x20 [ 60.613389] ? anon_pipe_buf_release+0x149/0x1f0 [ 60.618142] __splice_from_pipe+0x2cb/0x720 [ 60.622479] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.627304] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.632124] splice_from_pipe+0xbb/0x120 [ 60.636172] ? splice_shrink_spd+0xa0/0xa0 [ 60.640391] ? rw_verify_area+0xb8/0x2b0 [ 60.644436] generic_splice_sendpage+0x10/0x20 [ 60.648998] do_splice+0x4fd/0x12d0 [ 60.652625] ? ksys_dup3+0x2e0/0x2e0 [ 60.656314] ? opipe_prep.part.13+0x320/0x320 [ 60.660787] ? __fget_light+0x174/0x1e0 [ 60.664747] __x64_sys_splice+0x248/0x300 [ 60.668886] do_syscall_64+0xd0/0x4e0 [ 60.672669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.677834] RIP: 0033:0x4592c9 [ 60.681000] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.699880] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 60.707586] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 60.714836] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.722095] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 60.729354] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 60.736605] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 60.743867] CPU: 0 PID: 7409 Comm: syz-executor.2 Not tainted 4.19.125-syzkaller #0 [ 60.751662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.761004] Call Trace: [ 60.763567] dump_stack+0x123/0x177 [ 60.767176] should_fail.cold.4+0x5/0x13 [ 60.771211] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 60.776290] ? __lock_acquire+0x792/0x4980 [ 60.780501] __alloc_pages_nodemask+0x1d5/0x710 [ 60.785144] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 60.790136] ? __lock_acquire+0x792/0x4980 [ 60.794352] alloc_pages_current+0xd6/0x1b0 [ 60.798660] skb_page_frag_refill+0x20b/0x400 [ 60.803132] sk_page_frag_refill+0x46/0x1b0 [ 60.807426] sk_alloc_sg+0x108/0x760 [ 60.811113] ? lockdep_hardirqs_on+0x421/0x5c0 [ 60.815667] ? lock_sock_nested+0x82/0x100 [ 60.819878] alloc_encrypted_sg+0x81/0x100 [ 60.824087] tls_sw_sendpage+0x4f8/0xc00 [ 60.828127] ? tls_sw_sendmsg+0x1020/0x1020 [ 60.832438] ? pipe_lock+0x4f/0x60 [ 60.835968] inet_sendpage+0x122/0x600 [ 60.839830] ? kernel_sendpage+0xd0/0xd0 [ 60.843865] kernel_sendpage+0x60/0xd0 [ 60.847723] ? lock_downgrade+0x860/0x860 [ 60.851842] ? pipe_lock+0x4f/0x60 [ 60.855360] sock_sendpage+0x6d/0xd0 [ 60.859047] pipe_to_sendpage+0x212/0x430 [ 60.863170] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.867990] __splice_from_pipe+0x2cb/0x720 [ 60.872289] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.877117] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.881931] splice_from_pipe+0xbb/0x120 [ 60.885966] ? splice_shrink_spd+0xa0/0xa0 [ 60.890177] ? rw_verify_area+0xb8/0x2b0 [ 60.894212] generic_splice_sendpage+0x10/0x20 [ 60.898765] do_splice+0x4fd/0x12d0 [ 60.902368] ? ksys_dup3+0x2e0/0x2e0 [ 60.906054] ? opipe_prep.part.13+0x320/0x320 [ 60.910523] ? __fget_light+0x174/0x1e0 [ 60.914470] __x64_sys_splice+0x248/0x300 [ 60.918595] do_syscall_64+0xd0/0x4e0 [ 60.922379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.927542] RIP: 0033:0x4592c9 [ 60.930747] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.949634] RSP: 002b:00007f09c60abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 