syzkaller login: [ 36.030365] kauditd_printk_skb: 9 callbacks suppressed [ 36.030370] audit: type=1400 audit(1576055975.765:35): avc: denied { map } for pid=6961 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 42.354385] audit: type=1400 audit(1576055982.095:36): avc: denied { map } for pid=6972 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.221290] IPVS: ftp: loaded support on port[0] = 21 [ 44.591661] can: request_module (can-proto-0) failed. [ 45.549733] can: request_module (can-proto-0) failed. [ 45.705433] audit: type=1400 audit(1576055985.445:37): avc: denied { create } for pid=6972 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 45.729021] audit: type=1400 audit(1576055985.445:38): avc: denied { create } for pid=6972 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 45.752619] audit: type=1400 audit(1576055985.445:39): avc: denied { create } for pid=6972 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2019/12/11 09:19:51 parsed 1 programs 2019/12/11 09:19:52 executed programs: 0 [ 52.899517] IPVS: ftp: loaded support on port[0] = 21 [ 52.917099] IPVS: ftp: loaded support on port[0] = 21 [ 52.936577] IPVS: ftp: loaded support on port[0] = 21 [ 52.951110] IPVS: ftp: loaded support on port[0] = 21 [ 53.006535] IPVS: ftp: loaded support on port[0] = 21 [ 53.021360] IPVS: ftp: loaded support on port[0] = 21 [ 53.090301] chnl_net:caif_netlink_parms(): no params data found [ 53.147088] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.154061] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.160854] device bridge_slave_0 entered promiscuous mode [ 53.170142] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.176692] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.183710] device bridge_slave_1 entered promiscuous mode [ 53.240001] chnl_net:caif_netlink_parms(): no params data found [ 53.269768] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.290235] chnl_net:caif_netlink_parms(): no params data found [ 53.313048] chnl_net:caif_netlink_parms(): no params data found [ 53.324206] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.352612] chnl_net:caif_netlink_parms(): no params data found [ 53.377804] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.385932] team0: Port device team_slave_0 added [ 53.415767] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.422864] team0: Port device team_slave_1 added [ 53.431279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.440765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.456965] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.465668] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.472555] device bridge_slave_0 entered promiscuous mode [ 53.482449] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.488872] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.496011] device bridge_slave_1 entered promiscuous mode [ 53.519061] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.527502] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.535107] device bridge_slave_0 entered promiscuous mode [ 53.541434] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.548325] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.555479] device bridge_slave_0 entered promiscuous mode [ 53.565360] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.571719] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.578549] device bridge_slave_1 entered promiscuous mode [ 53.635684] device hsr_slave_0 entered promiscuous mode [ 53.693442] device hsr_slave_1 entered promiscuous mode [ 53.736938] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 53.748529] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 53.755329] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.761705] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.769086] device bridge_slave_1 entered promiscuous mode [ 53.795877] chnl_net:caif_netlink_parms(): no params data found [ 53.808094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.829895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.841631] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.857769] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.866681] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.875041] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.881377] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.888418] device bridge_slave_0 entered promiscuous mode [ 53.900131] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.906804] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.913891] device bridge_slave_1 entered promiscuous mode [ 53.939299] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.951783] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 53.959968] team0: Port device team_slave_0 added [ 53.968392] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 53.975826] team0: Port device team_slave_1 added [ 53.981126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 53.988503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 53.998714] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.006069] team0: Port device team_slave_0 added [ 54.074693] device hsr_slave_0 entered promiscuous mode [ 54.123518] device hsr_slave_1 entered promiscuous mode [ 54.183578] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.189947] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.197324] device bridge_slave_0 entered promiscuous mode [ 54.204206] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.211303] team0: Port device team_slave_1 added [ 54.216589] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.226175] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.234052] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.242267] team0: Port device team_slave_0 added [ 54.250939] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.257368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.264363] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.270960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.279719] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.286912] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.296231] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.302974] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.309662] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.316644] device bridge_slave_1 entered promiscuous mode [ 54.322805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.330621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.344269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.351319] team0: Port device team_slave_1 added [ 54.357007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.367678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.380083] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.399737] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.407053] team0: Port device team_slave_0 added [ 54.444552] device hsr_slave_0 entered promiscuous mode [ 54.483445] device hsr_slave_1 entered promiscuous mode [ 54.563836] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.574653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 54.581821] team0: Port device team_slave_1 added [ 54.588085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.596023] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.608595] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.619664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.674607] device hsr_slave_0 entered promiscuous mode [ 54.713398] device hsr_slave_1 entered promiscuous mode [ 54.753824] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.760995] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.772114] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.814691] device hsr_slave_0 entered promiscuous mode [ 54.873455] device hsr_slave_1 entered promiscuous mode [ 54.933804] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.940928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 54.956818] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 54.984879] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 54.993091] team0: Port device team_slave_0 added [ 54.999764] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.017266] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.026399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 55.033885] team0: Port device team_slave_1 added [ 55.047918] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.058349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.066327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.076831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.111741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.128129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.136279] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.164963] device hsr_slave_0 entered promiscuous mode [ 55.203389] device hsr_slave_1 entered promiscuous mode [ 55.243628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.250495] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.261369] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.270723] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.277768] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.286422] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.298408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.305971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.312705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.320220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.333717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.341354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.349661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.359414] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.365975] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.374803] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.381571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.389960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.397696] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.404072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.412905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.426057] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 55.433704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.441109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.449370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.457818] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.464194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.477511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.485127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.492678] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.503537] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.511541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.520880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.528681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.536802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.546472] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.552892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.559715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.567158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.574328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.581096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.587954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.595665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.605289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.614396] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.620463] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.629294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.638051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.647576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.655565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.663078] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.669454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.676658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.684455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.691992] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.698377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.705422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.713556] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 55.719626] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.726441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 55.734865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 55.746133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.754449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.762842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 