[ 31.513002][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.527465][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.535728][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 31.627159][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.140062][ T3620] can: request_module (can-proto-0) failed. [ 32.155463][ T3620] can: request_module (can-proto-0) failed. [ 32.170556][ T3620] can: request_module (can-proto-0) failed. [ 34.039961][ T26] audit: type=1804 audit(1650138045.809:2): pid=3705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="scp" name="/root/syz-executor" dev="sda1" ino=1135 res=1 errno=0 [ 34.365535][ T3628] syz-executor.0 (3628) used greatest stack depth: 22664 bytes left [ 34.497557][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.017839][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.068397][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.825085][ T11] device hsr_slave_0 left promiscuous mode [ 37.831272][ T11] device hsr_slave_1 left promiscuous mode [ 37.837968][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.845444][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.853570][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.860976][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.869480][ T11] device bridge_slave_1 left promiscuous mode [ 37.876389][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.886535][ T11] device bridge_slave_0 left promiscuous mode [ 37.892625][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.904903][ T11] device veth1_macvtap left promiscuous mode [ 37.910938][ T11] device veth0_macvtap left promiscuous mode [ 37.917089][ T11] device veth1_vlan left promiscuous mode [ 37.922902][ T11] device veth0_vlan left promiscuous mode [ 38.012317][ T11] team0 (unregistering): Port device team_slave_1 removed [ 38.025468][ T11] team0 (unregistering): Port device team_slave_0 removed [ 38.036167][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.047938][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.082580][ T11] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. 2022/04/16 19:40:51 parsed 1 programs 2022/04/16 19:40:52 executed programs: 0 [ 41.354020][ T3935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.354815][ T3936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.361806][ T3935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 41.368517][ T3936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 41.375885][ T3935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.383181][ T3937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.389925][ T3935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.396772][ T3937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 41.403866][ T3935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.410530][ T3937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.424590][ T3935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.424937][ T3937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 41.431681][ T3935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.438722][ T3937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 41.445820][ T3935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.459800][ T3938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 41.460116][ T3935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.467862][ T3938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 41.473967][ T3935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.480618][ T3937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 41.487663][ T3935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.495817][ T3939] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 41.501756][ T3935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.509116][ T3939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 41.515698][ T3935] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 41.529430][ T3936] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 41.537440][ T3936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.544472][ T3937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 41.551712][ T3938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 41.561305][ T3938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.647442][ T3920] chnl_net:caif_netlink_parms(): no params data found [ 41.701194][ T3920] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.708425][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.716018][ T3920] device bridge_slave_0 entered promiscuous mode [ 41.745456][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.752572][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.760406][ T3920] device bridge_slave_1 entered promiscuous mode [ 41.775646][ T3918] chnl_net:caif_netlink_parms(): no params data found [ 41.811795][ T3920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.822387][ T3920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.869403][ T3920] team0: Port device team_slave_0 added [ 41.876820][ T3920] team0: Port device team_slave_1 added [ 41.882479][ T3921] chnl_net:caif_netlink_parms(): no params data found [ 41.916571][ T3925] chnl_net:caif_netlink_parms(): no params data found [ 41.933435][ T3920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.940453][ T3920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.966467][ T3920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.991290][ T3920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.998286][ T3920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.024929][ T3920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.039608][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.048831][ T3918] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.056474][ T3918] device bridge_slave_0 entered promiscuous mode [ 42.087723][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.094933][ T3918] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.102285][ T3918] device bridge_slave_1 entered promiscuous mode [ 42.112542][ T3923] chnl_net:caif_netlink_parms(): no params data found [ 42.123143][ T3920] device hsr_slave_0 entered promiscuous mode [ 42.129748][ T3920] device hsr_slave_1 entered promiscuous mode [ 42.152143][ T3918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.166719][ T3918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.209586][ T3921] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.216659][ T3921] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.224266][ T3921] device bridge_slave_0 entered promiscuous mode [ 42.238456][ T3918] team0: Port device team_slave_0 added [ 42.247145][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.254506][ T3925] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.261917][ T3925] device bridge_slave_0 entered promiscuous mode [ 42.274194][ T3921] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.281191][ T3921] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.288968][ T3921] device bridge_slave_1 entered promiscuous mode [ 42.300766][ T3918] team0: Port device team_slave_1 added [ 42.306683][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.313686][ T3925] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.321256][ T3925] device bridge_slave_1 entered promiscuous mode [ 42.361837][ T3921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.381860][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.389016][ T3923] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.396782][ T3923] device bridge_slave_0 entered promiscuous mode [ 42.405649][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.412656][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.420124][ T3923] device bridge_slave_1 entered promiscuous mode [ 42.427998][ T3921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.441219][ T3918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.448414][ T3918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.475105][ T3918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.487368][ T3925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.505066][ T3925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.519166][ T3918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.526314][ T3918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.552734][ T3918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.586006][ T3923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.604115][ T3918] device hsr_slave_0 entered promiscuous mode [ 42.610630][ T3918] device hsr_slave_1 entered promiscuous mode [ 42.619699][ T3918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.627536][ T3918] Cannot create hsr debugfs directory [ 42.634417][ T3921] team0: Port device team_slave_0 added [ 42.646896][ T3925] team0: Port device team_slave_0 added [ 42.654616][ T3923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.668580][ T3925] team0: Port device team_slave_1 added [ 42.679818][ T3921] team0: Port device team_slave_1 added [ 42.706693][ T3923] team0: Port device team_slave_0 added [ 42.732295][ T3923] team0: Port device team_slave_1 added [ 42.740359][ T3925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.747717][ T3925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.773971][ T3925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.787590][ T3921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.795118][ T3921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.821259][ T3921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.839216][ T3925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.846245][ T3925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.872122][ T3925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.890203][ T3921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.897176][ T3921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.923051][ T3921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.953946][ T3921] device hsr_slave_0 entered promiscuous mode [ 42.960498][ T3921] device hsr_slave_1 entered promiscuous mode [ 42.967642][ T3921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.975478][ T3921] Cannot create hsr debugfs directory [ 42.981096][ T3923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.988206][ T3923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.014404][ T3923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.055796][ T3923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.062833][ T3923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.089166][ T3923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.122985][ T3925] device hsr_slave_0 entered promiscuous mode [ 43.130425][ T3925] device hsr_slave_1 entered promiscuous mode [ 43.136964][ T3925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.144890][ T3925] Cannot create hsr debugfs directory [ 43.209686][ T3923] device hsr_slave_0 entered promiscuous mode [ 43.216439][ T3923] device hsr_slave_1 entered promiscuous mode [ 43.222695][ T3923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.230306][ T3923] Cannot create hsr debugfs directory [ 43.267385][ T3920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.291308][ T3918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.300239][ T3918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.320122][ T3920] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.329499][ T3918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.346271][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.353721][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.376134][ T3918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.394701][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.403044][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.412301][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.419342][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.423899][ T3633] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 43.427055][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.440896][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.459423][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.466486][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.473913][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.482121][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.492467][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.511814][ T3921] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.522094][ T3921] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.541130][ T3920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.551683][ T3920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.563379][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.572616][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.581595][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.584286][ T3651] Bluetooth: hci3: command 0x0409 tx timeout [ 43.590390][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.599309][ T3651] Bluetooth: hci5: command 0x0409 tx timeout [ 43.603732][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.617505][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.625724][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.633701][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.641976][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.649447][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.656940][ T142] Bluetooth: hci4: command 0x0409 tx timeout [ 43.660356][ T3921] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.670868][ T140] Bluetooth: hci0: command 0x0409 tx timeout [ 43.677054][ T140] Bluetooth: hci2: command 0x0409 tx timeout [ 43.712742][ T3920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.725700][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.733058][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.760877][ T3921] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.788332][ T3925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.808963][ T3925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.841139][ T3925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.858634][ T3918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.870726][ T3923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.882963][ T3925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.896624][ T3923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.932546][ T3918] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.949387][ T3923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.957246][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.965792][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.006769][ T3923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.017969][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.028174][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.036493][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.043506][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.051173][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.059526][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.067824][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.075069][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.082450][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.090700][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.098930][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.107262][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.121512][ T3918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.132104][ T3918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.158560][ T3920] device veth0_vlan entered promiscuous mode [ 44.166911][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.175070][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.182458][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.191129][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.199329][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.207526][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.216637][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.225092][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.233342][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.241569][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.249630][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.257585][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.276826][ T3921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.289718][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.297516][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.306090][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.318508][ T3925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.334110][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.341534][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.352097][ T3920] device veth1_vlan entered promiscuous mode [ 44.364767][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.372848][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.381160][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.389086][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.398158][ T3921] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.410697][ T3925] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.417985][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.427028][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.449599][ T3920] device veth0_macvtap entered promiscuous mode [ 44.461129][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.470893][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.479768][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.486843][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.495146][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.503508][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.511892][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.518936][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.526414][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.535563][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.543720][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.552132][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.560555][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.568916][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.577015][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.585255][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.593319][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.601769][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.610154][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.617208][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.632031][ T3921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.645708][ T3921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.659738][ T3918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.668018][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.675781][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.683155][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.691108][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.698833][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.706997][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.715435][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.723418][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.731454][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.739760][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.748083][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.755124][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.762858][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.774756][ T3920] device veth1_macvtap entered promiscuous mode [ 44.802329][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.811001][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.820286][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.829879][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.838568][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.847095][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.855301][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.863280][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.872195][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.885396][ T3923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.912047][ T3923] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.920182][ T3920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.932100][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.941179][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.949435][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.957163][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.964647][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.972632][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.980635][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.989014][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.998375][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.011330][ T3921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.033198][ T3920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.043180][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.051968][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.061224][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.068273][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.075852][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.084509][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.092662][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.099711][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.108115][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.116693][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.124949][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.133195][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.142010][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.150466][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.170095][ T3923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.184196][ T3923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.205133][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.212864][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.223009][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.231844][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.241551][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.249771][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.257985][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.266376][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.274530][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.281891][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.290260][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.333606][ T3925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.341690][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.351480][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.370036][ T3923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.382199][ T3918] device veth0_vlan entered promiscuous mode [ 45.393774][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.414843][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.422318][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.431804][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.450453][ T3918] device veth1_vlan entered promiscuous mode [ 45.463440][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.471867][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.480300][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.527182][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.535639][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.545570][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.554024][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.563740][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.572717][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.581216][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.593469][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.594756][ T3918] device veth0_macvtap entered promiscuous mode [ 45.609450][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.612492][ T3921] device veth0_vlan entered promiscuous mode [ 45.640810][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.655599][ T3963] Bluetooth: hci5: command 0x041b tx timeout [ 45.659997][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.665905][ T3963] Bluetooth: hci3: command 0x041b tx timeout [ 45.675212][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.685072][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.694198][ T3918] device veth1_macvtap entered promiscuous mode [ 45.703123][ T3921] device veth1_vlan entered promiscuous mode [ 45.717774][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.733911][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.744290][ T140] Bluetooth: hci2: command 0x041b tx timeout [ 45.751770][ T140] Bluetooth: hci0: command 0x041b tx timeout [ 45.764185][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.771841][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.780953][ T140] Bluetooth: hci4: command 0x041b tx timeout [ 45.798630][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.806744][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.818511][ T3918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 45.830084][ T3918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.841016][ T3918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.850976][ T3921] device veth0_macvtap entered promiscuous mode [ 45.859541][ T3921] device veth1_macvtap entered promiscuous mode [ 45.874244][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.887539][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.892115][ T4019] FAULT_INJECTION: forcing a failure. [ 45.892115][ T4019] name failslab, interval 1, probability 0, space 0, times 1 [ 45.914900][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.915232][ T4019] CPU: 0 PID: 4019 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 45.923040][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.931398][ T4019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.931402][ T4019] Call Trace: [ 45.931405][ T4019] [ 45.931409][ T4019] dump_stack_lvl+0x57/0x7d [ 45.931420][ T4019] should_fail.cold+0x5/0xa [ 45.931430][ T4019] ? memcg_alloc_slab_cgroups+0x8b/0x140 [ 45.954104][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.955450][ T4019] should_failslab+0x5/0x10 [ 45.960916][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.964381][ T4019] __kmalloc_node+0x75/0x390 [ 45.964393][ T4019] memcg_alloc_slab_cgroups+0x8b/0x140 [ 45.964402][ T4019] memcg_slab_post_alloc_hook+0xaa/0x480 [ 46.004747][ T4019] __kmalloc_node_track_caller+0x1a7/0x360 [ 46.010517][ T4019] ? alloc_skb_with_frags+0x72/0x700 [ 46.015769][ T4019] __alloc_skb+0x8a/0x270 [ 46.020065][ T4019] alloc_skb_with_frags+0x72/0x700 [ 46.025140][ T4019] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.031088][ T4019] sock_alloc_send_pskb+0x636/0x7c0 [ 46.036255][ T4019] ? sock_wmalloc+0xe0/0xe0 [ 46.040721][ T4019] ? lock_downgrade+0x6e0/0x6e0 [ 46.045535][ T4019] ? do_raw_spin_lock+0x120/0x2a0 [ 46.050520][ T4019] ? rwlock_bug.part.0+0x90/0x90 [ 46.055424][ T4019] unix_dgram_sendmsg+0x35a/0x1770 [ 46.060506][ T4019] ? aa_sk_perm+0x1ab/0x820 [ 46.064971][ T4019] ? unix_stream_sendpage+0xa50/0xa50 [ 46.070303][ T4019] ? aa_af_perm+0x210/0x210 [ 46.074774][ T4019] ? unix_stream_sendpage+0xa50/0xa50 [ 46.080110][ T4019] sock_sendmsg+0xab/0xe0 [ 46.084577][ T4019] ____sys_sendmsg+0x38c/0x7a0 [ 46.089302][ T4019] ? kernel_sendmsg+0x30/0x30 [ 46.093938][ T4019] ? do_recvmmsg+0x550/0x550 [ 46.098489][ T4019] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.104451][ T4019] ___sys_sendmsg+0xd3/0x150 [ 46.109162][ T4019] ? sendmsg_copy_msghdr+0x110/0x110 [ 46.114415][ T4019] ? __fget_files+0x1b9/0x3c0 [ 46.119058][ T4019] ? lock_downgrade+0x6e0/0x6e0 [ 46.123882][ T4019] ? __fget_files+0x1d1/0x3c0 [ 46.128529][ T4019] ? __fget_light+0xbe/0x220 [ 46.133090][ T4019] __sys_sendmmsg+0x141/0x310 [ 46.137735][ T4019] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 46.142722][ T4019] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.148682][ T4019] ? find_held_lock+0x2d/0x110 [ 46.153417][ T4019] ? __context_tracking_exit+0x80/0x90 [ 46.158844][ T4019] ? lock_downgrade+0x6e0/0x6e0 [ 46.163659][ T4019] ? lock_downgrade+0x6e0/0x6e0 [ 46.168482][ T4019] __x64_sys_sendmmsg+0x94/0x100 [ 46.173383][ T4019] ? syscall_enter_from_user_mode+0x21/0x70 [ 46.179240][ T4019] do_syscall_64+0x35/0x80 [ 46.183620][ T4019] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.189476][ T4019] RIP: 0033:0x7f4ed14878d9 [ 46.193860][ T4019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 46.213519][ T4019] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.221899][ T4019] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 46.229835][ T4019] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 46.237774][ T4019] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 46.245713][ T4019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.253650][ T4019] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 46.261594][ T4019] [ 46.275562][ T3918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 2022/04/16 19:40:58 executed programs: 6 [ 46.302921][ T3918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.319049][ T3918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.352323][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.361959][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.365562][ T4023] FAULT_INJECTION: forcing a failure. [ 46.365562][ T4023] name failslab, interval 1, probability 0, space 0, times 0 [ 46.386024][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.398620][ T4023] CPU: 1 PID: 4023 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 46.401170][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.407272][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.407277][ T4023] Call Trace: [ 46.407281][ T4023] [ 46.407285][ T4023] dump_stack_lvl+0x57/0x7d [ 46.407296][ T4023] should_fail.cold+0x5/0xa [ 46.407304][ T4023] ? skb_clone+0x125/0x300 [ 46.407311][ T4023] should_failslab+0x5/0x10 [ 46.407318][ T4023] kmem_cache_alloc+0x5e/0x3b0 [ 46.407324][ T4023] ? wait_for_completion_io_timeout+0x20/0x20 [ 46.407333][ T4023] skb_clone+0x125/0x300 [ 46.407340][ T4023] sk_psock_verdict_recv+0x48/0x610 [ 46.407350][ T4023] unix_read_sock+0xc4/0x1e0 [ 46.407357][ T4023] ? sk_psock_strp_parse+0x330/0x330 [ 46.407364][ T4023] ? unix_compat_ioctl+0x10/0x10 [ 46.407370][ T4023] ? find_held_lock+0x2d/0x110 [ 46.407381][ T4023] sk_psock_verdict_data_ready+0xf8/0x150 [ 46.407388][ T4023] ? sk_psock_strp_read_done+0x10/0x10 [ 46.407395][ T4023] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 46.407402][ T4023] ? do_raw_spin_unlock+0x171/0x230 [ 46.407410][ T4023] unix_dgram_sendmsg+0xca6/0x1770 [ 46.407427][ T4023] ? unix_stream_sendpage+0xa50/0xa50 [ 46.407433][ T4023] ? aa_af_perm+0x210/0x210 [ 46.407447][ T4023] ? unix_stream_sendpage+0xa50/0xa50 [ 46.407455][ T4023] sock_sendmsg+0xab/0xe0 [ 46.407464][ T4023] ____sys_sendmsg+0x38c/0x7a0 [ 46.407472][ T4023] ? kernel_sendmsg+0x30/0x30 [ 46.407478][ T4023] ? do_recvmmsg+0x550/0x550 [ 46.407484][ T4023] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.407495][ T4023] ___sys_sendmsg+0xd3/0x150 [ 46.427433][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.430531][ T4023] ? sendmsg_copy_msghdr+0x110/0x110 [ 46.430543][ T4023] ? __fget_files+0x1b9/0x3c0 [ 46.430551][ T4023] ? lock_downgrade+0x6e0/0x6e0 [ 46.433543][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.437955][ T4023] ? __fget_files+0x1d1/0x3c0 [ 46.437972][ T4023] ? __fget_light+0xbe/0x220 [ 46.437981][ T4023] __sys_sendmmsg+0x141/0x310 [ 46.437993][ T4023] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 46.437999][ T4023] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.438006][ T4023] ? find_held_lock+0x2d/0x110 [ 46.438019][ T4023] ? __context_tracking_exit+0x80/0x90 [ 46.438026][ T4023] ? lock_downgrade+0x6e0/0x6e0 [ 46.438033][ T4023] ? lock_downgrade+0x6e0/0x6e0 [ 46.438046][ T4023] __x64_sys_sendmmsg+0x94/0x100 [ 46.438051][ T4023] ? syscall_enter_from_user_mode+0x21/0x70 [ 46.438057][ T4023] do_syscall_64+0x35/0x80 [ 46.438062][ T4023] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.445415][ T3921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.446905][ T4023] RIP: 0033:0x7f4ed14878d9 [ 46.446913][ T4023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 46.446918][ T4023] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.446926][ T4023] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 46.446930][ T4023] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 46.466357][ T3918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.471516][ T4023] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 46.476992][ T3918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.481311][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.481315][ T4023] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 46.481329][ T4023] [ 46.767805][ T3918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.777236][ T3918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.778157][ T4028] FAULT_INJECTION: forcing a failure. [ 46.778157][ T4028] name failslab, interval 1, probability 0, space 0, times 0 [ 46.799107][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.807389][ T4028] CPU: 0 PID: 4028 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 46.808729][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.816035][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.816040][ T4028] Call Trace: [ 46.816043][ T4028] [ 46.816047][ T4028] dump_stack_lvl+0x57/0x7d [ 46.816058][ T4028] should_fail.cold+0x5/0xa [ 46.816068][ T4028] ? skb_clone+0x125/0x300 [ 46.816075][ T4028] should_failslab+0x5/0x10 [ 46.816082][ T4028] kmem_cache_alloc+0x5e/0x3b0 [ 46.824691][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.834124][ T4028] ? wait_for_completion_io_timeout+0x20/0x20 [ 46.834136][ T4028] skb_clone+0x125/0x300 [ 46.834144][ T4028] sk_psock_verdict_recv+0x48/0x610 [ 46.834155][ T4028] unix_read_sock+0xc4/0x1e0 [ 46.837737][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.840307][ T4028] ? sk_psock_strp_parse+0x330/0x330 [ 46.840316][ T4028] ? unix_compat_ioctl+0x10/0x10 [ 46.840322][ T4028] ? find_held_lock+0x2d/0x110 [ 46.840334][ T4028] sk_psock_verdict_data_ready+0xf8/0x150 [ 46.851713][ T3923] device veth0_vlan entered promiscuous mode [ 46.853640][ T4028] ? sk_psock_strp_read_done+0x10/0x10 [ 46.878952][ T3925] device veth0_vlan entered promiscuous mode [ 46.881197][ T4028] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 46.881209][ T4028] ? do_raw_spin_unlock+0x171/0x230 [ 46.881217][ T4028] unix_dgram_sendmsg+0xca6/0x1770 [ 46.890086][ T3925] device veth1_vlan entered promiscuous mode [ 46.890940][ T4028] ? unix_stream_sendpage+0xa50/0xa50 [ 46.890948][ T4028] ? aa_af_perm+0x210/0x210 [ 46.890961][ T4028] ? unix_stream_sendpage+0xa50/0xa50 [ 46.912763][ T3925] device veth0_macvtap entered promiscuous mode [ 46.913851][ T4028] sock_sendmsg+0xab/0xe0 [ 46.913861][ T4028] ____sys_sendmsg+0x38c/0x7a0 [ 46.913869][ T4028] ? kernel_sendmsg+0x30/0x30 [ 46.921476][ T3925] device veth1_macvtap entered promiscuous mode [ 46.925487][ T4028] ? do_recvmmsg+0x550/0x550 [ 46.925496][ T4028] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.925510][ T4028] ___sys_sendmsg+0xd3/0x150 [ 46.925518][ T4028] ? sendmsg_copy_msghdr+0x110/0x110 [ 46.937136][ T3925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.942820][ T4028] ? __fget_files+0x1b9/0x3c0 [ 46.942830][ T4028] ? lock_downgrade+0x6e0/0x6e0 [ 46.942843][ T4028] ? __fget_files+0x1d1/0x3c0 [ 46.948279][ T3925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.953071][ T4028] ? __fget_light+0xbe/0x220 [ 46.953083][ T4028] __sys_sendmmsg+0x141/0x310 [ 46.953093][ T4028] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 46.962114][ T3925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.964362][ T4028] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 46.964370][ T4028] ? find_held_lock+0x2d/0x110 [ 46.964384][ T4028] ? __context_tracking_exit+0x80/0x90 [ 46.964392][ T4028] ? lock_downgrade+0x6e0/0x6e0 [ 46.964400][ T4028] ? lock_downgrade+0x6e0/0x6e0 [ 46.969161][ T3925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.974206][ T4028] __x64_sys_sendmmsg+0x94/0x100 [ 46.974215][ T4028] ? syscall_enter_from_user_mode+0x21/0x70 [ 46.974221][ T4028] do_syscall_64+0x35/0x80 [ 46.974228][ T4028] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 46.974234][ T4028] RIP: 0033:0x7f4ed14878d9 [ 46.974241][ T4028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 46.974245][ T4028] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.974253][ T4028] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 46.974256][ T4028] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 46.974259][ T4028] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 46.974263][ T4028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.974266][ T4028] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 46.974279][ T4028] [ 47.073601][ T4030] FAULT_INJECTION: forcing a failure. [ 47.073601][ T4030] name failslab, interval 1, probability 0, space 0, times 0 [ 47.083619][ T3925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 47.099945][ T4030] CPU: 0 PID: 4030 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 47.101521][ T3925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.106127][ T4030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.106132][ T4030] Call Trace: [ 47.106135][ T4030] [ 47.106139][ T4030] dump_stack_lvl+0x57/0x7d [ 47.106150][ T4030] should_fail.cold+0x5/0xa [ 47.106161][ T4030] ? skb_clone+0x125/0x300 [ 47.106170][ T4030] should_failslab+0x5/0x10 [ 47.106176][ T4030] kmem_cache_alloc+0x5e/0x3b0 [ 47.117230][ T3925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.120836][ T4030] ? wait_for_completion_io_timeout+0x20/0x20 [ 47.120848][ T4030] skb_clone+0x125/0x300 [ 47.120856][ T4030] sk_psock_verdict_recv+0x48/0x610 [ 47.120866][ T4030] unix_read_sock+0xc4/0x1e0 [ 47.127840][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.131092][ T4030] ? sk_psock_strp_parse+0x330/0x330 [ 47.137799][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.141324][ T4030] ? unix_compat_ioctl+0x10/0x10 [ 47.141331][ T4030] ? find_held_lock+0x2d/0x110 [ 47.141343][ T4030] sk_psock_verdict_data_ready+0xf8/0x150 [ 47.141349][ T4030] ? sk_psock_strp_read_done+0x10/0x10 [ 47.161134][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.169291][ T4030] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 47.169300][ T4030] ? do_raw_spin_unlock+0x171/0x230 [ 47.169307][ T4030] unix_dgram_sendmsg+0xca6/0x1770 [ 47.169322][ T4030] ? unix_stream_sendpage+0xa50/0xa50 [ 47.177695][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.185282][ T4030] ? aa_af_perm+0x210/0x210 [ 47.185297][ T4030] ? unix_stream_sendpage+0xa50/0xa50 [ 47.185305][ T4030] sock_sendmsg+0xab/0xe0 [ 47.185313][ T4030] ____sys_sendmsg+0x38c/0x7a0 [ 47.194021][ T3921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.201189][ T4030] ? kernel_sendmsg+0x30/0x30 [ 47.201197][ T4030] ? do_recvmmsg+0x550/0x550 [ 47.201203][ T4030] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 47.201216][ T4030] ___sys_sendmsg+0xd3/0x150 [ 47.212133][ T3921] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.224679][ T4030] ? sendmsg_copy_msghdr+0x110/0x110 [ 47.224690][ T4030] ? __fget_files+0x1b9/0x3c0 [ 47.224698][ T4030] ? lock_downgrade+0x6e0/0x6e0 [ 47.224711][ T4030] ? __fget_files+0x1d1/0x3c0 [ 47.235128][ T3921] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.243714][ T4030] ? __fget_light+0xbe/0x220 [ 47.243725][ T4030] __sys_sendmmsg+0x141/0x310 [ 47.243734][ T4030] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 47.253531][ T3921] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.263506][ T4030] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 47.263513][ T4030] ? find_held_lock+0x2d/0x110 [ 47.263527][ T4030] ? __context_tracking_exit+0x80/0x90 [ 47.263534][ T4030] ? lock_downgrade+0x6e0/0x6e0 [ 47.267467][ T3921] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.269685][ T4030] ? lock_downgrade+0x6e0/0x6e0 [ 47.269702][ T4030] __x64_sys_sendmmsg+0x94/0x100 [ 47.269709][ T4030] ? syscall_enter_from_user_mode+0x21/0x70 [ 47.557265][ T4030] do_syscall_64+0x35/0x80 [ 47.561653][ T4030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.567514][ T4030] RIP: 0033:0x7f4ed14878d9 [ 47.571894][ T4030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 47.591468][ T4030] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 47.599936][ T4030] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 47.607878][ T4030] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 47.615820][ T4030] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 47.623759][ T4030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.631700][ T4030] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 47.639647][ T4030] [ 47.659919][ T3633] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 47.669911][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.682409][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.692449][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.701235][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.710942][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.719452][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.730234][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.738393][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.745717][ T4032] FAULT_INJECTION: forcing a failure. [ 47.745717][ T4032] name failslab, interval 1, probability 0, space 0, times 0 [ 47.746588][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.762834][ T4032] CPU: 0 PID: 4032 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 47.767619][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.775041][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.775046][ T4032] Call Trace: [ 47.775049][ T4032] [ 47.775053][ T4032] dump_stack_lvl+0x57/0x7d [ 47.775063][ T4032] should_fail.cold+0x5/0xa [ 47.775071][ T4032] ? skb_clone+0x125/0x300 [ 47.775078][ T4032] should_failslab+0x5/0x10 [ 47.783309][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.793041][ T4032] kmem_cache_alloc+0x5e/0x3b0 [ 47.793049][ T4032] ? wait_for_completion_io_timeout+0x20/0x20 [ 47.793059][ T4032] skb_clone+0x125/0x300 [ 47.793067][ T4032] sk_psock_verdict_recv+0x48/0x610 [ 47.793076][ T4032] unix_read_sock+0xc4/0x1e0 [ 47.793082][ T4032] ? sk_psock_strp_parse+0x330/0x330 [ 47.793089][ T4032] ? unix_compat_ioctl+0x10/0x10 [ 47.793094][ T4032] ? find_held_lock+0x2d/0x110 [ 47.793105][ T4032] sk_psock_verdict_data_ready+0xf8/0x150 [ 47.793111][ T4032] ? sk_psock_strp_read_done+0x10/0x10 [ 47.793119][ T4032] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 47.793126][ T4032] ? do_raw_spin_unlock+0x171/0x230 [ 47.793134][ T4032] unix_dgram_sendmsg+0xca6/0x1770 [ 47.793148][ T4032] ? unix_stream_sendpage+0xa50/0xa50 [ 47.793154][ T4032] ? aa_af_perm+0x210/0x210 [ 47.793174][ T4032] ? unix_stream_sendpage+0xa50/0xa50 [ 47.793182][ T4032] sock_sendmsg+0xab/0xe0 [ 47.798270][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.799336][ T4032] ____sys_sendmsg+0x38c/0x7a0 [ 47.804258][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.808265][ T4032] ? kernel_sendmsg+0x30/0x30 [ 47.812869][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.817106][ T4032] ? do_recvmmsg+0x550/0x550 [ 47.817113][ T4032] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 47.817125][ T4032] ___sys_sendmsg+0xd3/0x150 [ 47.817133][ T4032] ? sendmsg_copy_msghdr+0x110/0x110 [ 47.817141][ T4032] ? __fget_files+0x1b9/0x3c0 [ 47.817148][ T4032] ? lock_downgrade+0x6e0/0x6e0 [ 47.817166][ T4032] ? __fget_files+0x1d1/0x3c0 [ 47.817177][ T4032] ? __fget_light+0xbe/0x220 [ 47.817187][ T4032] __sys_sendmmsg+0x141/0x310 [ 47.817195][ T4032] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 47.817202][ T4032] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 47.817207][ T4032] ? find_held_lock+0x2d/0x110 [ 47.817222][ T4032] ? __context_tracking_exit+0x80/0x90 [ 47.817229][ T4032] ? lock_downgrade+0x6e0/0x6e0 [ 47.817237][ T4032] ? lock_downgrade+0x6e0/0x6e0 [ 47.817253][ T4032] __x64_sys_sendmmsg+0x94/0x100 [ 47.817259][ T4032] ? syscall_enter_from_user_mode+0x21/0x70 [ 47.817265][ T4032] do_syscall_64+0x35/0x80 [ 47.817272][ T4032] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.817278][ T4032] RIP: 0033:0x7f4ed14878d9 [ 47.817285][ T4032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 47.817291][ T4032] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 47.817298][ T4032] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 47.817302][ T4032] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 47.817305][ T4032] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 47.817309][ T4032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.817312][ T4032] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 47.817325][ T4032] [ 47.911778][ T4034] FAULT_INJECTION: forcing a failure. [ 47.911778][ T4034] name failslab, interval 1, probability 0, space 0, times 0 [ 47.912576][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.920323][ T4034] CPU: 0 PID: 4034 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 47.930322][ T3923] device veth1_vlan entered promiscuous mode [ 47.932807][ T4034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.942846][ T3963] Bluetooth: hci3: command 0x040f tx timeout [ 47.945385][ T4034] Call Trace: [ 47.945388][ T4034] [ 47.945392][ T4034] dump_stack_lvl+0x57/0x7d [ 47.945403][ T4034] should_fail.cold+0x5/0xa [ 47.945411][ T4034] ? skb_clone+0x125/0x300 [ 47.951310][ T3925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.955896][ T4034] should_failslab+0x5/0x10 [ 47.955905][ T4034] kmem_cache_alloc+0x5e/0x3b0 [ 47.955910][ T4034] ? wait_for_completion_io_timeout+0x20/0x20 [ 47.955920][ T4034] skb_clone+0x125/0x300 [ 47.960515][ T3963] Bluetooth: hci5: command 0x040f tx timeout [ 47.965721][ T4034] sk_psock_verdict_recv+0x48/0x610 [ 47.965733][ T4034] unix_read_sock+0xc4/0x1e0 [ 47.965739][ T4034] ? sk_psock_strp_parse+0x330/0x330 [ 47.970684][ T3925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.975186][ T4034] ? unix_compat_ioctl+0x10/0x10 [ 47.975193][ T4034] ? find_held_lock+0x2d/0x110 [ 47.975204][ T4034] sk_psock_verdict_data_ready+0xf8/0x150 [ 47.975210][ T4034] ? sk_psock_strp_read_done+0x10/0x10 [ 47.975217][ T4034] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 47.975223][ T4034] ? do_raw_spin_unlock+0x171/0x230 [ 47.975231][ T4034] unix_dgram_sendmsg+0xca6/0x1770 [ 47.975245][ T4034] ? unix_stream_sendpage+0xa50/0xa50 [ 47.975251][ T4034] ? aa_af_perm+0x210/0x210 [ 47.975265][ T4034] ? unix_stream_sendpage+0xa50/0xa50 [ 47.975273][ T4034] sock_sendmsg+0xab/0xe0 [ 47.975281][ T4034] ____sys_sendmsg+0x38c/0x7a0 [ 47.975289][ T4034] ? kernel_sendmsg+0x30/0x30 [ 47.975294][ T4034] ? do_recvmmsg+0x550/0x550 [ 47.975301][ T4034] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 47.975314][ T4034] ___sys_sendmsg+0xd3/0x150 [ 47.975321][ T4034] ? sendmsg_copy_msghdr+0x110/0x110 [ 47.975330][ T4034] ? __fget_files+0x1b9/0x3c0 [ 47.975338][ T4034] ? lock_downgrade+0x6e0/0x6e0 [ 47.975352][ T4034] ? __fget_files+0x1d1/0x3c0 [ 47.975363][ T4034] ? __fget_light+0xbe/0x220 [ 47.975373][ T4034] __sys_sendmmsg+0x141/0x310 [ 47.975382][ T4034] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 47.975388][ T4034] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 47.975393][ T4034] ? find_held_lock+0x2d/0x110 [ 47.975406][ T4034] ? __context_tracking_exit+0x80/0x90 [ 47.975413][ T4034] ? lock_downgrade+0x6e0/0x6e0 [ 47.975421][ T4034] ? lock_downgrade+0x6e0/0x6e0 [ 47.975436][ T4034] __x64_sys_sendmmsg+0x94/0x100 [ 47.975442][ T4034] ? syscall_enter_from_user_mode+0x21/0x70 [ 47.975448][ T4034] do_syscall_64+0x35/0x80 [ 47.975455][ T4034] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 47.975461][ T4034] RIP: 0033:0x7f4ed14878d9 [ 47.975468][ T4034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 47.975473][ T4034] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 47.975483][ T4034] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 47.975487][ T4034] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 47.975492][ T4034] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 47.975496][ T4034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.975500][ T4034] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 47.975514][ T4034] [ 48.190073][ T4036] FAULT_INJECTION: forcing a failure. [ 48.190073][ T4036] name failslab, interval 1, probability 0, space 0, times 0 [ 48.198727][ T3963] Bluetooth: hci4: command 0x040f tx timeout [ 48.227583][ T4036] CPU: 0 PID: 4036 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 48.229570][ T3963] Bluetooth: hci0: command 0x040f tx timeout [ 48.234036][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.234040][ T4036] Call Trace: [ 48.234044][ T4036] [ 48.234047][ T4036] dump_stack_lvl+0x57/0x7d [ 48.234057][ T4036] should_fail.cold+0x5/0xa [ 48.234067][ T4036] ? skb_clone+0x125/0x300 [ 48.234075][ T4036] should_failslab+0x5/0x10 [ 48.239555][ T3963] Bluetooth: hci2: command 0x040f tx timeout [ 48.249606][ T4036] kmem_cache_alloc+0x5e/0x3b0 [ 48.249614][ T4036] ? wait_for_completion_io_timeout+0x20/0x20 [ 48.249624][ T4036] skb_clone+0x125/0x300 [ 48.249632][ T4036] sk_psock_verdict_recv+0x48/0x610 [ 48.580289][ T4036] unix_read_sock+0xc4/0x1e0 [ 48.584850][ T4036] ? sk_psock_strp_parse+0x330/0x330 [ 48.590101][ T4036] ? unix_compat_ioctl+0x10/0x10 [ 48.594999][ T4036] ? find_held_lock+0x2d/0x110 [ 48.599730][ T4036] sk_psock_verdict_data_ready+0xf8/0x150 [ 48.605504][ T4036] ? sk_psock_strp_read_done+0x10/0x10 [ 48.610927][ T4036] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 48.616871][ T4036] ? do_raw_spin_unlock+0x171/0x230 [ 48.622032][ T4036] unix_dgram_sendmsg+0xca6/0x1770 [ 48.627116][ T4036] ? unix_stream_sendpage+0xa50/0xa50 [ 48.632448][ T4036] ? aa_af_perm+0x210/0x210 [ 48.636923][ T4036] ? unix_stream_sendpage+0xa50/0xa50 [ 48.642257][ T4036] sock_sendmsg+0xab/0xe0 [ 48.646837][ T4036] ____sys_sendmsg+0x38c/0x7a0 [ 48.651565][ T4036] ? kernel_sendmsg+0x30/0x30 [ 48.656207][ T4036] ? do_recvmmsg+0x550/0x550 [ 48.660762][ T4036] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 48.666713][ T4036] ___sys_sendmsg+0xd3/0x150 [ 48.671268][ T4036] ? sendmsg_copy_msghdr+0x110/0x110 [ 48.676519][ T4036] ? __fget_files+0x1b9/0x3c0 [ 48.681163][ T4036] ? lock_downgrade+0x6e0/0x6e0 [ 48.685981][ T4036] ? __fget_files+0x1d1/0x3c0 [ 48.690623][ T4036] ? __fget_light+0xbe/0x220 [ 48.695178][ T4036] __sys_sendmmsg+0x141/0x310 [ 48.699821][ T4036] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 48.704806][ T4036] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 48.710748][ T4036] ? find_held_lock+0x2d/0x110 [ 48.715480][ T4036] ? __context_tracking_exit+0x80/0x90 [ 48.720905][ T4036] ? lock_downgrade+0x6e0/0x6e0 [ 48.725718][ T4036] ? lock_downgrade+0x6e0/0x6e0 [ 48.730540][ T4036] __x64_sys_sendmmsg+0x94/0x100 [ 48.735443][ T4036] ? syscall_enter_from_user_mode+0x21/0x70 [ 48.741320][ T4036] do_syscall_64+0x35/0x80 [ 48.745719][ T4036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.751667][ T4036] RIP: 0033:0x7f4ed14878d9 [ 48.756223][ T4036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 48.775792][ T4036] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 48.784169][ T4036] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 48.792110][ T4036] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 48.800047][ T4036] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 48.807985][ T4036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.815920][ T4036] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 48.823867][ T4036] [ 48.835980][ T3925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 48.847656][ T3925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.858196][ T3925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 48.870610][ T3925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.882187][ T3925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.898548][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.906131][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.919705][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.927864][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.939622][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.947106][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.955018][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.963167][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.975424][ T3925] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.984253][ T3925] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.992902][ T3925] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.001907][ T3925] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.024033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.032189][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.073063][ T3923] device veth0_macvtap entered promiscuous mode [ 49.111352][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.125510][ T3923] device veth1_macvtap entered promiscuous mode [ 49.141312][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.170259][ T3923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.181141][ T3923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.191683][ T3923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.206683][ T3923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.217455][ T3923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.228087][ T3923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.238078][ T3923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.248867][ T3923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.260744][ T3923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.289216][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.301188][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.309989][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.317940][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.326593][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.353084][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.374743][ T3923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.385909][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.387654][ T3923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.403000][ T3923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.413421][ T3923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.423348][ T3923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.433832][ T3923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.443603][ T3923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.454131][ T3923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.465442][ T3923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.479804][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.487958][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.495214][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.503324][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.512050][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.520464][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.534108][ T3923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.542772][ T3923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.561968][ T3923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.571167][ T3923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.587369][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.605037][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.608335][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.612883][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.646764][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.655878][ T3964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.688287][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.698344][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.749456][ T4074] FAULT_INJECTION: forcing a failure. [ 49.749456][ T4074] name failslab, interval 1, probability 0, space 0, times 0 [ 49.766582][ T4076] FAULT_INJECTION: forcing a failure. [ 49.766582][ T4076] name failslab, interval 1, probability 0, space 0, times 0 [ 49.771807][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.790179][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.799923][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.812383][ T4074] CPU: 0 PID: 4074 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 49.821048][ T4074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.831083][ T4074] Call Trace: [ 49.834345][ T4074] [ 49.837256][ T4074] dump_stack_lvl+0x57/0x7d [ 49.841738][ T4074] should_fail.cold+0x5/0xa [ 49.846219][ T4074] ? skb_clone+0x125/0x300 [ 49.848027][ T4079] FAULT_INJECTION: forcing a failure. [ 49.848027][ T4079] name failslab, interval 1, probability 0, space 0, times 0 [ 49.850612][ T4074] should_failslab+0x5/0x10 [ 49.850621][ T4074] kmem_cache_alloc+0x5e/0x3b0 [ 49.850627][ T4074] ? wait_for_completion_io_timeout+0x20/0x20 [ 49.850637][ T4074] skb_clone+0x125/0x300 [ 49.850646][ T4074] sk_psock_verdict_recv+0x48/0x610 [ 49.850655][ T4074] unix_read_sock+0xc4/0x1e0 [ 49.892424][ T4074] ? sk_psock_strp_parse+0x330/0x330 [ 49.897683][ T4074] ? unix_compat_ioctl+0x10/0x10 [ 49.902594][ T4074] ? find_held_lock+0x2d/0x110 [ 49.907336][ T4074] sk_psock_verdict_data_ready+0xf8/0x150 [ 49.913022][ T4074] ? sk_psock_strp_read_done+0x10/0x10 [ 49.918451][ T4074] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 49.924405][ T4074] ? do_raw_spin_unlock+0x171/0x230 [ 49.929576][ T4074] unix_dgram_sendmsg+0xca6/0x1770 [ 49.934662][ T4074] ? unix_stream_sendpage+0xa50/0xa50 [ 49.940007][ T4074] ? aa_af_perm+0x210/0x210 [ 49.944576][ T4074] ? unix_stream_sendpage+0xa50/0xa50 [ 49.949922][ T4074] sock_sendmsg+0xab/0xe0 [ 49.954221][ T4074] ____sys_sendmsg+0x38c/0x7a0 [ 49.958957][ T4074] ? kernel_sendmsg+0x30/0x30 [ 49.963602][ T4074] ? do_recvmmsg+0x550/0x550 [ 49.968163][ T4074] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 49.974118][ T4074] ___sys_sendmsg+0xd3/0x150 [ 49.978682][ T4074] ? sendmsg_copy_msghdr+0x110/0x110 [ 49.983939][ T4074] ? __fget_files+0x1b9/0x3c0 [ 49.988680][ T4074] ? lock_downgrade+0x6e0/0x6e0 [ 49.993511][ T4074] ? __fget_files+0x1d1/0x3c0 [ 49.998162][ T4074] ? __fget_light+0xbe/0x220 [ 50.002724][ T4074] __sys_sendmmsg+0x141/0x310 [ 50.007372][ T4074] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 50.012365][ T4074] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 50.014256][ T3651] Bluetooth: hci3: command 0x0419 tx timeout [ 50.018313][ T4074] ? find_held_lock+0x2d/0x110 [ 50.029006][ T4074] ? __context_tracking_exit+0x80/0x90 [ 50.034441][ T4074] ? lock_downgrade+0x6e0/0x6e0 [ 50.039261][ T4074] ? lock_downgrade+0x6e0/0x6e0 [ 50.044083][ T4074] __x64_sys_sendmmsg+0x94/0x100 [ 50.048988][ T4074] ? syscall_enter_from_user_mode+0x21/0x70 [ 50.054846][ T4074] do_syscall_64+0x35/0x80 [ 50.059226][ T4074] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.065080][ T4074] RIP: 0033:0x7f6bcd8878d9 [ 50.069463][ T4074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 50.089205][ T4074] RSP: 002b:00007f6bce9f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 50.097580][ T4074] RAX: ffffffffffffffda RBX: 00007f6bcd98bf60 RCX: 00007f6bcd8878d9 [ 50.105519][ T4074] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 50.113455][ T4074] RBP: 00007f6bce9f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 50.121392][ T4074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.129331][ T4074] R13: 00007ffdefcf793f R14: 00007f6bce9f2300 R15: 0000000000022000 [ 50.137274][ T4074] [ 50.141787][ T4079] CPU: 1 PID: 4079 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 50.150449][ T4079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.154899][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.160478][ T4079] Call Trace: [ 50.160482][ T4079] [ 50.160486][ T4079] dump_stack_lvl+0x57/0x7d [ 50.178944][ T4079] should_fail.cold+0x5/0xa [ 50.183422][ T4079] ? skb_clone+0x125/0x300 [ 50.187809][ T4079] should_failslab+0x5/0x10 [ 50.192286][ T4079] kmem_cache_alloc+0x5e/0x3b0 [ 50.197024][ T4079] ? wait_for_completion_io_timeout+0x20/0x20 [ 50.203067][ T4079] skb_clone+0x125/0x300 [ 50.203989][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.207278][ T4079] sk_psock_verdict_recv+0x48/0x610 [ 50.207289][ T4079] unix_read_sock+0xc4/0x1e0 [ 50.207296][ T4079] ? sk_psock_strp_parse+0x330/0x330 [ 50.207304][ T4079] ? unix_compat_ioctl+0x10/0x10 [ 50.207309][ T4079] ? find_held_lock+0x2d/0x110 [ 50.239156][ T4079] sk_psock_verdict_data_ready+0xf8/0x150 [ 50.244845][ T4079] ? sk_psock_strp_read_done+0x10/0x10 [ 50.250273][ T4079] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 50.256228][ T4079] ? do_raw_spin_unlock+0x171/0x230 [ 50.259452][ T3927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.261401][ T4079] unix_dgram_sendmsg+0xca6/0x1770 [ 50.269056][ T3927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.273426][ T4079] ? unix_stream_sendpage+0xa50/0xa50 [ 50.283877][ T3927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.285647][ T4079] ? aa_af_perm+0x210/0x210 [ 50.292976][ T3927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.297018][ T4079] ? unix_stream_sendpage+0xa50/0xa50 [ 50.297027][ T4079] sock_sendmsg+0xab/0xe0 [ 50.297035][ T4079] ____sys_sendmsg+0x38c/0x7a0 [ 50.297042][ T4079] ? kernel_sendmsg+0x30/0x30 [ 50.297048][ T4079] ? do_recvmmsg+0x550/0x550 [ 50.297054][ T4079] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 50.297068][ T4079] ___sys_sendmsg+0xd3/0x150 [ 50.297075][ T4079] ? sendmsg_copy_msghdr+0x110/0x110 [ 50.297085][ T4079] ? __fget_files+0x1b9/0x3c0 [ 50.297093][ T4079] ? lock_downgrade+0x6e0/0x6e0 [ 50.297107][ T4079] ? __fget_files+0x1d1/0x3c0 [ 50.297119][ T4079] ? __fget_light+0xbe/0x220 [ 50.297130][ T4079] __sys_sendmmsg+0x141/0x310 [ 50.297140][ T4079] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 50.297147][ T4079] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 50.297152][ T4079] ? find_held_lock+0x2d/0x110 [ 50.297172][ T4079] ? __context_tracking_exit+0x80/0x90 [ 50.304965][ T3927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 50.309400][ T4079] ? lock_downgrade+0x6e0/0x6e0 [ 50.314292][ T3927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.318418][ T4079] ? lock_downgrade+0x6e0/0x6e0 [ 50.411252][ T4079] __x64_sys_sendmmsg+0x94/0x100 [ 50.416168][ T4079] ? syscall_enter_from_user_mode+0x21/0x70 [ 50.422037][ T4079] do_syscall_64+0x35/0x80 [ 50.426423][ T4079] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.432286][ T4079] RIP: 0033:0x7fb6342878d9 [ 50.436674][ T4079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 50.456251][ T4079] RSP: 002b:00007fb6354ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 50.464631][ T4079] RAX: ffffffffffffffda RBX: 00007fb63438bf60 RCX: 00007fb6342878d9 [ 50.472572][ T4079] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 50.480511][ T4079] RBP: 00007fb6354ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 50.488445][ T4079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.496383][ T4079] R13: 00007fffb655c5df R14: 00007fb6354ba300 R15: 0000000000022000 [ 50.504330][ T4079] [ 50.522873][ T4076] CPU: 1 PID: 4076 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 50.531532][ T4076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.541559][ T4076] Call Trace: [ 50.544903][ T4076] [ 50.547809][ T4076] dump_stack_lvl+0x57/0x7d [ 50.552286][ T4076] should_fail.cold+0x5/0xa [ 50.556767][ T4076] ? skb_clone+0x125/0x300 [ 50.561157][ T4076] should_failslab+0x5/0x10 [ 50.565630][ T4076] kmem_cache_alloc+0x5e/0x3b0 [ 50.570367][ T4076] ? wait_for_completion_io_timeout+0x20/0x20 [ 50.576405][ T4076] skb_clone+0x125/0x300 [ 50.580619][ T4076] sk_psock_verdict_recv+0x48/0x610 [ 50.585792][ T4076] unix_read_sock+0xc4/0x1e0 [ 50.590355][ T4076] ? sk_psock_strp_parse+0x330/0x330 [ 50.595616][ T4076] ? unix_compat_ioctl+0x10/0x10 [ 50.600525][ T4076] ? find_held_lock+0x2d/0x110 [ 50.605272][ T4076] sk_psock_verdict_data_ready+0xf8/0x150 [ 50.608644][ T4041] chnl_net:caif_netlink_parms(): no params data found [ 50.610964][ T4076] ? sk_psock_strp_read_done+0x10/0x10 [ 50.610974][ T4076] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 50.610982][ T4076] ? do_raw_spin_unlock+0x171/0x230 [ 50.610990][ T4076] unix_dgram_sendmsg+0xca6/0x1770 [ 50.611003][ T4076] ? unix_stream_sendpage+0xa50/0xa50 [ 50.644821][ T4076] ? aa_af_perm+0x210/0x210 [ 50.649384][ T4076] ? unix_stream_sendpage+0xa50/0xa50 [ 50.654718][ T4076] sock_sendmsg+0xab/0xe0 [ 50.659019][ T4076] ____sys_sendmsg+0x38c/0x7a0 [ 50.663755][ T4076] ? kernel_sendmsg+0x30/0x30 [ 50.668395][ T4076] ? do_recvmmsg+0x550/0x550 [ 50.672948][ T4076] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 50.678905][ T4076] ___sys_sendmsg+0xd3/0x150 [ 50.683465][ T4076] ? sendmsg_copy_msghdr+0x110/0x110 [ 50.688716][ T4076] ? __fget_files+0x1b9/0x3c0 [ 50.693357][ T4076] ? lock_downgrade+0x6e0/0x6e0 [ 50.698264][ T4076] ? __fget_files+0x1d1/0x3c0 [ 50.702914][ T4076] ? __fget_light+0xbe/0x220 [ 50.707475][ T4076] __sys_sendmmsg+0x141/0x310 [ 50.712123][ T4076] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 50.717109][ T4076] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 50.723057][ T4076] ? find_held_lock+0x2d/0x110 [ 50.727795][ T4076] ? __context_tracking_exit+0x80/0x90 [ 50.733220][ T4076] ? lock_downgrade+0x6e0/0x6e0 [ 50.738035][ T4076] ? lock_downgrade+0x6e0/0x6e0 [ 50.742855][ T4076] __x64_sys_sendmmsg+0x94/0x100 [ 50.747759][ T4076] ? syscall_enter_from_user_mode+0x21/0x70 [ 50.753615][ T4076] do_syscall_64+0x35/0x80 [ 50.757995][ T4076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.763853][ T4076] RIP: 0033:0x7fd82a2878d9 [ 50.768233][ T4076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 50.788062][ T4076] RSP: 002b:00007fd82b303188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 50.796442][ T4076] RAX: ffffffffffffffda RBX: 00007fd82a38bf60 RCX: 00007fd82a2878d9 [ 50.804468][ T4076] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 50.812408][ T4076] RBP: 00007fd82b3031d0 R08: 0000000000000000 R09: 0000000000000000 [ 50.820344][ T4076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.828280][ T4076] R13: 00007ffda011e60f R14: 00007fd82b303300 R15: 0000000000022000 [ 50.836401][ T4076] [ 50.852482][ T3964] Bluetooth: hci5: command 0x0419 tx timeout [ 50.859348][ T3964] Bluetooth: hci2: command 0x0419 tx timeout [ 50.872863][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.904315][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.914290][ T3651] Bluetooth: hci0: command 0x0419 tx timeout [ 50.927771][ T3651] Bluetooth: hci4: command 0x0419 tx timeout [ 50.941274][ T4091] FAULT_INJECTION: forcing a failure. [ 50.941274][ T4091] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.970757][ T4091] CPU: 1 PID: 4091 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 50.979427][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.989540][ T4091] Call Trace: [ 50.992793][ T4091] [ 50.995700][ T4091] dump_stack_lvl+0x57/0x7d [ 51.000174][ T4091] should_fail.cold+0x5/0xa [ 51.004652][ T4091] _copy_from_user+0x25/0xe0 [ 51.009219][ T4091] __copy_msghdr_from_user+0x86/0x3e0 [ 51.014559][ T4091] ? __ia32_sys_shutdown+0x70/0x70 [ 51.019641][ T4091] ? unix_stream_sendpage+0xa50/0xa50 [ 51.024991][ T4091] ? sock_sendmsg+0xab/0xe0 [ 51.029472][ T4091] sendmsg_copy_msghdr+0x7f/0x110 [ 51.034465][ T4091] ? do_recvmmsg+0x550/0x550 [ 51.039023][ T4091] ? __lock_acquire+0x15bc/0x5660 [ 51.044023][ T4091] ___sys_sendmsg+0xb8/0x150 [ 51.048934][ T4091] ? sendmsg_copy_msghdr+0x110/0x110 [ 51.054188][ T4091] ? __fget_files+0x1b9/0x3c0 [ 51.058847][ T4091] ? find_held_lock+0x2d/0x110 [ 51.063587][ T4091] ? __might_fault+0xb3/0x160 [ 51.068230][ T4091] ? lock_downgrade+0x6e0/0x6e0 [ 51.073050][ T4091] __sys_sendmmsg+0x141/0x310 [ 51.077695][ T4091] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 51.082684][ T4091] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.088625][ T4091] ? find_held_lock+0x2d/0x110 [ 51.093369][ T4091] ? __context_tracking_exit+0x80/0x90 [ 51.099054][ T4091] ? lock_downgrade+0x6e0/0x6e0 [ 51.103868][ T4091] ? lock_downgrade+0x6e0/0x6e0 [ 51.108689][ T4091] __x64_sys_sendmmsg+0x94/0x100 [ 51.113589][ T4091] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.119443][ T4091] do_syscall_64+0x35/0x80 [ 51.123824][ T4091] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.129683][ T4091] RIP: 0033:0x7f4ed14878d9 [ 51.134064][ T4091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 51.153635][ T4091] RSP: 002b:00007f4ed250b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.162011][ T4091] RAX: ffffffffffffffda RBX: 00007f4ed158c020 RCX: 00007f4ed14878d9 [ 51.169952][ T4091] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 51.177888][ T4091] RBP: 00007f4ed250b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 51.185912][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.193849][ T4091] R13: 00007ffe57270dcf R14: 00007f4ed250b300 R15: 0000000000022000 [ 51.201794][ T4091] [ 51.214912][ T4095] FAULT_INJECTION: forcing a failure. [ 51.214912][ T4095] name failslab, interval 1, probability 0, space 0, times 0 [ 51.237382][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.245516][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.261976][ T4041] device bridge_slave_0 entered promiscuous mode [ 51.289446][ T4100] FAULT_INJECTION: forcing a failure. [ 51.289446][ T4100] name failslab, interval 1, probability 0, space 0, times 0 [ 51.297436][ T4095] CPU: 1 PID: 4095 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 51.306756][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.310676][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.310681][ T4095] Call Trace: [ 51.310684][ T4095] [ 51.310687][ T4095] dump_stack_lvl+0x57/0x7d [ 51.310698][ T4095] should_fail.cold+0x5/0xa [ 51.310707][ T4095] ? memcg_alloc_slab_cgroups+0x8b/0x140 [ 51.329802][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.330962][ T4095] should_failslab+0x5/0x10 [ 51.330972][ T4095] __kmalloc_node+0x75/0x390 [ 51.330982][ T4095] memcg_alloc_slab_cgroups+0x8b/0x140 [ 51.330990][ T4095] memcg_slab_post_alloc_hook+0xaa/0x480 [ 51.341024][ T4041] device bridge_slave_1 entered promiscuous mode [ 51.342831][ T4095] __kmalloc_node_track_caller+0x1a7/0x360 [ 51.342839][ T4095] ? alloc_skb_with_frags+0x72/0x700 [ 51.342852][ T4095] __alloc_skb+0x8a/0x270 [ 51.342860][ T4095] alloc_skb_with_frags+0x72/0x700 [ 51.402240][ T4095] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.408197][ T4095] sock_alloc_send_pskb+0x636/0x7c0 [ 51.413373][ T4095] ? sock_wmalloc+0xe0/0xe0 [ 51.417843][ T4095] ? lock_downgrade+0x6e0/0x6e0 [ 51.422670][ T4095] ? do_raw_spin_lock+0x120/0x2a0 [ 51.427663][ T4095] ? rwlock_bug.part.0+0x90/0x90 [ 51.432577][ T4095] unix_dgram_sendmsg+0x35a/0x1770 [ 51.437662][ T4095] ? aa_sk_perm+0x1ab/0x820 [ 51.442141][ T4095] ? unix_stream_sendpage+0xa50/0xa50 [ 51.447482][ T4095] ? aa_af_perm+0x210/0x210 [ 51.451957][ T4095] ? unix_stream_sendpage+0xa50/0xa50 [ 51.457296][ T4095] sock_sendmsg+0xab/0xe0 [ 51.461601][ T4095] ____sys_sendmsg+0x38c/0x7a0 [ 51.466339][ T4095] ? kernel_sendmsg+0x30/0x30 [ 51.470981][ T4095] ? do_recvmmsg+0x550/0x550 [ 51.475543][ T4095] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.481506][ T4095] ___sys_sendmsg+0xd3/0x150 [ 51.486079][ T4095] ? sendmsg_copy_msghdr+0x110/0x110 [ 51.491342][ T4095] ? __fget_files+0x1b9/0x3c0 [ 51.495986][ T4095] ? lock_downgrade+0x6e0/0x6e0 [ 51.500813][ T4095] ? __fget_files+0x1d1/0x3c0 [ 51.505468][ T4095] ? __fget_light+0xbe/0x220 [ 51.510030][ T4095] __sys_sendmmsg+0x141/0x310 [ 51.514681][ T4095] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 51.519679][ T4095] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.525713][ T4095] ? find_held_lock+0x2d/0x110 [ 51.530455][ T4095] ? __context_tracking_exit+0x80/0x90 [ 51.535884][ T4095] ? lock_downgrade+0x6e0/0x6e0 [ 51.540703][ T4095] ? lock_downgrade+0x6e0/0x6e0 [ 51.545531][ T4095] __x64_sys_sendmmsg+0x94/0x100 [ 51.550438][ T4095] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.556299][ T4095] do_syscall_64+0x35/0x80 [ 51.560684][ T4095] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.566547][ T4095] RIP: 0033:0x7fb6342878d9 [ 51.570931][ T4095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 51.590504][ T4095] RSP: 002b:00007fb635499188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.598882][ T4095] RAX: ffffffffffffffda RBX: 00007fb63438c020 RCX: 00007fb6342878d9 [ 51.606825][ T4095] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 51.614765][ T4095] RBP: 00007fb6354991d0 R08: 0000000000000000 R09: 0000000000000000 [ 51.622706][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.630647][ T4095] R13: 00007fffb655c5df R14: 00007fb635499300 R15: 0000000000022000 [ 51.638604][ T4095] [ 51.641596][ T4100] CPU: 0 PID: 4100 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 51.650250][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.660278][ T4100] Call Trace: [ 51.663530][ T4100] [ 51.666431][ T4100] dump_stack_lvl+0x57/0x7d [ 51.670902][ T4100] should_fail.cold+0x5/0xa [ 51.675717][ T4100] ? skb_clone+0x125/0x300 [ 51.680098][ T4100] should_failslab+0x5/0x10 [ 51.684569][ T4100] kmem_cache_alloc+0x5e/0x3b0 [ 51.689295][ T4100] ? wait_for_completion_io_timeout+0x20/0x20 [ 51.695326][ T4100] skb_clone+0x125/0x300 [ 51.699535][ T4100] sk_psock_verdict_recv+0x48/0x610 [ 51.704700][ T4100] unix_read_sock+0xc4/0x1e0 [ 51.709253][ T4100] ? sk_psock_strp_parse+0x330/0x330 [ 51.714502][ T4100] ? unix_compat_ioctl+0x10/0x10 [ 51.719403][ T4100] ? find_held_lock+0x2d/0x110 [ 51.724135][ T4100] sk_psock_verdict_data_ready+0xf8/0x150 [ 51.729991][ T4100] ? sk_psock_strp_read_done+0x10/0x10 [ 51.735414][ T4100] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 51.741355][ T4100] ? do_raw_spin_unlock+0x171/0x230 [ 51.746517][ T4100] unix_dgram_sendmsg+0xca6/0x1770 [ 51.751599][ T4100] ? unix_stream_sendpage+0xa50/0xa50 [ 51.756933][ T4100] ? aa_af_perm+0x210/0x210 [ 51.761404][ T4100] ? unix_stream_sendpage+0xa50/0xa50 [ 51.766741][ T4100] sock_sendmsg+0xab/0xe0 [ 51.771036][ T4100] ____sys_sendmsg+0x38c/0x7a0 [ 51.775764][ T4100] ? kernel_sendmsg+0x30/0x30 [ 51.780401][ T4100] ? do_recvmmsg+0x550/0x550 [ 51.785041][ T4100] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.791074][ T4100] ___sys_sendmsg+0xd3/0x150 [ 51.795629][ T4100] ? sendmsg_copy_msghdr+0x110/0x110 [ 51.800878][ T4100] ? __fget_files+0x1b9/0x3c0 [ 51.805516][ T4100] ? lock_downgrade+0x6e0/0x6e0 [ 51.810338][ T4100] ? __fget_files+0x1d1/0x3c0 [ 51.814981][ T4100] ? __fget_light+0xbe/0x220 [ 51.819538][ T4100] __sys_sendmmsg+0x141/0x310 [ 51.824282][ T4100] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 51.829271][ T4100] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 51.835306][ T4100] ? find_held_lock+0x2d/0x110 [ 51.840040][ T4100] ? __context_tracking_exit+0x80/0x90 [ 51.845464][ T4100] ? lock_downgrade+0x6e0/0x6e0 [ 51.850279][ T4100] ? lock_downgrade+0x6e0/0x6e0 [ 51.855099][ T4100] __x64_sys_sendmmsg+0x94/0x100 [ 51.859997][ T4100] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.865850][ T4100] do_syscall_64+0x35/0x80 [ 51.870226][ T4100] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 51.876169][ T4100] RIP: 0033:0x7fd82a2878d9 [ 51.880551][ T4100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 51.900380][ T4100] RSP: 002b:00007fd82b303188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.908756][ T4100] RAX: ffffffffffffffda RBX: 00007fd82a38bf60 RCX: 00007fd82a2878d9 [ 51.916693][ T4100] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 51.924632][ T4100] RBP: 00007fd82b3031d0 R08: 0000000000000000 R09: 0000000000000000 [ 51.932566][ T4100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 2022/04/16 19:41:03 executed programs: 17 [ 51.940591][ T4100] R13: 00007ffda011e60f R14: 00007fd82b303300 R15: 0000000000022000 [ 51.948533][ T4100] [ 51.961498][ T4105] FAULT_INJECTION: forcing a failure. [ 51.961498][ T4105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.996799][ T4105] CPU: 0 PID: 4105 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 52.006951][ T4105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.016978][ T4105] Call Trace: [ 52.020231][ T4105] [ 52.023316][ T4105] dump_stack_lvl+0x57/0x7d [ 52.027799][ T4105] should_fail.cold+0x5/0xa [ 52.032280][ T4105] _copy_from_user+0x25/0xe0 [ 52.036847][ T4105] __copy_msghdr_from_user+0x86/0x3e0 [ 52.042192][ T4105] ? __ia32_sys_shutdown+0x70/0x70 [ 52.047267][ T4105] ? unix_stream_sendpage+0xa50/0xa50 [ 52.052599][ T4105] ? sock_sendmsg+0xab/0xe0 [ 52.057070][ T4105] sendmsg_copy_msghdr+0x7f/0x110 [ 52.062065][ T4105] ? do_recvmmsg+0x550/0x550 [ 52.066617][ T4105] ? __lock_acquire+0x15bc/0x5660 [ 52.071606][ T4105] ___sys_sendmsg+0xb8/0x150 [ 52.076155][ T4105] ? sendmsg_copy_msghdr+0x110/0x110 [ 52.081606][ T4105] ? __fget_files+0x1b9/0x3c0 [ 52.086248][ T4105] ? find_held_lock+0x2d/0x110 [ 52.090974][ T4105] ? __might_fault+0xb3/0x160 [ 52.095624][ T4105] ? lock_downgrade+0x6e0/0x6e0 [ 52.100455][ T4105] __sys_sendmmsg+0x141/0x310 [ 52.105102][ T4105] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 52.110101][ T4105] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 52.116048][ T4105] ? find_held_lock+0x2d/0x110 [ 52.120778][ T4105] ? __context_tracking_exit+0x80/0x90 [ 52.126196][ T4105] ? lock_downgrade+0x6e0/0x6e0 [ 52.131007][ T4105] ? lock_downgrade+0x6e0/0x6e0 [ 52.135820][ T4105] __x64_sys_sendmmsg+0x94/0x100 [ 52.140719][ T4105] ? syscall_enter_from_user_mode+0x21/0x70 [ 52.146570][ T4105] do_syscall_64+0x35/0x80 [ 52.150970][ T4105] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.156999][ T4105] RIP: 0033:0x7efe7de878d9 [ 52.161391][ T4105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 52.180967][ T4105] RSP: 002b:00007efe7d5dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 52.189952][ T4105] RAX: ffffffffffffffda RBX: 00007efe7df8c020 RCX: 00007efe7de878d9 [ 52.198061][ T4105] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 52.206000][ T4105] RBP: 00007efe7d5dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 52.213941][ T4105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.221874][ T4105] R13: 00007ffc225babbf R14: 00007efe7d5dd300 R15: 0000000000022000 [ 52.229813][ T4105] [ 52.238949][ T4041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.251949][ T4041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.277698][ T4041] team0: Port device team_slave_0 added [ 52.289151][ T4041] team0: Port device team_slave_1 added [ 52.318228][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.330565][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.363686][ T4041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.374351][ T3643] Bluetooth: hci1: command 0x0409 tx timeout [ 52.385147][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.392075][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.420575][ T4041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.453024][ T4041] device hsr_slave_0 entered promiscuous mode [ 52.466137][ T4041] device hsr_slave_1 entered promiscuous mode [ 52.472555][ T4041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.485768][ T4041] Cannot create hsr debugfs directory [ 52.579995][ T4041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.590962][ T4041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.599401][ T4041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.608843][ T4041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.663448][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.674403][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 52.688227][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.697128][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.709177][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.720512][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.729349][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.739035][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.746089][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.781970][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.790270][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.804963][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.813456][ T3640] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.820518][ T3640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.833889][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.842402][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.857448][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.868799][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.879750][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.890725][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.902811][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.916829][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.936216][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.943610][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.954577][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.074197][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.089962][ T4041] device veth0_vlan entered promiscuous mode [ 53.098130][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.111933][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.120397][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.136964][ T4041] device veth1_vlan entered promiscuous mode [ 53.159403][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.168095][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.177427][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.187654][ T4041] device veth0_macvtap entered promiscuous mode [ 53.199738][ T4041] device veth1_macvtap entered promiscuous mode [ 53.211621][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 53.222975][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.236527][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 53.247618][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.260290][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 53.270877][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.280744][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 53.291174][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.300999][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 53.311493][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.323081][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.331581][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.344656][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.354995][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 53.367784][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.378215][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 53.388709][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.398607][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 53.409190][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.419787][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 53.431054][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.446210][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 53.459327][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.472890][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.488319][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.501395][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.514437][ T4041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.523099][ T4041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.540038][ T4041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.549631][ T4041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.612854][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.629692][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.639360][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.644875][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.650870][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.663135][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.711712][ T4202] FAULT_INJECTION: forcing a failure. [ 53.711712][ T4202] name failslab, interval 1, probability 0, space 0, times 0 [ 53.736462][ T4202] CPU: 0 PID: 4202 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 53.745134][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.755170][ T4202] Call Trace: [ 53.758430][ T4202] [ 53.761341][ T4202] dump_stack_lvl+0x57/0x7d [ 53.765821][ T4202] should_fail.cold+0x5/0xa [ 53.770393][ T4202] ? memcg_alloc_slab_cgroups+0x8b/0x140 [ 53.775998][ T4202] should_failslab+0x5/0x10 [ 53.780477][ T4202] __kmalloc_node+0x75/0x390 [ 53.785049][ T4202] memcg_alloc_slab_cgroups+0x8b/0x140 [ 53.790484][ T4202] memcg_slab_post_alloc_hook+0xaa/0x480 [ 53.796095][ T4202] __kmalloc_node_track_caller+0x1a7/0x360 [ 53.802049][ T4202] ? alloc_skb_with_frags+0x72/0x700 [ 53.807314][ T4202] __alloc_skb+0x8a/0x270 [ 53.811623][ T4202] alloc_skb_with_frags+0x72/0x700 [ 53.816717][ T4202] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 53.822678][ T4202] sock_alloc_send_pskb+0x636/0x7c0 [ 53.827857][ T4202] ? sock_wmalloc+0xe0/0xe0 [ 53.832336][ T4202] ? lock_downgrade+0x6e0/0x6e0 [ 53.837158][ T4202] ? do_raw_spin_lock+0x120/0x2a0 [ 53.842156][ T4202] ? rwlock_bug.part.0+0x90/0x90 [ 53.847075][ T4202] unix_dgram_sendmsg+0x35a/0x1770 [ 53.852167][ T4202] ? aa_sk_perm+0x1ab/0x820 [ 53.856684][ T4202] ? unix_stream_sendpage+0xa50/0xa50 [ 53.862030][ T4202] ? aa_af_perm+0x210/0x210 [ 53.866518][ T4202] ? unix_stream_sendpage+0xa50/0xa50 [ 53.871868][ T4202] sock_sendmsg+0xab/0xe0 [ 53.876269][ T4202] ____sys_sendmsg+0x38c/0x7a0 [ 53.881009][ T4202] ? kernel_sendmsg+0x30/0x30 [ 53.885664][ T4202] ? do_recvmmsg+0x550/0x550 [ 53.890230][ T4202] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 53.896195][ T4202] ___sys_sendmsg+0xd3/0x150 [ 53.900761][ T4202] ? sendmsg_copy_msghdr+0x110/0x110 [ 53.906023][ T4202] ? __fget_files+0x1b9/0x3c0 [ 53.910677][ T4202] ? lock_downgrade+0x6e0/0x6e0 [ 53.915506][ T4202] ? __fget_files+0x1d1/0x3c0 [ 53.920150][ T4202] ? __fget_light+0xbe/0x220 [ 53.924707][ T4202] __sys_sendmmsg+0x141/0x310 [ 53.929351][ T4202] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 53.934339][ T4202] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 53.940282][ T4202] ? find_held_lock+0x2d/0x110 [ 53.945014][ T4202] ? __context_tracking_exit+0x80/0x90 [ 53.950612][ T4202] ? lock_downgrade+0x6e0/0x6e0 [ 53.955426][ T4202] ? lock_downgrade+0x6e0/0x6e0 [ 53.960246][ T4202] __x64_sys_sendmmsg+0x94/0x100 [ 53.965147][ T4202] ? syscall_enter_from_user_mode+0x21/0x70 [ 53.971004][ T4202] do_syscall_64+0x35/0x80 [ 53.975385][ T4202] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.981240][ T4202] RIP: 0033:0x7fb1e6a878d9 [ 53.985618][ T4202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 54.005188][ T4202] RSP: 002b:00007fb1e7c08188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.013563][ T4202] RAX: ffffffffffffffda RBX: 00007fb1e6b8bf60 RCX: 00007fb1e6a878d9 [ 54.021498][ T4202] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 54.029434][ T4202] RBP: 00007fb1e7c081d0 R08: 0000000000000000 R09: 0000000000000000 [ 54.037371][ T4202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.045307][ T4202] R13: 00007ffde14cf4cf R14: 00007fb1e7c08300 R15: 0000000000022000 [ 54.053249][ T4202] [ 54.120019][ T4230] FAULT_INJECTION: forcing a failure. [ 54.120019][ T4230] name failslab, interval 1, probability 0, space 0, times 0 [ 54.121256][ T4231] FAULT_INJECTION: forcing a failure. [ 54.121256][ T4231] name failslab, interval 1, probability 0, space 0, times 0 [ 54.134934][ T4228] FAULT_INJECTION: forcing a failure. [ 54.134934][ T4228] name failslab, interval 1, probability 0, space 0, times 0 [ 54.152157][ T4231] CPU: 1 PID: 4231 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 54.159947][ T4225] FAULT_INJECTION: forcing a failure. [ 54.159947][ T4225] name failslab, interval 1, probability 0, space 0, times 0 [ 54.166796][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.166800][ T4231] Call Trace: [ 54.166803][ T4231] [ 54.166807][ T4231] dump_stack_lvl+0x57/0x7d [ 54.166817][ T4231] should_fail.cold+0x5/0xa [ 54.166825][ T4231] ? skb_clone+0x125/0x300 [ 54.166833][ T4231] should_failslab+0x5/0x10 [ 54.166839][ T4231] kmem_cache_alloc+0x5e/0x3b0 [ 54.166845][ T4231] ? wait_for_completion_io_timeout+0x20/0x20 [ 54.166855][ T4231] skb_clone+0x125/0x300 [ 54.166863][ T4231] sk_psock_verdict_recv+0x48/0x610 [ 54.166874][ T4231] unix_read_sock+0xc4/0x1e0 [ 54.166880][ T4231] ? sk_psock_strp_parse+0x330/0x330 [ 54.166888][ T4231] ? unix_compat_ioctl+0x10/0x10 [ 54.166894][ T4231] ? find_held_lock+0x2d/0x110 [ 54.166906][ T4231] sk_psock_verdict_data_ready+0xf8/0x150 [ 54.166912][ T4231] ? sk_psock_strp_read_done+0x10/0x10 [ 54.166920][ T4231] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 54.166927][ T4231] ? do_raw_spin_unlock+0x171/0x230 [ 54.166934][ T4231] unix_dgram_sendmsg+0xca6/0x1770 [ 54.166947][ T4231] ? unix_stream_sendpage+0xa50/0xa50 [ 54.166953][ T4231] ? aa_af_perm+0x210/0x210 [ 54.166966][ T4231] ? unix_stream_sendpage+0xa50/0xa50 [ 54.166974][ T4231] sock_sendmsg+0xab/0xe0 [ 54.166981][ T4231] ____sys_sendmsg+0x38c/0x7a0 [ 54.166990][ T4231] ? kernel_sendmsg+0x30/0x30 [ 54.166996][ T4231] ? do_recvmmsg+0x550/0x550 [ 54.167003][ T4231] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 54.167017][ T4231] ___sys_sendmsg+0xd3/0x150 [ 54.167025][ T4231] ? sendmsg_copy_msghdr+0x110/0x110 [ 54.167033][ T4231] ? __fget_files+0x1b9/0x3c0 [ 54.167040][ T4231] ? lock_downgrade+0x6e0/0x6e0 [ 54.167054][ T4231] ? __fget_files+0x1d1/0x3c0 [ 54.167065][ T4231] ? __fget_light+0xbe/0x220 [ 54.167075][ T4231] __sys_sendmmsg+0x141/0x310 [ 54.292544][ T4232] FAULT_INJECTION: forcing a failure. [ 54.292544][ T4232] name failslab, interval 1, probability 0, space 0, times 0 [ 54.295753][ T4231] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 54.295765][ T4231] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 54.295772][ T4231] ? find_held_lock+0x2d/0x110 [ 54.295785][ T4231] ? __context_tracking_exit+0x80/0x90 [ 54.295793][ T4231] ? lock_downgrade+0x6e0/0x6e0 [ 54.295801][ T4231] ? lock_downgrade+0x6e0/0x6e0 [ 54.295817][ T4231] __x64_sys_sendmmsg+0x94/0x100 [ 54.295823][ T4231] ? syscall_enter_from_user_mode+0x21/0x70 [ 54.295829][ T4231] do_syscall_64+0x35/0x80 [ 54.295835][ T4231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.295841][ T4231] RIP: 0033:0x7fd82a2878d9 [ 54.295848][ T4231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 54.295853][ T4231] RSP: 002b:00007fd82b303188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.295860][ T4231] RAX: ffffffffffffffda RBX: 00007fd82a38bf60 RCX: 00007fd82a2878d9 [ 54.295864][ T4231] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 54.295868][ T4231] RBP: 00007fd82b3031d0 R08: 0000000000000000 R09: 0000000000000000 [ 54.295871][ T4231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.295874][ T4231] R13: 00007ffda011e60f R14: 00007fd82b303300 R15: 0000000000022000 [ 54.295888][ T4231] [ 54.311555][ T4225] CPU: 1 PID: 4225 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 54.501360][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.511385][ T4225] Call Trace: [ 54.514640][ T4225] [ 54.517552][ T4225] dump_stack_lvl+0x57/0x7d [ 54.522026][ T4225] should_fail.cold+0x5/0xa [ 54.526502][ T4225] should_failslab+0x5/0x10 [ 54.530976][ T4225] kmem_cache_alloc_trace+0x60/0x3f0 [ 54.536230][ T4225] ? sk_psock_skb_ingress_self+0x4f/0x3b0 [ 54.541925][ T4225] sk_psock_skb_ingress_self+0x4f/0x3b0 [ 54.547441][ T4225] sk_psock_verdict_apply+0x39c/0x4b0 [ 54.552782][ T4225] sk_psock_verdict_recv+0x216/0x610 [ 54.558040][ T4225] unix_read_sock+0xc4/0x1e0 [ 54.562603][ T4225] ? sk_psock_strp_parse+0x330/0x330 [ 54.567859][ T4225] ? unix_compat_ioctl+0x10/0x10 [ 54.572767][ T4225] ? find_held_lock+0x2d/0x110 [ 54.577506][ T4225] sk_psock_verdict_data_ready+0xf8/0x150 [ 54.583195][ T4225] ? sk_psock_strp_read_done+0x10/0x10 [ 54.588625][ T4225] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 54.594582][ T4225] ? do_raw_spin_unlock+0x171/0x230 [ 54.599754][ T4225] unix_dgram_sendmsg+0xca6/0x1770 [ 54.604848][ T4225] ? unix_stream_sendpage+0xa50/0xa50 [ 54.610187][ T4225] ? aa_af_perm+0x210/0x210 [ 54.614669][ T4225] ? unix_stream_sendpage+0xa50/0xa50 [ 54.620013][ T4225] sock_sendmsg+0xab/0xe0 [ 54.624320][ T4225] ____sys_sendmsg+0x38c/0x7a0 [ 54.629059][ T4225] ? kernel_sendmsg+0x30/0x30 [ 54.633705][ T4225] ? do_recvmmsg+0x550/0x550 [ 54.638267][ T4225] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 54.644313][ T4225] ___sys_sendmsg+0xd3/0x150 [ 54.648877][ T4225] ? sendmsg_copy_msghdr+0x110/0x110 [ 54.654135][ T4225] ? __fget_files+0x1b9/0x3c0 [ 54.658783][ T4225] ? lock_downgrade+0x6e0/0x6e0 [ 54.663607][ T4225] ? __fget_files+0x1d1/0x3c0 [ 54.668255][ T4225] ? __fget_light+0xbe/0x220 [ 54.672815][ T4225] __sys_sendmmsg+0x141/0x310 [ 54.677462][ T4225] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 54.682455][ T4225] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 54.688401][ T4225] ? find_held_lock+0x2d/0x110 [ 54.693139][ T4225] ? __context_tracking_exit+0x80/0x90 [ 54.698569][ T4225] ? lock_downgrade+0x6e0/0x6e0 [ 54.703388][ T4225] ? lock_downgrade+0x6e0/0x6e0 [ 54.708212][ T4225] __x64_sys_sendmmsg+0x94/0x100 [ 54.713119][ T4225] ? syscall_enter_from_user_mode+0x21/0x70 [ 54.718978][ T4225] do_syscall_64+0x35/0x80 [ 54.723362][ T4225] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.729224][ T4225] RIP: 0033:0x7f6bcd8878d9 [ 54.733607][ T4225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 54.753489][ T4225] RSP: 002b:00007f6bce9f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.762057][ T4225] RAX: ffffffffffffffda RBX: 00007f6bcd98bf60 RCX: 00007f6bcd8878d9 [ 54.770010][ T4225] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 54.777952][ T4225] RBP: 00007f6bce9f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 54.785896][ T4225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.793838][ T4225] R13: 00007ffdefcf793f R14: 00007f6bce9f2300 R15: 0000000000022000 [ 54.801963][ T4225] [ 54.807585][ T22] Bluetooth: hci1: command 0x041b tx timeout [ 54.818590][ T4234] FAULT_INJECTION: forcing a failure. [ 54.818590][ T4234] name failslab, interval 1, probability 0, space 0, times 0 [ 54.838806][ T4230] CPU: 0 PID: 4230 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 54.847465][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.857492][ T4230] Call Trace: [ 54.860754][ T4230] [ 54.863669][ T4230] dump_stack_lvl+0x57/0x7d [ 54.868149][ T4230] should_fail.cold+0x5/0xa [ 54.872627][ T4230] ? skb_clone+0x125/0x300 [ 54.877019][ T4230] should_failslab+0x5/0x10 [ 54.881496][ T4230] kmem_cache_alloc+0x5e/0x3b0 [ 54.886405][ T4230] ? wait_for_completion_io_timeout+0x20/0x20 [ 54.892449][ T4230] skb_clone+0x125/0x300 [ 54.896676][ T4230] sk_psock_verdict_recv+0x48/0x610 [ 54.901938][ T4230] unix_read_sock+0xc4/0x1e0 [ 54.906495][ T4230] ? sk_psock_strp_parse+0x330/0x330 [ 54.911750][ T4230] ? unix_compat_ioctl+0x10/0x10 [ 54.916657][ T4230] ? find_held_lock+0x2d/0x110 [ 54.921407][ T4230] sk_psock_verdict_data_ready+0xf8/0x150 [ 54.927100][ T4230] ? sk_psock_strp_read_done+0x10/0x10 [ 54.932538][ T4230] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 54.938495][ T4230] ? do_raw_spin_unlock+0x171/0x230 [ 54.943845][ T4230] unix_dgram_sendmsg+0xca6/0x1770 [ 54.948935][ T4230] ? unix_stream_sendpage+0xa50/0xa50 [ 54.954271][ T4230] ? aa_af_perm+0x210/0x210 [ 54.958745][ T4230] ? unix_stream_sendpage+0xa50/0xa50 [ 54.964097][ T4230] sock_sendmsg+0xab/0xe0 [ 54.968412][ T4230] ____sys_sendmsg+0x38c/0x7a0 [ 54.973139][ T4230] ? kernel_sendmsg+0x30/0x30 [ 54.977780][ T4230] ? do_recvmmsg+0x550/0x550 [ 54.982335][ T4230] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 54.988284][ T4230] ___sys_sendmsg+0xd3/0x150 [ 54.992837][ T4230] ? sendmsg_copy_msghdr+0x110/0x110 [ 54.998179][ T4230] ? __fget_files+0x1b9/0x3c0 [ 55.002820][ T4230] ? lock_downgrade+0x6e0/0x6e0 [ 55.007644][ T4230] ? __fget_files+0x1d1/0x3c0 [ 55.012290][ T4230] ? __fget_light+0xbe/0x220 [ 55.017891][ T4230] __sys_sendmmsg+0x141/0x310 [ 55.022537][ T4230] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 55.027525][ T4230] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 55.033469][ T4230] ? find_held_lock+0x2d/0x110 [ 55.038202][ T4230] ? __context_tracking_exit+0x80/0x90 [ 55.043625][ T4230] ? lock_downgrade+0x6e0/0x6e0 [ 55.048440][ T4230] ? lock_downgrade+0x6e0/0x6e0 [ 55.053259][ T4230] __x64_sys_sendmmsg+0x94/0x100 [ 55.058247][ T4230] ? syscall_enter_from_user_mode+0x21/0x70 [ 55.064101][ T4230] do_syscall_64+0x35/0x80 [ 55.068483][ T4230] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.074341][ T4230] RIP: 0033:0x7efe7de878d9 [ 55.078723][ T4230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 55.098383][ T4230] RSP: 002b:00007efe7d5fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 55.106757][ T4230] RAX: ffffffffffffffda RBX: 00007efe7df8bf60 RCX: 00007efe7de878d9 [ 55.114869][ T4230] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 55.122804][ T4230] RBP: 00007efe7d5fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 55.130739][ T4230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.138677][ T4230] R13: 00007ffc225babbf R14: 00007efe7d5fe300 R15: 0000000000022000 [ 55.146622][ T4230] [ 55.150518][ T4234] CPU: 1 PID: 4234 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 55.159178][ T4234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.169211][ T4234] Call Trace: [ 55.172474][ T4234] [ 55.175388][ T4234] dump_stack_lvl+0x57/0x7d [ 55.179868][ T4234] should_fail.cold+0x5/0xa [ 55.184347][ T4234] ? skb_clone+0x125/0x300 [ 55.188738][ T4234] should_failslab+0x5/0x10 [ 55.193219][ T4234] kmem_cache_alloc+0x5e/0x3b0 [ 55.197957][ T4234] ? wait_for_completion_io_timeout+0x20/0x20 [ 55.203999][ T4234] skb_clone+0x125/0x300 [ 55.208218][ T4234] sk_psock_verdict_recv+0x48/0x610 [ 55.213391][ T4234] unix_read_sock+0xc4/0x1e0 [ 55.215242][ T4249] FAULT_INJECTION: forcing a failure. [ 55.215242][ T4249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.217951][ T4234] ? sk_psock_strp_parse+0x330/0x330 [ 55.217960][ T4234] ? unix_compat_ioctl+0x10/0x10 [ 55.217966][ T4234] ? find_held_lock+0x2d/0x110 [ 55.217977][ T4234] sk_psock_verdict_data_ready+0xf8/0x150 [ 55.251501][ T4234] ? sk_psock_strp_read_done+0x10/0x10 [ 55.256930][ T4234] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 55.262877][ T4234] ? do_raw_spin_unlock+0x171/0x230 [ 55.268044][ T4234] unix_dgram_sendmsg+0xca6/0x1770 [ 55.273131][ T4234] ? unix_stream_sendpage+0xa50/0xa50 [ 55.278471][ T4234] ? aa_af_perm+0x210/0x210 [ 55.282950][ T4234] ? unix_stream_sendpage+0xa50/0xa50 [ 55.288292][ T4234] sock_sendmsg+0xab/0xe0 [ 55.292594][ T4234] ____sys_sendmsg+0x38c/0x7a0 [ 55.297326][ T4234] ? kernel_sendmsg+0x30/0x30 [ 55.301970][ T4234] ? do_recvmmsg+0x550/0x550 [ 55.306618][ T4234] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 55.312578][ T4234] ___sys_sendmsg+0xd3/0x150 [ 55.317141][ T4234] ? sendmsg_copy_msghdr+0x110/0x110 [ 55.322405][ T4234] ? __fget_files+0x1b9/0x3c0 [ 55.327153][ T4234] ? lock_downgrade+0x6e0/0x6e0 [ 55.332077][ T4234] ? __fget_files+0x1d1/0x3c0 [ 55.336728][ T4234] ? __fget_light+0xbe/0x220 [ 55.341292][ T4234] __sys_sendmmsg+0x141/0x310 [ 55.345942][ T4234] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 55.350939][ T4234] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 55.356888][ T4234] ? find_held_lock+0x2d/0x110 [ 55.361631][ T4234] ? __context_tracking_exit+0x80/0x90 [ 55.367238][ T4234] ? lock_downgrade+0x6e0/0x6e0 [ 55.372062][ T4234] ? lock_downgrade+0x6e0/0x6e0 [ 55.376975][ T4234] __x64_sys_sendmmsg+0x94/0x100 [ 55.381880][ T4234] ? syscall_enter_from_user_mode+0x21/0x70 [ 55.387742][ T4234] do_syscall_64+0x35/0x80 [ 55.392127][ T4234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.397985][ T4234] RIP: 0033:0x7fb1e6a878d9 [ 55.402367][ T4234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 55.422031][ T4234] RSP: 002b:00007fb1e7c08188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 55.430410][ T4234] RAX: ffffffffffffffda RBX: 00007fb1e6b8bf60 RCX: 00007fb1e6a878d9 [ 55.438349][ T4234] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 55.446288][ T4234] RBP: 00007fb1e7c081d0 R08: 0000000000000000 R09: 0000000000000000 [ 55.454232][ T4234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.462175][ T4234] R13: 00007ffde14cf4cf R14: 00007fb1e7c08300 R15: 0000000000022000 [ 55.469763][ T4251] FAULT_INJECTION: forcing a failure. [ 55.469763][ T4251] name failslab, interval 1, probability 0, space 0, times 0 [ 55.470122][ T4234] [ 55.494885][ T4232] CPU: 0 PID: 4232 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 55.503805][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.513843][ T4232] Call Trace: [ 55.517104][ T4232] [ 55.520013][ T4232] dump_stack_lvl+0x57/0x7d [ 55.524504][ T4232] should_fail.cold+0x5/0xa [ 55.528986][ T4232] ? skb_clone+0x125/0x300 [ 55.533382][ T4232] should_failslab+0x5/0x10 [ 55.537860][ T4232] kmem_cache_alloc+0x5e/0x3b0 [ 55.542601][ T4232] ? wait_for_completion_io_timeout+0x20/0x20 [ 55.548647][ T4232] skb_clone+0x125/0x300 [ 55.552880][ T4232] sk_psock_verdict_recv+0x48/0x610 [ 55.558056][ T4232] unix_read_sock+0xc4/0x1e0 [ 55.562626][ T4232] ? sk_psock_strp_parse+0x330/0x330 [ 55.567888][ T4232] ? unix_compat_ioctl+0x10/0x10 [ 55.572802][ T4232] ? find_held_lock+0x2d/0x110 [ 55.577548][ T4232] sk_psock_verdict_data_ready+0xf8/0x150 [ 55.583245][ T4232] ? sk_psock_strp_read_done+0x10/0x10 [ 55.588686][ T4232] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 55.594642][ T4232] ? do_raw_spin_unlock+0x171/0x230 [ 55.599822][ T4232] unix_dgram_sendmsg+0xca6/0x1770 [ 55.604997][ T4232] ? unix_stream_sendpage+0xa50/0xa50 [ 55.610425][ T4232] ? aa_af_perm+0x210/0x210 [ 55.614905][ T4232] ? unix_stream_sendpage+0xa50/0xa50 [ 55.620416][ T4232] sock_sendmsg+0xab/0xe0 [ 55.624709][ T4232] ____sys_sendmsg+0x38c/0x7a0 [ 55.629436][ T4232] ? kernel_sendmsg+0x30/0x30 [ 55.634072][ T4232] ? do_recvmmsg+0x550/0x550 [ 55.638624][ T4232] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 55.644570][ T4232] ___sys_sendmsg+0xd3/0x150 [ 55.649126][ T4232] ? sendmsg_copy_msghdr+0x110/0x110 [ 55.654377][ T4232] ? __fget_files+0x1b9/0x3c0 [ 55.659020][ T4232] ? lock_downgrade+0x6e0/0x6e0 [ 55.663838][ T4232] ? __fget_files+0x1d1/0x3c0 [ 55.668567][ T4232] ? __fget_light+0xbe/0x220 [ 55.673123][ T4232] __sys_sendmmsg+0x141/0x310 [ 55.677764][ T4232] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 55.682752][ T4232] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 55.688695][ T4232] ? find_held_lock+0x2d/0x110 [ 55.693426][ T4232] ? __context_tracking_exit+0x80/0x90 [ 55.698849][ T4232] ? lock_downgrade+0x6e0/0x6e0 [ 55.703669][ T4232] ? lock_downgrade+0x6e0/0x6e0 [ 55.708486][ T4232] __x64_sys_sendmmsg+0x94/0x100 [ 55.713389][ T4232] ? syscall_enter_from_user_mode+0x21/0x70 [ 55.719241][ T4232] do_syscall_64+0x35/0x80 [ 55.723618][ T4232] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.729475][ T4232] RIP: 0033:0x7f4ed14878d9 [ 55.733854][ T4232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 55.753421][ T4232] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 55.761795][ T4232] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 55.769734][ T4232] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 55.777679][ T4232] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 55.785619][ T4232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.793555][ T4232] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 55.801500][ T4232] [ 55.804622][ T4249] CPU: 1 PID: 4249 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 55.813282][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.823321][ T4249] Call Trace: [ 55.826581][ T4249] [ 55.829491][ T4249] dump_stack_lvl+0x57/0x7d [ 55.833976][ T4249] should_fail.cold+0x5/0xa [ 55.838463][ T4249] _copy_from_user+0x25/0xe0 [ 55.843036][ T4249] __copy_msghdr_from_user+0x86/0x3e0 [ 55.848390][ T4249] ? __ia32_sys_shutdown+0x70/0x70 [ 55.853480][ T4249] ? unix_stream_sendpage+0xa50/0xa50 [ 55.858831][ T4249] ? sock_sendmsg+0xab/0xe0 [ 55.863311][ T4249] sendmsg_copy_msghdr+0x7f/0x110 [ 55.868306][ T4249] ? do_recvmmsg+0x550/0x550 [ 55.872868][ T4249] ? __lock_acquire+0x15bc/0x5660 [ 55.877873][ T4249] ___sys_sendmsg+0xb8/0x150 [ 55.882439][ T4249] ? sendmsg_copy_msghdr+0x110/0x110 [ 55.887699][ T4249] ? __fget_files+0x1b9/0x3c0 [ 55.892356][ T4249] ? find_held_lock+0x2d/0x110 [ 55.897099][ T4249] ? __might_fault+0xb3/0x160 [ 55.901752][ T4249] ? lock_downgrade+0x6e0/0x6e0 [ 55.906588][ T4249] __sys_sendmmsg+0x141/0x310 [ 55.911247][ T4249] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 55.916251][ T4249] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 55.922212][ T4249] ? find_held_lock+0x2d/0x110 [ 55.926967][ T4249] ? __context_tracking_exit+0x80/0x90 [ 55.932405][ T4249] ? lock_downgrade+0x6e0/0x6e0 [ 55.937235][ T4249] ? lock_downgrade+0x6e0/0x6e0 [ 55.942065][ T4249] __x64_sys_sendmmsg+0x94/0x100 [ 55.946979][ T4249] ? syscall_enter_from_user_mode+0x21/0x70 [ 55.952850][ T4249] do_syscall_64+0x35/0x80 [ 55.957241][ T4249] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.963108][ T4249] RIP: 0033:0x7fd82a2878d9 [ 55.967499][ T4249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 55.987085][ T4249] RSP: 002b:00007fd8299fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 55.995479][ T4249] RAX: ffffffffffffffda RBX: 00007fd82a38c020 RCX: 00007fd82a2878d9 [ 56.003429][ T4249] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 56.011377][ T4249] RBP: 00007fd8299fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 56.019323][ T4249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.027268][ T4249] R13: 00007ffda011e60f R14: 00007fd8299fe300 R15: 0000000000022000 [ 56.035233][ T4249] [ 56.039831][ T4251] CPU: 0 PID: 4251 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 56.048496][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.058534][ T4251] Call Trace: [ 56.061788][ T4251] [ 56.064688][ T4251] dump_stack_lvl+0x57/0x7d [ 56.069159][ T4251] should_fail.cold+0x5/0xa [ 56.073630][ T4251] should_failslab+0x5/0x10 [ 56.078098][ T4251] kmem_cache_alloc_node+0x65/0x3f0 [ 56.083258][ T4251] ? __alloc_skb+0x151/0x270 [ 56.087817][ T4251] __alloc_skb+0x151/0x270 [ 56.092202][ T4251] alloc_skb_with_frags+0x72/0x700 [ 56.097277][ T4251] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.103225][ T4251] sock_alloc_send_pskb+0x636/0x7c0 [ 56.108392][ T4251] ? sock_wmalloc+0xe0/0xe0 [ 56.112856][ T4251] ? lock_downgrade+0x6e0/0x6e0 [ 56.117670][ T4251] ? do_raw_spin_lock+0x120/0x2a0 [ 56.122656][ T4251] ? rwlock_bug.part.0+0x90/0x90 [ 56.127565][ T4251] unix_dgram_sendmsg+0x35a/0x1770 [ 56.132650][ T4251] ? aa_sk_perm+0x1ab/0x820 [ 56.137216][ T4251] ? unix_stream_sendpage+0xa50/0xa50 [ 56.142558][ T4251] ? aa_af_perm+0x210/0x210 [ 56.147035][ T4251] ? unix_stream_sendpage+0xa50/0xa50 [ 56.152375][ T4251] sock_sendmsg+0xab/0xe0 [ 56.156677][ T4251] ____sys_sendmsg+0x38c/0x7a0 [ 56.161580][ T4251] ? kernel_sendmsg+0x30/0x30 [ 56.166221][ T4251] ? do_recvmmsg+0x550/0x550 [ 56.170780][ T4251] ___sys_sendmsg+0xd3/0x150 [ 56.175335][ T4251] ? sendmsg_copy_msghdr+0x110/0x110 [ 56.180588][ T4251] ? __fget_files+0x1b9/0x3c0 [ 56.185235][ T4251] ? find_held_lock+0x2d/0x110 [ 56.189964][ T4251] ? __might_fault+0xb3/0x160 [ 56.194607][ T4251] ? lock_downgrade+0x6e0/0x6e0 [ 56.199441][ T4251] __sys_sendmmsg+0x141/0x310 [ 56.204089][ T4251] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 56.209081][ T4251] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.215027][ T4251] ? find_held_lock+0x2d/0x110 [ 56.219765][ T4251] ? __context_tracking_exit+0x80/0x90 [ 56.225189][ T4251] ? lock_downgrade+0x6e0/0x6e0 [ 56.230006][ T4251] ? lock_downgrade+0x6e0/0x6e0 [ 56.234827][ T4251] __x64_sys_sendmmsg+0x94/0x100 [ 56.239731][ T4251] ? syscall_enter_from_user_mode+0x21/0x70 [ 56.245587][ T4251] do_syscall_64+0x35/0x80 [ 56.249969][ T4251] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.256024][ T4251] RIP: 0033:0x7f6bcd8878d9 [ 56.260407][ T4251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 56.279979][ T4251] RSP: 002b:00007f6bce9d1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.288359][ T4251] RAX: ffffffffffffffda RBX: 00007f6bcd98c020 RCX: 00007f6bcd8878d9 [ 56.296300][ T4251] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 56.304235][ T4251] RBP: 00007f6bce9d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 56.312173][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.320111][ T4251] R13: 00007ffdefcf793f R14: 00007f6bce9d1300 R15: 0000000000022000 [ 56.328059][ T4251] [ 56.345996][ T4228] CPU: 0 PID: 4228 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 56.349439][ T4267] FAULT_INJECTION: forcing a failure. [ 56.349439][ T4267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.354990][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.354999][ T4228] Call Trace: [ 56.355005][ T4228] [ 56.355010][ T4228] dump_stack_lvl+0x57/0x7d [ 56.355023][ T4228] should_fail.cold+0x5/0xa [ 56.355031][ T4228] ? skb_clone+0x125/0x300 [ 56.355038][ T4228] should_failslab+0x5/0x10 [ 56.355045][ T4228] kmem_cache_alloc+0x5e/0x3b0 [ 56.355051][ T4228] ? wait_for_completion_io_timeout+0x20/0x20 [ 56.355059][ T4228] skb_clone+0x125/0x300 [ 56.355066][ T4228] sk_psock_verdict_recv+0x48/0x610 [ 56.355075][ T4228] unix_read_sock+0xc4/0x1e0 [ 56.355081][ T4228] ? sk_psock_strp_parse+0x330/0x330 [ 56.355088][ T4228] ? unix_compat_ioctl+0x10/0x10 [ 56.422109][ T4271] FAULT_INJECTION: forcing a failure. [ 56.422109][ T4271] name failslab, interval 1, probability 0, space 0, times 0 [ 56.422229][ T4228] ? find_held_lock+0x2d/0x110 [ 56.448850][ T4272] FAULT_INJECTION: forcing a failure. [ 56.448850][ T4272] name failslab, interval 1, probability 0, space 0, times 0 [ 56.449477][ T4228] sk_psock_verdict_data_ready+0xf8/0x150 [ 56.449488][ T4228] ? sk_psock_strp_read_done+0x10/0x10 [ 56.449495][ T4228] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 56.449501][ T4228] ? do_raw_spin_unlock+0x171/0x230 [ 56.449508][ T4228] unix_dgram_sendmsg+0xca6/0x1770 [ 56.449524][ T4228] ? unix_stream_sendpage+0xa50/0xa50 [ 56.449530][ T4228] ? aa_af_perm+0x210/0x210 [ 56.449544][ T4228] ? unix_stream_sendpage+0xa50/0xa50 [ 56.449552][ T4228] sock_sendmsg+0xab/0xe0 [ 56.449560][ T4228] ____sys_sendmsg+0x38c/0x7a0 [ 56.518252][ T4228] ? kernel_sendmsg+0x30/0x30 [ 56.522898][ T4228] ? do_recvmmsg+0x550/0x550 [ 56.527457][ T4228] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.533417][ T4228] ___sys_sendmsg+0xd3/0x150 [ 56.537978][ T4228] ? sendmsg_copy_msghdr+0x110/0x110 [ 56.543233][ T4228] ? __fget_files+0x1b9/0x3c0 [ 56.547880][ T4228] ? lock_downgrade+0x6e0/0x6e0 [ 56.552712][ T4228] ? __fget_files+0x1d1/0x3c0 [ 56.557366][ T4228] ? __fget_light+0xbe/0x220 [ 56.561930][ T4228] __sys_sendmmsg+0x141/0x310 [ 56.566577][ T4228] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 56.571567][ T4228] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.577522][ T4228] ? find_held_lock+0x2d/0x110 [ 56.582257][ T4228] ? __context_tracking_exit+0x80/0x90 [ 56.587686][ T4228] ? lock_downgrade+0x6e0/0x6e0 [ 56.592506][ T4228] ? lock_downgrade+0x6e0/0x6e0 [ 56.597333][ T4228] __x64_sys_sendmmsg+0x94/0x100 [ 56.602239][ T4228] ? syscall_enter_from_user_mode+0x21/0x70 [ 56.608103][ T4228] do_syscall_64+0x35/0x80 [ 56.612489][ T4228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.618350][ T4228] RIP: 0033:0x7fb6342878d9 [ 56.622734][ T4228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 56.642307][ T4228] RSP: 002b:00007fb6354ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.650689][ T4228] RAX: ffffffffffffffda RBX: 00007fb63438bf60 RCX: 00007fb6342878d9 [ 56.658717][ T4228] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 56.666659][ T4228] RBP: 00007fb6354ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 56.674602][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.682543][ T4228] R13: 00007fffb655c5df R14: 00007fb6354ba300 R15: 0000000000022000 [ 56.690491][ T4228] [ 56.693483][ T4267] CPU: 1 PID: 4267 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 56.702129][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.712157][ T4267] Call Trace: [ 56.715414][ T4267] [ 56.718324][ T4267] dump_stack_lvl+0x57/0x7d [ 56.722803][ T4267] should_fail.cold+0x5/0xa [ 56.727277][ T4267] _copy_from_user+0x25/0xe0 [ 56.731834][ T4267] __copy_msghdr_from_user+0x86/0x3e0 [ 56.737223][ T4267] ? __ia32_sys_shutdown+0x70/0x70 [ 56.742321][ T4267] ? unix_stream_sendpage+0xa50/0xa50 [ 56.747667][ T4267] ? sock_sendmsg+0xab/0xe0 [ 56.752141][ T4267] sendmsg_copy_msghdr+0x7f/0x110 [ 56.757136][ T4267] ? do_recvmmsg+0x550/0x550 [ 56.761691][ T4267] ? __lock_acquire+0x15bc/0x5660 [ 56.766684][ T4267] ___sys_sendmsg+0xb8/0x150 [ 56.771238][ T4267] ? sendmsg_copy_msghdr+0x110/0x110 [ 56.776492][ T4267] ? __fget_files+0x1b9/0x3c0 [ 56.781140][ T4267] ? find_held_lock+0x2d/0x110 [ 56.785873][ T4267] ? __might_fault+0xb3/0x160 [ 56.790517][ T4267] ? lock_downgrade+0x6e0/0x6e0 [ 56.795338][ T4267] __sys_sendmmsg+0x141/0x310 [ 56.799985][ T4267] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 56.805071][ T4267] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.811015][ T4267] ? find_held_lock+0x2d/0x110 [ 56.815747][ T4267] ? __context_tracking_exit+0x80/0x90 [ 56.821173][ T4267] ? lock_downgrade+0x6e0/0x6e0 [ 56.826161][ T4267] ? lock_downgrade+0x6e0/0x6e0 [ 56.830983][ T4267] __x64_sys_sendmmsg+0x94/0x100 [ 56.835886][ T4267] ? syscall_enter_from_user_mode+0x21/0x70 [ 56.841741][ T4267] do_syscall_64+0x35/0x80 [ 56.846120][ T4267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.851977][ T4267] RIP: 0033:0x7efe7de878d9 [ 56.856362][ T4267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 56.876106][ T4267] RSP: 002b:00007efe7d5dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.884486][ T4267] RAX: ffffffffffffffda RBX: 00007efe7df8c020 RCX: 00007efe7de878d9 [ 56.892426][ T4267] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 56.900363][ T4267] RBP: 00007efe7d5dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 56.908301][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.916237][ T4267] R13: 00007ffc225babbf R14: 00007efe7d5dd300 R15: 0000000000022000 [ 56.924185][ T4267] [ 56.930783][ T2960] Bluetooth: hci1: command 0x040f tx timeout [ 56.974511][ T4271] CPU: 0 PID: 4271 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 56.983203][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.993230][ T4271] Call Trace: [ 56.996485][ T4271] [ 56.999389][ T4271] dump_stack_lvl+0x57/0x7d [ 57.003861][ T4271] should_fail.cold+0x5/0xa [ 57.008336][ T4271] should_failslab+0x5/0x10 [ 57.012813][ T4271] kmem_cache_alloc_node+0x65/0x3f0 [ 57.013215][ T4276] FAULT_INJECTION: forcing a failure. [ 57.013215][ T4276] name failslab, interval 1, probability 0, space 0, times 0 [ 57.017979][ T4271] ? __alloc_skb+0x151/0x270 [ 57.017991][ T4271] __alloc_skb+0x151/0x270 [ 57.018000][ T4271] alloc_skb_with_frags+0x72/0x700 [ 57.018007][ T4271] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.018019][ T4271] sock_alloc_send_pskb+0x636/0x7c0 [ 57.055681][ T4271] ? sock_wmalloc+0xe0/0xe0 [ 57.060153][ T4271] ? lock_downgrade+0x6e0/0x6e0 [ 57.064970][ T4271] ? do_raw_spin_lock+0x120/0x2a0 [ 57.069966][ T4271] ? rwlock_bug.part.0+0x90/0x90 [ 57.074874][ T4271] unix_dgram_sendmsg+0x35a/0x1770 [ 57.079961][ T4271] ? aa_sk_perm+0x1ab/0x820 [ 57.084434][ T4271] ? unix_stream_sendpage+0xa50/0xa50 [ 57.089773][ T4271] ? aa_af_perm+0x210/0x210 [ 57.094250][ T4271] ? unix_stream_sendpage+0xa50/0xa50 [ 57.099591][ T4271] sock_sendmsg+0xab/0xe0 [ 57.103890][ T4271] ____sys_sendmsg+0x38c/0x7a0 [ 57.108625][ T4271] ? kernel_sendmsg+0x30/0x30 [ 57.113269][ T4271] ? do_recvmmsg+0x550/0x550 [ 57.117835][ T4271] ___sys_sendmsg+0xd3/0x150 [ 57.122395][ T4271] ? sendmsg_copy_msghdr+0x110/0x110 [ 57.127651][ T4271] ? __fget_files+0x1b9/0x3c0 [ 57.132313][ T4271] ? find_held_lock+0x2d/0x110 [ 57.137047][ T4271] ? __might_fault+0xb3/0x160 [ 57.141693][ T4271] ? lock_downgrade+0x6e0/0x6e0 [ 57.146517][ T4271] __sys_sendmmsg+0x141/0x310 [ 57.151163][ T4271] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 57.156157][ T4271] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.162103][ T4271] ? find_held_lock+0x2d/0x110 [ 57.166843][ T4271] ? __context_tracking_exit+0x80/0x90 [ 57.172272][ T4271] ? lock_downgrade+0x6e0/0x6e0 [ 57.177090][ T4271] ? lock_downgrade+0x6e0/0x6e0 [ 57.181914][ T4271] __x64_sys_sendmmsg+0x94/0x100 [ 57.186819][ T4271] ? syscall_enter_from_user_mode+0x21/0x70 [ 57.192680][ T4271] do_syscall_64+0x35/0x80 [ 57.197064][ T4271] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.202924][ T4271] RIP: 0033:0x7fb1e6a878d9 [ 57.207311][ T4271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 57.226891][ T4271] RSP: 002b:00007fb1e7be7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.235272][ T4271] RAX: ffffffffffffffda RBX: 00007fb1e6b8c020 RCX: 00007fb1e6a878d9 [ 57.243212][ T4271] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 57.251150][ T4271] RBP: 00007fb1e7be71d0 R08: 0000000000000000 R09: 0000000000000000 [ 57.259091][ T4271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.267031][ T4271] R13: 00007ffde14cf4cf R14: 00007fb1e7be7300 R15: 0000000000022000 [ 57.274985][ T4271] [ 57.277979][ T4276] CPU: 1 PID: 4276 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 57.286631][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.296659][ T4276] Call Trace: [ 57.299911][ T4276] [ 57.302814][ T4276] dump_stack_lvl+0x57/0x7d [ 57.307284][ T4276] should_fail.cold+0x5/0xa [ 57.311756][ T4276] should_failslab+0x5/0x10 [ 57.316312][ T4276] kmem_cache_alloc_node+0x65/0x3f0 [ 57.321475][ T4276] ? __alloc_skb+0x151/0x270 [ 57.326031][ T4276] __alloc_skb+0x151/0x270 [ 57.330413][ T4276] alloc_skb_with_frags+0x72/0x700 [ 57.335490][ T4276] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.341437][ T4276] sock_alloc_send_pskb+0x636/0x7c0 [ 57.346604][ T4276] ? sock_wmalloc+0xe0/0xe0 [ 57.351069][ T4276] ? lock_downgrade+0x6e0/0x6e0 [ 57.355884][ T4276] ? do_raw_spin_lock+0x120/0x2a0 [ 57.360873][ T4276] ? rwlock_bug.part.0+0x90/0x90 [ 57.365775][ T4276] unix_dgram_sendmsg+0x35a/0x1770 [ 57.370857][ T4276] ? aa_sk_perm+0x1ab/0x820 [ 57.375326][ T4276] ? unix_stream_sendpage+0xa50/0xa50 [ 57.380672][ T4276] ? aa_af_perm+0x210/0x210 [ 57.385147][ T4276] ? unix_stream_sendpage+0xa50/0xa50 [ 57.390484][ T4276] sock_sendmsg+0xab/0xe0 [ 57.394778][ T4276] ____sys_sendmsg+0x38c/0x7a0 [ 57.399686][ T4276] ? kernel_sendmsg+0x30/0x30 [ 57.404326][ T4276] ? do_recvmmsg+0x550/0x550 [ 57.408887][ T4276] ___sys_sendmsg+0xd3/0x150 [ 57.413442][ T4276] ? sendmsg_copy_msghdr+0x110/0x110 [ 57.418693][ T4276] ? __fget_files+0x1b9/0x3c0 [ 57.423341][ T4276] ? find_held_lock+0x2d/0x110 [ 57.428068][ T4276] ? __might_fault+0xb3/0x160 [ 57.432708][ T4276] ? lock_downgrade+0x6e0/0x6e0 [ 57.437529][ T4276] __sys_sendmmsg+0x141/0x310 [ 57.442170][ T4276] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 57.447159][ T4276] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.453100][ T4276] ? find_held_lock+0x2d/0x110 [ 57.457833][ T4276] ? __context_tracking_exit+0x80/0x90 [ 57.463255][ T4276] ? lock_downgrade+0x6e0/0x6e0 [ 57.468070][ T4276] ? lock_downgrade+0x6e0/0x6e0 [ 57.472892][ T4276] __x64_sys_sendmmsg+0x94/0x100 [ 57.477792][ T4276] ? syscall_enter_from_user_mode+0x21/0x70 [ 57.483649][ T4276] do_syscall_64+0x35/0x80 [ 57.488032][ T4276] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.493895][ T4276] RIP: 0033:0x7fb6342878d9 [ 57.498276][ T4276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 57.517846][ T4276] RSP: 002b:00007fb635499188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.526220][ T4276] RAX: ffffffffffffffda RBX: 00007fb63438c020 RCX: 00007fb6342878d9 [ 57.534158][ T4276] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 57.542096][ T4276] RBP: 00007fb6354991d0 R08: 0000000000000000 R09: 0000000000000000 [ 57.550031][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.557970][ T4276] R13: 00007fffb655c5df R14: 00007fb635499300 R15: 0000000000022000 [ 57.565913][ T4276] [ 57.578196][ T4278] FAULT_INJECTION: forcing a failure. [ 57.578196][ T4278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.591374][ T4272] CPU: 0 PID: 4272 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 57.600020][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.610048][ T4272] Call Trace: [ 57.613306][ T4272] [ 57.616215][ T4272] dump_stack_lvl+0x57/0x7d [ 57.620689][ T4272] should_fail.cold+0x5/0xa [ 57.625165][ T4272] should_failslab+0x5/0x10 [ 57.629643][ T4272] kmem_cache_alloc_node+0x65/0x3f0 [ 57.634810][ T4272] ? __alloc_skb+0x151/0x270 [ 57.639377][ T4272] __alloc_skb+0x151/0x270 [ 57.643765][ T4272] alloc_skb_with_frags+0x72/0x700 [ 57.648848][ T4272] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.654800][ T4272] sock_alloc_send_pskb+0x636/0x7c0 [ 57.659972][ T4272] ? sock_wmalloc+0xe0/0xe0 [ 57.664447][ T4272] ? lock_downgrade+0x6e0/0x6e0 [ 57.669267][ T4272] ? do_raw_spin_lock+0x120/0x2a0 [ 57.674260][ T4272] ? rwlock_bug.part.0+0x90/0x90 [ 57.679172][ T4272] unix_dgram_sendmsg+0x35a/0x1770 [ 57.684261][ T4272] ? aa_sk_perm+0x1ab/0x820 [ 57.688735][ T4272] ? unix_stream_sendpage+0xa50/0xa50 [ 57.694078][ T4272] ? aa_af_perm+0x210/0x210 [ 57.698565][ T4272] ? unix_stream_sendpage+0xa50/0xa50 [ 57.703915][ T4272] sock_sendmsg+0xab/0xe0 [ 57.708217][ T4272] ____sys_sendmsg+0x38c/0x7a0 [ 57.712956][ T4272] ? kernel_sendmsg+0x30/0x30 [ 57.717604][ T4272] ? do_recvmmsg+0x550/0x550 [ 57.722186][ T4272] ___sys_sendmsg+0xd3/0x150 [ 57.726751][ T4272] ? sendmsg_copy_msghdr+0x110/0x110 [ 57.732006][ T4272] ? __fget_files+0x1b9/0x3c0 [ 57.736658][ T4272] ? find_held_lock+0x2d/0x110 [ 57.741396][ T4272] ? __might_fault+0xb3/0x160 [ 57.746043][ T4272] ? lock_downgrade+0x6e0/0x6e0 [ 57.750877][ T4272] __sys_sendmmsg+0x141/0x310 [ 57.755534][ T4272] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 57.760533][ T4272] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.766493][ T4272] ? find_held_lock+0x2d/0x110 [ 57.771242][ T4272] ? __context_tracking_exit+0x80/0x90 2022/04/16 19:41:09 executed programs: 28 [ 57.776791][ T4272] ? lock_downgrade+0x6e0/0x6e0 [ 57.781617][ T4272] ? lock_downgrade+0x6e0/0x6e0 [ 57.786450][ T4272] __x64_sys_sendmmsg+0x94/0x100 [ 57.791364][ T4272] ? syscall_enter_from_user_mode+0x21/0x70 [ 57.797225][ T4272] do_syscall_64+0x35/0x80 [ 57.799239][ T4280] FAULT_INJECTION: forcing a failure. [ 57.799239][ T4280] name failslab, interval 1, probability 0, space 0, times 0 [ 57.801618][ T4272] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 57.801626][ T4272] RIP: 0033:0x7f4ed14878d9 [ 57.801632][ T4272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 57.801637][ T4272] RSP: 002b:00007f4ed250b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.852390][ T4272] RAX: ffffffffffffffda RBX: 00007f4ed158c020 RCX: 00007f4ed14878d9 [ 57.860343][ T4272] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 57.868286][ T4272] RBP: 00007f4ed250b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 57.876225][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.884166][ T4272] R13: 00007ffe57270dcf R14: 00007f4ed250b300 R15: 0000000000022000 [ 57.892112][ T4272] [ 57.904880][ T4280] CPU: 0 PID: 4280 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 57.913558][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.923600][ T4280] Call Trace: [ 57.926860][ T4280] [ 57.929764][ T4280] dump_stack_lvl+0x57/0x7d [ 57.934238][ T4280] should_fail.cold+0x5/0xa [ 57.938708][ T4280] ? skb_clone+0x125/0x300 [ 57.943088][ T4280] should_failslab+0x5/0x10 [ 57.947557][ T4280] kmem_cache_alloc+0x5e/0x3b0 [ 57.952283][ T4280] ? wait_for_completion_io_timeout+0x20/0x20 [ 57.958315][ T4280] skb_clone+0x125/0x300 [ 57.962525][ T4280] sk_psock_verdict_recv+0x48/0x610 [ 57.967693][ T4280] unix_read_sock+0xc4/0x1e0 [ 57.972248][ T4280] ? sk_psock_strp_parse+0x330/0x330 [ 57.977500][ T4280] ? unix_compat_ioctl+0x10/0x10 [ 57.982401][ T4280] ? find_held_lock+0x2d/0x110 [ 57.987130][ T4280] sk_psock_verdict_data_ready+0xf8/0x150 [ 57.992814][ T4280] ? sk_psock_strp_read_done+0x10/0x10 [ 57.998237][ T4280] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 58.004179][ T4280] ? do_raw_spin_unlock+0x171/0x230 [ 58.009341][ T4280] unix_dgram_sendmsg+0xca6/0x1770 [ 58.014423][ T4280] ? unix_stream_sendpage+0xa50/0xa50 [ 58.019757][ T4280] ? aa_af_perm+0x210/0x210 [ 58.024230][ T4280] ? unix_stream_sendpage+0xa50/0xa50 [ 58.029569][ T4280] sock_sendmsg+0xab/0xe0 [ 58.033863][ T4280] ____sys_sendmsg+0x38c/0x7a0 [ 58.038593][ T4280] ? kernel_sendmsg+0x30/0x30 [ 58.043232][ T4280] ? do_recvmmsg+0x550/0x550 [ 58.047784][ T4280] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 58.053819][ T4280] ___sys_sendmsg+0xd3/0x150 [ 58.058376][ T4280] ? sendmsg_copy_msghdr+0x110/0x110 [ 58.063627][ T4280] ? __fget_files+0x1b9/0x3c0 [ 58.068270][ T4280] ? lock_downgrade+0x6e0/0x6e0 [ 58.073088][ T4280] ? __fget_files+0x1d1/0x3c0 [ 58.077733][ T4280] ? __fget_light+0xbe/0x220 [ 58.082287][ T4280] __sys_sendmmsg+0x141/0x310 [ 58.086930][ T4280] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 58.091915][ T4280] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 58.097856][ T4280] ? find_held_lock+0x2d/0x110 [ 58.102590][ T4280] ? __context_tracking_exit+0x80/0x90 [ 58.108012][ T4280] ? lock_downgrade+0x6e0/0x6e0 [ 58.112826][ T4280] ? lock_downgrade+0x6e0/0x6e0 [ 58.117645][ T4280] __x64_sys_sendmmsg+0x94/0x100 [ 58.122551][ T4280] ? syscall_enter_from_user_mode+0x21/0x70 [ 58.128407][ T4280] do_syscall_64+0x35/0x80 [ 58.132786][ T4280] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.138645][ T4280] RIP: 0033:0x7efe7de878d9 [ 58.143028][ T4280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 58.162599][ T4280] RSP: 002b:00007efe7d5fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.170976][ T4280] RAX: ffffffffffffffda RBX: 00007efe7df8bf60 RCX: 00007efe7de878d9 [ 58.178914][ T4280] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 58.186849][ T4280] RBP: 00007efe7d5fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 58.194784][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.202721][ T4280] R13: 00007ffc225babbf R14: 00007efe7d5fe300 R15: 0000000000022000 [ 58.210669][ T4280] [ 58.225411][ T4289] FAULT_INJECTION: forcing a failure. [ 58.225411][ T4289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.225522][ T4287] FAULT_INJECTION: forcing a failure. [ 58.225522][ T4287] name failslab, interval 1, probability 0, space 0, times 0 [ 58.243194][ T4278] CPU: 0 PID: 4278 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 58.252339][ T4288] FAULT_INJECTION: forcing a failure. [ 58.252339][ T4288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.260136][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.260140][ T4278] Call Trace: [ 58.260143][ T4278] [ 58.260146][ T4278] dump_stack_lvl+0x57/0x7d [ 58.260157][ T4278] should_fail.cold+0x5/0xa [ 58.260171][ T4278] _copy_from_user+0x25/0xe0 [ 58.260180][ T4278] __copy_msghdr_from_user+0x86/0x3e0 [ 58.260189][ T4278] ? __ia32_sys_shutdown+0x70/0x70 [ 58.260197][ T4278] ? unix_stream_sendpage+0xa50/0xa50 [ 58.260206][ T4278] ? sock_sendmsg+0xab/0xe0 [ 58.260215][ T4278] sendmsg_copy_msghdr+0x7f/0x110 [ 58.328121][ T4278] ? do_recvmmsg+0x550/0x550 [ 58.332698][ T4278] ? __lock_acquire+0x15bc/0x5660 [ 58.337712][ T4278] ___sys_sendmsg+0xb8/0x150 [ 58.342290][ T4278] ? sendmsg_copy_msghdr+0x110/0x110 [ 58.347565][ T4278] ? __fget_files+0x1b9/0x3c0 [ 58.352236][ T4278] ? find_held_lock+0x2d/0x110 [ 58.356990][ T4278] ? __might_fault+0xb3/0x160 [ 58.361660][ T4278] ? lock_downgrade+0x6e0/0x6e0 [ 58.366502][ T4278] __sys_sendmmsg+0x141/0x310 [ 58.371173][ T4278] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 58.376187][ T4278] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 58.382152][ T4278] ? find_held_lock+0x2d/0x110 [ 58.386910][ T4278] ? __context_tracking_exit+0x80/0x90 [ 58.392347][ T4278] ? lock_downgrade+0x6e0/0x6e0 [ 58.397262][ T4278] ? lock_downgrade+0x6e0/0x6e0 [ 58.402105][ T4278] __x64_sys_sendmmsg+0x94/0x100 [ 58.407030][ T4278] ? syscall_enter_from_user_mode+0x21/0x70 [ 58.412906][ T4278] do_syscall_64+0x35/0x80 [ 58.417304][ T4278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.423172][ T4278] RIP: 0033:0x7fd82a2878d9 [ 58.427558][ T4278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 58.447133][ T4278] RSP: 002b:00007fd8299fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.455513][ T4278] RAX: ffffffffffffffda RBX: 00007fd82a38c020 RCX: 00007fd82a2878d9 [ 58.463455][ T4278] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 58.471399][ T4278] RBP: 00007fd8299fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 58.479340][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.487281][ T4278] R13: 00007ffda011e60f R14: 00007fd8299fe300 R15: 0000000000022000 [ 58.495233][ T4278] [ 58.498266][ T4288] CPU: 1 PID: 4288 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 58.506920][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.516953][ T4288] Call Trace: [ 58.520210][ T4288] [ 58.523118][ T4288] dump_stack_lvl+0x57/0x7d [ 58.527596][ T4288] should_fail.cold+0x5/0xa [ 58.532074][ T4288] _copy_from_user+0x25/0xe0 [ 58.536641][ T4288] __copy_msghdr_from_user+0x86/0x3e0 [ 58.539506][ T4292] FAULT_INJECTION: forcing a failure. [ 58.539506][ T4292] name failslab, interval 1, probability 0, space 0, times 0 [ 58.541990][ T4288] ? __ia32_sys_shutdown+0x70/0x70 [ 58.541999][ T4288] ? unix_stream_sendpage+0xa50/0xa50 [ 58.542008][ T4288] ? sock_sendmsg+0xab/0xe0 [ 58.542017][ T4288] sendmsg_copy_msghdr+0x7f/0x110 [ 58.574507][ T4288] ? do_recvmmsg+0x550/0x550 [ 58.579072][ T4288] ? __lock_acquire+0x15bc/0x5660 [ 58.584074][ T4288] ___sys_sendmsg+0xb8/0x150 [ 58.588630][ T4288] ? sendmsg_copy_msghdr+0x110/0x110 [ 58.593888][ T4288] ? __fget_files+0x1b9/0x3c0 [ 58.598547][ T4288] ? find_held_lock+0x2d/0x110 [ 58.603278][ T4288] ? __might_fault+0xb3/0x160 [ 58.607923][ T4288] ? lock_downgrade+0x6e0/0x6e0 [ 58.612746][ T4288] __sys_sendmmsg+0x141/0x310 [ 58.617394][ T4288] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 58.622390][ T4288] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 58.628513][ T4288] ? find_held_lock+0x2d/0x110 [ 58.633514][ T4288] ? __context_tracking_exit+0x80/0x90 [ 58.638942][ T4288] ? lock_downgrade+0x6e0/0x6e0 [ 58.643763][ T4288] ? lock_downgrade+0x6e0/0x6e0 [ 58.648591][ T4288] __x64_sys_sendmmsg+0x94/0x100 [ 58.653499][ T4288] ? syscall_enter_from_user_mode+0x21/0x70 [ 58.659363][ T4288] do_syscall_64+0x35/0x80 [ 58.663746][ T4288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.669605][ T4288] RIP: 0033:0x7fb1e6a878d9 [ 58.673990][ T4288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 58.693656][ T4288] RSP: 002b:00007fb1e7be7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.702039][ T4288] RAX: ffffffffffffffda RBX: 00007fb1e6b8c020 RCX: 00007fb1e6a878d9 [ 58.709984][ T4288] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 58.717930][ T4288] RBP: 00007fb1e7be71d0 R08: 0000000000000000 R09: 0000000000000000 [ 58.726308][ T4288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.734251][ T4288] R13: 00007ffde14cf4cf R14: 00007fb1e7be7300 R15: 0000000000022000 [ 58.742204][ T4288] [ 58.745199][ T4287] CPU: 0 PID: 4287 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 58.754284][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.764315][ T4287] Call Trace: [ 58.767570][ T4287] [ 58.770483][ T4287] dump_stack_lvl+0x57/0x7d [ 58.774962][ T4287] should_fail.cold+0x5/0xa [ 58.779445][ T4287] should_failslab+0x5/0x10 [ 58.783921][ T4287] kmem_cache_alloc_node+0x65/0x3f0 [ 58.789089][ T4287] ? __alloc_skb+0x151/0x270 [ 58.793652][ T4287] __alloc_skb+0x151/0x270 [ 58.798050][ T4287] alloc_skb_with_frags+0x72/0x700 [ 58.803139][ T4287] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 58.809104][ T4287] sock_alloc_send_pskb+0x636/0x7c0 [ 58.814287][ T4287] ? sock_wmalloc+0xe0/0xe0 [ 58.818762][ T4287] ? lock_downgrade+0x6e0/0x6e0 [ 58.823581][ T4287] ? do_raw_spin_lock+0x120/0x2a0 [ 58.828573][ T4287] ? rwlock_bug.part.0+0x90/0x90 [ 58.833485][ T4287] unix_dgram_sendmsg+0x35a/0x1770 [ 58.838572][ T4287] ? aa_sk_perm+0x1ab/0x820 [ 58.843044][ T4287] ? unix_stream_sendpage+0xa50/0xa50 [ 58.848386][ T4287] ? aa_af_perm+0x210/0x210 [ 58.852862][ T4287] ? unix_stream_sendpage+0xa50/0xa50 [ 58.858205][ T4287] sock_sendmsg+0xab/0xe0 [ 58.862504][ T4287] ____sys_sendmsg+0x38c/0x7a0 [ 58.867238][ T4287] ? kernel_sendmsg+0x30/0x30 [ 58.871885][ T4287] ? do_recvmmsg+0x550/0x550 [ 58.876449][ T4287] ___sys_sendmsg+0xd3/0x150 [ 58.881007][ T4287] ? sendmsg_copy_msghdr+0x110/0x110 [ 58.886262][ T4287] ? __fget_files+0x1b9/0x3c0 [ 58.890914][ T4287] ? find_held_lock+0x2d/0x110 [ 58.895656][ T4287] ? __might_fault+0xb3/0x160 [ 58.899470][ T4298] FAULT_INJECTION: forcing a failure. [ 58.899470][ T4298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.900311][ T4287] ? lock_downgrade+0x6e0/0x6e0 [ 58.900327][ T4287] __sys_sendmmsg+0x141/0x310 [ 58.900337][ T4287] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 58.927749][ T4287] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 58.933697][ T4287] ? find_held_lock+0x2d/0x110 [ 58.938445][ T4287] ? __context_tracking_exit+0x80/0x90 [ 58.943887][ T4287] ? lock_downgrade+0x6e0/0x6e0 [ 58.948723][ T4287] ? lock_downgrade+0x6e0/0x6e0 [ 58.949292][ T4299] FAULT_INJECTION: forcing a failure. [ 58.949292][ T4299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.953556][ T4287] __x64_sys_sendmmsg+0x94/0x100 [ 58.953566][ T4287] ? syscall_enter_from_user_mode+0x21/0x70 [ 58.953573][ T4287] do_syscall_64+0x35/0x80 [ 58.953579][ T4287] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 58.953586][ T4287] RIP: 0033:0x7f6bcd8878d9 [ 58.953592][ T4287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 58.953597][ T4287] RSP: 002b:00007f6bce9d1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.953604][ T4287] RAX: ffffffffffffffda RBX: 00007f6bcd98c020 RCX: 00007f6bcd8878d9 [ 58.953608][ T4287] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 58.953612][ T4287] RBP: 00007f6bce9d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 58.953615][ T4287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.953619][ T4287] R13: 00007ffdefcf793f R14: 00007f6bce9d1300 R15: 0000000000022000 [ 58.953633][ T4287] [ 58.958173][ T4292] CPU: 0 PID: 4292 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 59.018521][ T22] Bluetooth: hci1: command 0x0419 tx timeout [ 59.020165][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.020170][ T4292] Call Trace: [ 59.090685][ T4292] [ 59.093597][ T4292] dump_stack_lvl+0x57/0x7d [ 59.098071][ T4292] should_fail.cold+0x5/0xa [ 59.102545][ T4292] should_failslab+0x5/0x10 [ 59.107015][ T4292] kmem_cache_alloc_node+0x65/0x3f0 [ 59.112182][ T4292] ? __alloc_skb+0x151/0x270 [ 59.116744][ T4292] __alloc_skb+0x151/0x270 [ 59.121137][ T4292] alloc_skb_with_frags+0x72/0x700 [ 59.126217][ T4292] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.132170][ T4292] sock_alloc_send_pskb+0x636/0x7c0 [ 59.137345][ T4292] ? sock_wmalloc+0xe0/0xe0 [ 59.141817][ T4292] ? lock_downgrade+0x6e0/0x6e0 [ 59.146636][ T4292] ? do_raw_spin_lock+0x120/0x2a0 [ 59.151630][ T4292] ? rwlock_bug.part.0+0x90/0x90 [ 59.156544][ T4292] unix_dgram_sendmsg+0x35a/0x1770 [ 59.161631][ T4292] ? aa_sk_perm+0x1ab/0x820 [ 59.166106][ T4292] ? unix_stream_sendpage+0xa50/0xa50 [ 59.171448][ T4292] ? aa_af_perm+0x210/0x210 [ 59.175924][ T4292] ? unix_stream_sendpage+0xa50/0xa50 [ 59.181265][ T4292] sock_sendmsg+0xab/0xe0 [ 59.185568][ T4292] ____sys_sendmsg+0x38c/0x7a0 [ 59.190305][ T4292] ? kernel_sendmsg+0x30/0x30 [ 59.194950][ T4292] ? do_recvmmsg+0x550/0x550 [ 59.199514][ T4292] ___sys_sendmsg+0xd3/0x150 [ 59.204075][ T4292] ? sendmsg_copy_msghdr+0x110/0x110 [ 59.209333][ T4292] ? __fget_files+0x1b9/0x3c0 [ 59.213990][ T4292] ? find_held_lock+0x2d/0x110 [ 59.218727][ T4292] ? __might_fault+0xb3/0x160 [ 59.223376][ T4292] ? lock_downgrade+0x6e0/0x6e0 [ 59.228203][ T4292] __sys_sendmmsg+0x141/0x310 [ 59.232851][ T4292] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 59.237842][ T4292] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.243786][ T4292] ? find_held_lock+0x2d/0x110 [ 59.248524][ T4292] ? __context_tracking_exit+0x80/0x90 [ 59.253956][ T4292] ? lock_downgrade+0x6e0/0x6e0 [ 59.258779][ T4292] ? lock_downgrade+0x6e0/0x6e0 [ 59.263611][ T4292] __x64_sys_sendmmsg+0x94/0x100 [ 59.268516][ T4292] ? syscall_enter_from_user_mode+0x21/0x70 [ 59.274379][ T4292] do_syscall_64+0x35/0x80 [ 59.278762][ T4292] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.284621][ T4292] RIP: 0033:0x7f4ed14878d9 [ 59.289007][ T4292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 59.308581][ T4292] RSP: 002b:00007f4ed250b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.316962][ T4292] RAX: ffffffffffffffda RBX: 00007f4ed158c020 RCX: 00007f4ed14878d9 [ 59.324905][ T4292] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 59.332845][ T4292] RBP: 00007f4ed250b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 59.340785][ T4292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.348728][ T4292] R13: 00007ffe57270dcf R14: 00007f4ed250b300 R15: 0000000000022000 [ 59.356680][ T4292] [ 59.359677][ T4289] CPU: 1 PID: 4289 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 59.368324][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.378355][ T4289] Call Trace: [ 59.381605][ T4289] [ 59.384507][ T4289] dump_stack_lvl+0x57/0x7d [ 59.388978][ T4289] should_fail.cold+0x5/0xa [ 59.393447][ T4289] _copy_from_user+0x25/0xe0 [ 59.398001][ T4289] __copy_msghdr_from_user+0x86/0x3e0 [ 59.403340][ T4289] ? __ia32_sys_shutdown+0x70/0x70 [ 59.408417][ T4289] ? unix_stream_sendpage+0xa50/0xa50 [ 59.413756][ T4289] ? sock_sendmsg+0xab/0xe0 [ 59.418224][ T4289] sendmsg_copy_msghdr+0x7f/0x110 [ 59.423213][ T4289] ? do_recvmmsg+0x550/0x550 [ 59.427770][ T4289] ? __lock_acquire+0x15bc/0x5660 [ 59.432852][ T4289] ___sys_sendmsg+0xb8/0x150 [ 59.437406][ T4289] ? sendmsg_copy_msghdr+0x110/0x110 [ 59.442657][ T4289] ? __fget_files+0x1b9/0x3c0 [ 59.447302][ T4289] ? find_held_lock+0x2d/0x110 [ 59.452029][ T4289] ? __might_fault+0xb3/0x160 [ 59.456671][ T4289] ? lock_downgrade+0x6e0/0x6e0 [ 59.461490][ T4289] __sys_sendmmsg+0x141/0x310 [ 59.466132][ T4289] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 59.471120][ T4289] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.477061][ T4289] ? find_held_lock+0x2d/0x110 [ 59.481795][ T4289] ? __context_tracking_exit+0x80/0x90 [ 59.487218][ T4289] ? lock_downgrade+0x6e0/0x6e0 [ 59.492036][ T4289] ? lock_downgrade+0x6e0/0x6e0 [ 59.496856][ T4289] __x64_sys_sendmmsg+0x94/0x100 [ 59.501761][ T4289] ? syscall_enter_from_user_mode+0x21/0x70 [ 59.507617][ T4289] do_syscall_64+0x35/0x80 [ 59.511998][ T4289] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.517853][ T4289] RIP: 0033:0x7fb6342878d9 [ 59.522233][ T4289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 59.541980][ T4289] RSP: 002b:00007fb635499188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.550358][ T4289] RAX: ffffffffffffffda RBX: 00007fb63438c020 RCX: 00007fb6342878d9 [ 59.558296][ T4289] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 59.566232][ T4289] RBP: 00007fb6354991d0 R08: 0000000000000000 R09: 0000000000000000 [ 59.574166][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.582106][ T4289] R13: 00007fffb655c5df R14: 00007fb635499300 R15: 0000000000022000 [ 59.590052][ T4289] [ 59.596661][ T4298] CPU: 0 PID: 4298 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 59.605328][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.615354][ T4298] Call Trace: [ 59.618615][ T4298] [ 59.621695][ T4298] dump_stack_lvl+0x57/0x7d [ 59.626168][ T4298] should_fail.cold+0x5/0xa [ 59.630677][ T4298] _copy_from_user+0x25/0xe0 [ 59.635236][ T4298] __copy_msghdr_from_user+0x86/0x3e0 [ 59.640577][ T4298] ? __ia32_sys_shutdown+0x70/0x70 [ 59.645658][ T4298] ? unix_stream_sendpage+0xa50/0xa50 [ 59.651004][ T4298] ? sock_sendmsg+0xab/0xe0 [ 59.655568][ T4298] sendmsg_copy_msghdr+0x7f/0x110 [ 59.660567][ T4298] ? do_recvmmsg+0x550/0x550 [ 59.665304][ T4298] ? __lock_acquire+0x15bc/0x5660 [ 59.670303][ T4298] ___sys_sendmsg+0xb8/0x150 [ 59.674866][ T4298] ? sendmsg_copy_msghdr+0x110/0x110 [ 59.680125][ T4298] ? __fget_files+0x1b9/0x3c0 [ 59.684777][ T4298] ? find_held_lock+0x2d/0x110 [ 59.689510][ T4298] ? __might_fault+0xb3/0x160 [ 59.694156][ T4298] ? lock_downgrade+0x6e0/0x6e0 [ 59.699153][ T4298] __sys_sendmmsg+0x141/0x310 [ 59.703801][ T4298] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 59.708795][ T4298] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.714741][ T4298] ? find_held_lock+0x2d/0x110 [ 59.719479][ T4298] ? __context_tracking_exit+0x80/0x90 [ 59.724907][ T4298] ? lock_downgrade+0x6e0/0x6e0 [ 59.729725][ T4298] ? lock_downgrade+0x6e0/0x6e0 [ 59.734549][ T4298] __x64_sys_sendmmsg+0x94/0x100 [ 59.739455][ T4298] ? syscall_enter_from_user_mode+0x21/0x70 [ 59.745400][ T4298] do_syscall_64+0x35/0x80 [ 59.749786][ T4298] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.755651][ T4298] RIP: 0033:0x7fd82a2878d9 [ 59.760128][ T4298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 59.779790][ T4298] RSP: 002b:00007fd8299fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.788171][ T4298] RAX: ffffffffffffffda RBX: 00007fd82a38c020 RCX: 00007fd82a2878d9 [ 59.796111][ T4298] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 59.804055][ T4298] RBP: 00007fd8299fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 59.812092][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.820126][ T4298] R13: 00007ffda011e60f R14: 00007fd8299fe300 R15: 0000000000022000 [ 59.828081][ T4298] [ 59.831074][ T4299] CPU: 1 PID: 4299 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 59.839735][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.849778][ T4299] Call Trace: [ 59.853031][ T4299] [ 59.855935][ T4299] dump_stack_lvl+0x57/0x7d [ 59.860408][ T4299] should_fail.cold+0x5/0xa [ 59.864880][ T4299] _copy_from_user+0x25/0xe0 [ 59.869439][ T4299] __copy_msghdr_from_user+0x86/0x3e0 [ 59.874777][ T4299] ? __ia32_sys_shutdown+0x70/0x70 [ 59.879864][ T4299] ? unix_stream_sendpage+0xa50/0xa50 [ 59.885203][ T4299] ? sock_sendmsg+0xab/0xe0 [ 59.889677][ T4299] sendmsg_copy_msghdr+0x7f/0x110 [ 59.894669][ T4299] ? do_recvmmsg+0x550/0x550 [ 59.899223][ T4299] ? __lock_acquire+0x15bc/0x5660 [ 59.904218][ T4299] ___sys_sendmsg+0xb8/0x150 [ 59.908773][ T4299] ? sendmsg_copy_msghdr+0x110/0x110 [ 59.914025][ T4299] ? __fget_files+0x1b9/0x3c0 [ 59.918677][ T4299] ? find_held_lock+0x2d/0x110 [ 59.923410][ T4299] ? __might_fault+0xb3/0x160 [ 59.928055][ T4299] ? lock_downgrade+0x6e0/0x6e0 [ 59.932877][ T4299] __sys_sendmmsg+0x141/0x310 [ 59.937522][ T4299] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 59.942599][ T4299] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.948543][ T4299] ? find_held_lock+0x2d/0x110 [ 59.953279][ T4299] ? __context_tracking_exit+0x80/0x90 [ 59.958711][ T4299] ? lock_downgrade+0x6e0/0x6e0 [ 59.963533][ T4299] ? lock_downgrade+0x6e0/0x6e0 [ 59.968357][ T4299] __x64_sys_sendmmsg+0x94/0x100 [ 59.973264][ T4299] ? syscall_enter_from_user_mode+0x21/0x70 [ 59.979119][ T4299] do_syscall_64+0x35/0x80 [ 59.983499][ T4299] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 59.989358][ T4299] RIP: 0033:0x7efe7de878d9 [ 59.993739][ T4299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 60.013313][ T4299] RSP: 002b:00007efe7d5dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 60.021692][ T4299] RAX: ffffffffffffffda RBX: 00007efe7df8c020 RCX: 00007efe7de878d9 [ 60.029634][ T4299] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 60.037574][ T4299] RBP: 00007efe7d5dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 60.045514][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.053454][ T4299] R13: 00007ffc225babbf R14: 00007efe7d5dd300 R15: 