./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2099885470 <...> Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. execve("./syz-executor2099885470", ["./syz-executor2099885470"], 0x7ffeac410840 /* 10 vars */) = 0 brk(NULL) = 0x55557a9cc000 brk(0x55557a9ccd00) = 0x55557a9ccd00 arch_prctl(ARCH_SET_FS, 0x55557a9cc380) = 0 set_tid_address(0x55557a9cc650) = 290 set_robust_list(0x55557a9cc660, 24) = 0 rseq(0x55557a9ccca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2099885470", 4096) = 28 getrandom("\x60\x2c\x00\xf5\x45\x1a\x0d\x45", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557a9ccd00 brk(0x55557a9edd00) = 0x55557a9edd00 brk(0x55557a9ee000) = 0x55557a9ee000 mprotect(0x7fda75dc0000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 291 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 292 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 293 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 294 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 295 ./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x55557a9cc660, 24) = 0 executing program [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 296 ./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x55557a9cc660, 24) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 297 ./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x55557a9cc660, 24) = 0 [pid 297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 297] setpgid(0, 0) = 0 [pid 297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "1000", 4) = 4 [pid 297] close(3) = 0 [pid 297] write(1, "executing program\n", 18) = 18 [ 28.760529][ T28] audit: type=1400 audit(1747372548.242:64): avc: denied { execmem } for pid=290 comm="syz-executor209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 297] perf_event_open(executing program executing program executing program ./strace-static-x86_64: Process 296 attached ./strace-static-x86_64: Process 293 attached ./strace-static-x86_64: Process 292 attached ./strace-static-x86_64: Process 291 attached [pid 291] set_robust_list(0x55557a9cc660, 24) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 298 [pid 292] set_robust_list(0x55557a9cc660, 24) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 299 [pid 293] set_robust_list(0x55557a9cc660, 24) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 300 [pid 296] set_robust_list(0x55557a9cc660, 24) = 0 [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 296] setpgid(0, 0) = 0 [pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 296] write(3, "1000", 4) = 4 [pid 296] close(3) = 0 [pid 296] write(1, "executing program\n", 18) = 18 [pid 296] perf_event_open(./strace-static-x86_64: Process 299 attached ./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x55557a9cc660, 24) = 0 [pid 299] set_robust_list(0x55557a9cc660, 24 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... set_robust_list resumed>) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... prctl resumed>) = 0 [pid 300] setpgid(0, 0 [pid 299] <... prctl resumed>) = 0 [pid 299] setpgid(0, 0 [pid 300] <... setpgid resumed>) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... setpgid resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 300] write(3, "1000", 4 [pid 299] write(1, "executing program\n", 18 [pid 300] <... write resumed>) = 4 [pid 299] <... write resumed>) = 18 [pid 300] close(3 [pid 299] perf_event_open( [pid 300] <... close resumed>) = 0 [pid 300] write(1, "executing program\n", 18) = 18 [pid 300] perf_event_open(./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x55557a9cc660, 24) = 0 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] setpgid(0, 0) = 0 [pid 298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "1000", 4) = 4 [pid 298] close(3 [pid 297] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 297] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 299] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 296] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 300] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 298] <... close resumed>) = 0 [pid 298] write(1, "executing program\n", 18executing program ) = 18 [pid 298] perf_event_open( [pid 296] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [ 28.794567][ T28] audit: type=1400 audit(1747372548.272:65): avc: denied { open } for pid=297 comm="syz-executor209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.820435][ T28] audit: type=1400 audit(1747372548.272:66): avc: denied { perfmon } for pid=297 comm="syz-executor209" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 300] <... bpf resumed>) = 4 [pid 299] <... bpf resumed>) = 4 [pid 300] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 298] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 298] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 297] <... bpf resumed>) = 4 [pid 299] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 298] <... bpf resumed>) = 4 [pid 297] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 296] <... bpf resumed>) = 4 [pid 298] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [ 28.849202][ T28] audit: type=1400 audit(1747372548.272:67): avc: denied { kernel } for pid=297 comm="syz-executor209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 28.880058][ T28] audit: type=1400 audit(1747372548.302:68): avc: denied { bpf } for pid=300 comm="syz-executor209" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [pid 296] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 298] <... bpf resumed>) = 5 [pid 299] <... bpf resumed>) = 5 [pid 298] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 297] <... bpf resumed>) = 5 [pid 296] <... bpf resumed>) = 5 [pid 299] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 297] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 296] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 300] <... bpf resumed>) = 5 [pid 298] <... openat resumed>) = 6 [pid 297] <... openat resumed>) = 6 [pid 296] <... openat resumed>) = 6 [pid 300] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 299] <... openat resumed>) = 6 [pid 297] write(6, "1", 1 [pid 296] write(6, "1", 1 [pid 297] <... write resumed>) = 1 [pid 296] <... write resumed>) = 1 [pid 297] close(3 [pid 296] close(3 [pid 300] <... openat resumed>) = 6 [ 28.905499][ T28] audit: type=1400 audit(1747372548.302:69): avc: denied { prog_load } for pid=300 comm="syz-executor209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.929000][ T28] audit: type=1400 audit(1747372548.362:70): avc: denied { prog_run } for pid=300 comm="syz-executor209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [pid 300] write(6, "1", 1 [pid 299] write(6, "1", 1 [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 300] <... write resumed>) = 1 [pid 299] <... write resumed>) = 1 [ 28.958117][ T296] FAULT_INJECTION: forcing a failure. [ 28.958117][ T296] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 28.958285][ T297] FAULT_INJECTION: forcing a failure. [ 28.958285][ T297] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 28.977885][ T296] CPU: 1 PID: 296 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 29.009353][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 29.024934][ T296] Call Trace: [ 29.029619][ T296] [ 29.033160][ T296] __dump_stack+0x21/0x24 [ 29.039139][ T296] dump_stack_lvl+0xee/0x150 [ 29.045266][ T296] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.052442][ T296] dump_stack+0x15/0x24 [ 29.057445][ T296] should_fail_ex+0x3d4/0x520 [ 29.064268][ T296] should_fail_alloc_page+0x61/0x90 [ 29.071522][ T296] prepare_alloc_pages+0x148/0x5f0 [ 29.077144][ T296] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 29.084746][ T296] ? __kasan_record_aux_stack+0xb6/0xc0 [ 29.092153][ T296] __alloc_pages+0x115/0x3a0 [ 29.098457][ T296] ? __cfi___alloc_pages+0x10/0x10 [ 29.104733][ T296] ? __kasan_check_write+0x14/0x20 [pid 298] write(6, "1", 1 [pid 300] close(3 [pid 299] close(3 [pid 298] <... write resumed>) = 1 [ 29.110542][ T296] ? _raw_spin_lock+0x8e/0xe0 [ 29.116504][ T296] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.123538][ T296] ? __this_cpu_preempt_check+0x13/0x20 [ 29.131863][ T296] __folio_alloc+0x12/0x40 [ 29.137467][ T296] wp_page_copy+0x280/0x15b0 [ 29.145087][ T296] ? __this_cpu_preempt_check+0x13/0x20 [ 29.145125][ T298] FAULT_INJECTION: forcing a failure. [pid 300] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [ 29.145125][ T298] name failslab, interval 1, probability 0, space 0, times 1 [ 29.152825][ T296] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 29.169844][ T299] FAULT_INJECTION: forcing a failure. [ 29.169844][ T299] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 29.177164][ T296] ? fault_dirty_shared_page+0x310/0x310 [ 29.177217][ T296] ? _raw_spin_unlock+0x4c/0x70 [ 29.196071][ T300] FAULT_INJECTION: forcing a failure. [ 29.196071][ T300] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 29.203814][ T296] ? finish_task_switch+0x16b/0x7b0 [ 29.203861][ T296] ? vm_normal_page+0x99/0x200 [ 29.237354][ T296] do_wp_page+0x9f2/0xfc0 [ 29.243148][ T296] handle_mm_fault+0x10e4/0x2640 [ 29.248770][ T296] ? __cfi_handle_mm_fault+0x10/0x10 [ 29.255955][ T296] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 29.262283][ T296] ? __this_cpu_preempt_check+0x13/0x20 [ 29.270223][ T296] ? xfd_validate_state+0x70/0x150 [ 29.276945][ T296] do_user_addr_fault+0x905/0x1050 [ 29.282532][ T296] exc_page_fault+0x51/0xb0 [ 29.288692][ T296] asm_exc_page_fault+0x27/0x30 [ 29.294570][ T296] RIP: 0033:0x7fda75d230e0 [ 29.300952][ T296] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 29.327792][ T296] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 29.335870][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 29.346145][ T296] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 29.355613][ T296] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 29.368659][ T296] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 29.379475][ T296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 29.388522][ T296] [ 29.391827][ T297] CPU: 0 PID: 297 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 29.392409][ T296] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [pid 298] close(3 [pid 296] exit_group(0) = ? [ 29.407019][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 29.407038][ T297] Call Trace: [ 29.407046][ T297] [ 29.407054][ T297] __dump_stack+0x21/0x24 [ 29.407089][ T297] dump_stack_lvl+0xee/0x150 [ 29.407112][ T297] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.407140][ T297] dump_stack+0x15/0x24 [ 29.456028][ T297] should_fail_ex+0x3d4/0x520 [ 29.461028][ T297] should_fail_alloc_page+0x61/0x90 [ 29.467714][ T297] prepare_alloc_pages+0x148/0x5f0 [ 29.473763][ T297] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 29.479792][ T297] ? __kasan_record_aux_stack+0xb6/0xc0 [ 29.486453][ T297] __alloc_pages+0x115/0x3a0 [ 29.491525][ T297] ? __cfi___alloc_pages+0x10/0x10 [ 29.497445][ T297] ? __kasan_check_write+0x14/0x20 [ 29.503611][ T297] ? _raw_spin_lock+0x8e/0xe0 [ 29.510253][ T297] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.516679][ T297] ? __this_cpu_preempt_check+0x13/0x20 [ 29.522977][ T297] __folio_alloc+0x12/0x40 [ 29.529427][ T297] wp_page_copy+0x280/0x15b0 [ 29.536053][ T297] ? __this_cpu_preempt_check+0x13/0x20 [ 29.545912][ T297] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 29.553188][ T297] ? fault_dirty_shared_page+0x310/0x310 [ 29.561252][ T297] ? _raw_spin_unlock+0x4c/0x70 [ 29.567327][ T297] ? finish_task_switch+0x16b/0x7b0 [ 29.573463][ T297] ? vm_normal_page+0x99/0x200 [ 29.578975][ T297] do_wp_page+0x9f2/0xfc0 [ 29.586565][ T297] handle_mm_fault+0x10e4/0x2640 [ 29.592464][ T297] ? __cfi_handle_mm_fault+0x10/0x10 [ 29.599631][ T297] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 29.607151][ T297] ? __this_cpu_preempt_check+0x13/0x20 [ 29.614479][ T297] ? xfd_validate_state+0x70/0x150 [ 29.620790][ T297] do_user_addr_fault+0x905/0x1050 [ 29.626894][ T297] exc_page_fault+0x51/0xb0 [ 29.632392][ T297] asm_exc_page_fault+0x27/0x30 [ 29.640790][ T297] RIP: 0033:0x7fda75d230e0 [ 29.652118][ T297] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 29.678096][ T297] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 29.687730][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 29.699681][ T297] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 29.714098][ T297] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 29.723741][ T297] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 29.733226][ T297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 29.744435][ T297] [ 29.753684][ T299] CPU: 0 PID: 299 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 29.767838][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 29.784179][ T299] Call Trace: [ 29.789304][ T299] [ 29.794751][ T299] __dump_stack+0x21/0x24 [ 29.799896][ T299] dump_stack_lvl+0xee/0x150 [ 29.805398][ T299] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.812743][ T299] dump_stack+0x15/0x24 [ 29.817117][ T299] should_fail_ex+0x3d4/0x520 [ 29.822344][ T299] should_fail_alloc_page+0x61/0x90 [ 29.829231][ T299] prepare_alloc_pages+0x148/0x5f0 [ 29.835326][ T299] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 29.842400][ T299] ? __kasan_record_aux_stack+0xb6/0xc0 [ 29.849752][ T299] __alloc_pages+0x115/0x3a0 [ 29.855389][ T299] ? __cfi___alloc_pages+0x10/0x10 [ 29.861571][ T299] ? __kasan_check_write+0x14/0x20 [ 29.870185][ T299] ? _raw_spin_lock+0x8e/0xe0 [ 29.876046][ T299] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.882512][ T299] ? sched_clock_cpu+0x6e/0x250 [ 29.891333][ T299] __folio_alloc+0x12/0x40 [ 29.896280][ T299] wp_page_copy+0x280/0x15b0 [ 29.901114][ T299] ? __this_cpu_preempt_check+0x13/0x20 [ 29.907797][ T299] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 29.916488][ T299] ? fault_dirty_shared_page+0x310/0x310 [ 29.922851][ T299] ? _raw_spin_unlock+0x4c/0x70 [ 29.928601][ T299] ? finish_task_switch+0x16b/0x7b0 [ 29.934631][ T299] ? vm_normal_page+0x99/0x200 [ 29.940124][ T299] do_wp_page+0x9f2/0xfc0 [ 29.945424][ T299] handle_mm_fault+0x10e4/0x2640 [ 29.954033][ T299] ? __cfi_handle_mm_fault+0x10/0x10 [ 29.960315][ T299] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 29.967399][ T299] ? __this_cpu_preempt_check+0x13/0x20 [ 29.973839][ T299] ? xfd_validate_state+0x70/0x150 [ 29.980160][ T299] do_user_addr_fault+0x905/0x1050 [ 29.985842][ T299] exc_page_fault+0x51/0xb0 [ 29.991296][ T299] asm_exc_page_fault+0x27/0x30 [ 29.997216][ T299] RIP: 0033:0x7fda75d230e0 [ 30.002992][ T299] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 30.026083][ T299] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 30.035329][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 30.044532][ T299] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 30.055476][ T299] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 30.067364][ T299] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 30.077170][ T299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 30.086732][ T299] [ 30.091178][ T299] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 30.093782][ T298] CPU: 1 PID: 298 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 30.113017][ T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 30.125298][ T298] Call Trace: [ 30.130717][ T298] [ 30.134224][ T298] __dump_stack+0x21/0x24 [ 30.139854][ T298] dump_stack_lvl+0xee/0x150 [ 30.145582][ T298] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.151011][ T298] dump_stack+0x15/0x24 [ 30.156167][ T298] should_fail_ex+0x3d4/0x520 [ 30.162337][ T298] __should_failslab+0xac/0xf0 [ 30.167698][ T298] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 30.174488][ T298] should_failslab+0x9/0x20 [ 30.180345][ T298] __kmem_cache_alloc_node+0x3d/0x2c0 [ 30.187053][ T298] ? __cfi_mutex_lock+0x10/0x10 [ 30.192877][ T298] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 30.200184][ T298] __kmalloc+0xa1/0x1e0 [ 30.204976][ T298] ? __kasan_check_write+0x14/0x20 [ 30.210863][ T298] ? __cfi_perf_trace_percpu_alloc_percpu+0x10/0x10 [ 30.218788][ T298] tracepoint_probe_unregister+0x1e6/0x8b0 [ 30.225578][ T298] trace_event_reg+0x21c/0x260 [ 30.231611][ T298] perf_trace_event_unreg+0xcc/0x1c0 [ 30.237439][ T298] perf_trace_destroy+0xbe/0x180 [ 30.243364][ T298] tp_perf_event_destroy+0x15/0x20 [ 30.249710][ T298] ? __cfi_tp_perf_event_destroy+0x10/0x10 [ 30.256517][ T298] _free_event+0x9cd/0xce0 [ 30.261847][ T298] perf_event_release_kernel+0x819/0x8a0 [ 30.268839][ T298] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.275856][ T298] ? __cfi_perf_event_release_kernel+0x10/0x10 [ 30.285138][ T298] perf_release+0x3b/0x40 [ 30.289924][ T298] ? __cfi_perf_release+0x10/0x10 [ 30.296311][ T298] __fput+0x1fc/0x8f0 [ 30.300773][ T298] ____fput+0x15/0x20 [ 30.306017][ T298] task_work_run+0x1db/0x240 [ 30.312494][ T298] ? __cfi_task_work_run+0x10/0x10 [ 30.319052][ T298] ? task_work_add+0x2b1/0x330 [ 30.326226][ T298] ptrace_notify+0x221/0x250 [ 30.332407][ T298] ? __cfi_ptrace_notify+0x10/0x10 [ 30.339413][ T298] ? fput+0x15b/0x1a0 [ 30.344557][ T298] ? filp_close+0x111/0x160 [ 30.350474][ T298] ? close_fd+0x28b/0x300 [ 30.359089][ T298] syscall_exit_work+0x84/0x140 [ 30.369333][ T298] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 30.377317][ T298] syscall_exit_to_user_mode+0xd/0x30 [ 30.383504][ T298] do_syscall_64+0x58/0xa0 [ 30.392465][ T298] ? clear_bhb_loop+0x15/0x70 [ 30.397862][ T298] ? clear_bhb_loop+0x15/0x70 [ 30.404239][ T298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.414278][ T298] RIP: 0033:0x7fda75d54999 [ 30.419852][ T298] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 30.444347][ T298] RSP: 002b:00007ffd8e442f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 30.455335][ T298] RAX: 0000000000000000 RBX: 00007ffd8e442f30 RCX: 00007fda75d54999 [pid 299] exit_group(0) = ? [ 30.463805][ T298] RDX: 00007fda75d53bd0 RSI: 00007ffd8e442f30 RDI: 0000000000000003 [ 30.472605][ T298] RBP: 0000000000000001 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 30.481819][ T298] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 30.491468][ T298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 30.500465][ T298] [ 30.504439][ T300] CPU: 1 PID: 300 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 30.513467][ T297] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 30.516590][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 30.516605][ T300] Call Trace: [ 30.516611][ T300] [ 30.516618][ T300] __dump_stack+0x21/0x24 [ 30.550186][ T300] dump_stack_lvl+0xee/0x150 [ 30.555462][ T300] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.561778][ T300] ? __cfi_enqueue_task_fair+0x10/0x10 [ 30.569043][ T300] dump_stack+0x15/0x24 [ 30.573672][ T300] should_fail_ex+0x3d4/0x520 [ 30.578698][ T300] should_fail_alloc_page+0x61/0x90 [ 30.584951][ T300] prepare_alloc_pages+0x148/0x5f0 [ 30.590344][ T300] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 30.595909][ T300] __alloc_pages+0x115/0x3a0 [ 30.603297][ T300] ? __cfi___alloc_pages+0x10/0x10 [ 30.611831][ T300] ? __kasan_check_write+0x14/0x20 [ 30.618519][ T300] ? _raw_spin_lock+0x8e/0xe0 [ 30.624656][ T300] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.631139][ T300] ? __this_cpu_preempt_check+0x13/0x20 [ 30.637227][ T300] __folio_alloc+0x12/0x40 [ 30.643602][ T300] wp_page_copy+0x280/0x15b0 [ 30.651374][ T300] ? __this_cpu_preempt_check+0x13/0x20 [ 30.657778][ T300] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 30.664485][ T300] ? fault_dirty_shared_page+0x310/0x310 [ 30.671832][ T300] ? _raw_spin_unlock+0x4c/0x70 [ 30.679238][ T300] ? finish_task_switch+0x16b/0x7b0 [ 30.685107][ T300] ? vm_normal_page+0x99/0x200 [ 30.690286][ T300] do_wp_page+0x9f2/0xfc0 [ 30.695990][ T300] handle_mm_fault+0x10e4/0x2640 [ 30.711231][ T300] ? __cfi_handle_mm_fault+0x10/0x10 [ 30.717207][ T300] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 30.726564][ T300] ? __this_cpu_preempt_check+0x13/0x20 [ 30.735122][ T300] ? xfd_validate_state+0x70/0x150 [ 30.743243][ T300] do_user_addr_fault+0x905/0x1050 [ 30.749309][ T300] exc_page_fault+0x51/0xb0 [ 30.754538][ T300] asm_exc_page_fault+0x27/0x30 [ 30.759792][ T300] RIP: 0033:0x7fda75d230e0 [ 30.764927][ T300] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 30.787825][ T300] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 30.795009][ T300] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 30.804038][ T300] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 30.813237][ T300] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [pid 297] exit_group(0) = ? [pid 297] +++ exited with 0 +++ [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=22} --- [pid 294] restart_syscall(<... resuming interrupted clone ...