./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor176352442 <...> Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. execve("./syz-executor176352442", ["./syz-executor176352442"], 0x7ffd75ee1a60 /* 10 vars */) = 0 brk(NULL) = 0x55557e6d4000 brk(0x55557e6d4d00) = 0x55557e6d4d00 arch_prctl(ARCH_SET_FS, 0x55557e6d4380) = 0 set_tid_address(0x55557e6d4650) = 297 set_robust_list(0x55557e6d4660, 24) = 0 rseq(0x55557e6d4ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor176352442", 4096) = 27 getrandom("\x80\xcd\xac\xbd\xfc\xe8\xf7\x6d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557e6d4d00 brk(0x55557e6f5d00) = 0x55557e6f5d00 brk(0x55557e6f6000) = 0x55557e6f6000 mprotect(0x7ff99b379000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 298 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x55557e6d4660, 24) = 0 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] getppid() = 0 [pid 298] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 298] unshare(CLONE_NEWNS) = 0 [pid 298] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 298] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 298] unshare(CLONE_NEWCGROUP) = 0 [pid 298] unshare(CLONE_NEWUTS) = 0 [pid 298] unshare(CLONE_SYSVSEM) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] getpid() = 1 [pid 298] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x55557e6d4660, 24) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 3 [pid 300] <... setpgid resumed>) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3) = 0 [pid 300] write(1, "executing program\n", 18) = 18 [pid 300] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 300] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 300] write(4, "9", 1) = 1 [pid 300] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 300] close(3) = 0 [pid 300] close(4) = 0 [pid 300] close(5) = -1 EBADF (Bad file descriptor) [pid 300] close(6) = -1 EBADF (Bad file descriptor) [pid 300] close(7) = -1 EBADF (Bad file descriptor) [pid 300] close(8) = -1 EBADF (Bad file descriptor) [pid 300] close(9) = -1 EBADF (Bad file descriptor) [pid 300] close(10) = -1 EBADF (Bad file descriptor) [pid 300] close(11) = -1 EBADF (Bad file descriptor) [pid 300] close(12) = -1 EBADF (Bad file descriptor) [pid 300] close(13) = -1 EBADF (Bad file descriptor) [pid 300] close(14) = -1 EBADF (Bad file descriptor) [pid 300] close(15) = -1 EBADF (Bad file descriptor) [pid 300] close(16) = -1 EBADF (Bad file descriptor) [pid 300] close(17) = -1 EBADF (Bad file descriptor) [pid 300] close(18) = -1 EBADF (Bad file descriptor) [pid 300] close(19) = -1 EBADF (Bad file descriptor) [pid 300] close(20) = -1 EBADF (Bad file descriptor) [pid 300] close(21) = -1 EBADF (Bad file descriptor) [pid 300] close(22) = -1 EBADF (Bad file descriptor) [pid 300] close(23) = -1 EBADF (Bad file descriptor) [pid 300] close(24) = -1 EBADF (Bad file descriptor) [pid 300] close(25) = -1 EBADF (Bad file descriptor) [pid 300] close(26) = -1 EBADF (Bad file descriptor) [pid 300] close(27) = -1 EBADF (Bad file descriptor) [pid 300] close(28) = -1 EBADF (Bad file descriptor) [pid 300] close(29) = -1 EBADF (Bad file descriptor) [pid 300] exit_group(0) = ? [pid 300] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 4 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x55557e6d4660, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1000", 4) = 4 [pid 301] close(3) = 0 executing program [pid 301] write(1, "executing program\n", 18) = 18 [pid 301] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 301] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 301] write(4, "9", 1) = 1 [pid 301] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 301] close(3) = 0 [pid 301] close(4) = 0 [pid 301] close(5) = -1 EBADF (Bad file descriptor) [pid 301] close(6) = -1 EBADF (Bad file descriptor) [pid 301] close(7) = -1 EBADF (Bad file descriptor) [pid 301] close(8) = -1 EBADF (Bad file descriptor) [pid 301] close(9) = -1 EBADF (Bad file descriptor) [pid 301] close(10) = -1 EBADF (Bad file descriptor) [pid 301] close(11) = -1 EBADF (Bad file descriptor) [pid 301] close(12) = -1 EBADF (Bad file descriptor) [pid 301] close(13) = -1 EBADF (Bad file descriptor) [pid 301] close(14) = -1 EBADF (Bad file descriptor) [pid 301] close(15) = -1 EBADF (Bad file descriptor) [pid 301] close(16) = -1 EBADF (Bad file descriptor) [pid 301] close(17) = -1 EBADF (Bad file descriptor) [pid 301] close(18) = -1 EBADF (Bad file descriptor) [pid 301] close(19) = -1 EBADF (Bad file descriptor) [pid 301] close(20) = -1 EBADF (Bad file descriptor) [pid 301] close(21) = -1 EBADF (Bad file descriptor) [pid 301] close(22) = -1 EBADF (Bad file descriptor) [pid 301] close(23) = -1 EBADF (Bad file descriptor) [pid 301] close(24) = -1 EBADF (Bad file descriptor) [pid 301] close(25) = -1 EBADF (Bad file descriptor) [pid 301] close(26) = -1 EBADF (Bad file descriptor) [pid 301] close(27) = -1 EBADF (Bad file descriptor) [pid 301] close(28) = -1 EBADF (Bad file descriptor) [pid 301] close(29) = -1 EBADF (Bad file descriptor) [pid 301] exit_group(0) = ? [pid 301] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>executing program ) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 5 ./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x55557e6d4660, 24) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1000", 4) = 4 [pid 302] close(3) = 0 [pid 302] write(1, "executing program\n", 18) = 18 [pid 302] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 302] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 302] write(4, "9", 1) = 1 [pid 302] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 302] close(3) = 0 [pid 302] close(4) = 0 [pid 302] close(5) = -1 EBADF (Bad file descriptor) [pid 302] close(6) = -1 EBADF (Bad file descriptor) [pid 302] close(7) = -1 EBADF (Bad file descriptor) [pid 302] close(8) = -1 EBADF (Bad file descriptor) [pid 302] close(9) = -1 EBADF (Bad file descriptor) [pid 302] close(10) = -1 EBADF (Bad file descriptor) [pid 302] close(11) = -1 EBADF (Bad file descriptor) [pid 302] close(12) = -1 EBADF (Bad file descriptor) [pid 302] close(13) = -1 EBADF (Bad file descriptor) [pid 302] close(14) = -1 EBADF (Bad file descriptor) [pid 302] close(15) = -1 EBADF (Bad file descriptor) [pid 302] close(16) = -1 EBADF (Bad file descriptor) [pid 302] close(17) = -1 EBADF (Bad file descriptor) [pid 302] close(18) = -1 EBADF (Bad file descriptor) [pid 302] close(19) = -1 EBADF (Bad file descriptor) [pid 302] close(20) = -1 EBADF (Bad file descriptor) [pid 302] close(21) = -1 EBADF (Bad file descriptor) [pid 302] close(22) = -1 EBADF (Bad file descriptor) [pid 302] close(23) = -1 EBADF (Bad file descriptor) [pid 302] close(24) = -1 EBADF (Bad file descriptor) [pid 302] close(25) = -1 EBADF (Bad file descriptor) [pid 302] close(26) = -1 EBADF (Bad file descriptor) [pid 302] close(27) = -1 EBADF (Bad file descriptor) [pid 302] close(28) = -1 EBADF (Bad file descriptor) [pid 302] close(29) = -1 EBADF (Bad file descriptor) [pid 302] exit_group(0) = ? [pid 302] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 6 ./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x55557e6d4660, 24) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 executing program [pid 303] write(1, "executing program\n", 18) = 18 [pid 303] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 303] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 303] write(4, "9", 1) = 1 [pid 303] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 303] close(3) = 0 [pid 303] close(4) = 0 [pid 303] close(5) = -1 EBADF (Bad file descriptor) [pid 303] close(6) = -1 EBADF (Bad file descriptor) [pid 303] close(7) = -1 EBADF (Bad file descriptor) [pid 303] close(8) = -1 EBADF (Bad file descriptor) [pid 303] close(9) = -1 EBADF (Bad file descriptor) [pid 303] close(10) = -1 EBADF (Bad file descriptor) [pid 303] close(11) = -1 EBADF (Bad file descriptor) [pid 303] close(12) = -1 EBADF (Bad file descriptor) [pid 303] close(13) = -1 EBADF (Bad file descriptor) [pid 303] close(14) = -1 EBADF (Bad file descriptor) [pid 303] close(15) = -1 EBADF (Bad file descriptor) [pid 303] close(16) = -1 EBADF (Bad file descriptor) [ 20.994702][ T36] audit: type=1400 audit(1750306585.580:67): avc: denied { mount } for pid=298 comm="syz-executor176" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 21.017323][ T36] audit: type=1400 audit(1750306585.590:68): avc: denied { mounton } for pid=298 comm="syz-executor176" path="/root/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [pid 303] close(17) = -1 EBADF (Bad file descriptor) [pid 303] close(18) = -1 EBADF (Bad file descriptor) [pid 303] close(19) = -1 EBADF (Bad file descriptor) [pid 303] close(20) = -1 EBADF (Bad file descriptor) [pid 303] close(21) = -1 EBADF (Bad file descriptor) [pid 303] close(22) = -1 EBADF (Bad file descriptor) [pid 303] close(23) = -1 EBADF (Bad file descriptor) [pid 303] close(24) = -1 EBADF (Bad file descriptor) [pid 303] close(25) = -1 EBADF (Bad file descriptor) [pid 303] close(26) = -1 EBADF (Bad file descriptor) [pid 303] close(27) = -1 EBADF (Bad file descriptor) [pid 303] close(28) = -1 EBADF (Bad file descriptor) [pid 303] close(29) = -1 EBADF (Bad file descriptor) [pid 303] exit_group(0) = ? [pid 303] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 7 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x55557e6d4660, 24) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3executing program ) = 0 [pid 304] write(1, "executing program\n", 18) = 18 [pid 304] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 304] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 304] write(4, "9", 1) = 1 [pid 304] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 304] close(3) = 0 [pid 304] close(4) = 0 [pid 304] close(5) = -1 EBADF (Bad file descriptor) [pid 304] close(6) = -1 EBADF (Bad file descriptor) [pid 304] close(7) = -1 EBADF (Bad file descriptor) [pid 304] close(8) = -1 EBADF (Bad file descriptor) [pid 304] close(9) = -1 EBADF (Bad file descriptor) [pid 304] close(10) = -1 EBADF (Bad file descriptor) [pid 304] close(11) = -1 EBADF (Bad file descriptor) [pid 304] close(12) = -1 EBADF (Bad file descriptor) [pid 304] close(13) = -1 EBADF (Bad file descriptor) [pid 304] close(14) = -1 EBADF (Bad file descriptor) [pid 304] close(15) = -1 EBADF (Bad file descriptor) [pid 304] close(16) = -1 EBADF (Bad file descriptor) [pid 304] close(17) = -1 EBADF (Bad file descriptor) [pid 304] close(18) = -1 EBADF (Bad file descriptor) [pid 304] close(19) = -1 EBADF (Bad file descriptor) [pid 304] close(20) = -1 EBADF (Bad file descriptor) [pid 304] close(21) = -1 EBADF (Bad file descriptor) [pid 304] close(22) = -1 EBADF (Bad file descriptor) [pid 304] close(23) = -1 EBADF (Bad file descriptor) [pid 304] close(24) = -1 EBADF (Bad file descriptor) [pid 304] close(25) = -1 EBADF (Bad file descriptor) [pid 304] close(26) = -1 EBADF (Bad file descriptor) [pid 304] close(27) = -1 EBADF (Bad file descriptor) [pid 304] close(28) = -1 EBADF (Bad file descriptor) [pid 304] close(29) = -1 EBADF (Bad file descriptor) [pid 304] exit_group(0) = ? [pid 304] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 21.041885][ T36] audit: type=1400 audit(1750306585.590:69): avc: denied { mount } for pid=298 comm="syz-executor176" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 21.064341][ T36] audit: type=1400 audit(1750306585.590:70): avc: denied { mounton } for pid=298 comm="syz-executor176" path="/root/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 305 attached , child_tidptr=0x55557e6d4650) = 8 [pid 305] set_robust_list(0x55557e6d4660, 24) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3executing program ) = 0 [pid 305] write(1, "executing program\n", 18) = 18 [pid 305] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 305] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 305] write(4, "9", 1) = 1 [pid 305] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 305] close(3) = 0 [pid 305] close(4) = 0 [pid 305] close(5) = -1 EBADF (Bad file descriptor) [pid 305] close(6) = -1 EBADF (Bad file descriptor) [pid 305] close(7) = -1 EBADF (Bad file descriptor) [pid 305] close(8) = -1 EBADF (Bad file descriptor) [pid 305] close(9) = -1 EBADF (Bad file descriptor) [pid 305] close(10) = -1 EBADF (Bad file descriptor) [pid 305] close(11) = -1 EBADF (Bad file descriptor) [pid 305] close(12) = -1 EBADF (Bad file descriptor) [pid 305] close(13) = -1 EBADF (Bad file descriptor) [pid 305] close(14) = -1 EBADF (Bad file descriptor) [pid 305] close(15) = -1 EBADF (Bad file descriptor) [pid 305] close(16) = -1 EBADF (Bad file descriptor) [pid 305] close(17) = -1 EBADF (Bad file descriptor) [pid 305] close(18) = -1 EBADF (Bad file descriptor) [pid 305] close(19) = -1 EBADF (Bad file descriptor) [pid 305] close(20) = -1 EBADF (Bad file descriptor) [pid 305] close(21) = -1 EBADF (Bad file descriptor) [pid 305] close(22) = -1 EBADF (Bad file descriptor) [pid 305] close(23) = -1 EBADF (Bad file descriptor) [pid 305] close(24) = -1 EBADF (Bad file descriptor) [pid 305] close(25) = -1 EBADF (Bad file descriptor) [pid 305] close(26) = -1 EBADF (Bad file descriptor) [pid 305] close(27) = -1 EBADF (Bad file descriptor) [pid 305] close(28) = -1 EBADF (Bad file descriptor) [pid 305] close(29) = -1 EBADF (Bad file descriptor) [pid 305] exit_group(0) = ? [pid 305] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 9 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x55557e6d4660, 24) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 executing program [pid 306] close(3) = 0 [pid 306] write(1, "executing program\n", 18) = 18 [pid 306] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 306] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 306] write(4, "9", 1) = 1 [pid 306] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 306] close(3) = 0 [pid 306] close(4) = 0 [pid 306] close(5) = -1 EBADF (Bad file descriptor) [pid 306] close(6) = -1 EBADF (Bad file descriptor) [pid 306] close(7) = -1 EBADF (Bad file descriptor) [pid 306] close(8) = -1 EBADF (Bad file descriptor) [pid 306] close(9) = -1 EBADF (Bad file descriptor) [pid 306] close(10) = -1 EBADF (Bad file descriptor) [pid 306] close(11) = -1 EBADF (Bad file descriptor) [pid 306] close(12) = -1 EBADF (Bad file descriptor) [pid 306] close(13) = -1 EBADF (Bad file descriptor) [pid 306] close(14) = -1 EBADF (Bad file descriptor) [pid 306] close(15) = -1 EBADF (Bad file descriptor) [pid 306] close(16) = -1 EBADF (Bad file descriptor) [pid 306] close(17) = -1 EBADF (Bad file descriptor) [pid 306] close(18) = -1 EBADF (Bad file descriptor) [pid 306] close(19) = -1 EBADF (Bad file descriptor) [pid 306] close(20) = -1 EBADF (Bad file descriptor) [pid 306] close(21) = -1 EBADF (Bad file descriptor) [pid 306] close(22) = -1 EBADF (Bad file descriptor) [pid 306] close(23) = -1 EBADF (Bad file descriptor) [pid 306] close(24) = -1 EBADF (Bad file descriptor) [pid 306] close(25) = -1 EBADF (Bad file descriptor) [pid 306] close(26) = -1 EBADF (Bad file descriptor) [pid 306] close(27) = -1 EBADF (Bad file descriptor) [pid 306] close(28) = -1 EBADF (Bad file descriptor) [pid 306] close(29) = -1 EBADF (Bad file descriptor) [pid 306] exit_group(0) = ? [pid 306] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 10 ./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x55557e6d4660, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3executing program ) = 0 [pid 307] write(1, "executing program\n", 18) = 18 [pid 307] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 307] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 307] write(4, "9", 1) = 1 [ 21.089815][ T36] audit: type=1400 audit(1750306585.590:71): avc: denied { mounton } for pid=298 comm="syz-executor176" path="/root/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 21.116056][ T36] audit: type=1400 audit(1750306585.590:72): avc: denied { unmount } for pid=298 comm="syz-executor176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 21.136448][ T36] audit: type=1400 audit(1750306585.620:73): avc: denied { mounton } for pid=298 comm="syz-executor176" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 21.141725][ T307] FAULT_INJECTION: forcing a failure. [ 21.141725][ T307] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 21.172571][ T307] CPU: 0 UID: 0 PID: 307 Comm: syz-executor176 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 21.172589][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 21.172595][ T307] Call Trace: [ 21.172598][ T307] [ 21.172602][ T307] __dump_stack+0x21/0x30 [ 21.172618][ T307] dump_stack_lvl+0x10c/0x190 [ 21.172628][ T307] ? __cfi_dump_stack_lvl+0x10/0x10 [ 21.172638][ T307] ? kasan_save_free_info+0x4a/0x60 [ 21.172647][ T307] ? kmem_cache_free+0x1c1/0x4c0 [ 21.172657][ T307] ? unlink_anon_vmas+0x2c6/0x5c0 [ 21.172666][ T307] ? free_pgtables+0x2a9/0x730 [ 21.172676][ T307] ? vms_clean_up_area+0x66/0x1d0 [ 21.172686][ T307] dump_stack+0x19/0x20 [ 21.172695][ T307] should_fail_ex+0x3d9/0x530 [ 21.172704][ T307] should_fail_alloc_page+0xeb/0x110 [ 21.172715][ T307] __alloc_pages_noprof+0x19d/0x6c0 [ 21.172724][ T307] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 21.172733][ T307] ? is_bpf_text_address+0x17b/0x1a0 [ 21.172744][ T307] ? kernel_text_address+0xa9/0xe0 [ 21.172753][ T307] ? unwind_get_return_address+0x51/0x90 [ 21.172762][ T307] pte_alloc_one+0x97/0x520 [ 21.172772][ T307] ? __cfi_pte_alloc_one+0x10/0x10 [ 21.172783][ T307] ? pagerange_is_ram_callback+0xf4/0x150 [ 21.172794][ T307] __pte_alloc+0x79/0x420 [ 21.172803][ T307] ? __cfi___pte_alloc+0x10/0x10 [ 21.172812][ T307] ? pat_pagerange_is_ram+0xf4/0x140 [ 21.172822][ T307] ? cattr_name+0xc0/0xc0 [ 21.172832][ T307] remap_pfn_range_notrack+0x8d0/0xb00 [ 21.172843][ T307] ? lookup_memtype+0xe3/0x190 [ 21.172854][ T307] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 21.172864][ T307] ? __kasan_check_read+0x15/0x20 [ 21.172873][ T307] ? track_pfn_remap+0x2a7/0x340 [ 21.172884][ T307] remap_pfn_range+0xf1/0x170 [ 21.172894][ T307] ? __cfi_remap_pfn_range+0x10/0x10 [ 21.172904][ T307] ? kasan_save_alloc_info+0x40/0x50 [ 21.172912][ T307] sel_mmap_handle_status+0x2d8/0x3c0 [ 21.172922][ T307] mmap_region+0x1371/0x1bd0 [ 21.172932][ T307] ? __cfi_mmap_region+0x10/0x10 [ 21.172941][ T307] ? sched_clock+0x44/0x60 [ 21.172950][ T307] ? __kasan_check_read+0x15/0x20 [ 21.172959][ T307] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 21.172971][ T307] ? __get_unmapped_area+0x407/0x470 [ 21.172980][ T307] ? file_mmap_ok+0x147/0x1a0 [ 21.172990][ T307] do_mmap+0xb6d/0x13c0 [ 21.172999][ T307] ? __cfi_do_mmap+0x10/0x10 [ 21.173007][ T307] ? down_write_killable+0xe9/0x2d0 [ 21.173017][ T307] ? __cfi_down_write_killable+0x10/0x10 [ 21.173026][ T307] vm_mmap_pgoff+0x38f/0x4e0 [ 21.173036][ T307] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 21.173045][ T307] ? __fget_files+0x2c5/0x340 [ 21.173057][ T307] ksys_mmap_pgoff+0x166/0x1e0 [ 21.173066][ T307] __x64_sys_mmap+0x121/0x140 [ 21.173076][ T307] x64_sys_call+0x13bf/0x2ee0 [ 21.173087][ T307] do_syscall_64+0x58/0xf0 [ 21.173097][ T307] ? clear_bhb_loop+0x35/0x90 [ 21.173109][ T307] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 21.173120][ T307] RIP: 0033:0x7ff99b30dd79 [ 21.173128][ T307] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 21.173135][ T307] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 21.173146][ T307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 21.173152][ T307] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 21.173158][ T307] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 21.173163][ T307] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000005271 [ 21.173169][ T307] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 21.173176][ T307] [ 21.173200][ T307] ------------[ cut here ]------------ [ 21.543451][ T307] WARNING: CPU: 0 PID: 307 at arch/x86/mm/pat/memtype.c:983 untrack_pfn+0x450/0x540 [ 21.552846][ T307] Modules linked in: [ 21.556740][ T307] CPU: 0 UID: 0 PID: 307 Comm: syz-executor176 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 21.570576][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 21.580648][ T307] RIP: 0010:untrack_pfn+0x450/0x540 [ 21.585870][ T307] Code: 00 00 fc ff df 0f 84 a8 00 00 00 e8 7a 5f 3f 00 4c 8b 74 24 10 4d 85 f6 0f 85 bf fe ff ff e8 67 5f 3f 00 eb 47 e8 60 5f 3f 00 <0f> 0b 49 bd 00 00 00 00 00 fc ff df eb 34 e8 4d 5f 3f 00 4c 8b 7c [ 21.605502][ T307] RSP: 0018:ffffc9000112f380 EFLAGS: 00010293 [ 21.611742][ T307] RAX: ffffffff81461df0 RBX: 1ffff92000225e74 RCX: ffff8881072f1300 [ 21.619796][ T307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 21.627868][ T307] RBP: ffffc9000112f490 R08: ffffc9000112f417 R09: 0000000000000000 [ 21.636030][ T307] R10: ffffc9000112f3f0 R11: fffff52000225e83 R12: ffffc9000112f3e0 [ 21.644017][ T307] R13: 1ffff11023e8a2f0 R14: 0000000000000000 R15: 0000000000000000 [ 21.651975][ T307] FS: 000055557e6d4380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 21.660903][ T307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.667525][ T307] CR2: 00007ff99b363589 CR3: 0000000106ea2000 CR4: 00000000003526b0 [ 21.675626][ T307] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.683816][ T307] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.691818][ T307] Call Trace: [ 21.695129][ T307] [ 21.698060][ T307] ? __cfi_untrack_pfn+0x10/0x10 [ 21.703029][ T307] ? lru_add_drain_cpu+0x2f7/0x430 [ 21.708240][ T307] ? uprobe_munmap+0x181/0x490 [ 21.713044][ T307] ? tlb_gather_mmu+0x236/0x300 [ 21.717902][ T307] zap_page_range_single+0x462/0x470 [ 21.723199][ T307] ? __cfi_zap_page_range_single+0x10/0x10 [ 21.729003][ T307] ? pagerange_is_ram_callback+0xf4/0x150 [ 21.734737][ T307] ? __cfi___pte_alloc+0x10/0x10 [ 21.739683][ T307] ? pat_pagerange_is_ram+0xf4/0x140 [ 21.744974][ T307] ? cattr_name+0xc0/0xc0 [ 21.749303][ T307] remap_pfn_range_notrack+0x9be/0xb00 [ 21.754817][ T307] ? lookup_memtype+0xe3/0x190 [ 21.759810][ T307] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 21.765889][ T307] ? __kasan_check_read+0x15/0x20 [ 21.770928][ T307] ? track_pfn_remap+0x2a7/0x340 [ 21.775997][ T307] remap_pfn_range+0xf1/0x170 [ 21.780776][ T307] ? __cfi_remap_pfn_range+0x10/0x10 [ 21.786097][ T307] ? kasan_save_alloc_info+0x40/0x50 [ 21.791567][ T307] sel_mmap_handle_status+0x2d8/0x3c0 [ 21.796946][ T307] mmap_region+0x1371/0x1bd0 [ 21.801562][ T307] ? __cfi_mmap_region+0x10/0x10 [ 21.806589][ T307] ? sched_clock+0x44/0x60 [ 21.811003][ T307] ? __kasan_check_read+0x15/0x20 [ 21.816032][ T307] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 21.822311][ T307] ? __get_unmapped_area+0x407/0x470 [ 21.827671][ T307] ? file_mmap_ok+0x147/0x1a0 [ 21.832392][ T307] do_mmap+0xb6d/0x13c0 [ 21.836554][ T307] ? __cfi_do_mmap+0x10/0x10 [ 21.841153][ T307] ? down_write_killable+0xe9/0x2d0 [ 21.846534][ T307] ? __cfi_down_write_killable+0x10/0x10 [ 21.852218][ T307] vm_mmap_pgoff+0x38f/0x4e0 [ 21.856828][ T307] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 21.861927][ T307] ? __fget_files+0x2c5/0x340 [ 21.866616][ T307] ksys_mmap_pgoff+0x166/0x1e0 [ 21.871376][ T307] __x64_sys_mmap+0x121/0x140 [ 21.876093][ T307] x64_sys_call+0x13bf/0x2ee0 [ 21.880767][ T307] do_syscall_64+0x58/0xf0 [ 21.885186][ T307] ? clear_bhb_loop+0x35/0x90 [ 21.889860][ T307] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 21.895839][ T307] RIP: 0033:0x7ff99b30dd79 [ 21.900249][ T307] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 21.919902][ T307] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 21.928341][ T307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 21.936327][ T307] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 21.944309][ T307] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [pid 307] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 307] close(3) = 0 [pid 307] close(4) = 0 [pid 307] close(5) = -1 EBADF (Bad file descriptor) [pid 307] close(6) = -1 EBADF (Bad file descriptor) [pid 307] close(7) = -1 EBADF (Bad file descriptor) [pid 307] close(8) = -1 EBADF (Bad file descriptor) [pid 307] close(9) = -1 EBADF (Bad file descriptor) [pid 307] close(10) = -1 EBADF (Bad file descriptor) [pid 307] close(11) = -1 EBADF (Bad file descriptor) [pid 307] close(12) = -1 EBADF (Bad file descriptor) [pid 307] close(13) = -1 EBADF (Bad file descriptor) [pid 307] close(14) = -1 EBADF (Bad file descriptor) [pid 307] close(15) = -1 EBADF (Bad file descriptor) [pid 307] close(16) = -1 EBADF (Bad file descriptor) [pid 307] close(17) = -1 EBADF (Bad file descriptor) [pid 307] close(18) = -1 EBADF (Bad file descriptor) [pid 307] close(19) = -1 EBADF (Bad file descriptor) [pid 307] close(20) = -1 EBADF (Bad file descriptor) [pid 307] close(21) = -1 EBADF (Bad file descriptor) [pid 307] close(22) = -1 EBADF (Bad file descriptor) [pid 307] close(23) = -1 EBADF (Bad file descriptor) [pid 307] close(24) = -1 EBADF (Bad file descriptor) [pid 307] close(25) = -1 EBADF (Bad file descriptor) [pid 307] close(26) = -1 EBADF (Bad file descriptor) [pid 307] close(27) = -1 EBADF (Bad file descriptor) [pid 307] close(28) = -1 EBADF (Bad file descriptor) [pid 307] close(29) = -1 EBADF (Bad file descriptor) [pid 307] exit_group(0) = ? [pid 307] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=78} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 308 attached , child_tidptr=0x55557e6d4650) = 11 [pid 308] set_robust_list(0x55557e6d4660, 24) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 executing program [pid 308] write(1, "executing program\n", 18) = 18 [pid 308] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 308] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 308] write(4, "9", 1) = 1 [pid 308] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 308] close(3) = 0 [pid 308] close(4) = 0 [pid 308] close(5) = -1 EBADF (Bad file descriptor) [pid 308] close(6) = -1 EBADF (Bad file descriptor) [pid 308] close(7) = -1 EBADF (Bad file descriptor) [pid 308] close(8) = -1 EBADF (Bad file descriptor) [pid 308] close(9) = -1 EBADF (Bad file descriptor) [pid 308] close(10) = -1 EBADF (Bad file descriptor) [pid 308] close(11) = -1 EBADF (Bad file descriptor) [pid 308] close(12) = -1 EBADF (Bad file descriptor) [pid 308] close(13) = -1 EBADF (Bad file descriptor) [pid 308] close(14) = -1 EBADF (Bad file descriptor) [pid 308] close(15) = -1 EBADF (Bad file descriptor) [pid 308] close(16) = -1 EBADF (Bad file descriptor) [pid 308] close(17) = -1 EBADF (Bad file descriptor) [pid 308] close(18) = -1 EBADF (Bad file descriptor) [pid 308] close(19) = -1 EBADF (Bad file descriptor) [pid 308] close(20) = -1 EBADF (Bad file descriptor) [pid 308] close(21) = -1 EBADF (Bad file descriptor) [pid 308] close(22) = -1 EBADF (Bad file descriptor) [pid 308] close(23) = -1 EBADF (Bad file descriptor) [pid 308] close(24) = -1 EBADF (Bad file descriptor) [pid 308] close(25) = -1 EBADF (Bad file descriptor) [pid 308] close(26) = -1 EBADF (Bad file descriptor) [pid 308] close(27) = -1 EBADF (Bad file descriptor) [pid 308] close(28) = -1 EBADF (Bad file descriptor) [pid 308] close(29) = -1 EBADF (Bad file descriptor) [pid 308] exit_group(0) = ? [pid 308] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 309 attached , child_tidptr=0x55557e6d4650) = 12 [pid 309] set_robust_list(0x55557e6d4660, 24) = 0 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] setpgid(0, 0) = 0 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 executing program [pid 309] write(1, "executing program\n", 18) = 18 [pid 309] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 309] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 309] write(4, "9", 1) = 1 [pid 309] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 309] close(3) = 0 [pid 309] close(4) = 0 [pid 309] close(5) = -1 EBADF (Bad file descriptor) [pid 309] close(6) = -1 EBADF (Bad file descriptor) [pid 309] close(7) = -1 EBADF (Bad file descriptor) [pid 309] close(8) = -1 EBADF (Bad file descriptor) [pid 309] close(9) = -1 EBADF (Bad file descriptor) [pid 309] close(10) = -1 EBADF (Bad file descriptor) [pid 309] close(11) = -1 EBADF (Bad file descriptor) [pid 309] close(12) = -1 EBADF (Bad file descriptor) [pid 309] close(13) = -1 EBADF (Bad file descriptor) [pid 309] close(14) = -1 EBADF (Bad file descriptor) [pid 309] close(15) = -1 EBADF (Bad file descriptor) [pid 309] close(16) = -1 EBADF (Bad file descriptor) [pid 309] close(17) = -1 EBADF (Bad file descriptor) [pid 309] close(18) = -1 EBADF (Bad file descriptor) [pid 309] close(19) = -1 EBADF (Bad file descriptor) [pid 309] close(20) = -1 EBADF (Bad file descriptor) [pid 309] close(21) = -1 EBADF (Bad file descriptor) [pid 309] close(22) = -1 EBADF (Bad file descriptor) [pid 309] close(23) = -1 EBADF (Bad file descriptor) [pid 309] close(24) = -1 EBADF (Bad file descriptor) [pid 309] close(25) = -1 EBADF (Bad file descriptor) [pid 309] close(26) = -1 EBADF (Bad file descriptor) [pid 309] close(27) = -1 EBADF (Bad file descriptor) [pid 309] close(28) = -1 EBADF (Bad file descriptor) [pid 309] close(29) = -1 EBADF (Bad file descriptor) [pid 309] exit_group(0) = ? [pid 309] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 21.952321][ T307] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000005271 [ 21.960288][ T307] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 21.968281][ T307] [ 21.971295][ T307] ---[ end trace 0000000000000000 ]--- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 310 attached , child_tidptr=0x55557e6d4650) = 13 [pid 310] set_robust_list(0x55557e6d4660, 24) = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3) = 0 executing program [pid 310] write(1, "executing program\n", 18) = 18 [pid 310] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 310] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 310] write(4, "9", 1) = 1 [pid 310] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 310] close(3) = 0 [pid 310] close(4) = 0 [pid 310] close(5) = -1 EBADF (Bad file descriptor) [pid 310] close(6) = -1 EBADF (Bad file descriptor) [pid 310] close(7) = -1 EBADF (Bad file descriptor) [pid 310] close(8) = -1 EBADF (Bad file descriptor) [pid 310] close(9) = -1 EBADF (Bad file descriptor) [pid 