60.957312] RAX: ffffffffffffffda RBX: 00007f09c60abc90 RCX: 00000000004592c9 [ 60.964555] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.971800] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 60.979044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09c60ac6d4 [ 60.986288] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 61.000912] ================================================================== [ 61.008421] BUG: KASAN: slab-out-of-bounds in scatterwalk_copychunks+0x1e1/0x610 [ 61.015936] Read of size 4094 at addr ffff888094744000 by task syz-executor.1/7413 [ 61.023614] [ 61.025231] CPU: 1 PID: 7413 Comm: syz-executor.1 Not tainted 4.19.125-syzkaller #0 [ 61.032995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.042330] Call Trace: [ 61.044902] dump_stack+0x123/0x177 [ 61.048505] print_address_description.cold.8+0x9/0x1ff [ 61.053846] kasan_report.cold.9+0x242/0x309 [ 61.058227] ? scatterwalk_copychunks+0x1e1/0x610 [ 61.063045] check_memory_region+0x13e/0x1b0 [ 61.067436] memcpy+0x23/0x50 [ 61.070516] scatterwalk_copychunks+0x1e1/0x610 [ 61.075161] scatterwalk_map_and_copy+0x128/0x190 [ 61.079988] ? __lock_is_held+0xb5/0x140 [ 61.084022] ? scatterwalk_copychunks+0x610/0x610 [ 61.088846] ? rcu_read_lock_sched_held+0x108/0x120 [ 61.093837] ? __kmalloc+0x5f1/0x770 [ 61.097526] ? gcmaes_encrypt.constprop.15+0x630/0xda0 [ 61.102778] gcmaes_encrypt.constprop.15+0x6d6/0xda0 [ 61.107857] ? tls_push_record+0xf3/0x1720 [ 61.112067] ? tls_sw_sendpage+0x458/0xc00 [ 61.116278] ? inet_sendpage+0x122/0x600 [ 61.120399] ? kernel_sendpage+0x60/0xd0 [ 61.124440] ? sock_sendpage+0x6d/0xd0 [ 61.128312] ? pipe_to_sendpage+0x212/0x430 [ 61.132612] ? gcmaes_crypt_by_sg.constprop.16+0x14c0/0x14c0 [ 61.138384] ? usleep_range+0x130/0x130 [ 61.142341] ? __lock_is_held+0xb5/0x140 [ 61.146391] generic_gcmaes_encrypt+0xfd/0x150 [ 61.150957] ? generic_gcmaes_encrypt+0xfd/0x150 [ 61.155684] ? helper_rfc4106_encrypt+0x450/0x450 [ 61.160511] ? __kmalloc+0x5f1/0x770 [ 61.164206] gcmaes_wrapper_encrypt+0x109/0x180 [ 61.168870] tls_push_record+0x966/0x1720 [ 61.172990] ? sk_stream_kill_queues+0x510/0x510 [ 61.177723] tls_sw_sendpage+0x458/0xc00 [ 61.181762] ? tls_sw_sendmsg+0x1020/0x1020 [ 61.186067] ? pipe_lock+0x4f/0x60 [ 61.189583] inet_sendpage+0x122/0x600 [ 61.193444] ? kernel_sendpage+0xd0/0xd0 [ 61.197477] kernel_sendpage+0x60/0xd0 [ 61.201349] ? lock_downgrade+0x860/0x860 [ 61.205467] ? pipe_lock+0x4f/0x60 [ 61.208980] sock_sendpage+0x6d/0xd0 [ 61.212679] pipe_to_sendpage+0x212/0x430 [ 61.216801] ? generic_pipe_buf_nosteal+0x10/0x10 [ 61.221623] ? kasan_check_write+0x14/0x20 [ 61.225838] ? anon_pipe_buf_release+0x149/0x1f0 [ 61.230567] __splice_from_pipe+0x2cb/0x720 [ 61.234862] ? generic_pipe_buf_nosteal+0x10/0x10 [ 61.239679] ? generic_pipe_buf_nosteal+0x10/0x10 [ 61.244494] splice_from_pipe+0xbb/0x120 [ 61.248536] ? splice_shrink_spd+0xa0/0xa0 [ 61.252747] ? rw_verify_area+0xb8/0x2b0 [ 61.256780] generic_splice_sendpage+0x10/0x20 [ 61.261333] do_splice+0x4fd/0x12d0 [ 61.264934] ? ksys_dup3+0x2e0/0x2e0 [ 61.268624] ? opipe_prep.part.13+0x320/0x320 [ 61.273094] ? __fget_light+0x174/0x1e0 [ 61.277054] __x64_sys_splice+0x248/0x300 [ 61.281179] do_syscall_64+0xd0/0x4e0 [ 