./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3825543156
<...>
Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts.
execve("./syz-executor3825543156", ["./syz-executor3825543156"], 0x7ffe55842010 /* 10 vars */) = 0
brk(NULL) = 0x555556f64000
brk(0x555556f64d00) = 0x555556f64d00
arch_prctl(ARCH_SET_FS, 0x555556f64380) = 0
set_tid_address(0x555556f64650) = 5028
set_robust_list(0x555556f64660, 24) = 0
rseq(0x555556f64ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3825543156", 4096) = 28
getrandom("\xab\x29\x6f\xb7\x7d\x4c\x75\x98", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556f64d00
brk(0x555556f85d00) = 0x555556f85d00
brk(0x555556f86000) = 0x555556f86000
mprotect(0x7f69cbd14000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f64650) = 5029
./strace-static-x86_64: Process 5029 attached
[pid 5029] set_robust_list(0x555556f64660, 24) = 0
[pid 5029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5029] setpgid(0, 0) = 0
[pid 5029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5029] write(3, "1000", 4) = 4
[pid 5029] close(3) = 0
[pid 5029] openat(AT_FDCWD, "/dev/bus/usb/002/001", O_RDONLY) = 3
[pid 5029] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5029] write(4, "13", 2) = 2
[pid 5029] mmap(0x20000000, 4194304, PROT_WRITE|PROT_GROWSDOWN, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE, 3, 0) = 0x20000000
[ 44.532564][ T5029] FAULT_INJECTION: forcing a failure.
[ 44.532564][ T5029] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 44.546024][ T5029] CPU: 0 PID: 5029 Comm: syz-executor382 Not tainted 6.5.0-rc4-next-20230802-syzkaller #0
[ 44.555914][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 44.565964][ T5029] Call Trace:
[ 44.569238][ T5029]
[ 44.572158][ T5029] dump_stack_lvl+0x125/0x1b0
[ 44.576843][ T5029] should_fail_ex+0x496/0x5b0
[ 44.581557][ T5029] __should_fail_alloc_page+0xe7/0x130
[ 44.587020][ T5029] prepare_alloc_pages.constprop.0+0x16f/0x550
[ 44.593169][ T5029] ? rcu_is_watching+0x12/0xb0
[ 44.597928][ T5029] __alloc_pages+0x14e/0x4a0
[ 44.602658][ T5029] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360
[ 44.609429][ T5029] ? reacquire_held_locks+0x4b0/0x4b0
[ 44.614831][ T5029] ? lock_release+0x4bf/0x680
[ 44.619503][ T5029] ? finish_task_switch.isra.0+0x211/0xc90
[ 44.625402][ T5029] __folio_alloc+0x16/0x40
[ 44.629838][ T5029] vma_alloc_folio+0x156/0x890
[ 44.634597][ T5029] ? policy_nodemask+0x1d0/0x1d0
[ 44.639526][ T5029] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 44.645496][ T5029] ? lock_sync+0x190/0x190
[ 44.649928][ T5029] ? finish_task_switch.isra.0+0x216/0xc90
[ 44.655742][ T5029] do_wp_page+0x5be/0x3550
[ 44.660181][ T5029] ? lock_sync+0x190/0x190
[ 44.664607][ T5029] ? finish_mkwrite_fault+0x300/0x300
[ 44.669988][ T5029] ? spin_bug+0x1d0/0x1d0
[ 44.674326][ T5029] __handle_mm_fault+0x1e82/0x3f90
[ 44.679434][ T5029] ? vm_iomap_memory+0x170/0x170
[ 44.684474][ T5029] ? mas_walk+0x423/0x7d0
[ 44.688799][ T5029] ? lock_mm_and_find_vma+0x780/0x780
[ 44.694159][ T5029] handle_mm_fault+0x47a/0xa00
[ 44.698932][ T5029] do_user_addr_fault+0x2e7/0xfe0
[ 44.704065][ T5029] ? rcu_is_watching+0x12/0xb0
[ 44.708817][ T5029] exc_page_fault+0x5c/0xd0
[ 44.713417][ T5029] asm_exc_page_fault+0x26/0x30
[ 44.718282][ T5029] RIP: 0033:0x7f69cbc74f20
[ 44.722717][ T5029] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d cd 30 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 80 5e 0a 00 0f 85 0f 02 00 00 4c 8d 25 73 5e 0a 00 4c
[ 44.742321][ T5029] RSP: 002b:00007ffd4653d970 EFLAGS: 00010246
[ 44.748388][ T5029] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
[ 44.756368][ T5029] RDX: 0000000000000001 RSI: 00007f69cbd18130 RDI: 0000000000000000
[ 44.764587][ T5029] RBP: 00007f69cbd18130 R08: 0000000000000003 R09: 0000000000000000
[ 44.772546][ T5029] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000001
[pid 5029] exit_group(0) = ?