310] close(10) = -1 EBADF (Bad file descriptor) [pid 310] close(11) = -1 EBADF (Bad file descriptor) [pid 310] close(12) = -1 EBADF (Bad file descriptor) [pid 310] close(13) = -1 EBADF (Bad file descriptor) [pid 310] close(14) = -1 EBADF (Bad file descriptor) [pid 310] close(15) = -1 EBADF (Bad file descriptor) [ 22.024206][ T310] FAULT_INJECTION: forcing a failure. [ 22.024206][ T310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 22.037768][ T310] CPU: 0 UID: 0 PID: 310 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 22.037795][ T310] Tainted: [W]=WARN [ 22.037800][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 22.037809][ T310] Call Trace: [pid 310] close(16) = -1 EBADF (Bad file descriptor) executing program executing program [pid 310] close(17) = -1 EBADF (Bad file descriptor) [pid 310] close(18) = -1 EBADF (Bad file descriptor) [pid 310] close(19) = -1 EBADF (Bad file descriptor) [pid 310] close(20) = -1 EBADF (Bad file descriptor) [pid 310] close(21) = -1 EBADF (Bad file descriptor) [pid 310] close(22) = -1 EBADF (Bad file descriptor) [pid 310] close(23) = -1 EBADF (Bad file descriptor) [pid 310] close(24) = -1 EBADF (Bad file descriptor) [pid 310] close(25) = -1 EBADF (Bad file descriptor) [pid 310] close(26) = -1 EBADF (Bad file descriptor) [pid 310] close(27) = -1 EBADF (Bad file descriptor) [pid 310] close(28) = -1 EBADF (Bad file descriptor) [pid 310] close(29) = -1 EBADF (Bad file descriptor) [pid 310] exit_group(0) = ? [pid 310] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x55557e6d4660, 24) = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 14 [pid 311] <... prctl resumed>) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 [pid 311] write(1, "executing program\n", 18) = 18 [pid 311] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 311] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 311] write(4, "9", 1) = 1 [pid 311] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 311] close(3) = 0 [pid 311] close(4) = 0 [pid 311] close(5) = -1 EBADF (Bad file descriptor) [pid 311] close(6) = -1 EBADF (Bad file descriptor) [pid 311] close(7) = -1 EBADF (Bad file descriptor) [pid 311] close(8) = -1 EBADF (Bad file descriptor) [pid 311] close(9) = -1 EBADF (Bad file descriptor) [pid 311] close(10) = -1 EBADF (Bad file descriptor) [pid 311] close(11) = -1 EBADF (Bad file descriptor) [pid 311] close(12) = -1 EBADF (Bad file descriptor) [pid 311] close(13) = -1 EBADF (Bad file descriptor) [pid 311] close(14) = -1 EBADF (Bad file descriptor) [pid 311] close(15) = -1 EBADF (Bad file descriptor) [pid 311] close(16) = -1 EBADF (Bad file descriptor) [pid 311] close(17) = -1 EBADF (Bad file descriptor) [pid 311] close(18) = -1 EBADF (Bad file descriptor) [pid 311] close(19) = -1 EBADF (Bad file descriptor) [pid 311] close(20) = -1 EBADF (Bad file descriptor) [pid 311] close(21) = -1 EBADF (Bad file descriptor) [pid 311] close(22) = -1 EBADF (Bad file descriptor) [pid 311] close(23) = -1 EBADF (Bad file descriptor) [pid 311] close(24) = -1 EBADF (Bad file descriptor) [pid 311] close(25) = -1 EBADF (Bad file descriptor) [pid 311] close(26) = -1 EBADF (Bad file descriptor) [pid 311] close(27) = -1 EBADF (Bad file descriptor) [pid 311] close(28) = -1 EBADF (Bad file descriptor) [pid 311] close(29) = -1 EBADF (Bad file descriptor) [pid 311] exit_group(0) = ? [pid 311] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 312 attached , child_tidptr=0x55557e6d4650) = 15 [pid 312] set_robust_list(0x55557e6d4660, 24) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] write(1, "executing program\n", 18) = 18 [pid 312] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 312] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 312] write(4, "9", 1) = 1 [ 22.037815][ T310] [ 22.037823][ T310] __dump_stack+0x21/0x30 [ 22.037850][ T310] dump_stack_lvl+0x10c/0x190 [ 22.037869][ T310] ? __cfi_dump_stack_lvl+0x10/0x10 [ 22.037890][ T310] ? kasan_save_free_info+0x4a/0x60 [ 22.037909][ T310] ? kmem_cache_free+0x1c1/0x4c0 [ 22.037923][ T310] ? unlink_anon_vmas+0x2c6/0x5c0 [ 22.037935][ T310] ? free_pgtables+0x2a9/0x730 [ 22.037947][ T310] ? vms_clean_up_area+0x66/0x1d0 [ 22.037960][ T310] dump_stack+0x19/0x20 [ 22.037972][ T310] should_fail_ex+0x3d9/0x530 [ 22.037985][ T310] should_fail_alloc_page+0xeb/0x110 [ 22.037999][ T310] __alloc_pages_noprof+0x19d/0x6c0 [ 22.038010][ T310] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 22.038021][ T310] ? is_bpf_text_address+0x17b/0x1a0 [ 22.038035][ T310] ? kernel_text_address+0xa9/0xe0 [ 22.038047][ T310] ? unwind_get_return_address+0x51/0x90 [ 22.038058][ T310] pte_alloc_one+0x97/0x520 [ 22.038072][ T310] ? __cfi_pte_alloc_one+0x10/0x10 [ 22.038091][ T310] ? pagerange_is_ram_callback+0xf4/0x150 [ 22.038106][ T310] __pte_alloc+0x79/0x420 [ 22.038118][ T310] ? __cfi___pte_alloc+0x10/0x10 [ 22.038129][ T310] ? pat_pagerange_is_ram+0xf4/0x140 [ 22.038142][ T310] ? cattr_name+0xc0/0xc0 [ 22.038155][ T310] remap_pfn_range_notrack+0x8d0/0xb00 [ 22.038168][ T310] ? lookup_memtype+0xe3/0x190 [ 22.038182][ T310] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 22.038196][ T310] ? __kasan_check_read+0x15/0x20 [ 22.038207][ T310] ? track_pfn_remap+0x2a7/0x340 [ 22.038222][ T310] remap_pfn_range+0xf1/0x170 [ 22.038235][ T310] ? __cfi_remap_pfn_range+0x10/0x10 [ 22.038247][ T310] ? kasan_save_alloc_info+0x40/0x50 [ 22.038259][ T310] sel_mmap_handle_status+0x2d8/0x3c0 [ 22.038271][ T310] mmap_region+0x1371/0x1bd0 [ 22.038283][ T310] ? __cfi_mmap_region+0x10/0x10 [ 22.038295][ T310] ? sched_clock+0x44/0x60 [ 22.038315][ T310] ? __kasan_check_read+0x15/0x20 [ 22.038327][ T310] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 22.038343][ T310] ? __get_unmapped_area+0x407/0x470 [ 22.038355][ T310] ? file_mmap_ok+0x147/0x1a0 [ 22.038367][ T310] do_mmap+0xb6d/0x13c0 [ 22.038379][ T310] ? __cfi_do_mmap+0x10/0x10 [ 22.038390][ T310] ? down_write_killable+0xe9/0x2d0 [ 22.038402][ T310] ? __cfi_down_write_killable+0x10/0x10 [ 22.038413][ T310] vm_mmap_pgoff+0x38f/0x4e0 [ 22.038426][ T310] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 22.038438][ T310] ? __fget_files+0x2c5/0x340 [ 22.038452][ T310] ksys_mmap_pgoff+0x166/0x1e0 [ 22.038461][ T310] __x64_sys_mmap+0x121/0x140 [ 22.038471][ T310] x64_sys_call+0x13bf/0x2ee0 [ 22.038481][ T310] do_syscall_64+0x58/0xf0 [ 22.038491][ T310] ? clear_bhb_loop+0x35/0x90 [ 22.038503][ T310] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 22.038515][ T310] RIP: 0033:0x7ff99b30dd79 [ 22.038524][ T310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 22.038531][ T310] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 22.038541][ T310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 22.038548][ T310] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 22.038554][ T310] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 22.038559][ T310] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000000055d8 [ 22.038564][ T310] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 22.038571][ T310] [ 22.102654][ T312] FAULT_INJECTION: forcing a failure. [ 22.102654][ T312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [pid 312] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 312] close(3) = 0 [pid 312] close(4) = 0 [pid 312] close(5) = -1 EBADF (Bad file descriptor) [pid 312] close(6) = -1 EBADF (Bad file descriptor) [pid 312] close(7) = -1 EBADF (Bad file descriptor) [pid 312] close(8) = -1 EBADF (Bad file descriptor) [pid 312] close(9) = -1 EBADF (Bad file descriptor) [pid 312] close(10) = -1 EBADF (Bad file descriptor) [pid 312] close(11) = -1 EBADF (Bad file descriptor) [pid 312] close(12) = -1 EBADF (Bad file descriptor) [pid 312] close(13) = -1 EBADF (Bad file descriptor) [pid 312] close(14) = -1 EBADF (Bad file descriptor) [pid 312] close(15) = -1 EBADF (Bad file descriptor) [pid 312] close(16) = -1 EBADF (Bad file descriptor) [pid 312] close(17) = -1 EBADF (Bad file descriptor) [pid 312] close(18) = -1 EBADF (Bad file descriptor) [pid 312] close(19) = -1 EBADF (Bad file descriptor) [pid 312] close(20) = -1 EBADF (Bad file descriptor) [pid 312] close(21) = -1 EBADF (Bad file descriptor) [pid 312] close(22) = -1 EBADF (Bad file descriptor) [pid 312] close(23) = -1 EBADF (Bad file descriptor) [pid 312] close(24) = -1 EBADF (Bad file descriptor) [pid 312] close(25) = -1 EBADF (Bad file descriptor) [pid 312] close(26) = -1 EBADF (Bad file descriptor) [pid 312] close(27) = -1 EBADF (Bad file descriptor) [pid 312] close(28) = -1 EBADF (Bad file descriptor) [pid 312] close(29) = -1 EBADF (Bad file descriptor) [pid 312] exit_group(0) = ? [pid 312] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=31} --- [ 22.426085][ T312] CPU: 1 UID: 0 PID: 312 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 22.426104][ T312] Tainted: [W]=WARN [ 22.426108][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 22.426112][ T312] Call Trace: [ 22.426116][ T312] [ 22.426121][ T312] __dump_stack+0x21/0x30 [ 22.426136][ T312] dump_stack_lvl+0x10c/0x190 [ 22.426146][ T312] ? __cfi_dump_stack_lvl+0x10/0x10 [ 22.426156][ T312] ? kasan_save_free_info+0x4a/0x60 [ 22.426166][ T312] ? kmem_cache_free+0x1c1/0x4c0 [ 22.426176][ T312] ? unlink_anon_vmas+0x2c6/0x5c0 [ 22.426185][ T312] ? free_pgtables+0x2a9/0x730 [ 22.426195][ T312] ? vms_clean_up_area+0x66/0x1d0 [ 22.426205][ T312] dump_stack+0x19/0x20 [ 22.426214][ T312] should_fail_ex+0x3d9/0x530 [ 22.426223][ T312] should_fail_alloc_page+0xeb/0x110 [ 22.426235][ T312] __alloc_pages_noprof+0x19d/0x6c0 [ 22.426243][ T312] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 22.426252][ T312] ? is_bpf_text_address+0x17b/0x1a0 [ 22.426263][ T312] ? kernel_text_address+0xa9/0xe0 [ 22.426273][ T312] ? unwind_get_return_address+0x51/0x90 [ 22.426287][ T312] pte_alloc_one+0x97/0x520 [ 22.426297][ T312] ? __cfi_pte_alloc_one+0x10/0x10 [ 22.426308][ T312] ? pagerange_is_ram_callback+0xf4/0x150 [ 22.426320][ T312] __pte_alloc+0x79/0x420 [ 22.426329][ T312] ? __cfi___pte_alloc+0x10/0x10 [ 22.426338][ T312] ? pat_pagerange_is_ram+0xf4/0x140 [ 22.426348][ T312] ? cattr_name+0xc0/0xc0 [ 22.426358][ T312] remap_pfn_range_notrack+0x8d0/0xb00 [ 22.426368][ T312] ? lookup_memtype+0xe3/0x190 [ 22.426379][ T312] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 22.426390][ T312] ? __kasan_check_read+0x15/0x20 [ 22.426398][ T312] ? track_pfn_remap+0x2a7/0x340 [ 22.426409][ T312] remap_pfn_range+0xf1/0x170 [ 22.426419][ T312] ? __cfi_remap_pfn_range+0x10/0x10 [ 22.426429][ T312] ? kasan_save_alloc_info+0x40/0x50 [ 22.426438][ T312] sel_mmap_handle_status+0x2d8/0x3c0 [ 22.426447][ T312] mmap_region+0x1371/0x1bd0 [ 22.426457][ T312] ? __cfi_mmap_region+0x10/0x10 [ 22.426467][ T312] ? __kasan_check_read+0x15/0x20 [ 22.426475][ T312] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 22.426488][ T312] ? __get_unmapped_area+0x407/0x470 [ 22.426497][ T312] ? file_mmap_ok+0x147/0x1a0 [ 22.426507][ T312] do_mmap+0xb6d/0x13c0 [ 22.426516][ T312] ? __cfi_do_mmap+0x10/0x10 [ 22.426525][ T312] ? down_write_killable+0xe9/0x2d0 [ 22.426536][ T312] ? __cfi_down_write_killable+0x10/0x10 [ 22.426544][ T312] vm_mmap_pgoff+0x38f/0x4e0 [ 22.426555][ T312] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 22.426564][ T312] ? __fget_files+0x2c5/0x340 [ 22.426575][ T312] ksys_mmap_pgoff+0x166/0x1e0 [ 22.426585][ T312] __x64_sys_mmap+0x121/0x140 [ 22.426595][ T312] x64_sys_call+0x13bf/0x2ee0 [ 22.426606][ T312] do_syscall_64+0x58/0xf0 [ 22.426616][ T312] ? clear_bhb_loop+0x35/0x90 [ 22.426628][ T312] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 22.426639][ T312] RIP: 0033:0x7ff99b30dd79 [ 22.426647][ T312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 22.426654][ T312] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 22.426665][ T312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 22.426672][ T312] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 22.426678][ T312] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 313 attached , child_tidptr=0x55557e6d4650) = 16 [pid 313] set_robust_list(0x55557e6d4660, 24) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] write(1, "executing program\n", 18executing program ) = 18 [pid 313] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 313] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 313] write(4, "9", 1) = 1 [pid 313] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 313] close(3) = 0 [pid 313] close(4) = 0 [pid 313] close(5) = -1 EBADF (Bad file descriptor) [pid 313] close(6) = -1 EBADF (Bad file descriptor) [pid 313] close(7) = -1 EBADF (Bad file descriptor) [pid 313] close(8) = -1 EBADF (Bad file descriptor) [pid 313] close(9) = -1 EBADF (Bad file descriptor) [pid 313] close(10) = -1 EBADF (Bad file descriptor) [pid 313] close(11) = -1 EBADF (Bad file descriptor) [pid 313] close(12) = -1 EBADF (Bad file descriptor) [pid 313] close(13) = -1 EBADF (Bad file descriptor) [pid 313] close(14) = -1 EBADF (Bad file descriptor) [pid 313] close(15) = -1 EBADF (Bad file descriptor) [pid 313] close(16) = -1 EBADF (Bad file descriptor) [pid 313] close(17) = -1 EBADF (Bad file descriptor) [pid 313] close(18) = -1 EBADF (Bad file descriptor) [pid 313] close(19) = -1 EBADF (Bad file descriptor) [pid 313] close(20) = -1 EBADF (Bad file descriptor) [pid 313] close(21) = -1 EBADF (Bad file descriptor) [pid 313] close(22) = -1 EBADF (Bad file descriptor) [pid 313] close(23) = -1 EBADF (Bad file descriptor) [pid 313] close(24) = -1 EBADF (Bad file descriptor) [pid 313] close(25) = -1 EBADF (Bad file descriptor) [pid 313] close(26) = -1 EBADF (Bad file descriptor) [pid 313] close(27) = -1 EBADF (Bad file descriptor) [pid 313] close(28) = -1 EBADF (Bad file descriptor) [pid 313] close(29) = -1 EBADF (Bad file descriptor) [pid 313] exit_group(0) = ? [pid 313] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 22.426683][ T312] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000005633 [ 22.426688][ T312] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 22.426695][ T312] [ 22.804027][ T313] FAULT_INJECTION: forcing a failure. [ 22.804027][ T313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 22.817311][ T313] CPU: 0 UID: 0 PID: 313 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 22.817338][ T313] Tainted: [W]=WARN [ 22.817343][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 22.817351][ T313] Call Trace: [ 22.817356][ T313] [ 22.817361][ T313] __dump_stack+0x21/0x30 [ 22.817382][ T313] dump_stack_lvl+0x10c/0x190 [ 22.817398][ T313] ? __cfi_dump_stack_lvl+0x10/0x10 [ 22.817414][ T313] ? kasan_save_free_info+0x4a/0x60 [ 22.817429][ T313] ? kmem_cache_free+0x1c1/0x4c0 [ 22.817444][ T313] ? unlink_anon_vmas+0x2c6/0x5c0 [ 22.817458][ T313] ? free_pgtables+0x2a9/0x730 [ 22.817477][ T313] ? vms_clean_up_area+0x66/0x1d0 [ 22.817487][ T313] dump_stack+0x19/0x20 [ 22.817497][ T313] should_fail_ex+0x3d9/0x530 [ 22.817506][ T313] should_fail_alloc_page+0xeb/0x110 [ 22.817517][ T313] __alloc_pages_noprof+0x19d/0x6c0 [ 22.817526][ T313] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 22.817534][ T313] ? is_bpf_text_address+0x17b/0x1a0 [ 22.817546][ T313] ? kernel_text_address+0xa9/0xe0 [ 22.817555][ T313] ? unwind_get_return_address+0x51/0x90 [ 22.817564][ T313] pte_alloc_one+0x97/0x520 [ 22.817574][ T313] ? __cfi_pte_alloc_one+0x10/0x10 [ 22.817585][ T313] ? pagerange_is_ram_callback+0xf4/0x150 [ 22.817596][ T313] __pte_alloc+0x79/0x420 [ 22.817605][ T313] ? __cfi___pte_alloc+0x10/0x10 [ 22.817614][ T313] ? pat_pagerange_is_ram+0xf4/0x140 [ 22.817624][ T313] ? cattr_name+0xc0/0xc0 [ 22.817634][ T313] remap_pfn_range_notrack+0x8d0/0xb00 [ 22.817645][ T313] ? lookup_memtype+0xe3/0x190 [ 22.817655][ T313] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 22.817666][ T313] ? __kasan_check_read+0x15/0x20 [ 22.817675][ T313] ? track_pfn_remap+0x2a7/0x340 [ 22.817686][ T313] remap_pfn_range+0xf1/0x170 [ 22.817695][ T313] ? __cfi_remap_pfn_range+0x10/0x10 [ 22.817705][ T313] ? kasan_save_alloc_info+0x40/0x50 [ 22.817714][ T313] sel_mmap_handle_status+0x2d8/0x3c0 [ 22.817723][ T313] mmap_region+0x1371/0x1bd0 [ 22.817734][ T313] ? __cfi_mmap_region+0x10/0x10 [ 22.817744][ T313] ? __kasan_check_read+0x15/0x20 [ 22.817753][ T313] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 22.817766][ T313] ? __get_unmapped_area+0x407/0x470 [ 22.817775][ T313] ? file_mmap_ok+0x147/0x1a0 [ 22.817784][ T313] do_mmap+0xb6d/0x13c0 [ 22.817793][ T313] ? __cfi_do_mmap+0x10/0x10 [ 22.817802][ T313] ? down_write_killable+0xe9/0x2d0 [ 22.817812][ T313] ? __cfi_down_write_killable+0x10/0x10 [ 22.817821][ T313] vm_mmap_pgoff+0x38f/0x4e0 [ 22.817831][ T313] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 22.817840][ T313] ? __fget_files+0x2c5/0x340 [ 22.817851][ T313] ksys_mmap_pgoff+0x166/0x1e0 [ 22.817861][ T313] __x64_sys_mmap+0x121/0x140 [ 22.817871][ T313] x64_sys_call+0x13bf/0x2ee0 [ 22.817881][ T313] do_syscall_64+0x58/0xf0 [ 22.817891][ T313] ? clear_bhb_loop+0x35/0x90 [ 22.817903][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 22.817914][ T313] RIP: 0033:0x7ff99b30dd79 [ 22.817922][ T313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 22.817929][ T313] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 22.817941][ T313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 22.817947][ T313] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 22.817953][ T313] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 22.817958][ T313] R10: 0000000000000011 R11: 0000000000000246 R12: 000000000000563e [ 22.817963][ T313] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x55557e6d4660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 17 [pid 314] <... set_robust_list resumed>) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] write(1, "executing program\n", 18executing program ) = 18 [pid 314] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 314] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 314] write(4, "9", 1) = 1 [pid 314] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 314] close(3) = 0 [pid 314] close(4) = 0 [pid 314] close(5) = -1 EBADF (Bad file descriptor) [pid 314] close(6) = -1 EBADF (Bad file descriptor) [pid 314] close(7) = -1 EBADF (Bad file descriptor) [pid 314] close(8) = -1 EBADF (Bad file descriptor) [pid 314] close(9) = -1 EBADF (Bad file descriptor) [pid 314] close(10) = -1 EBADF (Bad file descriptor) [pid 314] close(11) = -1 EBADF (Bad file descriptor) [pid 314] close(12) = -1 EBADF (Bad file descriptor) [pid 314] close(13) = -1 EBADF (Bad file descriptor) [pid 314] close(14) = -1 EBADF (Bad file descriptor) [pid 314] close(15) = -1 EBADF (Bad file descriptor) [pid 314] close(16) = -1 EBADF (Bad file descriptor) [pid 314] close(17) = -1 EBADF (Bad file descriptor) [pid 314] close(18) = -1 EBADF (Bad file descriptor) [pid 314] close(19) = -1 EBADF (Bad file descriptor) [pid 314] close(20) = -1 EBADF (Bad file descriptor) [pid 314] close(21) = -1 EBADF (Bad file descriptor) [pid 314] close(22) = -1 EBADF (Bad file descriptor) [pid 314] close(23) = -1 EBADF (Bad file descriptor) [pid 314] close(24) = -1 EBADF (Bad file descriptor) [pid 314] close(25) = -1 EBADF (Bad file descriptor) [pid 314] close(26) = -1 EBADF (Bad file descriptor) [pid 314] close(27) = -1 EBADF (Bad file descriptor) [pid 314] close(28) = -1 EBADF (Bad file descriptor) [pid 314] close(29) = -1 EBADF (Bad file descriptor) [pid 314] exit_group(0) = ? [pid 314] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x55557e6d4660, 24) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 18 [pid 315] <... prctl resumed>) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3) = 0 [pid 315] write(1, "executing program\n", 18executing program ) = 18 [pid 315] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 315] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 315] write(4, "9", 1) = 1 [pid 315] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 315] close(3) = 0 [pid 315] close(4) = 0 [pid 315] close(5) = -1 EBADF (Bad file descriptor) [pid 315] close(6) = -1 EBADF (Bad file descriptor) [pid 315] close(7) = -1 EBADF (Bad file descriptor) [pid 315] close(8) = -1 EBADF (Bad file descriptor) [pid 315] close(9) = -1 EBADF (Bad file descriptor) [pid 315] close(10) = -1 EBADF (Bad file descriptor) [pid 315] close(11) = -1 EBADF (Bad file descriptor) [pid 315] close(12) = -1 EBADF (Bad file descriptor) [pid 315] close(13) = -1 EBADF (Bad file descriptor) [pid 315] close(14) = -1 EBADF (Bad file descriptor) [pid 315] close(15) = -1 EBADF (Bad file descriptor) [pid 315] close(16) = -1 EBADF (Bad file descriptor) [pid 315] close(17) = -1 EBADF (Bad file descriptor) [pid 315] close(18) = -1 EBADF (Bad file descriptor) [pid 315] close(19) = -1 EBADF (Bad file descriptor) [pid 315] close(20) = -1 EBADF (Bad file descriptor) [pid 315] close(21) = -1 EBADF (Bad file descriptor) [pid 315] close(22) = -1 EBADF (Bad file descriptor) [pid 315] close(23) = -1 EBADF (Bad file descriptor) [pid 315] close(24) = -1 EBADF (Bad file descriptor) [pid 315] close(25) = -1 EBADF (Bad file descriptor) [pid 315] close(26) = -1 EBADF (Bad file descriptor) [pid 315] close(27) = -1 EBADF (Bad file descriptor) [pid 315] close(28) = -1 EBADF (Bad file descriptor) [pid 315] close(29) = -1 EBADF (Bad file descriptor) [pid 315] exit_group(0) = ? [pid 315] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x55557e6d4660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 19 [pid 316] <... set_robust_list resumed>) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 22.817970][ T313] [pid 316] setpgid(0, 0) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] write(1, "executing program\n", 18executing program ) = 18 [pid 316] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 316] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 316] write(4, "9", 1) = 1 [pid 316] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 316] close(3) = 0 [pid 316] close(4) = 0 [pid 316] close(5) = -1 EBADF (Bad file descriptor) [pid 316] close(6) = -1 EBADF (Bad file descriptor) [pid 316] close(7) = -1 EBADF (Bad file descriptor) [pid 316] close(8) = -1 EBADF (Bad file descriptor) [pid 316] close(9) = -1 EBADF (Bad file descriptor) [pid 316] close(10) = -1 EBADF (Bad file descriptor) [pid 316] close(11) = -1 EBADF (Bad file descriptor) [pid 316] close(12) = -1 EBADF (Bad file descriptor) [pid 316] close(13) = -1 EBADF (Bad file descriptor) [pid 316] close(14) = -1 EBADF (Bad file descriptor) [pid 316] close(15) = -1 EBADF (Bad file descriptor) [pid 316] close(16) = -1 EBADF (Bad file descriptor) [pid 316] close(17) = -1 EBADF (Bad file descriptor) [pid 316] close(18) = -1 EBADF (Bad file descriptor) [pid 316] close(19) = -1 EBADF (Bad file descriptor) [pid 316] close(20) = -1 EBADF (Bad file descriptor) [pid 316] close(21) = -1 EBADF (Bad file descriptor) [pid 316] close(22) = -1 EBADF (Bad file descriptor) [pid 316] close(23) = -1 EBADF (Bad file descriptor) [pid 316] close(24) = -1 EBADF (Bad file descriptor) [pid 316] close(25) = -1 EBADF (Bad file descriptor) [pid 316] close(26) = -1 EBADF (Bad file descriptor) [pid 316] close(27) = -1 EBADF (Bad file descriptor) [pid 316] close(28) = -1 EBADF (Bad file descriptor) [pid 316] close(29) = -1 EBADF (Bad file descriptor) [pid 316] exit_group(0) = ? [pid 316] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 317 attached , child_tidptr=0x55557e6d4650) = 20 [pid 317] set_robust_list(0x55557e6d4660, 24) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] write(1, "executing program\n", 18executing program ) = 18 [pid 317] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 317] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 317] write(4, "9", 1) = 1 [pid 317] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 317] close(3) = 0 [pid 317] close(4) = 0 [pid 317] close(5) = -1 EBADF (Bad file descriptor) [pid 317] close(6) = -1 EBADF (Bad file descriptor) [pid 317] close(7) = -1 EBADF (Bad file descriptor) [pid 317] close(8) = -1 EBADF (Bad file descriptor) [pid 317] close(9) = -1 EBADF (Bad file descriptor) [pid 317] close(10) = -1 EBADF (Bad file descriptor) [pid 317] close(11) = -1 EBADF (Bad file descriptor) [pid 317] close(12) = -1 EBADF (Bad file descriptor) [pid 317] close(13) = -1 EBADF (Bad file descriptor) [pid 317] close(14) = -1 EBADF (Bad file descriptor) [pid 317] close(15) = -1 EBADF (Bad file descriptor) [pid 317] close(16) = -1 EBADF (Bad file descriptor) [pid 317] close(17) = -1 EBADF (Bad file descriptor) [pid 317] close(18) = -1 EBADF (Bad file descriptor) [pid 317] close(19) = -1 EBADF (Bad file descriptor) [pid 317] close(20) = -1 EBADF (Bad file descriptor) [pid 317] close(21) = -1 EBADF (Bad file descriptor) [pid 317] close(22) = -1 EBADF (Bad file descriptor) [pid 317] close(23) = -1 EBADF (Bad file descriptor) [pid 317] close(24) = -1 EBADF (Bad file descriptor) [pid 317] close(25) = -1 EBADF (Bad file descriptor) [pid 317] close(26) = -1 EBADF (Bad file descriptor) [pid 317] close(27) = -1 EBADF (Bad file descriptor) [pid 317] close(28) = -1 EBADF (Bad file descriptor) [pid 317] close(29) = -1 EBADF (Bad file descriptor) [pid 317] exit_group(0) = ? [pid 317] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 318 attached , child_tidptr=0x55557e6d4650) = 21 [pid 318] set_robust_list(0x55557e6d4660, 24) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] write(1, "executing program\n", 18executing program ) = 18 [pid 318] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 318] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 318] write(4, "9", 1) = 1 [pid 318] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 318] close(3) = 0 [pid 318] close(4) = 0 [pid 318] close(5) = -1 EBADF (Bad file descriptor) [pid 318] close(6) = -1 EBADF (Bad file descriptor) [pid 318] close(7) = -1 EBADF (Bad file descriptor) [pid 318] close(8) = -1 EBADF (Bad file descriptor) [pid 318] close(9) = -1 EBADF (Bad file descriptor) [pid 318] close(10) = -1 EBADF (Bad file descriptor) [pid 318] close(11) = -1 EBADF (Bad file descriptor) [ 23.254336][ T318] FAULT_INJECTION: forcing a failure. [ 23.254336][ T318] name failslab, interval 1, probability 0, space 0, times 0 [ 23.267061][ T318] CPU: 0 UID: 0 PID: 318 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 23.267087][ T318] Tainted: [W]=WARN [ 23.267092][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 23.267099][ T318] Call Trace: executing program [pid 318] close(12) = -1 EBADF (Bad file descriptor) [pid 318] close(13) = -1 EBADF (Bad file descriptor) [pid 318] close(14) = -1 EBADF (Bad file descriptor) [pid 318] close(15) = -1 EBADF (Bad file descriptor) [pid 318] close(16) = -1 EBADF (Bad file descriptor) [pid 318] close(17) = -1 EBADF (Bad file descriptor) [pid 318] close(18) = -1 EBADF (Bad file descriptor) [pid 318] close(19) = -1 EBADF (Bad file descriptor) [pid 318] close(20) = -1 EBADF (Bad file descriptor) [pid 318] close(21) = -1 EBADF (Bad file descriptor) [pid 318] close(22) = -1 EBADF (Bad file descriptor) [pid 318] close(23) = -1 EBADF (Bad file descriptor) [pid 318] close(24) = -1 EBADF (Bad file descriptor) [pid 318] close(25) = -1 EBADF (Bad file descriptor) [pid 318] close(26) = -1 EBADF (Bad file descriptor) [pid 318] close(27) = -1 EBADF (Bad file descriptor) [pid 318] close(28) = -1 EBADF (Bad file descriptor) [pid 318] close(29) = -1 EBADF (Bad file descriptor) [pid 318] exit_group(0) = ? [pid 318] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 319 attached , child_tidptr=0x55557e6d4650) = 22 [pid 319] set_robust_list(0x55557e6d4660, 24) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3) = 0 [pid 319] write(1, "executing program\n", 18) = 18 [pid 319] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 319] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 319] write(4, "9", 1) = 1 [ 23.267105][ T318] [ 23.267110][ T318] __dump_stack+0x21/0x30 [ 23.267133][ T318] dump_stack_lvl+0x10c/0x190 [ 23.267149][ T318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.267166][ T318] dump_stack+0x19/0x20 [ 23.267180][ T318] should_fail_ex+0x3d9/0x530 [ 23.267204][ T318] should_failslab+0xac/0x100 [ 23.267220][ T318] kmem_cache_alloc_noprof+0x42/0x3a0 [ 23.267230][ T318] ? vm_area_alloc+0x3f/0x1a0 [ 23.267242][ T318] vm_area_alloc+0x3f/0x1a0 [ 23.267252][ T318] mmap_region+0xb8f/0x1bd0 [ 23.267262][ T318] ? sched_clock+0x44/0x60 [ 23.267271][ T318] ? __cfi_mmap_region+0x10/0x10 [ 23.267281][ T318] ? __kasan_check_read+0x15/0x20 [ 23.267290][ T318] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 23.267303][ T318] ? __get_unmapped_area+0x407/0x470 [ 23.267312][ T318] ? file_mmap_ok+0x147/0x1a0 [ 23.267321][ T318] do_mmap+0xb6d/0x13c0 [ 23.267331][ T318] ? __cfi_do_mmap+0x10/0x10 [ 23.267339][ T318] ? down_write_killable+0xe9/0x2d0 [ 23.267349][ T318] ? __cfi_down_write_killable+0x10/0x10 [ 23.267358][ T318] vm_mmap_pgoff+0x38f/0x4e0 [ 23.267368][ T318] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 23.267378][ T318] ? __fget_files+0x2c5/0x340 [ 23.267390][ T318] ksys_mmap_pgoff+0x166/0x1e0 [ 23.267399][ T318] __x64_sys_mmap+0x121/0x140 [ 23.267410][ T318] x64_sys_call+0x13bf/0x2ee0 [ 23.267420][ T318] do_syscall_64+0x58/0xf0 [ 23.267431][ T318] ? clear_bhb_loop+0x35/0x90 [ 23.267442][ T318] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.267454][ T318] RIP: 0033:0x7ff99b30dd79 [ 23.267463][ T318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 23.267470][ T318] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 23.267481][ T318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 23.267487][ T318] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 23.267493][ T318] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [pid 319] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 319] close(3) = 0 [pid 319] close(4) = 0 [pid 319] close(5) = -1 EBADF (Bad file descriptor) [pid 319] close(6) = -1 EBADF (Bad file descriptor) [pid 319] close(7) = -1 EBADF (Bad file descriptor) [pid 319] close(8) = -1 EBADF (Bad file descriptor) [pid 319] close(9) = -1 EBADF (Bad file descriptor) [pid 319] close(10) = -1 EBADF (Bad file descriptor) [pid 319] close(11) = -1 EBADF (Bad file descriptor) [pid 319] close(12) = -1 