./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2289369998 <...> Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. execve("./syz-executor2289369998", ["./syz-executor2289369998"], 0x7ffce07718c0 /* 10 vars */) = 0 brk(NULL) = 0x555581c9e000 brk(0x555581c9ed00) = 0x555581c9ed00 arch_prctl(ARCH_SET_FS, 0x555581c9e380) = 0 set_tid_address(0x555581c9e650) = 5224 set_robust_list(0x555581c9e660, 24) = 0 rseq(0x555581c9eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2289369998", 4096) = 28 getrandom("\xdd\x90\x76\xa5\x9a\x94\x89\x9b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555581c9ed00 brk(0x555581cbfd00) = 0x555581cbfd00 brk(0x555581cc0000) = 0x555581cc0000 mprotect(0x7f3f1e564000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5225 ./strace-static-x86_64: Process 5225 attached [pid 5225] set_robust_list(0x555581c9e660, 24) = 0 [pid 5225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5225] setpgid(0, 0) = 0 [pid 5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5225] write(3, "1000", 4) = 4 [pid 5225] close(3) = 0 executing program [pid 5225] write(1, "executing program\n", 18) = 18 [pid 5225] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5225] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5225] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5225] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5225] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5225] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5225] write(6, "8", 1) = 1 [ 74.484459][ T5225] FAULT_INJECTION: forcing a failure. [ 74.484459][ T5225] name failslab, interval 1, probability 0, space 0, times 1 [ 74.497366][ T5225] CPU: 0 UID: 0 PID: 5225 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 74.507672][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 74.517748][ T5225] Call Trace: [ 74.521046][ T5225] [ 74.524013][ T5225] dump_stack_lvl+0x241/0x360 [ 74.528843][ T5225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.534050][ T5225] ? __pfx__printk+0x10/0x10 [ 74.538673][ T5225] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 74.544725][ T5225] ? __pfx___might_resched+0x10/0x10 [ 74.550100][ T5225] should_fail_ex+0x3b0/0x4e0 [ 74.554844][ T5225] ? __d_alloc+0x31/0x700 [ 74.559238][ T5225] should_failslab+0xac/0x100 [ 74.563959][ T5225] ? __d_alloc+0x31/0x700 [ 74.568307][ T5225] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 74.574067][ T5225] __d_alloc+0x31/0x700 [ 74.578474][ T5225] d_alloc_pseudo+0x1f/0xb0 [ 74.583011][ T5225] alloc_file_pseudo+0x123/0x290 [ 74.587999][ T5225] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 74.593496][ T5225] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.598760][ T5225] anon_inode_getfile+0xc8/0x180 [ 74.603737][ T5225] __se_sys_perf_event_open+0x25df/0x38d0 [ 74.609517][ T5225] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 74.615612][ T5225] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.621995][ T5225] ? do_syscall_64+0x100/0x230 [ 74.626810][ T5225] ? __x64_sys_perf_event_open+0x20/0xc0 [ 74.632474][ T5225] do_syscall_64+0xf3/0x230 [ 74.636995][ T5225] ? clear_bhb_loop+0x35/0x90 [ 74.641725][ T5225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.647640][ T5225] RIP: 0033:0x7f3f1e4f8c69 [ 74.652069][ T5225] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.671697][ T5225] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [pid 5225] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5225] exit_group(0) = ? [pid 5225] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5225, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5226 attached , child_tidptr=0x555581c9e650) = 5226 [pid 5226] set_robust_list(0x555581c9e660, 24) = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 74.680154][ T5225] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 74.688165][ T5225] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 74.696172][ T5225] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 74.704302][ T5225] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 74.712298][ T5225] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 74.720288][ T5225] [pid 5226] setpgid(0, 0) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5226] write(3, "1000", 4) = 4 [pid 5226] close(3executing program ) = 0 [pid 5226] write(1, "executing program\n", 18) = 18 [pid 5226] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5226] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5226] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5226] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5226] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5226] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5226] write(6, "8", 1) = 1 [ 74.868925][ T5226] FAULT_INJECTION: forcing a failure. [ 74.868925][ T5226] name failslab, interval 1, probability 0, space 0, times 0 [ 74.881763][ T5226] CPU: 0 UID: 0 PID: 5226 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 74.892025][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 74.902092][ T5226] Call Trace: [ 74.905407][ T5226] [ 74.908360][ T5226] dump_stack_lvl+0x241/0x360 [ 74.913060][ T5226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.918283][ T5226] ? __pfx__printk+0x10/0x10 [ 74.922885][ T5226] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 74.929517][ T5226] ? __pfx___might_resched+0x10/0x10 [ 74.934844][ T5226] should_fail_ex+0x3b0/0x4e0 [ 74.939563][ T5226] ? security_file_alloc+0x32/0x310 [ 74.944825][ T5226] should_failslab+0xac/0x100 [ 74.949531][ T5226] ? security_file_alloc+0x32/0x310 [ 74.954764][ T5226] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 74.960175][ T5226] security_file_alloc+0x32/0x310 [ 74.965231][ T5226] init_file+0x93/0x1e0 [ 74.969414][ T5226] alloc_empty_file+0xb8/0x1d0 [ 74.974195][ T5226] alloc_file_pseudo+0x1da/0x290 [ 74.979150][ T5226] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 74.984624][ T5226] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.989848][ T5226] anon_inode_getfile+0xc8/0x180 [ 74.994813][ T5226] __se_sys_perf_event_open+0x25df/0x38d0 [ 75.000701][ T5226] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 75.006812][ T5226] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.013157][ T5226] ? do_syscall_64+0x100/0x230 [ 75.017949][ T5226] ? __x64_sys_perf_event_open+0x20/0xc0 [ 75.023603][ T5226] do_syscall_64+0xf3/0x230 [ 75.028138][ T5226] ? clear_bhb_loop+0x35/0x90 [ 75.032840][ T5226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.038786][ T5226] RIP: 0033:0x7f3f1e4f8c69 [ 75.043214][ T5226] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5226] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5226] exit_group(0) = ? [pid 5226] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 75.062930][ T5226] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 75.071366][ T5226] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 75.079349][ T5226] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 75.087333][ T5226] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 75.095314][ T5226] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 75.103295][ T5226] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 75.111389][ T5226] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5227 attached , child_tidptr=0x555581c9e650) = 5227 [pid 5227] set_robust_list(0x555581c9e660, 24) = 0 [pid 5227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5227] setpgid(0, 0) = 0 [pid 5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5227] write(3, "1000", 4) = 4 [pid 5227] close(3) = 0 executing program [pid 5227] write(1, "executing program\n", 18) = 18 [pid 5227] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5227] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5227] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5227] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5227] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5227] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5227] write(6, "8", 1) = 1 [ 75.248814][ T5227] FAULT_INJECTION: forcing a failure. [ 75.248814][ T5227] name failslab, interval 1, probability 0, space 0, times 0 [ 75.261611][ T5227] CPU: 0 UID: 0 PID: 5227 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 75.271987][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.282055][ T5227] Call Trace: [ 75.285340][ T5227] [ 75.288278][ T5227] dump_stack_lvl+0x241/0x360 [ 75.292984][ T5227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.298205][ T5227] ? __pfx__printk+0x10/0x10 [ 75.302809][ T5227] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 75.308753][ T5227] ? __pfx___might_resched+0x10/0x10 [ 75.314067][ T5227] should_fail_ex+0x3b0/0x4e0 [ 75.318789][ T5227] ? __d_alloc+0x31/0x700 [ 75.323139][ T5227] should_failslab+0xac/0x100 [ 75.327838][ T5227] ? __d_alloc+0x31/0x700 [ 75.332191][ T5227] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 75.337936][ T5227] __d_alloc+0x31/0x700 [ 75.342115][ T5227] d_alloc_pseudo+0x1f/0xb0 [ 75.346662][ T5227] alloc_file_pseudo+0x123/0x290 [ 75.351642][ T5227] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 75.357133][ T5227] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.362381][ T5227] anon_inode_getfile+0xc8/0x180 [ 75.367365][ T5227] __se_sys_perf_event_open+0x25df/0x38d0 [ 75.373134][ T5227] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 75.379242][ T5227] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.385612][ T5227] ? do_syscall_64+0x100/0x230 [ 75.390431][ T5227] ? __x64_sys_perf_event_open+0x20/0xc0 [ 75.396119][ T5227] do_syscall_64+0xf3/0x230 [ 75.400640][ T5227] ? clear_bhb_loop+0x35/0x90 [ 75.405336][ T5227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.411416][ T5227] RIP: 0033:0x7f3f1e4f8c69 [ 75.415848][ T5227] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.435466][ T5227] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [pid 5227] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5227] exit_group(0) = ? [pid 5227] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5227, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 75.443895][ T5227] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 75.451877][ T5227] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 75.459894][ T5227] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 75.467876][ T5227] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 75.475852][ T5227] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 75.484039][ T5227] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5228 attached , child_tidptr=0x555581c9e650) = 5228 [pid 5228] set_robust_list(0x555581c9e660, 24) = 0 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5228] setpgid(0, 0) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5228] write(3, "1000", 