[pid 5029] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5029, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5030 attached
, child_tidptr=0x555556f64650) = 5030
[pid 5030] set_robust_list(0x555556f64660, 24) = 0
[pid 5030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5030] setpgid(0, 0) = 0
[pid 5030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5030] write(3, "1000", 4) = 4
[pid 5030] close(3) = 0
[pid 5030] openat(AT_FDCWD, "/dev/bus/usb/002/001", O_RDONLY) = 3
[pid 5030] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5030] write(4, "13", 2) = 2
[pid 5030] mmap(0x20000000, 4194304, PROT_WRITE|PROT_GROWSDOWN, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE, 3, 0) = 0x20000000
[ 44.780500][ T5029] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
[ 44.788477][ T5029]
[ 44.791826][ T5029] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 44.810937][ T5030] FAULT_INJECTION: forcing a failure.
[ 44.810937][ T5030] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 44.824258][ T5030] CPU: 0 PID: 5030 Comm: syz-executor382 Not tainted 6.5.0-rc4-next-20230802-syzkaller #0
[ 44.834163][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 44.844218][ T5030] Call Trace:
[ 44.847501][ T5030]
[ 44.850419][ T5030] dump_stack_lvl+0x125/0x1b0
[ 44.855100][ T5030] should_fail_ex+0x496/0x5b0
[ 44.859785][ T5030] __should_fail_alloc_page+0xe7/0x130
[ 44.865235][ T5030] prepare_alloc_pages.constprop.0+0x16f/0x550
[ 44.871384][ T5030] ? reacquire_held_locks+0x4b0/0x4b0
[ 44.876752][ T5030] __alloc_pages+0x14e/0x4a0
[ 44.881332][ T5030] ? xfd_validate_state+0x5d/0x180
[ 44.886437][ T5030] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360
[ 44.893195][ T5030] ? rcu_is_watching+0x12/0xb0
[ 44.897956][ T5030] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 44.904016][ T5030] __folio_alloc+0x16/0x40
[ 44.908427][ T5030] vma_alloc_folio+0x156/0x890
[ 44.913190][ T5030] ? policy_nodemask+0x1d0/0x1d0
[ 44.918144][ T5030] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 44.924128][ T5030] ? lock_sync+0x190/0x190
[ 44.928543][ T5030] do_wp_page+0x5be/0x3550
[ 44.932953][ T5030] ? lock_sync+0x190/0x190
[ 44.937373][ T5030] ? finish_mkwrite_fault+0x300/0x300
[ 44.942742][ T5030] ? spin_bug+0x1d0/0x1d0
[ 44.947074][ T5030] __handle_mm_fault+0x1e82/0x3f90
[ 44.952181][ T5030] ? vm_iomap_memory+0x170/0x170
[ 44.957119][ T5030] ? lock_mm_and_find_vma+0x780/0x780
[ 44.962482][ T5030] ? xfd_validate_state+0x5d/0x180
[ 44.967594][ T5030] handle_mm_fault+0x47a/0xa00
[ 44.972360][ T5030] do_user_addr_fault+0x2e7/0xfe0
[ 44.977381][ T5030] ? rcu_is_watching+0x12/0xb0
[ 44.982150][ T5030] exc_page_fault+0x5c/0xd0
[ 44.986658][ T5030] asm_exc_page_fault+0x26/0x30
[ 44.991504][ T5030] RIP: 0033:0x7f69cbc74f20
[ 44.995934][ T5030] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d cd 30 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 80 5e 0a 00 0f 85 0f 02 00 00 4c 8d 25 73 5e 0a 00 4c
[ 45.015534][ T5030] RSP: 002b:00007ffd4653d970 EFLAGS: 00010246
[ 45.021592][ T5030] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
[pid 5030] exit_group(0) = ?