EBADF (Bad file descriptor) [pid 319] close(13) = -1 EBADF (Bad file descriptor) [pid 319] close(14) = -1 EBADF (Bad file descriptor) [pid 319] close(15) = -1 EBADF (Bad file descriptor) [pid 319] close(16) = -1 EBADF (Bad file descriptor) [pid 319] close(17) = -1 EBADF (Bad file descriptor) [pid 319] close(18) = -1 EBADF (Bad file descriptor) [pid 319] close(19) = -1 EBADF (Bad file descriptor) [pid 319] close(20) = -1 EBADF (Bad file descriptor) [pid 319] close(21) = -1 EBADF (Bad file descriptor) [pid 319] close(22) = -1 EBADF (Bad file descriptor) [pid 319] close(23) = -1 EBADF (Bad file descriptor) [pid 319] close(24) = -1 EBADF (Bad file descriptor) [pid 319] close(25) = -1 EBADF (Bad file descriptor) [pid 319] close(26) = -1 EBADF (Bad file descriptor) [pid 319] close(27) = -1 EBADF (Bad file descriptor) [pid 319] close(28) = -1 EBADF (Bad file descriptor) [pid 319] close(29) = -1 EBADF (Bad file descriptor) [pid 319] exit_group(0) = ? [ 23.267498][ T318] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000005aaf [ 23.267503][ T318] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 23.267510][ T318] [ 23.320664][ T319] FAULT_INJECTION: forcing a failure. [ 23.320664][ T319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 23.537067][ T319] CPU: 0 UID: 0 PID: 319 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 23.537096][ T319] Tainted: [W]=WARN [ 23.537100][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 23.537108][ T319] Call Trace: [ 23.537114][ T319] [ 23.537119][ T319] __dump_stack+0x21/0x30 [ 23.537134][ T319] dump_stack_lvl+0x10c/0x190 [ 23.537144][ T319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.537154][ T319] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 23.537164][ T319] ? _raw_spin_trylock+0xaf/0x130 [ 23.537175][ T319] dump_stack+0x19/0x20 [ 23.537184][ T319] should_fail_ex+0x3d9/0x530 [ 23.537194][ T319] should_fail_alloc_page+0xeb/0x110 [ 23.537206][ T319] __alloc_pages_noprof+0x19d/0x6c0 [ 23.537214][ T319] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 23.537225][ T319] ? is_bpf_text_address+0x17b/0x1a0 [ 23.537236][ T319] ? kernel_text_address+0xa9/0xe0 [ 23.537246][ T319] ? unwind_get_return_address+0x51/0x90 [ 23.537255][ T319] pte_alloc_one+0x97/0x520 [ 23.537265][ T319] ? __cfi_pte_alloc_one+0x10/0x10 [ 23.537276][ T319] ? pagerange_is_ram_callback+0xf4/0x150 [ 23.537288][ T319] __pte_alloc+0x79/0x420 [ 23.537297][ T319] ? __cfi___pte_alloc+0x10/0x10 [ 23.537306][ T319] ? pat_pagerange_is_ram+0xf4/0x140 [ 23.537316][ T319] ? cattr_name+0xc0/0xc0 [ 23.537326][ T319] remap_pfn_range_notrack+0x8d0/0xb00 [ 23.537337][ T319] ? lookup_memtype+0xe3/0x190 [ 23.537348][ T319] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 23.537359][ T319] ? __kasan_check_read+0x15/0x20 [ 23.537368][ T319] ? track_pfn_remap+0x2a7/0x340 [ 23.537378][ T319] remap_pfn_range+0xf1/0x170 [ 23.537388][ T319] ? __cfi_remap_pfn_range+0x10/0x10 [ 23.537398][ T319] ? kasan_save_alloc_info+0x40/0x50 [ 23.537407][ T319] sel_mmap_handle_status+0x2d8/0x3c0 [ 23.537417][ T319] mmap_region+0x1371/0x1bd0 [ 23.537427][ T319] ? __cfi_mmap_region+0x10/0x10 [ 23.537438][ T319] ? __kasan_check_read+0x15/0x20 [ 23.537446][ T319] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 23.537459][ T319] ? __get_unmapped_area+0x407/0x470 [ 23.537475][ T319] ? file_mmap_ok+0x147/0x1a0 [ 23.537484][ T319] do_mmap+0xb6d/0x13c0 [ 23.537494][ T319] ? __cfi_do_mmap+0x10/0x10 [ 23.537503][ T319] ? down_write_killable+0xe9/0x2d0 [ 23.537511][ T319] ? __cfi_down_write_killable+0x10/0x10 [ 23.537520][ T319] vm_mmap_pgoff+0x38f/0x4e0 [ 23.537531][ T319] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 23.537540][ T319] ? __fget_files+0x2c5/0x340 [ 23.537551][ T319] ksys_mmap_pgoff+0x166/0x1e0 [ 23.537561][ T319] __x64_sys_mmap+0x121/0x140 [ 23.537572][ T319] x64_sys_call+0x13bf/0x2ee0 [ 23.537582][ T319] do_syscall_64+0x58/0xf0 [ 23.537592][ T319] ? clear_bhb_loop+0x35/0x90 [ 23.537604][ T319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.537615][ T319] RIP: 0033:0x7ff99b30dd79 [ 23.537624][ T319] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 23.537631][ T319] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [pid 319] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=22} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 320 attached , child_tidptr=0x55557e6d4650) = 23 [pid 320] set_robust_list(0x55557e6d4660, 24) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 [pid 320] write(1, "executing program\n", 18executing program ) = 18 [pid 320] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 320] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 320] write(4, "9", 1) = 1 [pid 320] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 320] close(3) = 0 [pid 320] close(4) = 0 [pid 320] close(5) = -1 EBADF (Bad file descriptor) [pid 320] close(6) = -1 EBADF (Bad file descriptor) [pid 320] close(7) = -1 EBADF (Bad file descriptor) [pid 320] close(8) = -1 EBADF (Bad file descriptor) [pid 320] close(9) = -1 EBADF (Bad file descriptor) [pid 320] close(10) = -1 EBADF (Bad file descriptor) [pid 320] close(11) = -1 EBADF (Bad file descriptor) [pid 320] close(12) = -1 EBADF (Bad file descriptor) [pid 320] close(13) = -1 EBADF (Bad file descriptor) [pid 320] close(14) = -1 EBADF (Bad file descriptor) [pid 320] close(15) = -1 EBADF (Bad file descriptor) [pid 320] close(16) = -1 EBADF (Bad file descriptor) [pid 320] close(17) = -1 EBADF (Bad file descriptor) [pid 320] close(18) = -1 EBADF (Bad file descriptor) [pid 320] close(19) = -1 EBADF (Bad file descriptor) [pid 320] close(20) = -1 EBADF (Bad file descriptor) [pid 320] close(21) = -1 EBADF (Bad file descriptor) [pid 320] close(22) = -1 EBADF (Bad file descriptor) [pid 320] close(23) = -1 EBADF (Bad file descriptor) [pid 320] close(24) = -1 EBADF (Bad file descriptor) [pid 320] close(25) = -1 EBADF (Bad file descriptor) [pid 320] close(26) = -1 EBADF (Bad file descriptor) [pid 320] close(27) = -1 EBADF (Bad file descriptor) [pid 320] close(28) = -1 EBADF (Bad file descriptor) [pid 320] close(29) = -1 EBADF (Bad file descriptor) [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 321 attached , child_tidptr=0x55557e6d4650) = 24 [pid 321] set_robust_list(0x55557e6d4660, 24) = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 [pid 321] write(1, "executing program\n", 18executing program ) = 18 [pid 321] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 321] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 321] write(4, "9", 1) = 1 [pid 321] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 321] close(3) = 0 [pid 321] close(4) = 0 [pid 321] close(5) = -1 EBADF (Bad file descriptor) [pid 321] close(6) = -1 EBADF (Bad file descriptor) [pid 321] close(7) = -1 EBADF (Bad file descriptor) [pid 321] close(8) = -1 EBADF (Bad file descriptor) [pid 321] close(9) = -1 EBADF (Bad file descriptor) [pid 321] close(10) = -1 EBADF (Bad file descriptor) [pid 321] close(11) = -1 EBADF (Bad file descriptor) [pid 321] close(12) = -1 EBADF (Bad file descriptor) [pid 321] close(13) = -1 EBADF (Bad file descriptor) [pid 321] close(14) = -1 EBADF (Bad file descriptor) [pid 321] close(15) = -1 EBADF (Bad file descriptor) [pid 321] close(16) = -1 EBADF (Bad file descriptor) [pid 321] close(17) = -1 EBADF (Bad file descriptor) [pid 321] close(18) = -1 EBADF (Bad file descriptor) [pid 321] close(19) = -1 EBADF (Bad file descriptor) [pid 321] close(20) = -1 EBADF (Bad file descriptor) [pid 321] close(21) = -1 EBADF (Bad file descriptor) [pid 321] close(22) = -1 EBADF (Bad file descriptor) [pid 321] close(23) = -1 EBADF (Bad file descriptor) [pid 321] close(24) = -1 EBADF (Bad file descriptor) [pid 321] close(25) = -1 EBADF (Bad file descriptor) [pid 321] close(26) = -1 EBADF (Bad file descriptor) [pid 321] close(27) = -1 EBADF (Bad file descriptor) [pid 321] close(28) = -1 EBADF (Bad file descriptor) [pid 321] close(29) = -1 EBADF (Bad file descriptor) [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 322 attached , child_tidptr=0x55557e6d4650) = 25 [pid 322] set_robust_list(0x55557e6d4660, 24) = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 322] write(3, "1000", 4) = 4 [pid 322] close(3) = 0 [pid 322] write(1, "executing program\n", 18executing program ) = 18 [pid 322] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 322] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 322] write(4, "9", 1) = 1 [ 23.537642][ T319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 23.537649][ T319] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 23.537654][ T319] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 23.537659][ T319] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000005aba [ 23.537665][ T319] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 23.537672][ T319] [pid 322] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 322] close(3) = 0 [pid 322] close(4) = 0 [pid 322] close(5) = -1 EBADF (Bad file descriptor) [pid 322] close(6) = -1 EBADF (Bad file descriptor) [pid 322] close(7) = -1 EBADF (Bad file descriptor) [pid 322] close(8) = -1 EBADF (Bad file descriptor) [pid 322] close(9) = -1 EBADF (Bad file descriptor) [pid 322] close(10) = -1 EBADF (Bad file descriptor) [ 23.934621][ T322] FAULT_INJECTION: forcing a failure. [ 23.934621][ T322] name failslab, interval 1, probability 0, space 0, times 0 [ 23.947473][ T322] CPU: 0 UID: 0 PID: 322 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 23.947513][ T322] Tainted: [W]=WARN [ 23.947519][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 23.947526][ T322] Call Trace: [ 23.947530][ T322] [ 23.947536][ T322] __dump_stack+0x21/0x30 [ 23.947558][ T322] dump_stack_lvl+0x10c/0x190 [ 23.947573][ T322] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.947590][ T322] dump_stack+0x19/0x20 [ 23.947604][ T322] should_fail_ex+0x3d9/0x530 [ 23.947620][ T322] should_failslab+0xac/0x100 [ 23.947640][ T322] kmem_cache_alloc_noprof+0x42/0x3a0 [ 23.947653][ T322] ? vm_area_alloc+0x3f/0x1a0 [ 23.947668][ T322] vm_area_alloc+0x3f/0x1a0 [ 23.947681][ T322] mmap_region+0xb8f/0x1bd0 [ 23.947694][ T322] ? sched_clock+0x44/0x60 [ 23.947705][ T322] ? __cfi_mmap_region+0x10/0x10 [ 23.947718][ T322] ? __kasan_check_read+0x15/0x20 [ 23.947730][ T322] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 23.947746][ T322] ? __get_unmapped_area+0x407/0x470 [ 23.947758][ T322] ? file_mmap_ok+0x147/0x1a0 [ 23.947770][ T322] do_mmap+0xb6d/0x13c0 [ 23.947782][ T322] ? __cfi_do_mmap+0x10/0x10 [ 23.947793][ T322] ? down_write_killable+0xe9/0x2d0 [ 23.947806][ T322] ? __cfi_down_write_killable+0x10/0x10 [ 23.947817][ T322] vm_mmap_pgoff+0x38f/0x4e0 [ 23.947830][ T322] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 23.947842][ T322] ? __fget_files+0x2c5/0x340 [ 23.947857][ T322] ksys_mmap_pgoff+0x166/0x1e0 [ 23.947869][ T322] __x64_sys_mmap+0x121/0x140 [ 23.947883][ T322] x64_sys_call+0x13bf/0x2ee0 [ 23.947897][ T322] do_syscall_64+0x58/0xf0 [ 23.947909][ T322] ? clear_bhb_loop+0x35/0x90 [ 23.947924][ T322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.947939][ T322] RIP: 0033:0x7ff99b30dd79 [ 23.947950][ T322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 23.947959][ T322] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 23.947973][ T322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 23.947981][ T322] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 23.947989][ T322] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [pid 322] close(11) = -1 EBADF (Bad file descriptor) [pid 322] close(12) = -1 EBADF (Bad file descriptor) [pid 322] close(13) = -1 EBADF (Bad file descriptor) [pid 322] close(14) = -1 EBADF (Bad file descriptor) [pid 322] close(15) = -1 EBADF (Bad file descriptor) [pid 322] close(16) = -1 EBADF (Bad file descriptor) [pid 322] close(17) = -1 EBADF (Bad file descriptor) [pid 322] close(18) = -1 EBADF (Bad file descriptor) [pid 322] close(19) = -1 EBADF (Bad file descriptor) [pid 322] close(20) = -1 EBADF (Bad file descriptor) [pid 322] close(21) = -1 EBADF (Bad file descriptor) [pid 322] close(22) = -1 EBADF (Bad file descriptor) [pid 322] close(23) = -1 EBADF (Bad file descriptor) [pid 322] close(24) = -1 EBADF (Bad file descriptor) [pid 322] close(25) = -1 EBADF (Bad file descriptor) [pid 322] close(26) = -1 EBADF (Bad file descriptor) [pid 322] close(27) = -1 EBADF (Bad file descriptor) [pid 322] close(28) = -1 EBADF (Bad file descriptor) [pid 322] close(29) = -1 EBADF (Bad file descriptor) [pid 322] exit_group(0) = ? [pid 322] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 26 ./strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x55557e6d4660, 24) = 0 [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 323] setpgid(0, 0) = 0 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 323] write(3, "1000", 4) = 4 [pid 323] close(3) = 0 [pid 323] write(1, "executing program\n", 18executing program ) = 18 [pid 323] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 323] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 323] write(4, "9", 1) = 1 [pid 323] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 323] close(3) = 0 [pid 323] close(4) = 0 [pid 323] close(5) = -1 EBADF (Bad file descriptor) [pid 323] close(6) = -1 EBADF (Bad file descriptor) [pid 323] close(7) = -1 EBADF (Bad file descriptor) [pid 323] close(8) = -1 EBADF (Bad file descriptor) [pid 323] close(9) = -1 EBADF (Bad file descriptor) [pid 323] close(10) = -1 EBADF (Bad file descriptor) [pid 323] close(11) = -1 EBADF (Bad file descriptor) [pid 323] close(12) = -1 EBADF (Bad file descriptor) [pid 323] close(13) = -1 EBADF (Bad file descriptor) [pid 323] close(14) = -1 EBADF (Bad file descriptor) [pid 323] close(15) = -1 EBADF (Bad file descriptor) [pid 323] close(16) = -1 EBADF (Bad file descriptor) [pid 323] close(17) = -1 EBADF (Bad file descriptor) [pid 323] close(18) = -1 EBADF (Bad file descriptor) [pid 323] close(19) = -1 EBADF (Bad file descriptor) [pid 323] close(20) = -1 EBADF (Bad file descriptor) [pid 323] close(21) = -1 EBADF (Bad file descriptor) [pid 323] close(22) = -1 EBADF (Bad file descriptor) [pid 323] close(23) = -1 EBADF (Bad file descriptor) [pid 323] close(24) = -1 EBADF (Bad file descriptor) [pid 323] close(25) = -1 EBADF (Bad file descriptor) [pid 323] close(26) = -1 EBADF (Bad file descriptor) [pid 323] close(27) = -1 EBADF (Bad file descriptor) [pid 323] close(28) = -1 EBADF (Bad file descriptor) [pid 323] close(29) = -1 EBADF (Bad file descriptor) [pid 323] exit_group(0) = ? [pid 323] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x55557e6d4660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 27 [pid 324] <... set_robust_list resumed>) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 [pid 324] write(1, "executing program\n", 18executing program ) = 18 [pid 324] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 324] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 324] write(4, "9", 1) = 1 [pid 324] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 324] close(3) = 0 [pid 324] close(4) = 0 [pid 324] close(5) = -1 EBADF (Bad file descriptor) [pid 324] close(6) = -1 EBADF (Bad file descriptor) [pid 324] close(7) = -1 EBADF (Bad file descriptor) [pid 324] close(8) = -1 EBADF (Bad file descriptor) [pid 324] close(9) = -1 EBADF (Bad file descriptor) [pid 324] close(10) = -1 EBADF (Bad file descriptor) [pid 324] close(11) = -1 EBADF (Bad file descriptor) [pid 324] close(12) = -1 EBADF (Bad file descriptor) [pid 324] close(13) = -1 EBADF (Bad file descriptor) [pid 324] close(14) = -1 EBADF (Bad file descriptor) [pid 324] close(15) = -1 EBADF (Bad file descriptor) [pid 324] close(16) = -1 EBADF (Bad file descriptor) [pid 324] close(17) = -1 EBADF (Bad file descriptor) [pid 324] close(18) = -1 EBADF (Bad file descriptor) [pid 324] close(19) = -1 EBADF (Bad file descriptor) [pid 324] close(20) = -1 EBADF (Bad file descriptor) [pid 324] close(21) = -1 EBADF (Bad file descriptor) [pid 324] close(22) = -1 EBADF (Bad file descriptor) [pid 324] close(23) = -1 EBADF (Bad file descriptor) [pid 324] close(24) = -1 EBADF (Bad file descriptor) [pid 324] close(25) = -1 EBADF (Bad file descriptor) [pid 324] close(26) = -1 EBADF (Bad file descriptor) [pid 324] close(27) = -1 EBADF (Bad file descriptor) [pid 324] close(28) = -1 EBADF (Bad file descriptor) [pid 324] close(29) = -1 EBADF (Bad file descriptor) [pid 324] exit_group(0) = ? [pid 324] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 325 attached , child_tidptr=0x55557e6d4650) = 28 [pid 325] set_robust_list(0x55557e6d4660, 24) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] write(1, "executing program\n", 18executing program ) = 18 [pid 325] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 325] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 325] write(4, "9", 1) = 1 [pid 325] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 325] close(3) = 0 [pid 325] close(4) = 0 [pid 325] close(5) = -1 EBADF (Bad file descriptor) [pid 325] close(6) = -1 EBADF (Bad file descriptor) [pid 325] close(7) = -1 EBADF (Bad file descriptor) [pid 325] close(8) = -1 EBADF (Bad file descriptor) [pid 325] close(9) = -1 EBADF (Bad file descriptor) [ 23.947995][ T322] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000005d56 [ 23.948002][ T322] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 23.948011][ T322] [pid 325] close(10) = -1 EBADF (Bad file descriptor) [pid 325] close(11) = -1 EBADF (Bad file descriptor) [pid 325] close(12) = -1 EBADF (Bad file descriptor) [pid 325] close(13) = -1 EBADF (Bad file descriptor) [pid 325] close(14) = -1 EBADF (Bad file descriptor) [pid 325] close(15) = -1 EBADF (Bad file descriptor) [pid 325] close(16) = -1 EBADF (Bad file descriptor) [pid 325] close(17) = -1 EBADF (Bad file descriptor) [pid 325] close(18) = -1 EBADF (Bad file descriptor) [pid 325] close(19) = -1 EBADF (Bad file descriptor) [pid 325] close(20) = -1 EBADF (Bad file descriptor) [pid 325] close(21) = -1 EBADF (Bad file descriptor) [pid 325] close(22) = -1 EBADF (Bad file descriptor) [pid 325] close(23) = -1 EBADF (Bad file descriptor) [pid 325] close(24) = -1 EBADF (Bad file descriptor) [pid 325] close(25) = -1 EBADF (Bad file descriptor) [pid 325] close(26) = -1 EBADF (Bad file descriptor) [pid 325] close(27) = -1 EBADF (Bad file descriptor) [pid 325] close(28) = -1 EBADF (Bad file descriptor) [pid 325] close(29) = -1 EBADF (Bad file descriptor) [pid 325] exit_group(0) = ? [pid 325] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x55557e6d4660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 29 [pid 326] <... set_robust_list resumed>) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 [pid 326] write(1, "executing program\n", 18executing program ) = 18 [pid 326] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 326] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 326] write(4, "9", 1) = 1 [pid 326] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 326] close(3) = 0 [pid 326] close(4) = 0 [pid 326] close(5) = -1 EBADF (Bad file descriptor) [pid 326] close(6) = -1 EBADF (Bad file descriptor) [pid 326] close(7) = -1 EBADF (Bad file descriptor) [pid 326] close(8) = -1 EBADF (Bad file descriptor) [pid 326] close(9) = -1 EBADF (Bad file descriptor) [pid 326] close(10) = -1 EBADF (Bad file descriptor) [pid 326] close(11) = -1 EBADF (Bad file descriptor) [pid 326] close(12) = -1 EBADF (Bad file descriptor) [pid 326] close(13) = -1 EBADF (Bad file descriptor) [pid 326] close(14) = -1 EBADF (Bad file descriptor) [pid 326] close(15) = -1 EBADF (Bad file descriptor) [pid 326] close(16) = -1 EBADF (Bad file descriptor) [pid 326] close(17) = -1 EBADF (Bad file descriptor) [pid 326] close(18) = -1 EBADF (Bad file descriptor) [pid 326] close(19) = -1 EBADF (Bad file descriptor) [pid 326] close(20) = -1 EBADF (Bad file descriptor) [pid 326] close(21) = -1 EBADF (Bad file descriptor) [pid 326] close(22) = -1 EBADF (Bad file descriptor) [pid 326] close(23) = -1 EBADF (Bad file descriptor) [pid 326] close(24) = -1 EBADF (Bad file descriptor) [pid 326] close(25) = -1 EBADF (Bad file descriptor) [pid 326] close(26) = -1 EBADF (Bad file descriptor) [pid 326] close(27) = -1 EBADF (Bad file descriptor) [pid 326] close(28) = -1 EBADF (Bad file descriptor) [pid 326] close(29) = -1 EBADF (Bad file descriptor) [pid 326] exit_group(0) = ? [pid 326] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 327 attached , child_tidptr=0x55557e6d4650) = 30 [pid 327] set_robust_list(0x55557e6d4660, 24) = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 executing program [pid 327] write(1, "executing program\n", 18) = 18 [pid 327] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 327] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 327] write(4, "9", 1) = 1 [pid 327] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 327] close(3) = 0 [pid 327] close(4) = 0 [pid 327] close(5) = -1 EBADF (Bad file descriptor) [pid 327] close(6) = -1 EBADF (Bad file descriptor) [pid 327] close(7) = -1 EBADF (Bad file descriptor) [pid 327] close(8) = -1 EBADF (Bad file descriptor) [pid 327] close(9) = -1 EBADF (Bad file descriptor) [pid 327] close(10) = -1 EBADF (Bad file descriptor) [pid 327] close(11) = -1 EBADF (Bad file descriptor) [pid 327] close(12) = -1 EBADF (Bad file descriptor) [pid 327] close(13) = -1 EBADF (Bad file descriptor) [pid 327] close(14) = -1 EBADF (Bad file descriptor) [pid 327] close(15) = -1 EBADF (Bad file descriptor) [pid 327] close(16) = -1 EBADF (Bad file descriptor) [pid 327] close(17) = -1 EBADF (Bad file descriptor) [pid 327] close(18) = -1 EBADF (Bad file descriptor) [pid 327] close(19) = -1 EBADF (Bad file descriptor) [pid 327] close(20) = -1 EBADF (Bad file descriptor) [pid 327] close(21) = -1 EBADF (Bad file descriptor) [pid 327] close(22) = -1 EBADF (Bad file descriptor) [pid 327] close(23) = -1 EBADF (Bad file descriptor) [pid 327] close(24) = -1 EBADF (Bad file descriptor) [pid 327] close(25) = -1 EBADF (Bad file descriptor) [pid 327] close(26) = -1 EBADF (Bad file descriptor) [pid 327] close(27) = -1 EBADF (Bad file descriptor) [pid 327] close(28) = -1 EBADF (Bad file descriptor) [pid 327] close(29) = -1 EBADF (Bad file descriptor) [pid 327] exit_group(0) = ? [pid 327] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 328 attached , child_tidptr=0x55557e6d4650) = 31 [pid 328] set_robust_list(0x55557e6d4660, 24) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] write(1, "executing program\n", 18executing program ) = 18 [pid 328] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 328] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 328] write(4, "9", 1) = 1 [pid 328] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 328] close(3) = 0 [pid 328] close(4) = 0 [pid 328] close(5) = -1 EBADF (Bad file descriptor) [pid 328] close(6) = -1 EBADF (Bad file descriptor) [pid 328] close(7) = -1 EBADF (Bad file descriptor) [pid 328] close(8) = -1 EBADF (Bad file descriptor) [pid 328] close(9) = -1 EBADF (Bad file descriptor) [pid 328] close(10) = -1 EBADF (Bad file descriptor) [pid 328] close(11) = -1 EBADF (Bad file descriptor) [pid 328] close(12) = -1 EBADF (Bad file descriptor) [pid 328] close(13) = -1 EBADF (Bad file descriptor) [pid 328] close(14) = -1 EBADF (Bad file descriptor) [pid 328] close(15) = -1 EBADF (Bad file descriptor) [pid 328] close(16) = -1 EBADF (Bad file descriptor) [pid 328] close(17) = -1 EBADF (Bad file descriptor) [pid 328] close(18) = -1 EBADF (Bad file descriptor) [pid 328] close(19) = -1 EBADF (Bad file descriptor) [pid 328] close(20) = -1 EBADF (Bad file descriptor) [pid 328] close(21) = -1 EBADF (Bad file descriptor) [pid 328] close(22) = -1 EBADF (Bad file descriptor) [pid 328] close(23) = -1 EBADF (Bad file descriptor) [pid 328] close(24) = -1 EBADF (Bad file descriptor) [pid 328] close(25) = -1 EBADF (Bad file descriptor) [pid 328] close(26) = -1 EBADF (Bad file descriptor) [pid 328] close(27) = -1 EBADF (Bad file descriptor) [pid 328] close(28) = -1 EBADF (Bad file descriptor) [pid 328] close(29) = -1 EBADF (Bad file descriptor) [pid 328] exit_group(0) = ? [pid 328] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 329 attached , child_tidptr=0x55557e6d4650) = 32 [pid 329] set_robust_list(0x55557e6d4660, 24) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 [pid 329] write(1, "executing program\n", 18executing program ) = 18 [pid 329] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 329] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 329] write(4, "9", 1) = 1 [pid 329] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 329] close(3) = 0 [pid 329] close(4) = 0 [pid 329] close(5) = -1 EBADF (Bad file descriptor) [pid 329] close(6) = -1 EBADF (Bad file descriptor) [pid 329] close(7) = -1 EBADF (Bad file descriptor) [pid 329] close(8) = -1 EBADF (Bad file descriptor) [pid 329] close(9) = -1 EBADF (Bad file descriptor) [pid 329] close(10) = -1 EBADF (Bad file descriptor) [pid 329] close(11) = -1 EBADF (Bad file descriptor) [pid 329] close(12) = -1 EBADF (Bad file descriptor) [pid 329] close(13) = -1 EBADF (Bad file descriptor) [pid 329] close(14) = -1 EBADF (Bad file descriptor) [pid 329] close(15) = -1 EBADF (Bad file descriptor) [pid 329] close(16) = -1 EBADF (Bad file descriptor) [pid 329] close(17) = -1 EBADF (Bad file descriptor) [pid 329] close(18) = -1 EBADF (Bad file descriptor) [pid 329] close(19) = -1 EBADF (Bad file descriptor) [pid 329] close(20) = -1 EBADF (Bad file descriptor) [pid 329] close(21) = -1 EBADF (Bad file descriptor) [pid 329] close(22) = -1 EBADF (Bad file descriptor) [pid 329] close(23) = -1 EBADF (Bad file descriptor) [pid 329] close(24) = -1 EBADF (Bad file descriptor) [pid 329] close(25) = -1 EBADF (Bad file descriptor) [ 24.322661][ T329] FAULT_INJECTION: forcing a failure. [ 24.322661][ T329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 24.336481][ T329] CPU: 1 UID: 0 PID: 329 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 24.336501][ T329] Tainted: [W]=WARN [ 24.336505][ T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 24.336516][ T329] Call Trace: [ 24.336519][ T329] [ 24.336522][ T329] __dump_stack+0x21/0x30 [ 24.336537][ T329] dump_stack_lvl+0x10c/0x190 [ 24.336547][ T329] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.336556][ T329] ? kasan_save_free_info+0x4a/0x60 [ 24.336565][ T329] ? kmem_cache_free+0x1c1/0x4c0 [ 24.336575][ T329] ? unlink_anon_vmas+0x2c6/0x5c0 [ 24.336585][ T329] ? free_pgtables+0x2a9/0x730 [ 24.336594][ T329] ? vms_clean_up_area+0x66/0x1d0 [ 24.336605][ T329] dump_stack+0x19/0x20 [ 24.336614][ T329] should_fail_ex+0x3d9/0x530 [ 24.336625][ T329] should_fail_alloc_page+0xeb/0x110 [ 24.336642][ T329] __alloc_pages_noprof+0x19d/0x6c0 [ 24.336650][ T329] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 24.336658][ T329] ? is_bpf_text_address+0x17b/0x1a0 [ 24.336670][ T329] ? kernel_text_address+0xa9/0xe0 [ 24.336679][ T329] ? unwind_get_return_address+0x51/0x90 [ 24.336688][ T329] pte_alloc_one+0x97/0x520 [ 24.336698][ T329] ? __cfi_pte_alloc_one+0x10/0x10 [ 24.336708][ T329] ? pagerange_is_ram_callback+0xf4/0x150 [ 24.336726][ T329] __pte_alloc+0x79/0x420 [ 24.336735][ T329] ? __cfi___pte_alloc+0x10/0x10 [ 24.336743][ T329] ? pat_pagerange_is_ram+0xf4/0x140 [ 24.336753][ T329] ? cattr_name+0xc0/0xc0 [ 24.336763][ T329] remap_pfn_range_notrack+0x8d0/0xb00 [ 24.336774][ T329] ? lookup_memtype+0xe3/0x190 [ 24.336785][ T329] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 24.336795][ T329] ? __kasan_check_read+0x15/0x20 [ 24.336804][ T329] ? track_pfn_remap+0x2a7/0x340 [ 24.336815][ T329] remap_pfn_range+0xf1/0x170 [ 24.336825][ T329] ? __cfi_remap_pfn_range+0x10/0x10 [ 24.336835][ T329] ? kasan_save_alloc_info+0x40/0x50 [ 24.336843][ T329] sel_mmap_handle_status+0x2d8/0x3c0 [ 24.336853][ T329] mmap_region+0x1371/0x1bd0 [ 24.336864][ T329] ? __cfi_mmap_region+0x10/0x10 [ 24.336874][ T329] ? __kasan_check_read+0x15/0x20 [ 24.336882][ T329] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 24.336895][ T329] ? __get_unmapped_area+0x407/0x470 [ 24.336905][ T329] ? file_mmap_ok+0x147/0x1a0 [ 24.336914][ T329] do_mmap+0xb6d/0x13c0 [ 24.336923][ T329] ? __cfi_do_mmap+0x10/0x10 [ 24.336931][ T329] ? down_write_killable+0xe9/0x2d0 [ 24.336940][ T329] ? __cfi_down_write_killable+0x10/0x10 [ 24.336949][ T329] vm_mmap_pgoff+0x38f/0x4e0 [ 24.336960][ T329] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 24.336969][ T329] ? __fget_files+0x2c5/0x340 [ 24.336981][ T329] ksys_mmap_pgoff+0x166/0x1e0 [ 24.336990][ T329] __x64_sys_mmap+0x121/0x140 [ 24.337001][ T329] x64_sys_call+0x13bf/0x2ee0 [ 24.337012][ T329] do_syscall_64+0x58/0xf0 [ 24.337022][ T329] ? clear_bhb_loop+0x35/0x90 [ 24.337034][ T329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.337045][ T329] RIP: 0033:0x7ff99b30dd79 [ 24.337054][ T329] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 24.337061][ T329] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 24.337072][ T329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [pid 329] close(26) = -1 EBADF (Bad file descriptor) [pid 329] close(27) = -1 EBADF (Bad file descriptor) [pid 329] close(28) = -1 EBADF (Bad file descriptor) [pid 329] close(29) = -1 EBADF (Bad file descriptor) [pid 329] exit_group(0) = ? [pid 329] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 33 ./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x55557e6d4660, 24) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] write(1, "executing program\n", 18executing program ) = 18 [pid 330] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 330] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 330] write(4, "9", 1) = 1 [pid 330] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 330] close(3) = 0 [pid 330] close(4) = 0 [pid 330] close(5) = -1 EBADF (Bad file descriptor) [pid 330] close(6) = -1 EBADF (Bad file descriptor) [pid 330] close(7) = -1 EBADF (Bad file descriptor) [pid 330] close(8) = -1 EBADF (Bad file descriptor) [pid 330] close(9) = -1 EBADF (Bad file descriptor) [pid 330] close(10) = -1 EBADF (Bad file descriptor) [pid 330] close(11) = -1 EBADF (Bad file descriptor) [pid 330] close(12) = -1 EBADF (Bad file