61.284958] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.290120] RIP: 0033:0x4592c9 [ 61.293284] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.312172] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 61.319857] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 61.327108] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.334359] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 61.341603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 61.348846] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 61.356110] [ 61.357712] Allocated by task 4485: [ 61.361316] save_stack+0x43/0xd0 [ 61.364742] kasan_kmalloc+0xc7/0xe0 [ 61.368428] __kmalloc+0x15b/0x770 [ 61.371942] simple_xattr_alloc+0x26/0x80 [ 61.376061] shmem_initxattrs+0xea/0x1e0 [ 61.380096] security_inode_init_security+0x17f/0x2d0 [ 61.385275] shmem_mknod+0x98/0x1a0 [ 61.388884] shmem_create+0x13/0x20 [ 61.392482] lookup_open+0x102b/0x1d30 [ 61.396340] path_openat+0xf40/0x3c60 [ 61.400113] do_filp_open+0x177/0x250 [ 61.403886] do_sys_open+0x1dd/0x350 [ 61.407572] __x64_sys_open+0x79/0xb0 [ 61.411346] do_syscall_64+0xd0/0x4e0 [ 61.415133] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.420291] [ 61.421892] Freed by task 4508: [ 61.425144] save_stack+0x43/0xd0 [ 61.428570] __kasan_slab_free+0x102/0x150 [ 61.432778] kasan_slab_free+0xe/0x10 [ 61.436550] kfree+0xcf/0x220 [ 61.439979] kernfs_put_open_node.isra.7+0x1be/0x280 [ 61.445055] kernfs_fop_release+0xcb/0x170 [ 61.449264] __fput+0x249/0x7f0 [ 61.452514] ____fput+0x9/0x10 [ 61.455679] task_work_run+0x108/0x180 [ 61.459554] exit_to_usermode_loop+0x1a9/0x200 [ 61.464123] do_syscall_64+0x413/0x4e0 [ 61.468003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.473169] [ 61.474771] The buggy address belongs to the object at ffff888094744000 [ 61.474771] which belongs to the cache kmalloc-96 of size 96 [ 61.487226] The buggy address is located 0 bytes inside of [ 61.487226] 96-byte region [ffff888094744000, ffff888094744060) [ 61.498823] The buggy address belongs to the page: [ 61.503722] page:ffffea000251d100 count:1 mapcount:0 mapping:ffff88812c31e4c0 index:0x0 [ 61.511849] flags: 0x1fffc0000000100(slab) [ 61.516064] raw: 01fffc0000000100 ffffea000253c308 ffffea000251b448 ffff88812c31e4c0 [ 61.523924] raw: 0000000000000000 ffff888094744000 0000000100000020 0000000000000000 [ 61.531778] page dumped because: kasan: bad access detected [ 61.537460] [ 61.539068] Memory state around the buggy address: [ 61.543980] ffff888094743f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.551313] ffff888094743f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.558642] >ffff888094744000: 00 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc [ 61.565974] ^ [ 61.571395] ffff888094744080: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 61.578726] ffff888094744100: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 61.586054] ================================================================== [ 61.593386] Disabling lock debugging due to kernel taint [ 61.598867] Kernel panic - not syncing: panic_on_warn set ... [ 61.598867] [ 61.606223] CPU: 1 PID: 7413 Comm: syz-executor.1 Tainted: G B 4.19.125-syzkaller #0 [ 61.615394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.624729] Call