[pid 5030] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5030, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5031 attached
, child_tidptr=0x555556f64650) = 5031
[pid 5031] set_robust_list(0x555556f64660, 24) = 0
[pid 5031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5031] setpgid(0, 0) = 0
[pid 5031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5031] write(3, "1000", 4) = 4
[pid 5031] close(3) = 0
[pid 5031] openat(AT_FDCWD, "/dev/bus/usb/002/001", O_RDONLY) = 3
[pid 5031] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5031] write(4, "13", 2) = 2
[pid 5031] mmap(0x20000000, 4194304, PROT_WRITE|PROT_GROWSDOWN, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE, 3, 0) = 0x20000000
[ 45.029552][ T5030] RDX: 0000000000000001 RSI: 00007f69cbd18130 RDI: 0000000000000000
[ 45.037511][ T5030] RBP: 00007f69cbd18130 R08: 0000000000000003 R09: 0000000000000000
[ 45.045471][ T5030] R10: 0000000000011012 R11: 0000000000000246 R12: 00007ffd4653d9ec
[ 45.053449][ T5030] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
[ 45.061417][ T5030]
[ 45.064977][ T5030] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 45.087215][ T5031] FAULT_INJECTION: forcing a failure.
[ 45.087215][ T5031] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 45.100749][ T5031] CPU: 0 PID: 5031 Comm: syz-executor382 Not tainted 6.5.0-rc4-next-20230802-syzkaller #0
[ 45.110651][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 45.120702][ T5031] Call Trace:
[ 45.123963][ T5031]
[ 45.126886][ T5031] dump_stack_lvl+0x125/0x1b0
[ 45.131583][ T5031] should_fail_ex+0x496/0x5b0
[ 45.136248][ T5031] __should_fail_alloc_page+0xe7/0x130
[ 45.141690][ T5031] prepare_alloc_pages.constprop.0+0x16f/0x550
[ 45.147830][ T5031] ? rcu_is_watching+0x12/0xb0
[ 45.152585][ T5031] __alloc_pages+0x14e/0x4a0
[ 45.157193][ T5031] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360
[ 45.163947][ T5031] ? reacquire_held_locks+0x4b0/0x4b0
[ 45.169313][ T5031] ? lock_release+0x4bf/0x680
[ 45.173982][ T5031] ? finish_task_switch.isra.0+0x211/0xc90
[ 45.179790][ T5031] __folio_alloc+0x16/0x40
[ 45.184219][ T5031] vma_alloc_folio+0x156/0x890
[ 45.188972][ T5031] ? policy_nodemask+0x1d0/0x1d0
[ 45.193897][ T5031] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 45.199865][ T5031] ? lock_sync+0x190/0x190
[ 45.204273][ T5031] ? finish_task_switch.isra.0+0x216/0xc90
[ 45.210080][ T5031] do_wp_page+0x5be/0x3550
[ 45.214492][ T5031] ? lock_sync+0x190/0x190
[ 45.218908][ T5031] ? finish_mkwrite_fault+0x300/0x300
[ 45.224273][ T5031] ? spin_bug+0x1d0/0x1d0
[ 45.228607][ T5031] __handle_mm_fault+0x1e82/0x3f90
[ 45.233713][ T5031] ? vm_iomap_memory+0x170/0x170
[ 45.238645][ T5031] ? mas_walk+0x423/0x7d0
[ 45.242971][ T5031] ? lock_mm_and_find_vma+0x780/0x780
[ 45.248335][ T5031] ? xfd_validate_state+0x5d/0x180
[ 45.253448][ T5031] handle_mm_fault+0x47a/0xa00
[ 45.258208][ T5031] do_user_addr_fault+0x2e7/0xfe0
[ 45.263241][ T5031] ? rcu_is_watching+0x12/0xb0
[ 45.267997][ T5031] exc_page_fault+0x5c/0xd0
[ 45.272512][ T5031] asm_exc_page_fault+0x26/0x30
[ 45.277536][ T5031] RIP: 0033:0x7f69cbc74f20
[ 45.281943][ T5031] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d cd 30 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 80 5e 0a 00 0f 85 0f 02 00 00 4c 8d 25 73 5e 0a 00 4c
[ 45.301545][ T5031] RSP: 002b:00007ffd4653d970 EFLAGS: 00010246
[ 45.307603][ T5031] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
[ 45.315650][ T5031] RDX: 0000000000000001 RSI: 00007f69cbd18130 RDI: 0000000000000000
[ 45.323608][ T5031] RBP: 00007f69cbd18130 R08: 0000000000000003 R09: 0000000000000000
[pid 5031] exit_group(0) = ?