descriptor) [pid 330] close(13) = -1 EBADF (Bad file descriptor) [pid 330] close(14) = -1 EBADF (Bad file descriptor) [pid 330] close(15) = -1 EBADF (Bad file descriptor) [pid 330] close(16) = -1 EBADF (Bad file descriptor) [pid 330] close(17) = -1 EBADF (Bad file descriptor) [pid 330] close(18) = -1 EBADF (Bad file descriptor) [pid 330] close(19) = -1 EBADF (Bad file descriptor) [pid 330] close(20) = -1 EBADF (Bad file descriptor) [pid 330] close(21) = -1 EBADF (Bad file descriptor) [pid 330] close(22) = -1 EBADF (Bad file descriptor) [pid 330] close(23) = -1 EBADF (Bad file descriptor) [pid 330] close(24) = -1 EBADF (Bad file descriptor) [pid 330] close(25) = -1 EBADF (Bad file descriptor) [pid 330] close(26) = -1 EBADF (Bad file descriptor) [pid 330] close(27) = -1 EBADF (Bad file descriptor) [pid 330] close(28) = -1 EBADF (Bad file descriptor) [pid 330] close(29) = -1 EBADF (Bad file descriptor) [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 34 ./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x55557e6d4660, 24) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 [pid 331] write(1, "executing program\n", 18executing program ) = 18 [pid 331] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 331] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 331] write(4, "9", 1) = 1 [pid 331] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 331] close(3) = 0 [pid 331] close(4) = 0 [pid 331] close(5) = -1 EBADF (Bad file descriptor) [pid 331] close(6) = -1 EBADF (Bad file descriptor) [pid 331] close(7) = -1 EBADF (Bad file descriptor) [pid 331] close(8) = -1 EBADF (Bad file descriptor) [pid 331] close(9) = -1 EBADF (Bad file descriptor) [pid 331] close(10) = -1 EBADF (Bad file descriptor) [pid 331] close(11) = -1 EBADF (Bad file descriptor) [pid 331] close(12) = -1 EBADF (Bad file descriptor) [pid 331] close(13) = -1 EBADF (Bad file descriptor) [pid 331] close(14) = -1 EBADF (Bad file descriptor) [pid 331] close(15) = -1 EBADF (Bad file descriptor) [pid 331] close(16) = -1 EBADF (Bad file descriptor) [pid 331] close(17) = -1 EBADF (Bad file descriptor) [pid 331] close(18) = -1 EBADF (Bad file descriptor) [pid 331] close(19) = -1 EBADF (Bad file descriptor) [pid 331] close(20) = -1 EBADF (Bad file descriptor) [pid 331] close(21) = -1 EBADF (Bad file descriptor) [pid 331] close(22) = -1 EBADF (Bad file descriptor) [pid 331] close(23) = -1 EBADF (Bad file descriptor) [pid 331] close(24) = -1 EBADF (Bad file descriptor) [pid 331] close(25) = -1 EBADF (Bad file descriptor) [pid 331] close(26) = -1 EBADF (Bad file descriptor) [pid 331] close(27) = -1 EBADF (Bad file descriptor) [pid 331] close(28) = -1 EBADF (Bad file descriptor) [pid 331] close(29) = -1 EBADF (Bad file descriptor) [pid 331] exit_group(0) = ? [pid 331] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x55557e6d4660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 35 [pid 332] <... set_robust_list resumed>) = 0 [ 24.337078][ T329] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 24.337084][ T329] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 24.337089][ T329] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000005ed0 [ 24.337094][ T329] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 24.337101][ T329] [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 332] write(1, "executing program\n", 18executing program ) = 18 [pid 332] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 332] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 332] write(4, "9", 1) = 1 [pid 332] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 332] close(3) = 0 [pid 332] close(4) = 0 [pid 332] close(5) = -1 EBADF (Bad file descriptor) [pid 332] close(6) = -1 EBADF (Bad file descriptor) [pid 332] close(7) = -1 EBADF (Bad file descriptor) [pid 332] close(8) = -1 EBADF (Bad file descriptor) [pid 332] close(9) = -1 EBADF (Bad file descriptor) [pid 332] close(10) = -1 EBADF (Bad file descriptor) [pid 332] close(11) = -1 EBADF (Bad file descriptor) [pid 332] close(12) = -1 EBADF (Bad file descriptor) [pid 332] close(13) = -1 EBADF (Bad file descriptor) [pid 332] close(14) = -1 EBADF (Bad file descriptor) [pid 332] close(15) = -1 EBADF (Bad file descriptor) [pid 332] close(16) = -1 EBADF (Bad file descriptor) [pid 332] close(17) = -1 EBADF (Bad file descriptor) [pid 332] close(18) = -1 EBADF (Bad file descriptor) [pid 332] close(19) = -1 EBADF (Bad file descriptor) [pid 332] close(20) = -1 EBADF (Bad file descriptor) [pid 332] close(21) = -1 EBADF (Bad file descriptor) [pid 332] close(22) = -1 EBADF (Bad file descriptor) [pid 332] close(23) = -1 EBADF (Bad file descriptor) [pid 332] close(24) = -1 EBADF (Bad file descriptor) [pid 332] close(25) = -1 EBADF (Bad file descriptor) [pid 332] close(26) = -1 EBADF (Bad file descriptor) [pid 332] close(27) = -1 EBADF (Bad file descriptor) [pid 332] close(28) = -1 EBADF (Bad file descriptor) [pid 332] close(29) = -1 EBADF (Bad file descriptor) [pid 332] exit_group(0) = ? [pid 332] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 24.758929][ T332] FAULT_INJECTION: forcing a failure. [ 24.758929][ T332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 24.772365][ T332] CPU: 1 UID: 0 PID: 332 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 24.772385][ T332] Tainted: [W]=WARN [ 24.772388][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 24.772393][ T332] Call Trace: [ 24.772396][ T332] [ 24.772399][ T332] __dump_stack+0x21/0x30 [ 24.772415][ T332] dump_stack_lvl+0x10c/0x190 [ 24.772425][ T332] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.772434][ T332] ? kasan_save_free_info+0x4a/0x60 [ 24.772443][ T332] ? kmem_cache_free+0x1c1/0x4c0 [ 24.772453][ T332] ? unlink_anon_vmas+0x2c6/0x5c0 [ 24.772463][ T332] ? free_pgtables+0x2a9/0x730 [ 24.772475][ T332] ? vms_clean_up_area+0x66/0x1d0 [ 24.772485][ T332] dump_stack+0x19/0x20 [ 24.772494][ T332] should_fail_ex+0x3d9/0x530 [ 24.772504][ T332] should_fail_alloc_page+0xeb/0x110 [ 24.772516][ T332] __alloc_pages_noprof+0x19d/0x6c0 [ 24.772524][ T332] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 24.772532][ T332] ? is_bpf_text_address+0x17b/0x1a0 [ 24.772544][ T332] ? kernel_text_address+0xa9/0xe0 [ 24.772554][ T332] ? unwind_get_return_address+0x51/0x90 [ 24.772562][ T332] pte_alloc_one+0x97/0x520 [ 24.772573][ T332] ? __cfi_pte_alloc_one+0x10/0x10 [ 24.772583][ T332] ? pagerange_is_ram_callback+0xf4/0x150 [ 24.772595][ T332] __pte_alloc+0x79/0x420 [ 24.772604][ T332] ? __cfi___pte_alloc+0x10/0x10 [ 24.772613][ T332] ? pat_pagerange_is_ram+0xf4/0x140 [ 24.772623][ T332] ? cattr_name+0xc0/0xc0 [ 24.772633][ T332] remap_pfn_range_notrack+0x8d0/0xb00 [ 24.772643][ T332] ? lookup_memtype+0xe3/0x190 [ 24.772654][ T332] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 24.772665][ T332] ? __kasan_check_read+0x15/0x20 [ 24.772674][ T332] ? track_pfn_remap+0x2a7/0x340 [ 24.772684][ T332] remap_pfn_range+0xf1/0x170 [ 24.772694][ T332] ? __cfi_remap_pfn_range+0x10/0x10 [ 24.772704][ T332] ? kasan_save_alloc_info+0x40/0x50 [ 24.772713][ T332] sel_mmap_handle_status+0x2d8/0x3c0 [ 24.772723][ T332] mmap_region+0x1371/0x1bd0 [ 24.772733][ T332] ? __cfi_mmap_region+0x10/0x10 [ 24.772743][ T332] ? __kasan_check_read+0x15/0x20 [ 24.772751][ T332] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 24.772764][ T332] ? __get_unmapped_area+0x407/0x470 [ 24.772774][ T332] ? file_mmap_ok+0x147/0x1a0 [ 24.772783][ T332] do_mmap+0xb6d/0x13c0 [ 24.772792][ T332] ? __cfi_do_mmap+0x10/0x10 [ 24.772800][ T332] ? down_write_killable+0xe9/0x2d0 [ 24.772810][ T332] ? __cfi_down_write_killable+0x10/0x10 [ 24.772819][ T332] vm_mmap_pgoff+0x38f/0x4e0 [ 24.772829][ T332] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 24.772839][ T332] ? __fget_files+0x2c5/0x340 [ 24.772850][ T332] ksys_mmap_pgoff+0x166/0x1e0 [ 24.772859][ T332] __x64_sys_mmap+0x121/0x140 [ 24.772870][ T332] x64_sys_call+0x13bf/0x2ee0 [ 24.772880][ T332] do_syscall_64+0x58/0xf0 [ 24.772890][ T332] ? clear_bhb_loop+0x35/0x90 [ 24.772902][ T332] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.772913][ T332] RIP: 0033:0x7ff99b30dd79 [ 24.772921][ T332] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 24.772928][ T332] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x55557e6d4660, 24) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 36 [pid 333] <... prctl resumed>) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] write(1, "executing program\n", 18) = 18 [pid 333] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 333] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 333] write(4, "9", 1) = 1 [pid 333] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 333] close(3) = 0 [pid 333] close(4) = 0 [pid 333] close(5) = -1 EBADF (Bad file descriptor) [pid 333] close(6) = -1 EBADF (Bad file descriptor) [pid 333] close(7) = -1 EBADF (Bad file descriptor) [pid 333] close(8) = -1 EBADF (Bad file descriptor) [pid 333] close(9) = -1 EBADF (Bad file descriptor) [pid 333] close(10) = -1 EBADF (Bad file descriptor) [pid 333] close(11) = -1 EBADF (Bad file descriptor) [pid 333] close(12) = -1 EBADF (Bad file descriptor) [pid 333] close(13) = -1 EBADF (Bad file descriptor) [pid 333] close(14) = -1 EBADF (Bad file descriptor) [pid 333] close(15) = -1 EBADF (Bad file descriptor) [pid 333] close(16) = -1 EBADF (Bad file descriptor) [pid 333] close(17) = -1 EBADF (Bad file descriptor) [pid 333] close(18) = -1 EBADF (Bad file descriptor) [pid 333] close(19) = -1 EBADF (Bad file descriptor) [pid 333] close(20) = -1 EBADF (Bad file descriptor) [pid 333] close(21) = -1 EBADF (Bad file descriptor) [pid 333] close(22) = -1 EBADF (Bad file descriptor) [pid 333] close(23) = -1 EBADF (Bad file descriptor) [pid 333] close(24) = -1 EBADF (Bad file descriptor) [pid 333] close(25) = -1 EBADF (Bad file descriptor) [pid 333] close(26) = -1 EBADF (Bad file descriptor) [pid 333] close(27) = -1 EBADF (Bad file descriptor) [pid 333] close(28) = -1 EBADF (Bad file descriptor) [pid 333] close(29) = -1 EBADF (Bad file descriptor) [pid 333] exit_group(0) = ? [pid 333] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 37 ./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x55557e6d4660, 24) = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 executing program [pid 334] write(1, "executing program\n", 18) = 18 [pid 334] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 334] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 334] write(4, "9", 1) = 1 [ 24.772939][ T332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 24.772946][ T332] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 24.772951][ T332] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 24.772956][ T332] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000006086 [ 24.772962][ T332] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 24.772969][ T332] [pid 334] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 334] close(3) = 0 [pid 334] close(4) = 0 [pid 334] close(5) = -1 EBADF (Bad file descriptor) [pid 334] close(6) = -1 EBADF (Bad file descriptor) [pid 334] close(7) = -1 EBADF (Bad file descriptor) [pid 334] close(8) = -1 EBADF (Bad file descriptor) [pid 334] close(9) = -1 EBADF (Bad file descriptor) [pid 334] close(10) = -1 EBADF (Bad file descriptor) [pid 334] close(11) = -1 EBADF (Bad file descriptor) [pid 334] close(12) = -1 EBADF (Bad file descriptor) [pid 334] close(13) = -1 EBADF (Bad file descriptor) [pid 334] close(14) = -1 EBADF (Bad file descriptor) [pid 334] close(15) = -1 EBADF (Bad file descriptor) [pid 334] close(16) = -1 EBADF (Bad file descriptor) [ 25.164292][ T334] FAULT_INJECTION: forcing a failure. [ 25.164292][ T334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 25.177987][ T334] CPU: 1 UID: 0 PID: 334 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 25.178015][ T334] Tainted: [W]=WARN [ 25.178020][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 25.178028][ T334] Call Trace: [ 25.178034][ T334] [ 25.178041][ T334] __dump_stack+0x21/0x30 [ 25.178063][ T334] dump_stack_lvl+0x10c/0x190 [ 25.178078][ T334] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.178095][ T334] ? kasan_save_free_info+0x4a/0x60 [ 25.178109][ T334] ? kmem_cache_free+0x1c1/0x4c0 [ 25.178124][ T334] ? unlink_anon_vmas+0x2c6/0x5c0 [ 25.178139][ T334] ? free_pgtables+0x2a9/0x730 [ 25.178149][ T334] ? vms_clean_up_area+0x66/0x1d0 [ 25.178163][ T334] dump_stack+0x19/0x20 [ 25.178182][ T334] should_fail_ex+0x3d9/0x530 [ 25.178195][ T334] should_fail_alloc_page+0xeb/0x110 [ 25.178209][ T334] __alloc_pages_noprof+0x19d/0x6c0 [ 25.178220][ T334] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 25.178231][ T334] ? is_bpf_text_address+0x17b/0x1a0 [ 25.178246][ T334] ? kernel_text_address+0xa9/0xe0 [ 25.178258][ T334] ? unwind_get_return_address+0x51/0x90 [ 25.178269][ T334] pte_alloc_one+0x97/0x520 [ 25.178283][ T334] ? __cfi_pte_alloc_one+0x10/0x10 [ 25.178297][ T334] ? pagerange_is_ram_callback+0xf4/0x150 [ 25.178312][ T334] __pte_alloc+0x79/0x420 [ 25.178324][ T334] ? __cfi___pte_alloc+0x10/0x10 [ 25.178335][ T334] ? pat_pagerange_is_ram+0xf4/0x140 [ 25.178348][ T334] ? cattr_name+0xc0/0xc0 [ 25.178361][ T334] remap_pfn_range_notrack+0x8d0/0xb00 [ 25.178375][ T334] ? lookup_memtype+0xe3/0x190 [ 25.178389][ T334] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 25.178403][ T334] ? __kasan_check_read+0x15/0x20 [ 25.178414][ T334] ? track_pfn_remap+0x2a7/0x340 [ 25.178431][ T334] remap_pfn_range+0xf1/0x170 [ 25.178444][ T334] ? __cfi_remap_pfn_range+0x10/0x10 [ 25.178456][ T334] ? kasan_save_alloc_info+0x40/0x50 [ 25.178468][ T334] sel_mmap_handle_status+0x2d8/0x3c0 [ 25.178480][ T334] mmap_region+0x1371/0x1bd0 [ 25.178493][ T334] ? __cfi_mmap_region+0x10/0x10 [ 25.178507][ T334] ? __kasan_check_read+0x15/0x20 [ 25.178518][ T334] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 25.178536][ T334] ? __get_unmapped_area+0x407/0x470 [ 25.178548][ T334] ? file_mmap_ok+0x147/0x1a0 [ 25.178560][ T334] do_mmap+0xb6d/0x13c0 [ 25.178572][ T334] ? __cfi_do_mmap+0x10/0x10 [ 25.178583][ T334] ? down_write_killable+0xe9/0x2d0 [ 25.178596][ T334] ? __cfi_down_write_killable+0x10/0x10 [ 25.178607][ T334] vm_mmap_pgoff+0x38f/0x4e0 [ 25.178620][ T334] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 25.178633][ T334] ? __fget_files+0x2c5/0x340 [ 25.178648][ T334] ksys_mmap_pgoff+0x166/0x1e0 [ 25.178660][ T334] __x64_sys_mmap+0x121/0x140 [ 25.178674][ T334] x64_sys_call+0x13bf/0x2ee0 [ 25.178688][ T334] do_syscall_64+0x58/0xf0 [ 25.178701][ T334] ? clear_bhb_loop+0x35/0x90 [ 25.178716][ T334] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.178731][ T334] RIP: 0033:0x7ff99b30dd79 [ 25.178741][ T334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 25.178751][ T334] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 25.178764][ T334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [pid 334] close(17) = -1 EBADF (Bad file descriptor) [pid 334] close(18) = -1 EBADF (Bad file descriptor) [pid 334] close(19) = -1 EBADF (Bad file descriptor) [pid 334] close(20) = -1 EBADF (Bad file descriptor) [pid 334] close(21) = -1 EBADF (Bad file descriptor) [pid 334] close(22) = -1 EBADF (Bad file descriptor) [pid 334] close(23) = -1 EBADF (Bad file descriptor) [pid 334] close(24) = -1 EBADF (Bad file descriptor) [pid 334] close(25) = -1 EBADF (Bad file descriptor) [pid 334] close(26) = -1 EBADF (Bad file descriptor) [pid 334] close(27) = -1 EBADF (Bad file descriptor) [pid 334] close(28) = -1 EBADF (Bad file descriptor) [pid 334] close(29) = -1 EBADF (Bad file descriptor) [pid 334] exit_group(0) = ? [pid 334] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 38 ./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x55557e6d4660, 24) = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 executing program [pid 335] write(1, "executing program\n", 18) = 18 [pid 335] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 335] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 335] write(4, "9", 1) = 1 [ 25.178773][ T334] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 25.178780][ T334] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 25.178787][ T334] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000006229 [ 25.178794][ T334] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 25.178803][ T334] [pid 335] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 335] close(3) = 0 [pid 335] close(4) = 0 [pid 335] close(5) = -1 EBADF (Bad file descriptor) [pid 335] close(6) = -1 EBADF (Bad file descriptor) [pid 335] close(7) = -1 EBADF (Bad file descriptor) [pid 335] close(8) = -1 EBADF (Bad file descriptor) [pid 335] close(9) = -1 EBADF (Bad file descriptor) [ 25.565447][ T335] FAULT_INJECTION: forcing a failure. [ 25.565447][ T335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 25.579169][ T335] CPU: 0 UID: 0 PID: 335 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 25.579264][ T335] Tainted: [W]=WARN [ 25.579268][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 25.579275][ T335] Call Trace: [ 25.579279][ T335] [ 25.579284][ T335] __dump_stack+0x21/0x30 [ 25.579304][ T335] dump_stack_lvl+0x10c/0x190 [ 25.579322][ T335] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.579341][ T335] ? kasan_save_free_info+0x4a/0x60 [ 25.579360][ T335] ? kmem_cache_free+0x1c1/0x4c0 [ 25.579379][ T335] ? unlink_anon_vmas+0x2c6/0x5c0 [ 25.579398][ T335] ? free_pgtables+0x2a9/0x730 [ 25.579418][ T335] ? vms_clean_up_area+0x66/0x1d0 [ 25.579439][ T335] dump_stack+0x19/0x20 [ 25.579457][ T335] should_fail_ex+0x3d9/0x530 [ 25.579473][ T335] should_fail_alloc_page+0xeb/0x110 [ 25.579487][ T335] __alloc_pages_noprof+0x19d/0x6c0 [ 25.579498][ T335] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 25.579509][ T335] ? is_bpf_text_address+0x17b/0x1a0 [ 25.579524][ T335] ? kernel_text_address+0xa9/0xe0 [ 25.579535][ T335] ? unwind_get_return_address+0x51/0x90 [ 25.579546][ T335] pte_alloc_one+0x97/0x520 [ 25.579560][ T335] ? __cfi_pte_alloc_one+0x10/0x10 [ 25.579574][ T335] ? pagerange_is_ram_callback+0xf4/0x150 [ 25.579589][ T335] __pte_alloc+0x79/0x420 [ 25.579601][ T335] ? __cfi___pte_alloc+0x10/0x10 [ 25.579612][ T335] ? pat_pagerange_is_ram+0xf4/0x140 [ 25.579625][ T335] ? cattr_name+0xc0/0xc0 [ 25.579638][ T335] remap_pfn_range_notrack+0x8d0/0xb00 [ 25.579649][ T335] ? lookup_memtype+0xe3/0x190 [ 25.579660][ T335] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 25.579671][ T335] ? __kasan_check_read+0x15/0x20 [ 25.579679][ T335] ? track_pfn_remap+0x2a7/0x340 [ 25.579698][ T335] remap_pfn_range+0xf1/0x170 [ 25.579708][ T335] ? __cfi_remap_pfn_range+0x10/0x10 [ 25.579717][ T335] ? kasan_save_alloc_info+0x40/0x50 [ 25.579726][ T335] sel_mmap_handle_status+0x2d8/0x3c0 [ 25.579735][ T335] mmap_region+0x1371/0x1bd0 [ 25.579746][ T335] ? __cfi_mmap_region+0x10/0x10 [ 25.579757][ T335] ? __kasan_check_read+0x15/0x20 [ 25.579765][ T335] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 25.579779][ T335] ? __get_unmapped_area+0x407/0x470 [ 25.579788][ T335] ? file_mmap_ok+0x147/0x1a0 [ 25.579797][ T335] do_mmap+0xb6d/0x13c0 [ 25.579806][ T335] ? __cfi_do_mmap+0x10/0x10 [ 25.579815][ T335] ? down_write_killable+0xe9/0x2d0 [ 25.579825][ T335] ? __cfi_down_write_killable+0x10/0x10 [ 25.579833][ T335] vm_mmap_pgoff+0x38f/0x4e0 [ 25.579843][ T335] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 25.579853][ T335] ? __fget_files+0x2c5/0x340 [ 25.579864][ T335] ksys_mmap_pgoff+0x166/0x1e0 [ 25.579874][ T335] __x64_sys_mmap+0x121/0x140 [ 25.579884][ T335] x64_sys_call+0x13bf/0x2ee0 [ 25.579895][ T335] do_syscall_64+0x58/0xf0 [ 25.579905][ T335] ? clear_bhb_loop+0x35/0x90 [ 25.579918][ T335] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.579929][ T335] RIP: 0033:0x7ff99b30dd79 [ 25.579938][ T335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 25.579947][ T335] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 25.579959][ T335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [pid 335] close(10) = -1 EBADF (Bad file descriptor) [pid 335] close(11) = -1 EBADF (Bad file descriptor) [pid 335] close(12) = -1 EBADF (Bad file descriptor) [pid 335] close(13) = -1 EBADF (Bad file descriptor) [pid 335] close(14) = -1 EBADF (Bad file descriptor) [pid 335] close(15) = -1 EBADF (Bad file descriptor) [pid 335] close(16) = -1 EBADF (Bad file descriptor) [pid 335] close(17) = -1 EBADF (Bad file descriptor) [pid 335] close(18) = -1 EBADF (Bad file descriptor) [pid 335] close(19) = -1 EBADF (Bad file descriptor) [pid 335] close(20) = -1 EBADF (Bad file descriptor) [pid 335] close(21) = -1 EBADF (Bad file descriptor) [pid 335] close(22) = -1 EBADF (Bad file descriptor) [pid 335] close(23) = -1 EBADF (Bad file descriptor) [pid 335] close(24) = -1 EBADF (Bad file descriptor) [pid 335] close(25) = -1 EBADF (Bad file descriptor) [pid 335] close(26) = -1 EBADF (Bad file descriptor) [pid 335] close(27) = -1 EBADF (Bad file descriptor) [pid 335] close(28) = -1 EBADF (Bad file descriptor) [pid 335] close(29) = -1 EBADF (Bad file descriptor) [pid 335] exit_group(0) = ? [pid 335] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 39 ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x55557e6d4660, 24) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] write(1, "executing program\n", 18executing program ) = 18 [pid 336] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 336] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 336] write(4, "9", 1) = 1 [pid 336] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 336] close(3) = 0 [pid 336] close(4) = 0 [pid 336] close(5) = -1 EBADF (Bad file descriptor) [pid 336] close(6) = -1 EBADF (Bad file descriptor) [pid 336] close(7) = -1 EBADF (Bad file descriptor) [pid 336] close(8) = -1 EBADF (Bad file descriptor) [pid 336] close(9) = -1 EBADF (Bad file descriptor) [pid 336] close(10) = -1 EBADF (Bad file descriptor) [pid 336] close(11) = -1 EBADF (Bad file descriptor) [pid 336] close(12) = -1 EBADF (Bad file descriptor) [pid 336] close(13) = -1 EBADF (Bad file descriptor) [pid 336] close(14) = -1 EBADF (Bad file descriptor) [pid 336] close(15) = -1 EBADF (Bad file descriptor) [pid 336] close(16) = -1 EBADF (Bad file descriptor) [pid 336] close(17) = -1 EBADF (Bad file descriptor) [pid 336] close(18) = -1 EBADF (Bad file descriptor) [pid 336] close(19) = -1 EBADF (Bad file descriptor) [pid 336] close(20) = -1 EBADF (Bad file descriptor) [pid 336] close(21) = -1 EBADF (Bad file descriptor) [pid 336] close(22) = -1 EBADF (Bad file descriptor) [pid 336] close(23) = -1 EBADF (Bad file descriptor) [pid 336] close(24) = -1 EBADF (Bad file descriptor) [pid 336] close(25) = -1 EBADF (Bad file descriptor) [pid 336] close(26) = -1 EBADF (Bad file descriptor) [pid 336] close(27) = -1 EBADF (Bad file descriptor) [pid 336] close(28) = -1 EBADF (Bad file descriptor) [pid 336] close(29) = -1 EBADF (Bad file descriptor) [pid 336] exit_group(0) = ? [pid 336] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 40 ./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x55557e6d4660, 24) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] write(1, "executing program\n", 18executing program ) = 18 [pid 337] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 337] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 337] write(4, "9", 1) = 1 [pid 337] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 337] close(3) = 0 [pid 337] close(4) = 0 [pid 337] close(5) = -1 EBADF (Bad file descriptor) [pid 337] close(6) = -1 EBADF (Bad file descriptor) [pid 337] close(7) = -1 EBADF (Bad file descriptor) [pid 337] close(8) = -1 EBADF (Bad file descriptor) [pid 337] close(9) = -1 EBADF (Bad file descriptor) [pid 337] close(10) = -1 EBADF (Bad file descriptor) [pid 337] close(11) = -1 EBADF (Bad file descriptor) [pid 337] close(12) = -1 EBADF (Bad file descriptor) [pid 337] close(13) = -1 EBADF (Bad file descriptor) [pid 337] close(14) = -1 EBADF (Bad file descriptor) [pid 337] close(15) = -1 EBADF (Bad file descriptor) [pid 337] close(16) = -1 EBADF (Bad file descriptor) [pid 337] close(17) = -1 EBADF (Bad file descriptor) [pid 337] close(18) = -1 EBADF (Bad file descriptor) [pid 337] close(19) = -1 EBADF (Bad file descriptor) [pid 337] close(20) = -1 EBADF (Bad file descriptor) [pid 337] close(21) = -1 EBADF (Bad file descriptor) [pid 337] close(22) = -1 EBADF (Bad file descriptor) [pid 337] close(23) = -1 EBADF (Bad file descriptor) [pid 337] close(24) = -1 EBADF (Bad file descriptor) [pid 337] close(25) = -1 EBADF (Bad file descriptor) [ 25.579965][ T335] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 25.579971][ T335] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 25.579976][ T335] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000006234 [ 25.579982][ T335] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 25.579989][ T335] [pid 337] close(26) = -1 EBADF (Bad file descriptor) [pid 337] close(27) = -1 EBADF (Bad file descriptor) [pid 337] close(28) = -1 EBADF (Bad file descriptor) [pid 337] close(29) = -1 EBADF (Bad file descriptor) [pid 337] exit_group(0) = ? [pid 337] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 41 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x55557e6d4660, 24) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 executing program [pid 338] close(3) = 0 [pid 338] write(1, "executing program\n", 18) = 18 [pid 338] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 338] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 338] write(4, "9", 1) = 1 [pid 338] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 338] close(3) = 0 [pid 338] close(4) = 0 [pid 338] close(5) = -1 EBADF (Bad file descriptor) [pid 338] close(6) = -1 EBADF (Bad file descriptor) [pid 338] close(7) = -1 EBADF (Bad file descriptor) [pid 338] close(8) = -1 EBADF (Bad file descriptor) [pid 338] close(9) = -1 EBADF (Bad file descriptor) [pid 338] close(10) = -1 EBADF (Bad file descriptor) [pid 338] close(11) = -1 EBADF (Bad file descriptor) [pid 338] close(12) = -1 EBADF (Bad file descriptor) [pid 338] close(13) = -1 EBADF (Bad file descriptor) [pid 338] close(14) = -1 EBADF (Bad file descriptor) [pid 338] close(15) = -1 EBADF (Bad file descriptor) [pid 338] close(16) = -1 EBADF (Bad file descriptor) [pid 338] close(17) = -1 EBADF (Bad file descriptor) [pid 338] close(18) = -1 EBADF (Bad file descriptor) [pid 338] close(19) = -1 EBADF (Bad file descriptor) [pid 338] close(20) = -1 EBADF (Bad file descriptor) [pid 338] close(21) = -1 EBADF (Bad file descriptor) [pid 338] close(22) = -1 EBADF (Bad file descriptor) [pid 338] close(23) = -1 EBADF (Bad file descriptor) [pid 338] close(24) = -1 EBADF (Bad file descriptor) [pid 338] close(25) = -1 EBADF (Bad file descriptor) [pid 338] close(26) = -1 EBADF (Bad file descriptor) [pid 338] close(27) = -1 EBADF (Bad file descriptor) [pid 338] close(28) = -1 EBADF (Bad file descriptor) [pid 338] close(29) = -1 EBADF (Bad file descriptor) [pid 338] exit_group(0) = ? [pid 338] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 42 ./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x55557e6d4660, 24) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] write(1, "executing program\n", 18executing program ) = 18 [pid 339] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 339] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 339] write(4, "9", 1) = 1 [pid 339] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 339] close(3) = 0 [pid 339] close(4) = 0 [pid 339] close(5) = -1 EBADF (Bad file descriptor) [pid 339] close(6) = -1 EBADF (Bad file descriptor) [pid 339] close(7) = -1 EBADF (Bad file descriptor) [pid 339] close(8) = -1 EBADF (Bad file descriptor) [pid 339] close(9) = -1 EBADF (Bad file descriptor) [pid 339] close(10) = -1 EBADF (Bad file descriptor) [pid 339] close(11) = -1 EBADF (Bad file descriptor) [pid 339] close(12) = -1 EBADF (Bad file descriptor) [pid 339] close(13) = -1 EBADF (Bad file descriptor) [pid 339] close(14) = -1 EBADF (Bad file descriptor) [pid 339] close(15) = -1 EBADF (Bad file descriptor) [pid 339] close(16) = -1 EBADF (Bad file descriptor) [pid 339] close(17) = -1 EBADF (Bad file descriptor) [pid 339] close(18) = -1 EBADF (Bad file descriptor) [pid 339] close(19) = -1 EBADF (Bad file descriptor) [ 26.019631][ T339] FAULT_INJECTION: forcing a failure. [ 26.019631][ T339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 26.033260][ T339] CPU: 0 UID: 0 PID: 339 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 26.033290][ T339] Tainted: [W]=WARN [ 26.033295][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 26.033306][ T339] Call Trace: [ 26.033312][ T339] [ 26.033319][ T339] __dump_stack+0x21/0x30 [ 26.033346][ T339] dump_stack_lvl+0x10c/0x190 [ 26.033367][ T339] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.033387][ T339] ? kasan_save_free_info+0x4a/0x60 [ 26.033405][ T339] ? kmem_cache_free+0x1c1/0x4c0 [ 26.033425][ T339] ? unlink_anon_vmas+0x2c6/0x5c0 [ 26.033444][ T339] ? free_pgtables+0x2a9/0x730 [ 26.033461][ T339] ? vms_clean_up_area+0x66/0x1d0 [ 26.033474][ T339] dump_stack+0x19/0x20 [ 26.033486][ T339] should_fail_ex+0x3d9/0x530 [ 26.033498][ T339] should_fail_alloc_page+0xeb/0x110 [ 26.033512][ T339] __alloc_pages_noprof+0x19d/0x6c0 [ 26.033523][ T339] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 26.033533][ T339] ? is_bpf_text_address+0x17b/0x1a0 [ 26.033548][ T339] ? kernel_text_address+0xa9/0xe0 [ 26.033560][ T339] ? unwind_get_return_address+0x51/0x90 [ 26.033571][ T339] pte_alloc_one+0x97/0x520 [ 26.033584][ T339] ? __cfi_pte_alloc_one+0x10/0x10 [ 26.033598][ T339] ? pagerange_is_ram_callback+0xf4/0x150 [ 26.033613][ T339] __pte_alloc+0x79/0x420 [ 26.033625][ T339] ? __cfi___pte_alloc+0x10/0x10 [ 26.033636][ T339] ? pat_pagerange_is_ram+0xf4/0x140 [ 26.033649][ T339] ? cattr_name+0xc0/0xc0 [ 26.033663][ T339] remap_pfn_range_notrack+0x8d0/0xb00 [ 26.033676][ T339] ? lookup_memtype+0xe3/0x190 [ 26.033690][ T339] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 26.033703][ T339] ? __kasan_check_read+0x15/0x20 [ 26.033715][ T339] ? track_pfn_remap+0x2a7/0x340 [ 26.033729][ T339] remap_pfn_range+0xf1/0x170 [ 26.033742][ T339] ? __cfi_remap_pfn_range+0x10/0x10 [ 