0000000000022000 [ 60.061403][ T4299] [ 60.091827][ T4301] FAULT_INJECTION: forcing a failure. [ 60.091827][ T4301] name failslab, interval 1, probability 0, space 0, times 0 [ 60.154738][ T4308] FAULT_INJECTION: forcing a failure. [ 60.154738][ T4308] name failslab, interval 1, probability 0, space 0, times 0 [ 60.156244][ T4310] FAULT_INJECTION: forcing a failure. [ 60.156244][ T4310] name failslab, interval 1, probability 0, space 0, times 0 [ 60.168992][ T4307] FAULT_INJECTION: forcing a failure. [ 60.168992][ T4307] name failslab, interval 1, probability 0, space 0, times 0 [ 60.182536][ T4309] FAULT_INJECTION: forcing a failure. [ 60.182536][ T4309] name failslab, interval 1, probability 0, space 0, times 0 [ 60.195379][ T4301] CPU: 0 PID: 4301 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 60.207436][ T4311] FAULT_INJECTION: forcing a failure. [ 60.207436][ T4311] name failslab, interval 1, probability 0, space 0, times 0 [ 60.214166][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.214170][ T4301] Call Trace: [ 60.214174][ T4301] [ 60.214177][ T4301] dump_stack_lvl+0x57/0x7d [ 60.214188][ T4301] should_fail.cold+0x5/0xa [ 60.214196][ T4301] ? skb_clone+0x125/0x300 [ 60.214204][ T4301] should_failslab+0x5/0x10 [ 60.214211][ T4301] kmem_cache_alloc+0x5e/0x3b0 [ 60.265434][ T4301] ? wait_for_completion_io_timeout+0x20/0x20 [ 60.271471][ T4301] skb_clone+0x125/0x300 [ 60.275768][ T4301] sk_psock_verdict_recv+0x48/0x610 [ 60.280931][ T4301] unix_read_sock+0xc4/0x1e0 [ 60.285486][ T4301] ? sk_psock_strp_parse+0x330/0x330 [ 60.290737][ T4301] ? unix_compat_ioctl+0x10/0x10 [ 60.295674][ T4301] ? find_held_lock+0x2d/0x110 [ 60.300409][ T4301] sk_psock_verdict_data_ready+0xf8/0x150 [ 60.306091][ T4301] ? sk_psock_strp_read_done+0x10/0x10 [ 60.311513][ T4301] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 60.317454][ T4301] ? do_raw_spin_unlock+0x171/0x230 [ 60.322814][ T4301] unix_dgram_sendmsg+0xca6/0x1770 [ 60.327901][ T4301] ? unix_stream_sendpage+0xa50/0xa50 [ 60.333236][ T4301] ? aa_af_perm+0x210/0x210 [ 60.337709][ T4301] ? unix_stream_sendpage+0xa50/0xa50 [ 60.343045][ T4301] sock_sendmsg+0xab/0xe0 [ 60.347343][ T4301] ____sys_sendmsg+0x38c/0x7a0 [ 60.352078][ T4301] ? kernel_sendmsg+0x30/0x30 [ 60.356717][ T4301] ? do_recvmmsg+0x550/0x550 [ 60.361272][ T4301] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 60.367219][ T4301] ___sys_sendmsg+0xd3/0x150 [ 60.371775][ T4301] ? sendmsg_copy_msghdr+0x110/0x110 [ 60.377025][ T4301] ? __fget_files+0x1b9/0x3c0 [ 60.381665][ T4301] ? lock_downgrade+0x6e0/0x6e0 [ 60.386485][ T4301] ? __fget_files+0x1d1/0x3c0 [ 60.391127][ T4301] ? __fget_light+0xbe/0x220 [ 60.395684][ T4301] __sys_sendmmsg+0x141/0x310 [ 60.400329][ T4301] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 60.405320][ T4301] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 60.411262][ T4301] ? find_held_lock+0x2d/0x110 [ 60.415993][ T4301] ? __context_tracking_exit+0x80/0x90 [ 60.421502][ T4301] ? lock_downgrade+0x6e0/0x6e0 [ 60.426317][ T4301] ? lock_downgrade+0x6e0/0x6e0 [ 60.431139][ T4301] __x64_sys_sendmmsg+0x94/0x100 [ 60.436039][ T4301] ? syscall_enter_from_user_mode+0x21/0x70 [ 60.441895][ T4301] do_syscall_64+0x35/0x80 [ 60.446276][ T4301] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.452131][ T4301] RIP: 0033:0x7fb6342878d9 [ 60.456512][ T4301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 60.476096][ T4301] RSP: 002b:00007fb6354ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 60.484471][ T4301] RAX: ffffffffffffffda RBX: 00007fb63438bf60 RCX: 00007fb6342878d9 [ 60.492410][ T4301] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 60.500350][ T4301] RBP: 00007fb6354ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 60.508288][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.516225][ T4301] R13: 00007fffb655c5df R14: 00007fb6354ba300 R15: 0000000000022000 [ 60.524177][ T4301] [ 60.529351][ T4309] CPU: 0 PID: 4309 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 60.538002][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.548029][ T4309] Call Trace: [ 60.551284][ T4309] [ 60.554187][ T4309] dump_stack_lvl+0x57/0x7d [ 60.558658][ T4309] should_fail.cold+0x5/0xa [ 60.563130][ T4309] ? skb_clone+0x125/0x300 [ 60.567514][ T4309] should_failslab+0x5/0x10 [ 60.571987][ T4309] kmem_cache_alloc+0x5e/0x3b0 [ 60.576720][ T4309] ? wait_for_completion_io_timeout+0x20/0x20 [ 60.582759][ T4309] skb_clone+0x125/0x300 [ 60.586976][ T4309] sk_psock_verdict_recv+0x48/0x610 [ 60.592152][ T4309] unix_read_sock+0xc4/0x1e0 [ 60.596720][ T4309] ? sk_psock_strp_parse+0x330/0x330 [ 60.601979][ T4309] ? unix_compat_ioctl+0x10/0x10 [ 60.606883][ T4309] ? find_held_lock+0x2d/0x110 [ 60.611623][ T4309] sk_psock_verdict_data_ready+0xf8/0x150 [ 60.617313][ T4309] ? sk_psock_strp_read_done+0x10/0x10 [ 60.622739][ T4309] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 60.628687][ T4309] ? do_raw_spin_unlock+0x171/0x230 [ 60.633853][ T4309] unix_dgram_sendmsg+0xca6/0x1770 [ 60.638944][ T4309] ? unix_stream_sendpage+0xa50/0xa50 [ 60.644289][ T4309] ? aa_af_perm+0x210/0x210 [ 60.648776][ T4309] ? unix_stream_sendpage+0xa50/0xa50 [ 60.654115][ T4309] sock_sendmsg+0xab/0xe0 [ 60.658414][ T4309] ____sys_sendmsg+0x38c/0x7a0 [ 60.663148][ T4309] ? kernel_sendmsg+0x30/0x30 [ 60.667797][ T4309] ? do_recvmmsg+0x550/0x550 [ 60.672361][ T4309] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 60.678313][ T4309] ___sys_sendmsg+0xd3/0x150 [ 60.682877][ T4309] ? sendmsg_copy_msghdr+0x110/0x110 [ 60.688132][ T4309] ? __fget_files+0x1b9/0x3c0 [ 60.692779][ T4309] ? lock_downgrade+0x6e0/0x6e0 [ 60.697604][ T4309] ? __fget_files+0x1d1/0x3c0 [ 60.702254][ T4309] ? __fget_light+0xbe/0x220 [ 60.706818][ T4309] __sys_sendmmsg+0x141/0x310 [ 60.711468][ T4309] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 60.716549][ T4309] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 60.722499][ T4309] ? find_held_lock+0x2d/0x110 [ 60.727238][ T4309] ? __context_tracking_exit+0x80/0x90 [ 60.732666][ T4309] ? lock_downgrade+0x6e0/0x6e0 [ 60.737488][ T4309] ? lock_downgrade+0x6e0/0x6e0 [ 60.742322][ T4309] __x64_sys_sendmmsg+0x94/0x100 [ 60.747233][ T4309] ? syscall_enter_from_user_mode+0x21/0x70 [ 60.753094][ T4309] do_syscall_64+0x35/0x80 [ 60.757481][ T4309] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 60.763342][ T4309] RIP: 0033:0x7f4ed14878d9 [ 60.767731][ T4309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 60.787306][ T4309] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 60.795692][ T4309] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 60.803656][ T4309] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 60.811603][ T4309] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 60.819548][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.827489][ T4309] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 60.835450][ T4309] [ 60.838445][ T4307] CPU: 1 PID: 4307 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 60.847092][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.857118][ T4307] Call Trace: [ 60.860372][ T4307] [ 60.863274][ T4307] dump_stack_lvl+0x57/0x7d [ 60.867750][ T4307] should_fail.cold+0x5/0xa [ 60.872222][ T4307] should_failslab+0x5/0x10 [ 60.876692][ T4307] kmem_cache_alloc_trace+0x60/0x3f0 [ 60.881944][ T4307] ? sk_psock_skb_ingress_self+0x4f/0x3b0 [ 60.887634][ T4307] sk_psock_skb_ingress_self+0x4f/0x3b0 [ 60.893151][ T4307] sk_psock_verdict_apply+0x39c/0x4b0 [ 60.898500][ T4307] sk_psock_verdict_recv+0x216/0x610 [ 60.903755][ T4307] unix_read_sock+0xc4/0x1e0 [ 60.908316][ T4307] ? sk_psock_strp_parse+0x330/0x330 [ 60.913572][ T4307] ? unix_compat_ioctl+0x10/0x10 [ 60.918474][ T4307] ? find_held_lock+0x2d/0x110 [ 60.923211][ T4307] sk_psock_verdict_data_ready+0xf8/0x150 [ 60.928895][ T4307] ? sk_psock_strp_read_done+0x10/0x10 [ 60.934411][ T4307] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 60.940362][ T4307] ? do_raw_spin_unlock+0x171/0x230 [ 60.945533][ T4307] unix_dgram_sendmsg+0xca6/0x1770 [ 60.950626][ T4307] ? unix_stream_sendpage+0xa50/0xa50 [ 60.955966][ T4307] ? aa_af_perm+0x210/0x210 [ 60.960450][ T4307] ? unix_stream_sendpage+0xa50/0xa50 [ 60.965789][ T4307] sock_sendmsg+0xab/0xe0 [ 60.970089][ T4307] ____sys_sendmsg+0x38c/0x7a0 [ 60.974825][ T4307] ? kernel_sendmsg+0x30/0x30 [ 60.979468][ T4307] ? do_recvmmsg+0x550/0x550 [ 60.984028][ T4307] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 60.989983][ T4307] ___sys_sendmsg+0xd3/0x150 [ 60.994545][ T4307] ? sendmsg_copy_msghdr+0x110/0x110 [ 60.999802][ T4307] ? __fget_files+0x1b9/0x3c0 [ 61.004450][ T4307] ? lock_downgrade+0x6e0/0x6e0 [ 61.009274][ T4307] ? __fget_files+0x1d1/0x3c0 [ 61.013923][ T4307] ? __fget_light+0xbe/0x220 [ 61.018492][ T4307] __sys_sendmmsg+0x141/0x310 [ 61.023143][ T4307] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 61.028138][ T4307] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.034085][ T4307] ? find_held_lock+0x2d/0x110 [ 61.038828][ T4307] ? __context_tracking_exit+0x80/0x90 [ 61.044254][ T4307] ? lock_downgrade+0x6e0/0x6e0 [ 61.049075][ T4307] ? lock_downgrade+0x6e0/0x6e0 [ 61.053901][ T4307] __x64_sys_sendmmsg+0x94/0x100 [ 61.058806][ T4307] ? syscall_enter_from_user_mode+0x21/0x70 [ 61.064666][ T4307] do_syscall_64+0x35/0x80 [ 61.069053][ T4307] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.074913][ T4307] RIP: 0033:0x7efe7de878d9 [ 61.079302][ T4307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 61.098879][ T4307] RSP: 002b:00007efe7d5fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.107258][ T4307] RAX: ffffffffffffffda RBX: 00007efe7df8bf60 RCX: 00007efe7de878d9 [ 61.115199][ T4307] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 61.123142][ T4307] RBP: 00007efe7d5fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 61.131082][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.139024][ T4307] R13: 00007ffc225babbf R14: 00007efe7d5fe300 R15: 0000000000022000 [ 61.146976][ T4307] [ 61.158644][ T4311] CPU: 0 PID: 4311 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 61.167302][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.177335][ T4311] Call Trace: [ 61.180593][ T4311] [ 61.183503][ T4311] dump_stack_lvl+0x57/0x7d [ 61.187984][ T4311] should_fail.cold+0x5/0xa [ 61.192464][ T4311] ? skb_clone+0x125/0x300 [ 61.196850][ T4311] should_failslab+0x5/0x10 [ 61.201324][ T4311] kmem_cache_alloc+0x5e/0x3b0 [ 61.206054][ T4311] ? wait_for_completion_io_timeout+0x20/0x20 [ 61.212093][ T4311] skb_clone+0x125/0x300 [ 61.216309][ T4311] sk_psock_verdict_recv+0x48/0x610 [ 61.221486][ T4311] unix_read_sock+0xc4/0x1e0 [ 61.226049][ T4311] ? sk_psock_strp_parse+0x330/0x330 [ 61.231308][ T4311] ? unix_compat_ioctl+0x10/0x10 [ 61.236216][ T4311] ? find_held_lock+0x2d/0x110 [ 61.240959][ T4311] sk_psock_verdict_data_ready+0xf8/0x150 [ 61.246654][ T4311] ? sk_psock_strp_read_done+0x10/0x10 [ 61.252088][ T4311] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 61.258038][ T4311] ? do_raw_spin_unlock+0x171/0x230 [ 61.263203][ T4311] unix_dgram_sendmsg+0xca6/0x1770 [ 61.268291][ T4311] ? unix_stream_sendpage+0xa50/0xa50 [ 61.273632][ T4311] ? aa_af_perm+0x210/0x210 [ 61.278110][ T4311] ? unix_stream_sendpage+0xa50/0xa50 [ 61.283454][ T4311] sock_sendmsg+0xab/0xe0 [ 61.287756][ T4311] ____sys_sendmsg+0x38c/0x7a0 [ 61.291108][ T4316] FAULT_INJECTION: forcing a failure. [ 61.291108][ T4316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.292491][ T4311] ? kernel_sendmsg+0x30/0x30 [ 61.292498][ T4311] ? do_recvmmsg+0x550/0x550 [ 61.292504][ T4311] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.292517][ T4311] ___sys_sendmsg+0xd3/0x150 [ 61.325178][ T4311] ? sendmsg_copy_msghdr+0x110/0x110 [ 61.330443][ T4311] ? __fget_files+0x1b9/0x3c0 [ 61.335089][ T4311] ? lock_downgrade+0x6e0/0x6e0 [ 61.339914][ T4311] ? __fget_files+0x1d1/0x3c0 [ 61.344564][ T4311] ? __fget_light+0xbe/0x220 [ 61.349125][ T4311] __sys_sendmmsg+0x141/0x310 [ 61.353777][ T4311] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 61.358768][ T4311] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.364715][ T4311] ? find_held_lock+0x2d/0x110 [ 61.369452][ T4311] ? __context_tracking_exit+0x80/0x90 [ 61.374880][ T4311] ? lock_downgrade+0x6e0/0x6e0 [ 61.379704][ T4311] ? lock_downgrade+0x6e0/0x6e0 [ 61.379750][ T4318] FAULT_INJECTION: forcing a failure. [ 61.379750][ T4318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.384529][ T4311] __x64_sys_sendmmsg+0x94/0x100 [ 61.384538][ T4311] ? syscall_enter_from_user_mode+0x21/0x70 [ 61.384544][ T4311] do_syscall_64+0x35/0x80 [ 61.384550][ T4311] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.384557][ T4311] RIP: 0033:0x7fb1e6a878d9 [ 61.422896][ T4311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 61.442472][ T4311] RSP: 002b:00007fb1e7c08188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.450850][ T4311] RAX: ffffffffffffffda RBX: 00007fb1e6b8bf60 RCX: 00007fb1e6a878d9 [ 61.458796][ T4311] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 61.466737][ T4311] RBP: 00007fb1e7c081d0 R08: 0000000000000000 R09: 0000000000000000 [ 61.474683][ T4311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.482714][ T4311] R13: 00007ffde14cf4cf R14: 00007fb1e7c08300 R15: 0000000000022000 [ 61.490669][ T4311] [ 61.493675][ T4308] CPU: 1 PID: 4308 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 61.502325][ T4308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.512351][ T4308] Call Trace: [ 61.515600][ T4308] [ 61.518501][ T4308] dump_stack_lvl+0x57/0x7d [ 61.522971][ T4308] should_fail.cold+0x5/0xa [ 61.527440][ T4308] ? skb_clone+0x125/0x300 [ 61.531820][ T4308] should_failslab+0x5/0x10 [ 61.536288][ T4308] kmem_cache_alloc+0x5e/0x3b0 [ 61.541014][ T4308] ? wait_for_completion_io_timeout+0x20/0x20 [ 61.547045][ T4308] skb_clone+0x125/0x300 [ 61.551251][ T4308] sk_psock_verdict_recv+0x48/0x610 [ 61.556418][ T4308] unix_read_sock+0xc4/0x1e0 [ 61.560973][ T4308] ? sk_psock_strp_parse+0x330/0x330 [ 61.566222][ T4308] ? unix_compat_ioctl+0x10/0x10 [ 61.571122][ T4308] ? find_held_lock+0x2d/0x110 [ 61.575856][ T4308] sk_psock_verdict_data_ready+0xf8/0x150 [ 61.581539][ T4308] ? sk_psock_strp_read_done+0x10/0x10 [ 61.586963][ T4308] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 61.592904][ T4308] ? do_raw_spin_unlock+0x171/0x230 [ 61.598065][ T4308] unix_dgram_sendmsg+0xca6/0x1770 [ 61.603145][ T4308] ? unix_stream_sendpage+0xa50/0xa50 [ 61.608478][ T4308] ? aa_af_perm+0x210/0x210 [ 61.612949][ T4308] ? unix_stream_sendpage+0xa50/0xa50 [ 61.618284][ T4308] sock_sendmsg+0xab/0xe0 [ 61.622581][ T4308] ____sys_sendmsg+0x38c/0x7a0 [ 61.627311][ T4308] ? kernel_sendmsg+0x30/0x30 [ 61.631951][ T4308] ? do_recvmmsg+0x550/0x550 [ 61.636506][ T4308] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.642454][ T4308] ___sys_sendmsg+0xd3/0x150 [ 61.647008][ T4308] ? sendmsg_copy_msghdr+0x110/0x110 [ 61.652257][ T4308] ? __fget_files+0x1b9/0x3c0 [ 61.656896][ T4308] ? lock_downgrade+0x6e0/0x6e0 [ 61.661716][ T4308] ? __fget_files+0x1d1/0x3c0 [ 61.666364][ T4308] ? __fget_light+0xbe/0x220 [ 61.670922][ T4308] __sys_sendmmsg+0x141/0x310 [ 61.675567][ T4308] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 61.680553][ T4308] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.686494][ T4308] ? find_held_lock+0x2d/0x110 [ 61.691227][ T4308] ? __context_tracking_exit+0x80/0x90 [ 61.696650][ T4308] ? lock_downgrade+0x6e0/0x6e0 [ 61.701467][ T4308] ? lock_downgrade+0x6e0/0x6e0 [ 61.706286][ T4308] __x64_sys_sendmmsg+0x94/0x100 [ 61.711190][ T4308] ? syscall_enter_from_user_mode+0x21/0x70 [ 61.717046][ T4308] do_syscall_64+0x35/0x80 [ 61.721426][ T4308] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 61.727282][ T4308] RIP: 0033:0x7fd82a2878d9 [ 61.731748][ T4308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 61.751321][ T4308] RSP: 002b:00007fd82b303188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.759699][ T4308] RAX: ffffffffffffffda RBX: 00007fd82a38bf60 RCX: 00007fd82a2878d9 [ 61.767639][ T4308] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 61.775577][ T4308] RBP: 00007fd82b3031d0 R08: 0000000000000000 R09: 0000000000000000 [ 61.783516][ T4308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.791453][ T4308] R13: 00007ffda011e60f R14: 00007fd82b303300 R15: 0000000000022000 [ 61.799405][ T4308] [ 61.805833][ T4310] CPU: 0 PID: 4310 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 61.814499][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.824531][ T4310] Call Trace: [ 61.827783][ T4310] [ 61.830692][ T4310] dump_stack_lvl+0x57/0x7d [ 61.835169][ T4310] should_fail.cold+0x5/0xa [ 61.839648][ T4310] ? skb_clone+0x125/0x300 [ 61.844044][ T4310] should_failslab+0x5/0x10 [ 61.848519][ T4310] kmem_cache_alloc+0x5e/0x3b0 [ 61.853253][ T4310] ? wait_for_completion_io_timeout+0x20/0x20 [ 61.859290][ T4310] skb_clone+0x125/0x300 [ 61.863500][ T4310] sk_psock_verdict_recv+0x48/0x610 [ 61.868670][ T4310] unix_read_sock+0xc4/0x1e0 [ 61.873231][ T4310] ? sk_psock_strp_parse+0x330/0x330 [ 61.878485][ T4310] ? unix_compat_ioctl+0x10/0x10 [ 61.883389][ T4310] ? find_held_lock+0x2d/0x110 [ 61.888127][ T4310] sk_psock_verdict_data_ready+0xf8/0x150 [ 61.893815][ T4310] ? sk_psock_strp_read_done+0x10/0x10 [ 61.899242][ T4310] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 61.905188][ T4310] ? do_raw_spin_unlock+0x171/0x230 [ 61.910357][ T4310] unix_dgram_sendmsg+0xca6/0x1770 [ 61.915447][ T4310] ? unix_stream_sendpage+0xa50/0xa50 [ 61.920790][ T4310] ? aa_af_perm+0x210/0x210 [ 61.925269][ T4310] ? unix_stream_sendpage+0xa50/0xa50 [ 61.930610][ T4310] sock_sendmsg+0xab/0xe0 [ 61.934909][ T4310] ____sys_sendmsg+0x38c/0x7a0 [ 61.939646][ T4310] ? kernel_sendmsg+0x30/0x30 [ 61.944290][ T4310] ? do_recvmmsg+0x550/0x550 [ 61.948846][ T4310] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.954797][ T4310] ___sys_sendmsg+0xd3/0x150 [ 61.959356][ T4310] ? sendmsg_copy_msghdr+0x110/0x110 [ 61.964616][ T4310] ? __fget_files+0x1b9/0x3c0 [ 61.969264][ T4310] ? lock_downgrade+0x6e0/0x6e0 [ 61.974090][ T4310] ? __fget_files+0x1d1/0x3c0 [ 61.978739][ T4310] ? __fget_light+0xbe/0x220 [ 61.983298][ T4310] __sys_sendmmsg+0x141/0x310 [ 61.987945][ T4310] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 61.992939][ T4310] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.998884][ T4310] ? find_held_lock+0x2d/0x110 [ 62.003621][ T4310] ? __context_tracking_exit+0x80/0x90 [ 62.009047][ T4310] ? lock_downgrade+0x6e0/0x6e0 [ 62.013870][ T4310] ? lock_downgrade+0x6e0/0x6e0 [ 62.018698][ T4310] __x64_sys_sendmmsg+0x94/0x100 [ 62.023690][ T4310] ? syscall_enter_from_user_mode+0x21/0x70 [ 62.029551][ T4310] do_syscall_64+0x35/0x80 [ 62.033934][ T4310] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.039792][ T4310] RIP: 0033:0x7f6bcd8878d9 [ 62.044178][ T4310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 62.063753][ T4310] RSP: 002b:00007f6bce9f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.072305][ T4310] RAX: ffffffffffffffda RBX: 00007f6bcd98bf60 RCX: 00007f6bcd8878d9 [ 62.080248][ T4310] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 62.088188][ T4310] RBP: 00007f6bce9f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 62.096130][ T4310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.104074][ T4310] R13: 00007ffdefcf793f R14: 00007f6bce9f2300 R15: 0000000000022000 [ 62.112028][ T4310] [ 62.118114][ T4318] CPU: 0 PID: 4318 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 62.126765][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.136796][ T4318] Call Trace: [ 62.140052][ T4318] [ 62.142957][ T4318] dump_stack_lvl+0x57/0x7d [ 62.147433][ T4318] should_fail.cold+0x5/0xa [ 62.151914][ T4318] _copy_from_user+0x25/0xe0 [ 62.156482][ T4318] __copy_msghdr_from_user+0x86/0x3e0 [ 62.161835][ T4318] ? __ia32_sys_shutdown+0x70/0x70 [ 62.166921][ T4318] ? unix_stream_sendpage+0xa50/0xa50 [ 62.172272][ T4318] ? sock_sendmsg+0xab/0xe0 [ 62.176754][ T4318] sendmsg_copy_msghdr+0x7f/0x110 [ 62.181751][ T4318] ? do_recvmmsg+0x550/0x550 [ 62.186315][ T4318] ? __lock_acquire+0x15bc/0x5660 [ 62.191320][ T4318] ___sys_sendmsg+0xb8/0x150 [ 62.195885][ T4318] ? sendmsg_copy_msghdr+0x110/0x110 [ 62.201147][ T4318] ? __fget_files+0x1b9/0x3c0 [ 62.205808][ T4318] ? find_held_lock+0x2d/0x110 [ 62.210546][ T4318] ? __might_fault+0xb3/0x160 [ 62.215193][ T4318] ? lock_downgrade+0x6e0/0x6e0 [ 62.220025][ T4318] __sys_sendmmsg+0x141/0x310 [ 62.224683][ T4318] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 62.229681][ T4318] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 62.235629][ T4318] ? find_held_lock+0x2d/0x110 [ 62.240368][ T4318] ? __context_tracking_exit+0x80/0x90 [ 62.245796][ T4318] ? lock_downgrade+0x6e0/0x6e0 [ 62.250616][ T4318] ? lock_downgrade+0x6e0/0x6e0 [ 62.255443][ T4318] __x64_sys_sendmmsg+0x94/0x100 [ 62.260348][ T4318] ? syscall_enter_from_user_mode+0x21/0x70 [ 62.266210][ T4318] do_syscall_64+0x35/0x80 [ 62.270599][ T4318] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.276460][ T4318] RIP: 0033:0x7f4ed14878d9 [ 62.280843][ T4318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 62.300592][ T4318] RSP: 002b:00007f4ed250b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.308969][ T4318] RAX: ffffffffffffffda RBX: 00007f4ed158c020 RCX: 00007f4ed14878d9 [ 62.316911][ T4318] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 62.324859][ T4318] RBP: 00007f4ed250b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 62.332804][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.340748][ T4318] R13: 00007ffe57270dcf R14: 00007f4ed250b300 R15: 0000000000022000 [ 62.348699][ T4318] [ 62.351695][ T4316] CPU: 1 PID: 4316 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 62.360352][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.370379][ T4316] Call Trace: [ 62.373639][ T4316] [ 62.376545][ T4316] dump_stack_lvl+0x57/0x7d [ 62.381015][ T4316] should_fail.cold+0x5/0xa [ 62.385489][ T4316] _copy_from_user+0x25/0xe0 [ 62.390042][ T4316] __copy_msghdr_from_user+0x86/0x3e0 [ 62.395379][ T4316] ? __ia32_sys_shutdown+0x70/0x70 [ 62.400457][ T4316] ? unix_stream_sendpage+0xa50/0xa50 [ 62.405797][ T4316] ? sock_sendmsg+0xab/0xe0 [ 62.410268][ T4316] sendmsg_copy_msghdr+0x7f/0x110 [ 62.415256][ T4316] ? do_recvmmsg+0x550/0x550 [ 62.419809][ T4316] ? __lock_acquire+0x15bc/0x5660 [ 62.424805][ T4316] ___sys_sendmsg+0xb8/0x150 [ 62.429358][ T4316] ? sendmsg_copy_msghdr+0x110/0x110 [ 62.434610][ T4316] ? __fget_files+0x1b9/0x3c0 [ 62.439259][ T4316] ? find_held_lock+0x2d/0x110 [ 62.443990][ T4316] ? __might_fault+0xb3/0x160 [ 62.448631][ T4316] ? lock_downgrade+0x6e0/0x6e0 [ 62.453798][ T4316] __sys_sendmmsg+0x141/0x310 [ 62.458443][ T4316] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 62.463430][ T4316] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 62.469376][ T4316] ? find_held_lock+0x2d/0x110 [ 62.474108][ T4316] ? __context_tracking_exit+0x80/0x90 [ 62.479530][ T4316] ? lock_downgrade+0x6e0/0x6e0 [ 62.484349][ T4316] ? lock_downgrade+0x6e0/0x6e0 [ 62.489174][ T4316] __x64_sys_sendmmsg+0x94/0x100 [ 62.494076][ T4316] ? syscall_enter_from_user_mode+0x21/0x70 [ 62.499931][ T4316] do_syscall_64+0x35/0x80 [ 62.504312][ T4316] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.510256][ T4316] RIP: 0033:0x7fb6342878d9 [ 62.514637][ T4316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 62.534205][ T4316] RSP: 002b:00007fb635478188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.542580][ T4316] RAX: ffffffffffffffda RBX: 00007fb63438c0e0 RCX: 00007fb6342878d9 [ 62.550519][ T4316] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000004 [ 62.558456][ T4316] RBP: 00007fb6354781d0 R08: 0000000000000000 R09: 0000000000000000 [ 62.566394][ T4316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.574329][ T4316] R13: 00007fffb655c5df R14: 00007fb635478300 R15: 0000000000022000 [ 62.582278][ T4316] [ 62.589253][ T4323] FAULT_INJECTION: forcing a failure. [ 62.589253][ T4323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.598968][ T4324] FAULT_INJECTION: forcing a failure. [ 62.598968][ T4324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.605581][ T4323] CPU: 0 PID: 4323 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 62.623885][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.634102][ T4323] Call Trace: [ 62.637364][ T4323] [ 62.640270][ T4323] dump_stack_lvl+0x57/0x7d [ 62.644747][ T4323] should_fail.cold+0x5/0xa [ 62.649227][ T4323] _copy_from_user+0x25/0xe0 [ 62.653793][ T4323] __copy_msghdr_from_user+0x86/0x3e0 [ 62.659140][ T4323] ? __ia32_sys_shutdown+0x70/0x70 [ 62.664226][ T4323] ? unix_stream_sendpage+0xa50/0xa50 [ 62.669572][ T4323] ? sock_sendmsg+0xab/0xe0 [ 62.674057][ T4323] sendmsg_copy_msghdr+0x7f/0x110 [ 62.679056][ T4323] ? do_recvmmsg+0x550/0x550 [ 62.683620][ T4323] ? __lock_acquire+0x15bc/0x5660 [ 62.688625][ T4323] ___sys_sendmsg+0xb8/0x150 [ 62.693187][ T4323] ? sendmsg_copy_msghdr+0x110/0x110 [ 62.698445][ T4323] ? __fget_files+0x1b9/0x3c0 [ 62.703099][ T4323] ? find_held_lock+0x2d/0x110 [ 62.707947][ T4323] ? __might_fault+0xb3/0x160 [ 62.708199][ T4328] FAULT_INJECTION: forcing a failure. [ 62.708199][ T4328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.712597][ T4323] ? lock_downgrade+0x6e0/0x6e0 [ 62.712614][ T4323] __sys_sendmmsg+0x141/0x310 [ 62.712624][ T4323] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 62.712631][ T4323] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 62.746263][ T4323] ? find_held_lock+0x2d/0x110 [ 62.751021][ T4323] ? __context_tracking_exit+0x80/0x90 [ 62.756645][ T4323] ? lock_downgrade+0x6e0/0x6e0 [ 62.761578][ T4323] ? lock_downgrade+0x6e0/0x6e0 [ 62.766429][ T4323] __x64_sys_sendmmsg+0x94/0x100 [ 62.771360][ T4323] ? syscall_enter_from_user_mode+0x21/0x70 [ 62.777238][ T4323] do_syscall_64+0x35/0x80 [ 62.781626][ T4323] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 62.787489][ T4323] RIP: 0033:0x7efe7de878d9 [ 62.791877][ T4323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 62.811452][ T4323] RSP: 002b:00007efe7d5dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.820093][ T4323] RAX: ffffffffffffffda RBX: 00007efe7df8c020 RCX: 00007efe7de878d9 [ 62.828123][ T4323] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 62.836069][ T4323] RBP: 00007efe7d5dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 62.844014][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.851955][ T4323] R13: 00007ffc225babbf R14: 00007efe7d5dd300 R15: 0000000000022000 [ 62.859906][ T4323] [ 62.862897][ T4324] CPU: 1 PID: 4324 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 62.871554][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.881581][ T4324] Call Trace: [ 62.885459][ T4324] [ 62.888364][ T4324] dump_stack_lvl+0x57/0x7d [ 62.892834][ T4324] should_fail.cold+0x5/0xa [ 62.897304][ T4324] _copy_from_user+0x25/0xe0 [ 62.902032][ T4324] __copy_msghdr_from_user+0x86/0x3e0 [ 62.907369][ T4324] ? __ia32_sys_shutdown+0x70/0x70 [ 62.912445][ T4324] ? unix_stream_sendpage+0xa50/0xa50 [ 62.917783][ T4324] ? sock_sendmsg+0xab/0xe0 [ 62.922251][ T4324] sendmsg_copy_msghdr+0x7f/0x110 [ 62.927241][ T4324] ? do_recvmmsg+0x550/0x550 [ 62.931797][ T4324] ? __lock_acquire+0x15bc/0x5660 [ 62.936790][ T4324] ___sys_sendmsg+0xb8/0x150 [ 62.941348][ T4324] ? sendmsg_copy_msghdr+0x110/0x110 [ 62.946602][ T4324] ? __fget_files+0x1b9/0x3c0 [ 62.951250][ T4324] ? find_held_lock+0x2d/0x110 [ 62.955977][ T4324] ? __might_fault+0xb3/0x160 [ 62.960619][ T4324] ? lock_downgrade+0x6e0/0x6e0 [ 62.965440][ T4324] __sys_sendmmsg+0x141/0x310 [ 62.970082][ T4324] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 62.975069][ T4324] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 62.981012][ T4324] ? find_held_lock+0x2d/0x110 [ 62.985744][ T4324] ? __context_tracking_exit+0x80/0x90 [ 62.991165][ T4324] ? lock_downgrade+0x6e0/0x6e0 [ 62.995982][ T4324] ? lock_downgrade+0x6e0/0x6e0 [ 63.000805][ T4324] __x64_sys_sendmmsg+0x94/0x100 [ 63.005705][ T4324] ? syscall_enter_from_user_mode+0x21/0x70 [ 63.011564][ T4324] do_syscall_64+0x35/0x80 [ 63.015943][ T4324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.021802][ T4324] RIP: 0033:0x7fb1e6a878d9 [ 63.026181][ T4324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 63.045756][ T4324] RSP: 002b:00007fb1e7be7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 63.054133][ T4324] RAX: ffffffffffffffda RBX: 00007fb1e6b8c020 RCX: 00007fb1e6a878d9 [ 63.062070][ T4324] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 63.070007][ T4324] RBP: 00007fb1e7be71d0 R08: 0000000000000000 R09: 0000000000000000 [ 63.077945][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.085884][ T4324] R13: 00007ffde14cf4cf R14: 00007fb1e7be7300 R15: 0000000000022000 [ 63.093832][ T4324] [ 63.104166][ T4328] CPU: 0 PID: 4328 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 63.104626][ T4330] FAULT_INJECTION: forcing a failure. [ 63.104626][ T4330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.112829][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.112834][ T4328] Call Trace: [ 63.112837][ T4328] [ 63.112841][ T4328] dump_stack_lvl+0x57/0x7d [ 63.112851][ T4328] should_fail.cold+0x5/0xa [ 63.150921][ T4328] _copy_from_user+0x25/0xe0 [ 63.155484][ T4328] __copy_msghdr_from_user+0x86/0x3e0 [ 63.160827][ T4328] ? __ia32_sys_shutdown+0x70/0x70 2022/04/16 19:41:14 executed programs: 47 [ 63.165910][ T4328] ? unix_stream_sendpage+0xa50/0xa50 [ 63.171253][ T4328] ? sock_sendmsg+0xab/0xe0 [ 63.175729][ T4328] sendmsg_copy_msghdr+0x7f/0x110 [ 63.180729][ T4328] ? do_recvmmsg+0x550/0x550 [ 63.185295][ T4328] ? __lock_acquire+0x15bc/0x5660 [ 63.190302][ T4328] ___sys_sendmsg+0xb8/0x150 [ 63.194865][ T4328] ? sendmsg_copy_msghdr+0x110/0x110 [ 63.200124][ T4328] ? __fget_files+0x1b9/0x3c0 [ 63.204783][ T4328] ? find_held_lock+0x2d/0x110 [ 63.209525][ T4328] ? __might_fault+0xb3/0x160 [ 63.214174][ T4328] ? lock_downgrade+0x6e0/0x6e0 [ 63.219001][ T4328] __sys_sendmmsg+0x141/0x310 [ 63.223651][ T4328] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 63.228646][ T4328] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 63.234595][ T4328] ? find_held_lock+0x2d/0x110 [ 63.239337][ T4328] ? __context_tracking_exit+0x80/0x90 [ 63.244764][ T4328] ? lock_downgrade+0x6e0/0x6e0 [ 63.249586][ T4328] ? lock_downgrade+0x6e0/0x6e0 [ 63.254416][ T4328] __x64_sys_sendmmsg+0x94/0x100 [ 63.257684][ T4333] FAULT_INJECTION: forcing a failure. [ 63.257684][ T4333] name failslab, interval 1, probability 0, space 0, times 0 [ 63.259326][ T4328] ? syscall_enter_from_user_mode+0x21/0x70 [ 63.259334][ T4328] do_syscall_64+0x35/0x80 [ 63.259340][ T4328] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.259346][ T4328] RIP: 0033:0x7fd82a2878d9 [ 63.259353][ T4328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 63.312109][ T4328] RSP: 002b:00007fd8299fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 63.320494][ T4328] RAX: ffffffffffffffda RBX: 00007fd82a38c020 RCX: 00007fd82a2878d9 [ 63.328437][ T4328] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 63.336382][ T4328] RBP: 00007fd8299fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 63.344325][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.352265][ T4328] R13: 00007ffda011e60f R14: 00007fd8299fe300 R15: 0000000000022000 [ 63.360218][ T4328] [ 63.363210][ T4333] CPU: 1 PID: 4333 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 63.371858][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.382184][ T4333] Call Trace: [ 63.385440][ T4333] [ 63.388344][ T4333] dump_stack_lvl+0x57/0x7d [ 63.392815][ T4333] should_fail.cold+0x5/0xa [ 63.397289][ T4333] should_failslab+0x5/0x10 [ 63.401767][ T4333] kmem_cache_alloc_node+0x65/0x3f0 [ 63.407136][ T4333] ? __alloc_skb+0x151/0x270 [ 63.411696][ T4333] __alloc_skb+0x151/0x270 [ 63.416084][ T4333] alloc_skb_with_frags+0x72/0x700 [ 63.421168][ T4333] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 63.427125][ T4333] sock_alloc_send_pskb+0x636/0x7c0 [ 63.432296][ T4333] ? sock_wmalloc+0xe0/0xe0 [ 63.436770][ T4333] ? lock_downgrade+0x6e0/0x6e0 [ 63.441589][ T4333] ? do_raw_spin_lock+0x120/0x2a0 [ 63.446582][ T4333] ? rwlock_bug.part.0+0x90/0x90 [ 63.451493][ T4333] unix_dgram_sendmsg+0x35a/0x1770 [ 63.456670][ T4333] ? aa_sk_perm+0x1ab/0x820 [ 63.461146][ T4333] ? unix_stream_sendpage+0xa50/0xa50 [ 63.466489][ T4333] ? aa_af_perm+0x210/0x210 [ 63.470964][ T4333] ? unix_stream_sendpage+0xa50/0xa50 [ 63.476304][ T4333] sock_sendmsg+0xab/0xe0 [ 63.480609][ T4333] ____sys_sendmsg+0x38c/0x7a0 [ 63.485348][ T4333] ? kernel_sendmsg+0x30/0x30 [ 63.489995][ T4333] ? do_recvmmsg+0x550/0x550 [ 63.494752][ T4333] ___sys_sendmsg+0xd3/0x150 [ 63.499308][ T4333] ? sendmsg_copy_msghdr+0x110/0x110 [ 63.504556][ T4333] ? __fget_files+0x1b9/0x3c0 [ 63.509203][ T4333] ? find_held_lock+0x2d/0x110 [ 63.513937][ T4333] ? __might_fault+0xb3/0x160 [ 63.518575][ T4333] ? lock_downgrade+0x6e0/0x6e0 [ 63.523392][ T4333] __sys_sendmmsg+0x141/0x310 [ 63.528034][ T4333] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 63.533020][ T4333] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 63.538962][ T4333] ? find_held_lock+0x2d/0x110 [ 63.543712][ T4333] ? __context_tracking_exit+0x80/0x90 [ 63.549132][ T4333] ? lock_downgrade+0x6e0/0x6e0 [ 63.553948][ T4333] ? lock_downgrade+0x6e0/0x6e0 [ 63.558767][ T4333] __x64_sys_sendmmsg+0x94/0x100 [ 63.563665][ T4333] ? syscall_enter_from_user_mode+0x21/0x70 [ 63.569525][ T4333] do_syscall_64+0x35/0x80 [ 63.573903][ T4333] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.579760][ T4333] RIP: 0033:0x7fb1e6a878d9 [ 63.584143][ T4333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 63.603712][ T4333] RSP: 002b:00007fb1e7be7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 63.612087][ T4333] RAX: ffffffffffffffda RBX: 00007fb1e6b8c020 RCX: 00007fb1e6a878d9 [ 63.620022][ T4333] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 63.627957][ T4333] RBP: 00007fb1e7be71d0 R08: 0000000000000000 R09: 0000000000000000 [ 63.635890][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.643827][ T4333] R13: 00007ffde14cf4cf R14: 00007fb1e7be7300 R15: 0000000000022000 [ 63.651769][ T4333] [ 63.667244][ T4330] CPU: 0 PID: 4330 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 63.675915][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.685949][ T4330] Call Trace: [ 63.689207][ T4330] [ 63.692110][ T4330] dump_stack_lvl+0x57/0x7d [ 63.696585][ T4330] should_fail.cold+0x5/0xa [ 63.701065][ T4330] _copy_from_user+0x25/0xe0 [ 63.705630][ T4330] __copy_msghdr_from_user+0x86/0x3e0 [ 63.710980][ T4330] ? __ia32_sys_shutdown+0x70/0x70 [ 63.716065][ T4330] ? unix_stream_sendpage+0xa50/0xa50 [ 63.721415][ T4330] ? sock_sendmsg+0xab/0xe0 [ 63.725905][ T4330] sendmsg_copy_msghdr+0x7f/0x110 [ 63.730916][ T4330] ? do_recvmmsg+0x550/0x550 [ 63.733461][ T4341] FAULT_INJECTION: forcing a failure. [ 63.733461][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 63.748225][ T4330] ? __lock_acquire+0x15bc/0x5660 [ 63.748597][ T4338] FAULT_INJECTION: forcing a failure. [ 63.748597][ T4338] name failslab, interval 1, probability 0, space 0, times 0 [ 63.753238][ T4330] ___sys_sendmsg+0xb8/0x150 [ 63.753253][ T4330] ? sendmsg_copy_msghdr+0x110/0x110 [ 63.753262][ T4330] ? __fget_files+0x1b9/0x3c0 [ 63.753274][ T4330] ? find_held_lock+0x2d/0x110 [ 63.753283][ T4330] ? __might_fault+0xb3/0x160 [ 63.767540][ T4340] FAULT_INJECTION: forcing a failure. [ 63.767540][ T4340] name failslab, interval 1, probability 0, space 0, times 0 [ 63.770382][ T4330] ? lock_downgrade+0x6e0/0x6e0 [ 63.770399][ T4330] __sys_sendmmsg+0x141/0x310 [ 63.770409][ T4330] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 63.770415][ T4330] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 63.780309][ T4330] ? find_held_lock+0x2d/0x110 [ 63.780326][ T4330] ? __context_tracking_exit+0x80/0x90 [ 63.780334][ T4330] ? lock_downgrade+0x6e0/0x6e0 [ 63.780343][ T4330] ? lock_downgrade+0x6e0/0x6e0 [ 63.780356][ T4330] __x64_sys_sendmmsg+0x94/0x100 [ 63.787334][ T4339] FAULT_INJECTION: forcing a failure. [ 63.787334][ T4339] name failslab, interval 1, probability 0, space 0, times 0 [ 63.789717][ T4330] ? syscall_enter_from_user_mode+0x21/0x70 [ 63.789726][ T4330] do_syscall_64+0x35/0x80 [ 63.789733][ T4330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 63.789739][ T4330] RIP: 0033:0x7f6bcd8878d9 [ 63.789746][ T4330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 63.900076][ T4330] RSP: 002b:00007f6bce9d1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 63.908465][ T4330] RAX: ffffffffffffffda RBX: 00007f6bcd98c020 RCX: 00007f6bcd8878d9 [ 63.916415][ T4330] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 63.924367][ T4330] RBP: 00007f6bce9d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 63.932316][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.940267][ T4330] R13: 00007ffdefcf793f R14: 00007f6bce9d1300 R15: 0000000000022000 [ 63.948226][ T4330] [ 63.951221][ T4338] CPU: 1 PID: 4338 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 63.959877][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.969917][ T4338] Call Trace: [ 63.973178][ T4338] [ 63.976084][ T4338] dump_stack_lvl+0x57/0x7d [ 63.980555][ T4338] should_fail.cold+0x5/0xa [ 63.985024][ T4338] should_failslab+0x5/0x10 [ 63.989492][ T4338] kmem_cache_alloc_trace+0x60/0x3f0 [ 63.994741][ T4338] ? sk_psock_skb_ingress_self+0x4f/0x3b0 [ 64.000430][ T4338] sk_psock_skb_ingress_self+0x4f/0x3b0 [ 64.005938][ T4338] sk_psock_verdict_apply+0x39c/0x4b0 [ 64.011276][ T4338] sk_psock_verdict_recv+0x216/0x610 [ 64.016528][ T4338] unix_read_sock+0xc4/0x1e0 [ 64.021080][ T4338] ? sk_psock_strp_parse+0x330/0x330 [ 64.026329][ T4338] ? unix_compat_ioctl+0x10/0x10 [ 64.031230][ T4338] ? find_held_lock+0x2d/0x110 [ 64.035965][ T4338] sk_psock_verdict_data_ready+0xf8/0x150 [ 64.041651][ T4338] ? sk_psock_strp_read_done+0x10/0x10 [ 64.047074][ T4338] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 64.053018][ T4338] ? do_raw_spin_unlock+0x171/0x230 [ 64.058186][ T4338] unix_dgram_sendmsg+0xca6/0x1770 [ 64.063268][ T4338] ? unix_stream_sendpage+0xa50/0xa50 [ 64.068606][ T4338] ? aa_af_perm+0x210/0x210 [ 64.073081][ T4338] ? unix_stream_sendpage+0xa50/0xa50 [ 64.078423][ T4338] sock_sendmsg+0xab/0xe0 [ 64.082722][ T4338] ____sys_sendmsg+0x38c/0x7a0 [ 64.087448][ T4338] ? kernel_sendmsg+0x30/0x30 [ 64.092087][ T4338] ? do_recvmmsg+0x550/0x550 [ 64.096640][ T4338] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.102587][ T4338] ___sys_sendmsg+0xd3/0x150 [ 64.107143][ T4338] ? sendmsg_copy_msghdr+0x110/0x110 [ 64.112395][ T4338] ? __fget_files+0x1b9/0x3c0 [ 64.117035][ T4338] ? lock_downgrade+0x6e0/0x6e0 [ 64.121856][ T4338] ? __fget_files+0x1d1/0x3c0 [ 64.126503][ T4338] ? __fget_light+0xbe/0x220 [ 64.131060][ T4338] __sys_sendmmsg+0x141/0x310 [ 64.135705][ T4338] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 64.140693][ T4338] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.146635][ T4338] ? find_held_lock+0x2d/0x110 [ 64.151370][ T4338] ? __context_tracking_exit+0x80/0x90 [ 64.156795][ T4338] ? lock_downgrade+0x6e0/0x6e0 [ 64.161612][ T4338] ? lock_downgrade+0x6e0/0x6e0 [ 64.166436][ T4338] __x64_sys_sendmmsg+0x94/0x100 [ 64.171341][ T4338] ? syscall_enter_from_user_mode+0x21/0x70 [ 64.177249][ T4338] do_syscall_64+0x35/0x80 [ 64.181628][ T4338] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.187485][ T4338] RIP: 0033:0x7f4ed14878d9 [ 64.191868][ T4338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 64.211441][ T4338] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.219821][ T4338] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 64.227759][ T4338] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 64.235694][ T4338] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 64.243632][ T4338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.251567][ T4338] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 64.259512][ T4338] [ 64.265341][ T4341] CPU: 0 PID: 4341 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 64.274003][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.284031][ T4341] Call Trace: [ 64.287286][ T4341] [ 64.290189][ T4341] dump_stack_lvl+0x57/0x7d [ 64.294661][ T4341] should_fail.cold+0x5/0xa [ 64.299241][ T4341] should_failslab+0x5/0x10 [ 64.303815][ T4341] __kmalloc_node_track_caller+0x7d/0x360 [ 64.309503][ T4341] ? alloc_skb_with_frags+0x72/0x700 [ 64.314761][ T4341] __alloc_skb+0x8a/0x270 [ 64.319062][ T4341] alloc_skb_with_frags+0x72/0x700 [ 64.324145][ T4341] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.330103][ T4341] sock_alloc_send_pskb+0x636/0x7c0 [ 64.335278][ T4341] ? sock_wmalloc+0xe0/0xe0 [ 64.339752][ T4341] ? lock_downgrade+0x6e0/0x6e0 [ 64.344571][ T4341] ? do_raw_spin_lock+0x120/0x2a0 [ 64.349564][ T4341] ? rwlock_bug.part.0+0x90/0x90 [ 64.355181][ T4341] unix_dgram_sendmsg+0x35a/0x1770 [ 64.360273][ T4341] ? aa_sk_perm+0x1ab/0x820 [ 64.364748][ T4341] ? unix_stream_sendpage+0xa50/0xa50 [ 64.370085][ T4341] ? aa_af_perm+0x210/0x210 [ 64.374564][ T4341] ? unix_stream_sendpage+0xa50/0xa50 [ 64.379908][ T4341] sock_sendmsg+0xab/0xe0 [ 64.384215][ T4341] ____sys_sendmsg+0x38c/0x7a0 [ 64.388953][ T4341] ? kernel_sendmsg+0x30/0x30 [ 64.393607][ T4341] ? do_recvmmsg+0x550/0x550 [ 64.398165][ T4341] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.404124][ T4341] ___sys_sendmsg+0xd3/0x150 [ 64.408689][ T4341] ? sendmsg_copy_msghdr+0x110/0x110 [ 64.413948][ T4341] ? __fget_files+0x1b9/0x3c0 [ 64.418596][ T4341] ? lock_downgrade+0x6e0/0x6e0 [ 64.423425][ T4341] ? __fget_files+0x1d1/0x3c0 [ 64.428076][ T4341] ? __fget_light+0xbe/0x220 [ 64.432639][ T4341] __sys_sendmmsg+0x141/0x310 [ 64.437287][ T4341] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 64.442275][ T4341] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.448223][ T4341] ? find_held_lock+0x2d/0x110 [ 64.452958][ T4341] ? __context_tracking_exit+0x80/0x90 [ 64.458384][ T4341] ? lock_downgrade+0x6e0/0x6e0 [ 64.463203][ T4341] ? lock_downgrade+0x6e0/0x6e0 [ 64.468026][ T4341] __x64_sys_sendmmsg+0x94/0x100 [ 64.470344][ T4344] FAULT_INJECTION: forcing a failure. [ 64.470344][ T4344] name failslab, interval 1, probability 0, space 0, times 0 [ 64.472929][ T4341] ? syscall_enter_from_user_mode+0x21/0x70 [ 64.472938][ T4341] do_syscall_64+0x35/0x80 [ 64.472944][ T4341] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.472950][ T4341] RIP: 0033:0x7efe7de878d9 [ 64.505979][ T4341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 64.525557][ T4341] RSP: 002b:00007efe7d5fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.533936][ T4341] RAX: ffffffffffffffda RBX: 00007efe7df8bf60 RCX: 00007efe7de878d9 [ 64.541882][ T4341] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 64.550184][ T4341] RBP: 00007efe7d5fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 64.558219][ T4341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.566161][ T4341] R13: 00007ffc225babbf R14: 00007efe7d5fe300 R15: 0000000000022000 [ 64.574115][ T4341] [ 64.603937][ T4340] CPU: 1 PID: 4340 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 64.612620][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.622692][ T4340] Call Trace: [ 64.625986][ T4340] [ 64.628895][ T4340] dump_stack_lvl+0x57/0x7d [ 64.633374][ T4340] should_fail.cold+0x5/0xa [ 64.637851][ T4340] ? skb_clone+0x125/0x300 [ 64.642244][ T4340] should_failslab+0x5/0x10 [ 64.646723][ T4340] kmem_cache_alloc+0x5e/0x3b0 [ 64.651548][ T4340] ? wait_for_completion_io_timeout+0x20/0x20 [ 64.653086][ T4351] FAULT_INJECTION: forcing a failure. [ 64.653086][ T4351] name failslab, interval 1, probability 0, space 0, times 0 [ 64.657587][ T4340] skb_clone+0x125/0x300 [ 64.657598][ T4340] sk_psock_verdict_recv+0x48/0x610 [ 64.657609][ T4340] unix_read_sock+0xc4/0x1e0 [ 64.657615][ T4340] ? sk_psock_strp_parse+0x330/0x330 [ 64.657622][ T4340] ? unix_compat_ioctl+0x10/0x10 [ 64.657627][ T4340] ? find_held_lock+0x2d/0x110 [ 64.657638][ T4340] sk_psock_verdict_data_ready+0xf8/0x150 [ 64.657644][ T4340] ? sk_psock_strp_read_done+0x10/0x10 [ 64.657652][ T4340] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 64.694850][ T4352] FAULT_INJECTION: forcing a failure. [ 64.694850][ T4352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.699084][ T4340] ? do_raw_spin_unlock+0x171/0x230 [ 64.699096][ T4340] unix_dgram_sendmsg+0xca6/0x1770 [ 64.699111][ T4340] ? unix_stream_sendpage+0xa50/0xa50 [ 64.745828][ T4340] ? aa_af_perm+0x210/0x210 [ 64.746167][ T4354] FAULT_INJECTION: forcing a failure. [ 64.746167][ T4354] name failslab, interval 1, probability 0, space 0, times 0 [ 64.750406][ T4340] ? unix_stream_sendpage+0xa50/0xa50 [ 64.750417][ T4340] sock_sendmsg+0xab/0xe0 [ 64.750425][ T4340] ____sys_sendmsg+0x38c/0x7a0 [ 64.750432][ T4340] ? kernel_sendmsg+0x30/0x30 [ 64.750438][ T4340] ? do_recvmmsg+0x550/0x550 [ 64.750443][ T4340] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.792832][ T4340] ___sys_sendmsg+0xd3/0x150 [ 64.797397][ T4340] ? sendmsg_copy_msghdr+0x110/0x110 [ 64.802652][ T4340] ? __fget_files+0x1b9/0x3c0 [ 64.807301][ T4340] ? lock_downgrade+0x6e0/0x6e0 [ 64.812128][ T4340] ? __fget_files+0x1d1/0x3c0 [ 64.816777][ T4340] ? __fget_light+0xbe/0x220 [ 64.821339][ T4340] __sys_sendmmsg+0x141/0x310 [ 64.825988][ T4340] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 64.831084][ T4340] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 64.837035][ T4340] ? find_held_lock+0x2d/0x110 [ 64.841776][ T4340] ? __context_tracking_exit+0x80/0x90 [ 64.847203][ T4340] ? lock_downgrade+0x6e0/0x6e0 [ 64.852109][ T4340] ? lock_downgrade+0x6e0/0x6e0 [ 64.856935][ T4340] __x64_sys_sendmmsg+0x94/0x100 [ 64.861839][ T4340] ? syscall_enter_from_user_mode+0x21/0x70 [ 64.867703][ T4340] do_syscall_64+0x35/0x80 [ 64.872089][ T4340] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 64.877946][ T4340] RIP: 0033:0x7fd82a2878d9 [ 64.882327][ T4340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 64.901901][ T4340] RSP: 002b:00007fd82b303188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.910282][ T4340] RAX: ffffffffffffffda RBX: 00007fd82a38bf60 RCX: 00007fd82a2878d9 [ 64.918228][ T4340] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 64.926347][ T4340] RBP: 00007fd82b3031d0 R08: 0000000000000000 R09: 0000000000000000 [ 64.934294][ T4340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.942236][ T4340] R13: 00007ffda011e60f R14: 00007fd82b303300 R15: 0000000000022000 [ 64.950187][ T4340] [ 64.953180][ T4354] CPU: 0 PID: 4354 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 64.961914][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.971940][ T4354] Call Trace: [ 64.975194][ T4354] [ 64.978098][ T4354] dump_stack_lvl+0x57/0x7d [ 64.982571][ T4354] should_fail.cold+0x5/0xa [ 64.987047][ T4354] should_failslab+0x5/0x10 [ 64.991524][ T4354] kmem_cache_alloc_node+0x65/0x3f0 [ 64.996691][ T4354] ? __alloc_skb+0x151/0x270 [ 65.001254][ T4354] __alloc_skb+0x151/0x270 [ 65.005643][ T4354] alloc_skb_with_frags+0x72/0x700 [ 65.010722][ T4354] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.016676][ T4354] sock_alloc_send_pskb+0x636/0x7c0 [ 65.021865][ T4354] ? sock_wmalloc+0xe0/0xe0 [ 65.026337][ T4354] ? lock_downgrade+0x6e0/0x6e0 [ 65.031156][ T4354] ? do_raw_spin_lock+0x120/0x2a0 [ 65.036153][ T4354] ? rwlock_bug.part.0+0x90/0x90 [ 65.041066][ T4354] unix_dgram_sendmsg+0x35a/0x1770 [ 65.046157][ T4354] ? aa_sk_perm+0x1ab/0x820 [ 65.050639][ T4354] ? unix_stream_sendpage+0xa50/0xa50 [ 65.055978][ T4354] ? aa_af_perm+0x210/0x210 [ 65.060457][ T4354] ? unix_stream_sendpage+0xa50/0xa50 [ 65.065798][ T4354] sock_sendmsg+0xab/0xe0 [ 65.070099][ T4354] ____sys_sendmsg+0x38c/0x7a0 [ 65.074833][ T4354] ? kernel_sendmsg+0x30/0x30 [ 65.079478][ T4354] ? do_recvmmsg+0x550/0x550 [ 65.084044][ T4354] ___sys_sendmsg+0xd3/0x150 [ 65.088612][ T4354] ? sendmsg_copy_msghdr+0x110/0x110 [ 65.093872][ T4354] ? __fget_files+0x1b9/0x3c0 [ 65.098526][ T4354] ? find_held_lock+0x2d/0x110 [ 65.103265][ T4354] ? __might_fault+0xb3/0x160 [ 65.107909][ T4354] ? lock_downgrade+0x6e0/0x6e0 [ 65.112733][ T4354] __sys_sendmmsg+0x141/0x310 [ 65.117382][ T4354] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 65.122376][ T4354] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.128322][ T4354] ? find_held_lock+0x2d/0x110 [ 65.133058][ T4354] ? __context_tracking_exit+0x80/0x90 [ 65.138485][ T4354] ? lock_downgrade+0x6e0/0x6e0 [ 65.143304][ T4354] ? lock_downgrade+0x6e0/0x6e0 [ 65.148131][ T4354] __x64_sys_sendmmsg+0x94/0x100 [ 65.153038][ T4354] ? syscall_enter_from_user_mode+0x21/0x70 [ 65.158898][ T4354] do_syscall_64+0x35/0x80 [ 65.163281][ T4354] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.169144][ T4354] RIP: 0033:0x7f4ed14878d9 [ 65.173529][ T4354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 65.193109][ T4354] RSP: 002b:00007f4ed0bfe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.201488][ T4354] RAX: ffffffffffffffda RBX: 00007f4ed158c0e0 RCX: 00007f4ed14878d9 [ 65.209429][ T4354] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000004 [ 65.217372][ T4354] RBP: 00007f4ed0bfe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 65.225315][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.233256][ T4354] R13: 00007ffe57270dcf R14: 00007f4ed0bfe300 R15: 0000000000022000 [ 65.241203][ T4354] [ 65.244837][ T4351] CPU: 1 PID: 4351 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 65.253495][ T4351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.263531][ T4351] Call Trace: [ 65.266789][ T4351] [ 65.269698][ T4351] dump_stack_lvl+0x57/0x7d [ 65.274176][ T4351] should_fail.cold+0x5/0xa [ 65.278656][ T4351] should_failslab+0x5/0x10 [ 65.283136][ T4351] kmem_cache_alloc_node+0x65/0x3f0 [ 65.288308][ T4351] ? __alloc_skb+0x151/0x270 [ 65.292879][ T4351] __alloc_skb+0x151/0x270 [ 65.297265][ T4351] alloc_skb_with_frags+0x72/0x700 [ 65.302343][ T4351] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.308293][ T4351] sock_alloc_send_pskb+0x636/0x7c0 [ 65.313459][ T4351] ? sock_wmalloc+0xe0/0xe0 [ 65.317925][ T4351] ? lock_downgrade+0x6e0/0x6e0 [ 65.322741][ T4351] ? do_raw_spin_lock+0x120/0x2a0 [ 65.327731][ T4351] ? rwlock_bug.part.0+0x90/0x90 [ 65.332639][ T4351] unix_dgram_sendmsg+0x35a/0x1770 [ 65.337723][ T4351] ? aa_sk_perm+0x1ab/0x820 [ 65.342194][ T4351] ? unix_stream_sendpage+0xa50/0xa50 [ 65.347530][ T4351] ? aa_af_perm+0x210/0x210 [ 65.352006][ T4351] ? unix_stream_sendpage+0xa50/0xa50 [ 65.357344][ T4351] sock_sendmsg+0xab/0xe0 [ 65.361641][ T4351] ____sys_sendmsg+0x38c/0x7a0 [ 65.366379][ T4351] ? kernel_sendmsg+0x30/0x30 [ 65.371019][ T4351] ? do_recvmmsg+0x550/0x550 [ 65.375578][ T4351] ___sys_sendmsg+0xd3/0x150 [ 65.380132][ T4351] ? sendmsg_copy_msghdr+0x110/0x110 [ 65.385384][ T4351] ? __fget_files+0x1b9/0x3c0 [ 65.390031][ T4351] ? find_held_lock+0x2d/0x110 [ 65.394760][ T4351] ? __might_fault+0xb3/0x160 [ 65.399401][ T4351] ? lock_downgrade+0x6e0/0x6e0 [ 65.404223][ T4351] __sys_sendmmsg+0x141/0x310 [ 65.408867][ T4351] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 65.413854][ T4351] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.419796][ T4351] ? find_held_lock+0x2d/0x110 [ 65.424529][ T4351] ? __context_tracking_exit+0x80/0x90 [ 65.429953][ T4351] ? lock_downgrade+0x6e0/0x6e0 [ 65.434769][ T4351] ? lock_downgrade+0x6e0/0x6e0 [ 65.439590][ T4351] __x64_sys_sendmmsg+0x94/0x100 [ 65.444493][ T4351] ? syscall_enter_from_user_mode+0x21/0x70 [ 65.450354][ T4351] do_syscall_64+0x35/0x80 [ 65.454737][ T4351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.460594][ T4351] RIP: 0033:0x7fb1e6a878d9 [ 65.464974][ T4351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 65.484549][ T4351] RSP: 002b:00007fb1e7be7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.492934][ T4351] RAX: ffffffffffffffda RBX: 00007fb1e6b8c020 RCX: 00007fb1e6a878d9 [ 65.500878][ T4351] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 65.508835][ T4351] RBP: 00007fb1e7be71d0 R08: 0000000000000000 R09: 0000000000000000 [ 65.516784][ T4351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.524724][ T4351] R13: 00007ffde14cf4cf R14: 00007fb1e7be7300 R15: 0000000000022000 [ 65.532671][ T4351] [ 65.538850][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.545233][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.553040][ T4352] CPU: 0 PID: 4352 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 65.561689][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.571800][ T4352] Call Trace: [ 65.575054][ T4352] [ 65.577958][ T4352] dump_stack_lvl+0x57/0x7d [ 65.582434][ T4352] should_fail.cold+0x5/0xa [ 65.586906][ T4352] _copy_from_user+0x25/0xe0 [ 65.591466][ T4352] __copy_msghdr_from_user+0x86/0x3e0 [ 65.596806][ T4352] ? __ia32_sys_shutdown+0x70/0x70 [ 65.601885][ T4352] ? unix_stream_sendpage+0xa50/0xa50 [ 65.607225][ T4352] ? sock_sendmsg+0xab/0xe0 [ 65.611700][ T4352] sendmsg_copy_msghdr+0x7f/0x110 [ 65.616697][ T4352] ? do_recvmmsg+0x550/0x550 [ 65.621253][ T4352] ? __lock_acquire+0x15bc/0x5660 [ 65.626250][ T4352] ___sys_sendmsg+0xb8/0x150 [ 65.630810][ T4352] ? sendmsg_copy_msghdr+0x110/0x110 [ 65.636062][ T4352] ? __fget_files+0x1b9/0x3c0 [ 65.640714][ T4352] ? find_held_lock+0x2d/0x110 [ 65.645449][ T4352] ? __might_fault+0xb3/0x160 [ 65.650094][ T4352] ? lock_downgrade+0x6e0/0x6e0 [ 65.654922][ T4352] __sys_sendmmsg+0x141/0x310 [ 65.659573][ T4352] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 65.664565][ T4352] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.670510][ T4352] ? find_held_lock+0x2d/0x110 [ 65.675249][ T4352] ? __context_tracking_exit+0x80/0x90 [ 65.680681][ T4352] ? lock_downgrade+0x6e0/0x6e0 [ 65.685504][ T4352] ? lock_downgrade+0x6e0/0x6e0 [ 65.690331][ T4352] __x64_sys_sendmmsg+0x94/0x100 [ 65.695235][ T4352] ? syscall_enter_from_user_mode+0x21/0x70 [ 65.701101][ T4352] do_syscall_64+0x35/0x80 [ 65.705486][ T4352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.711354][ T4352] RIP: 0033:0x7efe7de878d9 [ 65.715740][ T4352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 65.735315][ T4352] RSP: 002b:00007efe7d5dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.743694][ T4352] RAX: ffffffffffffffda RBX: 00007efe7df8c020 RCX: 00007efe7de878d9 [ 65.751636][ T4352] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 65.759577][ T4352] RBP: 00007efe7d5dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 65.767519][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.775459][ T4352] R13: 00007ffc225babbf R14: 00007efe7d5dd300 R15: 0000000000022000 [ 65.783407][ T4352] [ 65.786401][ T4344] CPU: 1 PID: 4344 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 65.795044][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.805065][ T4344] Call Trace: [ 65.808313][ T4344] [ 65.811215][ T4344] dump_stack_lvl+0x57/0x7d [ 65.815690][ T4344] should_fail.cold+0x5/0xa [ 65.820161][ T4344] should_failslab+0x5/0x10 [ 65.824635][ T4344] __kmalloc_node_track_caller+0x7d/0x360 [ 65.830579][ T4344] ? alloc_skb_with_frags+0x72/0x700 [ 65.835830][ T4344] __alloc_skb+0x8a/0x270 [ 65.840123][ T4344] alloc_skb_with_frags+0x72/0x700 [ 65.845197][ T4344] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.851146][ T4344] sock_alloc_send_pskb+0x636/0x7c0 [ 65.856312][ T4344] ? sock_wmalloc+0xe0/0xe0 [ 65.860779][ T4344] ? lock_downgrade+0x6e0/0x6e0 [ 65.865591][ T4344] ? do_raw_spin_lock+0x120/0x2a0 [ 65.870583][ T4344] ? rwlock_bug.part.0+0x90/0x90 [ 65.875492][ T4344] unix_dgram_sendmsg+0x35a/0x1770 [ 65.880575][ T4344] ? aa_sk_perm+0x1ab/0x820 [ 65.885043][ T4344] ? unix_stream_sendpage+0xa50/0xa50 [ 65.890381][ T4344] ? aa_af_perm+0x210/0x210 [ 65.894852][ T4344] ? unix_stream_sendpage+0xa50/0xa50 [ 65.900189][ T4344] sock_sendmsg+0xab/0xe0 [ 65.904482][ T4344] ____sys_sendmsg+0x38c/0x7a0 [ 65.909209][ T4344] ? kernel_sendmsg+0x30/0x30 [ 65.913849][ T4344] ? do_recvmmsg+0x550/0x550 [ 65.918402][ T4344] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.924351][ T4344] ___sys_sendmsg+0xd3/0x150 [ 65.928904][ T4344] ? sendmsg_copy_msghdr+0x110/0x110 [ 65.934153][ T4344] ? __fget_files+0x1b9/0x3c0 [ 65.938794][ T4344] ? lock_downgrade+0x6e0/0x6e0 [ 65.943613][ T4344] ? __fget_files+0x1d1/0x3c0 [ 65.948255][ T4344] ? __fget_light+0xbe/0x220 [ 65.952815][ T4344] __sys_sendmmsg+0x141/0x310 [ 65.957460][ T4344] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 65.962446][ T4344] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.968391][ T4344] ? find_held_lock+0x2d/0x110 [ 65.973125][ T4344] ? __context_tracking_exit+0x80/0x90 [ 65.978551][ T4344] ? lock_downgrade+0x6e0/0x6e0 [ 65.983366][ T4344] ? lock_downgrade+0x6e0/0x6e0 [ 65.988188][ T4344] __x64_sys_sendmmsg+0x94/0x100 [ 65.993090][ T4344] ? syscall_enter_from_user_mode+0x21/0x70 [ 65.998949][ T4344] do_syscall_64+0x35/0x80 [ 66.003329][ T4344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.009187][ T4344] RIP: 0033:0x7f6bcd8878d9 [ 66.013568][ T4344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.033140][ T4344] RSP: 002b:00007f6bce9d1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.041515][ T4344] RAX: ffffffffffffffda RBX: 00007f6bcd98c020 RCX: 00007f6bcd8878d9 [ 66.049453][ T4344] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 66.057392][ T4344] RBP: 00007f6bce9d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 66.065327][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.073265][ T4344] R13: 00007ffdefcf793f R14: 00007f6bce9d1300 R15: 0000000000022000 [ 66.081208][ T4344] [ 66.086298][ T4359] FAULT_INJECTION: forcing a failure. [ 66.086298][ T4359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.096639][ T4339] CPU: 1 PID: 4339 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 66.108016][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.118039][ T4339] Call Trace: [ 66.121398][ T4339] [ 66.124482][ T4339] dump_stack_lvl+0x57/0x7d [ 66.128961][ T4339] should_fail.cold+0x5/0xa [ 66.133433][ T4339] should_failslab+0x5/0x10 [ 66.137907][ T4339] kmem_cache_alloc_trace+0x60/0x3f0 [ 66.143163][ T4339] ? sk_psock_skb_ingress_self+0x4f/0x3b0 [ 66.148856][ T4339] sk_psock_skb_ingress_self+0x4f/0x3b0 [ 66.154374][ T4339] sk_psock_verdict_apply+0x39c/0x4b0 [ 66.159716][ T4339] sk_psock_verdict_recv+0x216/0x610 [ 66.164970][ T4339] unix_read_sock+0xc4/0x1e0 [ 66.169529][ T4339] ? sk_psock_strp_parse+0x330/0x330 [ 66.174783][ T4339] ? unix_compat_ioctl+0x10/0x10 [ 66.179691][ T4339] ? find_held_lock+0x2d/0x110 [ 66.184429][ T4339] sk_psock_verdict_data_ready+0xf8/0x150 [ 66.190118][ T4339] ? sk_psock_strp_read_done+0x10/0x10 [ 66.195633][ T4339] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 66.201581][ T4339] ? do_raw_spin_unlock+0x171/0x230 [ 66.206748][ T4339] unix_dgram_sendmsg+0xca6/0x1770 [ 66.211835][ T4339] ? unix_stream_sendpage+0xa50/0xa50 [ 66.217173][ T4339] ? aa_af_perm+0x210/0x210 [ 66.221654][ T4339] ? unix_stream_sendpage+0xa50/0xa50 [ 66.226995][ T4339] sock_sendmsg+0xab/0xe0 [ 66.231296][ T4339] ____sys_sendmsg+0x38c/0x7a0 [ 66.236032][ T4339] ? kernel_sendmsg+0x30/0x30 [ 66.240681][ T4339] ? do_recvmmsg+0x550/0x550 [ 66.245245][ T4339] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.251198][ T4339] ___sys_sendmsg+0xd3/0x150 [ 66.255761][ T4339] ? sendmsg_copy_msghdr+0x110/0x110 [ 66.261015][ T4339] ? __fget_files+0x1b9/0x3c0 [ 66.265662][ T4339] ? lock_downgrade+0x6e0/0x6e0 [ 66.270492][ T4339] ? __fget_files+0x1d1/0x3c0 [ 66.275146][ T4339] ? __fget_light+0xbe/0x220 [ 66.279714][ T4339] __sys_sendmmsg+0x141/0x310 [ 66.284376][ T4339] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 66.289374][ T4339] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.295325][ T4339] ? find_held_lock+0x2d/0x110 [ 66.300067][ T4339] ? __context_tracking_exit+0x80/0x90 [ 66.305497][ T4339] ? lock_downgrade+0x6e0/0x6e0 [ 66.310324][ T4339] ? lock_downgrade+0x6e0/0x6e0 [ 66.315159][ T4339] __x64_sys_sendmmsg+0x94/0x100 [ 66.320072][ T4339] ? syscall_enter_from_user_mode+0x21/0x70 [ 66.325936][ T4339] do_syscall_64+0x35/0x80 [ 66.330323][ T4339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.336192][ T4339] RIP: 0033:0x7fb6342878d9 [ 66.340850][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.360608][ T4339] RSP: 002b:00007fb6354ba188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.368997][ T4339] RAX: ffffffffffffffda RBX: 00007fb63438bf60 RCX: 00007fb6342878d9 [ 66.369222][ T4362] FAULT_INJECTION: forcing a failure. [ 66.369222][ T4362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.376940][ T4339] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 66.376944][ T4339] RBP: 00007fb6354ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 66.376948][ T4339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.376952][ T4339] R13: 00007fffb655c5df R14: 00007fb6354ba300 R15: 0000000000022000 [ 66.376967][ T4339] [ 66.398849][ T4359] CPU: 1 PID: 4359 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 66.433533][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.443561][ T4359] Call Trace: [ 66.446816][ T4359] [ 66.449722][ T4359] dump_stack_lvl+0x57/0x7d [ 66.454194][ T4359] should_fail.cold+0x5/0xa [ 66.458667][ T4359] _copy_from_user+0x25/0xe0 [ 66.463227][ T4359] __copy_msghdr_from_user+0x86/0x3e0 [ 66.468572][ T4359] ? __ia32_sys_shutdown+0x70/0x70 [ 66.473651][ T4359] ? unix_stream_sendpage+0xa50/0xa50 [ 66.478998][ T4359] ? sock_sendmsg+0xab/0xe0 [ 66.483478][ T4359] sendmsg_copy_msghdr+0x7f/0x110 [ 66.488479][ T4359] ? do_recvmmsg+0x550/0x550 [ 66.493037][ T4359] ? __lock_acquire+0x15bc/0x5660 [ 66.498210][ T4359] ___sys_sendmsg+0xb8/0x150 [ 66.502769][ T4359] ? sendmsg_copy_msghdr+0x110/0x110 [ 66.508023][ T4359] ? __fget_files+0x1b9/0x3c0 [ 66.512763][ T4359] ? find_held_lock+0x2d/0x110 [ 66.517502][ T4359] ? __might_fault+0xb3/0x160 [ 66.522159][ T4359] ? lock_downgrade+0x6e0/0x6e0 [ 66.526991][ T4359] __sys_sendmmsg+0x141/0x310 [ 66.531728][ T4359] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 66.536725][ T4359] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.542677][ T4359] ? find_held_lock+0x2d/0x110 [ 66.547420][ T4359] ? __context_tracking_exit+0x80/0x90 [ 66.552849][ T4359] ? lock_downgrade+0x6e0/0x6e0 [ 66.557672][ T4359] ? lock_downgrade+0x6e0/0x6e0 [ 66.562504][ T4359] __x64_sys_sendmmsg+0x94/0x100 [ 66.567416][ T4359] ? syscall_enter_from_user_mode+0x21/0x70 [ 66.573285][ T4359] do_syscall_64+0x35/0x80 [ 66.577676][ T4359] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.583640][ T4359] RIP: 0033:0x7fd82a2878d9 [ 66.588027][ T4359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.607613][ T4359] RSP: 002b:00007fd8299dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.616267][ T4359] RAX: ffffffffffffffda RBX: 00007fd82a38c0e0 RCX: 00007fd82a2878d9 [ 66.624222][ T4359] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000004 [ 66.632180][ T4359] RBP: 00007fd8299dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 66.640132][ T4359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.648093][ T4359] R13: 00007ffda011e60f R14: 00007fd8299dd300 R15: 0000000000022000 [ 66.656390][ T4359] [ 66.659392][ T4362] CPU: 0 PID: 4362 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 66.668314][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.678361][ T4362] Call Trace: [ 66.681621][ T4362] [ 66.684526][ T4362] dump_stack_lvl+0x57/0x7d [ 66.689000][ T4362] should_fail.cold+0x5/0xa [ 66.693475][ T4362] _copy_from_user+0x25/0xe0 [ 66.698052][ T4362] __copy_msghdr_from_user+0x86/0x3e0 [ 66.703395][ T4362] ? __ia32_sys_shutdown+0x70/0x70 [ 66.708483][ T4362] ? unix_stream_sendpage+0xa50/0xa50 [ 66.713836][ T4362] ? sock_sendmsg+0xab/0xe0 [ 66.718316][ T4362] sendmsg_copy_msghdr+0x7f/0x110 [ 66.723575][ T4362] ? do_recvmmsg+0x550/0x550 [ 66.728141][ T4362] ? __lock_acquire+0x15bc/0x5660 [ 66.733137][ T4362] ___sys_sendmsg+0xb8/0x150 [ 66.737700][ T4362] ? sendmsg_copy_msghdr+0x110/0x110 [ 66.742952][ T4362] ? __fget_files+0x1b9/0x3c0 [ 66.747604][ T4362] ? find_held_lock+0x2d/0x110 [ 66.752332][ T4362] ? __might_fault+0xb3/0x160 [ 66.756973][ T4362] ? lock_downgrade+0x6e0/0x6e0 [ 66.761793][ T4362] __sys_sendmmsg+0x141/0x310 [ 66.766437][ T4362] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 66.771431][ T4362] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.777374][ T4362] ? find_held_lock+0x2d/0x110 [ 66.782108][ T4362] ? __context_tracking_exit+0x80/0x90 [ 66.787531][ T4362] ? lock_downgrade+0x6e0/0x6e0 [ 66.792351][ T4362] ? lock_downgrade+0x6e0/0x6e0 [ 66.797172][ T4362] __x64_sys_sendmmsg+0x94/0x100 [ 66.802077][ T4362] ? syscall_enter_from_user_mode+0x21/0x70 [ 66.807934][ T4362] do_syscall_64+0x35/0x80 [ 66.812315][ T4362] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 66.818173][ T4362] RIP: 0033:0x7f6bcd8878d9 [ 66.822557][ T4362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 66.842221][ T4362] RSP: 002b:00007f6bce9d1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.850605][ T4362] RAX: ffffffffffffffda RBX: 00007f6bcd98c020 RCX: 00007f6bcd8878d9 [ 66.859462][ T4362] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 66.867404][ T4362] RBP: 00007f6bce9d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 66.875448][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.883386][ T4362] R13: 00007ffdefcf793f R14: 00007f6bce9d1300 R15: 0000000000022000 [ 66.891347][ T4362] [ 66.914780][ T4365] FAULT_INJECTION: forcing a failure. [ 66.914780][ T4365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.946737][ T4369] FAULT_INJECTION: forcing a failure. [ 66.946737][ T4369] name failslab, interval 1, probability 0, space 0, times 0 [ 66.968507][ T4373] FAULT_INJECTION: forcing a failure. [ 66.968507][ T4373] name failslab, interval 1, probability 0, space 0, times 0 [ 66.978568][ T4374] FAULT_INJECTION: forcing a failure. [ 66.978568][ T4374] name failslab, interval 1, probability 0, space 0, times 0 [ 66.981888][ T4372] FAULT_INJECTION: forcing a failure. [ 66.981888][ T4372] name failslab, interval 1, probability 0, space 0, times 0 [ 67.007113][ T4365] CPU: 1 PID: 4365 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 67.015766][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.025794][ T4365] Call Trace: [ 67.029046][ T4365] [ 67.031952][ T4365] dump_stack_lvl+0x57/0x7d [ 67.036432][ T4365] should_fail.cold+0x5/0xa [ 67.040906][ T4365] _copy_from_user+0x25/0xe0 [ 67.045468][ T4365] __copy_msghdr_from_user+0x86/0x3e0 [ 67.050810][ T4365] ? __ia32_sys_shutdown+0x70/0x70 [ 67.055893][ T4365] ? unix_stream_sendpage+0xa50/0xa50 [ 67.061408][ T4365] ? sock_sendmsg+0xab/0xe0 [ 67.065884][ T4365] sendmsg_copy_msghdr+0x7f/0x110 [ 67.070878][ T4365] ? do_recvmmsg+0x550/0x550 [ 67.075435][ T4365] ? __lock_acquire+0x15bc/0x5660 [ 67.080434][ T4365] ___sys_sendmsg+0xb8/0x150 [ 67.084991][ T4365] ? sendmsg_copy_msghdr+0x110/0x110 [ 67.090247][ T4365] ? __fget_files+0x1b9/0x3c0 [ 67.095037][ T4365] ? find_held_lock+0x2d/0x110 [ 67.099954][ T4365] ? __might_fault+0xb3/0x160 [ 67.104601][ T4365] ? lock_downgrade+0x6e0/0x6e0 [ 67.108915][ T4375] FAULT_INJECTION: forcing a failure. [ 67.108915][ T4375] name failslab, interval 1, probability 0, space 0, times 0 [ 67.109515][ T4365] __sys_sendmmsg+0x141/0x310 [ 67.126699][ T4365] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 67.131694][ T4365] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.137663][ T4365] ? find_held_lock+0x2d/0x110 [ 67.142576][ T4365] ? __context_tracking_exit+0x80/0x90 [ 67.148008][ T4365] ? lock_downgrade+0x6e0/0x6e0 [ 67.152835][ T4365] ? lock_downgrade+0x6e0/0x6e0 [ 67.157659][ T4365] __x64_sys_sendmmsg+0x94/0x100 [ 67.162563][ T4365] ? syscall_enter_from_user_mode+0x21/0x70 [ 67.168426][ T4365] do_syscall_64+0x35/0x80 [ 67.172809][ T4365] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.178668][ T4365] RIP: 0033:0x7fb6342878d9 [ 67.183049][ T4365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 67.202626][ T4365] RSP: 002b:00007fb635499188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.211007][ T4365] RAX: ffffffffffffffda RBX: 00007fb63438c020 RCX: 00007fb6342878d9 [ 67.218950][ T4365] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 67.226891][ T4365] RBP: 00007fb6354991d0 R08: 0000000000000000 R09: 0000000000000000 [ 67.234834][ T4365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.242772][ T4365] R13: 00007fffb655c5df R14: 00007fb635499300 R15: 0000000000022000 [ 67.250721][ T4365] [ 67.253715][ T4369] CPU: 0 PID: 4369 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 67.262360][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.272384][ T4369] Call Trace: [ 67.275631][ T4369] [ 67.278532][ T4369] dump_stack_lvl+0x57/0x7d [ 67.283005][ T4369] should_fail.cold+0x5/0xa [ 67.287472][ T4369] ? skb_clone+0x125/0x300 [ 67.291855][ T4369] should_failslab+0x5/0x10 [ 67.296322][ T4369] kmem_cache_alloc+0x5e/0x3b0 [ 67.301052][ T4369] ? wait_for_completion_io_timeout+0x20/0x20 [ 67.307085][ T4369] skb_clone+0x125/0x300 [ 67.311295][ T4369] sk_psock_verdict_recv+0x48/0x610 [ 67.316462][ T4369] unix_read_sock+0xc4/0x1e0 [ 67.321019][ T4369] ? sk_psock_strp_parse+0x330/0x330 [ 67.326267][ T4369] ? unix_compat_ioctl+0x10/0x10 [ 67.331168][ T4369] ? find_held_lock+0x2d/0x110 [ 67.335901][ T4369] sk_psock_verdict_data_ready+0xf8/0x150 [ 67.341584][ T4369] ? sk_psock_strp_read_done+0x10/0x10 [ 67.347007][ T4369] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 67.352948][ T4369] ? do_raw_spin_unlock+0x171/0x230 [ 67.358110][ T4369] unix_dgram_sendmsg+0xca6/0x1770 [ 67.363430][ T4369] ? unix_stream_sendpage+0xa50/0xa50 [ 67.368770][ T4369] ? aa_af_perm+0x210/0x210 [ 67.373242][ T4369] ? unix_stream_sendpage+0xa50/0xa50 [ 67.378578][ T4369] sock_sendmsg+0xab/0xe0 [ 67.382873][ T4369] ____sys_sendmsg+0x38c/0x7a0 [ 67.387600][ T4369] ? kernel_sendmsg+0x30/0x30 [ 67.392244][ T4369] ? do_recvmmsg+0x550/0x550 [ 67.396796][ T4369] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.402746][ T4369] ___sys_sendmsg+0xd3/0x150 [ 67.407300][ T4369] ? sendmsg_copy_msghdr+0x110/0x110 [ 67.412549][ T4369] ? __fget_files+0x1b9/0x3c0 [ 67.417194][ T4369] ? lock_downgrade+0x6e0/0x6e0 [ 67.422015][ T4369] ? __fget_files+0x1d1/0x3c0 [ 67.426660][ T4369] ? __fget_light+0xbe/0x220 [ 67.431215][ T4369] __sys_sendmmsg+0x141/0x310 [ 67.435861][ T4369] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 67.440848][ T4369] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.446789][ T4369] ? find_held_lock+0x2d/0x110 [ 67.451525][ T4369] ? __context_tracking_exit+0x80/0x90 [ 67.456949][ T4369] ? lock_downgrade+0x6e0/0x6e0 [ 67.461766][ T4369] ? lock_downgrade+0x6e0/0x6e0 [ 67.466588][ T4369] __x64_sys_sendmmsg+0x94/0x100 [ 67.471487][ T4369] ? syscall_enter_from_user_mode+0x21/0x70 [ 67.477344][ T4369] do_syscall_64+0x35/0x80 [ 67.481725][ T4369] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.487583][ T4369] RIP: 0033:0x7efe7de878d9 [ 67.492142][ T4369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 67.511711][ T4369] RSP: 002b:00007efe7d5fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.520088][ T4369] RAX: ffffffffffffffda RBX: 00007efe7df8bf60 RCX: 00007efe7de878d9 [ 67.528026][ T4369] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 67.535962][ T4369] RBP: 00007efe7d5fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 67.543898][ T4369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.551833][ T4369] R13: 00007ffc225babbf R14: 00007efe7d5fe300 R15: 0000000000022000 [ 67.559780][ T4369] [ 67.566103][ T4373] CPU: 1 PID: 4373 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 67.574761][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.584791][ T4373] Call Trace: [ 67.588048][ T4373] [ 67.590958][ T4373] dump_stack_lvl+0x57/0x7d [ 67.595612][ T4373] should_fail.cold+0x5/0xa [ 67.600093][ T4373] should_failslab+0x5/0x10 [ 67.604571][ T4373] kmem_cache_alloc_trace+0x60/0x3f0 [ 67.609833][ T4373] ? sk_psock_skb_ingress_self+0x4f/0x3b0 [ 67.615533][ T4373] sk_psock_skb_ingress_self+0x4f/0x3b0 [ 67.621061][ T4373] sk_psock_verdict_apply+0x39c/0x4b0 [ 67.626413][ T4373] sk_psock_verdict_recv+0x216/0x610 [ 67.631685][ T4373] unix_read_sock+0xc4/0x1e0 [ 67.636251][ T4373] ? sk_psock_strp_parse+0x330/0x330 [ 67.641510][ T4373] ? unix_compat_ioctl+0x10/0x10 [ 67.646419][ T4373] ? find_held_lock+0x2d/0x110 [ 67.651164][ T4373] sk_psock_verdict_data_ready+0xf8/0x150 [ 67.656861][ T4373] ? sk_psock_strp_read_done+0x10/0x10 [ 67.662297][ T4373] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 67.668251][ T4373] ? do_raw_spin_unlock+0x171/0x230 [ 67.673422][ T4373] unix_dgram_sendmsg+0xca6/0x1770 [ 67.678508][ T4373] ? unix_stream_sendpage+0xa50/0xa50 [ 67.683930][ T4373] ? aa_af_perm+0x210/0x210 [ 67.688404][ T4373] ? unix_stream_sendpage+0xa50/0xa50 [ 67.693741][ T4373] sock_sendmsg+0xab/0xe0 [ 67.698038][ T4373] ____sys_sendmsg+0x38c/0x7a0 [ 67.702765][ T4373] ? kernel_sendmsg+0x30/0x30 [ 67.707406][ T4373] ? do_recvmmsg+0x550/0x550 [ 67.711962][ T4373] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.717913][ T4373] ___sys_sendmsg+0xd3/0x150 [ 67.722469][ T4373] ? sendmsg_copy_msghdr+0x110/0x110 [ 67.727718][ T4373] ? __fget_files+0x1b9/0x3c0 [ 67.732360][ T4373] ? lock_downgrade+0x6e0/0x6e0 [ 67.737180][ T4373] ? __fget_files+0x1d1/0x3c0 [ 67.741823][ T4373] ? __fget_light+0xbe/0x220 [ 67.746383][ T4373] __sys_sendmmsg+0x141/0x310 [ 67.751027][ T4373] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 67.756015][ T4373] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.761965][ T4373] ? find_held_lock+0x2d/0x110 [ 67.766704][ T4373] ? __context_tracking_exit+0x80/0x90 [ 67.772127][ T4373] ? lock_downgrade+0x6e0/0x6e0 [ 67.776944][ T4373] ? lock_downgrade+0x6e0/0x6e0 [ 67.781773][ T4373] __x64_sys_sendmmsg+0x94/0x100 [ 67.786682][ T4373] ? syscall_enter_from_user_mode+0x21/0x70 [ 67.792541][ T4373] do_syscall_64+0x35/0x80 [ 67.796924][ T4373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 67.802782][ T4373] RIP: 0033:0x7fb1e6a878d9 [ 67.807161][ T4373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 67.826732][ T4373] RSP: 002b:00007fb1e7c08188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.835109][ T4373] RAX: ffffffffffffffda RBX: 00007fb1e6b8bf60 RCX: 00007fb1e6a878d9 [ 67.843044][ T4373] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 67.850983][ T4373] RBP: 00007fb1e7c081d0 R08: 0000000000000000 R09: 0000000000000000 [ 67.858922][ T4373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.866857][ T4373] R13: 00007ffde14cf4cf R14: 00007fb1e7c08300 R15: 0000000000022000 [ 67.874809][ T4373] [ 67.879128][ T4372] CPU: 1 PID: 4372 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 67.880208][ T4378] FAULT_INJECTION: forcing a failure. [ 67.880208][ T4378] name failslab, interval 1, probability 0, space 0, times 0 [ 67.887869][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.887873][ T4372] Call Trace: [ 67.887877][ T4372] [ 67.887880][ T4372] dump_stack_lvl+0x57/0x7d [ 67.887890][ T4372] should_fail.cold+0x5/0xa [ 67.887900][ T4372] should_failslab+0x5/0x10 [ 67.887907][ T4372] kmem_cache_alloc_trace+0x60/0x3f0 [ 67.935260][ T4372] ? sk_psock_skb_ingress_self+0x4f/0x3b0 [ 67.940959][ T4372] sk_psock_skb_ingress_self+0x4f/0x3b0 [ 67.946482][ T4372] sk_psock_verdict_apply+0x39c/0x4b0 [ 67.951830][ T4372] sk_psock_verdict_recv+0x216/0x610 [ 67.957092][ T4372] unix_read_sock+0xc4/0x1e0 [ 67.961655][ T4372] ? sk_psock_strp_parse+0x330/0x330 [ 67.966920][ T4372] ? unix_compat_ioctl+0x10/0x10 [ 67.971832][ T4372] ? find_held_lock+0x2d/0x110 [ 67.976579][ T4372] sk_psock_verdict_data_ready+0xf8/0x150 [ 67.982273][ T4372] ? sk_psock_strp_read_done+0x10/0x10 [ 67.987710][ T4372] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 67.993664][ T4372] ? do_raw_spin_unlock+0x171/0x230 [ 67.998844][ T4372] unix_dgram_sendmsg+0xca6/0x1770 [ 68.003937][ T4372] ? unix_stream_sendpage+0xa50/0xa50 [ 68.009280][ T4372] ? aa_af_perm+0x210/0x210 [ 68.013766][ T4372] ? unix_stream_sendpage+0xa50/0xa50 [ 68.019115][ T4372] sock_sendmsg+0xab/0xe0 [ 68.023424][ T4372] ____sys_sendmsg+0x38c/0x7a0 [ 68.028160][ T4372] ? kernel_sendmsg+0x30/0x30 [ 68.032805][ T4372] ? do_recvmmsg+0x550/0x550 [ 68.035940][ T4383] FAULT_INJECTION: forcing a failure. [ 68.035940][ T4383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.037451][ T4372] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.037468][ T4372] ___sys_sendmsg+0xd3/0x150 [ 68.037476][ T4372] ? sendmsg_copy_msghdr+0x110/0x110 [ 68.066196][ T4372] ? __fget_files+0x1b9/0x3c0 [ 68.070847][ T4372] ? lock_downgrade+0x6e0/0x6e0 [ 68.074154][ T4384] FAULT_INJECTION: forcing a failure. [ 68.074154][ T4384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.075677][ T4372] ? __fget_files+0x1d1/0x3c0 [ 68.075695][ T4372] ? __fget_light+0xbe/0x220 [ 68.097865][ T4372] __sys_sendmmsg+0x141/0x310 [ 68.102514][ T4372] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 68.107508][ T4372] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.113463][ T4372] ? find_held_lock+0x2d/0x110 [ 68.118202][ T4372] ? __context_tracking_exit+0x80/0x90 [ 68.123628][ T4372] ? lock_downgrade+0x6e0/0x6e0 [ 68.128453][ T4372] ? lock_downgrade+0x6e0/0x6e0 [ 68.133283][ T4372] __x64_sys_sendmmsg+0x94/0x100 [ 68.138188][ T4372] ? syscall_enter_from_user_mode+0x21/0x70 [ 68.144049][ T4372] do_syscall_64+0x35/0x80 [ 68.148437][ T4372] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.154296][ T4372] RIP: 0033:0x7f4ed14878d9 [ 68.158682][ T4372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 68.178254][ T4372] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.186634][ T4372] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 68.194576][ T4372] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 68.202520][ T4372] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 68.210462][ T4372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.218406][ T4372] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 68.226366][ T4372] [ 68.229363][ T4384] CPU: 0 PID: 4384 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 68.238021][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.248062][ T4384] Call Trace: [ 68.251314][ T4384] [ 68.254212][ T4384] dump_stack_lvl+0x57/0x7d [ 68.258681][ T4384] should_fail.cold+0x5/0xa [ 68.263149][ T4384] _copy_from_user+0x25/0xe0 [ 68.267704][ T4384] __copy_msghdr_from_user+0x86/0x3e0 [ 68.273042][ T4384] ? __ia32_sys_shutdown+0x70/0x70 [ 68.278119][ T4384] ? unix_stream_sendpage+0xa50/0xa50 [ 68.283461][ T4384] ? sock_sendmsg+0xab/0xe0 [ 68.287937][ T4384] sendmsg_copy_msghdr+0x7f/0x110 [ 68.292935][ T4384] ? do_recvmmsg+0x550/0x550 [ 68.297504][ T4384] ? __lock_acquire+0x15bc/0x5660 [ 68.302513][ T4384] ___sys_sendmsg+0xb8/0x150 [ 68.307082][ T4384] ? sendmsg_copy_msghdr+0x110/0x110 [ 68.312345][ T4384] ? __fget_files+0x1b9/0x3c0 [ 68.316995][ T4384] ? find_held_lock+0x2d/0x110 [ 68.321736][ T4384] ? __might_fault+0xb3/0x160 [ 68.326384][ T4384] ? lock_downgrade+0x6e0/0x6e0 [ 68.331297][ T4384] __sys_sendmmsg+0x141/0x310 [ 68.335946][ T4384] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 68.340939][ T4384] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.346885][ T4384] ? find_held_lock+0x2d/0x110 [ 68.351628][ T4384] ? __context_tracking_exit+0x80/0x90 [ 68.357056][ T4384] ? lock_downgrade+0x6e0/0x6e0 [ 68.361879][ T4384] ? lock_downgrade+0x6e0/0x6e0 [ 68.366704][ T4384] __x64_sys_sendmmsg+0x94/0x100 [ 68.371614][ T4384] ? syscall_enter_from_user_mode+0x21/0x70 [ 68.377478][ T4384] do_syscall_64+0x35/0x80 [ 68.381861][ T4384] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.387722][ T4384] RIP: 0033:0x7efe7de878d9 [ 68.392105][ T4384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 68.411681][ T4384] RSP: 002b:00007efe7d5dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.420061][ T4384] RAX: ffffffffffffffda RBX: 00007efe7df8c020 RCX: 00007efe7de878d9 [ 68.428005][ T4384] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 68.435947][ T4384] RBP: 00007efe7d5dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 68.443890][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.451830][ T4384] R13: 00007ffc225babbf R14: 00007efe7d5dd300 R15: 0000000000022000 [ 68.459782][ T4384] [ 68.462773][ T4374] CPU: 1 PID: 4374 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 68.471424][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.481458][ T4374] Call Trace: [ 68.484715][ T4374] [ 68.487620][ T4374] dump_stack_lvl+0x57/0x7d [ 68.492098][ T4374] should_fail.cold+0x5/0xa [ 68.496574][ T4374] ? skb_clone+0x125/0x300 [ 68.501046][ T4374] should_failslab+0x5/0x10 [ 68.505523][ T4374] kmem_cache_alloc+0x5e/0x3b0 [ 68.510253][ T4374] ? wait_for_completion_io_timeout+0x20/0x20 [ 68.516293][ T4374] skb_clone+0x125/0x300 [ 68.520511][ T4374] sk_psock_verdict_recv+0x48/0x610 [ 68.525854][ T4374] unix_read_sock+0xc4/0x1e0 [ 68.530410][ T4374] ? sk_psock_strp_parse+0x330/0x330 [ 68.535665][ T4374] ? unix_compat_ioctl+0x10/0x10 [ 68.540578][ T4374] ? find_held_lock+0x2d/0x110 [ 68.545314][ T4374] sk_psock_verdict_data_ready+0xf8/0x150 [ 68.550998][ T4374] ? sk_psock_strp_read_done+0x10/0x10 [ 68.556426][ T4374] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 68.562376][ T4374] ? do_raw_spin_unlock+0x171/0x230 [ 68.567543][ T4374] unix_dgram_sendmsg+0xca6/0x1770 2022/04/16 19:41:20 executed programs: 67 [ 68.572631][ T4374] ? unix_stream_sendpage+0xa50/0xa50 [ 68.577973][ T4374] ? aa_af_perm+0x210/0x210 [ 68.582456][ T4374] ? unix_stream_sendpage+0xa50/0xa50 [ 68.587800][ T4374] sock_sendmsg+0xab/0xe0 [ 68.592101][ T4374] ____sys_sendmsg+0x38c/0x7a0 [ 68.596838][ T4374] ? kernel_sendmsg+0x30/0x30 [ 68.601484][ T4374] ? do_recvmmsg+0x550/0x550 [ 68.606044][ T4374] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.611993][ T4374] ___sys_sendmsg+0xd3/0x150 [ 68.616550][ T4374] ? sendmsg_copy_msghdr+0x110/0x110 [ 68.621807][ T4374] ? __fget_files+0x1b9/0x3c0 [ 68.626453][ T4374] ? lock_downgrade+0x6e0/0x6e0 [ 68.631279][ T4374] ? __fget_files+0x1d1/0x3c0 [ 68.635928][ T4374] ? __fget_light+0xbe/0x220 [ 68.640493][ T4374] __sys_sendmmsg+0x141/0x310 [ 68.645138][ T4374] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 68.650131][ T4374] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.656079][ T4374] ? find_held_lock+0x2d/0x110 [ 68.660817][ T4374] ? __context_tracking_exit+0x80/0x90 [ 68.666242][ T4374] ? lock_downgrade+0x6e0/0x6e0 [ 68.671061][ T4374] ? lock_downgrade+0x6e0/0x6e0 [ 68.675889][ T4374] __x64_sys_sendmmsg+0x94/0x100 [ 68.680795][ T4374] ? syscall_enter_from_user_mode+0x21/0x70 [ 68.686659][ T4374] do_syscall_64+0x35/0x80 [ 68.691048][ T4374] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.696913][ T4374] RIP: 0033:0x7fd82a2878d9 [ 68.701303][ T4374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 68.720967][ T4374] RSP: 002b:00007fd82b303188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.729693][ T4374] RAX: ffffffffffffffda RBX: 00007fd82a38bf60 RCX: 00007fd82a2878d9 [ 68.737636][ T4374] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 68.745580][ T4374] RBP: 00007fd82b3031d0 R08: 0000000000000000 R09: 0000000000000000 [ 68.749403][ T4387] FAULT_INJECTION: forcing a failure. [ 68.749403][ T4387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.753526][ T4374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.753530][ T4374] R13: 00007ffda011e60f R14: 00007fd82b303300 R15: 0000000000022000 [ 68.753545][ T4374] [ 68.789074][ T4383] CPU: 1 PID: 4383 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 68.797758][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.807796][ T4383] Call Trace: [ 68.811059][ T4383] [ 68.813965][ T4383] dump_stack_lvl+0x57/0x7d [ 68.818439][ T4383] should_fail.cold+0x5/0xa [ 68.822915][ T4383] _copy_from_user+0x25/0xe0 [ 68.827474][ T4383] __copy_msghdr_from_user+0x86/0x3e0 [ 68.832818][ T4383] ? __ia32_sys_shutdown+0x70/0x70 [ 68.837900][ T4383] ? unix_stream_sendpage+0xa50/0xa50 [ 68.843242][ T4383] ? sock_sendmsg+0xab/0xe0 [ 68.847714][ T4383] sendmsg_copy_msghdr+0x7f/0x110 [ 68.852708][ T4383] ? do_recvmmsg+0x550/0x550 [ 68.857266][ T4383] ? __lock_acquire+0x15bc/0x5660 [ 68.862262][ T4383] ___sys_sendmsg+0xb8/0x150 [ 68.866822][ T4383] ? sendmsg_copy_msghdr+0x110/0x110 [ 68.872253][ T4383] ? __fget_files+0x1b9/0x3c0 [ 68.877078][ T4383] ? find_held_lock+0x2d/0x110 [ 68.881811][ T4383] ? __might_fault+0xb3/0x160 [ 68.886459][ T4383] ? lock_downgrade+0x6e0/0x6e0 [ 68.891286][ T4383] __sys_sendmmsg+0x141/0x310 [ 68.895932][ T4383] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 68.900921][ T4383] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 68.906871][ T4383] ? find_held_lock+0x2d/0x110 [ 68.911611][ T4383] ? __context_tracking_exit+0x80/0x90 [ 68.917035][ T4383] ? lock_downgrade+0x6e0/0x6e0 [ 68.921852][ T4383] ? lock_downgrade+0x6e0/0x6e0 [ 68.926684][ T4383] __x64_sys_sendmmsg+0x94/0x100 [ 68.931594][ T4383] ? syscall_enter_from_user_mode+0x21/0x70 [ 68.937451][ T4383] do_syscall_64+0x35/0x80 [ 68.941836][ T4383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 68.947698][ T4383] RIP: 0033:0x7fb1e6a878d9 [ 68.952083][ T4383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 68.971741][ T4383] RSP: 002b:00007fb1e7be7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.980117][ T4383] RAX: ffffffffffffffda RBX: 00007fb1e6b8c020 RCX: 00007fb1e6a878d9 [ 68.988055][ T4383] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 68.995998][ T4383] RBP: 00007fb1e7be71d0 R08: 0000000000000000 R09: 0000000000000000 [ 69.003939][ T4383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.011880][ T4383] R13: 00007ffde14cf4cf R14: 00007fb1e7be7300 R15: 0000000000022000 [ 69.019830][ T4383] [ 69.022821][ T4375] CPU: 0 PID: 4375 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 69.031463][ T4375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.041485][ T4375] Call Trace: [ 69.044734][ T4375] [ 69.047637][ T4375] dump_stack_lvl+0x57/0x7d [ 69.052106][ T4375] should_fail.cold+0x5/0xa [ 69.056576][ T4375] ? skb_clone+0x125/0x300 [ 69.060956][ T4375] should_failslab+0x5/0x10 [ 69.065423][ T4375] kmem_cache_alloc+0x5e/0x3b0 [ 69.070146][ T4375] ? wait_for_completion_io_timeout+0x20/0x20 [ 69.076176][ T4375] skb_clone+0x125/0x300 [ 69.080389][ T4375] sk_psock_verdict_recv+0x48/0x610 [ 69.085556][ T4375] unix_read_sock+0xc4/0x1e0 [ 69.090107][ T4375] ? sk_psock_strp_parse+0x330/0x330 [ 69.095357][ T4375] ? unix_compat_ioctl+0x10/0x10 [ 69.100256][ T4375] ? find_held_lock+0x2d/0x110 [ 69.104990][ T4375] sk_psock_verdict_data_ready+0xf8/0x150 [ 69.110670][ T4375] ? sk_psock_strp_read_done+0x10/0x10 [ 69.116090][ T4375] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 69.122033][ T4375] ? do_raw_spin_unlock+0x171/0x230 [ 69.127193][ T4375] unix_dgram_sendmsg+0xca6/0x1770 [ 69.132271][ T4375] ? unix_stream_sendpage+0xa50/0xa50 [ 69.137606][ T4375] ? aa_af_perm+0x210/0x210 [ 69.142077][ T4375] ? unix_stream_sendpage+0xa50/0xa50 [ 69.147511][ T4375] sock_sendmsg+0xab/0xe0 [ 69.151807][ T4375] ____sys_sendmsg+0x38c/0x7a0 [ 69.156542][ T4375] ? kernel_sendmsg+0x30/0x30 [ 69.161183][ T4375] ? do_recvmmsg+0x550/0x550 [ 69.165736][ T4375] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 69.171685][ T4375] ___sys_sendmsg+0xd3/0x150 [ 69.176248][ T4375] ? sendmsg_copy_msghdr+0x110/0x110 [ 69.181495][ T4375] ? __fget_files+0x1b9/0x3c0 [ 69.186135][ T4375] ? lock_downgrade+0x6e0/0x6e0 [ 69.190954][ T4375] ? __fget_files+0x1d1/0x3c0 [ 69.195599][ T4375] ? __fget_light+0xbe/0x220 [ 69.200156][ T4375] __sys_sendmmsg+0x141/0x310 [ 69.204885][ T4375] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 69.209870][ T4375] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 69.215812][ T4375] ? find_held_lock+0x2d/0x110 [ 69.220547][ T4375] ? __context_tracking_exit+0x80/0x90 [ 69.225966][ T4375] ? lock_downgrade+0x6e0/0x6e0 [ 69.230781][ T4375] ? lock_downgrade+0x6e0/0x6e0 [ 69.235603][ T4375] __x64_sys_sendmmsg+0x94/0x100 [ 69.240504][ T4375] ? syscall_enter_from_user_mode+0x21/0x70 [ 69.246361][ T4375] do_syscall_64+0x35/0x80 [ 69.250740][ T4375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.256594][ T4375] RIP: 0033:0x7f6bcd8878d9 [ 69.261145][ T4375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 69.280716][ T4375] RSP: 002b:00007f6bce9f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.289089][ T4375] RAX: ffffffffffffffda RBX: 00007f6bcd98bf60 RCX: 00007f6bcd8878d9 [ 69.297112][ T4375] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 69.305046][ T4375] RBP: 00007f6bce9f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 69.312980][ T4375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.320917][ T4375] R13: 00007ffdefcf793f R14: 00007f6bce9f2300 R15: 0000000000022000 [ 69.328861][ T4375] [ 69.340198][ T4387] CPU: 1 PID: 4387 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 69.349038][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.359069][ T4387] Call Trace: [ 69.362329][ T4387] [ 69.365241][ T4387] dump_stack_lvl+0x57/0x7d [ 69.369724][ T4387] should_fail.cold+0x5/0xa [ 69.374202][ T4387] _copy_from_user+0x25/0xe0 [ 69.378764][ T4387] __copy_msghdr_from_user+0x86/0x3e0 [ 69.384107][ T4387] ? __ia32_sys_shutdown+0x70/0x70 [ 69.389190][ T4387] ? unix_stream_sendpage+0xa50/0xa50 [ 69.394533][ T4387] ? sock_sendmsg+0xab/0xe0 [ 69.399011][ T4387] sendmsg_copy_msghdr+0x7f/0x110 [ 69.404003][ T4387] ? do_recvmmsg+0x550/0x550 [ 69.408562][ T4387] ? __lock_acquire+0x15bc/0x5660 [ 69.413560][ T4387] ___sys_sendmsg+0xb8/0x150 [ 69.418119][ T4387] ? sendmsg_copy_msghdr+0x110/0x110 [ 69.423376][ T4387] ? __fget_files+0x1b9/0x3c0 [ 69.428027][ T4387] ? find_held_lock+0x2d/0x110 [ 69.432937][ T4387] ? __might_fault+0xb3/0x160 [ 69.437581][ T4387] ? lock_downgrade+0x6e0/0x6e0 [ 69.442405][ T4387] __sys_sendmmsg+0x141/0x310 [ 69.447054][ T4387] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 69.452050][ T4387] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 69.457998][ T4387] ? find_held_lock+0x2d/0x110 [ 69.462737][ T4387] ? __context_tracking_exit+0x80/0x90 [ 69.468164][ T4387] ? lock_downgrade+0x6e0/0x6e0 [ 69.472988][ T4387] ? lock_downgrade+0x6e0/0x6e0 [ 69.477817][ T4387] __x64_sys_sendmmsg+0x94/0x100 [ 69.482733][ T4387] ? syscall_enter_from_user_mode+0x21/0x70 [ 69.488601][ T4387] do_syscall_64+0x35/0x80 [ 69.492992][ T4387] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.498857][ T4387] RIP: 0033:0x7f4ed14878d9 [ 69.503244][ T4387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 69.503317][ T4392] FAULT_INJECTION: forcing a failure. [ 69.503317][ T4392] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.522907][ T4387] RSP: 002b:00007f4ed250b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.522916][ T4387] RAX: ffffffffffffffda RBX: 00007f4ed158c020 RCX: 00007f4ed14878d9 [ 69.522920][ T4387] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 69.522924][ T4387] RBP: 00007f4ed250b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 69.522927][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.522930][ T4387] R13: 00007ffe57270dcf R14: 00007f4ed250b300 R15: 0000000000022000 [ 69.522942][ T4387] [ 69.560503][ T4378] CPU: 1 PID: 4378 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 69.561941][ T4391] FAULT_INJECTION: forcing a failure. [ 69.561941][ T4391] name failslab, interval 1, probability 0, space 0, times 0 [ 69.568526][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.568531][ T4378] Call Trace: [ 69.568534][ T4378] [ 69.568537][ T4378] dump_stack_lvl+0x57/0x7d [ 69.568548][ T4378] should_fail.cold+0x5/0xa [ 69.568557][ T4378] should_failslab+0x5/0x10 [ 69.568563][ T4378] __kmalloc_node_track_caller+0x7d/0x360 [ 69.568569][ T4378] ? alloc_skb_with_frags+0x72/0x700 [ 69.568581][ T4378] __alloc_skb+0x8a/0x270 [ 69.568590][ T4378] alloc_skb_with_frags+0x72/0x700 [ 69.568598][ T4378] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 69.568611][ T4378] sock_alloc_send_pskb+0x636/0x7c0 [ 69.568625][ T4378] ? sock_wmalloc+0xe0/0xe0 [ 69.568630][ T4378] ? lock_downgrade+0x6e0/0x6e0 [ 69.568636][ T4378] ? do_raw_spin_lock+0x120/0x2a0 [ 69.568643][ T4378] ? rwlock_bug.part.0+0x90/0x90 [ 69.568653][ T4378] unix_dgram_sendmsg+0x35a/0x1770 [ 69.694126][ T4378] ? aa_sk_perm+0x1ab/0x820 [ 69.698609][ T4378] ? unix_stream_sendpage+0xa50/0xa50 [ 69.703954][ T4378] ? aa_af_perm+0x210/0x210 [ 69.708436][ T4378] ? unix_stream_sendpage+0xa50/0xa50 [ 69.713781][ T4378] sock_sendmsg+0xab/0xe0 [ 69.718086][ T4378] ____sys_sendmsg+0x38c/0x7a0 [ 69.722820][ T4378] ? kernel_sendmsg+0x30/0x30 [ 69.727463][ T4378] ? do_recvmmsg+0x550/0x550 [ 69.732022][ T4378] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 69.737974][ T4378] ___sys_sendmsg+0xd3/0x150 [ 69.742533][ T4378] ? sendmsg_copy_msghdr+0x110/0x110 [ 69.747784][ T4378] ? __fget_files+0x1b9/0x3c0 [ 69.752432][ T4378] ? lock_downgrade+0x6e0/0x6e0 [ 69.757262][ T4378] ? __fget_files+0x1d1/0x3c0 [ 69.761275][ T4395] FAULT_INJECTION: forcing a failure. [ 69.761275][ T4395] name failslab, interval 1, probability 0, space 0, times 0 [ 69.761915][ T4378] ? __fget_light+0xbe/0x220 [ 69.761927][ T4378] __sys_sendmmsg+0x141/0x310 [ 69.761937][ T4378] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 69.761943][ T4378] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 69.794598][ T4378] ? find_held_lock+0x2d/0x110 [ 69.799341][ T4378] ? __context_tracking_exit+0x80/0x90 [ 69.804775][ T4378] ? lock_downgrade+0x6e0/0x6e0 [ 69.809596][ T4378] ? lock_downgrade+0x6e0/0x6e0 [ 69.814424][ T4378] __x64_sys_sendmmsg+0x94/0x100 [ 69.819332][ T4378] ? syscall_enter_from_user_mode+0x21/0x70 [ 69.825196][ T4378] do_syscall_64+0x35/0x80 [ 69.829581][ T4378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.835443][ T4378] RIP: 0033:0x7fb6342878d9 [ 69.839829][ T4378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 69.859579][ T4378] RSP: 002b:00007fb635499188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.867956][ T4378] RAX: ffffffffffffffda RBX: 00007fb63438c020 RCX: 00007fb6342878d9 [ 69.875900][ T4378] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 69.883841][ T4378] RBP: 00007fb6354991d0 R08: 0000000000000000 R09: 0000000000000000 [ 69.891782][ T4378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.899722][ T4378] R13: 00007fffb655c5df R14: 00007fb635499300 R15: 0000000000022000 [ 69.907671][ T4378] [ 69.910706][ T4391] CPU: 0 PID: 4391 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 69.919352][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.929371][ T4391] Call Trace: [ 69.932631][ T4391] [ 69.935530][ T4391] dump_stack_lvl+0x57/0x7d [ 69.939999][ T4391] should_fail.cold+0x5/0xa [ 69.944465][ T4391] ? skb_clone+0x125/0x300 [ 69.948848][ T4391] should_failslab+0x5/0x10 [ 69.953314][ T4391] kmem_cache_alloc+0x5e/0x3b0 [ 69.958039][ T4391] ? wait_for_completion_io_timeout+0x20/0x20 [ 69.964071][ T4391] skb_clone+0x125/0x300 [ 69.968282][ T4391] sk_psock_verdict_recv+0x48/0x610 [ 69.973443][ T4391] unix_read_sock+0xc4/0x1e0 [ 69.977995][ T4391] ? sk_psock_strp_parse+0x330/0x330 [ 69.983240][ T4391] ? unix_compat_ioctl+0x10/0x10 [ 69.988137][ T4391] ? find_held_lock+0x2d/0x110 [ 69.993129][ T4391] sk_psock_verdict_data_ready+0xf8/0x150 [ 69.998808][ T4391] ? sk_psock_strp_read_done+0x10/0x10 [ 70.004231][ T4391] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 70.010170][ T4391] ? do_raw_spin_unlock+0x171/0x230 [ 70.015332][ T4391] unix_dgram_sendmsg+0xca6/0x1770 [ 70.020414][ T4391] ? unix_stream_sendpage+0xa50/0xa50 [ 70.025749][ T4391] ? aa_af_perm+0x210/0x210 [ 70.030219][ T4391] ? unix_stream_sendpage+0xa50/0xa50 [ 70.035552][ T4391] sock_sendmsg+0xab/0xe0 [ 70.039845][ T4391] ____sys_sendmsg+0x38c/0x7a0 [ 70.044574][ T4391] ? kernel_sendmsg+0x30/0x30 [ 70.049211][ T4391] ? do_recvmmsg+0x550/0x550 [ 70.053760][ T4391] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.059706][ T4391] ___sys_sendmsg+0xd3/0x150 [ 70.064260][ T4391] ? sendmsg_copy_msghdr+0x110/0x110 [ 70.069509][ T4391] ? __fget_files+0x1b9/0x3c0 [ 70.074149][ T4391] ? lock_downgrade+0x6e0/0x6e0 [ 70.078967][ T4391] ? __fget_files+0x1d1/0x3c0 [ 70.083609][ T4391] ? __fget_light+0xbe/0x220 [ 70.088165][ T4391] __sys_sendmmsg+0x141/0x310 [ 70.092809][ T4391] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 70.097795][ T4391] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.103739][ T4391] ? find_held_lock+0x2d/0x110 [ 70.108471][ T4391] ? __context_tracking_exit+0x80/0x90 [ 70.114277][ T4391] ? lock_downgrade+0x6e0/0x6e0 [ 70.119092][ T4391] ? lock_downgrade+0x6e0/0x6e0 [ 70.123909][ T4391] __x64_sys_sendmmsg+0x94/0x100 [ 70.128808][ T4391] ? syscall_enter_from_user_mode+0x21/0x70 [ 70.134665][ T4391] do_syscall_64+0x35/0x80 [ 70.139044][ T4391] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.144897][ T4391] RIP: 0033:0x7fb1e6a878d9 [ 70.149274][ T4391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 70.168842][ T4391] RSP: 002b:00007fb1e7c08188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.177215][ T4391] RAX: ffffffffffffffda RBX: 00007fb1e6b8bf60 RCX: 00007fb1e6a878d9 [ 70.185150][ T4391] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 70.193086][ T4391] RBP: 00007fb1e7c081d0 R08: 0000000000000000 R09: 0000000000000000 [ 70.201021][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.208954][ T4391] R13: 00007ffde14cf4cf R14: 00007fb1e7c08300 R15: 0000000000022000 [ 70.216897][ T4391] [ 70.235585][ T4392] CPU: 0 PID: 4392 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 70.244253][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.254282][ T4392] Call Trace: [ 70.257542][ T4392] [ 70.260454][ T4392] dump_stack_lvl+0x57/0x7d [ 70.264931][ T4392] should_fail.cold+0x5/0xa [ 70.269403][ T4392] prepare_alloc_pages+0x17b/0x570 [ 70.274482][ T4392] __alloc_pages+0x12f/0x500 [ 70.279032][ T4392] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 70.285756][ T4392] ? find_held_lock+0x2d/0x110 [ 70.290484][ T4392] ? lock_downgrade+0x6e0/0x6e0 [ 70.295294][ T4392] ? lock_downgrade+0x6e0/0x6e0 [ 70.300106][ T4392] ? find_held_lock+0x2d/0x110 [ 70.304833][ T4392] allocate_slab+0x26c/0x3c0 [ 70.309387][ T4392] ___slab_alloc+0x8e1/0xf20 [ 70.313942][ T4392] ? alloc_skb_with_frags+0x72/0x700 [ 70.319199][ T4392] ? alloc_skb_with_frags+0x72/0x700 [ 70.324448][ T4392] __slab_alloc.constprop.0+0x4d/0xa0 [ 70.329784][ T4392] __kmalloc_node_track_caller+0x2cb/0x360 [ 70.335554][ T4392] ? alloc_skb_with_frags+0x72/0x700 [ 70.340806][ T4392] __alloc_skb+0x8a/0x270 [ 70.345100][ T4392] alloc_skb_with_frags+0x72/0x700 [ 70.350173][ T4392] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.356122][ T4392] sock_alloc_send_pskb+0x636/0x7c0 [ 70.361289][ T4392] ? sock_wmalloc+0xe0/0xe0 [ 70.365755][ T4392] ? lock_downgrade+0x6e0/0x6e0 [ 70.370574][ T4392] ? do_raw_spin_lock+0x120/0x2a0 [ 70.375740][ T4392] ? rwlock_bug.part.0+0x90/0x90 [ 70.380645][ T4392] unix_dgram_sendmsg+0x35a/0x1770 [ 70.385724][ T4392] ? aa_sk_perm+0x1ab/0x820 [ 70.390194][ T4392] ? unix_stream_sendpage+0xa50/0xa50 [ 70.395526][ T4392] ? aa_af_perm+0x210/0x210 [ 70.399997][ T4392] ? unix_stream_sendpage+0xa50/0xa50 [ 70.405331][ T4392] sock_sendmsg+0xab/0xe0 [ 70.409625][ T4392] ____sys_sendmsg+0x38c/0x7a0 [ 70.414353][ T4392] ? kernel_sendmsg+0x30/0x30 [ 70.418994][ T4392] ? do_recvmmsg+0x550/0x550 [ 70.423549][ T4392] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.429496][ T4392] ___sys_sendmsg+0xd3/0x150 [ 70.434049][ T4392] ? sendmsg_copy_msghdr+0x110/0x110 [ 70.439296][ T4392] ? __fget_files+0x1b9/0x3c0 [ 70.443935][ T4392] ? lock_downgrade+0x6e0/0x6e0 [ 70.448756][ T4392] ? __fget_files+0x1d1/0x3c0 [ 70.453398][ T4392] ? __fget_light+0xbe/0x220 [ 70.457952][ T4392] __sys_sendmmsg+0x141/0x310 [ 70.462594][ T4392] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 70.467580][ T4392] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.473520][ T4392] ? find_held_lock+0x2d/0x110 [ 70.478250][ T4392] ? __context_tracking_exit+0x80/0x90 [ 70.483673][ T4392] ? lock_downgrade+0x6e0/0x6e0 [ 70.488490][ T4392] ? lock_downgrade+0x6e0/0x6e0 [ 70.493308][ T4392] __x64_sys_sendmmsg+0x94/0x100 [ 70.498213][ T4392] ? syscall_enter_from_user_mode+0x21/0x70 [ 70.504066][ T4392] do_syscall_64+0x35/0x80 [ 70.508444][ T4392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.514298][ T4392] RIP: 0033:0x7fd82a2878d9 [ 70.518681][ T4392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 70.538249][ T4392] RSP: 002b:00007fd8299fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.546621][ T4392] RAX: ffffffffffffffda RBX: 00007fd82a38c020 RCX: 00007fd82a2878d9 [ 70.554555][ T4392] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 70.562494][ T4392] RBP: 00007fd8299fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 70.570428][ T4392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.578368][ T4392] R13: 00007ffda011e60f R14: 00007fd8299fe300 R15: 0000000000022000 [ 70.586310][ T4392] [ 70.589996][ T4395] CPU: 1 PID: 4395 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 70.598658][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.608686][ T4395] Call Trace: [ 70.611942][ T4395] [ 70.614852][ T4395] dump_stack_lvl+0x57/0x7d [ 70.619331][ T4395] should_fail.cold+0x5/0xa [ 70.623808][ T4395] ? skb_clone+0x125/0x300 [ 70.628195][ T4395] should_failslab+0x5/0x10 [ 70.632669][ T4395] kmem_cache_alloc+0x5e/0x3b0 [ 70.637405][ T4395] ? wait_for_completion_io_timeout+0x20/0x20 [ 70.643452][ T4395] skb_clone+0x125/0x300 [ 70.647669][ T4395] sk_psock_verdict_recv+0x48/0x610 [ 70.652837][ T4395] unix_read_sock+0xc4/0x1e0 [ 70.657396][ T4395] ? sk_psock_strp_parse+0x330/0x330 [ 70.662652][ T4395] ? unix_compat_ioctl+0x10/0x10 [ 70.667561][ T4395] ? find_held_lock+0x2d/0x110 [ 70.672303][ T4395] sk_psock_verdict_data_ready+0xf8/0x150 [ 70.677995][ T4395] ? sk_psock_strp_read_done+0x10/0x10 [ 70.683425][ T4395] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 70.689379][ T4395] ? do_raw_spin_unlock+0x171/0x230 [ 70.694548][ T4395] unix_dgram_sendmsg+0xca6/0x1770 [ 70.699644][ T4395] ? unix_stream_sendpage+0xa50/0xa50 [ 70.704986][ T4395] ? aa_af_perm+0x210/0x210 [ 70.707847][ T4402] FAULT_INJECTION: forcing a failure. [ 70.707847][ T4402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.709463][ T4395] ? unix_stream_sendpage+0xa50/0xa50 [ 70.709472][ T4395] sock_sendmsg+0xab/0xe0 [ 70.709480][ T4395] ____sys_sendmsg+0x38c/0x7a0 [ 70.736815][ T4395] ? kernel_sendmsg+0x30/0x30 [ 70.741462][ T4395] ? do_recvmmsg+0x550/0x550 [ 70.746023][ T4395] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.751986][ T4395] ___sys_sendmsg+0xd3/0x150 [ 70.757120][ T4395] ? sendmsg_copy_msghdr+0x110/0x110 [ 70.762382][ T4395] ? __fget_files+0x1b9/0x3c0 [ 70.767033][ T4395] ? lock_downgrade+0x6e0/0x6e0 [ 70.771863][ T4395] ? __fget_files+0x1d1/0x3c0 [ 70.776514][ T4395] ? __fget_light+0xbe/0x220 [ 70.781081][ T4395] __sys_sendmmsg+0x141/0x310 [ 70.785733][ T4395] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 70.790907][ T4395] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.796856][ T4395] ? find_held_lock+0x2d/0x110 [ 70.801599][ T4395] ? __context_tracking_exit+0x80/0x90 [ 70.807029][ T4395] ? lock_downgrade+0x6e0/0x6e0 [ 70.811854][ T4395] ? lock_downgrade+0x6e0/0x6e0 [ 70.816682][ T4395] __x64_sys_sendmmsg+0x94/0x100 [ 70.821594][ T4395] ? syscall_enter_from_user_mode+0x21/0x70 [ 70.827628][ T4395] do_syscall_64+0x35/0x80 [ 70.832277][ T4395] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.838225][ T4395] RIP: 0033:0x7efe7de878d9 [ 70.842613][ T4395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 70.862369][ T4395] RSP: 002b:00007efe7d5fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.870752][ T4395] RAX: ffffffffffffffda RBX: 00007efe7df8bf60 RCX: 00007efe7de878d9 [ 70.878701][ T4395] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 70.886644][ T4395] RBP: 00007efe7d5fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 70.894852][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.902969][ T4395] R13: 00007ffc225babbf R14: 00007efe7d5fe300 R15: 0000000000022000 [ 70.911015][ T4395] [ 70.916361][ T4402] CPU: 0 PID: 4402 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 70.916744][ T32] cfg80211: failed to load regulatory.db [ 70.925015][ T4402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.925020][ T4402] Call Trace: [ 70.925024][ T4402] [ 70.925027][ T4402] dump_stack_lvl+0x57/0x7d [ 70.925037][ T4402] should_fail.cold+0x5/0xa [ 70.925046][ T4402] _copy_from_user+0x25/0xe0 [ 70.925054][ T4402] __copy_msghdr_from_user+0x86/0x3e0 [ 70.925062][ T4402] ? __ia32_sys_shutdown+0x70/0x70 [ 70.925070][ T4402] ? unix_stream_sendpage+0xa50/0xa50 [ 70.976107][ T4402] ? sock_sendmsg+0xab/0xe0 [ 70.980588][ T4402] sendmsg_copy_msghdr+0x7f/0x110 [ 70.985578][ T4402] ? do_recvmmsg+0x550/0x550 [ 70.990131][ T4402] ? __lock_acquire+0x15bc/0x5660 [ 70.995213][ T4402] ___sys_sendmsg+0xb8/0x150 [ 70.999772][ T4402] ? sendmsg_copy_msghdr+0x110/0x110 [ 71.005022][ T4402] ? __fget_files+0x1b9/0x3c0 [ 71.009668][ T4402] ? find_held_lock+0x2d/0x110 [ 71.014405][ T4402] ? __might_fault+0xb3/0x160 [ 71.019045][ T4402] ? lock_downgrade+0x6e0/0x6e0 [ 71.023863][ T4402] __sys_sendmmsg+0x141/0x310 [ 71.028508][ T4402] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 71.033494][ T4402] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.039438][ T4402] ? find_held_lock+0x2d/0x110 [ 71.044179][ T4402] ? __context_tracking_exit+0x80/0x90 [ 71.049609][ T4402] ? lock_downgrade+0x6e0/0x6e0 [ 71.054427][ T4402] ? lock_downgrade+0x6e0/0x6e0 [ 71.059247][ T4402] __x64_sys_sendmmsg+0x94/0x100 [ 71.064146][ T4402] ? syscall_enter_from_user_mode+0x21/0x70 [ 71.070004][ T4402] do_syscall_64+0x35/0x80 [ 71.074385][ T4402] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.080242][ T4402] RIP: 0033:0x7f4ed14878d9 [ 71.084900][ T4402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 71.104476][ T4402] RSP: 002b:00007f4ed0bdd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.112852][ T4402] RAX: ffffffffffffffda RBX: 00007f4ed158c1a0 RCX: 00007f4ed14878d9 [ 71.120789][ T4402] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000004 [ 71.128725][ T4402] RBP: 00007f4ed0bdd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 71.136664][ T4402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.144605][ T4402] R13: 00007ffe57270dcf R14: 00007f4ed0bdd300 R15: 0000000000022000 [ 71.152550][ T4402] [ 71.158126][ T4411] FAULT_INJECTION: forcing a failure. [ 71.158126][ T4411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.173061][ T4403] FAULT_INJECTION: forcing a failure. [ 71.173061][ T4403] name failslab, interval 1, probability 0, space 0, times 0 [ 71.187685][ T4413] FAULT_INJECTION: forcing a failure. [ 71.187685][ T4413] name failslab, interval 1, probability 0, space 0, times 0 [ 71.205403][ T4410] FAULT_INJECTION: forcing a failure. [ 71.205403][ T4410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.218692][ T4411] CPU: 1 PID: 4411 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 71.227342][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.237370][ T4411] Call Trace: [ 71.240627][ T4411] [ 71.243538][ T4411] dump_stack_lvl+0x57/0x7d [ 71.248016][ T4411] should_fail.cold+0x5/0xa [ 71.252494][ T4411] _copy_from_user+0x25/0xe0 [ 71.257059][ T4411] __copy_msghdr_from_user+0x86/0x3e0 [ 71.262415][ T4411] ? __ia32_sys_shutdown+0x70/0x70 [ 71.267502][ T4411] ? unix_stream_sendpage+0xa50/0xa50 [ 71.272850][ T4411] ? sock_sendmsg+0xab/0xe0 [ 71.277332][ T4411] sendmsg_copy_msghdr+0x7f/0x110 [ 71.282331][ T4411] ? do_recvmmsg+0x550/0x550 [ 71.286894][ T4411] ? __lock_acquire+0x15bc/0x5660 [ 71.291897][ T4411] ___sys_sendmsg+0xb8/0x150 [ 71.296462][ T4411] ? sendmsg_copy_msghdr+0x110/0x110 [ 71.301724][ T4411] ? __fget_files+0x1b9/0x3c0 [ 71.306381][ T4411] ? find_held_lock+0x2d/0x110 [ 71.311116][ T4411] ? __might_fault+0xb3/0x160 [ 71.315760][ T4411] ? lock_downgrade+0x6e0/0x6e0 [ 71.320587][ T4411] __sys_sendmmsg+0x141/0x310 [ 71.325237][ T4411] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 71.330231][ T4411] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.336187][ T4411] ? find_held_lock+0x2d/0x110 [ 71.340933][ T4411] ? __context_tracking_exit+0x80/0x90 [ 71.346368][ T4411] ? lock_downgrade+0x6e0/0x6e0 [ 71.351194][ T4411] ? lock_downgrade+0x6e0/0x6e0 [ 71.356019][ T4411] __x64_sys_sendmmsg+0x94/0x100 [ 71.360923][ T4411] ? syscall_enter_from_user_mode+0x21/0x70 [ 71.366785][ T4411] do_syscall_64+0x35/0x80 [ 71.371176][ T4411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.377042][ T4411] RIP: 0033:0x7efe7de878d9 [ 71.381428][ T4411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 71.401091][ T4411] RSP: 002b:00007efe7d5dd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.409561][ T4411] RAX: ffffffffffffffda RBX: 00007efe7df8c020 RCX: 00007efe7de878d9 [ 71.417504][ T4411] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 71.425447][ T4411] RBP: 00007efe7d5dd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 71.433393][ T4411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.441334][ T4411] R13: 00007ffc225babbf R14: 00007efe7d5dd300 R15: 0000000000022000 [ 71.449283][ T4411] [ 71.452275][ T4403] CPU: 0 PID: 4403 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 71.460921][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.471120][ T4403] Call Trace: [ 71.474373][ T4403] [ 71.477280][ T4403] dump_stack_lvl+0x57/0x7d [ 71.481754][ T4403] should_fail.cold+0x5/0xa [ 71.486578][ T4403] should_failslab+0x5/0x10 [ 71.491053][ T4403] kmem_cache_alloc_node+0x65/0x3f0 [ 71.496220][ T4403] ? __alloc_skb+0x151/0x270 [ 71.500783][ T4403] __alloc_skb+0x151/0x270 [ 71.505169][ T4403] alloc_skb_with_frags+0x72/0x700 [ 71.510249][ T4403] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.516203][ T4403] sock_alloc_send_pskb+0x636/0x7c0 [ 71.521375][ T4403] ? sock_wmalloc+0xe0/0xe0 [ 71.525845][ T4403] ? lock_downgrade+0x6e0/0x6e0 [ 71.530664][ T4403] ? do_raw_spin_lock+0x120/0x2a0 [ 71.535658][ T4403] ? rwlock_bug.part.0+0x90/0x90 [ 71.540574][ T4403] unix_dgram_sendmsg+0x35a/0x1770 [ 71.545662][ T4403] ? aa_sk_perm+0x1ab/0x820 [ 71.550146][ T4403] ? unix_stream_sendpage+0xa50/0xa50 [ 71.555491][ T4403] ? aa_af_perm+0x210/0x210 [ 71.559968][ T4403] ? unix_stream_sendpage+0xa50/0xa50 [ 71.565310][ T4403] sock_sendmsg+0xab/0xe0 [ 71.569611][ T4403] ____sys_sendmsg+0x38c/0x7a0 [ 71.574345][ T4403] ? kernel_sendmsg+0x30/0x30 [ 71.578991][ T4403] ? do_recvmmsg+0x550/0x550 [ 71.583555][ T4403] ___sys_sendmsg+0xd3/0x150 [ 71.588115][ T4403] ? sendmsg_copy_msghdr+0x110/0x110 [ 71.593376][ T4403] ? __fget_files+0x1b9/0x3c0 [ 71.598116][ T4403] ? find_held_lock+0x2d/0x110 [ 71.602852][ T4403] ? __might_fault+0xb3/0x160 [ 71.607501][ T4403] ? lock_downgrade+0x6e0/0x6e0 [ 71.612324][ T4403] __sys_sendmmsg+0x141/0x310 [ 71.616980][ T4403] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 71.621973][ T4403] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.627919][ T4403] ? find_held_lock+0x2d/0x110 [ 71.632663][ T4403] ? __context_tracking_exit+0x80/0x90 [ 71.638093][ T4403] ? lock_downgrade+0x6e0/0x6e0 [ 71.642911][ T4403] ? lock_downgrade+0x6e0/0x6e0 [ 71.647736][ T4403] __x64_sys_sendmmsg+0x94/0x100 [ 71.652644][ T4403] ? syscall_enter_from_user_mode+0x21/0x70 [ 71.658507][ T4403] do_syscall_64+0x35/0x80 [ 71.662893][ T4403] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.668755][ T4403] RIP: 0033:0x7f6bcd8878d9 [ 71.673139][ T4403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 71.692889][ T4403] RSP: 002b:00007f6bce9d1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.701266][ T4403] RAX: ffffffffffffffda RBX: 00007f6bcd98c020 RCX: 00007f6bcd8878d9 [ 71.709209][ T4403] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 71.717151][ T4403] RBP: 00007f6bce9d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 71.725090][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.733029][ T4403] R13: 00007ffdefcf793f R14: 00007f6bce9d1300 R15: 0000000000022000 [ 71.740983][ T4403] [ 71.751508][ T4413] CPU: 0 PID: 4413 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 71.760179][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.764623][ T4414] FAULT_INJECTION: forcing a failure. [ 71.764623][ T4414] name failslab, interval 1, probability 0, space 0, times 0 [ 71.770208][ T4413] Call Trace: [ 71.770212][ T4413] [ 71.770215][ T4413] dump_stack_lvl+0x57/0x7d [ 71.770226][ T4413] should_fail.cold+0x5/0xa [ 71.770235][ T4413] should_failslab+0x5/0x10 [ 71.802416][ T4413] kmem_cache_alloc_node+0x65/0x3f0 [ 71.807591][ T4413] ? __alloc_skb+0x151/0x270 [ 71.812160][ T4413] __alloc_skb+0x151/0x270 [ 71.816552][ T4413] alloc_skb_with_frags+0x72/0x700 [ 71.821638][ T4413] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.827591][ T4413] sock_alloc_send_pskb+0x636/0x7c0 [ 71.832765][ T4413] ? sock_wmalloc+0xe0/0xe0 [ 71.837235][ T4413] ? lock_downgrade+0x6e0/0x6e0 [ 71.842054][ T4413] ? do_raw_spin_lock+0x120/0x2a0 [ 71.847052][ T4413] ? rwlock_bug.part.0+0x90/0x90 [ 71.851969][ T4413] unix_dgram_sendmsg+0x35a/0x1770 [ 71.857059][ T4413] ? aa_sk_perm+0x1ab/0x820 [ 71.861534][ T4413] ? unix_stream_sendpage+0xa50/0xa50 [ 71.866875][ T4413] ? aa_af_perm+0x210/0x210 [ 71.871489][ T4413] ? unix_stream_sendpage+0xa50/0xa50 [ 71.876835][ T4413] sock_sendmsg+0xab/0xe0 [ 71.881136][ T4413] ____sys_sendmsg+0x38c/0x7a0 [ 71.885872][ T4413] ? kernel_sendmsg+0x30/0x30 [ 71.890519][ T4413] ? do_recvmmsg+0x550/0x550 [ 71.895089][ T4413] ___sys_sendmsg+0xd3/0x150 [ 71.899651][ T4413] ? sendmsg_copy_msghdr+0x110/0x110 [ 71.904910][ T4413] ? __fget_files+0x1b9/0x3c0 [ 71.909561][ T4413] ? find_held_lock+0x2d/0x110 [ 71.914295][ T4413] ? __might_fault+0xb3/0x160 [ 71.918944][ T4413] ? lock_downgrade+0x6e0/0x6e0 [ 71.923768][ T4413] __sys_sendmmsg+0x141/0x310 [ 71.928420][ T4413] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 71.933411][ T4413] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 71.939357][ T4413] ? find_held_lock+0x2d/0x110 [ 71.944099][ T4413] ? __context_tracking_exit+0x80/0x90 [ 71.949533][ T4413] ? lock_downgrade+0x6e0/0x6e0 [ 71.954357][ T4413] ? lock_downgrade+0x6e0/0x6e0 [ 71.959184][ T4413] __x64_sys_sendmmsg+0x94/0x100 [ 71.964092][ T4413] ? syscall_enter_from_user_mode+0x21/0x70 [ 71.969957][ T4413] do_syscall_64+0x35/0x80 [ 71.974341][ T4413] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.980200][ T4413] RIP: 0033:0x7fb6342878d9 [ 71.984584][ T4413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.004158][ T4413] RSP: 002b:00007fb635499188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 72.012538][ T4413] RAX: ffffffffffffffda RBX: 00007fb63438c020 RCX: 00007fb6342878d9 [ 72.020478][ T4413] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 72.028417][ T4413] RBP: 00007fb6354991d0 R08: 0000000000000000 R09: 0000000000000000 [ 72.036352][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.044288][ T4413] R13: 00007fffb655c5df R14: 00007fb635499300 R15: 0000000000022000 [ 72.052236][ T4413] [ 72.067541][ T4410] CPU: 1 PID: 4410 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 72.076220][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.077402][ T4416] FAULT_INJECTION: forcing a failure. [ 72.077402][ T4416] name failslab, interval 1, probability 0, space 0, times 0 [ 72.086245][ T4410] Call Trace: [ 72.086249][ T4410] [ 72.086253][ T4410] dump_stack_lvl+0x57/0x7d [ 72.086263][ T4410] should_fail.cold+0x5/0xa [ 72.086273][ T4410] _copy_from_user+0x25/0xe0 [ 72.086281][ T4410] __copy_msghdr_from_user+0x86/0x3e0 [ 72.086290][ T4410] ? __ia32_sys_shutdown+0x70/0x70 [ 72.086297][ T4410] ? unix_stream_sendpage+0xa50/0xa50 [ 72.086307][ T4410] ? sock_sendmsg+0xab/0xe0 [ 72.086318][ T4410] sendmsg_copy_msghdr+0x7f/0x110 [ 72.086324][ T4410] ? do_recvmmsg+0x550/0x550 [ 72.086331][ T4410] ? __lock_acquire+0x15bc/0x5660 [ 72.086346][ T4410] ___sys_sendmsg+0xb8/0x150 [ 72.086354][ T4410] ? sendmsg_copy_msghdr+0x110/0x110 [ 72.086363][ T4410] ? __fget_files+0x1b9/0x3c0 [ 72.167715][ T4410] ? find_held_lock+0x2d/0x110 [ 72.172468][ T4410] ? __might_fault+0xb3/0x160 [ 72.177121][ T4410] ? lock_downgrade+0x6e0/0x6e0 [ 72.181948][ T4410] __sys_sendmmsg+0x141/0x310 [ 72.186597][ T4410] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 72.191586][ T4410] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.197531][ T4410] ? find_held_lock+0x2d/0x110 [ 72.202265][ T4410] ? __context_tracking_exit+0x80/0x90 [ 72.207694][ T4410] ? lock_downgrade+0x6e0/0x6e0 [ 72.212514][ T4410] ? lock_downgrade+0x6e0/0x6e0 [ 72.217334][ T4410] __x64_sys_sendmmsg+0x94/0x100 [ 72.222237][ T4410] ? syscall_enter_from_user_mode+0x21/0x70 [ 72.228093][ T4410] do_syscall_64+0x35/0x80 [ 72.232472][ T4410] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.238328][ T4410] RIP: 0033:0x7fb1e6a878d9 [ 72.242712][ T4410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.262284][ T4410] RSP: 002b:00007fb1e7be7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 72.270663][ T4410] RAX: ffffffffffffffda RBX: 00007fb1e6b8c020 RCX: 00007fb1e6a878d9 [ 72.278601][ T4410] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000005 [ 72.286541][ T4410] RBP: 00007fb1e7be71d0 R08: 0000000000000000 R09: 0000000000000000 [ 72.294483][ T4410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.302425][ T4410] R13: 00007ffde14cf4cf R14: 00007fb1e7be7300 R15: 0000000000022000 [ 72.310372][ T4410] [ 72.321525][ T4416] CPU: 1 PID: 4416 Comm: syz-executor.0 Not tainted 5.18.0-rc2-syzkaller #0 [ 72.330196][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.340220][ T4416] Call Trace: [ 72.343470][ T4416] [ 72.346375][ T4416] dump_stack_lvl+0x57/0x7d [ 72.350848][ T4416] should_fail.cold+0x5/0xa [ 72.355333][ T4416] ? skb_clone+0x125/0x300 [ 72.359729][ T4416] should_failslab+0x5/0x10 [ 72.364199][ T4416] kmem_cache_alloc+0x5e/0x3b0 [ 72.368929][ T4416] ? wait_for_completion_io_timeout+0x20/0x20 [ 72.374965][ T4416] skb_clone+0x125/0x300 [ 72.379174][ T4416] sk_psock_verdict_recv+0x48/0x610 [ 72.384340][ T4416] unix_read_sock+0xc4/0x1e0 [ 72.388894][ T4416] ? sk_psock_strp_parse+0x330/0x330 [ 72.394144][ T4416] ? unix_compat_ioctl+0x10/0x10 [ 72.399044][ T4416] ? find_held_lock+0x2d/0x110 [ 72.403776][ T4416] sk_psock_verdict_data_ready+0xf8/0x150 [ 72.409460][ T4416] ? sk_psock_strp_read_done+0x10/0x10 [ 72.414884][ T4416] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 72.420827][ T4416] ? do_raw_spin_unlock+0x171/0x230 [ 72.425989][ T4416] unix_dgram_sendmsg+0xca6/0x1770 [ 72.431071][ T4416] ? unix_stream_sendpage+0xa50/0xa50 [ 72.436407][ T4416] ? aa_af_perm+0x210/0x210 [ 72.440879][ T4416] ? unix_stream_sendpage+0xa50/0xa50 [ 72.446213][ T4416] sock_sendmsg+0xab/0xe0 [ 72.450511][ T4416] ____sys_sendmsg+0x38c/0x7a0 [ 72.455237][ T4416] ? kernel_sendmsg+0x30/0x30 [ 72.459878][ T4416] ? do_recvmmsg+0x550/0x550 [ 72.464433][ T4416] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.470380][ T4416] ___sys_sendmsg+0xd3/0x150 [ 72.474934][ T4416] ? sendmsg_copy_msghdr+0x110/0x110 [ 72.480183][ T4416] ? __fget_files+0x1b9/0x3c0 [ 72.484826][ T4416] ? lock_downgrade+0x6e0/0x6e0 [ 72.489645][ T4416] ? __fget_files+0x1d1/0x3c0 [ 72.494287][ T4416] ? __fget_light+0xbe/0x220 [ 72.498845][ T4416] __sys_sendmmsg+0x141/0x310 [ 72.503488][ T4416] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 72.508474][ T4416] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.514418][ T4416] ? find_held_lock+0x2d/0x110 [ 72.519149][ T4416] ? __context_tracking_exit+0x80/0x90 [ 72.524574][ T4416] ? lock_downgrade+0x6e0/0x6e0 [ 72.529391][ T4416] ? lock_downgrade+0x6e0/0x6e0 [ 72.534216][ T4416] __x64_sys_sendmmsg+0x94/0x100 [ 72.539114][ T4416] ? syscall_enter_from_user_mode+0x21/0x70 [ 72.544971][ T4416] do_syscall_64+0x35/0x80 [ 72.549355][ T4416] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.555211][ T4416] RIP: 0033:0x7f4ed14878d9 [ 72.559592][ T4416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.579161][ T4416] RSP: 002b:00007f4ed252c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 72.587535][ T4416] RAX: ffffffffffffffda RBX: 00007f4ed158bf60 RCX: 00007f4ed14878d9 [ 72.595472][ T4416] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 72.603409][ T4416] RBP: 00007f4ed252c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 72.611346][ T4416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.619283][ T4416] R13: 00007ffe57270dcf R14: 00007f4ed252c300 R15: 0000000000022000 [ 72.627229][ T4416] [ 72.632026][ T4414] CPU: 0 PID: 4414 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller #0 [ 72.640683][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.650710][ T4414] Call Trace: [ 72.653960][ T4414] [ 72.656861][ T4414] dump_stack_lvl+0x57/0x7d [ 72.661334][ T4414] should_fail.cold+0x5/0xa [ 72.665803][ T4414] ? skb_clone+0x125/0x300 [ 72.670186][ T4414] should_failslab+0x5/0x10 [ 72.674746][ T4414] kmem_cache_alloc+0x5e/0x3b0 [ 72.679478][ T4414] ? wait_for_completion_io_timeout+0x20/0x20 [ 72.685513][ T4414] skb_clone+0x125/0x300 [ 72.689721][ T4414] sk_psock_verdict_recv+0x48/0x610 [ 72.695060][ T4414] unix_read_sock+0xc4/0x1e0 [ 72.699614][ T4414] ? sk_psock_strp_parse+0x330/0x330 [ 72.704860][ T4414] ? unix_compat_ioctl+0x10/0x10 [ 72.709757][ T4414] ? find_held_lock+0x2d/0x110 [ 72.714489][ T4414] sk_psock_verdict_data_ready+0xf8/0x150 [ 72.720170][ T4414] ? sk_psock_strp_read_done+0x10/0x10 [ 72.726027][ T4414] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 72.732055][ T4414] ? do_raw_spin_unlock+0x171/0x230 [ 72.737616][ T4414] unix_dgram_sendmsg+0xca6/0x1770 [ 72.743005][ T4414] ? unix_stream_sendpage+0xa50/0xa50 [ 72.748346][ T4414] ? aa_af_perm+0x210/0x210 [ 72.752821][ T4414] ? unix_stream_sendpage+0xa50/0xa50 [ 72.758157][ T4414] sock_sendmsg+0xab/0xe0 [ 72.762457][ T4414] ____sys_sendmsg+0x38c/0x7a0 [ 72.767192][ T4414] ? kernel_sendmsg+0x30/0x30 [ 72.771832][ T4414] ? do_recvmmsg+0x550/0x550 [ 72.776385][ T4414] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.782335][ T4414] ___sys_sendmsg+0xd3/0x150 [ 72.786892][ T4414] ? sendmsg_copy_msghdr+0x110/0x110 [ 72.792142][ T4414] ? __fget_files+0x1b9/0x3c0 [ 72.796783][ T4414] ? lock_downgrade+0x6e0/0x6e0 [ 72.801782][ T4414] ? __fget_files+0x1d1/0x3c0 [ 72.806424][ T4414] ? __fget_light+0xbe/0x220 [ 72.810979][ T4414] __sys_sendmmsg+0x141/0x310 [ 72.815621][ T4414] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 72.820609][ T4414] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.826805][ T4414] ? find_held_lock+0x2d/0x110 [ 72.831541][ T4414] ? __context_tracking_exit+0x80/0x90 [ 72.836965][ T4414] ? lock_downgrade+0x6e0/0x6e0 [ 72.841782][ T4414] ? lock_downgrade+0x6e0/0x6e0 [ 72.846603][ T4414] __x64_sys_sendmmsg+0x94/0x100 [ 72.851505][ T4414] ? syscall_enter_from_user_mode+0x21/0x70 [ 72.857361][ T4414] do_syscall_64+0x35/0x80 [ 72.861739][ T4414] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.867943][ T4414] RIP: 0033:0x7fd82a2878d9 [ 72.872323][ T4414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 72.891901][ T4414] RSP: 002b:00007fd82b303188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 72.900366][ T4414] RAX: ffffffffffffffda RBX: 00007fd82a38bf60 RCX: 00007fd82a2878d9 [ 72.908392][ T4414] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 72.916326][ T4414] RBP: 00007fd82b3031d0 R08: 0000000000000000 R09: 0000000000000000 [ 72.924264][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.932202][ T4414] R13: 00007ffda011e60f R14: 00007fd82b303300 R15: 0000000000022000 [ 72.940147][ T4414] [ 73.024586][ T4422] FAULT_INJECTION: forcing a failure. [ 73.024586][ T4422] name failslab, interval 1, probability 0, space 0, times 0 [ 73.046404][ T4427] FAULT_INJECTION: forcing a failure. [ 73.046404][ T4427] name failslab, interval 1, probability 0, space 0, times 0 [ 73.046872][ T4422] CPU: 0 PID: 4422 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 73.067821][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.075787][ T4431] FAULT_INJECTION: forcing a failure. [ 73.075787][ T4431] name failslab, interval 1, probability 0, space 0, times 0 [ 73.077859][ T4422] Call Trace: [ 73.077863][ T4422] [ 73.077867][ T4422] dump_stack_lvl+0x57/0x7d [ 73.077878][ T4422] should_fail.cold+0x5/0xa [ 73.077889][ T4422] should_failslab+0x5/0x10 [ 73.077895][ T4422] kmem_cache_alloc_trace+0x60/0x3f0 [ 73.115433][ T4422] ? sk_psock_skb_ingress_self+0x4f/0x3b0 [ 73.117361][ T4433] FAULT_INJECTION: forcing a failure. [ 73.117361][ T4433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.121131][ T4422] sk_psock_skb_ingress_self+0x4f/0x3b0 [ 73.121143][ T4422] sk_psock_verdict_apply+0x39c/0x4b0 [ 73.121152][ T4422] sk_psock_verdict_recv+0x216/0x610 [ 73.150316][ T4422] unix_read_sock+0xc4/0x1e0 [ 73.154878][ T4422] ? sk_psock_strp_parse+0x330/0x330 [ 73.160138][ T4422] ? unix_compat_ioctl+0x10/0x10 [ 73.165047][ T4422] ? find_held_lock+0x2d/0x110 [ 73.165377][ T4429] FAULT_INJECTION: forcing a failure. [ 73.165377][ T4429] name failslab, interval 1, probability 0, space 0, times 0 [ 73.169790][ T4422] sk_psock_verdict_data_ready+0xf8/0x150 [ 73.169798][ T4422] ? sk_psock_strp_read_done+0x10/0x10 [ 73.169806][ T4422] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 73.169813][ T4422] ? do_raw_spin_unlock+0x171/0x230 [ 73.204550][ T4422] unix_dgram_sendmsg+0xca6/0x1770 [ 73.209642][ T4422] ? unix_stream_sendpage+0xa50/0xa50 [ 73.214984][ T4422] ? aa_af_perm+0x210/0x210 [ 73.219468][ T4422] ? unix_stream_sendpage+0xa50/0xa50 [ 73.224809][ T4422] sock_sendmsg+0xab/0xe0 [ 73.229109][ T4422] ____sys_sendmsg+0x38c/0x7a0 [ 73.233846][ T4422] ? kernel_sendmsg+0x30/0x30 [ 73.238495][ T4422] ? do_recvmmsg+0x550/0x550 [ 73.243055][ T4422] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.249011][ T4422] ___sys_sendmsg+0xd3/0x150 [ 73.253572][ T4422] ? sendmsg_copy_msghdr+0x110/0x110 [ 73.258829][ T4422] ? __fget_files+0x1b9/0x3c0 [ 73.263474][ T4422] ? lock_downgrade+0x6e0/0x6e0 [ 73.268301][ T4422] ? __fget_files+0x1d1/0x3c0 [ 73.272953][ T4422] ? __fget_light+0xbe/0x220 [ 73.277519][ T4422] __sys_sendmmsg+0x141/0x310 [ 73.282168][ T4422] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 73.287163][ T4422] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.293115][ T4422] ? find_held_lock+0x2d/0x110 [ 73.297853][ T4422] ? __context_tracking_exit+0x80/0x90 [ 73.303280][ T4422] ? lock_downgrade+0x6e0/0x6e0 [ 73.308104][ T4422] ? lock_downgrade+0x6e0/0x6e0 [ 73.312936][ T4422] __x64_sys_sendmmsg+0x94/0x100 [ 73.317845][ T4422] ? syscall_enter_from_user_mode+0x21/0x70 [ 73.323709][ T4422] do_syscall_64+0x35/0x80 [ 73.328095][ T4422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.333961][ T4422] RIP: 0033:0x7efe7de878d9 [ 73.338347][ T4422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.357919][ T4422] RSP: 002b:00007efe7d5fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.366298][ T4422] RAX: ffffffffffffffda RBX: 00007efe7df8bf60 RCX: 00007efe7de878d9 [ 73.374239][ T4422] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 73.382178][ T4422] RBP: 00007efe7d5fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 73.390124][ T4422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.398068][ T4422] R13: 00007ffc225babbf R14: 00007efe7d5fe300 R15: 0000000000022000 [ 73.406020][ T4422] [ 73.409013][ T4433] CPU: 1 PID: 4433 Comm: syz-executor.3 Not tainted 5.18.0-rc2-syzkaller #0 [ 73.417750][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.427776][ T4433] Call Trace: [ 73.431024][ T4433] [ 73.433926][ T4433] dump_stack_lvl+0x57/0x7d [ 73.438404][ T4433] should_fail.cold+0x5/0xa [ 73.442875][ T4433] _copy_from_user+0x25/0xe0 [ 73.447431][ T4433] __copy_msghdr_from_user+0x86/0x3e0 [ 73.452770][ T4433] ? __ia32_sys_shutdown+0x70/0x70 [ 73.457846][ T4433] ? unix_stream_sendpage+0xa50/0xa50 [ 73.463182][ T4433] ? sock_sendmsg+0xab/0xe0 [ 73.467650][ T4433] sendmsg_copy_msghdr+0x7f/0x110 [ 73.472639][ T4433] ? do_recvmmsg+0x550/0x550 [ 73.477192][ T4433] ? __lock_acquire+0x15bc/0x5660 [ 73.482186][ T4433] ___sys_sendmsg+0xb8/0x150 [ 73.486740][ T4433] ? sendmsg_copy_msghdr+0x110/0x110 [ 73.491993][ T4433] ? __fget_files+0x1b9/0x3c0 [ 73.496648][ T4433] ? find_held_lock+0x2d/0x110 [ 73.501389][ T4433] ? __might_fault+0xb3/0x160 [ 73.506037][ T4433] ? lock_downgrade+0x6e0/0x6e0 [ 73.510865][ T4433] __sys_sendmmsg+0x141/0x310 [ 73.515512][ T4433] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 73.520504][ T4433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.526447][ T4433] ? find_held_lock+0x2d/0x110 [ 73.531181][ T4433] ? __context_tracking_exit+0x80/0x90 [ 73.536606][ T4433] ? lock_downgrade+0x6e0/0x6e0 [ 73.541425][ T4433] ? lock_downgrade+0x6e0/0x6e0 [ 73.546420][ T4433] __x64_sys_sendmmsg+0x94/0x100 [ 73.551323][ T4433] ? syscall_enter_from_user_mode+0x21/0x70 [ 73.557180][ T4433] do_syscall_64+0x35/0x80 [ 73.561648][ T4433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.567508][ T4433] RIP: 0033:0x7fb6342878d9 [ 73.571890][ T4433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.591461][ T4433] RSP: 002b:00007fb635478188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.599837][ T4433] RAX: ffffffffffffffda RBX: 00007fb63438c0e0 RCX: 00007fb6342878d9 [ 73.607783][ T4433] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000004 [ 73.615728][ T4433] RBP: 00007fb6354781d0 R08: 0000000000000000 R09: 0000000000000000 [ 73.623666][ T4433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.631610][ T4433] R13: 00007fffb655c5df R14: 00007fb635478300 R15: 0000000000022000 [ 73.639559][ T4433] [ 73.654494][ T4427] CPU: 0 PID: 4427 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller #0 [ 73.663251][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.673454][ T4427] Call Trace: [ 73.676707][ T4427] [ 73.679614][ T4427] dump_stack_lvl+0x57/0x7d [ 73.684092][ T4427] should_fail.cold+0x5/0xa [ 73.688568][ T4427] should_failslab+0x5/0x10 [ 73.693039][ T4427] kmem_cache_alloc_trace+0x60/0x3f0 [ 73.698294][ T4427] ? sk_psock_skb_ingress_self+0x4f/0x3b0 [ 73.703992][ T4427] sk_psock_skb_ingress_self+0x4f/0x3b0 [ 73.709512][ T4427] sk_psock_verdict_apply+0x39c/0x4b0 [ 73.711289][ T4418] ================================================================== [ 73.715294][ T4427] sk_psock_verdict_recv+0x216/0x610 [ 73.723946][ T4418] BUG: KASAN: use-after-free in consume_skb+0x23/0xf0 [ 73.729205][ T4427] unix_read_sock+0xc4/0x1e0 [ 73.736355][ T4418] Read of size 4 at addr ffff88807bc175d4 by task syz-executor.4/4418 [ 73.740909][ T4427] ? sk_psock_strp_parse+0x330/0x330 [ 73.749539][ T4418] [ 73.757081][ T4427] ? unix_compat_ioctl+0x10/0x10 [ 73.761985][ T4427] ? find_held_lock+0x2d/0x110 [ 73.766722][ T4427] sk_psock_verdict_data_ready+0xf8/0x150 [ 73.772404][ T4427] ? sk_psock_strp_read_done+0x10/0x10 [ 73.777827][ T4427] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 73.783772][ T4427] ? do_raw_spin_unlock+0x171/0x230 [ 73.788934][ T4427] unix_dgram_sendmsg+0xca6/0x1770 [ 73.794019][ T4427] ? unix_stream_sendpage+0xa50/0xa50 [ 73.799356][ T4427] ? aa_af_perm+0x210/0x210 [ 73.803831][ T4427] ? unix_stream_sendpage+0xa50/0xa50 [ 73.809166][ T4427] sock_sendmsg+0xab/0xe0 [ 73.813466][ T4427] ____sys_sendmsg+0x38c/0x7a0 [ 73.818301][ T4427] ? kernel_sendmsg+0x30/0x30 [ 73.822940][ T4427] ? do_recvmmsg+0x550/0x550 [ 73.827582][ T4427] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.833620][ T4427] ___sys_sendmsg+0xd3/0x150 [ 73.838178][ T4427] ? sendmsg_copy_msghdr+0x110/0x110 [ 73.843433][ T4427] ? __fget_files+0x1b9/0x3c0 [ 73.848077][ T4427] ? lock_downgrade+0x6e0/0x6e0 [ 73.852899][ T4427] ? __fget_files+0x1d1/0x3c0 [ 73.857548][ T4427] ? __fget_light+0xbe/0x220 [ 73.862104][ T4427] __sys_sendmmsg+0x141/0x310 [ 73.866751][ T4427] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 73.871743][ T4427] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.877861][ T4427] ? find_held_lock+0x2d/0x110 [ 73.882597][ T4427] ? __context_tracking_exit+0x80/0x90 [ 73.888022][ T4427] ? lock_downgrade+0x6e0/0x6e0 [ 73.892837][ T4427] ? lock_downgrade+0x6e0/0x6e0 [ 73.897750][ T4427] __x64_sys_sendmmsg+0x94/0x100 [ 73.902651][ T4427] ? syscall_enter_from_user_mode+0x21/0x70 [ 73.908509][ T4427] do_syscall_64+0x35/0x80 [ 73.912890][ T4427] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.918746][ T4427] RIP: 0033:0x7fb1e6a878d9 [ 73.923128][ T4427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 73.942700][ T4427] RSP: 002b:00007fb1e7c08188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.951078][ T4427] RAX: ffffffffffffffda RBX: 00007fb1e6b8bf60 RCX: 00007fb1e6a878d9 [ 73.959416][ T4427] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 73.967356][ T4427] RBP: 00007fb1e7c081d0 R08: 0000000000000000 R09: 0000000000000000 [ 73.975292][ T4427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.983229][ T4427] R13: 00007ffde14cf4cf R14: 00007fb1e7c08300 R15: 0000000000022000 [ 73.991176][ T4427] [ 73.994171][ T4418] CPU: 1 PID: 4418 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 74.002813][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.012839][ T4418] Call Trace: [ 74.016091][ T4418] [ 74.018991][ T4418] dump_stack_lvl+0x57/0x7d [ 74.023459][ T4418] print_address_description.constprop.0.cold+0xeb/0x495 [ 74.030444][ T4418] ? consume_skb+0x23/0xf0 [ 74.034822][ T4418] kasan_report.cold+0xf4/0x1c6 [ 74.039634][ T4418] ? consume_skb+0x23/0xf0 [ 74.044010][ T4418] kasan_check_range+0x13d/0x180 [ 74.048908][ T4418] consume_skb+0x23/0xf0 [ 74.053285][ T4418] __sk_msg_free+0x198/0x340 [ 74.057835][ T4418] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 74.063766][ T4418] sk_psock_stop+0x3f3/0x640 [ 74.068323][ T4418] ? espintcp_init_sk+0xa00/0xa00 [ 74.073308][ T4418] sock_map_close+0x256/0x530 [ 74.077945][ T4418] ? sock_map_update_elem+0x290/0x290 [ 74.083277][ T4418] ? down_write+0xde/0x150 [ 74.087656][ T4418] ? rwsem_down_write_slowpath+0x1110/0x1110 [ 74.093596][ T4418] unix_release+0x6c/0xd0 [ 74.097891][ T4418] __sock_release+0xbb/0x270 [ 74.102444][ T4418] sock_close+0xf/0x20 [ 74.106472][ T4418] __fput+0x1f5/0x8c0 [ 74.110420][ T4418] task_work_run+0xc0/0x160 [ 74.114885][ T4418] exit_to_user_mode_prepare+0x23c/0x250 [ 74.120483][ T4418] syscall_exit_to_user_mode+0x19/0x60 [ 74.125902][ T4418] do_syscall_64+0x42/0x80 [ 74.130279][ T4418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.136220][ T4418] RIP: 0033:0x7efe7de3a51b [ 74.140598][ T4418] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 74.160168][ T4418] RSP: 002b:00007ffc225bac20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 74.168550][ T4418] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007efe7de3a51b [ 74.176484][ T4418] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 74.184418][ T4418] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b309200fc [ 74.192352][ T4418] R10: 0000000000000000 R11: 0000000000000293 R12: 00007efe7df8cb60 [ 74.200287][ T4418] R13: 00007efe7df8cb60 R14: 00007efe7df8bf60 R15: 0000000000011cfc [ 74.208243][ T4418] [ 74.211252][ T4418] [ 74.213546][ T4418] Allocated by task 4422: [ 74.217834][ T4418] kasan_save_stack+0x1e/0x40 [ 74.222473][ T4418] __kasan_slab_alloc+0x90/0xc0 [ 74.227284][ T4418] kmem_cache_alloc+0x204/0x3b0 [ 74.232092][ T4418] skb_clone+0x125/0x300 [ 74.236294][ T4418] sk_psock_verdict_recv+0x48/0x610 [ 74.241454][ T4418] unix_read_sock+0xc4/0x1e0 [ 74.246002][ T4418] sk_psock_verdict_data_ready+0xf8/0x150 [ 74.251678][ T4418] unix_dgram_sendmsg+0xca6/0x1770 [ 74.256750][ T4418] sock_sendmsg+0xab/0xe0 [ 74.261039][ T4418] ____sys_sendmsg+0x38c/0x7a0 [ 74.265763][ T4418] ___sys_sendmsg+0xd3/0x150 [ 74.270311][ T4418] __sys_sendmmsg+0x141/0x310 [ 74.274946][ T4418] __x64_sys_sendmmsg+0x94/0x100 [ 74.279844][ T4418] do_syscall_64+0x35/0x80 [ 74.284220][ T4418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.290073][ T4418] [ 74.292364][ T4418] Freed by task 4040: [ 74.296305][ T4418] kasan_save_stack+0x1e/0x40 [ 74.300944][ T4418] kasan_set_track+0x21/0x30 [ 74.305494][ T4418] kasan_set_free_info+0x20/0x30 [ 74.310391][ T4418] ____kasan_slab_free+0x166/0x1a0 [ 74.315461][ T4418] slab_free_freelist_hook+0x8b/0x1c0 [ 74.320793][ T4418] kmem_cache_free+0xdd/0x5a0 [ 74.325430][ T4418] sk_psock_backlog+0x871/0xd20 [ 74.330241][ T4418] process_one_work+0x865/0x13d0 [ 74.335141][ T4418] worker_thread+0x598/0xec0 [ 74.339698][ T4418] kthread+0x299/0x340 [ 74.343730][ T4418] ret_from_fork+0x1f/0x30 [ 74.348195][ T4418] [ 74.350484][ T4418] The buggy address belongs to the object at ffff88807bc17500 [ 74.350484][ T4418] which belongs to the cache skbuff_head_cache of size 224 [ 74.365019][ T4418] The buggy address is located 212 bytes inside of [ 74.365019][ T4418] 224-byte region [ffff88807bc17500, ffff88807bc175e0) [ 74.378251][ T4418] [ 74.380542][ T4418] The buggy address belongs to the physical page: [ 74.386917][ T4418] page:ffffea0001ef05c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bc17 [ 74.397026][ T4418] memcg:ffff88805fdbea01 [ 74.401226][ T4418] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 74.408733][ T4418] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888014c04500 [ 74.417277][ T4418] raw: 0000000000000000 00000000000c000c 00000001ffffffff ffff88805fdbea01 [ 74.425835][ T4418] page dumped because: kasan: bad access detected [ 74.432212][ T4418] page_owner tracks the page as allocated [ 74.437890][ T4418] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4414, tgid 4407 (syz-executor.2), ts 72989884709, free_ts 72952731747 [ 74.456538][ T4418] get_page_from_freelist+0x178d/0x3dc0 [ 74.462047][ T4418] __alloc_pages+0x1b2/0x500 [ 74.466598][ T4418] allocate_slab+0x26c/0x3c0 [ 74.471166][ T4418] ___slab_alloc+0x8e1/0xf20 [ 74.475717][ T4418] __slab_alloc.constprop.0+0x4d/0xa0 [ 74.481049][ T4418] kmem_cache_alloc_node+0x122/0x3f0 [ 74.486292][ T4418] __alloc_skb+0x151/0x270 [ 74.490668][ T4418] alloc_skb_with_frags+0x72/0x700 [ 74.495741][ T4418] sock_alloc_send_pskb+0x636/0x7c0 [ 74.500985][ T4418] unix_dgram_sendmsg+0x35a/0x1770 [ 74.506056][ T4418] sock_sendmsg+0xab/0xe0 [ 74.510345][ T4418] ____sys_sendmsg+0x38c/0x7a0 [ 74.515070][ T4418] ___sys_sendmsg+0xd3/0x150 [ 74.519620][ T4418] __sys_sendmmsg+0x141/0x310 [ 74.524257][ T4418] __x64_sys_sendmmsg+0x94/0x100 [ 74.529157][ T4418] do_syscall_64+0x35/0x80 [ 74.533532][ T4418] page last free stack trace: [ 74.538166][ T4418] free_pcp_prepare+0x549/0xd20 [ 74.542978][ T4418] free_unref_page+0x19/0x6a0 [ 74.547615][ T4418] qlist_free_all+0x6a/0x170 [ 74.552164][ T4418] kasan_quarantine_reduce+0x180/0x200 [ 74.557585][ T4418] __kasan_slab_alloc+0xa2/0xc0 [ 74.562395][ T4418] kmem_cache_alloc+0x204/0x3b0 [ 74.567208][ T4418] prepare_creds+0x39/0x610 [ 74.571763][ T4418] do_faccessat+0x273/0x660 [ 74.576229][ T4418] do_syscall_64+0x35/0x80 [ 74.580604][ T4418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.586460][ T4418] [ 74.588752][ T4418] Memory state around the buggy address: [ 74.594346][ T4418] ffff88807bc17480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 74.602455][ T4418] ffff88807bc17500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.610753][ T4418] >ffff88807bc17580: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 74.618772][ T4418] ^ [ 74.625490][ T4418] ffff88807bc17600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 74.633511][ T4418] ffff88807bc17680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 74.641529][ T4418] ================================================================== [ 74.649614][ T4418] Kernel panic - not syncing: panic_on_warn set ... [ 74.656169][ T4418] CPU: 1 PID: 4418 Comm: syz-executor.4 Not tainted 5.18.0-rc2-syzkaller #0 [ 74.659096][ T4435] FAULT_INJECTION: forcing a failure. [ 74.659096][ T4435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.677782][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.687803][ T4418] Call Trace: [ 74.691058][ T4418] [ 74.693961][ T4418] dump_stack_lvl+0x57/0x7d [ 74.698436][ T4418] panic+0x227/0x466 [ 74.702296][ T4418] ? panic_print_sys_info.part.0+0x69/0x69 [ 74.708065][ T4418] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 74.714189][ T4418] ? consume_skb+0x23/0xf0 [ 74.718577][ T4418] end_report.part.0+0x3f/0x7c [ 74.723312][ T4418] kasan_report.cold+0x93/0x1c6 [ 74.728133][ T4418] ? consume_skb+0x23/0xf0 [ 74.732521][ T4418] kasan_check_range+0x13d/0x180 [ 74.737426][ T4418] consume_skb+0x23/0xf0 [ 74.741634][ T4418] __sk_msg_free+0x198/0x340 [ 74.746190][ T4418] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 74.751963][ T4418] sk_psock_stop+0x3f3/0x640 [ 74.756524][ T4418] ? espintcp_init_sk+0xa00/0xa00 [ 74.761515][ T4418] sock_map_close+0x256/0x530 [ 74.766157][ T4418] ? sock_map_update_elem+0x290/0x290 [ 74.771498][ T4418] ? down_write+0xde/0x150 [ 74.775880][ T4418] ? rwsem_down_write_slowpath+0x1110/0x1110 2022/04/16 19:41:26 executed programs: 85 [ 74.781829][ T4418] unix_release+0x6c/0xd0 [ 74.786133][ T4418] __sock_release+0xbb/0x270 [ 74.790698][ T4418] sock_close+0xf/0x20 [ 74.794736][ T4418] __fput+0x1f5/0x8c0 [ 74.798698][ T4418] task_work_run+0xc0/0x160 [ 74.803172][ T4418] exit_to_user_mode_prepare+0x23c/0x250 [ 74.808772][ T4418] syscall_exit_to_user_mode+0x19/0x60 [ 74.814201][ T4418] do_syscall_64+0x42/0x80 [ 74.818585][ T4418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.824444][ T4418] RIP: 0033:0x7efe7de3a51b [ 74.828831][ T4418] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 74.848409][ T4418] RSP: 002b:00007ffc225bac20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 74.855206][ T4439] FAULT_INJECTION: forcing a failure. [ 74.855206][ T4439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.869754][ T4418] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007efe7de3a51b [ 74.877699][ T4418] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 74.885639][ T4418] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b309200fc [ 74.893582][ T4418] R10: 0000000000000000 R11: 0000000000000293 R12: 00007efe7df8cb60 [ 74.901524][ T4418] R13: 00007efe7df8cb60 R14: 00007efe7df8bf60 R15: 0000000000011cfc [ 74.909465][ T4418] [ 74.912458][ T4431] CPU: 0 PID: 4431 Comm: syz-executor.5 Not tainted 5.18.0-rc2-syzkaller #0 [ 74.921198][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.931221][ T4431] Call Trace: [ 74.934472][ T4431] [ 74.937373][ T4431] dump_stack_lvl+0x57/0x7d [ 74.941845][ T4431] should_fail.cold+0x5/0xa [ 74.946316][ T4431] ? skb_clone+0x125/0x300 [ 74.950700][ T4431] should_failslab+0x5/0x10 [ 74.955167][ T4431] kmem_cache_alloc+0x5e/0x3b0 [ 74.959894][ T4431] ? wait_for_completion_io_timeout+0x20/0x20 [ 74.965928][ T4431] skb_clone+0x125/0x300 [ 74.970135][ T4431] sk_psock_verdict_recv+0x48/0x610 [ 74.975302][ T4431] unix_read_sock+0xc4/0x1e0 [ 74.979859][ T4431] ? sk_psock_strp_parse+0x330/0x330 [ 74.985106][ T4431] ? unix_compat_ioctl+0x10/0x10 [ 74.990006][ T4431] ? find_held_lock+0x2d/0x110 [ 74.994739][ T4431] sk_psock_verdict_data_ready+0xf8/0x150 [ 75.000422][ T4431] ? sk_psock_strp_read_done+0x10/0x10 [ 75.005844][ T4431] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 75.011786][ T4431] ? do_raw_spin_unlock+0x171/0x230 [ 75.016953][ T4431] unix_dgram_sendmsg+0xca6/0x1770 [ 75.022034][ T4431] ? unix_stream_sendpage+0xa50/0xa50 [ 75.027368][ T4431] ? aa_af_perm+0x210/0x210 [ 75.031841][ T4431] ? unix_stream_sendpage+0xa50/0xa50 [ 75.037177][ T4431] sock_sendmsg+0xab/0xe0 [ 75.041475][ T4431] ____sys_sendmsg+0x38c/0x7a0 [ 75.046206][ T4431] ? kernel_sendmsg+0x30/0x30 [ 75.050850][ T4431] ? do_recvmmsg+0x550/0x550 [ 75.055403][ T4431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 75.061352][ T4431] ___sys_sendmsg+0xd3/0x150 [ 75.065906][ T4431] ? sendmsg_copy_msghdr+0x110/0x110 [ 75.071163][ T4431] ? __fget_files+0x1b9/0x3c0 [ 75.075805][ T4431] ? lock_downgrade+0x6e0/0x6e0 [ 75.080630][ T4431] ? __fget_files+0x1d1/0x3c0 [ 75.085276][ T4431] ? __fget_light+0xbe/0x220 [ 75.089834][ T4431] __sys_sendmmsg+0x141/0x310 [ 75.094478][ T4431] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 75.099464][ T4431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 75.105406][ T4431] ? find_held_lock+0x2d/0x110 [ 75.110139][ T4431] ? __context_tracking_exit+0x80/0x90 [ 75.115566][ T4431] ? lock_downgrade+0x6e0/0x6e0 [ 75.120382][ T4431] ? lock_downgrade+0x6e0/0x6e0 [ 75.125205][ T4431] __x64_sys_sendmmsg+0x94/0x100 [ 75.130108][ T4431] ? syscall_enter_from_user_mode+0x21/0x70 [ 75.135962][ T4431] do_syscall_64+0x35/0x80 [ 75.140340][ T4431] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.146202][ T4431] RIP: 0033:0x7f6bcd8878d9 [ 75.150591][ T4431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 75.170178][ T4431] RSP: 002b:00007f6bce9f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 75.178555][ T4431] RAX: ffffffffffffffda RBX: 00007f6bcd98bf60 RCX: 00007f6bcd8878d9 [ 75.186494][ T4431] RDX: 0307017fdb7a66cb RSI: 0000000020002dc0 RDI: 0000000000000006 [ 75.194430][ T4431] RBP: 00007f6bce9f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 75.202370][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.210306][ T4431] R13: 00007ffdefcf793f R14: 00007f6bce9f2300 R15: 0000000000022000 [ 75.218253][ T4431] [ 75.222013][ T4418] Kernel Offset: disabled [ 75.226310][ T4418] Rebooting in 86400 seconds..