[pid 5031] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5031, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5032 attached
, child_tidptr=0x555556f64650) = 5032
[pid 5032] set_robust_list(0x555556f64660, 24) = 0
[pid 5032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5032] setpgid(0, 0) = 0
[pid 5032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5032] write(3, "1000", 4) = 4
[pid 5032] close(3) = 0
[pid 5032] openat(AT_FDCWD, "/dev/bus/usb/002/001", O_RDONLY) = 3
[pid 5032] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5032] write(4, "13", 2) = 2
[pid 5032] mmap(0x20000000, 4194304, PROT_WRITE|PROT_GROWSDOWN, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE, 3, 0) = 0x20000000
[ 45.331571][ T5031] R10: 0000000000011012 R11: 0000000000000246 R12: 00007ffd4653d9ec
[ 45.339531][ T5031] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
[ 45.347499][ T5031]
[ 45.351105][ T5031] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 45.372993][ T5032] FAULT_INJECTION: forcing a failure.
[ 45.372993][ T5032] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 45.386394][ T5032] CPU: 0 PID: 5032 Comm: syz-executor382 Not tainted 6.5.0-rc4-next-20230802-syzkaller #0
[ 45.396278][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 45.406321][ T5032] Call Trace:
[ 45.409587][ T5032]
[ 45.412507][ T5032] dump_stack_lvl+0x125/0x1b0
[ 45.417182][ T5032] should_fail_ex+0x496/0x5b0
[ 45.422402][ T5032] __should_fail_alloc_page+0xe7/0x130
[ 45.427853][ T5032] prepare_alloc_pages.constprop.0+0x16f/0x550
[ 45.434061][ T5032] ? rcu_is_watching+0x12/0xb0
[ 45.438834][ T5032] __alloc_pages+0x14e/0x4a0
[ 45.443448][ T5032] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360
[ 45.450248][ T5032] ? reacquire_held_locks+0x4b0/0x4b0
[ 45.455617][ T5032] ? lock_release+0x4bf/0x680
[ 45.460285][ T5032] ? finish_task_switch.isra.0+0x211/0xc90
[ 45.466105][ T5032] __folio_alloc+0x16/0x40
[ 45.470520][ T5032] vma_alloc_folio+0x156/0x890
[ 45.475283][ T5032] ? policy_nodemask+0x1d0/0x1d0
[ 45.480214][ T5032] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 45.486187][ T5032] ? lock_sync+0x190/0x190
[ 45.490599][ T5032] ? finish_task_switch.isra.0+0x216/0xc90
[ 45.496430][ T5032] do_wp_page+0x5be/0x3550
[ 45.500869][ T5032] ? lock_sync+0x190/0x190
[ 45.505292][ T5032] ? finish_mkwrite_fault+0x300/0x300
[ 45.510675][ T5032] ? spin_bug+0x1d0/0x1d0
[ 45.515014][ T5032] __handle_mm_fault+0x1e82/0x3f90
[ 45.520128][ T5032] ? vm_iomap_memory+0x170/0x170
[ 45.525203][ T5032] ? mas_walk+0x423/0x7d0
[ 45.529531][ T5032] ? lock_mm_and_find_vma+0x780/0x780
[ 45.534899][ T5032] ? xfd_validate_state+0x5d/0x180
[ 45.540015][ T5032] handle_mm_fault+0x47a/0xa00
[ 45.544789][ T5032] do_user_addr_fault+0x2e7/0xfe0
[ 45.549815][ T5032] ? rcu_is_watching+0x12/0xb0
[ 45.554588][ T5032] exc_page_fault+0x5c/0xd0
[ 45.559099][ T5032] asm_exc_page_fault+0x26/0x30
[ 45.563955][ T5032] RIP: 0033:0x7f69cbc74f20