26.033754][ T339] ? kasan_save_alloc_info+0x40/0x50 [ 26.033765][ T339] sel_mmap_handle_status+0x2d8/0x3c0 [ 26.033777][ T339] mmap_region+0x1371/0x1bd0 [ 26.033790][ T339] ? __cfi_mmap_region+0x10/0x10 [ 26.033803][ T339] ? __kasan_check_read+0x15/0x20 [ 26.033814][ T339] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 26.033831][ T339] ? __get_unmapped_area+0x407/0x470 [ 26.033843][ T339] ? file_mmap_ok+0x147/0x1a0 [ 26.033855][ T339] do_mmap+0xb6d/0x13c0 [ 26.033867][ T339] ? __cfi_do_mmap+0x10/0x10 [ 26.033878][ T339] ? down_write_killable+0xe9/0x2d0 [ 26.033890][ T339] ? __cfi_down_write_killable+0x10/0x10 [ 26.033902][ T339] vm_mmap_pgoff+0x38f/0x4e0 [ 26.033914][ T339] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 26.033927][ T339] ? __fget_files+0x2c5/0x340 [ 26.033941][ T339] ksys_mmap_pgoff+0x166/0x1e0 [ 26.033953][ T339] __x64_sys_mmap+0x121/0x140 [ 26.033965][ T339] x64_sys_call+0x13bf/0x2ee0 [ 26.033976][ T339] do_syscall_64+0x58/0xf0 [ 26.033986][ T339] ? clear_bhb_loop+0x35/0x90 [ 26.033998][ T339] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.034009][ T339] RIP: 0033:0x7ff99b30dd79 [ 26.034018][ T339] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 26.034025][ T339] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [pid 339] close(20) = -1 EBADF (Bad file descriptor) [pid 339] close(21) = -1 EBADF (Bad file descriptor) [pid 339] close(22) = -1 EBADF (Bad file descriptor) [pid 339] close(23) = -1 EBADF (Bad file descriptor) [pid 339] close(24) = -1 EBADF (Bad file descriptor) [pid 339] close(25) = -1 EBADF (Bad file descriptor) [pid 339] close(26) = -1 EBADF (Bad file descriptor) [pid 339] close(27) = -1 EBADF (Bad file descriptor) [pid 339] close(28) = -1 EBADF (Bad file descriptor) [pid 339] close(29) = -1 EBADF (Bad file descriptor) [pid 339] exit_group(0) = ? [pid 339] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 43 ./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x55557e6d4660, 24) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] write(1, "executing program\n", 18executing program ) = 18 [pid 340] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 340] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 340] write(4, "9", 1) = 1 [pid 340] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 340] close(3) = 0 [pid 340] close(4) = 0 [pid 340] close(5) = -1 EBADF (Bad file descriptor) [pid 340] close(6) = -1 EBADF (Bad file descriptor) [pid 340] close(7) = -1 EBADF (Bad file descriptor) [pid 340] close(8) = -1 EBADF (Bad file descriptor) [pid 340] close(9) = -1 EBADF (Bad file descriptor) [pid 340] close(10) = -1 EBADF (Bad file descriptor) [pid 340] close(11) = -1 EBADF (Bad file descriptor) [pid 340] close(12) = -1 EBADF (Bad file descriptor) [pid 340] close(13) = -1 EBADF (Bad file descriptor) [pid 340] close(14) = -1 EBADF (Bad file descriptor) [pid 340] close(15) = -1 EBADF (Bad file descriptor) [pid 340] close(16) = -1 EBADF (Bad file descriptor) [pid 340] close(17) = -1 EBADF (Bad file descriptor) [pid 340] close(18) = -1 EBADF (Bad file descriptor) [pid 340] close(19) = -1 EBADF (Bad file descriptor) [pid 340] close(20) = -1 EBADF (Bad file descriptor) [pid 340] close(21) = -1 EBADF (Bad file descriptor) [pid 340] close(22) = -1 EBADF (Bad file descriptor) [pid 340] close(23) = -1 EBADF (Bad file descriptor) [pid 340] close(24) = -1 EBADF (Bad file descriptor) [pid 340] close(25) = -1 EBADF (Bad file descriptor) [pid 340] close(26) = -1 EBADF (Bad file descriptor) [pid 340] close(27) = -1 EBADF (Bad file descriptor) [pid 340] close(28) = -1 EBADF (Bad file descriptor) [pid 340] close(29) = -1 EBADF (Bad file descriptor) [pid 340] exit_group(0) = ? [pid 340] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 44 ./strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x55557e6d4660, 24) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 executing program [pid 341] write(1, "executing program\n", 18) = 18 [pid 341] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 341] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 341] write(4, "9", 1) = 1 [pid 341] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 341] close(3) = 0 [pid 341] close(4) = 0 [pid 341] close(5) = -1 EBADF (Bad file descriptor) [pid 341] close(6) = -1 EBADF (Bad file descriptor) [pid 341] close(7) = -1 EBADF (Bad file descriptor) [pid 341] close(8) = -1 EBADF (Bad file descriptor) [pid 341] close(9) = -1 EBADF (Bad file descriptor) [pid 341] close(10) = -1 EBADF (Bad file descriptor) [pid 341] close(11) = -1 EBADF (Bad file descriptor) [pid 341] close(12) = -1 EBADF (Bad file descriptor) [pid 341] close(13) = -1 EBADF (Bad file descriptor) [pid 341] close(14) = -1 EBADF (Bad file descriptor) [pid 341] close(15) = -1 EBADF (Bad file descriptor) [pid 341] close(16) = -1 EBADF (Bad file descriptor) [pid 341] close(17) = -1 EBADF (Bad file descriptor) [pid 341] close(18) = -1 EBADF (Bad file descriptor) [pid 341] close(19) = -1 EBADF (Bad file descriptor) [pid 341] close(20) = -1 EBADF (Bad file descriptor) [pid 341] close(21) = -1 EBADF (Bad file descriptor) [pid 341] close(22) = -1 EBADF (Bad file descriptor) [pid 341] close(23) = -1 EBADF (Bad file descriptor) [pid 341] close(24) = -1 EBADF (Bad file descriptor) [pid 341] close(25) = -1 EBADF (Bad file descriptor) [pid 341] close(26) = -1 EBADF (Bad file descriptor) [pid 341] close(27) = -1 EBADF (Bad file descriptor) [pid 341] close(28) = -1 EBADF (Bad file descriptor) [pid 341] close(29) = -1 EBADF (Bad file descriptor) [pid 341] exit_group(0) = ? [pid 341] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 45 ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x55557e6d4660, 24) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 executing program [pid 342] write(1, "executing program\n", 18) = 18 [pid 342] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 342] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 342] write(4, "9", 1) = 1 [ 26.034036][ T339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 26.034043][ T339] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 26.034048][ T339] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 26.034053][ T339] R10: 0000000000000011 R11: 0000000000000246 R12: 000000000000657c [ 26.034059][ T339] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 26.034066][ T339] [ 26.448367][ T342] FAULT_INJECTION: forcing a failure. [ 26.448367][ T342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 26.461844][ T342] CPU: 1 UID: 0 PID: 342 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 26.461864][ T342] Tainted: [W]=WARN [ 26.461867][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 26.461872][ T342] Call Trace: [ 26.461876][ T342] [ 26.461879][ T342] __dump_stack+0x21/0x30 [ 26.461894][ T342] dump_stack_lvl+0x10c/0x190 [ 26.461903][ T342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.461913][ T342] ? kasan_save_free_info+0x4a/0x60 [ 26.461922][ T342] ? kmem_cache_free+0x1c1/0x4c0 [ 26.461932][ T342] ? unlink_anon_vmas+0x2c6/0x5c0 [ 26.461942][ T342] ? free_pgtables+0x2a9/0x730 [ 26.461951][ T342] ? vms_clean_up_area+0x66/0x1d0 [ 26.461962][ T342] dump_stack+0x19/0x20 [ 26.461971][ T342] should_fail_ex+0x3d9/0x530 [ 26.461980][ T342] should_fail_alloc_page+0xeb/0x110 [ 26.461992][ T342] __alloc_pages_noprof+0x19d/0x6c0 [ 26.462000][ T342] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 26.462011][ T342] ? is_bpf_text_address+0x17b/0x1a0 [ 26.462023][ T342] ? kernel_text_address+0xa9/0xe0 [ 26.462032][ T342] ? unwind_get_return_address+0x51/0x90 [ 26.462041][ T342] pte_alloc_one+0x97/0x520 [ 26.462051][ T342] ? __cfi_pte_alloc_one+0x10/0x10 [ 26.462062][ T342] ? pagerange_is_ram_callback+0xf4/0x150 [ 26.462074][ T342] __pte_alloc+0x79/0x420 [ 26.462083][ T342] ? __cfi___pte_alloc+0x10/0x10 [ 26.462091][ T342] ? pat_pagerange_is_ram+0xf4/0x140 [ 26.462101][ T342] ? cattr_name+0xc0/0xc0 [ 26.462111][ T342] remap_pfn_range_notrack+0x8d0/0xb00 [ 26.462122][ T342] ? lookup_memtype+0xe3/0x190 [ 26.462133][ T342] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 26.462149][ T342] ? __kasan_check_read+0x15/0x20 [ 26.462158][ T342] ? track_pfn_remap+0x2a7/0x340 [ 26.462169][ T342] remap_pfn_range+0xf1/0x170 [ 26.462179][ T342] ? __cfi_remap_pfn_range+0x10/0x10 [ 26.462189][ T342] ? kasan_save_alloc_info+0x40/0x50 [ 26.462198][ T342] sel_mmap_handle_status+0x2d8/0x3c0 [ 26.462208][ T342] mmap_region+0x1371/0x1bd0 [ 26.462225][ T342] ? __cfi_mmap_region+0x10/0x10 [ 26.462235][ T342] ? __kasan_check_read+0x15/0x20 [ 26.462244][ T342] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 26.462257][ T342] ? __get_unmapped_area+0x407/0x470 [ 26.462267][ T342] ? file_mmap_ok+0x147/0x1a0 [ 26.462276][ T342] do_mmap+0xb6d/0x13c0 [ 26.462285][ T342] ? __cfi_do_mmap+0x10/0x10 [ 26.462294][ T342] ? down_write_killable+0xe9/0x2d0 [ 26.462304][ T342] ? __cfi_down_write_killable+0x10/0x10 [ 26.462313][ T342] vm_mmap_pgoff+0x38f/0x4e0 [ 26.462323][ T342] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 26.462332][ T342] ? __fget_files+0x2c5/0x340 [ 26.462344][ T342] ksys_mmap_pgoff+0x166/0x1e0 [ 26.462354][ T342] __x64_sys_mmap+0x121/0x140 [ 26.462364][ T342] x64_sys_call+0x13bf/0x2ee0 [ 26.462375][ T342] do_syscall_64+0x58/0xf0 [ 26.462385][ T342] ? clear_bhb_loop+0x35/0x90 [ 26.462397][ T342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.462408][ T342] RIP: 0033:0x7ff99b30dd79 [ 26.462417][ T342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 26.462424][ T342] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 26.462435][ T342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [pid 342] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 342] close(3) = 0 [pid 342] close(4) = 0 [pid 342] close(5) = -1 EBADF (Bad file descriptor) [pid 342] close(6) = -1 EBADF (Bad file descriptor) [pid 342] close(7) = -1 EBADF (Bad file descriptor) [pid 342] close(8) = -1 EBADF (Bad file descriptor) [pid 342] close(9) = -1 EBADF (Bad file descriptor) [pid 342] close(10) = -1 EBADF (Bad file descriptor) [pid 342] close(11) = -1 EBADF (Bad file descriptor) [pid 342] close(12) = -1 EBADF (Bad file descriptor) [pid 342] close(13) = -1 EBADF (Bad file descriptor) [pid 342] close(14) = -1 EBADF (Bad file descriptor) [pid 342] close(15) = -1 EBADF (Bad file descriptor) [pid 342] close(16) = -1 EBADF (Bad file descriptor) [pid 342] close(17) = -1 EBADF (Bad file descriptor) [pid 342] close(18) = -1 EBADF (Bad file descriptor) [pid 342] close(19) = -1 EBADF (Bad file descriptor) [pid 342] close(20) = -1 EBADF (Bad file descriptor) [pid 342] close(21) = -1 EBADF (Bad file descriptor) [pid 342] close(22) = -1 EBADF (Bad file descriptor) [pid 342] close(23) = -1 EBADF (Bad file descriptor) [pid 342] close(24) = -1 EBADF (Bad file descriptor) [pid 342] close(25) = -1 EBADF (Bad file descriptor) [pid 342] close(26) = -1 EBADF (Bad file descriptor) [pid 342] close(27) = -1 EBADF (Bad file descriptor) [pid 342] close(28) = -1 EBADF (Bad file descriptor) [pid 342] close(29) = -1 EBADF (Bad file descriptor) [pid 342] exit_group(0) = ? [pid 342] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 46 ./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x55557e6d4660, 24) = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 343] setpgid(0, 0) = 0 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 343] write(3, "1000", 4) = 4 [pid 343] close(3) = 0 executing program [pid 343] write(1, "executing program\n", 18) = 18 [pid 343] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 343] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 343] write(4, "9", 1) = 1 [pid 343] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 343] close(3) = 0 [pid 343] close(4) = 0 [pid 343] close(5) = -1 EBADF (Bad file descriptor) [pid 343] close(6) = -1 EBADF (Bad file descriptor) [pid 343] close(7) = -1 EBADF (Bad file descriptor) [pid 343] close(8) = -1 EBADF (Bad file descriptor) [pid 343] close(9) = -1 EBADF (Bad file descriptor) [pid 343] close(10) = -1 EBADF (Bad file descriptor) [pid 343] close(11) = -1 EBADF (Bad file descriptor) [pid 343] close(12) = -1 EBADF (Bad file descriptor) [pid 343] close(13) = -1 EBADF (Bad file descriptor) [pid 343] close(14) = -1 EBADF (Bad file descriptor) [pid 343] close(15) = -1 EBADF (Bad file descriptor) [pid 343] close(16) = -1 EBADF (Bad file descriptor) [pid 343] close(17) = -1 EBADF (Bad file descriptor) [pid 343] close(18) = -1 EBADF (Bad file descriptor) [pid 343] close(19) = -1 EBADF (Bad file descriptor) [pid 343] close(20) = -1 EBADF (Bad file descriptor) [pid 343] close(21) = -1 EBADF (Bad file descriptor) [pid 343] close(22) = -1 EBADF (Bad file descriptor) [pid 343] close(23) = -1 EBADF (Bad file descriptor) [pid 343] close(24) = -1 EBADF (Bad file descriptor) [pid 343] close(25) = -1 EBADF (Bad file descriptor) [pid 343] close(26) = -1 EBADF (Bad file descriptor) [pid 343] close(27) = -1 EBADF (Bad file descriptor) [pid 343] close(28) = -1 EBADF (Bad file descriptor) [pid 343] close(29) = -1 EBADF (Bad file descriptor) [pid 343] exit_group(0) = ? [pid 343] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 47 ./strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x55557e6d4660, 24) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 executing program [pid 344] write(1, "executing program\n", 18) = 18 [pid 344] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 344] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 344] write(4, "9", 1) = 1 [ 26.462441][ T342] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 26.462447][ T342] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 26.462452][ T342] R10: 0000000000000011 R11: 0000000000000246 R12: 000000000000672b [ 26.462458][ T342] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 26.462464][ T342] [pid 344] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 344] close(3) = 0 [pid 344] close(4) = 0 [pid 344] close(5) = -1 EBADF (Bad file descriptor) [pid 344] close(6) = -1 EBADF (Bad file descriptor) [pid 344] close(7) = -1 EBADF (Bad file descriptor) [pid 344] close(8) = -1 EBADF (Bad file descriptor) [pid 344] close(9) = -1 EBADF (Bad file descriptor) [pid 344] close(10) = -1 EBADF (Bad file descriptor) [pid 344] close(11) = -1 EBADF (Bad file descriptor) [pid 344] close(12) = -1 EBADF (Bad file descriptor) [pid 344] close(13) = -1 EBADF (Bad file descriptor) [pid 344] close(14) = -1 EBADF (Bad file descriptor) [pid 344] close(15) = -1 EBADF (Bad file descriptor) [pid 344] close(16) = -1 EBADF (Bad file descriptor) [pid 344] close(17) = -1 EBADF (Bad file descriptor) [pid 344] close(18) = -1 EBADF (Bad file descriptor) [pid 344] close(19) = -1 EBADF (Bad file descriptor) [pid 344] close(20) = -1 EBADF (Bad file descriptor) [pid 344] close(21) = -1 EBADF (Bad file descriptor) [pid 344] close(22) = -1 EBADF (Bad file descriptor) [pid 344] close(23) = -1 EBADF (Bad file descriptor) [pid 344] close(24) = -1 EBADF (Bad file descriptor) [pid 344] close(25) = -1 EBADF (Bad file descriptor) [pid 344] close(26) = -1 EBADF (Bad file descriptor) [pid 344] close(27) = -1 EBADF (Bad file descriptor) [pid 344] close(28) = -1 EBADF (Bad file descriptor) [pid 344] close(29) = -1 EBADF (Bad file descriptor) [pid 344] exit_group(0) = ? [pid 344] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 26.869924][ T344] FAULT_INJECTION: forcing a failure. [ 26.869924][ T344] name failslab, interval 1, probability 0, space 0, times 0 [ 26.882856][ T344] CPU: 0 UID: 0 PID: 344 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 26.882877][ T344] Tainted: [W]=WARN [ 26.882881][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 26.882885][ T344] Call Trace: [ 26.882888][ T344] [ 26.882892][ T344] __dump_stack+0x21/0x30 [ 26.882908][ T344] dump_stack_lvl+0x10c/0x190 [ 26.882918][ T344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.882928][ T344] dump_stack+0x19/0x20 [ 26.882937][ T344] should_fail_ex+0x3d9/0x530 [ 26.882947][ T344] should_failslab+0xac/0x100 [ 26.882959][ T344] kmem_cache_alloc_noprof+0x42/0x3a0 [ 26.882969][ T344] ? vm_area_alloc+0x3f/0x1a0 [ 26.882980][ T344] vm_area_alloc+0x3f/0x1a0 [ 26.882991][ T344] mmap_region+0xb8f/0x1bd0 [ 26.883001][ T344] ? sched_clock+0x44/0x60 [ 26.883010][ T344] ? __cfi_mmap_region+0x10/0x10 [ 26.883020][ T344] ? __kasan_check_read+0x15/0x20 [ 26.883029][ T344] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 26.883042][ T344] ? __get_unmapped_area+0x407/0x470 [ 26.883051][ T344] ? file_mmap_ok+0x147/0x1a0 [ 26.883060][ T344] do_mmap+0xb6d/0x13c0 [ 26.883069][ T344] ? __cfi_do_mmap+0x10/0x10 [ 26.883080][ T344] ? down_write_killable+0xe9/0x2d0 [ 26.883094][ T344] ? __cfi_down_write_killable+0x10/0x10 [ 26.883108][ T344] vm_mmap_pgoff+0x38f/0x4e0 [ 26.883125][ T344] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 26.883139][ T344] ? __fget_files+0x2c5/0x340 [ 26.883158][ T344] ksys_mmap_pgoff+0x166/0x1e0 [ 26.883173][ T344] __x64_sys_mmap+0x121/0x140 [ 26.883221][ T344] x64_sys_call+0x13bf/0x2ee0 [ 26.883232][ T344] do_syscall_64+0x58/0xf0 [ 26.883246][ T344] ? clear_bhb_loop+0x35/0x90 [ 26.883258][ T344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.883269][ T344] RIP: 0033:0x7ff99b30dd79 [ 26.883278][ T344] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 26.883285][ T344] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 26.883298][ T344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 26.883305][ T344] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 345 attached [pid 345] set_robust_list(0x55557e6d4660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 48 [pid 345] <... set_robust_list resumed>) = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 345] setpgid(0, 0) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 345] write(3, "1000", 4) = 4 [pid 345] close(3) = 0 executing program [pid 345] write(1, "executing program\n", 18) = 18 [pid 345] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 345] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 345] write(4, "9", 1) = 1 [pid 345] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 345] close(3) = 0 [pid 345] close(4) = 0 [pid 345] close(5) = -1 EBADF (Bad file descriptor) [pid 345] close(6) = -1 EBADF (Bad file descriptor) [pid 345] close(7) = -1 EBADF (Bad file descriptor) [pid 345] close(8) = -1 EBADF (Bad file descriptor) [pid 345] close(9) = -1 EBADF (Bad file descriptor) [pid 345] close(10) = -1 EBADF (Bad file descriptor) [pid 345] close(11) = -1 EBADF (Bad file descriptor) [pid 345] close(12) = -1 EBADF (Bad file descriptor) [pid 345] close(13) = -1 EBADF (Bad file descriptor) [pid 345] close(14) = -1 EBADF (Bad file descriptor) [pid 345] close(15) = -1 EBADF (Bad file descriptor) [pid 345] close(16) = -1 EBADF (Bad file descriptor) [pid 345] close(17) = -1 EBADF (Bad file descriptor) [pid 345] close(18) = -1 EBADF (Bad file descriptor) [pid 345] close(19) = -1 EBADF (Bad file descriptor) [pid 345] close(20) = -1 EBADF (Bad file descriptor) [pid 345] close(21) = -1 EBADF (Bad file descriptor) [pid 345] close(22) = -1 EBADF (Bad file descriptor) [pid 345] close(23) = -1 EBADF (Bad file descriptor) [pid 345] close(24) = -1 EBADF (Bad file descriptor) [pid 345] close(25) = -1 EBADF (Bad file descriptor) [pid 345] close(26) = -1 EBADF (Bad file descriptor) [pid 345] close(27) = -1 EBADF (Bad file descriptor) [pid 345] close(28) = -1 EBADF (Bad file descriptor) [pid 345] close(29) = -1 EBADF (Bad file descriptor) [pid 345] exit_group(0) = ? [pid 345] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 49 ./strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x55557e6d4660, 24) = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] write(1, "executing program\n", 18executing program ) = 18 [pid 346] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 346] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 346] write(4, "9", 1) = 1 [pid 346] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 346] close(3) = 0 [pid 346] close(4) = 0 [pid 346] close(5) = -1 EBADF (Bad file descriptor) [pid 346] close(6) = -1 EBADF (Bad file descriptor) [pid 346] close(7) = -1 EBADF (Bad file descriptor) [pid 346] close(8) = -1 EBADF (Bad file descriptor) [pid 346] close(9) = -1 EBADF (Bad file descriptor) [pid 346] close(10) = -1 EBADF (Bad file descriptor) [pid 346] close(11) = -1 EBADF (Bad file descriptor) [pid 346] close(12) = -1 EBADF (Bad file descriptor) [pid 346] close(13) = -1 EBADF (Bad file descriptor) [pid 346] close(14) = -1 EBADF (Bad file descriptor) [pid 346] close(15) = -1 EBADF (Bad file descriptor) [pid 346] close(16) = -1 EBADF (Bad file descriptor) [pid 346] close(17) = -1 EBADF (Bad file descriptor) [pid 346] close(18) = -1 EBADF (Bad file descriptor) [pid 346] close(19) = -1 EBADF (Bad file descriptor) [pid 346] close(20) = -1 EBADF (Bad file descriptor) [pid 346] close(21) = -1 EBADF (Bad file descriptor) [pid 346] close(22) = -1 EBADF (Bad file descriptor) [pid 346] close(23) = -1 EBADF (Bad file descriptor) [pid 346] close(24) = -1 EBADF (Bad file descriptor) [pid 346] close(25) = -1 EBADF (Bad file descriptor) [pid 346] close(26) = -1 EBADF (Bad file descriptor) [pid 346] close(27) = -1 EBADF (Bad file descriptor) [pid 346] close(28) = -1 EBADF (Bad file descriptor) [pid 346] close(29) = -1 EBADF (Bad file descriptor) [pid 346] exit_group(0) = ? [pid 346] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 50 ./strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x55557e6d4660, 24) = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] write(1, "executing program\n", 18executing program [ 26.883311][ T344] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 26.883316][ T344] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000000068c6 [ 26.883321][ T344] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 26.883329][ T344] ) = 18 [pid 347] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 347] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 347] write(4, "9", 1) = 1 [pid 347] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 347] close(3) = 0 [pid 347] close(4) = 0 [pid 347] close(5) = -1 EBADF (Bad file descriptor) [pid 347] close(6) = -1 EBADF (Bad file descriptor) [pid 347] close(7) = -1 EBADF (Bad file descriptor) [pid 347] close(8) = -1 EBADF (Bad file descriptor) [pid 347] close(9) = -1 EBADF (Bad file descriptor) [pid 347] close(10) = -1 EBADF (Bad file descriptor) [pid 347] close(11) = -1 EBADF (Bad file descriptor) [pid 347] close(12) = -1 EBADF (Bad file descriptor) [ 27.183647][ T347] FAULT_INJECTION: forcing a failure. [ 27.183647][ T347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 27.196966][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 27.196991][ T347] Tainted: [W]=WARN [ 27.196996][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.197005][ T347] Call Trace: [ 27.197009][ T347] [ 27.197014][ T347] __dump_stack+0x21/0x30 [ 27.197038][ T347] dump_stack_lvl+0x10c/0x190 [ 27.197053][ T347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.197069][ T347] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 27.197085][ T347] ? _raw_spin_trylock+0xaf/0x130 [ 27.197101][ T347] dump_stack+0x19/0x20 [ 27.197110][ T347] should_fail_ex+0x3d9/0x530 [ 27.197119][ T347] should_fail_alloc_page+0xeb/0x110 [ 27.197131][ T347] __alloc_pages_noprof+0x19d/0x6c0 [ 27.197139][ T347] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 27.197147][ T347] ? is_bpf_text_address+0x17b/0x1a0 [ 27.197159][ T347] ? kernel_text_address+0xa9/0xe0 [ 27.197169][ T347] ? unwind_get_return_address+0x51/0x90 [ 27.197177][ T347] pte_alloc_one+0x97/0x520 [ 27.197187][ T347] ? __cfi_pte_alloc_one+0x10/0x10 [ 27.197198][ T347] ? pagerange_is_ram_callback+0xf4/0x150 [ 27.197209][ T347] __pte_alloc+0x79/0x420 [ 27.197219][ T347] ? __cfi___pte_alloc+0x10/0x10 [ 27.197228][ T347] ? pat_pagerange_is_ram+0xf4/0x140 [ 27.197244][ T347] ? cattr_name+0xc0/0xc0 [ 27.197255][ T347] remap_pfn_range_notrack+0x8d0/0xb00 [ 27.197265][ T347] ? lookup_memtype+0xe3/0x190 [ 27.197276][ T347] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 27.197286][ T347] ? __kasan_check_read+0x15/0x20 [ 27.197295][ T347] ? track_pfn_remap+0x2a7/0x340 [ 27.197306][ T347] remap_pfn_range+0xf1/0x170 [ 27.197316][ T347] ? __cfi_remap_pfn_range+0x10/0x10 [ 27.197326][ T347] ? kasan_save_alloc_info+0x40/0x50 [ 27.197335][ T347] sel_mmap_handle_status+0x2d8/0x3c0 [ 27.197345][ T347] mmap_region+0x1371/0x1bd0 [ 27.197354][ T347] ? __cfi_mmap_region+0x10/0x10 [ 27.197365][ T347] ? __kasan_check_read+0x15/0x20 [ 27.197373][ T347] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 27.197386][ T347] ? __get_unmapped_area+0x407/0x470 [ 27.197395][ T347] ? file_mmap_ok+0x147/0x1a0 [ 27.197404][ T347] do_mmap+0xb6d/0x13c0 [ 27.197414][ T347] ? __cfi_do_mmap+0x10/0x10 [ 27.197422][ T347] ? down_write_killable+0xe9/0x2d0 [ 27.197431][ T347] ? __cfi_down_write_killable+0x10/0x10 [ 27.197440][ T347] vm_mmap_pgoff+0x38f/0x4e0 [ 27.197450][ T347] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 27.197459][ T347] ? __fget_files+0x2c5/0x340 [ 27.197470][ T347] ksys_mmap_pgoff+0x166/0x1e0 [ 27.197480][ T347] __x64_sys_mmap+0x121/0x140 [ 27.197492][ T347] x64_sys_call+0x13bf/0x2ee0 [ 27.197504][ T347] do_syscall_64+0x58/0xf0 [ 27.197514][ T347] ? clear_bhb_loop+0x35/0x90 [ 27.197526][ T347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.197537][ T347] RIP: 0033:0x7ff99b30dd79 [ 27.197545][ T347] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 27.197552][ T347] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 27.197563][ T347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 27.197569][ T347] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [pid 347] close(13) = -1 EBADF (Bad file descriptor) [pid 347] close(14) = -1 EBADF (Bad file descriptor) [pid 347] close(15) = -1 EBADF (Bad file descriptor) [pid 347] close(16) = -1 EBADF (Bad file descriptor) [pid 347] close(17) = -1 EBADF (Bad file descriptor) [pid 347] close(18) = -1 EBADF (Bad file descriptor) [pid 347] close(19) = -1 EBADF (Bad file descriptor) [pid 347] close(20) = -1 EBADF (Bad file descriptor) [pid 347] close(21) = -1 EBADF (Bad file descriptor) [pid 347] close(22) = -1 EBADF (Bad file descriptor) [pid 347] close(23) = -1 EBADF (Bad file descriptor) [pid 347] close(24) = -1 EBADF (Bad file descriptor) [pid 347] close(25) = -1 EBADF (Bad file descriptor) [pid 347] close(26) = -1 EBADF (Bad file descriptor) [pid 347] close(27) = -1 EBADF (Bad file descriptor) [pid 347] close(28) = -1 EBADF (Bad file descriptor) [pid 347] close(29) = -1 EBADF (Bad file descriptor) [pid 347] exit_group(0) = ? [pid 347] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 51 ./strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x55557e6d4660, 24) = 0 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 executing program [pid 348] write(1, "executing program\n", 18) = 18 [pid 348] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 348] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 348] write(4, "9", 1) = 1 [pid 348] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 348] close(3) = 0 [pid 348] close(4) = 0 [pid 348] close(5) = -1 EBADF (Bad file descriptor) [pid 348] close(6) = -1 EBADF (Bad file descriptor) [pid 348] close(7) = -1 EBADF (Bad file descriptor) [pid 348] close(8) = -1 EBADF (Bad file descriptor) [pid 348] close(9) = -1 EBADF (Bad file descriptor) [pid 348] close(10) = -1 EBADF (Bad file descriptor) [pid 348] close(11) = -1 EBADF (Bad file descriptor) [pid 348] close(12) = -1 EBADF (Bad file descriptor) [pid 348] close(13) = -1 EBADF (Bad file descriptor) [pid 348] close(14) = -1 EBADF (Bad file descriptor) [pid 348] close(15) = -1 EBADF (Bad file descriptor) [pid 348] close(16) = -1 EBADF (Bad file descriptor) [pid 348] close(17) = -1 EBADF (Bad file descriptor) [pid 348] close(18) = -1 EBADF (Bad file descriptor) [pid 348] close(19) = -1 EBADF (Bad file descriptor) [pid 348] close(20) = -1 EBADF (Bad file descriptor) [pid 348] close(21) = -1 EBADF (Bad file descriptor) [pid 348] close(22) = -1 EBADF (Bad file descriptor) [pid 348] close(23) = -1 EBADF (Bad file descriptor) [pid 348] close(24) = -1 EBADF (Bad file descriptor) [pid 348] close(25) = -1 EBADF (Bad file descriptor) [pid 348] close(26) = -1 EBADF (Bad file descriptor) [pid 348] close(27) = -1 EBADF (Bad file descriptor) [pid 348] close(28) = -1 EBADF (Bad file descriptor) [pid 348] close(29) = -1 EBADF (Bad file descriptor) [pid 348] exit_group(0) = ? [pid 348] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 52 ./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x55557e6d4660, 24) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4executing program ) = 4 [pid 349] close(3) = 0 [pid 349] write(1, "executing program\n", 18) = 18 [pid 349] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 349] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 349] write(4, "9", 1) = 1 [pid 349] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 349] close(3) = 0 [pid 349] close(4) = 0 [pid 349] close(5) = -1 EBADF (Bad file descriptor) [pid 349] close(6) = -1 EBADF (Bad file descriptor) [pid 349] close(7) = -1 EBADF (Bad file descriptor) [pid 349] close(8) = -1 EBADF (Bad file descriptor) [pid 349] close(9) = -1 EBADF (Bad file descriptor) [pid 349] close(10) = -1 EBADF (Bad file descriptor) [pid 349] close(11) = -1 EBADF (Bad file descriptor) [pid 349] close(12) = -1 EBADF (Bad file descriptor) [pid 349] close(13) = -1 EBADF (Bad file descriptor) [pid 349] close(14) = -1 EBADF (Bad file descriptor) [pid 349] close(15) = -1 EBADF (Bad file descriptor) [pid 349] close(16) = -1 EBADF (Bad file descriptor) [pid 349] close(17) = -1 EBADF (Bad file descriptor) [pid 349] close(18) = -1 EBADF (Bad file descriptor) [pid 349] close(19) = -1 EBADF (Bad file descriptor) [pid 349] close(20) = -1 EBADF (Bad file descriptor) [pid 349] close(21) = -1 EBADF (Bad file descriptor) [pid 349] close(22) = -1 EBADF (Bad file descriptor) [pid 349] close(23) = -1 EBADF (Bad file descriptor) [pid 349] close(24) = -1 EBADF (Bad file descriptor) [pid 349] close(25) = -1 EBADF (Bad file descriptor) [pid 349] close(26) = -1 