55.773541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.781014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.789759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.799234] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.805726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.812513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.820583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.828411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.836112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.844040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.851678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.859726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 55.871428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.879429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.886972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.894816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.902510] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.908891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.915758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.923475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.930906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.938741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.948209] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 55.956217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 55.967529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 55.974405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.981372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.988356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.995166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.001880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.009859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.017604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.026369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.035630] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.041691] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.050198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.057809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.065966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.073754] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.080427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.087398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.095237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.103834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.112231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.121941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.132252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.139409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.147455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.154953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.162484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.170370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.177902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.186323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.196436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.205442] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.211450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.218966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.225882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.233918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.241558] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.247951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.255752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.263552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.271009] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.277386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.284560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.292220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.300822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.317370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.325183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.332549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.341063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.349842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.357650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 56.370350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 56.378192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.386774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.394608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.403028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.410969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.419563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.427309] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.439789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.446497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.457040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.467545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.475795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.483744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.491231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.498958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.507069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.516110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 56.524084] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.530119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.540193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.548556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.557108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.565074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.572419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.579972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.588067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.599006] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 56.605933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.614366] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.620371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.632170] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.639062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.647120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.657455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.668849] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.679071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 56.688452] audit: type=1400 audit(1576055996.425:40): avc: denied { associate } for pid=7065 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 56.712691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 56.723353] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 56.730660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.738715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.746190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.754218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.762269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.770532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.778485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.785558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.794893] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.800904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.812069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 56.822859] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 56.829942] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.839170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.853766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.861258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.879511] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 56.886003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.898877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.911548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.926025] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.938363] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 56.946734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.954583] FAULT_INJECTION: forcing a failure. [ 56.954583] name failslab, interval 1, probability 0, space 0, times 1 [ 56.960503] FAULT_INJECTION: forcing a failure. [ 56.960503] name failslab, interval 1, probability 0, space 0, times 1 [ 56.968709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.979449] CPU: 1 PID: 7091 Comm: syz-executor.2 Not tainted 4.19.88-syzkaller #0 [ 56.992574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.999421] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.001914] Call Trace: [ 57.008279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.010781] dump_stack+0x123/0x177 [ 57.020865] should_fail.cold.4+0x5/0x13 [ 57.024920] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 57.030001] ? lock_downgrade+0x860/0x860 [ 57.034138] __should_failslab+0xba/0xf0 [ 57.038196] should_failslab+0x9/0x14 [ 57.041993] __kmalloc+0x2dd/0x770 [ 57.045530] ? tls_push_record+0xf3/0x1720 [ 57.049622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.049756] ? __sk_mem_schedule+0x5f/0xc0 [ 57.060626] tls_push_record+0xf3/0x1720 [ 57.060634] ? lockdep_hardirqs_on+0x421/0x5c0 [ 57.060644] ? alloc_encrypted_sg+0x81/0x100 [ 57.060651] tls_sw_sendpage+0x458/0xc00 [ 57.060664] ? tls_sw_sendmsg+0x1020/0x1020 [ 57.060669] ? pipe_lock+0x4f/0x60 [ 57.060679] inet_sendpage+0x122/0x600 [ 57.060686] ? kernel_sendpage+0xd0/0xd0 [ 57.060690] kernel_sendpage+0x60/0xd0 [ 57.060693] ? lock_downgrade+0x860/0x860 [ 57.060697] ? pipe_lock+0x4f/0x60 [ 57.060701] sock_sendpage+0x6d/0xd0 [ 57.060709] pipe_to_sendpage+0x212/0x430 [ 57.069403] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.117716] ? kasan_check_write+0x14/0x20 [ 57.121946] ? anon_pipe_buf_release+0x149/0x1f0 [ 57.126695] __splice_from_pipe+0x2cb/0x720 [ 57.130996] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.135826] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.140650] splice_from_pipe+0xbb/0x120 [ 57.144690] ? splice_shrink_spd+0xa0/0xa0 [ 57.148906] ? rw_verify_area+0xb8/0x2b0 [ 57.152946] generic_splice_sendpage+0x10/0x20 [ 57.157507] do_splice+0x4fd/0x1250 [ 57.161128] ? ksys_dup3+0x2e0/0x2e0 [ 57.164834] ? opipe_prep.part.13+0x320/0x320 [ 57.169314] ? __fget_light+0x174/0x1e0 [ 57.173307] __x64_sys_splice+0x248/0x300 [ 57.177445] do_syscall_64+0xd0/0x4e0 [ 57.181228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.186484] RIP: 0033:0x459a29 [ 57.189656] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.208727] RSP: 002b:00007ff7c0c1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.216426] RAX: ffffffffffffffda RBX: 00007ff7c0c1ac90 RCX: 0000000000459a29 [ 57.223698] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.230963] RBP: 000000000075bf20 R08: 000000011d100000 R09: 0000000000000000 [ 57.238236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff7c0c1b6d4 [ 57.245492] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 57.252756] CPU: 0 PID: 7093 Comm: syz-executor.0 Not tainted 4.19.88-syzkaller #0 [ 57.260469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.266222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 57.269850] Call Trace: [ 57.279872] dump_stack+0x123/0x177 [ 57.280571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.283501] should_fail.cold.4+0x5/0x13 [ 57.283510] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 57.283516] ? lock_downgrade+0x860/0x860 [ 57.283529] __should_failslab+0xba/0xf0 [ 57.283537] should_failslab+0x9/0x14 [ 57.283544] kmem_cache_alloc_node_trace+0x26d/0x730 [ 57.293007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.294335] __kmalloc_node_track_caller+0x3c/0x70 [ 57.294344] __kmalloc_reserve.isra.39+0x2c/0xc0 [ 57.294351] __alloc_skb+0xd7/0x580 [ 57.294359] ? skb_scrub_packet+0x3c0/0x3c0 [ 57.294372] sk_stream_alloc_skb+0x9c/0x810 [ 57.294377] ? tcp_send_mss+0x1d/0x220 [ 57.294384] do_tcp_sendpages+0x749/0x1da0 [ 57.302781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 57.303601] ? __lock_is_held+0xb5/0x140 [ 57.303616] ? sk_stream_alloc_skb+0x810/0x810 [ 57.303625] ? __local_bh_enable_ip+0x160/0x260 [ 57.303632] ? lock_sock_nested+0xc5/0x100 [ 57.303638] ? lockdep_hardirqs_on+0x421/0x5c0 [ 57.303642] ? __local_bh_enable_ip+0x160/0x260 [ 57.303650] ? kasan_check_read+0x11/0x20 [ 57.311963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 57.316570] tcp_sendpage_locked+0x63/0xa0 [ 57.316578] tcp_sendpage+0x37/0x50 [ 57.316587] inet_sendpage+0x122/0x600 [ 57.316596] ? kernel_sendpage+0xd0/0xd0 [ 57.316601] kernel_sendpage+0x60/0xd0 [ 57.316608] ? lock_downgrade+0x860/0x860 [ 57.316616] ? pipe_lock+0x4f/0x60 [ 57.325978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 57.328265] sock_sendpage+0x6d/0xd0 [ 57.328275] pipe_to_sendpage+0x212/0x430 [ 57.328284] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.335612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 57.336638] __splice_from_pipe+0x2cb/0x720 [ 57.336645] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.336653] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.342491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.345280] splice_from_pipe+0xbb/0x120 [ 57.345286] ? splice_shrink_spd+0xa0/0xa0 [ 57.345297] ? rw_verify_area+0xb8/0x2b0 [ 57.345304] generic_splice_sendpage+0x10/0x20 [ 57.345308] do_splice+0x4fd/0x1250 [ 57.345319] ? ksys_dup3+0x2e0/0x2e0 [ 57.345326] ? opipe_prep.part.13+0x320/0x320 [ 57.345333] ? __fget_light+0x174/0x1e0 [ 57.345340] __x64_sys_splice+0x248/0x300 [ 57.345350] do_syscall_64+0xd0/0x4e0 [ 57.345359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.345365] RIP: 0033:0x459a29 [ 57.345370] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.351174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.353538] RSP: 002b:00007fa0739b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 57.353544] RAX: ffffffffffffffda RBX: 00007fa0739b5c90 RCX: 0000000000459a29 [ 57.353547] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 57.353551] RBP: 000000000075bfc8 R08: 000000011d100000 R09: 0000000000000000 [ 57.353554] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0739b66d4 [ 57.353558] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 57.483393] kasan: CONFIG_KASAN_INLINE enabled [ 57.486095] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 57.488069] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 57.516929] kobject: 'loop3' (00000000d1938a46): kobject_uevent_env [ 57.525774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.573580] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 57.580567] kobject: 'loop3' (00000000d1938a46): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 57.587426] CPU: 1 PID: 7091 Comm: syz-executor.2 Not tainted 4.19.88-syzkaller #0 [ 57.587429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.587438] RIP: 0010:scatterwalk_copychunks+0x379/0x610 [ 57.587443] Code: ff ff 48 89 c7 e8 07 f9 29 00 4c 89 f2 48 c1 ea 03 42 80 3c 3a 00 0f 85 a8 01 00 00 48 8d 70 08 49 89 06 48 89 f2 48 c1 ea 03 <42> 0f b6 14 3a 84 d2 74 09 80 fa 03 0f 8e 6b 01 00 00 48 8b 5d d0 [ 57.587445] RSP: 0018:ffff8880a01ef498 EFLAGS: 00010202 [ 57.587449] RAX: 0000000000000000 RBX: ffff88807eb4a6ec RCX: 000000000000401d [ 57.587452] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88807eb4a6e0 [ 57.587454] RBP: ffff8880a01ef4f8 R08: ffffed10140df804 R09: ffffed10140df800 [ 57.587456] R10: 0000000000000000 R11: ffff8880a06fc01c R12: 0000000000001000 [ 57.587458] R13: 000000000000001d R14: ffff8880a01ef538 R15: dffffc0000000000 [ 57.587462] FS: 00007ff7c0c1b700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 57.587466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.604064] kobject: 'vlan0' (00000000148f2f06): kobject_add_internal: parent: 'mesh', set: '' [ 57.606535] CR2: 0000000000960004 CR3: 000000009862c000 CR4: 00000000001406e0 [ 57.606541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.606543] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.606546] Call Trace: [ 57.606559] scatterwalk_map_and_copy+0x128/0x190 [ 57.615943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.619861] ? scatterwalk_copychunks+0x610/0x610 [ 57.626677] kobject: 'vlan0' (00000000ea10e806): kobject_add_internal: parent: 'mesh', set: '' [ 57.632275] ? kernel_fpu_end+0xa3/0x130 [ 57.632279] ? kernel_fpu_begin+0x170/0x170 [ 57.632287] gcmaes_encrypt.constprop.15+0x81b/0xda0 [ 57.647496] kobject: 'loop1' (00000000bd8d8e62): kobject_uevent_env [ 57.647916] ? tls_push_record+0xf3/0x1720 [ 57.657985] kobject: 'loop1' (00000000bd8d8e62): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 57.664952] ? tls_sw_sendpage+0x458/0xc00 [ 57.664957] ? inet_sendpage+0x122/0x600 [ 57.664962] ? kernel_sendpage+0x60/0xd0 [ 57.664965] ? sock_sendpage+0x6d/0xd0 [ 57.664969] ? pipe_to_sendpage+0x212/0x430 [ 57.664980] ? gcmaes_crypt_by_sg.constprop.16+0x14c0/0x14c0 [ 57.863240] ? usleep_range+0x130/0x130 [ 57.867199] ? __lock_is_held+0xb5/0x140 [ 57.871251] generic_gcmaes_encrypt+0xfd/0x150 [ 57.875809] ? generic_gcmaes_encrypt+0xfd/0x150 [ 57.880540] ? helper_rfc4106_encrypt+0x450/0x450 [ 57.885356] ? __kmalloc+0x5f1/0x770 [ 57.889235] gcmaes_wrapper_encrypt+0x109/0x180 [ 57.893879] tls_push_record+0x966/0x1720 [ 57.898000] ? sk_stream_kill_queues+0x510/0x510 [ 57.902740] tls_sw_sendpage+0x458/0xc00 [ 57.906779] ? tls_sw_sendmsg+0x1020/0x1020 [ 57.911335] ? pipe_lock+0x4f/0x60 [ 57.914854] inet_sendpage+0x122/0x600 [ 57.918718] ? kernel_sendpage+0xd0/0xd0 [ 57.922753] kernel_sendpage+0x60/0xd0 [ 57.926625] ? lock_downgrade+0x860/0x860 [ 57.930744] ? pipe_lock+0x4f/0x60 [ 57.934260] sock_sendpage+0x6d/0xd0 [ 57.937948] pipe_to_sendpage+0x212/0x430 [ 57.942072] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.946890] ? kasan_check_write+0x14/0x20 [ 57.951101] ? anon_pipe_buf_release+0x149/0x1f0 [ 57.955844] __splice_from_pipe+0x2cb/0x720 [ 57.960140] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.964956] ? generic_pipe_buf_nosteal+0x10/0x10 [ 57.969772] splice_from_pipe+0xbb/0x120 [ 57.973811] ? splice_shrink_spd+0xa0/0xa0 [ 57.978021] ? rw_verify_area+0xb8/0x2b0 [ 57.982062] generic_splice_sendpage+0x10/0x20 [ 57.986617] do_splice+0x4fd/0x1250 [ 57.990221] ? ksys_dup3+0x2e0/0x2e0 [ 57.993907] ? opipe_prep.part.13+0x320/0x320 [ 57.998378] ? __fget_light+0x174/0x1e0 [ 58.002328] __x64_sys_splice+0x248/0x300 [ 58.006451] do_syscall_64+0xd0/0x4e0 [ 58.010236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.015401] RIP: 0033:0x459a29 [ 58.018568] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.037620] RSP: 002b:00007ff7c0c1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.045314] RAX: ffffffffffffffda RBX: 00007ff7c0c1ac90 RCX: 0000000000459a29 [ 58.052560] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.059805] RBP: 000000000075bf20 R08: 000000011d100000 R09: 0000000000000000 [ 58.067048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff7c0c1b6d4 [ 58.074467] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 58.081726] Modules linked in: 2019/12/11 09:19:57 executed programs: 7 [ 58.086798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.094673] FAULT_INJECTION: forcing a failure. [ 58.094673] name failslab, interval 1, probability 0, space 