[ 45.568364][ T5032] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d cd 30 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 80 5e 0a 00 0f 85 0f 02 00 00 4c 8d 25 73 5e 0a 00 4c
[ 45.587968][ T5032] RSP: 002b:00007ffd4653d970 EFLAGS: 00010246
[ 45.594028][ T5032] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
[ 45.601993][ T5032] RDX: 0000000000000001 RSI: 00007f69cbd18130 RDI: 0000000000000000
[ 45.609959][ T5032] RBP: 00007f69cbd18130 R08: 0000000000000003 R09: 0000000000000000
[ 45.617925][ T5032] R10: 0000000000011012 R11: 0000000000000246 R12: 00007ffd4653d9ec
[ 45.625905][ T5032] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
[ 45.633918][ T5032]
[pid 5032] exit_group(0) = ?
[pid 5032] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5032, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5033 attached
, child_tidptr=0x555556f64650) = 5033
[pid 5033] set_robust_list(0x555556f64660, 24) = 0
[pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5033] setpgid(0, 0) = 0
[pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5033] write(3, "1000", 4) = 4
[pid 5033] close(3) = 0
[pid 5033] openat(AT_FDCWD, "/dev/bus/usb/002/001", O_RDONLY) = 3
[pid 5033] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5033] write(4, "13", 2) = 2
[ 45.639770][ T5032] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 45.659582][ T5033] FAULT_INJECTION: forcing a failure.
[ 45.659582][ T5033] name failslab, interval 1, probability 0, space 0, times 1
[ 45.672211][ T5033] CPU: 1 PID: 5033 Comm: syz-executor382 Not tainted 6.5.0-rc4-next-20230802-syzkaller #0
[ 45.682123][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 45.692165][ T5033] Call Trace:
[ 45.695433][ T5033]
[ 45.698352][ T5033] dump_stack_lvl+0x125/0x1b0
[ 45.703022][ T5033] should_fail_ex+0x496/0x5b0
[ 45.707690][ T5033] should_failslab+0x9/0x20
[ 45.712195][ T5033] kmem_cache_alloc+0x33a/0x3b0
[ 45.717076][ T5033] ptlock_alloc+0x1f/0x70
[ 45.721425][ T5033] pte_alloc_one+0x74/0x370
[ 45.725921][ T5033] __pte_alloc+0x6e/0x3b0
[ 45.730246][ T5033] ? pmd_install+0x170/0x170
[ 45.734834][ T5033] remap_pfn_range_notrack+0xab5/0xde0
[ 45.740377][ T5033] ? apply_to_existing_page_range+0x40/0x40
[ 45.746264][ T5033] ? up_write+0x1b3/0x510
[ 45.750589][ T5033] remap_pfn_range+0xca/0x140
[ 45.755259][ T5033] ? remap_pfn_range_notrack+0xde0/0xde0
[ 45.760882][ T5033] ? alloc_pages+0x1b1/0x270
[ 45.765470][ T5033] usbdev_mmap+0x7ea/0xb20
[ 45.769966][ T5033] ? usbdev_vm_close+0x50/0x50
[ 45.774725][ T5033] ? __raw_spin_lock_init+0x3a/0x110
[ 45.780005][ T5033] mmap_region+0x6b9/0x28a0
[ 45.784502][ T5033] ? find_extend_vma_locked+0x2f0/0x2f0
[ 45.790043][ T5033] ? bpf_lsm_mmap_addr+0x9/0x10
[ 45.794885][ T5033] ? security_mmap_addr+0x84/0xa0
[ 45.799908][ T5033] ? get_unmapped_area+0x2c5/0x3e0
[ 45.805014][ T5033] do_mmap+0x87c/0xed0
[ 45.809086][ T5033] vm_mmap_pgoff+0x1a6/0x3b0
[ 45.813679][ T5033] ? randomize_page+0xb0/0xb0
[ 45.818347][ T5033] ? __fget_files+0x279/0x410