EBADF (Bad file descriptor) [pid 349] close(27) = -1 EBADF (Bad file descriptor) [pid 349] close(28) = -1 EBADF (Bad file descriptor) [pid 349] close(29) = -1 EBADF (Bad file descriptor) [pid 349] exit_group(0) = ? [pid 349] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 53 ./strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x55557e6d4660, 24) = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 350] write(3, "1000", 4) = 4 [pid 350] close(3) = 0 executing program [pid 350] write(1, "executing program\n", 18) = 18 [pid 350] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 350] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 350] write(4, "9", 1) = 1 [pid 350] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 350] close(3) = 0 [pid 350] close(4) = 0 [pid 350] close(5) = -1 EBADF (Bad file descriptor) [pid 350] close(6) = -1 EBADF (Bad file descriptor) [pid 350] close(7) = -1 EBADF (Bad file descriptor) [pid 350] close(8) = -1 EBADF (Bad file descriptor) [pid 350] close(9) = -1 EBADF (Bad file descriptor) [pid 350] close(10) = -1 EBADF (Bad file descriptor) [pid 350] close(11) = -1 EBADF (Bad file descriptor) [pid 350] close(12) = -1 EBADF (Bad file descriptor) [pid 350] close(13) = -1 EBADF (Bad file descriptor) [pid 350] close(14) = -1 EBADF (Bad file descriptor) [pid 350] close(15) = -1 EBADF (Bad file descriptor) [pid 350] close(16) = -1 EBADF (Bad file descriptor) [pid 350] close(17) = -1 EBADF (Bad file descriptor) [pid 350] close(18) = -1 EBADF (Bad file descriptor) [pid 350] close(19) = -1 EBADF (Bad file descriptor) [pid 350] close(20) = -1 EBADF (Bad file descriptor) [pid 350] close(21) = -1 EBADF (Bad file descriptor) [pid 350] close(22) = -1 EBADF (Bad file descriptor) [pid 350] close(23) = -1 EBADF (Bad file descriptor) [pid 350] close(24) = -1 EBADF (Bad file descriptor) [pid 350] close(25) = -1 EBADF (Bad file descriptor) [pid 350] close(26) = -1 EBADF (Bad file descriptor) [pid 350] close(27) = -1 EBADF (Bad file descriptor) [pid 350] close(28) = -1 EBADF (Bad file descriptor) [pid 350] close(29) = -1 EBADF (Bad file descriptor) [pid 350] exit_group(0) = ? [pid 350] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 27.197575][ T347] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 27.197580][ T347] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000000069ff [ 27.197586][ T347] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 27.197593][ T347] [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 54 ./strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x55557e6d4660, 24) = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 351] setpgid(0, 0) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 351] write(3, "1000", 4) = 4 [pid 351] close(3) = 0 executing program [pid 351] write(1, "executing program\n", 18) = 18 [pid 351] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 351] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 351] write(4, "9", 1) = 1 [pid 351] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 351] close(3) = 0 [pid 351] close(4) = 0 [pid 351] close(5) = -1 EBADF (Bad file descriptor) [pid 351] close(6) = -1 EBADF (Bad file descriptor) [pid 351] close(7) = -1 EBADF (Bad file descriptor) [pid 351] close(8) = -1 EBADF (Bad file descriptor) [pid 351] close(9) = -1 EBADF (Bad file descriptor) [pid 351] close(10) = -1 EBADF (Bad file descriptor) [pid 351] close(11) = -1 EBADF (Bad file descriptor) [pid 351] close(12) = -1 EBADF (Bad file descriptor) [pid 351] close(13) = -1 EBADF (Bad file descriptor) [pid 351] close(14) = -1 EBADF (Bad file descriptor) [pid 351] close(15) = -1 EBADF (Bad file descriptor) [pid 351] close(16) = -1 EBADF (Bad file descriptor) [pid 351] close(17) = -1 EBADF (Bad file descriptor) [pid 351] close(18) = -1 EBADF (Bad file descriptor) [pid 351] close(19) = -1 EBADF (Bad file descriptor) [pid 351] close(20) = -1 EBADF (Bad file descriptor) [pid 351] close(21) = -1 EBADF (Bad file descriptor) [pid 351] close(22) = -1 EBADF (Bad file descriptor) [pid 351] close(23) = -1 EBADF (Bad file descriptor) [pid 351] close(24) = -1 EBADF (Bad file descriptor) [pid 351] close(25) = -1 EBADF (Bad file descriptor) [pid 351] close(26) = -1 EBADF (Bad file descriptor) [pid 351] close(27) = -1 EBADF (Bad file descriptor) [pid 351] close(28) = -1 EBADF (Bad file descriptor) [pid 351] close(29) = -1 EBADF (Bad file descriptor) [pid 351] exit_group(0) = ? [pid 351] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 55 ./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x55557e6d4660, 24) = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] write(1, "executing program\n", 18executing program ) = 18 [pid 352] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 352] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 352] write(4, "9", 1) = 1 [pid 352] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 352] close(3) = 0 [pid 352] close(4) = 0 [pid 352] close(5) = -1 EBADF (Bad file descriptor) [pid 352] close(6) = -1 EBADF (Bad file descriptor) [pid 352] close(7) = -1 EBADF (Bad file descriptor) [pid 352] close(8) = -1 EBADF (Bad file descriptor) [pid 352] close(9) = -1 EBADF (Bad file descriptor) [pid 352] close(10) = -1 EBADF (Bad file descriptor) [pid 352] close(11) = -1 EBADF (Bad file descriptor) [pid 352] close(12) = -1 EBADF (Bad file descriptor) [pid 352] close(13) = -1 EBADF (Bad file descriptor) [pid 352] close(14) = -1 EBADF (Bad file descriptor) [pid 352] close(15) = -1 EBADF (Bad file descriptor) [pid 352] close(16) = -1 EBADF (Bad file descriptor) [pid 352] close(17) = -1 EBADF (Bad file descriptor) [pid 352] close(18) = -1 EBADF (Bad file descriptor) [pid 352] close(19) = -1 EBADF (Bad file descriptor) [pid 352] close(20) = -1 EBADF (Bad file descriptor) [pid 352] close(21) = -1 EBADF (Bad file descriptor) [pid 352] close(22) = -1 EBADF (Bad file descriptor) [pid 352] close(23) = -1 EBADF (Bad file descriptor) [pid 352] close(24) = -1 EBADF (Bad file descriptor) [pid 352] close(25) = -1 EBADF (Bad file descriptor) [pid 352] close(26) = -1 EBADF (Bad file descriptor) [pid 352] close(27) = -1 EBADF (Bad file descriptor) [pid 352] close(28) = -1 EBADF (Bad file descriptor) [pid 352] close(29) = -1 EBADF (Bad file descriptor) [pid 352] exit_group(0) = ? [pid 352] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 56 ./strace-static-x86_64: Process 353 attached [pid 353] set_robust_list(0x55557e6d4660, 24) = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 353] setpgid(0, 0) = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 353] write(3, "1000", 4) = 4 [pid 353] close(3) = 0 executing program [pid 353] write(1, "executing program\n", 18) = 18 [pid 353] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 353] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 353] write(4, "9", 1) = 1 [pid 353] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 353] close(3) = 0 [pid 353] close(4) = 0 [pid 353] close(5) = -1 EBADF (Bad file descriptor) [pid 353] close(6) = -1 EBADF (Bad file descriptor) [pid 353] close(7) = -1 EBADF (Bad file descriptor) [pid 353] close(8) = -1 EBADF (Bad file descriptor) [pid 353] close(9) = -1 EBADF (Bad file descriptor) [pid 353] close(10) = -1 EBADF (Bad file descriptor) [ 27.635438][ T353] FAULT_INJECTION: forcing a failure. [ 27.635438][ T353] name failslab, interval 1, probability 0, space 0, times 0 [ 27.648228][ T353] CPU: 0 UID: 0 PID: 353 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 27.648255][ T353] Tainted: [W]=WARN [ 27.648259][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.648266][ T353] Call Trace: executing program executing program executing program [pid 353] close(11) = -1 EBADF (Bad file descriptor) [pid 353] close(12) = -1 EBADF (Bad file descriptor) [pid 353] close(13) = -1 EBADF (Bad file descriptor) [pid 353] close(14) = -1 EBADF (Bad file descriptor) [pid 353] close(15) = -1 EBADF (Bad file descriptor) [pid 353] close(16) = -1 EBADF (Bad file descriptor) [pid 353] close(17) = -1 EBADF (Bad file descriptor) [pid 353] close(18) = -1 EBADF (Bad file descriptor) [pid 353] close(19) = -1 EBADF (Bad file descriptor) [pid 353] close(20) = -1 EBADF (Bad file descriptor) [pid 353] close(21) = -1 EBADF (Bad file descriptor) [pid 353] close(22) = -1 EBADF (Bad file descriptor) [pid 353] close(23) = -1 EBADF (Bad file descriptor) [pid 353] close(24) = -1 EBADF (Bad file descriptor) [pid 353] close(25) = -1 EBADF (Bad file descriptor) [pid 353] close(26) = -1 EBADF (Bad file descriptor) [pid 353] close(27) = -1 EBADF (Bad file descriptor) [pid 353] close(28) = -1 EBADF (Bad file descriptor) [pid 353] close(29) = -1 EBADF (Bad file descriptor) [pid 353] exit_group(0) = ? [pid 353] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 354 attached , child_tidptr=0x55557e6d4650) = 57 [pid 354] set_robust_list(0x55557e6d4660, 24) = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 [pid 354] write(1, "executing program\n", 18) = 18 [pid 354] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 354] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 354] write(4, "9", 1) = 1 [pid 354] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 354] close(3) = 0 [pid 354] close(4) = 0 [pid 354] close(5) = -1 EBADF (Bad file descriptor) [pid 354] close(6) = -1 EBADF (Bad file descriptor) [pid 354] close(7) = -1 EBADF (Bad file descriptor) [pid 354] close(8) = -1 EBADF (Bad file descriptor) [pid 354] close(9) = -1 EBADF (Bad file descriptor) [pid 354] close(10) = -1 EBADF (Bad file descriptor) [pid 354] close(11) = -1 EBADF (Bad file descriptor) [pid 354] close(12) = -1 EBADF (Bad file descriptor) [pid 354] close(13) = -1 EBADF (Bad file descriptor) [pid 354] close(14) = -1 EBADF (Bad file descriptor) [pid 354] close(15) = -1 EBADF (Bad file descriptor) [pid 354] close(16) = -1 EBADF (Bad file descriptor) [pid 354] close(17) = -1 EBADF (Bad file descriptor) [pid 354] close(18) = -1 EBADF (Bad file descriptor) [pid 354] close(19) = -1 EBADF (Bad file descriptor) [pid 354] close(20) = -1 EBADF (Bad file descriptor) [pid 354] close(21) = -1 EBADF (Bad file descriptor) [pid 354] close(22) = -1 EBADF (Bad file descriptor) [pid 354] close(23) = -1 EBADF (Bad file descriptor) [pid 354] close(24) = -1 EBADF (Bad file descriptor) [pid 354] close(25) = -1 EBADF (Bad file descriptor) [pid 354] close(26) = -1 EBADF (Bad file descriptor) [pid 354] close(27) = -1 EBADF (Bad file descriptor) [pid 354] close(28) = -1 EBADF (Bad file descriptor) [pid 354] close(29) = -1 EBADF (Bad file descriptor) [pid 354] exit_group(0) = ? [pid 354] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x55557e6d4660, 24) = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 58 [pid 355] <... prctl resumed>) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] write(1, "executing program\n", 18) = 18 [pid 355] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 355] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 355] write(4, "9", 1) = 1 [pid 355] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 355] close(3) = 0 [pid 355] close(4) = 0 [pid 355] close(5) = -1 EBADF (Bad file descriptor) [pid 355] close(6) = -1 EBADF (Bad file descriptor) [pid 355] close(7) = -1 EBADF (Bad file descriptor) [pid 355] close(8) = -1 EBADF (Bad file descriptor) [pid 355] close(9) = -1 EBADF (Bad file descriptor) [pid 355] close(10) = -1 EBADF (Bad file descriptor) [pid 355] close(11) = -1 EBADF (Bad file descriptor) [pid 355] close(12) = -1 EBADF (Bad file descriptor) [pid 355] close(13) = -1 EBADF (Bad file descriptor) [pid 355] close(14) = -1 EBADF (Bad file descriptor) [pid 355] close(15) = -1 EBADF (Bad file descriptor) [pid 355] close(16) = -1 EBADF (Bad file descriptor) [pid 355] close(17) = -1 EBADF (Bad file descriptor) [pid 355] close(18) = -1 EBADF (Bad file descriptor) [pid 355] close(19) = -1 EBADF (Bad file descriptor) [pid 355] close(20) = -1 EBADF (Bad file descriptor) [pid 355] close(21) = -1 EBADF (Bad file descriptor) [pid 355] close(22) = -1 EBADF (Bad file descriptor) [pid 355] close(23) = -1 EBADF (Bad file descriptor) [pid 355] close(24) = -1 EBADF (Bad file descriptor) [pid 355] close(25) = -1 EBADF (Bad file descriptor) [pid 355] close(26) = -1 EBADF (Bad file descriptor) [pid 355] close(27) = -1 EBADF (Bad file descriptor) [pid 355] close(28) = -1 EBADF (Bad file descriptor) [pid 355] close(29) = -1 EBADF (Bad file descriptor) [pid 355] exit_group(0) = ? [pid 355] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 356 attached , child_tidptr=0x55557e6d4650) = 59 [pid 356] set_robust_list(0x55557e6d4660, 24) = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 356] write(1, "executing program\n", 18) = 18 [pid 356] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 356] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 356] write(4, "9", 1) = 1 [ 27.648270][ T353] [ 27.648275][ T353] __dump_stack+0x21/0x30 [ 27.648297][ T353] dump_stack_lvl+0x10c/0x190 [ 27.648313][ T353] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.648334][ T353] dump_stack+0x19/0x20 [ 27.648349][ T353] should_fail_ex+0x3d9/0x530 [ 27.648365][ T353] should_failslab+0xac/0x100 [ 27.648382][ T353] kmem_cache_alloc_noprof+0x42/0x3a0 [ 27.648396][ T353] ? vm_area_alloc+0x3f/0x1a0 [ 27.648408][ T353] vm_area_alloc+0x3f/0x1a0 [ 27.648419][ T353] mmap_region+0xb8f/0x1bd0 [ 27.648429][ T353] ? sched_clock+0x44/0x60 [ 27.648438][ T353] ? __cfi_mmap_region+0x10/0x10 [ 27.648447][ T353] ? sched_clock+0x44/0x60 [ 27.648456][ T353] ? __kasan_check_read+0x15/0x20 [ 27.648465][ T353] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 27.648477][ T353] ? __get_unmapped_area+0x407/0x470 [ 27.648494][ T353] ? file_mmap_ok+0x147/0x1a0 [ 27.648503][ T353] do_mmap+0xb6d/0x13c0 [ 27.648513][ T353] ? __cfi_do_mmap+0x10/0x10 [ 27.648521][ T353] ? down_write_killable+0xe9/0x2d0 [ 27.648530][ T353] ? __cfi_down_write_killable+0x10/0x10 [ 27.648539][ T353] vm_mmap_pgoff+0x38f/0x4e0 [ 27.648549][ T353] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 27.648558][ T353] ? __fget_files+0x2c5/0x340 [ 27.648570][ T353] ksys_mmap_pgoff+0x166/0x1e0 [ 27.648579][ T353] __x64_sys_mmap+0x121/0x140 [ 27.648590][ T353] x64_sys_call+0x13bf/0x2ee0 [ 27.648600][ T353] do_syscall_64+0x58/0xf0 [ 27.648610][ T353] ? clear_bhb_loop+0x35/0x90 [ 27.648622][ T353] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.648633][ T353] RIP: 0033:0x7ff99b30dd79 [ 27.648642][ T353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 27.648649][ T353] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 27.648659][ T353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 27.648666][ T353] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 27.648671][ T353] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 27.648677][ T353] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000006bc5 [ 27.648682][ T353] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 27.648689][ T353] [ 27.713221][ T356] FAULT_INJECTION: forcing a failure. [ 27.713221][ T356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 27.922073][ T356] CPU: 1 UID: 0 PID: 356 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 27.922094][ T356] Tainted: [W]=WARN [ 27.922097][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.922102][ T356] Call Trace: [ 27.922106][ T356] [ 27.922111][ T356] __dump_stack+0x21/0x30 [ 27.922125][ T356] dump_stack_lvl+0x10c/0x190 [ 27.922135][ T356] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.922150][ T356] ? kasan_save_free_info+0x4a/0x60 [ 27.922159][ T356] ? kmem_cache_free+0x1c1/0x4c0 [ 27.922169][ T356] ? unlink_anon_vmas+0x2c6/0x5c0 [ 27.922179][ T356] ? free_pgtables+0x2a9/0x730 [ 27.922188][ T356] ? vms_clean_up_area+0x66/0x1d0 [ 27.922203][ T356] dump_stack+0x19/0x20 [ 27.922212][ T356] should_fail_ex+0x3d9/0x530 [ 27.922222][ T356] should_fail_alloc_page+0xeb/0x110 [ 27.922234][ T356] __alloc_pages_noprof+0x19d/0x6c0 [ 27.922242][ T356] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 27.922251][ T356] ? is_bpf_text_address+0x17b/0x1a0 [ 27.922262][ T356] ? kernel_text_address+0xa9/0xe0 [ 27.922271][ T356] ? unwind_get_return_address+0x51/0x90 [ 27.922280][ T356] pte_alloc_one+0x97/0x520 [ 27.922291][ T356] ? __cfi_pte_alloc_one+0x10/0x10 [ 27.922301][ T356] ? pagerange_is_ram_callback+0xf4/0x150 [ 27.922313][ T356] __pte_alloc+0x79/0x420 [ 27.922322][ T356] ? __cfi___pte_alloc+0x10/0x10 [ 27.922331][ T356] ? pat_pagerange_is_ram+0xf4/0x140 [ 27.922341][ T356] ? cattr_name+0xc0/0xc0 [ 27.922351][ T356] remap_pfn_range_notrack+0x8d0/0xb00 [ 27.922362][ T356] ? lookup_memtype+0xe3/0x190 [ 27.922373][ T356] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 27.922384][ T356] ? __kasan_check_read+0x15/0x20 [ 27.922393][ T356] ? track_pfn_remap+0x2a7/0x340 [ 27.922404][ T356] remap_pfn_range+0xf1/0x170 [ 27.922444][ T356] ? __cfi_remap_pfn_range+0x10/0x10 [ 27.922456][ T356] ? kasan_save_alloc_info+0x40/0x50 [ 27.922465][ T356] sel_mmap_handle_status+0x2d8/0x3c0 [ 27.922475][ T356] mmap_region+0x1371/0x1bd0 [ 27.922485][ T356] ? __cfi_mmap_region+0x10/0x10 [ 27.922495][ T356] ? __kasan_check_read+0x15/0x20 [ 27.922504][ T356] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 27.922517][ T356] ? __get_unmapped_area+0x407/0x470 [ 27.922526][ T356] ? file_mmap_ok+0x147/0x1a0 [ 27.922535][ T356] do_mmap+0xb6d/0x13c0 [ 27.922545][ T356] ? __cfi_do_mmap+0x10/0x10 [ 27.922553][ T356] ? down_write_killable+0xe9/0x2d0 [ 27.922563][ T356] ? __cfi_down_write_killable+0x10/0x10 [ 27.922572][ T356] vm_mmap_pgoff+0x38f/0x4e0 [ 27.922584][ T356] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 27.922593][ T356] ? __fget_files+0x2c5/0x340 [ 27.922605][ T356] ksys_mmap_pgoff+0x166/0x1e0 [ 27.922614][ T356] __x64_sys_mmap+0x121/0x140 [ 27.922624][ T356] x64_sys_call+0x13bf/0x2ee0 [ 27.922635][ T356] do_syscall_64+0x58/0xf0 [ 27.922645][ T356] ? clear_bhb_loop+0x35/0x90 [ 27.922657][ T356] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.922668][ T356] RIP: 0033:0x7ff99b30dd79 [ 27.922677][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 27.922684][ T356] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 27.922695][ T356] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 27.922701][ T356] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 27.922707][ T356] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 27.922712][ T356] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000006c1e [ 27.922718][ T356] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [pid 356] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 356] close(3) = 0 [pid 356] close(4) = 0 [pid 356] close(5) = -1 EBADF (Bad file descriptor) [pid 356] close(6) = -1 EBADF (Bad file descriptor) [pid 356] close(7) = -1 EBADF (Bad file descriptor) [pid 356] close(8) = -1 EBADF (Bad file descriptor) [pid 356] close(9) = -1 EBADF (Bad file descriptor) [pid 356] close(10) = -1 EBADF (Bad file descriptor) [pid 356] close(11) = -1 EBADF (Bad file descriptor) [pid 356] close(12) = -1 EBADF (Bad file descriptor) [pid 356] close(13) = -1 EBADF (Bad file descriptor) [pid 356] close(14) = -1 EBADF (Bad file descriptor) [pid 356] close(15) = -1 EBADF (Bad file descriptor) [pid 356] close(16) = -1 EBADF (Bad file descriptor) [pid 356] close(17) = -1 EBADF (Bad file descriptor) [pid 356] close(18) = -1 EBADF (Bad file descriptor) [pid 356] close(19) = -1 EBADF (Bad file descriptor) [pid 356] close(20) = -1 EBADF (Bad file descriptor) [pid 356] close(21) = -1 EBADF (Bad file descriptor) [pid 356] close(22) = -1 EBADF (Bad file descriptor) [pid 356] close(23) = -1 EBADF (Bad file descriptor) [pid 356] close(24) = -1 EBADF (Bad file descriptor) [pid 356] close(25) = -1 EBADF (Bad file descriptor) [pid 356] close(26) = -1 EBADF (Bad file descriptor) [pid 356] close(27) = -1 EBADF (Bad file descriptor) [pid 356] close(28) = -1 EBADF (Bad file descriptor) [pid 356] close(29) = -1 EBADF (Bad file descriptor) [pid 356] exit_group(0) = ? [pid 356] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=0, si_stime=21} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 60 ./strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x55557e6d4660, 24) = 0 [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 357] setpgid(0, 0) = 0 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 357] write(3, "1000", 4) = 4 [pid 357] close(3executing program ) = 0 [pid 357] write(1, "executing program\n", 18) = 18 [pid 357] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 357] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 357] write(4, "9", 1) = 1 [pid 357] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 357] close(3) = 0 [pid 357] close(4) = 0 [pid 357] close(5) = -1 EBADF (Bad file descriptor) [pid 357] close(6) = -1 EBADF (Bad file descriptor) [pid 357] close(7) = -1 EBADF (Bad file descriptor) [pid 357] close(8) = -1 EBADF (Bad file descriptor) [pid 357] close(9) = -1 EBADF (Bad file descriptor) [pid 357] close(10) = -1 EBADF (Bad file descriptor) [pid 357] close(11) = -1 EBADF (Bad file descriptor) [pid 357] close(12) = -1 EBADF (Bad file descriptor) [pid 357] close(13) = -1 EBADF (Bad file descriptor) [pid 357] close(14) = -1 EBADF (Bad file descriptor) [pid 357] close(15) = -1 EBADF (Bad file descriptor) [pid 357] close(16) = -1 EBADF (Bad file descriptor) [pid 357] close(17) = -1 EBADF (Bad file descriptor) [pid 357] close(18) = -1 EBADF (Bad file descriptor) [pid 357] close(19) = -1 EBADF (Bad file descriptor) [pid 357] close(20) = -1 EBADF (Bad file descriptor) [pid 357] close(21) = -1 EBADF (Bad file descriptor) [pid 357] close(22) = -1 EBADF (Bad file descriptor) [pid 357] close(23) = -1 EBADF (Bad file descriptor) [pid 357] close(24) = -1 EBADF (Bad file descriptor) [pid 357] close(25) = -1 EBADF (Bad file descriptor) [pid 357] close(26) = -1 EBADF (Bad file descriptor) [pid 357] close(27) = -1 EBADF (Bad file descriptor) [pid 357] close(28) = -1 EBADF (Bad file descriptor) [pid 357] close(29) = -1 EBADF (Bad file descriptor) [pid 357] exit_group(0) = ? [pid 357] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 61 ./strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x55557e6d4660, 24) = 0 [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 358] setpgid(0, 0) = 0 [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 358] write(3, "1000", 4) = 4 [pid 358] close(3) = 0 executing program [pid 358] write(1, "executing program\n", 18) = 18 [pid 358] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 358] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 358] write(4, "9", 1) = 1 [pid 358] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 358] close(3) = 0 [pid 358] close(4) = 0 [pid 358] close(5) = -1 EBADF (Bad file descriptor) [pid 358] close(6) = -1 EBADF (Bad file descriptor) [pid 358] close(7) = -1 EBADF (Bad file descriptor) [pid 358] close(8) = -1 EBADF (Bad file descriptor) [pid 358] close(9) = -1 EBADF (Bad file descriptor) [pid 358] close(10) = -1 EBADF (Bad file descriptor) [pid 358] close(11) = -1 EBADF (Bad file descriptor) [pid 358] close(12) = -1 EBADF (Bad file descriptor) [pid 358] close(13) = -1 EBADF (Bad file descriptor) [pid 358] close(14) = -1 EBADF (Bad file descriptor) [pid 358] close(15) = -1 EBADF (Bad file descriptor) [pid 358] close(16) = -1 EBADF (Bad file descriptor) [pid 358] close(17) = -1 EBADF (Bad file descriptor) [pid 358] close(18) = -1 EBADF (Bad file descriptor) [pid 358] close(19) = -1 EBADF (Bad file descriptor) [pid 358] close(20) = -1 EBADF (Bad file descriptor) [pid 358] close(21) = -1 EBADF (Bad file descriptor) [pid 358] close(22) = -1 EBADF (Bad file descriptor) [pid 358] close(23) = -1 EBADF (Bad file descriptor) [pid 358] close(24) = -1 EBADF (Bad file descriptor) [pid 358] close(25) = -1 EBADF (Bad file descriptor) [pid 358] close(26) = -1 EBADF (Bad file descriptor) [pid 358] close(27) = -1 EBADF (Bad file descriptor) [pid 358] close(28) = -1 EBADF (Bad file descriptor) [pid 358] close(29) = -1 EBADF (Bad file descriptor) [pid 358] exit_group(0) = ? [pid 358] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 62 ./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x55557e6d4660, 24) = 0 [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 359] setpgid(0, 0) = 0 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 executing program [pid 359] write(1, "executing program\n", 18) = 18 [pid 359] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 359] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 359] write(4, "9", 1) = 1 [pid 359] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 359] close(3) = 0 [pid 359] close(4) = 0 [pid 359] close(5) = -1 EBADF (Bad file descriptor) [pid 359] close(6) = -1 EBADF (Bad file descriptor) [pid 359] close(7) = -1 EBADF (Bad file descriptor) [pid 359] close(8) = -1 EBADF (Bad file descriptor) [pid 359] close(9) = -1 EBADF (Bad file descriptor) [ 27.922725][ T356] [pid 359] close(10) = -1 EBADF (Bad file descriptor) [pid 359] close(11) = -1 EBADF (Bad file descriptor) [pid 359] close(12) = -1 EBADF (Bad file descriptor) [pid 359] close(13) = -1 EBADF (Bad file descriptor) [pid 359] close(14) = -1 EBADF (Bad file descriptor) [pid 359] close(15) = -1 EBADF (Bad file descriptor) [pid 359] close(16) = -1 EBADF (Bad file descriptor) [pid 359] close(17) = -1 EBADF (Bad file descriptor) [pid 359] close(18) = -1 EBADF (Bad file descriptor) [pid 359] close(19) = -1 EBADF (Bad file descriptor) [pid 359] close(20) = -1 EBADF (Bad file descriptor) [pid 359] close(21) = -1 EBADF (Bad file descriptor) [pid 359] close(22) = -1 EBADF (Bad file descriptor) [pid 359] close(23) = -1 EBADF (Bad file descriptor) [pid 359] close(24) = -1 EBADF (Bad file descriptor) [pid 359] close(25) = -1 EBADF (Bad file descriptor) [pid 359] close(26) = -1 EBADF (Bad file descriptor) [pid 359] close(27) = -1 EBADF (Bad file descriptor) [pid 359] close(28) = -1 EBADF (Bad file descriptor) [pid 359] close(29) = -1 EBADF (Bad file descriptor) [pid 359] exit_group(0) = ? [pid 359] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 360 attached , child_tidptr=0x55557e6d4650) = 63 [pid 360] set_robust_list(0x55557e6d4660, 24) = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 executing program [pid 360] write(1, "executing program\n", 18) = 18 [pid 360] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 360] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 360] write(4, "9", 1) = 1 [pid 360] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 360] close(3) = 0 [pid 360] close(4) = 0 [pid 360] close(5) = -1 EBADF (Bad file descriptor) [pid 360] close(6) = -1 EBADF (Bad file descriptor) [pid 360] close(7) = -1 EBADF (Bad file descriptor) [pid 360] close(8) = -1 EBADF (Bad file descriptor) [pid 360] close(9) = -1 EBADF (Bad file descriptor) [pid 360] close(10) = -1 EBADF (Bad file descriptor) [pid 360] close(11) = -1 EBADF (Bad file descriptor) [pid 360] close(12) = -1 EBADF (Bad file descriptor) [pid 360] close(13) = -1 EBADF (Bad file descriptor) [pid 360] close(14) = -1 EBADF (Bad file descriptor) [pid 360] close(15) = -1 EBADF (Bad file descriptor) [pid 360] close(16) = -1 EBADF (Bad file descriptor) [pid 360] close(17) = -1 EBADF (Bad file descriptor) [pid 360] close(18) = -1 EBADF (Bad file descriptor) [pid 360] close(19) = -1 EBADF (Bad file descriptor) [pid 360] close(20) = -1 EBADF (Bad file descriptor) [pid 360] close(21) = -1 EBADF (Bad file descriptor) [pid 360] close(22) = -1 EBADF (Bad file descriptor) [pid 360] close(23) = -1 EBADF (Bad file descriptor) [pid 360] close(24) = -1 EBADF (Bad file descriptor) [pid 360] close(25) = -1 EBADF (Bad file descriptor) [pid 360] close(26) = -1 EBADF (Bad file descriptor) [pid 360] close(27) = -1 EBADF (Bad file descriptor) [pid 360] close(28) = -1 EBADF (Bad file descriptor) [pid 360] close(29) = -1 EBADF (Bad file descriptor) [pid 360] exit_group(0) = ? [ 28.335775][ T360] FAULT_INJECTION: forcing a failure. [ 28.335775][ T360] name failslab, interval 1, probability 0, space 0, times 0 [ 28.348654][ T360] CPU: 0 UID: 0 PID: 360 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 28.348682][ T360] Tainted: [W]=WARN [ 28.348687][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.348695][ T360] Call Trace: [ 28.348700][ T360] [ 28.348707][ T360] __dump_stack+0x21/0x30 [ 28.348728][ T360] dump_stack_lvl+0x10c/0x190 [ 28.348743][ T360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.348759][ T360] dump_stack+0x19/0x20 [ 28.348773][ T360] should_fail_ex+0x3d9/0x530 [ 28.348790][ T360] should_failslab+0xac/0x100 [ 28.348808][ T360] kmem_cache_alloc_noprof+0x42/0x3a0 [ 28.348823][ T360] ? vm_area_alloc+0x3f/0x1a0 [ 28.348841][ T360] vm_area_alloc+0x3f/0x1a0 [ 28.348857][ T360] mmap_region+0xb8f/0x1bd0 [ 28.348869][ T360] ? sched_clock+0x44/0x60 [ 28.348878][ T360] ? __cfi_mmap_region+0x10/0x10 [ 28.348888][ T360] ? __kasan_check_read+0x15/0x20 [ 28.348897][ T360] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 28.348910][ T360] ? __get_unmapped_area+0x407/0x470 [ 28.348919][ T360] ? file_mmap_ok+0x147/0x1a0 [ 28.348928][ T360] do_mmap+0xb6d/0x13c0 [ 28.348938][ T360] ? __cfi_do_mmap+0x10/0x10 [ 28.348946][ T360] ? down_write_killable+0xe9/0x2d0 [ 28.348956][ T360] ? __cfi_down_write_killable+0x10/0x10 [ 28.348964][ T360] vm_mmap_pgoff+0x38f/0x4e0 [ 28.348974][ T360] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 28.348984][ T360] ? __fget_files+0x2c5/0x340 [ 28.348995][ T360] ksys_mmap_pgoff+0x166/0x1e0 [ 28.349005][ T360] __x64_sys_mmap+0x121/0x140 [ 28.349015][ T360] x64_sys_call+0x13bf/0x2ee0 [ 28.349026][ T360] do_syscall_64+0x58/0xf0 [ 28.349036][ T360] ? clear_bhb_loop+0x35/0x90 [ 28.349048][ T360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.349060][ T360] RIP: 0033:0x7ff99b30dd79 [ 28.349068][ T360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 28.349075][ T360] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 28.349086][ T360] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 28.349093][ T360] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 28.349098][ T360] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [pid 360] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 64 ./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x55557e6d4660, 24) = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 executing program [pid 361] close(3) = 0 [pid 361] write(1, "executing program\n", 18) = 18 [pid 361] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 361] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 361] write(4, "9", 1) = 1 [pid 361] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 361] close(3) = 0 [pid 361] close(4) = 0 [pid 361] close(5) = -1 EBADF (Bad file descriptor) [pid 361] close(6) = -1 EBADF (Bad file descriptor) [pid 361] close(7) = -1 EBADF (Bad file descriptor) [pid 361] close(8) = -1 EBADF (Bad file descriptor) [pid 361] close(9) = -1 EBADF (Bad file descriptor) [pid 361] close(10) = -1 EBADF (Bad file descriptor) [pid 361] close(11) = -1 EBADF (Bad file descriptor) [pid 361] close(12) = -1 EBADF (Bad file descriptor) [pid 361] close(13) = -1 EBADF (Bad file descriptor) [pid 361] close(14) = -1 EBADF (Bad file descriptor) [pid 361] close(15) = -1 EBADF (Bad file descriptor) [pid 361] close(16) = -1 EBADF (Bad file descriptor) [pid 361] close(17) = -1 EBADF (Bad file descriptor) [pid 361] close(18) = -1 EBADF (Bad file descriptor) [pid 361] close(19) = -1 EBADF (Bad file descriptor) [pid 361] close(20) = -1 EBADF (Bad file descriptor) [pid 361] close(21) = -1 EBADF (Bad file descriptor) [pid 361] close(22) = -1 EBADF (Bad file descriptor) [pid 361] close(23) = -1 EBADF (Bad file descriptor) [pid 361] close(24) = -1 EBADF (Bad file descriptor) [pid 361] close(25) = -1 EBADF (Bad file descriptor) [pid 361] close(26) = -1 EBADF (Bad file descriptor) [pid 361] close(27) = -1 EBADF (Bad file descriptor) [pid 361] close(28) = -1 EBADF (Bad file descriptor) [pid 361] close(29) = -1 EBADF (Bad file descriptor) [pid 361] exit_group(0) = ? [pid 361] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 65 ./strace-static-x86_64: Process 362 attached [pid 362] set_robust_list(0x55557e6d4660, 24) = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 [pid 362] write(1, "executing program\n", 18executing program ) = 18 [pid 362] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 362] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 362] write(4, "9", 1) = 1 [pid 362] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 362] close(3) = 0 [pid 362] close(4) = 0 [pid 362] close(5) = -1 EBADF (Bad file descriptor) [pid 362] close(6) = -1 EBADF (Bad file descriptor) [pid 362] close(7) = -1 EBADF (Bad file descriptor) [pid 362] close(8) = -1 EBADF (Bad file descriptor) [pid 362] close(9) = -1 EBADF (Bad file descriptor) [pid 362] close(10) = -1 EBADF (Bad file descriptor) [pid 362] close(11) = -1 EBADF (Bad file descriptor) [pid 362] close(12) = -1 EBADF (Bad file descriptor) [pid 362] close(13) = -1 EBADF (Bad file descriptor) [pid 362] close(14) = -1 EBADF (Bad file descriptor) [pid 362] close(15) = -1 EBADF (Bad file descriptor) [pid 362] close(16) = -1 EBADF (Bad file descriptor) [pid 362] close(17) = -1 EBADF (Bad file descriptor) [pid 362] close(18) = -1 EBADF (Bad file descriptor) [pid 362] close(19) = -1 EBADF (Bad file descriptor) [pid 362] close(20) = -1 EBADF (Bad file descriptor) [pid 362] close(21) = -1 EBADF (Bad file descriptor) [pid 362] close(22) = -1 EBADF (Bad file descriptor) [pid 362] close(23) = -1 EBADF (Bad file descriptor) [pid 362] close(24) = -1 EBADF (Bad file descriptor) [pid 362] close(25) = -1 EBADF (Bad file descriptor) [pid 362] close(26) = -1 EBADF (Bad file descriptor) [pid 362] close(27) = -1 EBADF (Bad file descriptor) [pid 362] close(28) = -1 EBADF (Bad file descriptor) [pid 362] close(29) = -1 EBADF (Bad file descriptor) [pid 362] exit_group(0) = ? [pid 362] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 66 ./strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x55557e6d4660, 24) = 0 [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 363] setpgid(0, 0) = 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 363] write(3, "1000", 4) = 4 [pid 363] close(3) = 0 [pid 363] write(1, "executing program\n", 18executing program ) = 18 [pid 363] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 363] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 363] write(4, "9", 1) = 1 [ 28.349103][ T360] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000006e8c [ 28.349109][ T360] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 28.349116][ T360] [pid 363] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 363] close(3) = 0 [pid 363] close(4) = 0 [pid 363] close(5) = -1 EBADF (Bad file descriptor) [pid 363] close(6) = -1 EBADF (Bad file descriptor) [pid 363] close(7) = -1 EBADF (Bad file descriptor) [pid 363] close(8) = -1 EBADF (Bad file descriptor) [pid 363] close(9) = -1 EBADF (Bad file descriptor) [pid 363] close(10) = -1 EBADF (Bad file descriptor) [pid 363] close(11) = -1 EBADF (Bad file descriptor) [pid 363] close(12) = -1 EBADF (Bad file descriptor) [ 28.643268][ T363] FAULT_INJECTION: forcing a failure. [ 28.643268][ T363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 28.656639][ T363] CPU: 0 UID: 0 PID: 363 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 28.656664][ T363] Tainted: [W]=WARN [ 28.656669][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.656677][ T363] Call Trace: [ 28.656682][ T363] [ 28.656687][ T363] __dump_stack+0x21/0x30 [ 28.656710][ T363] dump_stack_lvl+0x10c/0x190 [ 28.656729][ T363] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.656749][ T363] ? kasan_save_free_info+0x4a/0x60 [ 28.656767][ T363] ? kmem_cache_free+0x1c1/0x4c0 [ 28.656782][ T363] ? unlink_anon_vmas+0x2c6/0x5c0 [ 28.656795][ T363] ? free_pgtables+0x2a9/0x730 [ 28.656806][ T363] ? vms_clean_up_area+0x66/0x1d0 [ 28.656819][ T363] dump_stack+0x19/0x20 [ 28.656831][ T363] should_fail_ex+0x3d9/0x530 [ 28.656844][ T363] should_fail_alloc_page+0xeb/0x110 [ 28.656858][ T363] __alloc_pages_noprof+0x19d/0x6c0 [ 28.656868][ T363] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 28.656879][ T363] ? is_bpf_text_address+0x17b/0x1a0 [ 28.656893][ T363] ? kernel_text_address+0xa9/0xe0 [ 28.656905][ T363] ? unwind_get_return_address+0x51/0x90 [ 28.656916][ T363] pte_alloc_one+0x97/0x520 [ 28.656930][ T363] ? __cfi_pte_alloc_one+0x10/0x10 [ 28.656943][ T363] ? pagerange_is_ram_callback+0xf4/0x150 [ 28.656958][ T363] __pte_alloc+0x79/0x420 [ 28.656970][ T363] ? __cfi___pte_alloc+0x10/0x10 [ 28.656981][ T363] ? pat_pagerange_is_ram+0xf4/0x140 [ 28.656994][ T363] ? cattr_name+0xc0/0xc0 [ 28.657007][ T363] remap_pfn_range_notrack+0x8d0/0xb00 [ 28.657020][ T363] ? lookup_memtype+0xe3/0x190 [ 28.657034][ T363] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 28.657048][ T363] ? __kasan_check_read+0x15/0x20 [ 28.657059][ T363] ? track_pfn_remap+0x2a7/0x340 [ 28.657073][ T363] remap_pfn_range+0xf1/0x170 [ 28.657086][ T363] ? __cfi_remap_pfn_range+0x10/0x10 [ 28.657098][ T363] ? kasan_save_alloc_info+0x40/0x50 [ 28.657110][ T363] sel_mmap_handle_status+0x2d8/0x3c0 [ 28.657121][ T363] mmap_region+0x1371/0x1bd0 [ 28.657134][ T363] ? __cfi_mmap_region+0x10/0x10 [ 28.657147][ T363] ? __kasan_check_read+0x15/0x20 [ 28.657158][ T363] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 28.657175][ T363] ? __get_unmapped_area+0x407/0x470 [ 28.657187][ T363] ? file_mmap_ok+0x147/0x1a0 [ 28.657217][ T363] do_mmap+0xb6d/0x13c0 [ 28.657230][ T363] ? __cfi_do_mmap+0x10/0x10 [ 28.657241][ T363] ? down_write_killable+0xe9/0x2d0 [ 28.657253][ T363] ? __cfi_down_write_killable+0x10/0x10 [ 28.657264][ T363] vm_mmap_pgoff+0x38f/0x4e0 [ 28.657277][ T363] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 28.657290][ T363] ? __fget_files+0x2c5/0x340 [ 28.657303][ T363] ksys_mmap_pgoff+0x166/0x1e0 [ 28.657313][ T363] __x64_sys_mmap+0x121/0x140 [ 28.657323][ T363] x64_sys_call+0x13bf/0x2ee0 [ 28.657334][ T363] do_syscall_64+0x58/0xf0 [ 28.657344][ T363] ? clear_bhb_loop+0x35/0x90 [ 28.657357][ T363] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.657368][ T363] RIP: 0033:0x7ff99b30dd79 [ 28.657376][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 28.657383][ T363] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 28.657393][ T363] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [pid 363] close(13) = -1 EBADF (Bad file descriptor) [pid 363] close(14) = -1 EBADF (Bad file descriptor) [pid 363] close(15) = -1 EBADF (Bad file descriptor) [pid 363] close(16) = -1 EBADF (Bad file descriptor) [pid 363] close(17) = -1 EBADF (Bad file descriptor) [pid 363] close(18) = -1 EBADF (Bad file descriptor) [pid 363] close(19) = -1 EBADF (Bad file descriptor) [pid 363] close(20) = -1 EBADF (Bad file descriptor) [pid 363] close(21) = -1 EBADF (Bad file descriptor) [pid 363] close(22) = -1 EBADF (Bad file descriptor) [pid 363] close(23) = -1 EBADF (Bad file descriptor) [pid 363] close(24) = -1 EBADF (Bad file descriptor) [pid 363] close(25) = -1 EBADF (Bad file descriptor) [pid 363] close(26) = -1 EBADF (Bad file descriptor) [pid 363] close(27) = -1 EBADF (Bad file descriptor) [pid 363] close(28) = -1 EBADF (Bad file descriptor) [pid 363] close(29) = -1 EBADF (Bad file descriptor) [pid 363] exit_group(0) = ? [pid 363] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 67 ./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x55557e6d4660, 24) = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 executing program [pid 364] write(1, "executing program\n", 18) = 18 [pid 364] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 364] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 364] write(4, "9", 1) = 1 [pid 364] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 364] close(3) = 0 [pid 364] close(4) = 0 [pid 364] close(5) = -1 EBADF (Bad file descriptor) [pid 364] close(6) = -1 EBADF (Bad file descriptor) [pid 364] close(7) = -1 EBADF (Bad file descriptor) [pid 364] close(8) = -1 EBADF (Bad file descriptor) [pid 364] close(9) = -1 EBADF (Bad file descriptor) [pid 364] close(10) = -1 EBADF (Bad file descriptor) [pid 364] close(11) = -1 EBADF (Bad file descriptor) [pid 364] close(12) = -1 EBADF (Bad file descriptor) [pid 364] close(13) = -1 EBADF (Bad file descriptor) [pid 364] close(14) = -1 EBADF (Bad file descriptor) [pid 364] close(15) = -1 EBADF (Bad file descriptor) [pid 364] close(16) = -1 EBADF (Bad file descriptor) [pid 364] close(17) = -1 EBADF (Bad file descriptor) [pid 364] close(18) = -1 EBADF (Bad file descriptor) [pid 364] close(19) = -1 EBADF (Bad file descriptor) [pid 364] close(20) = -1 EBADF (Bad file descriptor) [pid 364] close(21) = -1 EBADF (Bad file descriptor) [pid 364] close(22) = -1 EBADF (Bad file descriptor) [pid 364] close(23) = -1 EBADF (Bad file descriptor) [pid 364] close(24) = -1 EBADF (Bad file descriptor) [pid 364] close(25) = -1 EBADF (Bad file descriptor) [pid 364] close(26) = -1 EBADF (Bad file descriptor) [pid 364] close(27) = -1 EBADF (Bad file descriptor) [pid 364] close(28) = -1 EBADF (Bad file descriptor) [pid 364] close(29) = -1 EBADF (Bad file descriptor) [pid 364] exit_group(0) = ? [pid 364] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 68 ./strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x55557e6d4660, 24) = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3executing program ) = 0 [pid 365] write(1, "executing program\n", 18) = 18 [pid 365] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 365] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 365] write(4, "9", 1) = 1 [pid 365] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 365] close(3) = 0 [pid 365] close(4) = 0 [pid 365] close(5) = -1 EBADF (Bad file descriptor) [pid 365] close(6) = -1 EBADF (Bad file descriptor) [pid 365] close(7) = -1 EBADF (Bad file descriptor) [pid 365] close(8) = -1 EBADF (Bad file descriptor) [pid 365] close(9) = -1 EBADF (Bad file descriptor) [pid 365] close(10) = -1 EBADF (Bad file descriptor) [pid 365] close(11) = -1 EBADF (Bad file descriptor) [pid 365] close(12) = -1 EBADF (Bad file descriptor) [pid 365] close(13) = -1 EBADF (Bad file descriptor) [pid 365] close(14) = -1 EBADF (Bad file descriptor) [pid 365] close(15) = -1 EBADF (Bad file descriptor) [pid 365] close(16) = -1 EBADF (Bad file descriptor) [pid 365] close(17) = -1 EBADF (Bad file descriptor) [pid 365] close(18) = -1 EBADF (Bad file descriptor) [pid 365] close(19) = -1 EBADF (Bad file descriptor) [pid 365] close(20) = -1 EBADF (Bad file descriptor) [pid 365] close(21) = -1 EBADF (Bad file descriptor) [pid 365] close(22) = -1 EBADF (Bad file descriptor) [pid 365] close(23) = -1 EBADF (Bad file descriptor) [pid 365] close(24) = -1 EBADF (Bad file descriptor) [pid 365] close(25) = -1 EBADF (Bad file descriptor) [pid 365] close(26) = -1 EBADF (Bad file descriptor) [pid 365] close(27) = -1 EBADF (Bad file descriptor) [pid 365] close(28) = -1 EBADF (Bad file descriptor) [pid 365] close(29) = -1 EBADF (Bad file descriptor) [pid 365] exit_group(0) = ? [pid 365] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 69 ./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x55557e6d4660, 24) = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] write(1, "executing program\n", 18executing program ) = 18 [pid 366] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 366] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 366] write(4, "9", 1) = 1 [pid 366] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 366] close(3) = 0 [pid 366] close(4) = 0 [pid 366] close(5) = -1 EBADF (Bad file descriptor) [pid 366] close(6) = -1 EBADF (Bad file descriptor) [pid 366] close(7) = -1 EBADF (Bad file descriptor) [pid 366] close(8) = -1 EBADF (Bad file descriptor) [pid 366] close(9) = -1 EBADF (Bad file descriptor) [pid 366] close(10) = -1 EBADF (Bad file descriptor) [pid 366] close(11) = -1 EBADF (Bad file descriptor) [pid 366] close(12) = -1 EBADF (Bad file descriptor) [pid 366] close(13) = -1 EBADF (Bad file descriptor) [pid 366] close(14) = -1 EBADF (Bad file descriptor) [pid 366] close(15) = -1 EBADF (Bad file descriptor) [pid 366] close(16) = -1 EBADF (Bad file descriptor) [pid 366] close(17) = -1 EBADF (Bad file descriptor) [pid 366] close(18) = -1 EBADF (Bad file descriptor) [pid 366] close(19) = -1 EBADF (Bad file descriptor) [pid 366] close(20) = -1 EBADF (Bad file descriptor) [pid 366] close(21) = -1 EBADF (Bad file descriptor) [pid 366] close(22) = -1 EBADF (Bad file descriptor) [pid 366] close(23) = -1 EBADF (Bad file descriptor) [pid 366] close(24) = -1 EBADF (Bad file descriptor) [pid 366] close(25) = -1 EBADF (Bad file descriptor) [pid 366] close(26) = -1 EBADF (Bad file descriptor) [pid 366] close(27) = -1 EBADF (Bad file descriptor) [pid 366] close(28) = -1 EBADF (Bad file descriptor) [pid 366] close(29) = -1 EBADF (Bad file descriptor) [pid 366] exit_group(0) = ? [pid 366] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 367 attached , child_tidptr=0x55557e6d4650) = 70 [pid 367] set_robust_list(0x55557e6d4660, 24) = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3) = 0 [pid 367] write(1, "executing program\n", 18) = 18 [pid 367] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 367] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 367] write(4, "9", 1) = 1 [ 28.657400][ T363] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 28.657406][ T363] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 28.657411][ T363] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000006fb2 [ 28.657416][ T363] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 28.657424][ T363] [pid 367] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 367] close(3) = 0 [pid 367] close(4) = 0 [pid 367] close(5) = -1 EBADF (Bad file descriptor) [pid 367] close(6) = -1 EBADF (Bad file descriptor) [pid 367] close(7) = -1 EBADF (Bad file descriptor) [pid 367] close(8) = -1 EBADF (Bad file descriptor) [pid 367] close(9) = -1 EBADF (Bad file descriptor) [pid 367] close(10) = -1 EBADF (Bad file descriptor) [pid 367] close(11) = -1 EBADF (Bad file descriptor) [pid 367] close(12) = -1 EBADF (Bad file descriptor) [pid 367] close(13) = -1 EBADF (Bad file descriptor) [pid 367] close(14) = -1 EBADF (Bad file descriptor) [pid 367] close(15) = -1 EBADF (Bad file descriptor) [pid 367] close(16) = -1 EBADF (Bad file descriptor) [pid 367] close(17) = -1 EBADF (Bad file descriptor) [pid 367] close(18) = -1 EBADF (Bad file descriptor) [pid 367] close(19) = -1 EBADF (Bad file descriptor) [pid 367] close(20) = -1 EBADF (Bad file descriptor) [pid 367] close(21) = -1 EBADF (Bad file descriptor) [pid 367] close(22) = -1 EBADF (Bad file descriptor) [pid 367] close(23) = -1 EBADF (Bad file descriptor) [pid 367] close(24) = -1 EBADF (Bad file descriptor) [pid 367] close(25) = -1 EBADF (Bad file descriptor) [pid 367] close(26) = -1 EBADF (Bad file descriptor) [pid 367] close(27) = -1 EBADF (Bad file descriptor) [pid 367] close(28) = -1 EBADF (Bad file descriptor) [pid 367] close(29) = -1 EBADF (Bad file descriptor) [pid 367] exit_group(0) = ? [pid 367] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [ 29.074439][ T367] FAULT_INJECTION: forcing a failure. [ 29.074439][ T367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.087716][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 29.087742][ T367] Tainted: [W]=WARN [ 29.087747][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.087755][ T367] Call Trace: [ 29.087760][ T367] [ 29.087767][ T367] __dump_stack+0x21/0x30 [ 29.087790][ T367] dump_stack_lvl+0x10c/0x190 [ 29.087806][ T367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.087823][ T367] ? kasan_save_free_info+0x4a/0x60 [ 29.087837][ T367] ? kmem_cache_free+0x1c1/0x4c0 [ 29.087853][ T367] ? unlink_anon_vmas+0x2c6/0x5c0 [ 29.087867][ T367] ? free_pgtables+0x2a9/0x730 [ 29.087881][ T367] ? vms_clean_up_area+0x66/0x1d0 [ 29.087891][ T367] dump_stack+0x19/0x20 [ 29.087901][ T367] should_fail_ex+0x3d9/0x530 [ 29.087910][ T367] should_fail_alloc_page+0xeb/0x110 [ 29.087921][ T367] __alloc_pages_noprof+0x19d/0x6c0 [ 29.087930][ T367] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.087941][ T367] ? is_bpf_text_address+0x17b/0x1a0 [ 29.087957][ T367] ? kernel_text_address+0xa9/0xe0 [ 29.087968][ T367] ? unwind_get_return_address+0x51/0x90 [ 29.087979][ T367] pte_alloc_one+0x97/0x520 [ 29.087993][ T367] ? __cfi_pte_alloc_one+0x10/0x10 [ 29.088007][ T367] ? pagerange_is_ram_callback+0xf4/0x150 [ 29.088022][ T367] __pte_alloc+0x79/0x420 [ 29.088034][ T367] ? __cfi___pte_alloc+0x10/0x10 [ 29.088045][ T367] ? pat_pagerange_is_ram+0xf4/0x140 [ 29.088058][ T367] ? cattr_name+0xc0/0xc0 [ 29.088071][ T367] remap_pfn_range_notrack+0x8d0/0xb00 [ 29.088085][ T367] ? lookup_memtype+0xe3/0x190 [ 29.088099][ T367] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 29.088113][ T367] ? __kasan_check_read+0x15/0x20 [ 29.088125][ T367] ? track_pfn_remap+0x2a7/0x340 [ 29.088139][ T367] remap_pfn_range+0xf1/0x170 [ 29.088159][ T367] ? __cfi_remap_pfn_range+0x10/0x10 [ 29.088172][ T367] ? kasan_save_alloc_info+0x40/0x50 [ 29.088184][ T367] sel_mmap_handle_status+0x2d8/0x3c0 [ 29.088196][ T367] mmap_region+0x1371/0x1bd0 [ 29.088209][ T367] ? __cfi_mmap_region+0x10/0x10 [ 29.088222][ T367] ? __kasan_check_read+0x15/0x20 [ 29.088234][ T367] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 29.088251][ T367] ? __get_unmapped_area+0x407/0x470 [ 29.088263][ T367] ? file_mmap_ok+0x147/0x1a0 [ 29.088275][ T367] do_mmap+0xb6d/0x13c0 [ 29.088287][ T367] ? __cfi_do_mmap+0x10/0x10 [ 29.088299][ T367] ? down_write_killable+0xe9/0x2d0 [ 29.088310][ T367] ? __cfi_down_write_killable+0x10/0x10 [ 29.088322][ T367] vm_mmap_pgoff+0x38f/0x4e0 [ 29.088335][ T367] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 29.088347][ T367] ? __fget_files+0x2c5/0x340 [ 29.088362][ T367] ksys_mmap_pgoff+0x166/0x1e0 [ 29.088374][ T367] __x64_sys_mmap+0x121/0x140 [ 29.088388][ T367] x64_sys_call+0x13bf/0x2ee0 [ 29.088401][ T367] do_syscall_64+0x58/0xf0 [ 29.088414][ T367] ? clear_bhb_loop+0x35/0x90 [ 29.088430][ T367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.088444][ T367] RIP: 0033:0x7ff99b30dd79 [ 29.088454][ T367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 29.088464][ T367] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 29.088478][ T367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x55557e6d4660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 71 [pid 368] <... set_robust_list resumed>) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3executing program ) = 0 [pid 368] write(1, "executing program\n", 18) = 18 [pid 368] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 368] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 368] write(4, "9", 1) = 1 [pid 368] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 368] close(3) = 0 [pid 368] close(4) = 0 [pid 368] close(5) = -1 EBADF (Bad file descriptor) [pid 368] close(6) = -1 EBADF (Bad file descriptor) [pid 368] close(7) = -1 EBADF (Bad file descriptor) [pid 368] close(8) = -1 EBADF (Bad file descriptor) [pid 368] close(9) = -1 EBADF (Bad file descriptor) [pid 368] close(10) = -1 EBADF (Bad file descriptor) [pid 368] close(11) = -1 EBADF (Bad file descriptor) [pid 368] close(12) = -1 EBADF (Bad file descriptor) [pid 368] close(13) = -1 EBADF (Bad file descriptor) [pid 368] close(14) = -1 EBADF (Bad file descriptor) [pid 368] close(15) = -1 EBADF (Bad file descriptor) [pid 368] close(16) = -1 EBADF (Bad file descriptor) [pid 368] close(17) = -1 EBADF (Bad file descriptor) [pid 368] close(18) = -1 EBADF (Bad file descriptor) [pid 368] close(19) = -1 EBADF (Bad file descriptor) [pid 368] close(20) = -1 EBADF (Bad file descriptor) [pid 368] close(21) = -1 EBADF (Bad file descriptor) [pid 368] close(22) = -1 EBADF (Bad file descriptor) [pid 368] close(23) = -1 EBADF (Bad file descriptor) [pid 368] close(24) = -1 EBADF (Bad file descriptor) [pid 368] close(25) = -1 EBADF (Bad file descriptor) [pid 368] close(26) = -1 EBADF (Bad file descriptor) [pid 368] close(27) = -1 EBADF (Bad file descriptor) [pid 368] close(28) = -1 EBADF (Bad file descriptor) [pid 368] close(29) = -1 EBADF (Bad file descriptor) [pid 368] exit_group(0) = ? [pid 368] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 72 ./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x55557e6d4660, 24) = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] write(1, "executing program\n", 18executing program ) = 18 [pid 369] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 369] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 369] write(4, "9", 1) = 1 [pid 369] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 369] close(3) = 0 [pid 369] close(4) = 0 [pid 369] close(5) = -1 EBADF (Bad file descriptor) [pid 369] close(6) = -1 EBADF (Bad file descriptor) [pid 369] close(7) = -1 EBADF (Bad file descriptor) [pid 369] close(8) = -1 EBADF (Bad file descriptor) [pid 369] close(9) = -1 EBADF (Bad file descriptor) [pid 369] close(10) = -1 EBADF (Bad file descriptor) [pid 369] close(11) = -1 EBADF (Bad file descriptor) [pid 369] close(12) = -1 EBADF (Bad file descriptor) [pid 369] close(13) = -1 EBADF (Bad file descriptor) [pid 369] close(14) = -1 EBADF (Bad file descriptor) [pid 369] close(15) = -1 EBADF (Bad file descriptor) [pid 369] close(16) = -1 EBADF (Bad file descriptor) [pid 369] close(17) = -1 EBADF (Bad file descriptor) [pid 369] close(18) = -1 EBADF (Bad file descriptor) [pid 369] close(19) = -1 EBADF (Bad file descriptor) [pid 369] close(20) = -1 EBADF (Bad file descriptor) [pid 369] close(21) = -1 EBADF (Bad file descriptor) [pid 369] close(22) = -1 EBADF (Bad file descriptor) [pid 369] close(23) = -1 EBADF (Bad file descriptor) [pid 369] close(24) = -1 EBADF (Bad file descriptor) [pid 369] close(25) = -1 EBADF (Bad file descriptor) [pid 369] close(26) = -1 EBADF (Bad file descriptor) [pid 369] close(27) = -1 EBADF (Bad file descriptor) [pid 369] close(28) = -1 EBADF (Bad file descriptor) [pid 369] close(29) = -1 EBADF (Bad file descriptor) [pid 369] exit_group(0) = ? [pid 369] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 73 ./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x55557e6d4660, 24) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3executing program ) = 0 [pid 370] write(1, "executing program\n", 18) = 18 [pid 370] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 370] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 370] write(4, "9", 1) = 1 [pid 370] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 370] close(3) = 0 [pid 370] close(4) = 0 [pid 370] close(5) = -1 EBADF (Bad file descriptor) [pid 370] close(6) = -1 EBADF (Bad file descriptor) [pid 370] close(7) = -1 EBADF (Bad file descriptor) [pid 370] close(8) = -1 EBADF (Bad file descriptor) [pid 370] close(9) = -1 EBADF (Bad file descriptor) [pid 370] close(10) = -1 EBADF (Bad file descriptor) [pid 370] close(11) = -1 EBADF (Bad file descriptor) [pid 370] close(12) = -1 EBADF (Bad file descriptor) [pid 370] close(13) = -1 EBADF (Bad file descriptor) [pid 370] close(14) = -1 EBADF (Bad file descriptor) [pid 370] close(15) = -1 EBADF (Bad file descriptor) [pid 370] close(16) = -1 EBADF (Bad file descriptor) [pid 370] close(17) = -1 EBADF (Bad file descriptor) [pid 370] close(18) = -1 EBADF (Bad file descriptor) [pid 370] close(19) = -1 EBADF (Bad file descriptor) [pid 370] close(20) = -1 EBADF (Bad file descriptor) [pid 370] close(21) = -1 EBADF (Bad file descriptor) [pid 370] close(22) = -1 EBADF (Bad file descriptor) [pid 370] close(23) = -1 EBADF (Bad file descriptor) [pid 370] close(24) = -1 EBADF (Bad file descriptor) [pid 370] close(25) = -1 EBADF (Bad file descriptor) [pid 370] close(26) = -1 EBADF (Bad file descriptor) [pid 370] close(27) = -1 EBADF (Bad file descriptor) [pid 370] close(28) = -1 EBADF (Bad file descriptor) [pid 370] close(29) = -1 EBADF (Bad file descriptor) [pid 370] exit_group(0) = ? [pid 370] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 74 ./strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x55557e6d4660, 24) = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 371] write(3, "1000", 4) = 4 [pid 371] close(3) = 0 [pid 371] write(1, "executing program\n", 18) = 18 [pid 371] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 371] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 371] write(4, "9", 1) = 1 [ 29.088487][ T367] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 29.088494][ T367] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 29.088501][ T367] R10: 0000000000000011 R11: 0000000000000246 R12: 000000000000716e [ 29.088509][ T367] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 29.088517][ T367] [pid 371] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 371] close(3) = 0 [pid 371] close(4) = 0 [pid 371] close(5) = -1 EBADF (Bad file descriptor) [pid 371] close(6) = -1 EBADF (Bad file descriptor) [ 29.496621][ T371] FAULT_INJECTION: forcing a failure. [ 29.496621][ T371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.510283][ T371] CPU: 0 UID: 0 PID: 371 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 29.510312][ T371] Tainted: [W]=WARN [ 29.510316][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.510322][ T371] Call Trace: [ 29.510325][ T371] [ 29.510329][ T371] __dump_stack+0x21/0x30 [ 29.510344][ T371] dump_stack_lvl+0x10c/0x190 [ 29.510353][ T371] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.510363][ T371] ? kasan_save_free_info+0x4a/0x60 [ 29.510375][ T371] ? kmem_cache_free+0x1c1/0x4c0 [ 29.510385][ T371] ? unlink_anon_vmas+0x2c6/0x5c0 [ 29.510395][ T371] ? free_pgtables+0x2a9/0x730 [ 29.510404][ T371] ? vms_clean_up_area+0x66/0x1d0 [ 29.510414][ T371] dump_stack+0x19/0x20 [ 29.510424][ T371] should_fail_ex+0x3d9/0x530 [ 29.510433][ T371] should_fail_alloc_page+0xeb/0x110 [ 29.510445][ T371] __alloc_pages_noprof+0x19d/0x6c0 [ 29.510453][ T371] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.510461][ T371] ? is_bpf_text_address+0x17b/0x1a0 [ 29.510473][ T371] ? kernel_text_address+0xa9/0xe0 [ 29.510482][ T371] ? unwind_get_return_address+0x51/0x90 [ 29.510491][ T371] pte_alloc_one+0x97/0x520 [ 29.510501][ T371] ? __cfi_pte_alloc_one+0x10/0x10 [ 29.510512][ T371] ? pagerange_is_ram_callback+0xf4/0x150 [ 29.510524][ T371] __pte_alloc+0x79/0x420 [ 29.510533][ T371] ? __cfi___pte_alloc+0x10/0x10 [ 29.510542][ T371] ? pat_pagerange_is_ram+0xf4/0x140 [ 29.510552][ T371] ? cattr_name+0xc0/0xc0 [ 29.510562][ T371] remap_pfn_range_notrack+0x8d0/0xb00 [ 29.510573][ T371] ? lookup_memtype+0xe3/0x190 [ 29.510584][ T371] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 29.510594][ T371] ? __kasan_check_read+0x15/0x20 [ 29.510603][ T371] ? track_pfn_remap+0x2a7/0x340 [ 29.510614][ T371] remap_pfn_range+0xf1/0x170 [ 29.510624][ T371] ? __cfi_remap_pfn_range+0x10/0x10 [ 29.510634][ T371] ? kasan_save_alloc_info+0x40/0x50 [ 29.510643][ T371] sel_mmap_handle_status+0x2d8/0x3c0 [ 29.510652][ T371] mmap_region+0x1371/0x1bd0 [ 29.510662][ T371] ? __cfi_mmap_region+0x10/0x10 [ 29.510671][ T371] ? sched_clock+0x44/0x60 [ 29.510681][ T371] ? __kasan_check_read+0x15/0x20 [ 29.510690][ T371] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 29.510703][ T371] ? __get_unmapped_area+0x407/0x470 [ 29.510712][ T371] ? file_mmap_ok+0x147/0x1a0 [ 29.510721][ T371] do_mmap+0xb6d/0x13c0 [ 29.510731][ T371] ? __cfi_do_mmap+0x10/0x10 [ 29.510739][ T371] ? down_write_killable+0xe9/0x2d0 [ 29.510749][ T371] ? __cfi_down_write_killable+0x10/0x10 [ 29.510758][ T371] vm_mmap_pgoff+0x38f/0x4e0 [ 29.510768][ T371] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 29.510777][ T371] ? __fget_files+0x2c5/0x340 [ 29.510789][ T371] ksys_mmap_pgoff+0x166/0x1e0 [ 29.510798][ T371] __x64_sys_mmap+0x121/0x140 [ 29.510809][ T371] x64_sys_call+0x13bf/0x2ee0 [ 29.510820][ T371] do_syscall_64+0x58/0xf0 [ 29.510830][ T371] ? clear_bhb_loop+0x35/0x90 [ 29.510842][ T371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.510853][ T371] RIP: 0033:0x7ff99b30dd79 [ 29.510862][ T371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 29.510870][ T371] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 29.510881][ T371] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [pid 371] close(7) = -1 EBADF (Bad file descriptor) [pid 371] close(8) = -1 EBADF (Bad file descriptor) [pid 