> [pid 299] +++ exited with 0 +++ [pid 298] <... close resumed>) = 0 [pid 296] +++ exited with 0 +++ [pid 294] <... restart_syscall resumed>) = 0 [pid 300] exit_group(0 [pid 298] exit_group(0 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 298] <... exit_group resumed>) = ? [pid 300] <... exit_group resumed>) = ? [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 301 attached ./strace-static-x86_64: Process 302 attached [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... clone resumed>, child_tidptr=0x55557a9cc650) = 302 [pid 301] set_robust_list(0x55557a9cc660, 24 [pid 294] <... clone resumed>, child_tidptr=0x55557a9cc650) = 301 [pid 301] <... set_robust_list resumed>) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... clone resumed>, child_tidptr=0x55557a9cc650) = 303 ./strace-static-x86_64: Process 303 attached [pid 302] set_robust_list(0x55557a9cc660, 24executing program [pid 303] set_robust_list(0x55557a9cc660, 24 [pid 302] <... set_robust_list resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 301] write(3, "1000", 4 [pid 303] <... set_robust_list resumed>) = 0 [pid 301] <... write resumed>) = 4 [pid 301] close(3) = 0 [pid 301] write(1, "executing program\n", 18) = 18 [pid 301] perf_event_open( [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] <... prctl resumed>) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1000", 4executing program ) = 4 [pid 302] close(3) = 0 [pid 302] write(1, "executing program\n", 18) = 18 [pid 302] perf_event_open( [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] write(1, "executing program\n", 18executing program ) = 18 [pid 303] perf_event_open( [pid 298] +++ exited with 0 +++ [pid 300] +++ exited with 0 +++ [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=23} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=31} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 293] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] <... clone resumed>, child_tidptr=0x55557a9cc650) = 304 [pid 291] <... clone resumed>, child_tidptr=0x55557a9cc650) = 305 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x55557a9cc660, 24./strace-static-x86_64: Process 305 attached ) = 0 [pid 305] set_robust_list(0x55557a9cc660, 24 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 305] <... set_robust_list resumed>) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... openat resumed>) = 3 [pid 305] <... prctl resumed>) = 0 [pid 305] setpgid(0, 0 [pid 304] write(3, "1000", 4) = 4 [pid 305] <... setpgid resumed>) = 0 [pid 304] close(3) = 0 [pid 304] write(1, "executing program\n", 18executing program [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] <... write resumed>) = 18 [pid 304] perf_event_open( [pid 305] <... openat resumed>) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 [pid 305] write(1, "executing program\n", 18executing program ) = 18 [ 30.823518][ T300] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 30.833236][ T300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 30.842826][ T300] [ 30.847123][ T300] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [pid 305] perf_event_open( [pid 301] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 302] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 303] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 302] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 301] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 303] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 304] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 305] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 304] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 303] <... bpf resumed>) = 4 [pid 302] <... bpf resumed>) = 4 [pid 302] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 303] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 302] <... bpf resumed>) = 5 [pid 301] <... bpf resumed>) = 4 [pid 303] <... bpf resumed>) = 5 [pid 302] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 305] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 303] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 302] <... openat resumed>) = 6 [pid 301] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 302] write(6, "1", 1 [pid 303] <... openat resumed>) = 6 [pid 302] <... write resumed>) = 1 [pid 302] close(3 [pid 301] <... bpf resumed>) = 5 [pid 303] write(6, "1", 1 [pid 302] <... close resumed>) = 0 [pid 305] <... bpf resumed>) = 4 [pid 304] <... bpf resumed>) = 4 [pid 303] <... write resumed>) = 1 [pid 301] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 303] close(3 [pid 301] <... openat resumed>) = 6 [pid 303] <... close resumed>) = 0 [pid 301] write(6, "1", 1) = 1 [ 30.912259][ T302] FAULT_INJECTION: forcing a failure. [ 30.912259][ T302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.916073][ T303] FAULT_INJECTION: forcing a failure. [ 30.916073][ T303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.931256][ T302] CPU: 1 PID: 302 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [pid 301] close(3 [pid 304] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 301] <... close resumed>) = 0 [pid 304] <... bpf resumed>) = 5 [pid 304] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 305] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 304] write(6, "1", 1 [pid 305] <... bpf resumed>) = 5 [pid 304] <... write resumed>) = 1 [pid 305] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 304] close(3) = 0 [pid 305] write(6, "1", 1) = 1 [ 30.954765][ T301] FAULT_INJECTION: forcing a failure. [ 30.954765][ T301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.963471][ T302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 30.963490][ T302] Call Trace: [ 30.963497][ T302] [ 30.963506][ T302] __dump_stack+0x21/0x24 [ 30.983964][ T304] FAULT_INJECTION: forcing a failure. [ 30.983964][ T304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.990221][ T302] dump_stack_lvl+0xee/0x150 [ 30.990260][ T302] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.995377][ T305] FAULT_INJECTION: forcing a failure. [ 30.995377][ T305] name failslab, interval 1, probability 0, space 0, times 0 [ 30.997458][ T302] dump_stack+0x15/0x24 [ 31.046317][ T302] should_fail_ex+0x3d4/0x520 [ 31.051632][ T302] should_fail_alloc_page+0x61/0x90 [ 31.057195][ T302] prepare_alloc_pages+0x148/0x5f0 [ 31.062679][ T302] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 31.068695][ T302] ? __kasan_record_aux_stack+0xb6/0xc0 [ 31.075520][ T302] ? call_rcu+0xd4/0xf90 [ 31.080490][ T302] ? ____fput+0x15/0x20 [ 31.085547][ T302] __alloc_pages+0x115/0x3a0 [ 31.091337][ T302] ? __cfi___alloc_pages+0x10/0x10 [ 31.097794][ T302] ? __kasan_check_write+0x14/0x20 [ 31.103833][ T302] ? _raw_spin_lock+0x8e/0xe0 [ 31.110361][ T302] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.115851][ T302] ? __this_cpu_preempt_check+0x13/0x20 [ 31.122926][ T302] __folio_alloc+0x12/0x40 [ 31.127720][ T302] wp_page_copy+0x280/0x15b0 [ 31.135514][ T302] ? __this_cpu_preempt_check+0x13/0x20 [ 31.142817][ T302] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 31.150149][ T302] ? fault_dirty_shared_page+0x310/0x310 [ 31.159023][ T302] ? _raw_spin_unlock+0x4c/0x70 [ 31.164833][ T302] ? finish_task_switch+0x16b/0x7b0 [ 31.171002][ T302] ? vm_normal_page+0x99/0x200 [ 31.177627][ T302] do_wp_page+0x9f2/0xfc0 [ 31.183138][ T302] handle_mm_fault+0x10e4/0x2640 [ 31.188998][ T302] ? __cfi_handle_mm_fault+0x10/0x10 [ 31.195093][ T302] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 31.201198][ T302] ? __this_cpu_preempt_check+0x13/0x20 [ 31.207629][ T302] ? xfd_validate_state+0x70/0x150 [ 31.214524][ T302] do_user_addr_fault+0x905/0x1050 [ 31.220051][ T302] exc_page_fault+0x51/0xb0 [ 31.225712][ T302] asm_exc_page_fault+0x27/0x30 [ 31.233664][ T302] RIP: 0033:0x7fda75d230e0 [ 31.239055][ T302] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 31.261040][ T302] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 31.268231][ T302] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 31.277489][ T302] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 31.289118][ T302] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 31.298918][ T302] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 31.307876][ T302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 31.317957][ T302] [ 31.321548][ T301] CPU: 0 PID: 301 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 31.321802][ T302] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 31.333306][ T301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 31.333322][ T301] Call Trace: [ 31.333331][ T301] [pid 305] close(3 [pid 302] exit_group(0) = ? [ 31.333343][ T301] __dump_stack+0x21/0x24 [ 31.333380][ T301] dump_stack_lvl+0xee/0x150 [ 31.333404][ T301] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.333432][ T301] dump_stack+0x15/0x24 [ 31.333457][ T301] should_fail_ex+0x3d4/0x520 [ 31.390362][ T301] should_fail_alloc_page+0x61/0x90 [ 31.396737][ T301] prepare_alloc_pages+0x148/0x5f0 [ 31.403339][ T301] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 31.409464][ T301] ? __kasan_record_aux_stack+0xb6/0xc0 [ 31.417091][ T301] ? call_rcu+0xd4/0xf90 [ 31.422243][ T301] ? ____fput+0x15/0x20 [ 31.427736][ T301] __alloc_pages+0x115/0x3a0 [ 31.433326][ T301] ? __cfi___alloc_pages+0x10/0x10 [ 31.439616][ T301] ? __kasan_check_write+0x14/0x20 [ 31.446450][ T301] ? _raw_spin_lock+0x8e/0xe0 [ 31.452198][ T301] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.458379][ T301] ? __this_cpu_preempt_check+0x13/0x20 [ 31.464874][ T301] __folio_alloc+0x12/0x40 [ 31.470353][ T301] wp_page_copy+0x280/0x15b0 [ 31.475756][ T301] ? __this_cpu_preempt_check+0x13/0x20 [ 31.481853][ T301] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 31.489340][ T301] ? fault_dirty_shared_page+0x310/0x310 [ 31.496105][ T301] ? _raw_spin_unlock+0x4c/0x70 [ 31.501450][ T301] ? finish_task_switch+0x16b/0x7b0 [ 31.507293][ T301] ? vm_normal_page+0x99/0x200 [ 31.513194][ T301] do_wp_page+0x9f2/0xfc0 [ 31.517933][ T301] handle_mm_fault+0x10e4/0x2640 [ 31.524468][ T301] ? __cfi_handle_mm_fault+0x10/0x10 [ 31.530826][ T301] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 31.537461][ T301] ? __this_cpu_preempt_check+0x13/0x20 [ 31.543661][ T301] ? xfd_validate_state+0x70/0x150 [ 31.550236][ T301] do_user_addr_fault+0x905/0x1050 [ 31.556703][ T301] exc_page_fault+0x51/0xb0 [ 31.562391][ T301] asm_exc_page_fault+0x27/0x30 [ 31.568976][ T301] RIP: 0033:0x7fda75d230e0 [ 31.574564][ T301] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 31.599961][ T301] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 31.611224][ T301] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 31.623403][ T301] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 31.633395][ T301] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 31.643451][ T301] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 31.657874][ T301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 31.668675][ T301] [ 31.673223][ T305] CPU: 1 PID: 305 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 31.687554][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 31.701171][ T305] Call Trace: [ 31.705363][ T305] [ 31.708996][ T305] __dump_stack+0x21/0x24 [ 31.715320][ T305] dump_stack_lvl+0xee/0x150 [ 31.720982][ T305] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.731840][ T305] dump_stack+0x15/0x24 [ 31.736928][ T305] should_fail_ex+0x3d4/0x520 [ 31.743114][ T305] __should_failslab+0xac/0xf0 [ 31.749214][ T305] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 31.756788][ T305] should_failslab+0x9/0x20 [ 31.761972][ T305] __kmem_cache_alloc_node+0x3d/0x2c0 [ 31.768456][ T305] ? __cfi_mutex_lock+0x10/0x10 [ 31.773709][ T305] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 31.780561][ T305] __kmalloc+0xa1/0x1e0 [ 31.785558][ T305] ? __kasan_check_write+0x14/0x20 [ 31.791135][ T305] ? __cfi_perf_trace_percpu_alloc_percpu+0x10/0x10 [ 31.799746][ T305] tracepoint_probe_unregister+0x1e6/0x8b0 [ 31.809178][ T305] trace_event_reg+0x21c/0x260 [ 31.815381][ T305] perf_trace_event_unreg+0xcc/0x1c0 [ 31.822269][ T305] perf_trace_destroy+0xbe/0x180 [ 31.828999][ T305] tp_perf_event_destroy+0x15/0x20 [ 31.835142][ T305] ? __cfi_tp_perf_event_destroy+0x10/0x10 [ 31.842969][ T305] _free_event+0x9cd/0xce0 [ 31.848215][ T305] perf_event_release_kernel+0x819/0x8a0 [ 31.855344][ T305] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.865621][ T305] ? __cfi_perf_event_release_kernel+0x10/0x10 [ 31.873136][ T305] perf_release+0x3b/0x40 [ 31.878796][ T305] ? __cfi_perf_release+0x10/0x10 [ 31.885182][ T305] __fput+0x1fc/0x8f0 [ 31.890090][ T305] ____fput+0x15/0x20 [ 31.894360][ T305] task_work_run+0x1db/0x240 [ 31.900410][ T305] ? __cfi_task_work_run+0x10/0x10 [ 31.906944][ T305] ? task_work_add+0x2b1/0x330 [ 31.914347][ T305] ptrace_notify+0x221/0x250 [ 31.919576][ T305] ? __cfi_ptrace_notify+0x10/0x10 [ 31.925626][ T305] ? fput+0x15b/0x1a0 [ 31.931184][ T305] ? filp_close+0x111/0x160 [ 31.938570][ T305] ? close_fd+0x28b/0x300 [ 31.943815][ T305] syscall_exit_work+0x84/0x140 [ 31.949380][ T305] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 31.955986][ T305] syscall_exit_to_user_mode+0xd/0x30 [ 31.963481][ T305] do_syscall_64+0x58/0xa0 [ 31.968540][ T305] ? clear_bhb_loop+0x15/0x70 [ 31.973794][ T305] ? clear_bhb_loop+0x15/0x70 [ 31.978662][ T305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.984915][ T305] RIP: 0033:0x7fda75d54999 [ 31.992491][ T305] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 32.015495][ T305] RSP: 002b:00007ffd8e442f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 32.027748][ T305] RAX: 0000000000000000 RBX: 00007ffd8e442f30 RCX: 00007fda75d54999 [ 32.036129][ T305] RDX: 00007fda75d53bd0 RSI: 00007ffd8e442f30 RDI: 0000000000000003 [ 32.045137][ T305] RBP: 0000000000000001 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 32.054558][ T305] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 32.064870][ T305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 32.074607][ T305] [ 32.078287][ T303] CPU: 1 PID: 303 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 32.084797][ T301] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 32.091117][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 32.091133][ T303] Call Trace: [ 32.091140][ T303] [ 32.091149][ T303] __dump_stack+0x21/0x24 [ 32.125535][ T303] dump_stack_lvl+0xee/0x150 [ 32.130315][ T303] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.135791][ T303] dump_stack+0x15/0x24 [ 32.141980][ T303] should_fail_ex+0x3d4/0x520 [ 32.147684][ T303] should_fail_alloc_page+0x61/0x90 [ 32.154951][ T303] prepare_alloc_pages+0x148/0x5f0 [ 32.160977][ T303] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 32.166975][ T303] ? __kasan_record_aux_stack+0xb6/0xc0 [ 32.173529][ T303] ? call_rcu+0xd4/0xf90 [ 32.178271][ T303] ? ____fput+0x15/0x20 [ 32.182708][ T303] __alloc_pages+0x115/0x3a0 [ 32.189130][ T303] ? __cfi___alloc_pages+0x10/0x10 [ 32.196886][ T303] ? __kasan_check_write+0x14/0x20 [ 32.203559][ T303] ? _raw_spin_lock+0x8e/0xe0 [ 32.209197][ T303] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.217625][ T303] ? __this_cpu_preempt_check+0x13/0x20 [ 32.223717][ T303] __folio_alloc+0x12/0x40 [ 32.228586][ T303] wp_page_copy+0x280/0x15b0 [ 32.234583][ T303] ? __this_cpu_preempt_check+0x13/0x20 [ 32.241038][ T303] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 32.250454][ T303] ? fault_dirty_shared_page+0x310/0x310 [ 32.257168][ T303] ? _raw_spin_unlock+0x4c/0x70 [ 32.263070][ T303] ? finish_task_switch+0x16b/0x7b0 [ 32.270802][ T303] ? vm_normal_page+0x99/0x200 [ 32.276218][ T303] do_wp_page+0x9f2/0xfc0 [ 32.283701][ T303] handle_mm_fault+0x10e4/0x2640 [ 32.292559][ T303] ? __cfi_handle_mm_fault+0x10/0x10 [ 32.299153][ T303] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 32.307138][ T303] ? __this_cpu_preempt_check+0x13/0x20 [ 32.314261][ T303] ? xfd_validate_state+0x70/0x150 [ 32.322286][ T303] do_user_addr_fault+0x905/0x1050 [ 32.329086][ T303] exc_page_fault+0x51/0xb0 [ 32.334360][ T303] asm_exc_page_fault+0x27/0x30 [ 32.339995][ T303] RIP: 0033:0x7fda75d230e0 [ 32.345915][ T303] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 32.370324][ T303] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 32.376860][ T303] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 32.389005][ T303] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 32.399421][ T303] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 32.409128][ T303] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [pid 301] exit_group(0) = ? [pid 303] exit_group(0) = ? [pid 302] +++ exited with 0 +++ [ 32.418970][ T303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 32.428722][ T303] [ 32.432867][ T303] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 32.433074][ T304] CPU: 0 PID: 304 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 32.454275][ T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 32.465588][ T304] Call Trace: [ 32.468883][ T304] [ 32.472821][ T304] __dump_stack+0x21/0x24 [ 32.478878][ T304] dump_stack_lvl+0xee/0x150 [ 32.484547][ T304] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.490295][ T304] ? __cfi_enqueue_task_fair+0x10/0x10 [ 32.497483][ T304] dump_stack+0x15/0x24 [ 32.502174][ T304] should_fail_ex+0x3d4/0x520 [ 32.507824][ T304] should_fail_alloc_page+0x61/0x90 [ 32.513861][ T304] prepare_alloc_pages+0x148/0x5f0 [ 32.519889][ T304] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 32.525941][ T304] __alloc_pages+0x115/0x3a0 [ 32.531351][ T304] ? __cfi___alloc_pages+0x10/0x10 [ 32.537464][ T304] ? __kasan_check_write+0x14/0x20 [ 32.545578][ T304] ? _raw_spin_lock+0x8e/0xe0 [ 32.551500][ T304] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.558900][ T304] ? __this_cpu_preempt_check+0x13/0x20 [ 32.565831][ T304] __folio_alloc+0x12/0x40 [ 32.572961][ T304] wp_page_copy+0x280/0x15b0 [ 32.579674][ T304] ? __this_cpu_preempt_check+0x13/0x20 [ 32.587116][ T304] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 32.595056][ T304] ? fault_dirty_shared_page+0x310/0x310 [ 32.602445][ T304] ? _raw_spin_unlock+0x4c/0x70 [ 32.609502][ T304] ? finish_task_switch+0x16b/0x7b0 [ 32.615426][ T304] ? vm_normal_page+0x99/0x200 [ 32.621172][ T304] do_wp_page+0x9f2/0xfc0 [ 32.626908][ T304] handle_mm_fault+0x10e4/0x2640 [ 32.632275][ T304] ? __cfi_handle_mm_fault+0x10/0x10 [ 32.639069][ T304] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 32.645916][ T304] ? __this_cpu_preempt_check+0x13/0x20 [ 32.651689][ T304] ? xfd_validate_state+0x70/0x150 [ 32.658032][ T304] do_user_addr_fault+0x905/0x1050 [ 32.665324][ T304] exc_page_fault+0x51/0xb0 [ 32.670803][ T304] asm_exc_page_fault+0x27/0x30 [ 32.676500][ T304] RIP: 0033:0x7fda75d230e0 [ 32.682227][ T304] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 32.709726][ T304] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 32.718004][ T304] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] <... close resumed>) = 0 [pid 303] +++ exited with 0 +++ [pid 301] +++ exited with 0 +++ [pid 305] exit_group(0) = ? [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... clone resumed>, child_tidptr=0x55557a9cc650) = 307 [pid 292] <... clone resumed>, child_tidptr=0x55557a9cc650) = 306 ./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x55557a9cc660, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 32.727138][ T304] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 32.735948][ T304] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 32.744460][ T304] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 32.753243][ T304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 32.763488][ T304] [ 32.769519][ T304] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF ./strace-static-x86_64: Process 306 attached [pid 304] exit_group(0 [pid 306] set_robust_list(0x55557a9cc660, 24 [pid 304] <... exit_group resumed>) = ? [pid 306] <... set_robust_list resumed>) = 0 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 [pid 307] write(1, "executing program\n", 18 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... prctl resumed>) = 0 executing program [pid 307] <... write resumed>) = 18 [pid 307] perf_event_open( [pid 306] setpgid(0, 0 [pid 295] <... clone resumed>, child_tidptr=0x55557a9cc650) = 308 [pid 306] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 308 attached [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] set_robust_list(0x55557a9cc660, 24 [pid 306] <... openat resumed>) = 3 [pid 308] <... set_robust_list resumed>) = 0 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL executing program [pid 306] write(1, "executing program\n", 18 [pid 305] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ [pid 306] <... write resumed>) = 18 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=26} --- [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=13} --- [pid 306] perf_event_open( [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... prctl resumed>) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 309 attached [pid 308] setpgid(0, 0 [pid 293] <... clone resumed>, child_tidptr=0x55557a9cc650) = 309 ./strace-static-x86_64: Process 310 attached [pid 309] set_robust_list(0x55557a9cc660, 24 [pid 308] <... setpgid resumed>) = 0 [pid 310] set_robust_list(0x55557a9cc660, 24 [pid 309] <... set_robust_list resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x55557a9cc650) = 310 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... set_robust_list resumed>) = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3executing program ) = 0 [pid 310] write(1, "executing program\n", 18) = 18 [pid 310] perf_event_open( [pid 308] <... openat resumed>) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3executing program ) = 0 [pid 308] write(1, "executing program\n", 18) = 18 [pid 308] perf_event_open( [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] setpgid(0, 0) = 0 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 [pid 309] write(1, "executing program\n", 18executing program ) = 18 [pid 309] perf_event_open( [pid 307] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 306] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 307] <... bpf resumed>) = 4 [pid 307] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 307] <... bpf resumed>) = 5 [pid 307] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 307] write(6, "1", 1) = 1 [pid 307] close(3) = 0 [pid 306] <... bpf resumed>) = 4 [pid 306] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16) = 5 [pid 306] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 310] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 308] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 309] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 308] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16) = 5 [pid 308] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 308] write(6, "1", 1) = 1 [pid 308] close(3 [pid 309] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 308] <... close resumed>) = 0 [pid 309] <... bpf resumed>) = 5 [pid 309] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 309] write(6, "1", 1) = 1 [pid 309] close(3) = 0 [ 32.806504][ T307] FAULT_INJECTION: forcing a failure. [ 32.806504][ T307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 32.824089][ T307] CPU: 0 PID: 307 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 32.829438][ T308] FAULT_INJECTION: forcing a failure. [ 32.829438][ T308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 