4) = 4 [pid 5228] close(3) = 0 [pid 5228] write(1, "executing program\n", 18executing program ) = 18 [pid 5228] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5228] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5228] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5228] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5228] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5228] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5228] write(6, "8", 1) = 1 [ 75.629758][ T5228] FAULT_INJECTION: forcing a failure. [ 75.629758][ T5228] name failslab, interval 1, probability 0, space 0, times 0 [ 75.643055][ T5228] CPU: 1 UID: 0 PID: 5228 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 75.653410][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.663577][ T5228] Call Trace: [ 75.666871][ T5228] [ 75.669806][ T5228] dump_stack_lvl+0x241/0x360 [ 75.674514][ T5228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.679833][ T5228] ? __pfx__printk+0x10/0x10 [ 75.684449][ T5228] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 75.689945][ T5228] ? __pfx___might_resched+0x10/0x10 [ 75.695286][ T5228] should_fail_ex+0x3b0/0x4e0 [ 75.700017][ T5228] should_failslab+0xac/0x100 [ 75.704724][ T5228] ? alloc_perf_context+0x50/0x230 [ 75.709863][ T5228] __kmalloc_cache_noprof+0x6c/0x2c0 [ 75.715193][ T5228] alloc_perf_context+0x50/0x230 [ 75.720162][ T5228] find_get_context+0x104/0x5f0 [ 75.725047][ T5228] ? perf_event_alloc+0x1f17/0x2310 [ 75.730304][ T5228] ? __pfx_find_get_context+0x10/0x10 [ 75.735738][ T5228] ? bpf_lsm_capable+0x9/0x10 [ 75.740452][ T5228] __se_sys_perf_event_open+0x13cc/0x38d0 [ 75.746202][ T5228] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.752557][ T5228] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.757775][ T5228] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 75.763882][ T5228] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.770234][ T5228] ? do_syscall_64+0x100/0x230 [ 75.775034][ T5228] ? __x64_sys_perf_event_open+0x20/0xc0 [ 75.780702][ T5228] do_syscall_64+0xf3/0x230 [ 75.785221][ T5228] ? clear_bhb_loop+0x35/0x90 [ 75.789917][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.795856][ T5228] RIP: 0033:0x7f3f1e4f8c69 [ 75.800394][ T5228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.820031][ T5228] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [pid 5228] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5228] exit_group(0) = ? [pid 5228] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 75.828569][ T5228] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 75.836554][ T5228] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 75.844548][ T5228] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 75.852529][ T5228] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 75.860598][ T5228] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 75.868610][ T5228] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5229 attached , child_tidptr=0x555581c9e650) = 5229 [pid 5229] set_robust_list(0x555581c9e660, 24) = 0 [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5229] setpgid(0, 0) = 0 [pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1000", 4) = 4 [pid 5229] close(3) = 0 executing program [pid 5229] write(1, "executing program\n", 18) = 18 [pid 5229] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5229] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5229] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5229] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5229] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5229] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5229] write(6, "8", 1) = 1 [ 75.935806][ T5229] FAULT_INJECTION: forcing a failure. [ 75.935806][ T5229] name failslab, interval 1, probability 0, space 0, times 0 [ 75.948863][ T5229] CPU: 0 UID: 0 PID: 5229 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 75.959163][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.969259][ T5229] Call Trace: [ 75.972654][ T5229] [ 75.975617][ T5229] dump_stack_lvl+0x241/0x360 [ 75.980326][ T5229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.985544][ T5229] ? __pfx__printk+0x10/0x10 [ 75.990157][ T5229] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 75.995735][ T5229] ? __pfx___might_resched+0x10/0x10 [ 76.001044][ T5229] should_fail_ex+0x3b0/0x4e0 [ 76.005740][ T5229] ? security_file_alloc+0x32/0x310 [ 76.010960][ T5229] should_failslab+0xac/0x100 [ 76.015677][ T5229] ? security_file_alloc+0x32/0x310 [ 76.020910][ T5229] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 76.026344][ T5229] security_file_alloc+0x32/0x310 [ 76.031482][ T5229] init_file+0x93/0x1e0 [ 76.035653][ T5229] alloc_empty_file+0xb8/0x1d0 [ 76.040429][ T5229] alloc_file_pseudo+0x1da/0x290 [ 76.045398][ T5229] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 76.050879][ T5229] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.056112][ T5229] anon_inode_getfile+0xc8/0x180 [ 76.061125][ T5229] __se_sys_perf_event_open+0x25df/0x38d0 [ 76.066897][ T5229] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 76.072991][ T5229] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.079338][ T5229] ? do_syscall_64+0x100/0x230 [ 76.084120][ T5229] ? __x64_sys_perf_event_open+0x20/0xc0 [ 76.089795][ T5229] do_syscall_64+0xf3/0x230 [ 76.094313][ T5229] ? clear_bhb_loop+0x35/0x90 [ 76.099042][ T5229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.104948][ T5229] RIP: 0033:0x7f3f1e4f8c69 [ 76.109468][ T5229] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5229] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5229] exit_group(0) = ? [pid 5229] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5230 attached , child_tidptr=0x555581c9e650) = 5230 [pid 5230] set_robust_list(0x555581c9e660, 24) = 0 [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5230] setpgid(0, 0) = 0 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5230] write(3, "1000", 4) = 4 [pid 5230] close(3) = 0 executing program [pid 5230] write(1, "executing program\n", 18) = 18 [pid 5230] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5230] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5230] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5230] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5230] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5230] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5230] write(6, "8", 1) = 1 [ 76.129528][ T5229] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 76.137962][ T5229] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 76.146053][ T5229] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 76.154058][ T5229] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 76.162035][ T5229] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 76.170023][ T5229] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 76.178023][ T5229] [ 76.216369][ T5230] FAULT_INJECTION: forcing a failure. [ 76.216369][ T5230] name failslab, interval 1, probability 0, space 0, times 0 [ 76.229219][ T5230] CPU: 0 UID: 0 PID: 5230 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 76.239482][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 76.249674][ T5230] Call Trace: [ 76.253041][ T5230] [ 76.255994][ T5230] dump_stack_lvl+0x241/0x360 [ 76.260718][ T5230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.265935][ T5230] ? __pfx__printk+0x10/0x10 [ 76.270566][ T5230] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 76.276164][ T5230] ? __pfx___might_resched+0x10/0x10 [ 76.281484][ T5230] should_fail_ex+0x3b0/0x4e0 [ 76.286206][ T5230] ? security_file_alloc+0x32/0x310 [ 76.291444][ T5230] should_failslab+0xac/0x100 [ 76.296160][ T5230] ? security_file_alloc+0x32/0x310 [ 76.301415][ T5230] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 76.306852][ T5230] security_file_alloc+0x32/0x310 [ 76.311909][ T5230] init_file+0x93/0x1e0 [ 76.316101][ T5230] alloc_empty_file+0xb8/0x1d0 [ 76.320903][ T5230] alloc_file_pseudo+0x1da/0x290 [ 76.326050][ T5230] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 76.331543][ T5230] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.336768][ T5230] anon_inode_getfile+0xc8/0x180 [ 76.341727][ T5230] __se_sys_perf_event_open+0x25df/0x38d0 [ 76.347497][ T5230] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 76.353588][ T5230] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.359950][ T5230] ? do_syscall_64+0x100/0x230 [ 76.364733][ T5230] ? __x64_sys_perf_event_open+0x20/0xc0 [ 76.370424][ T5230] do_syscall_64+0xf3/0x230 [ 76.374941][ T5230] ? clear_bhb_loop+0x35/0x90 [ 76.379687][ T5230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.385638][ T5230] RIP: 0033:0x7f3f1e4f8c69 [ 76.390116][ T5230] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5230] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5230] exit_group(0) = ? [pid 5230] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5231 attached [pid 5231] set_robust_list(0x555581c9e660, 24 [pid 5224] <... clone resumed>, child_tidptr=0x555581c9e650) = 5231 [pid 5231] <... set_robust_list resumed>) = 0 [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5231] setpgid(0, 0) = 0 [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 76.410040][ T5230] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 76.418483][ T5230] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 76.426465][ T5230] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 76.434557][ T5230] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 76.442540][ T5230] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 76.450612][ T5230] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 76.458624][ T5230] [pid 5231] write(3, "1000", 4) = 4 [pid 5231] close(3) = 0 [pid 5231] write(1, "executing program\n", 18executing program ) = 18 [pid 5231] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5231] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5231] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5231] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5231] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5231] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5231] write(6, "8", 1) = 1 [ 76.589591][ T5231] FAULT_INJECTION: forcing a failure. [ 76.589591][ T5231] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.589888][ T5231] [ 76.589894][ T5231] ====================================================== [ 76.589904][ T5231] WARNING: possible circular locking dependency detected [ 76.589910][ T5231] 6.11.0-syzkaller-g88264981f208 #0 Not tainted [ 76.589919][ T5231] ------------------------------------------------------ [ 76.589924][ T5231] syz-executor228/5231 is trying to acquire lock: [ 76.589932][ T5231] ffffffff8e813460 (console_owner){....