0, times 0 [ 58.097594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.112686] kobject: 'loop0' (00000000ef49a8f5): kobject_uevent_env [ 58.114520] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.119922] kobject: 'loop0' (00000000ef49a8f5): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 58.125917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.126387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.149992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.150118] FAULT_INJECTION: forcing a failure. [ 58.150118] name failslab, interval 1, probability 0, space 0, times 0 [ 58.157614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.170317] FAULT_INJECTION: forcing a failure. [ 58.170317] name failslab, interval 1, probability 0, space 0, times 0 [ 58.176929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.188414] CPU: 0 PID: 7103 Comm: syz-executor.3 Tainted: G D 4.19.88-syzkaller #0 [ 58.194940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.203309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.203312] Call Trace: [ 58.203324] dump_stack+0x123/0x177 [ 58.203333] should_fail.cold.4+0x5/0x13 [ 58.203338] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 58.203344] ? lock_downgrade+0x860/0x860 [ 58.203350] ? set_page_refcounted+0x100/0x100 [ 58.211123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.219857] __should_failslab+0xba/0xf0 [ 58.219864] should_failslab+0x9/0x14 [ 58.219870] __kmalloc+0x2dd/0x770 [ 58.219878] ? tls_push_record+0xf3/0x1720 [ 58.219887] ? __sk_mem_schedule+0x5f/0xc0 [ 58.223103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.226058] tls_push_record+0xf3/0x1720 [ 58.230373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.235167] ? __local_bh_enable_ip+0x120/0x260 [ 58.235176] ? alloc_encrypted_sg+0x81/0x100 [ 58.235181] tls_sw_sendpage+0x458/0xc00 [ 58.235186] ? _kstrtoull+0xa0/0x1b0 [ 58.235194] ? tls_sw_sendmsg+0x1020/0x1020 [ 58.239799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.243880] inet_sendpage+0x122/0x600 [ 58.243887] ? kernel_sendpage+0xd0/0xd0 [ 58.243891] kernel_sendpage+0x60/0xd0 [ 58.243897] ? lock_downgrade+0x860/0x860 [ 58.243904] ? pipe_lock+0x4f/0x60 [ 58.251281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.255013] sock_sendpage+0x6d/0xd0 [ 58.255020] pipe_to_sendpage+0x212/0x430 [ 58.255024] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.255031] ? kasan_check_write+0x14/0x20 [ 58.262889] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 58.266543] ? anon_pipe_buf_release+0x149/0x1f0 [ 58.266550] __splice_from_pipe+0x2cb/0x720 [ 58.266554] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.266559] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.266565] splice_from_pipe+0xbb/0x120 [ 58.274910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.277886] ? splice_shrink_spd+0xa0/0xa0 [ 58.277895] ? rw_verify_area+0xb8/0x2b0 [ 58.281999] kobject: 'vlan0' (0000000046a3c5e6): kobject_add_internal: parent: 'mesh', set: '' [ 58.288927] generic_splice_sendpage+0x10/0x20 [ 58.288931] do_splice+0x4fd/0x1250 [ 58.288938] ? ksys_dup3+0x2e0/0x2e0 [ 58.288943] ? opipe_prep.part.13+0x320/0x320 [ 58.288948] ? __fget_light+0x174/0x1e0 [ 58.288953] __x64_sys_splice+0x248/0x300 [ 58.315792] ---[ end trace 81179ff555e1d564 ]--- [ 58.317097] do_syscall_64+0xd0/0x4e0 [ 58.317106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.320996] RIP: 0010:scatterwalk_copychunks+0x379/0x610 [ 58.325094] RIP: 0033:0x459a29 [ 58.325100] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.325102] RSP: 002b:00007f585f307c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.325107] RAX: ffffffffffffffda RBX: 00007f585f307c90 RCX: 0000000000459a29 [ 58.325109] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.325111] RBP: 000000000075bf20 R08: 000000011d100000 R09: 0000000000000000 [ 58.325113] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f585f3086d4 [ 58.325115] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 58.336263] kobject: 'loop4' (000000005c8382b8): kobject_uevent_env [ 58.337691] CPU: 1 PID: 7109 Comm: syz-executor.0 Tainted: G D 4.19.88-syzkaller #0 [ 58.373011] kobject: 'loop4' (000000005c8382b8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 58.376159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.376161] Call Trace: [ 58.376172] dump_stack+0x123/0x177 [ 58.376180] should_fail.cold.4+0x5/0x13 [ 58.376186] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 58.376193] ? lock_downgrade+0x860/0x860 [ 58.376198] ? set_page_refcounted+0x100/0x100 [ 58.376207] __should_failslab+0xba/0xf0 [ 58.376213] should_failslab+0x9/0x14 [ 58.376219] __kmalloc+0x2dd/0x770 [ 58.376227] ? tls_push_record+0xf3/0x1720 [ 58.376233] ? __sk_mem_schedule+0x5f/0xc0 [ 58.376238] tls_push_record+0xf3/0x1720 [ 58.376244] ? __local_bh_enable_ip+0x120/0x260 [ 58.376251] ? alloc_encrypted_sg+0x81/0x100 [ 58.376256] tls_sw_sendpage+0x458/0xc00 [ 58.385796] kobject: 'loop5' (000000009af29266): kobject_uevent_env [ 58.390218] ? _kstrtoull+0xa0/0x1b0 [ 58.390230] ? tls_sw_sendmsg+0x1020/0x1020 [ 58.390240] inet_sendpage+0x122/0x600 [ 58.390248] ? kernel_sendpage+0xd0/0xd0 [ 58.400035] kobject: 'loop5' (000000009af29266): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 58.400333] kernel_sendpage+0x60/0xd0 [ 58.415897] Code: ff ff 48 89 c7 e8 07 f9 29 00 4c 89 f2 48 c1 ea 03 42 80 3c 3a 00 0f 85 a8 01 00 00 48 8d 70 08 49 89 06 48 89 f2 48 c1 ea 03 <42> 0f b6 14 3a 84 d2 74 09 80 fa 03 0f 8e 6b 01 00 00 48 8b 5d d0 [ 58.417841] ? lock_downgrade+0x860/0x860 [ 58.417848] ? pipe_lock+0x4f/0x60 [ 58.417854] sock_sendpage+0x6d/0xd0 [ 58.417862] pipe_to_sendpage+0x212/0x430 [ 58.422434] RSP: 0018:ffff8880a01ef498 EFLAGS: 00010202 [ 58.426034] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.426040] ? kasan_check_write+0x14/0x20 [ 58.426043] ? anon_pipe_buf_release+0x149/0x1f0 [ 58.426048] __splice_from_pipe+0x2cb/0x720 [ 58.426052] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.426056] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.426060] splice_from_pipe+0xbb/0x120 [ 58.426064] ? splice_shrink_spd+0xa0/0xa0 [ 58.426071] ? rw_verify_area+0xb8/0x2b0 [ 58.426076] generic_splice_sendpage+0x10/0x20 [ 58.426079] do_splice+0x4fd/0x1250 [ 58.426086] ? ksys_dup3+0x2e0/0x2e0 [ 58.426090] ? opipe_prep.part.13+0x320/0x320 [ 58.426094] ? __fget_light+0x174/0x1e0 [ 58.426099] __x64_sys_splice+0x248/0x300 [ 58.426106] do_syscall_64+0xd0/0x4e0 [ 