32.836012][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 32.836031][ T307] Call Trace: [ 32.836038][ T307] [ 32.836045][ T307] __dump_stack+0x21/0x24 [ 32.836077][ T307] dump_stack_lvl+0xee/0x150 [ 32.836101][ T307] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.853673][ T309] FAULT_INJECTION: forcing a failure. [ 32.853673][ T309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 32.865733][ T307] dump_stack+0x15/0x24 [ 32.865778][ T307] should_fail_ex+0x3d4/0x520 [ 32.865802][ T307] should_fail_alloc_page+0x61/0x90 [ 32.865825][ T307] prepare_alloc_pages+0x148/0x5f0 [ 32.865849][ T307] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 32.924118][ T306] FAULT_INJECTION: forcing a failure. [ 32.924118][ T306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 32.926823][ T307] ? __kasan_record_aux_stack+0xb6/0xc0 [ 32.967200][ T307] ? call_rcu+0xd4/0xf90 [ 32.973574][ T307] __alloc_pages+0x115/0x3a0 [ 32.978621][ T307] ? __cfi___alloc_pages+0x10/0x10 [ 32.984371][ T307] ? __kasan_check_write+0x14/0x20 [ 32.989925][ T307] ? _raw_spin_lock+0x8e/0xe0 [ 32.995522][ T307] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.001926][ T307] ? __this_cpu_preempt_check+0x13/0x20 [ 33.008576][ T307] __folio_alloc+0x12/0x40 [ 33.013314][ T307] wp_page_copy+0x280/0x15b0 [ 33.019278][ T307] ? __this_cpu_preempt_check+0x13/0x20 [ 33.025909][ T307] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 33.034034][ T307] ? fault_dirty_shared_page+0x310/0x310 [ 33.040469][ T307] ? _raw_spin_unlock+0x4c/0x70 [ 33.047017][ T307] ? finish_task_switch+0x16b/0x7b0 [ 33.052594][ T307] ? vm_normal_page+0x99/0x200 [ 33.058018][ T307] do_wp_page+0x9f2/0xfc0 [ 33.063690][ T307] handle_mm_fault+0x10e4/0x2640 [ 33.069690][ T307] ? __cfi_handle_mm_fault+0x10/0x10 [ 33.076588][ T307] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 33.082392][ T307] ? __this_cpu_preempt_check+0x13/0x20 [ 33.089974][ T307] ? xfd_validate_state+0x70/0x150 [ 33.096264][ T307] do_user_addr_fault+0x905/0x1050 [ 33.102042][ T307] exc_page_fault+0x51/0xb0 [ 33.107298][ T307] asm_exc_page_fault+0x27/0x30 [ 33.114492][ T307] RIP: 0033:0x7fda75d230e0 [ 33.120161][ T307] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 33.143440][ T307] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [pid 306] write(6, "1", 1) = 1 [pid 306] close(3) = 0 [ 33.150440][ T307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 33.160131][ T307] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 33.169862][ T307] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 33.180699][ T307] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 33.191320][ T307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 33.200555][ T307] [ 33.204049][ T306] CPU: 1 PID: 306 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 33.204956][ T307] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 33.216228][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 33.216246][ T306] Call Trace: [ 33.216253][ T306] [ 33.216262][ T306] __dump_stack+0x21/0x24 [ 33.216294][ T306] dump_stack_lvl+0xee/0x150 [ 33.216319][ T306] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.216345][ T306] ? __cfi_enqueue_task_fair+0x10/0x10 [ 33.216374][ T306] dump_stack+0x15/0x24 [ 33.259189][ T310] FAULT_INJECTION: forcing a failure. [ 33.259189][ T310] name failslab, interval 1, probability 0, space 0, times 0 [ 33.262829][ T306] should_fail_ex+0x3d4/0x520 [ 33.294024][ T306] should_fail_alloc_page+0x61/0x90 [ 33.300394][ T306] prepare_alloc_pages+0x148/0x5f0 [ 33.306287][ T306] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 33.312388][ T306] __alloc_pages+0x115/0x3a0 [ 33.318676][ T306] ? __cfi___alloc_pages+0x10/0x10 [ 33.324248][ T306] ? __kasan_check_write+0x14/0x20 [ 33.330598][ T306] ? _raw_spin_lock+0x8e/0xe0 [ 33.336869][ T306] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.342933][ T306] ? __this_cpu_preempt_check+0x13/0x20 [ 33.349847][ T306] __folio_alloc+0x12/0x40 [ 33.355131][ T306] wp_page_copy+0x280/0x15b0 [ 33.360999][ T306] ? __this_cpu_preempt_check+0x13/0x20 [ 33.368466][ T306] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 33.376455][ T306] ? fault_dirty_shared_page+0x310/0x310 [ 33.382819][ T306] ? _raw_spin_unlock+0x4c/0x70 [ 33.388056][ T306] ? finish_task_switch+0x16b/0x7b0 [ 33.394748][ T306] ? vm_normal_page+0x99/0x200 [ 33.400234][ T306] do_wp_page+0x9f2/0xfc0 [ 33.405416][ T306] handle_mm_fault+0x10e4/0x2640 [ 33.411711][ T306] ? __cfi_handle_mm_fault+0x10/0x10 [ 33.417716][ T306] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 33.423905][ T306] ? __this_cpu_preempt_check+0x13/0x20 [ 33.430946][ T306] ? xfd_validate_state+0x70/0x150 [ 33.437218][ T306] do_user_addr_fault+0x905/0x1050 [ 33.442935][ T306] exc_page_fault+0x51/0xb0 [ 33.449213][ T306] asm_exc_page_fault+0x27/0x30 [ 33.454382][ T306] RIP: 0033:0x7fda75d230e0 [ 33.459080][ T306] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 33.481138][ T306] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 33.487997][ T306] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 33.496954][ T306] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [pid 310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 307] exit_group(0 [pid 310] <... bpf resumed>) = 4 [pid 307] <... exit_group resumed>) = ? [pid 307] +++ exited with 0 +++ [pid 310] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16) = 5 [pid 310] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 310] write(6, "1", 1) = 1 [pid 310] close(3 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 311 ./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x55557a9cc660, 24) = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 [pid 311] write(1, "executing program\n", 18executing program ) = 18 [ 33.506070][ T306] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 33.515446][ T306] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 33.524391][ T306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 33.533905][ T306] [ 33.537989][ T310] CPU: 0 PID: 310 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 33.549420][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 33.561478][ T310] Call Trace: [ 33.565464][ T310] [ 33.569195][ T310] __dump_stack+0x21/0x24 [ 33.574332][ T310] dump_stack_lvl+0xee/0x150 [ 33.579572][ T310] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.586107][ T310] dump_stack+0x15/0x24 [ 33.590821][ T310] should_fail_ex+0x3d4/0x520 [ 33.596471][ T310] __should_failslab+0xac/0xf0 [ 33.601866][ T310] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 33.608488][ T310] should_failslab+0x9/0x20 [ 33.613435][ T310] __kmem_cache_alloc_node+0x3d/0x2c0 [ 33.619879][ T310] ? __cfi_mutex_lock+0x10/0x10 [ 33.625203][ T310] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 33.634797][ T310] __kmalloc+0xa1/0x1e0 [ 33.639334][ T310] ? __kasan_check_write+0x14/0x20 [ 33.646240][ T310] ? __cfi_perf_trace_percpu_alloc_percpu+0x10/0x10 [ 33.654251][ T310] tracepoint_probe_unregister+0x1e6/0x8b0 [ 33.660965][ T310] trace_event_reg+0x21c/0x260 [ 33.667797][ T310] perf_trace_event_unreg+0xcc/0x1c0 [ 33.675081][ T310] perf_trace_destroy+0xbe/0x180 [ 33.681652][ T310] tp_perf_event_destroy+0x15/0x20 [ 33.688500][ T310] ? __cfi_tp_perf_event_destroy+0x10/0x10 [ 33.697208][ T310] _free_event+0x9cd/0xce0 [ 33.702175][ T310] perf_event_release_kernel+0x819/0x8a0 [ 33.711417][ T310] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.720854][ T310] ? __cfi_perf_event_release_kernel+0x10/0x10 [ 33.728302][ T310] perf_release+0x3b/0x40 [ 33.736287][ T310] ? __cfi_perf_release+0x10/0x10 [ 33.742785][ T310] __fput+0x1fc/0x8f0 [ 33.747313][ T310] ____fput+0x15/0x20 [ 33.752322][ T310] task_work_run+0x1db/0x240 [ 33.759344][ T310] ? __cfi_task_work_run+0x10/0x10 [ 33.767375][ T310] ? task_work_add+0x2b1/0x330 [ 33.772824][ T310] ptrace_notify+0x221/0x250 [ 33.778475][ T310] ? __cfi_ptrace_notify+0x10/0x10 [ 33.785565][ T310] ? fput+0x15b/0x1a0 [ 33.792997][ T310] ? filp_close+0x111/0x160 [ 33.797866][ T310] ? close_fd+0x28b/0x300 [ 33.802770][ T310] syscall_exit_work+0x84/0x140 [ 33.808605][ T310] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 33.817203][ T310] syscall_exit_to_user_mode+0xd/0x30 [ 33.825986][ T310] do_syscall_64+0x58/0xa0 [ 33.830710][ T310] ? clear_bhb_loop+0x15/0x70 [ 33.835751][ T310] ? clear_bhb_loop+0x15/0x70 [ 33.846640][ T310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.856031][ T310] RIP: 0033:0x7fda75d54999 [ 33.861339][ T310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 33.885699][ T310] RSP: 002b:00007ffd8e442f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 33.895130][ T310] RAX: 0000000000000000 RBX: 00007ffd8e442f30 RCX: 00007fda75d54999 [ 33.903759][ T310] RDX: 00007fda75d53bd0 RSI: 00007ffd8e442f30 RDI: 0000000000000003 [ 33.912111][ T310] RBP: 0000000000000001 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 33.921234][ T310] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 33.931173][ T310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 33.939901][ T310] [ 33.943371][ T308] CPU: 1 PID: 308 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 33.954428][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 33.966716][ T308] Call Trace: [ 33.970718][ T308] [ 33.973925][ T308] __dump_stack+0x21/0x24 [ 33.982809][ T308] dump_stack_lvl+0xee/0x150 [ 33.988018][ T308] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.993860][ T308] ? __cfi_enqueue_task_fair+0x10/0x10 [ 33.999623][ T308] dump_stack+0x15/0x24 [ 34.003974][ T308] should_fail_ex+0x3d4/0x520 [ 34.009099][ T308] should_fail_alloc_page+0x61/0x90 [ 34.014474][ T308] prepare_alloc_pages+0x148/0x5f0 [ 34.019897][ T308] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 34.025574][ T308] __alloc_pages+0x115/0x3a0 [ 34.030559][ T308] ? __cfi___alloc_pages+0x10/0x10 [ 34.036209][ T308] ? __kasan_check_write+0x14/0x20 [ 34.042364][ T308] ? _raw_spin_lock+0x8e/0xe0 [ 34.047449][ T308] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.053481][ T308] ? __this_cpu_preempt_check+0x13/0x20 [ 34.059993][ T308] __folio_alloc+0x12/0x40 [ 34.064957][ T308] wp_page_copy+0x280/0x15b0 [ 34.070786][ T308] ? __this_cpu_preempt_check+0x13/0x20 [ 34.078093][ T308] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 34.086986][ T308] ? fault_dirty_shared_page+0x310/0x310 [ 34.093368][ T308] ? _raw_spin_unlock+0x4c/0x70 [ 34.099216][ T308] ? finish_task_switch+0x16b/0x7b0 [ 34.106370][ T308] ? vm_normal_page+0x99/0x200 [ 34.112089][ T308] do_wp_page+0x9f2/0xfc0 [ 34.117257][ T308] handle_mm_fault+0x10e4/0x2640 [ 34.123928][ T308] ? __cfi_handle_mm_fault+0x10/0x10 [ 34.129583][ T308] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 34.135891][ T308] ? __this_cpu_preempt_check+0x13/0x20 [ 34.142527][ T308] ? xfd_validate_state+0x70/0x150 [ 34.148464][ T308] do_user_addr_fault+0x905/0x1050 [ 34.154386][ T308] exc_page_fault+0x51/0xb0 [ 34.159437][ T308] asm_exc_page_fault+0x27/0x30 [ 34.165069][ T308] RIP: 0033:0x7fda75d230e0 [ 34.171765][ T308] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 34.195254][ T308] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 34.202940][ T308] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 34.212419][ T308] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 34.221918][ T308] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 34.232949][ T308] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 34.242032][ T308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 34.251611][ T308] [ 34.256322][ T309] CPU: 1 PID: 309 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 34.268356][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 34.280677][ T309] Call Trace: [ 34.285289][ T309] [ 34.288672][ T309] __dump_stack+0x21/0x24 [ 34.294604][ T309] dump_stack_lvl+0xee/0x150 [ 34.299719][ T309] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.306422][ T309] ? __cfi_enqueue_task_fair+0x10/0x10 [ 34.312307][ T309] dump_stack+0x15/0x24 [ 34.317021][ T309] should_fail_ex+0x3d4/0x520 [ 34.322194][ T309] should_fail_alloc_page+0x61/0x90 [ 34.329924][ T309] prepare_alloc_pages+0x148/0x5f0 [ 34.335580][ T309] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 34.341721][ T309] __alloc_pages+0x115/0x3a0 [ 34.347566][ T309] ? __cfi___alloc_pages+0x10/0x10 [ 34.354021][ T309] ? __kasan_check_write+0x14/0x20 [ 34.359690][ T309] ? _raw_spin_lock+0x8e/0xe0 [ 34.365402][ T309] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.371464][ T309] ? __this_cpu_preempt_check+0x13/0x20 [ 34.377588][ T309] __folio_alloc+0x12/0x40 [ 34.383158][ T309] wp_page_copy+0x280/0x15b0 [ 34.388513][ T309] ? __this_cpu_preempt_check+0x13/0x20 [ 34.394812][ T309] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 34.401376][ T309] ? fault_dirty_shared_page+0x310/0x310 [ 34.407392][ T309] ? _raw_spin_unlock+0x4c/0x70 [ 34.412519][ T309] ? finish_task_switch+0x16b/0x7b0 [ 34.417976][ T309] ? vm_normal_page+0x99/0x200 [ 34.424235][ T309] do_wp_page+0x9f2/0xfc0 [ 34.428685][ T309] handle_mm_fault+0x10e4/0x2640 [ 34.433877][ T309] ? __cfi_handle_mm_fault+0x10/0x10 [ 34.439475][ T309] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 34.445137][ T309] ? __this_cpu_preempt_check+0x13/0x20 [ 34.452291][ T309] ? xfd_validate_state+0x70/0x150 [ 34.457717][ T309] do_user_addr_fault+0x905/0x1050 [ 34.463202][ T309] exc_page_fault+0x51/0xb0 [ 34.467917][ T309] asm_exc_page_fault+0x27/0x30 [ 34.473833][ T309] RIP: 0033:0x7fda75d230e0 [ 34.478716][ T309] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 34.502639][ T309] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 34.509607][ T309] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 34.518614][ T309] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 34.528128][ T309] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 34.536896][ T309] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 34.546200][ T309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 34.555432][ T309] [pid 311] perf_event_open( [pid 306] exit_group(0 [pid 308] exit_group(0) = ? [pid 308] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=38} --- [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 310] <... close resumed>) = 0 [pid 310] exit_group(0) = ? [pid 311] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 309] exit_group(0 [pid 306] <... exit_group resumed>) = ? [pid 311] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 310] +++ exited with 0 +++ [pid 309] <... exit_group resumed>) = ? [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] +++ exited with 0 +++ [pid 295] <... restart_syscall resumed>) = 0 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=10} --- [pid 291] <... restart_syscall resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 313 [pid 311] <... bpf resumed>) = 4 ./strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x55557a9cc660, 24) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 314 ./strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x55557a9cc660, 24 [pid 313] write(3, "1000", 4 [pid 311] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 314] <... set_robust_list resumed>) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] <... write resumed>) = 4 [pid 313] close(3) = 0 executing program [pid 313] write(1, "executing program\n", 18) = 18 [pid 314] <... prctl resumed>) = 0 [pid 314] setpgid(0, 0 [pid 313] perf_event_open( [pid 314] <... setpgid resumed>) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... restart_syscall resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... openat resumed>) = 3 [pid 309] +++ exited with 0 +++ [pid 292] <... clone resumed>, child_tidptr=0x55557a9cc650) = 315 [pid 293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=29} --- [pid 293] restart_syscall(<... resuming interrupted clone ...> [pid 311] <... bpf resumed>) = 5 [pid 311] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 313] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 311] <... openat resumed>) = 6 [pid 311] write(6, "1", 1) = 1 [pid 311] close(3 [pid 313] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 311] <... close resumed>) = 0 ./strace-static-x86_64: Process 315 attached [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] write(1, "executing program\n", 18executing program ) = 18 [pid 315] set_robust_list(0x55557a9cc660, 24 [pid 314] perf_event_open( [pid 315] <... set_robust_list resumed>) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 315] <... prctl resumed>) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4 [pid 314] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 315] <... write resumed>) = 4 [pid 314] <... bpf resumed>) = 4 [pid 315] close(3) = 0 [pid 315] write(1, "executing program\n", 18executing program ) = 18 [pid 315] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 315] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 314] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16) = 5 [pid 314] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 293] <... restart_syscall resumed>) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 315] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 293] <... clone resumed>, child_tidptr=0x55557a9cc650) = 316 [pid 314] write(6, "1", 1 [pid 315] <... bpf resumed>) = 5 [pid 313] <... bpf resumed>) = 4 ./strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x55557a9cc660, 24 [pid 313] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 315] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 314] <... write resumed>) = 1 [ 34.559997][ T306] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 34.566526][ T308] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 34.569006][ T309] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 34.598545][ T311] FAULT_INJECTION: forcing a failure. [ 34.598545][ T311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [pid 315] <... openat resumed>) = 6 [pid 314] close(3) = 0 [pid 315] write(6, "1", 1) = 1 [pid 315] close(3) = 0 [ 34.615984][ T311] CPU: 1 PID: 311 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 34.617939][ T314] FAULT_INJECTION: forcing a failure. [ 34.617939][ T314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 34.627674][ T311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 34.627692][ T311] Call Trace: [ 34.627699][ T311] [ 34.627707][ T311] __dump_stack+0x21/0x24 [ 34.627739][ T311] dump_stack_lvl+0xee/0x150 [ 34.627763][ T311] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.627788][ T311] ? __cfi_enqueue_task_fair+0x10/0x10 [ 34.627819][ T311] dump_stack+0x15/0x24 [ 34.645794][ T315] FAULT_INJECTION: forcing a failure. [ 34.645794][ T315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 34.656851][ T311] should_fail_ex+0x3d4/0x520 [ 34.656888][ T311] should_fail_alloc_page+0x61/0x90 [ 34.656917][ T311] prepare_alloc_pages+0x148/0x5f0 [ 34.656941][ T311] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 34.656965][ T311] __alloc_pages+0x115/0x3a0 [ 34.656986][ T311] ? __cfi___alloc_pages+0x10/0x10 [ 34.657008][ T311] ? __kasan_check_write+0x14/0x20 [ 34.657035][ T311] ? _raw_spin_lock+0x8e/0xe0 [ 34.755819][ T311] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.761354][ T311] ? __this_cpu_preempt_check+0x13/0x20 [ 34.767907][ T311] __folio_alloc+0x12/0x40 [ 34.772711][ T311] wp_page_copy+0x280/0x15b0 [ 34.779205][ T311] ? __this_cpu_preempt_check+0x13/0x20 [ 34.791721][ T311] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 34.799849][ T311] ? fault_dirty_shared_page+0x310/0x310 [ 34.807541][ T311] ? _raw_spin_unlock+0x4c/0x70 [ 34.813795][ T311] ? finish_task_switch+0x16b/0x7b0 [ 34.820200][ T311] ? vm_normal_page+0x99/0x200 [ 34.825918][ T311] do_wp_page+0x9f2/0xfc0 [ 34.831859][ T311] handle_mm_fault+0x10e4/0x2640 [ 34.838279][ T311] ? __cfi_handle_mm_fault+0x10/0x10 [ 34.847137][ T311] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 34.855123][ T311] ? __this_cpu_preempt_check+0x13/0x20 [ 34.862092][ T311] ? xfd_validate_state+0x70/0x150 [ 34.868656][ T311] do_user_addr_fault+0x905/0x1050 [ 34.878961][ T311] exc_page_fault+0x51/0xb0 [ 34.884064][ T311] asm_exc_page_fault+0x27/0x30 [ 34.889479][ T311] RIP: 0033:0x7fda75d230e0 [ 34.896167][ T311] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 34.922454][ T311] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 34.928840][ T311] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 34.940204][ T311] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 34.953124][ T311] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 34.962546][ T311] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 34.973073][ T311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 34.983101][ T311] [ 34.986657][ T314] CPU: 0 PID: 314 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 34.987246][ T311] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 34.999189][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 34.999208][ T314] Call Trace: [ 34.999216][ T314] [ 34.999225][ T314] __dump_stack+0x21/0x24 [ 35.036103][ T314] dump_stack_lvl+0xee/0x150 [ 35.042043][ T314] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.049962][ T314] ? resched_curr+0x10e/0x380 [ 35.056565][ T314] ? __cfi_resched_curr+0x10/0x10 [ 35.064424][ T314] dump_stack+0x15/0x24 [ 35.071591][ T314] should_fail_ex+0x3d4/0x520 [ 35.076028][ T313] FAULT_INJECTION: forcing a failure. [ 35.076028][ T313] name failslab, interval 1, probability 0, space 0, times 0 [ 35.078105][ T314] should_fail_alloc_page+0x61/0x90 [ 35.099044][ T314] prepare_alloc_pages+0x148/0x5f0 [ 35.104461][ T314] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 35.114658][ T314] __alloc_pages+0x115/0x3a0 [ 35.119887][ T314] ? __cfi___alloc_pages+0x10/0x10 [ 35.126330][ T314] ? __kasan_check_write+0x14/0x20 [ 35.133404][ T314] ? _raw_spin_lock+0x8e/0xe0 [ 35.139724][ T314] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.145649][ T314] ? __this_cpu_preempt_check+0x13/0x20 [ 35.152839][ T314] __folio_alloc+0x12/0x40 [ 35.157809][ T314] wp_page_copy+0x280/0x15b0 [ 35.162689][ T314] ? __this_cpu_preempt_check+0x13/0x20 [ 35.169206][ T314] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 35.176132][ T314] ? fault_dirty_shared_page+0x310/0x310 [ 35.182884][ T314] ? _raw_spin_unlock+0x4c/0x70 [ 35.188445][ T314] ? finish_task_switch+0x16b/0x7b0 [ 35.194306][ T314] ? vm_normal_page+0x99/0x200 [ 35.200259][ T314] do_wp_page+0x9f2/0xfc0 [ 35.205393][ T314] handle_mm_fault+0x10e4/0x2640 [ 35.213318][ T314] ? __cfi_handle_mm_fault+0x10/0x10 [ 35.220939][ T314] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 35.227217][ T314] ? __this_cpu_preempt_check+0x13/0x20 [ 35.236013][ T314] ? xfd_validate_state+0x70/0x150 [ 35.242062][ T314] do_user_addr_fault+0x905/0x1050 [ 35.248627][ T314] exc_page_fault+0x51/0xb0 [ 35.253586][ T314] asm_exc_page_fault+0x27/0x30 [ 35.259081][ T314] RIP: 0033:0x7fda75d230e0 [ 35.264640][ T314] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 35.292451][ T314] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 35.301081][ T314] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [pid 316] <... set_robust_list resumed>) = 0 [pid 313] <... bpf resumed>) = 5 [pid 311] exit_group(0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 311] <... exit_group resumed>) = ? [pid 316] <... prctl resumed>) = 0 [pid 313] <... openat resumed>) = 6 [pid 311] +++ exited with 0 +++ [pid 316] setpgid(0, 0 [pid 313] write(6, "1", 1 [pid 316] <... setpgid resumed>) = 0 [pid 313] <... write resumed>) = 1 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 313] close(3 [pid 316] <... openat resumed>) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 executing program [pid 316] write(1, "executing program\n", 18) = 18 [pid 316] perf_event_open( [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 317 ./strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x55557a9cc660, 24) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] write(1, "executing program\n", 18executing program ) = 18 [ 35.312211][ T314] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 35.321123][ T314] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 35.329980][ T314] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 35.339656][ T314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.349754][ T314] [ 35.354857][ T315] CPU: 1 PID: 315 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [pid 317] perf_event_open( [pid 314] exit_group(0) = ? [ 35.366703][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 35.366899][ T314] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 35.377934][ T315] Call Trace: [ 35.377946][ T315] [ 35.377955][ T315] __dump_stack+0x21/0x24 [ 35.377986][ T315] dump_stack_lvl+0xee/0x150 [ 35.378010][ T315] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.378033][ T315] ? resched_curr+0x10e/0x380 [ 35.378052][ T315] ? __cfi_resched_curr+0x10/0x10 [ 35.378069][ T315] dump_stack+0x15/0x24 [ 35.378092][ T315] should_fail_ex+0x3d4/0x520 [ 35.378115][ T315] should_fail_alloc_page+0x61/0x90 [ 35.444620][ T315] prepare_alloc_pages+0x148/0x5f0 [ 35.450625][ T315] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 35.456565][ T315] __alloc_pages+0x115/0x3a0 [ 35.461700][ T315] ? __cfi___alloc_pages+0x10/0x10 [ 35.467905][ T315] ? __kasan_check_write+0x14/0x20 [ 35.474267][ T315] ? _raw_spin_lock+0x8e/0xe0 [ 35.479531][ T315] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.486339][ T315] ? __this_cpu_preempt_check+0x13/0x20 [ 35.493299][ T315] __folio_alloc+0x12/0x40 [ 35.499107][ T315] wp_page_copy+0x280/0x15b0 [ 35.505045][ T315] ? __this_cpu_preempt_check+0x13/0x20 [ 35.511763][ T315] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 35.519106][ T315] ? fault_dirty_shared_page+0x310/0x310 [ 35.525316][ T315] ? _raw_spin_unlock+0x4c/0x70 [ 35.530637][ T315] ? finish_task_switch+0x16b/0x7b0 [ 35.536426][ T315] ? vm_normal_page+0x99/0x200 [ 35.541921][ T315] do_wp_page+0x9f2/0xfc0 [ 35.546485][ T315] handle_mm_fault+0x10e4/0x2640 [ 35.553474][ T315] ? __cfi_handle_mm_fault+0x10/0x10 [ 35.561153][ T315] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 35.570020][ T315] ? __this_cpu_preempt_check+0x13/0x20 [ 35.576658][ T315] ? xfd_validate_state+0x70/0x150 [ 35.583697][ T315] do_user_addr_fault+0x905/0x1050 [ 35.592598][ T315] exc_page_fault+0x51/0xb0 [ 35.597730][ T315] asm_exc_page_fault+0x27/0x30 [ 35.602989][ T315] RIP: 0033:0x7fda75d230e0 [ 35.608871][ T315] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 35.635035][ T315] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 35.641297][ T315] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 35.650538][ T315] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 35.660938][ T315] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [pid 315] exit_group(0) = ? [ 35.669799][ T315] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 35.679355][ T315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.689368][ T315] [ 35.693219][ T315] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 35.696106][ T313] CPU: 1 PID: 313 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 35.717663][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 35.733993][ T313] Call Trace: [ 35.737823][ T313] [ 35.742441][ T313] __dump_stack+0x21/0x24 [ 35.747798][ T313] dump_stack_lvl+0xee/0x150 [ 35.753064][ T313] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.760705][ T313] dump_stack+0x15/0x24 [ 35.765394][ T313] should_fail_ex+0x3d4/0x520 [ 35.771623][ T313] __should_failslab+0xac/0xf0 [ 35.776982][ T313] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 35.784830][ T313] should_failslab+0x9/0x20 [ 35.790128][ T313] __kmem_cache_alloc_node+0x3d/0x2c0 [ 35.796513][ T313] ? __cfi_mutex_lock+0x10/0x10 [ 35.801629][ T313] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 35.808854][ T313] __kmalloc+0xa1/0x1e0 [ 35.813893][ T313] ? __kasan_check_write+0x14/0x20 [ 35.821095][ T313] ? __cfi_perf_trace_percpu_alloc_percpu+0x10/0x10 [ 35.829691][ T313] tracepoint_probe_unregister+0x1e6/0x8b0 [ 35.836737][ T313] trace_event_reg+0x21c/0x260 [ 35.842445][ T313] perf_trace_event_unreg+0xcc/0x1c0 [ 35.848977][ T313] perf_trace_destroy+0xbe/0x180 [ 35.854572][ T313] tp_perf_event_destroy+0x15/0x20 [ 35.860394][ T313] ? __cfi_tp_perf_event_destroy+0x10/0x10 [ 35.867426][ T313] _free_event+0x9cd/0xce0 [ 35.873263][ T313] perf_event_release_kernel+0x819/0x8a0 [ 35.879603][ T313] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.885778][ T313] ? __cfi_perf_event_release_kernel+0x10/0x10 [ 35.893119][ T313] perf_release+0x3b/0x40 [ 35.898078][ T313] ? __cfi_perf_release+0x10/0x10 [ 35.903486][ T313] __fput+0x1fc/0x8f0 [ 35.907524][ T313] ____fput+0x15/0x20 [ 35.912625][ T313] task_work_run+0x1db/0x240 [ 35.918709][ T313] ? __cfi_task_work_run+0x10/0x10 [ 35.928159][ T313] ? task_work_add+0x2b1/0x330 [ 35.933400][ T313] ptrace_notify+0x221/0x250 [ 35.939393][ T313] ? __cfi_ptrace_notify+0x10/0x10 [ 35.945823][ T313] ? fput+0x15b/0x1a0 [ 35.950180][ T313] ? filp_close+0x111/0x160 [ 35.955280][ T313] ? close_fd+0x28b/0x300 [ 35.961685][ T313] syscall_exit_work+0x84/0x140 [ 35.967780][ T313] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 35.974997][ T313] syscall_exit_to_user_mode+0xd/0x30 [ 35.981229][ T313] do_syscall_64+0x58/0xa0 [ 35.986307][ T313] ? clear_bhb_loop+0x15/0x70 [ 35.992737][ T313] ? clear_bhb_loop+0x15/0x70 [ 35.998426][ T313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.005220][ T313] RIP: 0033:0x7fda75d54999 [ 36.011298][ T313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 36.034706][ T313] RSP: 002b:00007ffd8e442f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 36.046602][ T313] RAX: 0000000000000000 RBX: 00007ffd8e442f30 RCX: 00007fda75d54999 [ 36.056172][ T313] RDX: 00007fda75d53bd0 RSI: 00007ffd8e442f30 RDI: 0000000000000003 [pid 314] +++ exited with 0 +++ [pid 315] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=17} --- [pid 316] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 313] <... close resumed>) = 0 [pid 316] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 317] <... perf_event_open resumed>{type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=354, sample_period=0, sample_type=PERF_SAMPLE_TID|PERF_SAMPLE_DATA_SRC, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, 0, -1, PERF_FLAG_FD_OUTPUT) = 3 [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=22} --- [pid 317] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=19, insns=0x200000000300, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 316] <... bpf resumed>) = 4 [pid 313] exit_group(0 [pid 295] <... restart_syscall resumed>) = 0 [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 316] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 313] <... exit_group resumed>) = ? [pid 317] <... bpf resumed>) = 4 [pid 316] <... bpf resumed>) = 5 [pid 317] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="percpu_alloc_percpu", prog_fd=4}}, 16 [pid 316] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 317] <... bpf resumed>) = 5 [pid 316] <... openat resumed>) = 6 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 318 attached [pid 317] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 316] write(6, "1", 1 [pid 313] +++ exited with 0 +++ [pid 317] <... openat resumed>) = 6 [pid 316] <... write resumed>) = 1 [pid 295] <... clone resumed>, child_tidptr=0x55557a9cc650) = 318 [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=21} --- [pid 318] set_robust_list(0x55557a9cc660, 24 [pid 317] write(6, "1", 1 [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 317] <... write resumed>) = 1 [pid 317] close(3 [pid 318] <... set_robust_list resumed>) = 0 [pid 316] close(3 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 317] <... close resumed>) = 0 [pid 318] <... prctl resumed>) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3executing program ) = 0 [pid 318] write(1, "executing program\n", 18) = 18 [ 36.068568][ T313] RBP: 0000000000000001 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 36.079218][ T313] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 36.088413][ T313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 36.098552][ T313] [ 36.111931][ T316] FAULT_INJECTION: forcing a failure. [ 36.111931][ T316] name failslab, interval 1, probability 0, space 0, times 0 [ 36.127446][ T316] CPU: 1 PID: 316 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 36.128322][ T317] FAULT_INJECTION: forcing a failure. [ 36.128322][ T317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 36.139511][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 36.139530][ T316] Call Trace: [ 36.139537][ T316] [ 36.139546][ T316] __dump_stack+0x21/0x24 [ 36.139578][ T316] dump_stack_lvl+0xee/0x150 [ 36.139603][ T316] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.193097][ T316] dump_stack+0x15/0x24 [ 36.199801][ T316] should_fail_ex+0x3d4/0x520 [ 36.205010][ T316] __should_failslab+0xac/0xf0 [ 36.210492][ T316] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 36.218388][ T316] should_failslab+0x9/0x20 [ 36.224021][ T316] __kmem_cache_alloc_node+0x3d/0x2c0 [ 36.232299][ T316] ? __cfi_mutex_lock+0x10/0x10 [ 36.240841][ T316] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 