[ 45.823013][ T5033] ksys_mmap_pgoff+0x422/0x5b0
[ 45.827774][ T5033] do_syscall_64+0x38/0xb0
[ 45.832180][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 45.838062][ T5033] RIP: 0033:0x7f69cbca1b39
[ 45.842470][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 45.862099][ T5033] RSP: 002b:00007ffd4653d9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 45.870498][ T5033] RAX: ffffffffffffffda RBX: 00007ffd4653d9f0 RCX: 00007f69cbca1b39
[ 45.878800][ T5033] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000
[ 45.886789][ T5033] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000000
[ 45.894742][ T5033] R10: 0000000000011012 R11: 0000000000000246 R12: 00007ffd4653d9ec
[ 45.902698][ T5033] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
[ 45.910657][ T5033]
[ 45.914052][ T5033] ------------[ cut here ]------------
[ 45.919517][ T5033] kernel BUG at mm/page_table_check.c:146!
[ 45.925357][ T5033] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 45.931427][ T5033] CPU: 1 PID: 5033 Comm: syz-executor382 Not tainted 6.5.0-rc4-next-20230802-syzkaller #0
[ 45.941312][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 45.951357][ T5033] RIP: 0010:__page_table_check_zero+0x409/0x5e0
[ 45.957610][ T5033] Code: 0f 84 f1 fc ff ff e8 96 3c a0 ff 48 83 ed 01 49 89 ec e9 eb fc ff ff e8 85 3c a0 ff 0f 0b e8 7e 3c a0 ff 0f 0b e8 77 3c a0 ff <0f> 0b e8 70 3c a0 ff 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 48 89 ee
[ 45.977211][ T5033] RSP: 0018:ffffc9000440fa50 EFLAGS: 00010293
[ 45.983277][ T5033] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 45.991238][ T5033] RDX: ffff88807c819dc0 RSI: ffffffff81e656f9 RDI: 0000000000000005
[ 45.999202][ T5033] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 46.007164][ T5033] R10: 0000000000000001 R11: ffffffff8642ad18 R12: ffff8880164a2000
[ 46.015129][ T5033] R13: 000000000000000a R14: ffff8880164a2044 R15: dffffc0000000000
[ 46.023089][ T5033] FS: 0000555556f64380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 46.032013][ T5033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 46.038589][ T5033] CR2: 00007f69cbd00a03 CR3: 000000007334f000 CR4: 00000000003506e0
[ 46.046552][ T5033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 46.054514][ T5033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 46.062475][ T5033] Call Trace:
[ 46.065741][ T5033]
[ 46.068662][ T5033] ? die+0x31/0x80
[ 46.072384][ T5033] ? do_trap+0x1ab/0x3b0
[ 46.076630][ T5033] ? __page_table_check_zero+0x409/0x5e0
[ 46.082262][ T5033] ? do_error_trap+0x9e/0x160
[ 46.086941][ T5033] ? __page_table_check_zero+0x409/0x5e0
[ 46.092573][ T5033] ? handle_invalid_op+0x2c/0x30
[ 46.097511][ T5033] ? __page_table_check_zero+0x409/0x5e0
[ 46.103142][ T5033] ? exc_invalid_op+0x2d/0x40
[ 46.107816][ T5033] ? asm_exc_invalid_op+0x1a/0x20
[ 46.112867][ T5033] ? hcd_buffer_free_pages+0xe8/0x180
[ 46.118241][ T5033] ? __page_table_check_zero+0x409/0x5e0
[ 46.123877][ T5033] ? __page_table_check_zero+0x409/0x5e0