}-{0:0}, at: console_flush_all+0x1a3/0xeb0 [ 76.589985][ T5231] [ 76.589985][ T5231] but task is already holding lock: [ 76.589990][ T5231] ffff8880b862c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x109/0xca0 [ 76.590045][ T5231] [ 76.590045][ T5231] which lock already depends on the new lock. [ 76.590045][ T5231] [ 76.590050][ T5231] [ 76.590050][ T5231] the existing dependency chain (in reverse order) is: [ 76.590055][ T5231] [ 76.590055][ T5231] -> #3 (hrtimer_bases.lock){-.-.}-{2:2}: [ 76.590075][ T5231] lock_acquire+0x1ed/0x550 [ 76.590097][ T5231] _raw_spin_lock_irqsave+0xd5/0x120 [ 76.590114][ T5231] hrtimer_start_range_ns+0x109/0xca0 [ 76.590135][ T5231] rpm_suspend+0x12a2/0x1730 [ 76.590175][ T5231] __pm_runtime_idle+0x131/0x1a0 [ 76.590188][ T5231] __device_attach+0x3e5/0x520 [ 76.590212][ T5231] bus_probe_device+0x189/0x260 [ 76.590237][ T5231] device_add+0x856/0xbf0 [ 76.590251][ T5231] serdev_controller_add+0x83/0x660 [ 76.590289][ T5231] serdev_tty_port_register+0x163/0x260 [ 76.590314][ T5231] tty_port_register_device_attr_serdev+0xe1/0x160 [ 76.590356][ T5231] serial_core_register_port+0x1135/0x2870 [ 76.590379][ T5231] serial8250_register_8250_port+0x1545/0x1ec0 [ 76.590401][ T5231] serial_pnp_probe+0x4f9/0x9d0 [ 76.590418][ T5231] pnp_device_probe+0x2ba/0x460 [ 76.590450][ T5231] really_probe+0x2b8/0xad0 [ 76.590467][ T5231] __driver_probe_device+0x1a2/0x390 [ 76.590483][ T5231] driver_probe_device+0x50/0x430 [ 76.590501][ T5231] __driver_attach+0x45f/0x710 [ 76.590517][ T5231] bus_for_each_dev+0x239/0x2b0 [ 76.590537][ T5231] bus_add_driver+0x346/0x670 [ 76.590558][ T5231] driver_register+0x23a/0x320 [ 76.590576][ T5231] serial8250_init+0xc1/0x1c0 [ 76.590632][ T5231] do_one_initcall+0x248/0x880 [ 76.590668][ T5231] do_initcall_level+0x157/0x210 [ 76.590708][ T5231] do_initcalls+0x3f/0x80 [ 76.590733][ T5231] kernel_init_freeable+0x435/0x5d0 [ 76.590752][ T5231] kernel_init+0x1d/0x2b0 [ 76.590776][ T5231] ret_from_fork+0x4b/0x80 [ 76.590809][ T5231] ret_from_fork_asm+0x1a/0x30 [ 76.590829][ T5231] [ 76.590829][ T5231] -> #2 (&dev->power.lock){-.-.}-{2:2}: [ 76.590850][ T5231] lock_acquire+0x1ed/0x550 [ 76.590870][ T5231] _raw_spin_lock_irqsave+0xd5/0x120 [ 76.590885][ T5231] __pm_runtime_resume+0x112/0x180 [ 76.590899][ T5231] __uart_start+0x17c/0x450 [ 76.590916][ T5231] uart_write+0x280/0xa40 [ 76.590934][ T5231] n_tty_write+0xd62/0x1230 [ 76.590951][ T5231] file_tty_write+0x546/0x9b0 [ 76.590972][ T5231] vfs_write+0xa6d/0xc90 [ 76.590996][ T5231] ksys_write+0x1a0/0x2c0 [ 76.591015][ T5231] do_syscall_64+0xf3/0x230 [ 76.591039][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.591057][ T5231] [ 76.591057][ T5231] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 76.591077][ T5231] lock_acquire+0x1ed/0x550 [ 76.591096][ T5231] _raw_spin_lock_irqsave+0xd5/0x120 [ 76.591110][ T5231] serial8250_console_write+0x1a7/0x1ed0 [ 76.591131][ T5231] console_flush_all+0x86b/0xeb0 [ 76.591148][ T5231] console_unlock+0x14f/0x3b0 [ 76.591163][ T5231] vprintk_emit+0x730/0xa10 [ 76.591178][ T5231] _printk+0xd5/0x120 [ 76.591193][ T5231] register_console+0xbf5/0xfd0 [ 76.591210][ T5231] univ8250_console_init+0x52/0x90 [ 76.591223][ T5231] console_init+0x1b8/0x6f0 [ 76.591253][ T5231] start_kernel+0x2d8/0x500 [ 76.591271][ T5231] x86_64_start_reservations+0x2a/0x30 [ 76.591288][ T5231] x86_64_start_kernel+0x9f/0xa0 [ 76.591301][ T5231] common_startup_64+0x13e/0x147 [ 76.591323][ T5231] [ 76.591323][ T5231] -> #0 (console_owner){....}-{0:0}: [ 76.591342][ T5231] validate_chain+0x18ef/0x5920 [ 76.591356][ T5231] __lock_acquire+0x1384/0x2050 [ 76.591376][ T5231] lock_acquire+0x1ed/0x550 [ 76.591395][ T5231] console_flush_all+0x7f8/0xeb0 [ 76.591412][ T5231] console_unlock+0x14f/0x3b0 [ 76.591427][ T5231] vprintk_emit+0x730/0xa10 [ 76.591442][ T5231] _printk+0xd5/0x120 [ 76.591458][ T5231] should_fail_ex+0x391/0x4e0 [ 76.591479][ T5231] strncpy_from_user+0x36/0x2e0 [ 76.591501][ T5231] strncpy_from_user_nofault+0x71/0x140 [ 76.591521][ T5231] bpf_probe_read_user_str+0x2a/0x70 [ 76.591551][ T5231] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 76.591563][ T5231] bpf_trace_run2+0x2ec/0x540 [ 76.591579][ T5231] enqueue_hrtimer+0x35a/0x3c0 [ 76.591593][ T5231] hrtimer_start_range_ns+0xac8/0xca0 [ 76.591614][ T5231] cpu_clock_event_add+0x180/0x1a0 [ 76.591635][ T5231] event_sched_in+0x832/0xe90 [ 76.591655][ T5231] visit_groups_merge+0x1521/0x2fd0 [ 76.591674][ T5231] __pmu_ctx_sched_in+0x1aa/0x230 [ 76.591693][ T5231] ctx_sched_in+0x4c2/0x600 [ 76.591716][ T5231] ctx_resched+0x560/0x900 [ 76.591735][ T5231] __perf_install_in_context+0x647/0x850 [ 76.591750][ T5231] remote_function+0xef/0x170 [ 76.591768][ T5231] generic_exec_single+0x336/0x9b0 [ 76.591800][ T5231] smp_call_function_single+0x3fa/0x1990 [ 76.591821][ T5231] perf_install_in_context+0x71a/0xb20 [ 76.591838][ T5231] __se_sys_perf_event_open+0x31c5/0x38d0 [ 76.591855][ T5231] do_syscall_64+0xf3/0x230 [ 76.591872][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.591888][ T5231] [ 76.591888][ T5231] other info that might help us debug this: [ 76.591888][ T5231] [ 76.591893][ T5231] Chain exists of: [ 76.591893][ T5231] console_owner --> &dev->power.lock --> hrtimer_bases.lock [ 76.591893][ T5231] [ 76.591916][ T5231] Possible unsafe locking scenario: [ 76.591916][ T5231] [ 76.591920][ T5231] CPU0 CPU1 [ 76.591924][ T5231] ---- ---- [ 76.591928][ T5231] lock(hrtimer_bases.lock); [ 76.591938][ T5231] lock(&dev->power.lock); [ 76.591948][ T5231] lock(hrtimer_bases.lock); [ 76.591959][ T5231] lock(console_owner); [ 76.591968][ T5231] [ 76.591968][ T5231] *** DEADLOCK *** [ 76.591968][ T5231] [ 76.591972][ T5231] 8 locks held by syz-executor228/5231: [ 76.591980][ T5231] #0: ffff888029886dd8 (&sig->exec_update_lock){++++}-{3:3}, at: __se_sys_perf_event_open+0xe64/0x38d0 [ 76.592019][ T5231] #1: ffff8880284a58a8 (&ctx->mutex){+.+.}-{3:3}, at: __se_sys_perf_event_open+0x13f9/0x38d0 [ 76.592059][ T5231] #2: ffff8880b86376c8 (&cpuctx_lock){....}-{2:2}, at: __perf_install_in_context+0xdc/0x850 [ 76.592094][ T5231] #3: ffff8880284a5818 (&ctx->lock){....}-{2:2}, at: __perf_install_in_context+0x110/0x850 [ 76.592132][ T5231] #4: ffff8880b862c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x109/0xca0 [ 76.592174][ T5231] #5: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 76.592207][ T5231] #6: ffffffff8e8134c0 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 76.592242][ T5231] #7: ffffffff8e8130d0 (console_srcu){....}-{0:0}, at: console_flush_all+0x1a3/0xeb0 [ 76.592279][ T5231] [ 76.592279][ T5231] stack backtrace: [ 76.592286][ T5231] CPU: 0 UID: 0 PID: 5231 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 76.592302][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 76.592311][ T5231] Call Trace: [ 76.592318][ T5231] [ 76.592324][ T5231] dump_stack_lvl+0x241/0x360 [ 76.592344][ T5231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.592363][ T5231] ? __pfx__printk+0x10/0x10 [ 76.592383][ T5231] print_circular_bug+0x13a/0x1b0 [ 76.592401][ T5231] check_noncircular+0x36a/0x4a0 [ 76.592419][ T5231] ? __pfx_check_noncircular+0x10/0x10 [ 76.592435][ T5231] ? lockdep_lock+0x123/0x2b0 [ 76.592456][ T5231] ? add_lock_to_list+0x1e8/0x2f0 [ 76.592474][ T5231] validate_chain+0x18ef/0x5920 [ 76.592498][ T5231] ? __pfx_validate_chain+0x10/0x10 [ 76.592515][ T5231] ? sprintf+0xda/0x120 [ 76.592547][ T5231] ? vsnprintf+0x1cc3/0x1da0 [ 76.592573][ T5231] ? info_print_prefix+0x204/0x310 [ 76.592596][ T5231] ? mark_lock+0x9a/0x360 [ 76.592610][ T5231] __lock_acquire+0x1384/0x2050 [ 76.592637][ T5231] lock_acquire+0x1ed/0x550 [ 76.592657][ T5231] ? console_flush_all+0x1a3/0xeb0 [ 76.592678][ T5231] ? __pfx_lock_acquire+0x10/0x10 [ 76.592699][ T5231] ? __pfx_lock_release+0x10/0x10 [ 76.592724][ T5231] ? do_raw_spin_lock+0x14f/0x370 [ 76.592745][ T5231] ? do_raw_spin_unlock+0x13c/0x8b0 [ 76.592764][ T5231] ? console_flush_all+0x511/0xeb0 [ 76.592782][ T5231] ? console_flush_all+0x1a3/0xeb0 [ 76.592801][ T5231] console_flush_all+0x7f8/0xeb0 [ 76.592819][ T5231] ? console_flush_all+0x1a3/0xeb0 [ 76.592838][ T5231] ? console_flush_all+0x1a3/0xeb0 [ 76.592859][ T5231] ? __pfx_console_flush_all+0x10/0x10 [ 76.592878][ T5231] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 76.592894][ T5231] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.592913][ T5231] ? this_cpu_in_panic+0x4f/0x80 [ 76.592927][ T5231] ? is_printk_legacy_deferred+0x43/0x50 [ 76.592949][ T5231] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 76.592968][ T5231] console_unlock+0x14f/0x3b0 [ 76.592985][ T5231] ? __pfx_console_unlock+0x10/0x10 [ 76.593002][ T5231] ? this_cpu_in_panic+0x4f/0x80 [ 76.593019][ T5231] ? is_printk_legacy_deferred+0x43/0x50 [ 76.593041][ T5231] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 76.593059][ T5231] vprintk_emit+0x730/0xa10 [ 76.593076][ T5231] ? __pfx_vprintk_emit+0x10/0x10 [ 76.593099][ T5231] _printk+0xd5/0x120 [ 76.593117][ T5231] ? __pfx__printk+0x10/0x10 [ 76.593137][ T5231] should_fail_ex+0x391/0x4e0 [ 76.593160][ T5231] strncpy_from_user+0x36/0x2e0 [ 76.593181][ T5231] strncpy_from_user_nofault+0x71/0x140 [ 76.593197][ T5231] bpf_probe_read_user_str+0x2a/0x70 [ 76.593217][ T5231] ? bpf_trace_run2+0x1fc/0x540 [ 76.593231][ T5231] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 76.593242][ T5231] bpf_trace_run2+0x2ec/0x540 [ 76.593259][ T5231] ? __pfx_bpf_trace_run2+0x10/0x10 [ 76.593276][ T5231] ? read_tsc+0x9/0x20 [ 76.593295][ T5231] ? timekeeping_get_ns+0x2c0/0x420 [ 76.593315][ T5231] enqueue_hrtimer+0x35a/0x3c0 [ 76.593331][ T5231] hrtimer_start_range_ns+0xac8/0xca0 [ 76.593358][ T5231] cpu_clock_event_add+0x180/0x1a0 [ 76.593377][ T5231] event_sched_in+0x832/0xe90 [ 76.593401][ T5231] ? __pfx_event_sched_in+0x10/0x10 [ 76.593434][ T5231] ? mark_lock+0x9a/0x360 [ 76.593452][ T5231] visit_groups_merge+0x1521/0x2fd0 [ 76.593472][ T5231] ? mark_lock+0x9a/0x360 [ 76.593490][ T5231] ? __pfx_visit_groups_merge+0x10/0x10 [ 76.593514][ T5231] __pmu_ctx_sched_in+0x1aa/0x230 [ 76.593536][ T5231] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 76.593560][ T5231] ctx_sched_in+0x4c2/0x600 [ 76.593581][ T5231] ctx_resched+0x560/0x900 [ 76.593603][ T5231] __perf_install_in_context+0x647/0x850 [ 76.593622][ T5231] ? __pfx___perf_install_in_context+0x10/0x10 [ 76.593638][ T5231] remote_function+0xef/0x170 [ 76.593657][ T5231] ? __pfx_remote_function+0x10/0x10 [ 76.593677][ T5231] generic_exec_single+0x336/0x9b0 [ 76.593700][ T5231] ? __pfx_remote_function+0x10/0x10 [ 76.593725][ T5231] ? __pfx_generic_exec_single+0x10/0x10 [ 76.593749][ T5231] ? smp_call_function_single+0xb4/0x1990 [ 76.593773][ T5231] smp_call_function_single+0x3fa/0x1990 [ 76.593797][ T5231] ? __asan_memset+0x23/0x50 [ 76.593821][ T5231] ? __pfx_remote_function+0x10/0x10 [ 76.593841][ T5231] ? __asan_memset+0x23/0x50 [ 76.593864][ T5231] ? lockdep_init_map_type+0xa1/0x910 [ 76.593886][ T5231] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 76.593907][ T5231] ? __pfx_smp_call_function_single+0x10/0x10 [ 76.593930][ T5231] ? __pfx_remote_function+0x10/0x10 [ 76.593950][ T5231] ? __raw_spin_lock_init+0x45/0x100 [ 76.593972][ T5231] perf_install_in_context+0x71a/0xb20 [ 76.593999][ T5231] ? __pfx_perf_install_in_context+0x10/0x10 [ 76.594018][ T5231] ? __pfx___perf_install_in_context+0x10/0x10 [ 76.594038][ T5231] ? anon_inode_getfile+0xff/0x180 [ 76.594061][ T5231] __se_sys_perf_event_open+0x31c5/0x38d0 [ 76.594086][ T5231] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 76.594110][ T5231] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.594132][ T5231] ? do_syscall_64+0x100/0x230 [ 76.594151][ T5231] ? __x64_sys_perf_event_open+0x20/0xc0 [ 76.594170][ T5231] do_syscall_64+0xf3/0x230 [ 76.594188][ T5231] ? clear_bhb_loop+0x35/0x90 [ 76.594207][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.594224][ T5231] RIP: 0033:0x7f3f1e4f8c69 [ 76.594237][ T5231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.594249][ T5231] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 76.594264][ T5231] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 76.594275][ T5231] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 76.594285][ T5231] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 76.594294][ T5231] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 76.594303][ T5231] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 76.594320][ T5231] [ 77.920714][ T5231] CPU: 0 UID: 0 PID: 5231 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 77.930956][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.941006][ T5231] Call Trace: [ 77.944295][ T5231] [ 77.947243][ T5231] dump_stack_lvl+0x241/0x360 [ 77.951933][ T5231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.957152][ T5231] ? __pfx__printk+0x10/0x10 [ 77.961745][ T5231] should_fail_ex+0x3b0/0x4e0 [ 77.966427][ T5231] strncpy_from_user+0x36/0x2e0 [ 77.971301][ T5231] strncpy_from_user_nofault+0x71/0x140 [ 77.976848][ T5231] bpf_probe_read_user_str+0x2a/0x70 [ 77.982144][ T5231] ? bpf_trace_run2+0x1fc/0x540 [ 77.986996][ T5231] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 77.992455][ T5231] bpf_trace_run2+0x2ec/0x540 [ 77.997130][ T5231] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.002327][ T5231] ? read_tsc+0x9/0x20 [ 78.006398][ T5231] ? timekeeping_get_ns+0x2c0/0x420 [ 78.011597][ T5231] enqueue_hrtimer+0x35a/0x3c0 [ 78.016371][ T5231] hrtimer_start_range_ns+0xac8/0xca0 [ 78.022463][ T5231] cpu_clock_event_add+0x180/0x1a0 [ 78.027578][ T5231] event_sched_in+0x832/0xe90 [ 78.032360][ T5231] ? __pfx_event_sched_in+0x10/0x10 [ 78.037570][ T5231] ? mark_lock+0x9a/0x360 [ 78.041903][ T5231] visit_groups_merge+0x1521/0x2fd0 [ 78.047109][ T5231] ? mark_lock+0x9a/0x360 [ 78.051440][ T5231] ? __pfx_visit_groups_merge+0x10/0x10 [ 78.057003][ T5231] __pmu_ctx_sched_in+0x1aa/0x230 [ 78.062036][ T5231] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 78.067674][ T5231] ctx_sched_in+0x4c2/0x600 [ 78.072203][ T5231] ctx_resched+0x560/0x900 [ 78.076632][ T5231] __perf_install_in_context+0x647/0x850 [ 78.082284][ T5231] ? __pfx___perf_install_in_context+0x10/0x10 [ 78.088522][ T5231] remote_function+0xef/0x170 [ 78.093215][ T5231] ? __pfx_remote_function+0x10/0x10 [ 78.098609][ T5231] generic_exec_single+0x336/0x9b0 [ 78.103735][ T5231] ? __pfx_remote_function+0x10/0x10 [ 78.109020][ T5231] ? __pfx_generic_exec_single+0x10/0x10 [ 78.114664][ T5231] ? smp_call_function_single+0xb4/0x1990 [ 78.120388][ T5231] smp_call_function_single+0x3fa/0x1990 [ 78.126025][ T5231] ? __asan_memset+0x23/0x50 [ 78.130623][ T5231] ? __pfx_remote_function+0x10/0x10 [ 78.135909][ T5231] ? __asan_memset+0x23/0x50 [ 78.140499][ T5231] ? lockdep_init_map_type+0xa1/0x910 [ 78.145876][ T5231] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 78.151685][ T5231] ? __pfx_smp_call_function_single+0x10/0x10 [ 78.157830][ T5231] ? __pfx_remote_function+0x10/0x10 [ 78.163143][ T5231] ? __raw_spin_lock_init+0x45/0x100 [ 78.168453][ T5231] perf_install_in_context+0x71a/0xb20 [ 78.173915][ T5231] ? __pfx_perf_install_in_context+0x10/0x10 [ 78.179920][ T5231] ? __pfx___perf_install_in_context+0x10/0x10 [ 78.186073][ T5231] ? anon_inode_getfile+0xff/0x180 [ 78.191192][ T5231] __se_sys_perf_event_open+0x31c5/0x38d0 [ 78.196927][ T5231] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 78.202998][ T5231] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.209433][ T5231] ? do_syscall_64+0x100/0x230 [ 78.214199][ T5231] ? __x64_sys_perf_event_open+0x20/0xc0 [ 78.219840][ T5231] do_syscall_64+0xf3/0x230 [ 78.224344][ T5231] ? clear_bhb_loop+0x35/0x90 [ 78.229018][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.234907][ T5231] RIP: 0033:0x7f3f1e4f8c69 [ 78.239334][ T5231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.259107][ T5231] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 78.267962][ T5231] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 78.275928][ T5231] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 78.283895][ T5231] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 78.291861][ T5231] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [pid 5231] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 7 [pid 5231] exit_group(0) = ? [ 78.299847][ T5231] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 78.307847][ T5231] [ 78.311211][ C0] hrtimer: interrupt took 27861 ns [pid 5231] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5232 ./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x555581c9e660, 24) = 0 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3) = 0 [pid 5232] write(1, "executing program\n", 18executing program ) = 18 [pid 5232] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5232] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5232] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5232] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5232] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5232] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5232] write(6, "8", 1) = 1 [ 78.522149][ T5232] FAULT_INJECTION: forcing a failure. [ 78.522149][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 78.535165][ T5232] CPU: 0 UID: 0 PID: 5232 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 78.545458][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 78.555551][ T5232] Call Trace: [ 78.558851][ T5232] [ 78.561791][ T5232] dump_stack_lvl+0x241/0x360 [ 78.566494][ T5232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.571797][ T5232] ? __pfx__printk+0x10/0x10 [ 78.576397][ T5232] ? __pfx___might_resched+0x10/0x10 [ 78.581791][ T5232] should_fail_ex+0x3b0/0x4e0 [ 78.586486][ T5232] ? security_file_alloc+0x32/0x310 [ 78.591706][ T5232] should_failslab+0xac/0x100 [ 78.596490][ T5232] ? security_file_alloc+0x32/0x310 [ 78.601719][ T5232] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 78.607105][ T5232] security_file_alloc+0x32/0x310 [ 78.612173][ T5232] init_file+0x93/0x1e0 [ 78.616366][ T5232] alloc_empty_file+0xb8/0x1d0 [ 78.621162][ T5232] alloc_file_pseudo+0x1da/0x290 [ 78.626128][ T5232] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 78.631627][ T5232] ? rcu_is_watching+0x15/0xb0 [ 78.636441][ T5232] anon_inode_getfile+0xc8/0x180 [ 78.641396][ T5232] __se_sys_perf_event_open+0x25df/0x38d0 [ 78.647138][ T5232] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 78.652705][ T5232] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 78.658787][ T5232] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.665244][ T5232] ? rcu_is_watching+0x15/0xb0 [ 78.670017][ T5232] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.676359][ T5232] ? rcu_is_watching+0x15/0xb0 [ 78.681131][ T5232] ? __x64_sys_perf_event_open+0x20/0xc0 [ 78.686861][ T5232] do_syscall_64+0xf3/0x230 [ 78.691378][ T5232] ? clear_bhb_loop+0x35/0x90 [ 78.696067][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.701981][ T5232] RIP: 0033:0x7f3f1e4f8c69 [ 78.706425][ T5232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.726042][ T5232] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 78.734582][ T5232] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 78.742564][ T5232] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 78.750541][ T5232] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 78.758514][ T5232] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [pid 5232] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5232] exit_group(0) = ? [pid 5232] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 78.766508][ T5232] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 78.774491][ T5232] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5233 ./strace-static-x86_64: Process 5233 attached [pid 5233] set_robust_list(0x555581c9e660, 24) = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0) = 0 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5233] write(3, "1000", 4) = 4 [pid 5233] close(3) = 0 executing program [pid 5233] write(1, "executing program\n", 18) = 18 [pid 5233] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5233] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5233] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5233] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5233] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5233] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5233] write(6, "8", 1) = 1 [ 78.936112][ T5233] FAULT_INJECTION: forcing a failure. [ 78.936112][ T5233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.949233][ T5233] CPU: 0 UID: 0 PID: 5233 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 78.959596][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 78.969772][ T5233] Call Trace: [ 78.973059][ T5233] [ 78.975988][ T5233] dump_stack_lvl+0x241/0x360 [ 78.980794][ T5233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.986027][ T5233] ? __pfx__printk+0x10/0x10 [ 78.990626][ T5233] ? bpf_trace_run2+0x1fc/0x540 [ 78.995494][ T5233] ? rcu_is_watching+0x15/0xb0 [ 79.000277][ T5233] ? bpf_trace_run2+0x1fc/0x540 [ 79.005210][ T5233] ? lock_acquire+0xe3/0x550 [ 79.009814][ T5233] should_fail_ex+0x3b0/0x4e0 [ 79.014519][ T5233] strncpy_from_user+0x36/0x2e0 [ 79.019466][ T5233] strncpy_from_user_nofault+0x71/0x140 [ 79.025052][ T5233] bpf_probe_read_user_str+0x2a/0x70 [ 79.030374][ T5233] ? bpf_trace_run2+0x1fc/0x540 [ 79.035226][ T5233] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 79.040688][ T5233] bpf_trace_run2+0x2ec/0x540 [ 79.045374][ T5233] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.050661][ T5233] ? read_tsc+0x9/0x20 [ 79.054749][ T5233] ? timekeeping_get_ns+0x2c0/0x420 [ 79.060154][ T5233] enqueue_hrtimer+0x35a/0x3c0 [ 79.064918][ T5233] hrtimer_start_range_ns+0xac8/0xca0 [ 79.070312][ T5233] cpu_clock_event_add+0x180/0x1a0 [ 79.075435][ T5233] event_sched_in+0x832/0xe90 [ 79.080116][ T5233] ? __asan_memcpy+0x40/0x70 [ 79.084715][ T5233] ? __pfx_event_sched_in+0x10/0x10 [ 79.089952][ T5233] ? rcu_is_watching+0x15/0xb0 [ 79.094775][ T5233] ? lock_release+0xbf/0xa30 [ 79.099388][ T5233] visit_groups_merge+0x1521/0x2fd0 [ 79.104615][ T5233] ? deref_stack_reg+0x17c/0x210 [ 79.109616][ T5233] ? __pfx_visit_groups_merge+0x10/0x10 [ 79.115215][ T5233] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.121402][ T5233] __pmu_ctx_sched_in+0x1aa/0x230 [ 79.126447][ T5233] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 79.132025][ T5233] ? kvm_sched_clock_read+0x11/0x20 [ 79.137236][ T5233] ? perf_cgroup_set_timestamp+0x1e9/0x230 [ 79.143054][ T5233] ctx_sched_in+0x4c2/0x600 [ 79.147571][ T5233] ctx_resched+0x560/0x900 [ 79.152088][ T5233] __perf_install_in_context+0x647/0x850 [ 79.157721][ T5233] ? __pfx___perf_install_in_context+0x10/0x10 [ 79.163979][ T5233] remote_function+0xef/0x170 [ 79.168708][ T5233] ? __pfx_remote_function+0x10/0x10 [ 79.174037][ T5233] generic_exec_single+0x336/0x9b0 [ 79.179195][ T5233] ? __pfx_remote_function+0x10/0x10 [ 79.184504][ T5233] ? __pfx_generic_exec_single+0x10/0x10 [ 79.190181][ T5233] ? smp_call_function_single+0xb4/0x1990 [ 79.195917][ T5233] smp_call_function_single+0x3fa/0x1990 [ 79.201581][ T5233] ? __asan_memset+0x23/0x50 [ 79.206187][ T5233] ? __pfx_remote_function+0x10/0x10 [ 79.211526][ T5233] ? __asan_memset+0x23/0x50 [ 79.216226][ T5233] ? lockdep_init_map_type+0xa1/0x910 [ 79.221607][ T5233] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 79.227435][ T5233] ? __pfx_smp_call_function_single+0x10/0x10 [ 79.233512][ T5233] ? __pfx_remote_function+0x10/0x10 [ 79.238814][ T5233] ? __raw_spin_lock_init+0x45/0x100 [ 79.244115][ T5233] ? file_init_path+0x3b/0x570 [ 79.248877][ T5233] ? __asan_memcpy+0x40/0x70 [ 79.253488][ T5233] perf_install_in_context+0x71a/0xb20 [ 79.258960][ T5233] ? __pfx_perf_install_in_context+0x10/0x10 [ 79.264962][ T5233] ? __pfx___perf_install_in_context+0x10/0x10 [ 79.271202][ T5233] ? anon_inode_getfile+0xff/0x180 [ 79.276491][ T5233] __se_sys_perf_event_open+0x31c5/0x38d0 [ 79.282222][ T5233] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 79.287776][ T5233] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 79.293936][ T5233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.300282][ T5233] ? rcu_is_watching+0x15/0xb0 [ 79.305057][ T5233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.311386][ T5233] ? rcu_is_watching+0x15/0xb0 [ 79.316162][ T5233] ? __x64_sys_perf_event_open+0x20/0xc0 [ 79.321809][ T5233] do_syscall_64+0xf3/0x230 [ 79.326411][ T5233] ? clear_bhb_loop+0x35/0x90 [ 79.331088][ T5233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.336978][ T5233] RIP: 0033:0x7f3f1e4f8c69 [ 79.341408][ T5233] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.361096][ T5233] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 79.369511][ T5233] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 79.377477][ T5233] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [pid 5233] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 7 [pid 5233] exit_group(0) = ? [pid 5233] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5234 attached , child_tidptr=0x555581c9e650) = 5234 [ 79.385455][ T5233] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 79.393424][ T5233] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 79.401509][ T5233] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 79.409508][ T5233] [pid 5234] set_robust_list(0x555581c9e660, 24) = 0 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5234] setpgid(0, 0) = 0 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3) = 0 executing program [pid 5234] write(1, "executing program\n", 18) = 18 [pid 5234] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5234] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5234] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5234] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5234] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5234] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5234] write(6, "8", 1) = 1 [ 79.551336][ T5234] FAULT_INJECTION: forcing a failure. [ 79.551336][ T5234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.564436][ T5234] CPU: 0 UID: 0 PID: 5234 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 79.574673][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 79.584733][ T5234] Call Trace: [ 79.588040][ T5234] [ 79.590981][ T5234] dump_stack_lvl+0x241/0x360 [ 79.595689][ T5234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.600884][ T5234] ? __pfx__printk+0x10/0x10 [ 79.605563][ T5234] ? bpf_trace_run2+0x1fc/0x540 [ 79.610412][ T5234] ? rcu_is_watching+0x15/0xb0 [ 79.615209][ T5234] ? bpf_trace_run2+0x1fc/0x540 [ 79.620050][ T5234] ? lock_acquire+0xe3/0x550 [ 79.624731][ T5234] should_fail_ex+0x3b0/0x4e0 [ 79.629415][ T5234] strncpy_from_user+0x36/0x2e0 [ 79.634304][ T5234] strncpy_from_user_nofault+0x71/0x140 [ 79.639874][ T5234] bpf_probe_read_user_str+0x2a/0x70 [ 79.645199][ T5234] ? bpf_trace_run2+0x1fc/0x540 [ 79.650061][ T5234] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 79.655546][ T5234] bpf_trace_run2+0x2ec/0x540 [ 79.660264][ T5234] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.665643][ T5234] ? read_tsc+0x9/0x20 [ 79.669714][ T5234] ? timekeeping_get_ns+0x2c0/0x420 [ 79.674929][ T5234] enqueue_hrtimer+0x35a/0x3c0 [ 79.679692][ T5234] hrtimer_start_range_ns+0xac8/0xca0 [ 79.685089][ T5234] cpu_clock_event_add+0x180/0x1a0 [ 79.690216][ T5234] event_sched_in+0x832/0xe90 [ 79.694919][ T5234] ? __pfx_event_sched_in+0x10/0x10 [ 79.700130][ T5234] ? rcu_is_watching+0x15/0xb0 [ 79.704890][ T5234] ? lock_release+0xbf/0xa30 [ 79.709485][ T5234] visit_groups_merge+0x1521/0x2fd0 [ 79.714723][ T5234] ? deref_stack_reg+0x17c/0x210 [ 79.719666][ T5234] ? __pfx_visit_groups_merge+0x10/0x10 [ 79.725211][ T5234] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 79.731378][ T5234] __pmu_ctx_sched_in+0x1aa/0x230 [ 79.736400][ T5234] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 79.742131][ T5234] ? kvm_sched_clock_read+0x11/0x20 [ 79.747341][ T5234] ? perf_cgroup_set_timestamp+0x1e9/0x230 [ 79.753153][ T5234] ctx_sched_in+0x4c2/0x600 [ 79.757676][ T5234] ctx_resched+0x560/0x900 [ 79.762094][ T5234] __perf_install_in_context+0x647/0x850 [ 79.767727][ T5234] ? __pfx___perf_install_in_context+0x10/0x10 [ 79.773875][ T5234] remote_function+0xef/0x170 [ 79.778565][ T5234] ? __pfx_remote_function+0x10/0x10 [ 79.783858][ T5234] generic_exec_single+0x336/0x9b0 [ 79.788974][ T5234] ? __pfx_remote_function+0x10/0x10 [ 79.794273][ T5234] ? __pfx_generic_exec_single+0x10/0x10 [ 79.799911][ T5234] ? smp_call_function_single+0xb4/0x1990 [ 79.805635][ T5234] smp_call_function_single+0x3fa/0x1990 [ 79.811266][ T5234] ? __asan_memset+0x23/0x50 [ 79.815863][ T5234] ? __pfx_remote_function+0x10/0x10 [ 79.821147][ T5234] ? __asan_memset+0x23/0x50 [ 79.825734][ T5234] ? lockdep_init_map_type+0xa1/0x910 [ 79.831107][ T5234] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 79.836910][ T5234] ? __pfx_smp_call_function_single+0x10/0x10 [ 79.843004][ T5234] ? __pfx_remote_function+0x10/0x10 [ 79.848324][ T5234] ? __raw_spin_lock_init+0x45/0x100 [ 79.853624][ T5234] ? file_init_path+0x3b/0x570 [ 79.858394][ T5234] ? __asan_memcpy+0x40/0x70 [ 79.862998][ T5234] perf_install_in_context+0x71a/0xb20 [ 79.868503][ T5234] ? __pfx_perf_install_in_context+0x10/0x10 [ 79.874501][ T5234] ? __pfx___perf_install_in_context+0x10/0x10 [ 79.880670][ T5234] ? anon_inode_getfile+0xff/0x180 [ 79.885810][ T5234] __se_sys_perf_event_open+0x31c5/0x38d0 [ 79.891545][ T5234] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 79.897117][ T5234] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 79.903189][ T5234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.909544][ T5234] ? rcu_is_watching+0x15/0xb0 [ 79.914306][ T5234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.920635][ T5234] ? rcu_is_watching+0x15/0xb0 [ 79.925410][ T5234] ? __x64_sys_perf_event_open+0x20/0xc0 [ 79.931040][ T5234] do_syscall_64+0xf3/0x230 [ 79.935543][ T5234] ? clear_bhb_loop+0x35/0x90 [ 79.940220][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.946109][ T5234] RIP: 0033:0x7f3f1e4f8c69 [ 79.950521][ T5234] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.970134][ T5234] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 79.978543][ T5234] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 79.986508][ T5234] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 79.994472][ T5234] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [pid 5234] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 7 [pid 5234] exit_group(0) = ? [pid 5234] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5235 attached [pid 5235] set_robust_list(0x555581c9e660, 24) = 0 [pid 5224] <... clone resumed>, child_tidptr=0x555581c9e650) = 5235 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 executing program [pid 5235] write(1, "executing program\n", 18) = 18 [pid 5235] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5235] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5235] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5235] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5235] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5235] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5235] write(6, "8", 1) = 1 [ 80.002439][ T5234] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 80.010407][ T5234] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 80.018381][ T5234] [ 80.049392][ T5235] FAULT_INJECTION: forcing a failure. [ 80.049392][ T5235] name failslab, interval 1, probability 0, space 0, times 0 [ 80.062350][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 80.072611][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.082709][ T5235] Call Trace: [ 80.085996][ T5235] [ 80.088942][ T5235] dump_stack_lvl+0x241/0x360 [ 80.093641][ T5235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.098843][ T5235] ? __pfx__printk+0x10/0x10 [ 80.103436][ T5235] ? __pfx___might_resched+0x10/0x10 [ 80.108728][ T5235] should_fail_ex+0x3b0/0x4e0 [ 80.113414][ T5235] ? alloc_empty_file+0x9e/0x1d0 [ 80.118378][ T5235] should_failslab+0xac/0x100 [ 80.123066][ T5235] ? alloc_empty_file+0x9e/0x1d0 [ 80.128011][ T5235] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 80.133390][ T5235] alloc_empty_file+0x9e/0x1d0 [ 80.138160][ T5235] alloc_file_pseudo+0x1da/0x290 [ 80.143113][ T5235] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 80.148577][ T5235] ? rcu_is_watching+0x15/0xb0 [ 80.153348][ T5235] anon_inode_getfile+0xc8/0x180 [ 80.158341][ T5235] __se_sys_perf_event_open+0x25df/0x38d0 [ 80.164102][ T5235] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 80.169663][ T5235] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 80.175841][ T5235] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.182192][ T5235] ? rcu_is_watching+0x15/0xb0 [ 80.186966][ T5235] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.193328][ T5235] ? rcu_is_watching+0x15/0xb0 [ 80.198108][ T5235] ? __x64_sys_perf_event_open+0x20/0xc0 [ 80.203755][ T5235] do_syscall_64+0xf3/0x230 [ 80.208277][ T5235] ? clear_bhb_loop+0x35/0x90 [ 80.212977][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.218890][ T5235] RIP: 0033:0x7f3f1e4f8c69 [ 80.223341][ T5235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5235] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5235] exit_group(0) = ? [pid 5235] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5237 ./strace-static-x86_64: Process 5237 attached [pid 5237] set_robust_list(0x555581c9e660, 24) = 0 [ 80.243219][ T5235] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 80.251652][ T5235] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 80.259636][ T5235] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 80.267621][ T5235] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 80.275612][ T5235] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 80.283608][ T5235] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 80.291617][ T5235] [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5237] setpgid(0, 0) = 0 [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5237] write(3, "1000", 4) = 4 [pid 5237] close(3) = 0 executing program [pid 5237] write(1, "executing program\n", 18) = 18 [pid 5237] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5237] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5237] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5237] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5237] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5237] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5237] write(6, "8", 1) = 1 [ 80.412467][ T5237] FAULT_INJECTION: forcing a failure. [ 80.412467][ T5237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.425570][ T5237] CPU: 0 UID: 0 PID: 5237 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 80.435815][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.445871][ T5237] Call Trace: [ 80.449149][ T5237] [ 80.452095][ T5237] dump_stack_lvl+0x241/0x360 [ 80.456797][ T5237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.462012][ T5237] ? __pfx__printk+0x10/0x10 [ 80.466617][ T5237] ? bpf_trace_run2+0x1fc/0x540 [ 80.471498][ T5237] ? rcu_is_watching+0x15/0xb0 [ 80.476266][ T5237] ? bpf_trace_run2+0x1fc/0x540 [ 80.481136][ T5237] ? lock_acquire+0xe3/0x550 [ 80.485743][ T5237] should_fail_ex+0x3b0/0x4e0 [ 80.490441][ T5237] strncpy_from_user+0x36/0x2e0 [ 80.495302][ T5237] strncpy_from_user_nofault+0x71/0x140 [ 80.500848][ T5237] bpf_probe_read_user_str+0x2a/0x70 [ 80.506135][ T5237] ? bpf_trace_run2+0x1fc/0x540 [ 80.510983][ T5237] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 80.516434][ T5237] bpf_trace_run2+0x2ec/0x540 [ 80.521196][ T5237] ? __pfx_bpf_trace_run2+0x10/0x10 [ 80.526390][ T5237] ? read_tsc+0x9/0x20 [ 80.530457][ T5237] ? timekeeping_get_ns+0x2c0/0x420 [ 80.535653][ T5237] enqueue_hrtimer+0x35a/0x3c0 [ 80.540429][ T5237] hrtimer_start_range_ns+0xac8/0xca0 [ 80.545830][ T5237] cpu_clock_event_add+0x180/0x1a0 [ 80.550942][ T5237] event_sched_in+0x832/0xe90 [ 80.555631][ T5237] ? __pfx_event_sched_in+0x10/0x10 [ 80.560841][ T5237] ? rcu_is_watching+0x15/0xb0 [ 80.565601][ T5237] ? lock_release+0xbf/0xa30 [ 80.570195][ T5237] visit_groups_merge+0x1521/0x2fd0 [ 80.575395][ T5237] ? deref_stack_reg+0x17c/0x210 [ 80.580339][ T5237] ? __pfx_visit_groups_merge+0x10/0x10 [ 80.586179][ T5237] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 80.592353][ T5237] __pmu_ctx_sched_in+0x1aa/0x230 [ 80.597385][ T5237] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 80.602934][ T5237] ? kvm_sched_clock_read+0x11/0x20 [ 80.608134][ T5237] ? perf_cgroup_set_timestamp+0x1e9/0x230 [ 80.613943][ T5237] ctx_sched_in+0x4c2/0x600 [ 80.618481][ T5237] ctx_resched+0x560/0x900 [ 80.622909][ T5237] __perf_install_in_context+0x647/0x850 [ 80.628539][ T5237] ? __pfx___perf_install_in_context+0x10/0x10 [ 80.634774][ T5237] remote_function+0xef/0x170 [ 80.639567][ T5237] ? __pfx_remote_function+0x10/0x10 [ 80.644859][ T5237] generic_exec_single+0x336/0x9b0 [ 80.649975][ T5237] ? __pfx_remote_function+0x10/0x10 [ 80.655307][ T5237] ? __pfx_generic_exec_single+0x10/0x10 [ 80.660942][ T5237] ? smp_call_function_single+0xb4/0x1990 [ 80.666665][ T5237] smp_call_function_single+0x3fa/0x1990 [ 80.672316][ T5237] ? __asan_memset+0x23/0x50 [ 80.676905][ T5237] ? __pfx_remote_function+0x10/0x10 [ 80.682189][ T5237] ? __asan_memset+0x23/0x50 [ 80.686779][ T5237] ? lockdep_init_map_type+0xa1/0x910 [ 80.692158][ T5237] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 80.697962][ T5237] ? __pfx_smp_call_function_single+0x10/0x10 [ 80.704029][ T5237] ? __pfx_remote_function+0x10/0x10 [ 80.709310][ T5237] ? __raw_spin_lock_init+0x45/0x100 [ 80.714590][ T5237] ? file_init_path+0x3b/0x570 [ 80.719348][ T5237] ? __asan_memcpy+0x40/0x70 [ 80.723934][ T5237] perf_install_in_context+0x71a/0xb20 [ 80.729400][ T5237] ? __pfx_perf_install_in_context+0x10/0x10 [ 80.735381][ T5237] ? __pfx___perf_install_in_context+0x10/0x10 [ 80.741534][ T5237] ? anon_inode_getfile+0xff/0x180 [ 80.746646][ T5237] __se_sys_perf_event_open+0x31c5/0x38d0 [ 80.752364][ T5237] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 80.757925][ T5237] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 80.763989][ T5237] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.770324][ T5237] ? rcu_is_watching+0x15/0xb0 [ 80.775121][ T5237] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.781448][ T5237] ? rcu_is_watching+0x15/0xb0 [ 80.786224][ T5237] ? __x64_sys_perf_event_open+0x20/0xc0 [ 80.791869][ T5237] do_syscall_64+0xf3/0x230 [ 80.796370][ T5237] ? clear_bhb_loop+0x35/0x90 [ 80.801056][ T5237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.806973][ T5237] RIP: 0033:0x7f3f1e4f8c69 [ 80.811431][ T5237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.831065][ T5237] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 80.839487][ T5237] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 80.847457][ T5237] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 80.855424][ T5237] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [pid 5237] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 7 [pid 5237] exit_group(0) = ? [pid 5237] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5238 ./strace-static-x86_64: Process 5238 attached [ 80.863396][ T5237] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 80.871363][ T5237] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 80.879429][ T5237] [pid 5238] set_robust_list(0x555581c9e660, 24) = 0 [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5238] setpgid(0, 0) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5238] write(3, "1000", 4) = 4 [pid 5238] close(3) = 0 [pid 5238] write(1, "executing program\n", 18executing program ) = 18 [pid 5238] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5238] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5238] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5238] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5238] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5238] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5238] write(6, "8", 1) = 1 [ 81.077127][ T5238] FAULT_INJECTION: forcing a failure. [ 81.077127][ T5238] name failslab, interval 1, probability 0, space 0, times 0 [ 81.089973][ T5238] CPU: 1 UID: 0 PID: 5238 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 81.100271][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 81.110341][ T5238] Call Trace: [ 81.113624][ T5238] [ 81.116556][ T5238] dump_stack_lvl+0x241/0x360 [ 81.121250][ T5238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.126450][ T5238] ? __pfx__printk+0x10/0x10 [ 81.131156][ T5238] ? __pfx___might_resched+0x10/0x10 [ 81.136455][ T5238] should_fail_ex+0x3b0/0x4e0 [ 81.141173][ T5238] ? security_file_alloc+0x32/0x310 [ 81.146397][ T5238] should_failslab+0xac/0x100 [ 81.151113][ T5238] ? security_file_alloc+0x32/0x310 [ 81.156341][ T5238] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 81.161731][ T5238] security_file_alloc+0x32/0x310 [ 81.166767][ T5238] init_file+0x93/0x1e0 [ 81.170956][ T5238] alloc_empty_file+0xb8/0x1d0 [ 81.175753][ T5238] alloc_file_pseudo+0x1da/0x290 [ 81.180700][ T5238] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 81.186193][ T5238] ? rcu_is_watching+0x15/0xb0 [ 81.190968][ T5238] anon_inode_getfile+0xc8/0x180 [ 81.195929][ T5238] __se_sys_perf_event_open+0x25df/0x38d0 [ 81.201662][ T5238] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 81.207218][ T5238] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 81.213331][ T5238] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.219672][ T5238] ? rcu_is_watching+0x15/0xb0 [ 81.224459][ T5238] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.230795][ T5238] ? rcu_is_watching+0x15/0xb0 [ 81.235645][ T5238] ? __x64_sys_perf_event_open+0x20/0xc0 [ 81.241280][ T5238] do_syscall_64+0xf3/0x230 [ 81.245788][ T5238] ? clear_bhb_loop+0x35/0x90 [ 81.250467][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.256369][ T5238] RIP: 0033:0x7f3f1e4f8c69 [ 81.260781][ T5238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.280422][ T5238] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 81.288860][ T5238] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 81.296853][ T5238] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 81.304878][ T5238] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 81.312863][ T5238] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [pid 5238] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5238] exit_group(0) = ? [pid 5238] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5238, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5239 attached , child_tidptr=0x555581c9e650) = 5239 [pid 5239] set_robust_list(0x555581c9e660, 24) = 0 [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [ 81.320845][ T5238] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 81.328863][ T5238] [pid 5239] close(3) = 0 [pid 5239] write(1, "executing program\n", 18executing program ) = 18 [pid 