Trace: [ 61.627293] dump_stack+0x123/0x177 [ 61.630893] panic+0x1cd/0x375 [ 61.634057] ? __warn_printk+0xd6/0xd6 [ 61.637916] ? do_raw_spin_unlock+0x54/0x260 [ 61.642312] kasan_end_report+0x47/0x4f [ 61.646266] kasan_report.cold.9+0x76/0x309 [ 61.650560] ? scatterwalk_copychunks+0x1e1/0x610 [ 61.655376] check_memory_region+0x13e/0x1b0 [ 61.659752] memcpy+0x23/0x50 [ 61.662829] scatterwalk_copychunks+0x1e1/0x610 [ 61.667470] scatterwalk_map_and_copy+0x128/0x190 [ 61.672292] ? __lock_is_held+0xb5/0x140 [ 61.676335] ? scatterwalk_copychunks+0x610/0x610 [ 61.681149] ? rcu_read_lock_sched_held+0x108/0x120 [ 61.686144] ? __kmalloc+0x5f1/0x770 [ 61.689831] ? gcmaes_encrypt.constprop.15+0x630/0xda0 [ 61.695111] gcmaes_encrypt.constprop.15+0x6d6/0xda0 [ 61.700188] ? tls_push_record+0xf3/0x1720 [ 61.704407] ? tls_sw_sendpage+0x458/0xc00 [ 61.708614] ? inet_sendpage+0x122/0x600 [ 61.712647] ? kernel_sendpage+0x60/0xd0 [ 61.716686] ? sock_sendpage+0x6d/0xd0 [ 61.720569] ? pipe_to_sendpage+0x212/0x430 [ 61.724864] ? gcmaes_crypt_by_sg.constprop.16+0x14c0/0x14c0 [ 61.730636] ? usleep_range+0x130/0x130 [ 61.734584] ? __lock_is_held+0xb5/0x140 [ 61.738620] generic_gcmaes_encrypt+0xfd/0x150 [ 61.743193] ? generic_gcmaes_encrypt+0xfd/0x150 [ 61.747920] ? helper_rfc4106_encrypt+0x450/0x450 [ 61.752735] ? __kmalloc+0x5f1/0x770 [ 61.756422] gcmaes_wrapper_encrypt+0x109/0x180 [ 61.761062] tls_push_record+0x966/0x1720 [ 61.765181] ? sk_stream_kill_queues+0x510/0x510 [ 61.769915] tls_sw_sendpage+0x458/0xc00 [ 61.773951] ? tls_sw_sendmsg+0x1020/0x1020 [ 61.778244] ? pipe_lock+0x4f/0x60 [ 61.781760] inet_sendpage+0x122/0x600 [ 61.785618] ? kernel_sendpage+0xd0/0xd0 [ 61.789658] kernel_sendpage+0x60/0xd0 [ 61.793518] ? lock_downgrade+0x860/0x860 [ 61.797635] ? pipe_lock+0x4f/0x60 [ 61.801148] sock_sendpage+0x6d/0xd0 [ 61.804847] pipe_to_sendpage+0x212/0x430 [ 61.808966] ? generic_pipe_buf_nosteal+0x10/0x10 [ 61.813780] ? kasan_check_write+0x14/0x20 [ 61.818165] ? anon_pipe_buf_release+0x149/0x1f0 [ 61.822892] __splice_from_pipe+0x2cb/0x720 [ 61.827188] ? generic_pipe_buf_nosteal+0x10/0x10 [ 61.832001] ? generic_pipe_buf_nosteal+0x10/0x10 [ 61.836814] splice_from_pipe+0xbb/0x120 [ 61.840846] ? splice_shrink_spd+0xa0/0xa0 [ 61.845058] ? rw_verify_area+0xb8/0x2b0 [ 61.849092] generic_splice_sendpage+0x10/0x20 [ 61.853654] do_splice+0x4fd/0x12d0 [ 61.857252] ? ksys_dup3+0x2e0/0x2e0 [ 61.860938] ? opipe_prep.part.13+0x320/0x320 [ 61.865406] ? __fget_light+0x174/0x1e0 [ 61.869353] __x64_sys_splice+0x248/0x300 [ 61.873472] do_syscall_64+0xd0/0x4e0 [ 61.877244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 61.882403] RIP: 0033:0x4592c9 [ 61.885570] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 61.904529] RSP: 002b:00007ff9bb2b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 61.912207] RAX: ffffffffffffffda RBX: 00007ff9bb2b7c90 RCX: 00000000004592c9 [ 61.919449] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.926690] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 61.933932] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9bb2b86d4 [ 61.941186] R13: 00000000004c87fb R14: 00000000004de630 R15: 0000000000000005 [ 61.949576] Kernel Offset: disabled [ 61.953190] Rebooting in 86400 seconds..