[ 46.129511][ T5033] __free_pages_ok+0x6a2/0xef0
[ 46.134282][ T5033] hcd_buffer_free_pages+0xe8/0x180
[ 46.139481][ T5033] dec_usb_memory_use_count+0x27b/0x410
[ 46.145038][ T5033] usbdev_mmap+0x816/0xb20
[ 46.149454][ T5033] ? usbdev_vm_close+0x50/0x50
[ 46.154215][ T5033] ? __raw_spin_lock_init+0x3a/0x110
[ 46.159502][ T5033] mmap_region+0x6b9/0x28a0
[ 46.164005][ T5033] ? find_extend_vma_locked+0x2f0/0x2f0
[ 46.169552][ T5033] ? bpf_lsm_mmap_addr+0x9/0x10
[ 46.174397][ T5033] ? security_mmap_addr+0x84/0xa0
[ 46.179417][ T5033] ? get_unmapped_area+0x2c5/0x3e0
[ 46.184526][ T5033] do_mmap+0x87c/0xed0
[ 46.188593][ T5033] vm_mmap_pgoff+0x1a6/0x3b0
[ 46.193188][ T5033] ? randomize_page+0xb0/0xb0
[ 46.197870][ T5033] ? __fget_files+0x279/0x410
[ 46.202540][ T5033] ksys_mmap_pgoff+0x422/0x5b0
[ 46.207303][ T5033] do_syscall_64+0x38/0xb0
[ 46.211718][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 46.217610][ T5033] RIP: 0033:0x7f69cbca1b39
[ 46.222016][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 46.241616][ T5033] RSP: 002b:00007ffd4653d9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 46.250021][ T5033] RAX: ffffffffffffffda RBX: 00007ffd4653d9f0 RCX: 00007f69cbca1b39
[ 46.257988][ T5033] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000
[ 46.265951][ T5033] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000000
[ 46.273996][ T5033] R10: 0000000000011012 R11: 0000000000000246 R12: 00007ffd4653d9ec
[ 46.281958][ T5033] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
[ 46.289927][ T5033]
[ 46.292942][ T5033] Modules linked in:
[ 46.297133][ T5033] ---[ end trace 0000000000000000 ]---
[ 46.302672][ T5033] RIP: 0010:__page_table_check_zero+0x409/0x5e0
[ 46.308993][ T5033] Code: 0f 84 f1 fc ff ff e8 96 3c a0 ff 48 83 ed 01 49 89 ec e9 eb fc ff ff e8 85 3c a0 ff 0f 0b e8 7e 3c a0 ff 0f 0b e8 77 3c a0 ff <0f> 0b e8 70 3c a0 ff 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 48 89 ee
[ 46.328672][ T5033] RSP: 0018:ffffc9000440fa50 EFLAGS: 00010293
[ 46.334758][ T5033] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 46.342781][ T5033] RDX: ffff88807c819dc0 RSI: ffffffff81e656f9 RDI: 0000000000000005
[ 46.350764][ T5033] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 46.358805][ T5033] R10: 0000000000000001 R11: ffffffff8642ad18 R12: ffff8880164a2000
[ 46.366857][ T5033] R13: 000000000000000a R14: ffff8880164a2044 R15: dffffc0000000000
[ 46.374852][ T5033] FS: 0000555556f64380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 46.383831][ T5033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 46.390406][ T5033] CR2: 00007ffd4653d8d8 CR3: 000000007334f000 CR4: 00000000003506f0
[ 46.398402][ T5033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 46.406529][ T5033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 46.414542][ T5033] Kernel panic - not syncing: Fatal exception
[ 46.420831][ T5033] Kernel Offset: disabled
[ 46.425143][ T5033] Rebooting in 86400 seconds..