371] close(9) = -1 EBADF (Bad file descriptor) [pid 371] close(10) = -1 EBADF (Bad file descriptor) [pid 371] close(11) = -1 EBADF (Bad file descriptor) [pid 371] close(12) = -1 EBADF (Bad file descriptor) [pid 371] close(13) = -1 EBADF (Bad file descriptor) [pid 371] close(14) = -1 EBADF (Bad file descriptor) [pid 371] close(15) = -1 EBADF (Bad file descriptor) [pid 371] close(16) = -1 EBADF (Bad file descriptor) [pid 371] close(17) = -1 EBADF (Bad file descriptor) [pid 371] close(18) = -1 EBADF (Bad file descriptor) [pid 371] close(19) = -1 EBADF (Bad file descriptor) [pid 371] close(20) = -1 EBADF (Bad file descriptor) [pid 371] close(21) = -1 EBADF (Bad file descriptor) [pid 371] close(22) = -1 EBADF (Bad file descriptor) [pid 371] close(23) = -1 EBADF (Bad file descriptor) [pid 371] close(24) = -1 EBADF (Bad file descriptor) [pid 371] close(25) = -1 EBADF (Bad file descriptor) [pid 371] close(26) = -1 EBADF (Bad file descriptor) [pid 371] close(27) = -1 EBADF (Bad file descriptor) [pid 371] close(28) = -1 EBADF (Bad file descriptor) [pid 371] close(29) = -1 EBADF (Bad file descriptor) [pid 371] exit_group(0) = ? [pid 371] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 75 ./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x55557e6d4660, 24) = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3executing program ) = 0 [pid 372] write(1, "executing program\n", 18) = 18 [pid 372] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 372] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 372] write(4, "9", 1) = 1 [ 29.510888][ T371] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 29.510894][ T371] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 29.510899][ T371] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000007315 [ 29.510904][ T371] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 29.510911][ T371] [ 29.898651][ T372] FAULT_INJECTION: forcing a failure. [ 29.898651][ T372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.911951][ T372] CPU: 0 UID: 0 PID: 372 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 29.911976][ T372] Tainted: [W]=WARN [ 29.911982][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.911990][ T372] Call Trace: [ 29.911995][ T372] [ 29.912000][ T372] __dump_stack+0x21/0x30 [ 29.912023][ T372] dump_stack_lvl+0x10c/0x190 [ 29.912038][ T372] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.912055][ T372] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 29.912071][ T372] ? _raw_spin_trylock+0xaf/0x130 [ 29.912089][ T372] dump_stack+0x19/0x20 [ 29.912102][ T372] should_fail_ex+0x3d9/0x530 [ 29.912113][ T372] should_fail_alloc_page+0xeb/0x110 [ 29.912124][ T372] __alloc_pages_noprof+0x19d/0x6c0 [ 29.912132][ T372] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.912147][ T372] ? is_bpf_text_address+0x17b/0x1a0 [ 29.912159][ T372] ? kernel_text_address+0xa9/0xe0 [ 29.912168][ T372] ? unwind_get_return_address+0x51/0x90 [ 29.912178][ T372] pte_alloc_one+0x97/0x520 [ 29.912188][ T372] ? __cfi_pte_alloc_one+0x10/0x10 [ 29.912199][ T372] ? pagerange_is_ram_callback+0xf4/0x150 [ 29.912216][ T372] __pte_alloc+0x79/0x420 [ 29.912226][ T372] ? __cfi___pte_alloc+0x10/0x10 [ 29.912234][ T372] ? pat_pagerange_is_ram+0xf4/0x140 [ 29.912245][ T372] ? cattr_name+0xc0/0xc0 [ 29.912255][ T372] remap_pfn_range_notrack+0x8d0/0xb00 [ 29.912265][ T372] ? lookup_memtype+0xe3/0x190 [ 29.912277][ T372] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 29.912287][ T372] ? __kasan_check_read+0x15/0x20 [ 29.912296][ T372] ? track_pfn_remap+0x2a7/0x340 [ 29.912307][ T372] remap_pfn_range+0xf1/0x170 [ 29.912316][ T372] ? __cfi_remap_pfn_range+0x10/0x10 [ 29.912326][ T372] ? kasan_save_alloc_info+0x40/0x50 [ 29.912335][ T372] sel_mmap_handle_status+0x2d8/0x3c0 [ 29.912345][ T372] mmap_region+0x1371/0x1bd0 [ 29.912355][ T372] ? __cfi_mmap_region+0x10/0x10 [ 29.912365][ T372] ? __kasan_check_read+0x15/0x20 [ 29.912374][ T372] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 29.912388][ T372] ? __get_unmapped_area+0x407/0x470 [ 29.912397][ T372] ? file_mmap_ok+0x147/0x1a0 [ 29.912407][ T372] do_mmap+0xb6d/0x13c0 [ 29.912416][ T372] ? __cfi_do_mmap+0x10/0x10 [ 29.912425][ T372] ? down_write_killable+0xe9/0x2d0 [ 29.912433][ T372] ? __cfi_down_write_killable+0x10/0x10 [ 29.912443][ T372] vm_mmap_pgoff+0x38f/0x4e0 [ 29.912452][ T372] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 29.912462][ T372] ? __fget_files+0x2c5/0x340 [ 29.912473][ T372] ksys_mmap_pgoff+0x166/0x1e0 [ 29.912483][ T372] __x64_sys_mmap+0x121/0x140 [ 29.912493][ T372] x64_sys_call+0x13bf/0x2ee0 [ 29.912504][ T372] do_syscall_64+0x58/0xf0 [ 29.912514][ T372] ? clear_bhb_loop+0x35/0x90 [ 29.912526][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.912538][ T372] RIP: 0033:0x7ff99b30dd79 [ 29.912546][ T372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 29.912554][ T372] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 29.912566][ T372] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 29.912572][ T372] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 29.912578][ T372] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [pid 372] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 372] close(3) = 0 [pid 372] close(4) = 0 [pid 372] close(5) = -1 EBADF (Bad file descriptor) [pid 372] close(6) = -1 EBADF (Bad file descriptor) [pid 372] close(7) = -1 EBADF (Bad file descriptor) [pid 372] close(8) = -1 EBADF (Bad file descriptor) [pid 372] close(9) = -1 EBADF (Bad file descriptor) [pid 372] close(10) = -1 EBADF (Bad file descriptor) [pid 372] close(11) = -1 EBADF (Bad file descriptor) [pid 372] close(12) = -1 EBADF (Bad file descriptor) [pid 372] close(13) = -1 EBADF (Bad file descriptor) [pid 372] close(14) = -1 EBADF (Bad file descriptor) [pid 372] close(15) = -1 EBADF (Bad file descriptor) [pid 372] close(16) = -1 EBADF (Bad file descriptor) [pid 372] close(17) = -1 EBADF (Bad file descriptor) [pid 372] close(18) = -1 EBADF (Bad file descriptor) [pid 372] close(19) = -1 EBADF (Bad file descriptor) [pid 372] close(20) = -1 EBADF (Bad file descriptor) [pid 372] close(21) = -1 EBADF (Bad file descriptor) [pid 372] close(22) = -1 EBADF (Bad file descriptor) [pid 372] close(23) = -1 EBADF (Bad file descriptor) [pid 372] close(24) = -1 EBADF (Bad file descriptor) [pid 372] close(25) = -1 EBADF (Bad file descriptor) [pid 372] close(26) = -1 EBADF (Bad file descriptor) [pid 372] close(27) = -1 EBADF (Bad file descriptor) [pid 372] close(28) = -1 EBADF (Bad file descriptor) [pid 372] close(29) = -1 EBADF (Bad file descriptor) [pid 372] exit_group(0) = ? [pid 372] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 76 ./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x55557e6d4660, 24) = 0 [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] setpgid(0, 0) = 0 [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1000", 4) = 4 [pid 373] close(3) = 0 executing program [pid 373] write(1, "executing program\n", 18) = 18 [pid 373] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 373] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 373] write(4, "9", 1) = 1 [pid 373] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 373] close(3) = 0 [pid 373] close(4) = 0 [pid 373] close(5) = -1 EBADF (Bad file descriptor) [pid 373] close(6) = -1 EBADF (Bad file descriptor) [pid 373] close(7) = -1 EBADF (Bad file descriptor) [pid 373] close(8) = -1 EBADF (Bad file descriptor) [pid 373] close(9) = -1 EBADF (Bad file descriptor) [pid 373] close(10) = -1 EBADF (Bad file descriptor) [pid 373] close(11) = -1 EBADF (Bad file descriptor) [pid 373] close(12) = -1 EBADF (Bad file descriptor) [pid 373] close(13) = -1 EBADF (Bad file descriptor) [pid 373] close(14) = -1 EBADF (Bad file descriptor) [ 29.912583][ T372] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000007320 [ 29.912589][ T372] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 29.912596][ T372] [ 30.283262][ T373] FAULT_INJECTION: forcing a failure. [ 30.283262][ T373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [pid 373] close(15executing program ) = -1 EBADF (Bad file descriptor) [pid 373] close(16) = -1 EBADF (Bad file descriptor) [pid 373] close(17) = -1 EBADF (Bad file descriptor) [pid 373] close(18) = -1 EBADF (Bad file descriptor) [pid 373] close(19) = -1 EBADF (Bad file descriptor) [pid 373] close(20) = -1 EBADF (Bad file descriptor) [pid 373] close(21) = -1 EBADF (Bad file descriptor) [pid 373] close(22) = -1 EBADF (Bad file descriptor) [pid 373] close(23) = -1 EBADF (Bad file descriptor) [pid 373] close(24) = -1 EBADF (Bad file descriptor) [pid 373] close(25) = -1 EBADF (Bad file descriptor) [pid 373] close(26) = -1 EBADF (Bad file descriptor) [pid 373] close(27) = -1 EBADF (Bad file descriptor) [pid 373] close(28) = -1 EBADF (Bad file descriptor) [pid 373] close(29) = -1 EBADF (Bad file descriptor) [pid 373] exit_group(0) = ? [pid 373] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x55557e6d4660, 24) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 77 [pid 374] <... prctl resumed>) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] write(1, "executing program\n", 18) = 18 [pid 374] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 374] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 374] write(4, "9", 1) = 1 [ 30.296781][ T373] CPU: 0 UID: 0 PID: 373 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 30.296800][ T373] Tainted: [W]=WARN [ 30.296803][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.296808][ T373] Call Trace: [ 30.296811][ T373] [ 30.296815][ T373] __dump_stack+0x21/0x30 [ 30.296830][ T373] dump_stack_lvl+0x10c/0x190 [ 30.296840][ T373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.296850][ T373] ? kasan_save_free_info+0x4a/0x60 [ 30.296859][ T373] ? kmem_cache_free+0x1c1/0x4c0 [ 30.296869][ T373] ? unlink_anon_vmas+0x2c6/0x5c0 [ 30.296879][ T373] ? free_pgtables+0x2a9/0x730 [ 30.296889][ T373] ? vms_clean_up_area+0x66/0x1d0 [ 30.296899][ T373] dump_stack+0x19/0x20 [ 30.296909][ T373] should_fail_ex+0x3d9/0x530 [ 30.296919][ T373] should_fail_alloc_page+0xeb/0x110 [ 30.296930][ T373] __alloc_pages_noprof+0x19d/0x6c0 [ 30.296938][ T373] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 30.296947][ T373] ? is_bpf_text_address+0x17b/0x1a0 [ 30.296958][ T373] ? kernel_text_address+0xa9/0xe0 [ 30.296968][ T373] ? unwind_get_return_address+0x51/0x90 [ 30.296977][ T373] pte_alloc_one+0x97/0x520 [ 30.296988][ T373] ? __cfi_pte_alloc_one+0x10/0x10 [ 30.296998][ T373] ? pagerange_is_ram_callback+0xf4/0x150 [ 30.297010][ T373] __pte_alloc+0x79/0x420 [ 30.297019][ T373] ? __cfi___pte_alloc+0x10/0x10 [ 30.297028][ T373] ? pat_pagerange_is_ram+0xf4/0x140 [ 30.297038][ T373] ? cattr_name+0xc0/0xc0 [ 30.297048][ T373] remap_pfn_range_notrack+0x8d0/0xb00 [ 30.297058][ T373] ? lookup_memtype+0xe3/0x190 [ 30.297070][ T373] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 30.297080][ T373] ? __kasan_check_read+0x15/0x20 [ 30.297089][ T373] ? track_pfn_remap+0x2a7/0x340 [ 30.297100][ T373] remap_pfn_range+0xf1/0x170 [ 30.297110][ T373] ? __cfi_remap_pfn_range+0x10/0x10 [ 30.297120][ T373] ? kasan_save_alloc_info+0x40/0x50 [ 30.297129][ T373] sel_mmap_handle_status+0x2d8/0x3c0 [ 30.297139][ T373] mmap_region+0x1371/0x1bd0 [ 30.297149][ T373] ? __cfi_mmap_region+0x10/0x10 [ 30.297158][ T373] ? sched_clock+0x44/0x60 [ 30.297168][ T373] ? __kasan_check_read+0x15/0x20 [ 30.297176][ T373] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 30.297189][ T373] ? __get_unmapped_area+0x407/0x470 [ 30.297198][ T373] ? file_mmap_ok+0x147/0x1a0 [ 30.297213][ T373] do_mmap+0xb6d/0x13c0 [ 30.297222][ T373] ? __cfi_do_mmap+0x10/0x10 [ 30.297231][ T373] ? down_write_killable+0xe9/0x2d0 [ 30.297240][ T373] ? __cfi_down_write_killable+0x10/0x10 [ 30.297249][ T373] vm_mmap_pgoff+0x38f/0x4e0 [ 30.297259][ T373] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 30.297269][ T373] ? __fget_files+0x2c5/0x340 [ 30.297280][ T373] ksys_mmap_pgoff+0x166/0x1e0 [ 30.297290][ T373] __x64_sys_mmap+0x121/0x140 [ 30.297300][ T373] x64_sys_call+0x13bf/0x2ee0 [ 30.297311][ T373] do_syscall_64+0x58/0xf0 [ 30.297321][ T373] ? clear_bhb_loop+0x35/0x90 [ 30.297333][ T373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.297344][ T373] RIP: 0033:0x7ff99b30dd79 [ 30.297353][ T373] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 30.297360][ T373] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 30.297371][ T373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 30.297378][ T373] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 30.297383][ T373] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [pid 374] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 374] close(3) = 0 [pid 374] close(4) = 0 [pid 374] close(5) = -1 EBADF (Bad file descriptor) [pid 374] close(6) = -1 EBADF (Bad file descriptor) [pid 374] close(7) = -1 EBADF (Bad file descriptor) [pid 374] close(8) = -1 EBADF (Bad file descriptor) [pid 374] close(9) = -1 EBADF (Bad file descriptor) [pid 374] close(10) = -1 EBADF (Bad file descriptor) [pid 374] close(11) = -1 EBADF (Bad file descriptor) [pid 374] close(12) = -1 EBADF (Bad file descriptor) [pid 374] close(13) = -1 EBADF (Bad file descriptor) [pid 374] close(14) = -1 EBADF (Bad file descriptor) [pid 374] close(15) = -1 EBADF (Bad file descriptor) [pid 374] close(16) = -1 EBADF (Bad file descriptor) [pid 374] close(17) = -1 EBADF (Bad file descriptor) [pid 374] close(18) = -1 EBADF (Bad file descriptor) [pid 374] close(19) = -1 EBADF (Bad file descriptor) [pid 374] close(20) = -1 EBADF (Bad file descriptor) [pid 374] close(21) = -1 EBADF (Bad file descriptor) [pid 374] close(22) = -1 EBADF (Bad file descriptor) [pid 374] close(23) = -1 EBADF (Bad file descriptor) [pid 374] close(24) = -1 EBADF (Bad file descriptor) [pid 374] close(25) = -1 EBADF (Bad file descriptor) [pid 374] close(26) = -1 EBADF (Bad file descriptor) [pid 374] close(27) = -1 EBADF (Bad file descriptor) [pid 374] close(28) = -1 EBADF (Bad file descriptor) [pid 374] close(29) = -1 EBADF (Bad file descriptor) [pid 374] exit_group(0) = ? [pid 374] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=32} --- [ 30.297389][ T373] R10: 0000000000000011 R11: 0000000000000246 R12: 00000000000074b1 [ 30.297395][ T373] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 30.297402][ T373] [ 30.343129][ T374] FAULT_INJECTION: forcing a failure. [ 30.343129][ T374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.686173][ T374] CPU: 1 UID: 0 PID: 374 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 30.686194][ T374] Tainted: [W]=WARN [ 30.686197][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.686203][ T374] Call Trace: [ 30.686207][ T374] [ 30.686211][ T374] __dump_stack+0x21/0x30 [ 30.686227][ T374] dump_stack_lvl+0x10c/0x190 [ 30.686240][ T374] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.686249][ T374] ? kasan_save_free_info+0x4a/0x60 [ 30.686259][ T374] ? kmem_cache_free+0x1c1/0x4c0 [ 30.686269][ T374] ? unlink_anon_vmas+0x2c6/0x5c0 [ 30.686279][ T374] ? free_pgtables+0x2a9/0x730 [ 30.686288][ T374] ? vms_clean_up_area+0x66/0x1d0 [ 30.686299][ T374] dump_stack+0x19/0x20 [ 30.686308][ T374] should_fail_ex+0x3d9/0x530 [ 30.686318][ T374] should_fail_alloc_page+0xeb/0x110 [ 30.686330][ T374] __alloc_pages_noprof+0x19d/0x6c0 [ 30.686339][ T374] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 30.686347][ T374] ? is_bpf_text_address+0x17b/0x1a0 [ 30.686359][ T374] ? kernel_text_address+0xa9/0xe0 [ 30.686368][ T374] ? unwind_get_return_address+0x51/0x90 [ 30.686377][ T374] pte_alloc_one+0x97/0x520 [ 30.686387][ T374] ? __cfi_pte_alloc_one+0x10/0x10 [ 30.686398][ T374] ? pagerange_is_ram_callback+0xf4/0x150 [ 30.686410][ T374] __pte_alloc+0x79/0x420 [ 30.686421][ T374] ? __cfi___pte_alloc+0x10/0x10 [ 30.686430][ T374] ? pat_pagerange_is_ram+0xf4/0x140 [ 30.686441][ T374] ? cattr_name+0xc0/0xc0 [ 30.686451][ T374] remap_pfn_range_notrack+0x8d0/0xb00 [ 30.686461][ T374] ? lookup_memtype+0xe3/0x190 [ 30.686473][ T374] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 30.686483][ T374] ? __kasan_check_read+0x15/0x20 [ 30.686492][ T374] ? track_pfn_remap+0x2a7/0x340 [ 30.686503][ T374] remap_pfn_range+0xf1/0x170 [ 30.686513][ T374] ? __cfi_remap_pfn_range+0x10/0x10 [ 30.686523][ T374] ? kasan_save_alloc_info+0x40/0x50 [ 30.686532][ T374] sel_mmap_handle_status+0x2d8/0x3c0 [ 30.686542][ T374] mmap_region+0x1371/0x1bd0 [ 30.686552][ T374] ? __cfi_mmap_region+0x10/0x10 [ 30.686562][ T374] ? __kasan_check_read+0x15/0x20 [ 30.686571][ T374] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 30.686584][ T374] ? __get_unmapped_area+0x407/0x470 [ 30.686594][ T374] ? file_mmap_ok+0x147/0x1a0 [ 30.686603][ T374] do_mmap+0xb6d/0x13c0 [ 30.686612][ T374] ? __cfi_do_mmap+0x10/0x10 [ 30.686621][ T374] ? down_write_killable+0xe9/0x2d0 [ 30.686631][ T374] ? __cfi_down_write_killable+0x10/0x10 [ 30.686640][ T374] vm_mmap_pgoff+0x38f/0x4e0 [ 30.686650][ T374] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 30.686660][ T374] ? __fget_files+0x2c5/0x340 [ 30.686671][ T374] ksys_mmap_pgoff+0x166/0x1e0 [ 30.686681][ T374] __x64_sys_mmap+0x121/0x140 [ 30.686691][ T374] x64_sys_call+0x13bf/0x2ee0 [ 30.686702][ T374] do_syscall_64+0x58/0xf0 [ 30.686712][ T374] ? clear_bhb_loop+0x35/0x90 [ 30.686724][ T374] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.686735][ T374] RIP: 0033:0x7ff99b30dd79 [ 30.686744][ T374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 30.686752][ T374] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 30.686763][ T374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 30.686769][ T374] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 30.686775][ T374] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 30.686780][ T374] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000007631 [ 30.686786][ T374] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x55557e6d4660, 24 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 78 [pid 375] <... set_robust_list resumed>) = 0 [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 375] setpgid(0, 0) = 0 [pid 375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 375] write(3, "1000", 4) = 4 [pid 375] close(3executing program ) = 0 [pid 375] write(1, "executing program\n", 18) = 18 [pid 375] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 375] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 375] write(4, "9", 1) = 1 [pid 375] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 375] close(3) = 0 [pid 375] close(4) = 0 [pid 375] close(5) = -1 EBADF (Bad file descriptor) [pid 375] close(6) = -1 EBADF (Bad file descriptor) [pid 375] close(7) = -1 EBADF (Bad file descriptor) [pid 375] close(8) = -1 EBADF (Bad file descriptor) [pid 375] close(9) = -1 EBADF (Bad file descriptor) [pid 375] close(10) = -1 EBADF (Bad file descriptor) [pid 375] close(11) = -1 EBADF (Bad file descriptor) [pid 375] close(12) = -1 EBADF (Bad file descriptor) [pid 375] close(13) = -1 EBADF (Bad file descriptor) [pid 375] close(14) = -1 EBADF (Bad file descriptor) [pid 375] close(15) = -1 EBADF (Bad file descriptor) [pid 375] close(16) = -1 EBADF (Bad file descriptor) [pid 375] close(17) = -1 EBADF (Bad file descriptor) [pid 375] close(18) = -1 EBADF (Bad file descriptor) [pid 375] close(19) = -1 EBADF (Bad file descriptor) [pid 375] close(20) = -1 EBADF (Bad file descriptor) [pid 375] close(21) = -1 EBADF (Bad file descriptor) [pid 375] close(22) = -1 EBADF (Bad file descriptor) [pid 375] close(23) = -1 EBADF (Bad file descriptor) [pid 375] close(24) = -1 EBADF (Bad file descriptor) [pid 375] close(25) = -1 EBADF (Bad file descriptor) [pid 375] close(26) = -1 EBADF (Bad file descriptor) [pid 375] close(27) = -1 EBADF (Bad file descriptor) [pid 375] close(28) = -1 EBADF (Bad file descriptor) [pid 375] close(29) = -1 EBADF (Bad file descriptor) [pid 375] exit_group(0) = ? [pid 375] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 30.686793][ T374] [ 31.062687][ T375] FAULT_INJECTION: forcing a failure. [ 31.062687][ T375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 31.076207][ T375] CPU: 1 UID: 0 PID: 375 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 31.076236][ T375] Tainted: [W]=WARN [ 31.076241][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.076249][ T375] Call Trace: [ 31.076255][ T375] [ 31.076261][ T375] __dump_stack+0x21/0x30 [ 31.076283][ T375] dump_stack_lvl+0x10c/0x190 [ 31.076299][ T375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.076316][ T375] ? kasan_save_free_info+0x4a/0x60 [ 31.076331][ T375] ? kmem_cache_free+0x1c1/0x4c0 [ 31.076347][ T375] ? unlink_anon_vmas+0x2c6/0x5c0 [ 31.076364][ T375] ? free_pgtables+0x2a9/0x730 [ 31.076379][ T375] ? vms_clean_up_area+0x66/0x1d0 [ 31.076393][ T375] dump_stack+0x19/0x20 [ 31.076405][ T375] should_fail_ex+0x3d9/0x530 [ 31.076417][ T375] should_fail_alloc_page+0xeb/0x110 [ 31.076432][ T375] __alloc_pages_noprof+0x19d/0x6c0 [ 31.076443][ T375] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 31.076454][ T375] ? is_bpf_text_address+0x17b/0x1a0 [ 31.076469][ T375] ? kernel_text_address+0xa9/0xe0 [ 31.076481][ T375] ? unwind_get_return_address+0x51/0x90 [ 31.076491][ T375] pte_alloc_one+0x97/0x520 [ 31.076505][ T375] ? __cfi_pte_alloc_one+0x10/0x10 [ 31.076519][ T375] ? pagerange_is_ram_callback+0xf4/0x150 [ 31.076534][ T375] __pte_alloc+0x79/0x420 [ 31.076547][ T375] ? __cfi___pte_alloc+0x10/0x10 [ 31.076558][ T375] ? pat_pagerange_is_ram+0xf4/0x140 [ 31.076571][ T375] ? cattr_name+0xc0/0xc0 [ 31.076584][ T375] remap_pfn_range_notrack+0x8d0/0xb00 [ 31.076598][ T375] ? lookup_memtype+0xe3/0x190 [ 31.076612][ T375] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 31.076626][ T375] ? __kasan_check_read+0x15/0x20 [ 31.076638][ T375] ? track_pfn_remap+0x2a7/0x340 [ 31.076652][ T375] remap_pfn_range+0xf1/0x170 [ 31.076665][ T375] ? __cfi_remap_pfn_range+0x10/0x10 [ 31.076678][ T375] ? kasan_save_alloc_info+0x40/0x50 [ 31.076690][ T375] sel_mmap_handle_status+0x2d8/0x3c0 [ 31.076702][ T375] mmap_region+0x1371/0x1bd0 [ 31.076715][ T375] ? __cfi_mmap_region+0x10/0x10 [ 31.076727][ T375] ? sched_clock+0x44/0x60 [ 31.076739][ T375] ? __kasan_check_read+0x15/0x20 [ 31.076750][ T375] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 31.076767][ T375] ? __get_unmapped_area+0x407/0x470 [ 31.076779][ T375] ? file_mmap_ok+0x147/0x1a0 [ 31.076791][ T375] do_mmap+0xb6d/0x13c0 [ 31.076803][ T375] ? __cfi_do_mmap+0x10/0x10 [ 31.076814][ T375] ? down_write_killable+0xe9/0x2d0 [ 31.076826][ T375] ? __cfi_down_write_killable+0x10/0x10 [ 31.076837][ T375] vm_mmap_pgoff+0x38f/0x4e0 [ 31.076850][ T375] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 31.076863][ T375] ? __fget_files+0x2c5/0x340 [ 31.076877][ T375] ksys_mmap_pgoff+0x166/0x1e0 [ 31.076890][ T375] __x64_sys_mmap+0x121/0x140 [ 31.076903][ T375] x64_sys_call+0x13bf/0x2ee0 [ 31.076918][ T375] do_syscall_64+0x58/0xf0 [ 31.076930][ T375] ? clear_bhb_loop+0x35/0x90 [ 31.076945][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.076959][ T375] RIP: 0033:0x7ff99b30dd79 [ 31.076970][ T375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 376 attached , child_tidptr=0x55557e6d4650) = 79 [pid 376] set_robust_list(0x55557e6d4660, 24) = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] write(1, "executing program\n", 18) = 18 [pid 376] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 376] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 376] write(4, "9", 1) = 1 [pid 376] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 376] close(3) = 0 [pid 376] close(4) = 0 [pid 376] close(5) = -1 EBADF (Bad file descriptor) [pid 376] close(6) = -1 EBADF (Bad file descriptor) [pid 376] close(7) = -1 EBADF (Bad file descriptor) [pid 376] close(8) = -1 EBADF (Bad file descriptor) [pid 376] close(9) = -1 EBADF (Bad file descriptor) [pid 376] close(10) = -1 EBADF (Bad file descriptor) [pid 376] close(11) = -1 EBADF (Bad file descriptor) [pid 376] close(12) = -1 EBADF (Bad file descriptor) [pid 376] close(13) = -1 EBADF (Bad file descriptor) [pid 376] close(14) = -1 EBADF (Bad file descriptor) [pid 376] close(15) = -1 EBADF (Bad file descriptor) [pid 376] close(16) = -1 EBADF (Bad file descriptor) [pid 376] close(17) = -1 EBADF (Bad file descriptor) [pid 376] close(18) = -1 EBADF (Bad file descriptor) [pid 376] close(19) = -1 EBADF (Bad file descriptor) [pid 376] close(20) = -1 EBADF (Bad file descriptor) [pid 376] close(21) = -1 EBADF (Bad file descriptor) [pid 376] close(22) = -1 EBADF (Bad file descriptor) [pid 376] close(23) = -1 EBADF (Bad file descriptor) [pid 376] close(24) = -1 EBADF (Bad file descriptor) [pid 376] close(25) = -1 EBADF (Bad file descriptor) [pid 376] close(26) = -1 EBADF (Bad file descriptor) [pid 376] close(27) = -1 EBADF (Bad file descriptor) [pid 376] close(28) = -1 EBADF (Bad file descriptor) [pid 376] close(29) = -1 EBADF (Bad file descriptor) [pid 376] exit_group(0) = ? [pid 376] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x55557e6d4660, 24) = 0 [pid 298] <... clone resumed>, child_tidptr=0x55557e6d4650) = 80 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 executing program [pid 377] write(1, "executing program\n", 18) = 18 [pid 377] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 377] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 377] write(4, "9", 1) = 1 [pid 377] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000ffd000 [pid 377] close(3) = 0 [pid 377] close(4) = 0 [pid 377] close(5) = -1 EBADF (Bad file descriptor) [pid 377] close(6) = -1 EBADF (Bad file descriptor) [pid 377] close(7) = -1 EBADF (Bad file descriptor) [pid 377] close(8) = -1 EBADF (Bad file descriptor) [pid 377] close(9) = -1 EBADF (Bad file descriptor) [pid 377] close(10) = -1 EBADF (Bad file descriptor) [pid 377] close(11) = -1 EBADF (Bad file descriptor) [pid 377] close(12) = -1 EBADF (Bad file descriptor) [pid 377] close(13) = -1 EBADF (Bad file descriptor) [pid 377] close(14) = -1 EBADF (Bad file descriptor) [pid 377] close(15) = -1 EBADF (Bad file descriptor) [pid 377] close(16) = -1 EBADF (Bad file descriptor) [pid 377] close(17) = -1 EBADF (Bad file descriptor) [pid 377] close(18) = -1 EBADF (Bad file descriptor) [pid 377] close(19) = -1 EBADF (Bad file descriptor) [pid 377] close(20) = -1 EBADF (Bad file descriptor) [pid 377] close(21) = -1 EBADF (Bad file descriptor) [pid 377] close(22) = -1 EBADF (Bad file descriptor) [pid 377] close(23) = -1 EBADF (Bad file descriptor) [pid 377] close(24) = -1 EBADF (Bad file descriptor) [pid 377] close(25) = -1 EBADF (Bad file descriptor) [pid 377] close(26) = -1 EBADF (Bad file descriptor) [pid 377] close(27) = -1 EBADF (Bad file descriptor) [pid 377] close(28) = -1 EBADF (Bad file descriptor) [pid 377] close(29) = -1 EBADF (Bad file descriptor) [pid 377] exit_group(0) = ? [pid 377] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557e6d4650) = 81 ./strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x55557e6d4660, 24) = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 executing program [pid 378] write(1, "executing program\n", 18) = 18 [pid 378] openat(AT_FDCWD, "/selinux/status", O_RDONLY) = 3 [pid 378] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 378] write(4, "9", 1) = 1 [ 31.076980][ T375] RSP: 002b:00007ffdb0a26538 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 31.076992][ T375] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff99b30dd79 [ 31.076998][ T375] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 31.077004][ T375] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000 [ 31.077009][ T375] R10: 0000000000000011 R11: 0000000000000246 R12: 000000000000766f [ 31.077015][ T375] R13: 00007ffdb0a26554 R14: 00007ffdb0a26580 R15: 00007ffdb0a26570 [ 31.077022][ T375] [pid 378] mmap(0x200000ffd000, 4096, PROT_READ, MAP_SHARED|MAP_FIXED, 3, 0) = -1 ENOMEM (Cannot allocate memory) [pid 378] close(3) = 0 [pid 378] close(4) = 0 [pid 378] close(5) = -1 EBADF (Bad file descriptor) [pid 378] close(6) = -1 EBADF (Bad file descriptor) [pid 378] close(7) = -1 EBADF (Bad file descriptor) [pid 378] close(8) = -1 EBADF (Bad file descriptor) [pid 378] close(9) = -1 EBADF (Bad file descriptor) [pid 378] close(10) = -1 EBADF (Bad file descriptor) [pid 378] close(11) = -1 EBADF (Bad file descriptor) [pid 378] close(12) = -1 EBADF (Bad file descriptor) [pid 378] close(13) = -1 EBADF (Bad file descriptor) [pid 378] close(14) = -1 EBADF (Bad file descriptor) [pid 378] close(15) = -1 EBADF (Bad file descriptor) [pid 378] close(16) = -1 EBADF (Bad file descriptor) [pid 378] close(17) = -1 EBADF (Bad file descriptor) [pid 378] close(18) = -1 EBADF (Bad file descriptor) [pid 378] close(19) = -1 EBADF (Bad file descriptor) [pid 378] close(20) = -1 EBADF (Bad file descriptor) [pid 378] close(21) = -1 EBADF (Bad file descriptor) [pid 378] close(22) = -1 EBADF (Bad file descriptor) [pid 378] close(23) = -1 EBADF (Bad file descriptor) [pid 378] close(24) = -1 EBADF (Bad file descriptor) [pid 378] close(25) = -1 EBADF (Bad file descriptor) [pid 378] close(26) = -1 EBADF (Bad file descriptor) [pid 378] close(27) = -1 EBADF (Bad file descriptor) [pid 378] close(28) = -1 EBADF (Bad file descriptor) [pid 378] close(29) = -1 EBADF (Bad file descriptor) [pid 378] exit_group(0) = ? [pid 378] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 31.479293][ T378] FAULT_INJECTION: forcing a failure. [ 31.479293][ T378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 31.492742][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz-executor176 Tainted: G W 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 31.492770][ T378] Tainted: [W]=WARN [ 31.492775][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.492783][ T378] Call Trace: [ 31.492788][ T378] [ 31.492795][ T378] __dump_stack+0x21/0x30 [ 31.492817][ T378] dump_stack_lvl+0x10c/0x190 [ 31.492832][ T378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.492848][ T378] ? kasan_save_free_info+0x4a/0x60 [ 31.492862][ T378] ? kmem_cache_free+0x1c1/0x4c0 [ 31.492878][ T378] ? unlink_anon_vmas+0x2c6/0x5c0 [ 31.492889][ T378] ? free_pgtables+0x2a9/0x730 [ 31.492899][ T378] ? vms_clean_up_area+0x66/0x1d0