58.426113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 58.426117] RIP: 0033:0x459a29 [ 58.426121] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 58.441226] kobject: 'loop3' (00000000d1938a46): kobject_uevent_env [ 58.442356] RSP: 002b:00007fa0739d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 58.442362] RAX: ffffffffffffffda RBX: 00007fa0739d6c90 RCX: 0000000000459a29 [ 58.442365] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.442368] RBP: 000000000075bf20 R08: 000000011d100000 R09: 0000000000000000 [ 58.442370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0739d76d4 [ 58.442372] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 58.444548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.449469] CPU: 0 PID: 7107 Comm: syz-executor.1 Tainted: G D 4.19.88-syzkaller #0 [ 58.451280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.456083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.456085] Call Trace: [ 58.456096] dump_stack+0x123/0x177 [ 58.456104] should_fail.cold.4+0x5/0x13 [ 58.456109] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 58.456115] ? lock_downgrade+0x860/0x860 [ 58.456120] ? set_page_refcounted+0x100/0x100 [ 58.456127] __should_failslab+0xba/0xf0 [ 58.456133] should_failslab+0x9/0x14 [ 58.456138] __kmalloc+0x2dd/0x770 [ 58.456145] ? tls_push_record+0xf3/0x1720 [ 58.456150] ? __sk_mem_schedule+0x5f/0xc0 [ 58.456156] tls_push_record+0xf3/0x1720 [ 58.456161] ? __local_bh_enable_ip+0x120/0x260 [ 58.456169] ? alloc_encrypted_sg+0x81/0x100 [ 58.456174] tls_sw_sendpage+0x458/0xc00 [ 58.940248] ? _kstrtoull+0xa0/0x1b0 [ 58.943946] ? tls_sw_sendmsg+0x1020/0x1020 [ 58.948252] inet_sendpage+0x122/0x600 [ 58.952119] ? kernel_sendpage+0xd0/0xd0 [ 58.956170] kernel_sendpage+0x60/0xd0 [ 58.960033] ? lock_downgrade+0x860/0x860 [ 58.964160] ? pipe_lock+0x4f/0x60 [ 58.967678] sock_sendpage+0x6d/0xd0 [ 58.971369] pipe_to_sendpage+0x212/0x430 [ 58.975492] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.980321] ? kasan_check_write+0x14/0x20 [ 58.984533] ? anon_pipe_buf_release+0x149/0x1f0 [ 58.989279] __splice_from_pipe+0x2cb/0x720 [ 58.993576] ? generic_pipe_buf_nosteal+0x10/0x10 [ 58.998393] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.003210] splice_from_pipe+0xbb/0x120 [ 59.007251] ? splice_shrink_spd+0xa0/0xa0 [ 59.011465] ? rw_verify_area+0xb8/0x2b0 [ 59.015504] generic_splice_sendpage+0x10/0x20 [ 59.020063] do_splice+0x4fd/0x1250 [ 59.023668] ? ksys_dup3+0x2e0/0x2e0 [ 59.027359] ? opipe_prep.part.13+0x320/0x320 [ 59.031831] ? __fget_light+0x174/0x1e0 [ 59.035869] __x64_sys_splice+0x248/0x300 [ 59.039998] do_syscall_64+0xd0/0x4e0 [ 59.043777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.048941] RIP: 0033:0x459a29 [ 59.052218] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.071100] RSP: 002b:00007fb21a0a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.078784] RAX: ffffffffffffffda RBX: 00007fb21a0a0c90 RCX: 0000000000459a29 [ 59.086032] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.093292] RBP: 000000000075bf20 R08: 000000011d100000 R09: 0000000000000000 [ 59.100554] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb21a0a16d4 [ 59.107800] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 59.122743] kobject: 'loop3' (00000000d1938a46): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 59.149092] RAX: 0000000000000000 RBX: ffff88807eb4a6ec RCX: 000000000000401d [ 59.156752] kobject: 'loop0' (00000000ef49a8f5): kobject_uevent_env [ 59.157963] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88807eb4a6e0 [ 59.169934] kobject: 'loop0' (00000000ef49a8f5): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 59.179538] RBP: ffff8880a01ef4f8 R08: ffffed10140df804 R09: ffffed10140df800 [ 59.187850] kobject: 'loop1' (00000000bd8d8e62): kobject_uevent_env [ 59.190921] R10: 0000000000000000 R11: ffff8880a06fc01c R12: 0000000000001000 [ 59.201992] kobject: 'loop1' (00000000bd8d8e62): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 59.202281] R13: 000000000000001d R14: ffff8880a01ef538 R15: dffffc0000000000 [ 59.220583] FAULT_INJECTION: forcing a failure. [ 59.220583] name failslab, interval 1, probability 0, space 0, times 0 [ 59.222273] FS: 00007ff7c0c1b700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 59.240571] FAULT_INJECTION: forcing a failure. [ 59.240571] name failslab, interval 1, probability 0, space 0, times 0 [ 59.251793] FAULT_INJECTION: forcing a failure. [ 59.251793] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 59.263576] CPU: 1 PID: 7124 Comm: syz-executor.3 Tainted: G D 4.19.88-syzkaller #0 [ 59.272652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.281983] Call Trace: [ 59.284569] dump_stack+0x123/0x177 [ 59.288279] should_fail.cold.4+0x5/0x13 [ 59.292316] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 59.297418] ? mark_held_locks+0x130/0x130 [ 59.301739] ? mark_held_locks+0x130/0x130 [ 59.305962] __alloc_pages_nodemask+0x1d5/0x710 [ 59.310606] ? ima_match_policy+0x5b4/0xf30 [ 59.314904] ? __alloc_pages_slowpath+0x25c0/0x25c0 [ 59.319910] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 59.324992] cache_grow_begin+0x91/0x8d0 [ 59.329041] ? kmem_cache_alloc_node+0xaa/0x730 [ 59.333688] kmem_cache_alloc_node+0x664/0x730 [ 59.338250] __alloc_skb+0xa7/0x580 [ 59.341853] ? skb_scrub_packet+0x3c0/0x3c0 [ 59.346151] ? __mutex_lock+0x340/0x1210 [ 59.350187] ? finish_task_switch+0x14a/0x720 [ 59.354658] ? finish_task_switch+0x11c/0x720 [ 59.359131] sk_stream_alloc_skb+0x9c/0x810 [ 59.363430] ? tcp_send_mss+0x1d/0x220 [ 59.367294] do_tcp_sendpages+0x749/0x1da0 [ 59.371504] ? lock_acquire+0x173/0x3d0 [ 59.375457] ? sk_stream_alloc_skb+0x810/0x810 [ 59.380017] ? do_softirq.part.13+0x10e/0x160 [ 59.384577] ? lock_sock_nested+0x82/0x100 [ 59.388787] ? __local_bh_enable_ip+0x160/0x260 [ 59.393431] ? kasan_check_read+0x11/0x20 [ 59.397553] tcp_sendpage_locked+0x63/0xa0 [ 59.401938] tcp_sendpage+0x37/0x50 [ 59.405543] inet_sendpage+0x122/0x600 [ 59.409406] ? kernel_sendpage+0xd0/0xd0 [ 59.413441] kernel_sendpage+0x60/0xd0 [ 59.417302] ? lock_downgrade+0x860/0x860 [ 59.421426] ? pipe_lock+0x4f/0x60 [ 59.424940] sock_sendpage+0x6d/0xd0 [ 59.428630] pipe_to_sendpage+0x212/0x430 [ 59.432754] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.437573] ? file_has_perm+0x24b/0x360 [ 59.441623] __splice_from_pipe+0x2cb/0x720 [ 59.445921] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.450738] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.455646] splice_from_pipe+0xbb/0x120 [ 59.459681] ? splice_shrink_spd+0xa0/0xa0 [ 59.463892] ? rw_verify_area+0xb8/0x2b0 [ 59.467927] generic_splice_sendpage+0x10/0x20 [ 59.472496] do_splice+0x4fd/0x1250 [ 59.476099] ? ksys_dup3+0x2e0/0x2e0 [ 59.479805] ? opipe_prep.part.13+0x320/0x320 [ 59.484289] ? __fget_light+0x174/0x1e0 [ 59.488244] __x64_sys_splice+0x248/0x300 [ 59.492371] do_syscall_64+0xd0/0x4e0 [ 59.496162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.501328] RIP: 0033:0x459a29 [ 59.504499] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.523402] RSP: 002b:00007f585f2e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.531089] RAX: ffffffffffffffda RBX: 00007f585f2e6c90 RCX: 0000000000459a29 [ 59.538981] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.546239] RBP: 000000000075bfc8 R08: 000000011d100000 R09: 0000000000000000 [ 59.553488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f585f2e76d4 [ 59.560844] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 59.574303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.580816] CPU: 1 PID: 7129 Comm: syz-executor.1 Tainted: G D 4.19.88-syzkaller #0 [ 59.589914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.599250] Call Trace: [ 59.601821] dump_stack+0x123/0x177 [ 59.605431] should_fail.cold.4+0x5/0x13 [ 59.609472] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 59.614555] ? lock_downgrade+0x860/0x860 [ 59.618681] ? set_page_refcounted+0x100/0x100 [ 59.623248] __should_failslab+0xba/0xf0 [ 59.627292] should_failslab+0x9/0x14 [ 59.631080] __kmalloc+0x2dd/0x770 [ 59.634609] ? tls_push_record+0xf3/0x1720 [ 59.638824] ? __sk_mem_schedule+0x5f/0xc0 [ 59.643038] tls_push_record+0xf3/0x1720 [ 59.647082] ? alloc_encrypted_sg+0x81/0x100 [ 59.651589] tls_sw_sendpage+0x458/0xc00 [ 59.655641] ? _kstrtoull+0xa0/0x1b0 [ 59.659372] ? tls_sw_sendmsg+0x1020/0x1020 [ 59.663684] inet_sendpage+0x122/0x600 [ 59.667568] ? kernel_sendpage+0xd0/0xd0 [ 59.671609] kernel_sendpage+0x60/0xd0 [ 59.675486] ? lock_downgrade+0x860/0x860 [ 59.679617] ? pipe_lock+0x4f/0x60 [ 59.683142] sock_sendpage+0x6d/0xd0 [ 59.686851] pipe_to_sendpage+0x212/0x430 [ 59.690986] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.695810] ? kasan_check_write+0x14/0x20 [ 59.700025] ? anon_pipe_buf_release+0x149/0x1f0 [ 59.704760] __splice_from_pipe+0x2cb/0x720 [ 59.709060] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.713983] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.718805] splice_from_pipe+0xbb/0x120 [ 59.722857] ? splice_shrink_spd+0xa0/0xa0 [ 59.727081] ? rw_verify_area+0xb8/0x2b0 [ 59.731122] generic_splice_sendpage+0x10/0x20 [ 59.735683] do_splice+0x4fd/0x1250 [ 59.739379] ? ksys_dup3+0x2e0/0x2e0 [ 59.743074] ? opipe_prep.part.13+0x320/0x320 [ 59.747548] ? __fget_light+0x174/0x1e0 [ 59.751501] __x64_sys_splice+0x248/0x300 [ 59.755644] do_syscall_64+0xd0/0x4e0 [ 59.759427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 59.764599] RIP: 0033:0x459a29 [ 59.764866] FAULT_INJECTION: forcing a failure. [ 59.764866] name failslab, interval 1, probability 0, space 0, times 0 [ 59.767887] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 59.767890] RSP: 002b:00007fb21a07fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 59.767895] RAX: ffffffffffffffda RBX: 00007fb21a07fc90 RCX: 0000000000459a29 [ 59.767897] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.767900] RBP: 000000000075bfc8 R08: 000000011d100000 R09: 0000000000000000 [ 59.767902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb21a0806d4 [ 59.767907] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 59.840279] kobject: 'loop3' (00000000d1938a46): kobject_uevent_env [ 59.844842] CR2: 0000000000625208 CR3: 000000009862c000 CR4: 00000000001406e0 [ 59.851758] CPU: 0 PID: 7128 Comm: syz-executor.0 Tainted: G D 4.19.88-syzkaller #0 [ 59.856165] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.865072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.865074] Call Trace: [ 59.865085] dump_stack+0x123/0x177 [ 59.865093] should_fail.cold.4+0x5/0x13 [ 59.865099] ? fault_create_debugfs_attr+0x1a0/0x1a0 [ 59.872481] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.881689] ? lock_downgrade+0x860/0x860 [ 59.881694] ? set_page_refcounted+0x100/0x100 [ 59.881702] __should_failslab+0xba/0xf0 [ 59.881707] should_failslab+0x9/0x14 [ 59.881713] __kmalloc+0x2dd/0x770 [ 59.884447] Kernel panic - not syncing: Fatal exception [ 59.887891] ? tls_push_record+0xf3/0x1720 [ 59.934058] ? __sk_mem_schedule+0x5f/0xc0 [ 59.938274] tls_push_record+0xf3/0x1720 [ 59.942314] ? __local_bh_enable_ip+0x120/0x260 [ 59.946961] ? alloc_encrypted_sg+0x81/0x100 [ 59.951364] tls_sw_sendpage+0x458/0xc00 [ 59.955405] ? _kstrtoull+0xa0/0x1b0 [ 59.959099] ? tls_sw_sendmsg+0x1020/0x1020 [ 59.963401] inet_sendpage+0x122/0x600 [ 59.967266] ? kernel_sendpage+0xd0/0xd0 [ 59.971335] kernel_sendpage+0x60/0xd0 [ 59.975209] ? lock_downgrade+0x860/0x860 [ 59.979352] ? pipe_lock+0x4f/0x60 [ 59.983016] sock_sendpage+0x6d/0xd0 [ 59.986724] pipe_to_sendpage+0x212/0x430 [ 59.990866] ? generic_pipe_buf_nosteal+0x10/0x10 [ 59.995692] ? kasan_check_write+0x14/0x20 [ 59.999907] ? anon_pipe_buf_release+0x149/0x1f0 [ 60.004644] __splice_from_pipe+0x2cb/0x720 [ 60.008948] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.013773] ? generic_pipe_buf_nosteal+0x10/0x10 [ 60.018593] splice_from_pipe+0xbb/0x120 [ 60.022631] ? splice_shrink_spd+0xa0/0xa0 [ 60.026845] ? rw_verify_area+0xb8/0x2b0 [ 60.030885] generic_splice_sendpage+0x10/0x20 [ 60.035446] do_splice+0x4fd/0x1250 [ 60.039054] ? ksys_dup3+0x2e0/0x2e0 [ 60.042746] ? opipe_prep.part.13+0x320/0x320 [ 60.047221] ? __fget_light+0x174/0x1e0 [ 60.051175] __x64_sys_splice+0x248/0x300 [ 60.055302] do_syscall_64+0xd0/0x4e0 [ 60.059081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.064249] RIP: 0033:0x459a29 [ 60.067423] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.086304] RSP: 002b:00007fa0739b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 60.093989] RAX: ffffffffffffffda RBX: 00007fa0739b5c90 RCX: 0000000000459a29 [ 60.101238] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.108486] RBP: 000000000075bfc8 R08: 000000011d100000 R09: 0000000000000000 [ 60.115736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0739b66d4 [ 60.123001] R13: 00000000004c9478 R14: 00000000004dfdd8 R15: 0000000000000005 [ 60.131603] Kernel Offset: disabled [ 60.135266] Rebooting in 86400 seconds..