36.250520][ T316] __kmalloc+0xa1/0x1e0 [ 36.255933][ T316] ? __kasan_check_write+0x14/0x20 [ 36.261807][ T316] ? __cfi_perf_trace_percpu_alloc_percpu+0x10/0x10 [ 36.270805][ T316] tracepoint_probe_unregister+0x1e6/0x8b0 [ 36.279680][ T316] trace_event_reg+0x21c/0x260 [ 36.285318][ T316] perf_trace_event_unreg+0xcc/0x1c0 [ 36.294549][ T316] perf_trace_destroy+0xbe/0x180 [ 36.300765][ T316] tp_perf_event_destroy+0x15/0x20 [ 36.306424][ T316] ? __cfi_tp_perf_event_destroy+0x10/0x10 [ 36.313058][ T316] _free_event+0x9cd/0xce0 [ 36.318039][ T316] perf_event_release_kernel+0x819/0x8a0 [ 36.323786][ T316] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.331827][ T316] ? __cfi_perf_event_release_kernel+0x10/0x10 [ 36.339529][ T316] perf_release+0x3b/0x40 [ 36.344856][ T316] ? __cfi_perf_release+0x10/0x10 [ 36.351809][ T316] __fput+0x1fc/0x8f0 [ 36.357512][ T316] ____fput+0x15/0x20 [ 36.362202][ T316] task_work_run+0x1db/0x240 [ 36.367375][ T316] ? __cfi_task_work_run+0x10/0x10 [ 36.373643][ T316] ? task_work_add+0x2b1/0x330 [ 36.380424][ T316] ptrace_notify+0x221/0x250 [ 36.389984][ T316] ? __cfi_ptrace_notify+0x10/0x10 [ 36.399122][ T316] ? fput+0x15b/0x1a0 [ 36.404644][ T316] ? filp_close+0x111/0x160 [ 36.410302][ T316] ? close_fd+0x28b/0x300 [ 36.415007][ T316] syscall_exit_work+0x84/0x140 [ 36.422341][ T316] syscall_exit_to_user_mode_prepare+0x1c/0x20 [ 36.432256][ T316] syscall_exit_to_user_mode+0xd/0x30 [ 36.439309][ T316] do_syscall_64+0x58/0xa0 [ 36.444192][ T316] ? clear_bhb_loop+0x15/0x70 [ 36.450448][ T316] ? clear_bhb_loop+0x15/0x70 [ 36.455559][ T316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.463150][ T316] RIP: 0033:0x7fda75d54999 [ 36.468539][ T316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 36.493541][ T316] RSP: 002b:00007ffd8e442f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 36.502915][ T316] RAX: 0000000000000000 RBX: 00007ffd8e442f30 RCX: 00007fda75d54999 [ 36.512818][ T316] RDX: 00007fda75d53bd0 RSI: 00007ffd8e442f30 RDI: 0000000000000003 [pid 318] perf_event_open(executing program [pid 292] <... restart_syscall resumed>) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a9cc650) = 320 [pid 292] <... clone resumed>, child_tidptr=0x55557a9cc650) = 319 ./strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x55557a9cc660, 24) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 [pid 320] write(1, "executing program\n", 18) = 18 [pid 320] perf_event_open(./strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x55557a9cc660, 24) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3executing program ) = 0 [pid 319] write(1, "executing program\n", 18) = 18 [ 36.522450][ T316] RBP: 0000000000000001 R08: 00007ffd8e442cb7 R09: 0000000000000140 [ 36.531252][ T316] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 36.540912][ T316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 36.551447][ T316] [ 36.555571][ T317] CPU: 0 PID: 317 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 36.568977][ T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 36.580521][ T317] Call Trace: [ 36.584161][ T317] [ 36.589072][ T317] __dump_stack+0x21/0x24 [ 36.594913][ T317] dump_stack_lvl+0xee/0x150 [ 36.600509][ T317] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.607054][ T317] dump_stack+0x15/0x24 [ 36.613284][ T317] should_fail_ex+0x3d4/0x520 [ 36.619927][ T317] should_fail_alloc_page+0x61/0x90 [ 36.629651][ T317] prepare_alloc_pages+0x148/0x5f0 [ 36.635719][ T317] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 36.642374][ T317] ? _raw_spin_lock+0x8e/0xe0 [ 36.649806][ T317] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.655679][ T317] __alloc_pages+0x115/0x3a0 [ 36.661720][ T317] ? __cfi___alloc_pages+0x10/0x10 [ 36.667286][ T317] ? newidle_balance+0x861/0xda0 [ 36.673951][ T317] ? kvm_sched_clock_read+0x18/0x40 [ 36.680499][ T317] ? __this_cpu_preempt_check+0x13/0x20 [ 36.691309][ T317] ? xfd_validate_state+0x70/0x150 [ 36.697995][ T317] __folio_alloc+0x12/0x40 [ 36.703261][ T317] wp_page_copy+0x280/0x15b0 [ 36.711806][ T317] ? __switch_to+0x51f/0xe30 [ 36.716429][ T317] ? fault_dirty_shared_page+0x310/0x310 [ 36.724116][ T317] ? _raw_spin_unlock+0x4c/0x70 [ 36.730557][ T317] ? finish_task_switch+0x16b/0x7b0 [ 36.737923][ T317] ? vm_normal_page+0x99/0x200 [ 36.743620][ T317] do_wp_page+0x9f2/0xfc0 [ 36.748943][ T317] handle_mm_fault+0x10e4/0x2640 [ 36.754864][ T317] ? __cfi_handle_mm_fault+0x10/0x10 [ 36.761792][ T317] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 36.768230][ T317] ? __this_cpu_preempt_check+0x13/0x20 [ 36.774614][ T317] ? xfd_validate_state+0x70/0x150 [ 36.780371][ T317] do_user_addr_fault+0x905/0x1050 [ 36.786039][ T317] exc_page_fault+0x51/0xb0 [ 36.793051][ T317] asm_exc_page_fault+0x27/0x30 [ 36.799241][ T317] RIP: 0033:0x7fda75d230e0 [ 36.804429][ T317] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0f 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 3c 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 3c 0a 00 4c [ 36.834278][ T317] RSP: 002b:00007ffd8e442ec0 EFLAGS: 00010246 [ 36.842389][ T317] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 36.854718][ T317] RDX: 0000000000000001 RSI: 00007fda75dc4110 RDI: 0000000000000000 [ 36.864875][ T317] RBP: 00007fda75dc4110 R08: 00007ffd8e442cb7 R09: 0000000000000140 [pid 319] perf_event_open( [pid 316] <... close resumed>) = 0 [pid 316] exit_group(0) = ? [pid 317] exit_group(0) = ? [ 36.875749][ T317] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 36.886741][ T317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 36.897166][ T317] [ 36.901314][ T317] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 36.914756][ T318] CFI failure at __traceiter_percpu_alloc_percpu+0xb3/0x110 (target: 0xffffc90000ea79c8; expected type: 0x42e72b63) [ 36.929558][ T318] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 36.937356][ T318] CPU: 1 PID: 318 Comm: syz-executor209 Not tainted 6.1.134-syzkaller-00015-g218e2bd24587 #0 [ 36.953221][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 36.967598][ T318] RIP: 0010:__traceiter_percpu_alloc_percpu+0xb3/0x110 [ 36.975261][ T318] Code: d4 44 89 e9 4c 8b 45 c0 4c 8b 4d b8 8b 45 30 50 ff 75 28 ff 75 20 8b 45 18 50 ff 75 10 41 ba 9d d4 18 bd 45 03 54 24 fc 74 02 <0f> 0b 41 ff d4 48 83 c4 28 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 [ 37.003368][ T318] RSP: 0000:ffffc90000ea79c8 EFLAGS: 00010a17 [ 37.010324][ T318] RAX: 000000000000fb38 RBX: ffff888100b7b310 RCX: 0000000000000000 [ 37.019985][ T318] RDX: 0000000000000000 RSI: ffffffff81a47214 RDI: ffffffff87053360 [ 37.029682][ T318] RBP: ffffc90000ea7a38 R08: 0000000000000008 R09: 0000000000000008 [ 37.040045][ T318] R10: 0000000062593ba9 R11: 1ffffffff0ee43fd R12: ffffffff81710320 [ 37.048618][ T318] R13: 0000000000000000 R14: ffff888100b7b310 R15: dffffc0000000000 [ 37.059538][ T318] FS: 000055557a9cc380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.070514][ T318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.079886][ T318] CR2: 00007fda75d954b8 CR3: 0000000126017000 CR4: 00000000003506a0 [ 37.090116][ T318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.099554][ T318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.110278][ T318] Call Trace: [ 37.113869][ T318] [ 37.117524][ T318] ? __alloc_percpu+0x24/0x30 [ 37.123474][ T318] ? __alloc_percpu+0x24/0x30 [ 37.129572][ T318] pcpu_alloc+0x1566/0x16b0 [ 37.134815][ T318] __alloc_percpu+0x24/0x30 [ 37.141067][ T318] perf_trace_event_init+0x227/0x960 [ 37.147934][ T318] ? __kasan_slab_alloc+0x72/0x80 [ 37.154395][ T318] perf_trace_init+0x240/0x2e0 [ 37.160473][ T318] perf_tp_event_init+0x8e/0x120 [ 37.165712][ T318] perf_try_init_event+0x15b/0x450 [ 37.171891][ T318] perf_event_alloc+0x10f7/0x1970 [ 37.177785][ T318] __se_sys_perf_event_open+0x6c5/0x1b80 [ 37.184355][ T318] ? ptrace_stop+0x6ce/0x8b0 [ 37.189069][ T318] ? __x64_sys_perf_event_open+0xd0/0xd0 [ 37.196186][ T318] ? do_user_addr_fault+0x9ac/0x1050 [ 37.202608][ T318] __x64_sys_perf_event_open+0xbf/0xd0 [ 37.208478][ T318] x64_sys_call+0x385/0x9a0 [ 37.213731][ T318] do_syscall_64+0x4c/0xa0 [ 37.219024][ T318] ? clear_bhb_loop+0x15/0x70 [ 37.224249][ T318] ? clear_bhb_loop+0x15/0x70 [ 37.230150][ T318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.236849][ T318] RIP: 0033:0x7fda75d54999 [ 37.242595][ T318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 37.267852][ T318] RSP: 002b:00007ffd8e442f18 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 37.279530][ T318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda75d54999 [ 37.289571][ T318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 37.299185][ T318] RBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000140 [ 37.308412][ T318] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 37.317697][ T318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 37.328937][ T318] [ 37.333363][ T318] Modules linked in: [ 37.339563][ T318] ---[ end trace 0000000000000000 ]--- [ 37.346412][ T318] RIP: 0010:__traceiter_percpu_alloc_percpu+0xb3/0x110 [ 37.354979][ T318] Code: d4 44 89 e9 4c 8b 45 c0 4c 8b 4d b8 8b 45 30 50 ff 75 28 ff 75 20 8b 45 18 50 ff 75 10 41 ba 9d d4 18 bd 45 03 54 24 fc 74 02 <0f> 0b 41 ff d4 48 83 c4 28 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 [ 37.377386][ T318] RSP: 0000:ffffc90000ea79c8 EFLAGS: 00010a17 [ 37.387092][ T318] RAX: 000000000000fb38 RBX: ffff888100b7b310 RCX: 0000000000000000 [ 37.396828][ T318] RDX: 0000000000000000 RSI: ffffffff81a47214 RDI: ffffffff87053360 [ 37.406486][ T318] RBP: ffffc90000ea7a38 R08: 0000000000000008 R09: 0000000000000008 [ 37.414934][ T318] R10: 0000000062593ba9 R11: 1ffffffff0ee43fd R12: ffffffff81710320 [ 37.424306][ T318] R13: 0000000000000000 R14: ffff888100b7b310 R15: dffffc0000000000 [ 37.434316][ T318] FS: 000055557a9cc380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.444856][ T318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.453655][ T318] CR2: 00007fda75d954b8 CR3: 0000000126017000 CR4: 00000000003506a0 [ 37.464408][ T318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.476562][ T318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.487384][ T318] Kernel panic - not syncing: Fatal exception [ 37.489258][ T28] audit: type=1400 audit(1747372556.972:71): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.489295][ T28] audit: type=1400 audit(1747372556.972:72): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.489322][ T28] audit: type=1400 audit(1747372556.972:73): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.489348][ T28] audit: type=1400 audit(1747372556.972:74): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.489374][ T28] audit: type=1400 audit(1747372556.972:75): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.489399][ T28] audit: type=1400 audit(1747372556.972:76): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.489424][ T28] audit: type=1400 audit(1747372556.972:77): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.677521][ T318] Kernel Offset: disabled [ 37.682424][ T318] Rebooting in 86400 seconds..