5239] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5239] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5239] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5239] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5239] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5239] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5239] write(6, "8", 1) = 1 [ 81.426906][ T5239] FAULT_INJECTION: forcing a failure. [ 81.426906][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 81.440038][ T5239] CPU: 1 UID: 0 PID: 5239 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 81.450310][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 81.460400][ T5239] Call Trace: [ 81.463683][ T5239] [ 81.466621][ T5239] dump_stack_lvl+0x241/0x360 [ 81.471327][ T5239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.476709][ T5239] ? __pfx__printk+0x10/0x10 [ 81.481321][ T5239] ? __pfx___might_resched+0x10/0x10 [ 81.486638][ T5239] should_fail_ex+0x3b0/0x4e0 [ 81.491375][ T5239] ? security_file_alloc+0x32/0x310 [ 81.496625][ T5239] should_failslab+0xac/0x100 [ 81.501322][ T5239] ? security_file_alloc+0x32/0x310 [ 81.506544][ T5239] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 81.511938][ T5239] security_file_alloc+0x32/0x310 [ 81.516991][ T5239] init_file+0x93/0x1e0 [ 81.521167][ T5239] alloc_empty_file+0xb8/0x1d0 [ 81.525946][ T5239] alloc_file_pseudo+0x1da/0x290 [ 81.530917][ T5239] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 81.536399][ T5239] ? rcu_is_watching+0x15/0xb0 [ 81.541172][ T5239] anon_inode_getfile+0xc8/0x180 [ 81.546124][ T5239] __se_sys_perf_event_open+0x25df/0x38d0 [ 81.551850][ T5239] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 81.557408][ T5239] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 81.563490][ T5239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.569838][ T5239] ? rcu_is_watching+0x15/0xb0 [ 81.574604][ T5239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.581054][ T5239] ? rcu_is_watching+0x15/0xb0 [ 81.585831][ T5239] ? __x64_sys_perf_event_open+0x20/0xc0 [ 81.591492][ T5239] do_syscall_64+0xf3/0x230 [ 81.596098][ T5239] ? clear_bhb_loop+0x35/0x90 [ 81.600835][ T5239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.606907][ T5239] RIP: 0033:0x7f3f1e4f8c69 [ 81.611341][ T5239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.631047][ T5239] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 81.639468][ T5239] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 81.647444][ T5239] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 81.655425][ T5239] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 81.663392][ T5239] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [pid 5239] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5239] exit_group(0) = ? [pid 5239] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5239, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 81.671378][ T5239] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 81.679364][ T5239] restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5240 ./strace-static-x86_64: Process 5240 attached [pid 5240] set_robust_list(0x555581c9e660, 24) = 0 [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5240] setpgid(0, 0) = 0 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5240] write(3, "1000", 4) = 4 [pid 5240] close(3) = 0 executing program [pid 5240] write(1, "executing program\n", 18) = 18 [pid 5240] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5240] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5240] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5240] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5240] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5240] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5240] write(6, "8", 1) = 1 [ 81.851669][ T5240] FAULT_INJECTION: forcing a failure. [ 81.851669][ T5240] name failslab, interval 1, probability 0, space 0, times 0 [ 81.864558][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 81.874858][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 81.884917][ T5240] Call Trace: [ 81.888223][ T5240] [ 81.891152][ T5240] dump_stack_lvl+0x241/0x360 [ 81.895840][ T5240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.901152][ T5240] ? __pfx__printk+0x10/0x10 [ 81.905766][ T5240] ? __pfx___might_resched+0x10/0x10 [ 81.911057][ T5240] should_fail_ex+0x3b0/0x4e0 [ 81.915769][ T5240] ? security_file_alloc+0x32/0x310 [ 81.920973][ T5240] should_failslab+0xac/0x100 [ 81.925651][ T5240] ? security_file_alloc+0x32/0x310 [ 81.930868][ T5240] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 81.936274][ T5240] security_file_alloc+0x32/0x310 [ 81.941302][ T5240] init_file+0x93/0x1e0 [ 81.945459][ T5240] alloc_empty_file+0xb8/0x1d0 [ 81.950223][ T5240] alloc_file_pseudo+0x1da/0x290 [ 81.955159][ T5240] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 81.960624][ T5240] ? rcu_is_watching+0x15/0xb0 [ 81.965399][ T5240] anon_inode_getfile+0xc8/0x180 [ 81.970345][ T5240] __se_sys_perf_event_open+0x25df/0x38d0 [ 81.976076][ T5240] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 81.981644][ T5240] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 81.987732][ T5240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.994062][ T5240] ? rcu_is_watching+0x15/0xb0 [ 81.998823][ T5240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.005243][ T5240] ? rcu_is_watching+0x15/0xb0 [ 82.010005][ T5240] ? __x64_sys_perf_event_open+0x20/0xc0 [ 82.015671][ T5240] do_syscall_64+0xf3/0x230 [ 82.020195][ T5240] ? clear_bhb_loop+0x35/0x90 [ 82.024874][ T5240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.030765][ T5240] RIP: 0033:0x7f3f1e4f8c69 [ 82.035188][ T5240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.054817][ T5240] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 82.063231][ T5240] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 82.071209][ T5240] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 82.079175][ T5240] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 82.087152][ T5240] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [pid 5240] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5240] exit_group(0) = ? [pid 5240] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 82.095115][ T5240] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 82.103088][ T5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5241 ./strace-static-x86_64: Process 5241 attached [pid 5241] set_robust_list(0x555581c9e660, 24) = 0 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5241] setpgid(0, 0) = 0 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5241] write(3, "1000", 4) = 4 [pid 5241] close(3) = 0 [pid 5241] write(1, "executing program\n", 18executing program ) = 18 [pid 5241] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5241] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5241] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5241] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5241] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5241] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5241] write(6, "8", 1) = 1 [ 82.264353][ T5241] FAULT_INJECTION: forcing a failure. [ 82.264353][ T5241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.277445][ T5241] CPU: 0 UID: 0 PID: 5241 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 82.287685][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 82.297743][ T5241] Call Trace: [ 82.301019][ T5241] [ 82.303966][ T5241] dump_stack_lvl+0x241/0x360 [ 82.308655][ T5241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.313852][ T5241] ? __pfx__printk+0x10/0x10 [ 82.318467][ T5241] ? bpf_trace_run2+0x1fc/0x540 [ 82.323314][ T5241] ? rcu_is_watching+0x15/0xb0 [ 82.328073][ T5241] ? bpf_trace_run2+0x1fc/0x540 [ 82.332935][ T5241] ? lock_acquire+0xe3/0x550 [ 82.337546][ T5241] should_fail_ex+0x3b0/0x4e0 [ 82.342245][ T5241] strncpy_from_user+0x36/0x2e0 [ 82.347140][ T5241] strncpy_from_user_nofault+0x71/0x140 [ 82.352680][ T5241] bpf_probe_read_user_str+0x2a/0x70 [ 82.357981][ T5241] ? bpf_trace_run2+0x1fc/0x540 [ 82.362822][ T5241] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 82.368319][ T5241] bpf_trace_run2+0x2ec/0x540 [ 82.372999][ T5241] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.378195][ T5241] ? read_tsc+0x9/0x20 [ 82.382284][ T5241] ? timekeeping_get_ns+0x2c0/0x420 [ 82.387567][ T5241] enqueue_hrtimer+0x35a/0x3c0 [ 82.392326][ T5241] hrtimer_start_range_ns+0xac8/0xca0 [ 82.397715][ T5241] cpu_clock_event_add+0x180/0x1a0 [ 82.402839][ T5241] event_sched_in+0x832/0xe90 [ 82.407519][ T5241] ? __pfx_event_sched_in+0x10/0x10 [ 82.412731][ T5241] ? rcu_is_watching+0x15/0xb0 [ 82.417506][ T5241] ? lock_release+0xbf/0xa30 [ 82.422117][ T5241] visit_groups_merge+0x1521/0x2fd0 [ 82.427315][ T5241] ? deref_stack_reg+0x17c/0x210 [ 82.432255][ T5241] ? __pfx_visit_groups_merge+0x10/0x10 [ 82.437801][ T5241] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 82.443952][ T5241] __pmu_ctx_sched_in+0x1aa/0x230 [ 82.448975][ T5241] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 82.454603][ T5241] ? kvm_sched_clock_read+0x11/0x20 [ 82.459793][ T5241] ? perf_cgroup_set_timestamp+0x1e9/0x230 [ 82.465597][ T5241] ctx_sched_in+0x4c2/0x600 [ 82.470103][ T5241] ctx_resched+0x560/0x900 [ 82.474537][ T5241] __perf_install_in_context+0x647/0x850 [ 82.480164][ T5241] ? __pfx___perf_install_in_context+0x10/0x10 [ 82.486327][ T5241] remote_function+0xef/0x170 [ 82.491017][ T5241] ? __pfx_remote_function+0x10/0x10 [ 82.496301][ T5241] generic_exec_single+0x336/0x9b0 [ 82.501414][ T5241] ? __pfx_remote_function+0x10/0x10 [ 82.506697][ T5241] ? __pfx_generic_exec_single+0x10/0x10 [ 82.512531][ T5241] ? smp_call_function_single+0xb4/0x1990 [ 82.518285][ T5241] smp_call_function_single+0x3fa/0x1990 [ 82.523931][ T5241] ? __asan_memset+0x23/0x50 [ 82.528529][ T5241] ? __pfx_remote_function+0x10/0x10 [ 82.533845][ T5241] ? __asan_memset+0x23/0x50 [ 82.538454][ T5241] ? lockdep_init_map_type+0xa1/0x910 [ 82.543834][ T5241] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 82.549648][ T5241] ? __pfx_smp_call_function_single+0x10/0x10 [ 82.555723][ T5241] ? __pfx_remote_function+0x10/0x10 [ 82.561010][ T5241] ? __raw_spin_lock_init+0x45/0x100 [ 82.566302][ T5241] ? file_init_path+0x3b/0x570 [ 82.571067][ T5241] ? __asan_memcpy+0x40/0x70 [ 82.575653][ T5241] perf_install_in_context+0x71a/0xb20 [ 82.581115][ T5241] ? __pfx_perf_install_in_context+0x10/0x10 [ 82.587099][ T5241] ? __pfx___perf_install_in_context+0x10/0x10 [ 82.593261][ T5241] ? anon_inode_getfile+0xff/0x180 [ 82.598370][ T5241] __se_sys_perf_event_open+0x31c5/0x38d0 [ 82.604083][ T5241] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 82.609642][ T5241] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 82.615706][ T5241] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.622034][ T5241] ? rcu_is_watching+0x15/0xb0 [ 82.626789][ T5241] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.633116][ T5241] ? rcu_is_watching+0x15/0xb0 [ 82.637872][ T5241] ? __x64_sys_perf_event_open+0x20/0xc0 [ 82.643499][ T5241] do_syscall_64+0xf3/0x230 [ 82.648001][ T5241] ? clear_bhb_loop+0x35/0x90 [ 82.652676][ T5241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.658564][ T5241] RIP: 0033:0x7f3f1e4f8c69 [ 82.662973][ T5241] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.682570][ T5241] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 82.690993][ T5241] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 82.698954][ T5241] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 82.706923][ T5241] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [pid 5241] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 7 [pid 5241] exit_group(0) = ? [ 82.714883][ T5241] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 82.722843][ T5241] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 82.730826][ T5241] [pid 5241] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5242 ./strace-static-x86_64: Process 5242 attached [pid 5242] set_robust_list(0x555581c9e660, 24) = 0 [pid 5242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5242] setpgid(0, 0) = 0 [pid 5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5242] write(3, "1000", 4) = 4 [pid 5242] close(3) = 0 executing program [pid 5242] write(1, "executing program\n", 18) = 18 [pid 5242] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5242] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5242] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5242] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5242] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5242] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [ 82.895147][ T5242] FAULT_INJECTION: forcing a failure. [ 82.895147][ T5242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.908219][ T5242] CPU: 0 UID: 0 PID: 5242 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 82.918464][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 82.928509][ T5242] Call Trace: [ 82.931797][ T5242] [ 82.934723][ T5242] dump_stack_lvl+0x241/0x360 [ 82.939408][ T5242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.944601][ T5242] ? __pfx__printk+0x10/0x10 [ 82.949273][ T5242] ? bpf_trace_run2+0x1fc/0x540 [ 82.954208][ T5242] ? rcu_is_watching+0x15/0xb0 [ 82.958970][ T5242] ? bpf_trace_run2+0x1fc/0x540 [ 82.963833][ T5242] ? lock_acquire+0xe3/0x550 [ 82.968428][ T5242] should_fail_ex+0x3b0/0x4e0 [ 82.973129][ T5242] strncpy_from_user+0x36/0x2e0 [ 82.977984][ T5242] strncpy_from_user_nofault+0x71/0x140 [ 82.983527][ T5242] bpf_probe_read_user_str+0x2a/0x70 [ 82.988840][ T5242] ? bpf_trace_run2+0x1fc/0x540 [ 82.993696][ T5242] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 82.999156][ T5242] bpf_trace_run2+0x2ec/0x540 [ 83.003829][ T5242] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.009024][ T5242] ? read_tsc+0x9/0x20 [ 83.013107][ T5242] ? timekeeping_get_ns+0x2c0/0x420 [ 83.018303][ T5242] enqueue_hrtimer+0x35a/0x3c0 [ 83.023087][ T5242] hrtimer_start_range_ns+0xac8/0xca0 [ 83.028474][ T5242] cpu_clock_event_add+0x180/0x1a0 [ 83.033580][ T5242] event_sched_in+0x832/0xe90 [ 83.038269][ T5242] ? __pfx_event_sched_in+0x10/0x10 [ 83.043482][ T5242] ? rcu_is_watching+0x15/0xb0 [ 83.048257][ T5242] ? lock_release+0xbf/0xa30 [ 83.052849][ T5242] visit_groups_merge+0x1521/0x2fd0 [ 83.058057][ T5242] ? deref_stack_reg+0x17c/0x210 [ 83.062998][ T5242] ? __pfx_visit_groups_merge+0x10/0x10 [ 83.068551][ T5242] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.074784][ T5242] __pmu_ctx_sched_in+0x1aa/0x230 [ 83.079807][ T5242] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 83.085526][ T5242] ? kvm_sched_clock_read+0x11/0x20 [ 83.090721][ T5242] ? perf_cgroup_set_timestamp+0x1e9/0x230 [ 83.096524][ T5242] ctx_sched_in+0x4c2/0x600 [ 83.101027][ T5242] ctx_resched+0x560/0x900 [ 83.105442][ T5242] __perf_install_in_context+0x647/0x850 [ 83.111074][ T5242] ? __pfx___perf_install_in_context+0x10/0x10 [ 83.117217][ T5242] remote_function+0xef/0x170 [ 83.121895][ T5242] ? __pfx_remote_function+0x10/0x10 [ 83.127179][ T5242] generic_exec_single+0x336/0x9b0 [ 83.132291][ T5242] ? __pfx_remote_function+0x10/0x10 [ 83.137574][ T5242] ? __pfx_generic_exec_single+0x10/0x10 [ 83.143209][ T5242] ? smp_call_function_single+0xb4/0x1990 [ 83.148928][ T5242] smp_call_function_single+0x3fa/0x1990 [ 83.154562][ T5242] ? __asan_memset+0x23/0x50 [ 83.159150][ T5242] ? __pfx_remote_function+0x10/0x10 [ 83.164434][ T5242] ? __asan_memset+0x23/0x50 [ 83.169018][ T5242] ? lockdep_init_map_type+0xa1/0x910 [ 83.174393][ T5242] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 83.180205][ T5242] ? __pfx_smp_call_function_single+0x10/0x10 [ 83.186287][ T5242] ? __pfx_remote_function+0x10/0x10 [ 83.191574][ T5242] ? __raw_spin_lock_init+0x45/0x100 [ 83.196854][ T5242] ? file_init_path+0x3b/0x570 [ 83.201627][ T5242] ? __asan_memcpy+0x40/0x70 [ 83.206232][ T5242] perf_install_in_context+0x71a/0xb20 [ 83.211690][ T5242] ? __pfx_perf_install_in_context+0x10/0x10 [ 83.217666][ T5242] ? __pfx___perf_install_in_context+0x10/0x10 [ 83.223989][ T5242] ? anon_inode_getfile+0xff/0x180 [ 83.229113][ T5242] __se_sys_perf_event_open+0x31c5/0x38d0 [ 83.234847][ T5242] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 83.240432][ T5242] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 83.246501][ T5242] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.252825][ T5242] ? rcu_is_watching+0x15/0xb0 [ 83.257579][ T5242] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.263903][ T5242] ? rcu_is_watching+0x15/0xb0 [ 83.268661][ T5242] ? __x64_sys_perf_event_open+0x20/0xc0 [ 83.274294][ T5242] do_syscall_64+0xf3/0x230 [ 83.278795][ T5242] ? clear_bhb_loop+0x35/0x90 [ 83.283471][ T5242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.289362][ T5242] RIP: 0033:0x7f3f1e4f8c69 [ 83.293781][ T5242] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.313481][ T5242] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 83.321914][ T5242] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 83.329899][ T5242] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 83.337949][ T5242] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [pid 5242] write(6, "8", 1) = 1 [pid 5242] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 7 [pid 5242] exit_group(0) = ? [pid 5242] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5242, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5243 ./strace-static-x86_64: Process 5243 attached [ 83.345938][ T5242] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 83.353902][ T5242] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 83.361908][ T5242] [pid 5243] set_robust_list(0x555581c9e660, 24) = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] setpgid(0, 0) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5243] write(3, "1000", 4) = 4 [pid 5243] close(3) = 0 [pid 5243] write(1, "executing program\n", 18executing program ) = 18 [pid 5243] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5243] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5243] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5243] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5243] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5243] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5243] write(6, "8", 1) = 1 [ 83.482760][ T5243] FAULT_INJECTION: forcing a failure. [ 83.482760][ T5243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.495862][ T5243] CPU: 0 UID: 0 PID: 5243 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 83.506126][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.516287][ T5243] Call Trace: [ 83.519586][ T5243] [ 83.522534][ T5243] dump_stack_lvl+0x241/0x360 [ 83.527716][ T5243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.532944][ T5243] ? __pfx__printk+0x10/0x10 [ 83.537584][ T5243] ? bpf_trace_run2+0x1fc/0x540 [ 83.542488][ T5243] ? rcu_is_watching+0x15/0xb0 [ 83.547283][ T5243] ? bpf_trace_run2+0x1fc/0x540 [ 83.552149][ T5243] ? lock_acquire+0xe3/0x550 [ 83.556758][ T5243] should_fail_ex+0x3b0/0x4e0 [ 83.561454][ T5243] strncpy_from_user+0x36/0x2e0 [ 83.566325][ T5243] strncpy_from_user_nofault+0x71/0x140 [ 83.571883][ T5243] bpf_probe_read_user_str+0x2a/0x70 [ 83.577187][ T5243] ? bpf_trace_run2+0x1fc/0x540 [ 83.582052][ T5243] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 83.587521][ T5243] bpf_trace_run2+0x2ec/0x540 [ 83.592212][ T5243] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.597445][ T5243] ? read_tsc+0x9/0x20 [ 83.601549][ T5243] ? timekeeping_get_ns+0x2c0/0x420 [ 83.606877][ T5243] enqueue_hrtimer+0x35a/0x3c0 [ 83.611656][ T5243] hrtimer_start_range_ns+0xac8/0xca0 [ 83.617053][ T5243] cpu_clock_event_add+0x180/0x1a0 [ 83.622202][ T5243] event_sched_in+0x832/0xe90 [ 83.626912][ T5243] ? __pfx_event_sched_in+0x10/0x10 [ 83.632139][ T5243] ? rcu_is_watching+0x15/0xb0 [ 83.636914][ T5243] ? lock_release+0xbf/0xa30 [ 83.641534][ T5243] visit_groups_merge+0x1521/0x2fd0 [ 83.646768][ T5243] ? deref_stack_reg+0x17c/0x210 [ 83.651732][ T5243] ? __pfx_visit_groups_merge+0x10/0x10 [ 83.657306][ T5243] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.663490][ T5243] __pmu_ctx_sched_in+0x1aa/0x230 [ 83.668532][ T5243] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 83.674089][ T5243] ? kvm_sched_clock_read+0x11/0x20 [ 83.679294][ T5243] ? perf_cgroup_set_timestamp+0x1e9/0x230 [ 83.685110][ T5243] ctx_sched_in+0x4c2/0x600 [ 83.689633][ T5243] ctx_resched+0x560/0x900 [ 83.694081][ T5243] __perf_install_in_context+0x647/0x850 [ 83.699736][ T5243] ? __pfx___perf_install_in_context+0x10/0x10 [ 83.705898][ T5243] remote_function+0xef/0x170 [ 83.710612][ T5243] ? __pfx_remote_function+0x10/0x10 [ 83.715910][ T5243] generic_exec_single+0x336/0x9b0 [ 83.721044][ T5243] ? __pfx_remote_function+0x10/0x10 [ 83.726340][ T5243] ? __pfx_generic_exec_single+0x10/0x10 [ 83.731988][ T5243] ? smp_call_function_single+0xb4/0x1990 [ 83.737724][ T5243] smp_call_function_single+0x3fa/0x1990 [ 83.743373][ T5243] ? __asan_memset+0x23/0x50 [ 83.747973][ T5243] ? __pfx_remote_function+0x10/0x10 [ 83.753268][ T5243] ? __asan_memset+0x23/0x50 [ 83.757914][ T5243] ? lockdep_init_map_type+0xa1/0x910 [ 83.763299][ T5243] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 83.769134][ T5243] ? __pfx_smp_call_function_single+0x10/0x10 [ 83.775230][ T5243] ? __pfx_remote_function+0x10/0x10 [ 83.780531][ T5243] ? __raw_spin_lock_init+0x45/0x100 [ 83.785827][ T5243] ? file_init_path+0x3b/0x570 [ 83.790599][ T5243] ? __asan_memcpy+0x40/0x70 [ 83.795204][ T5243] perf_install_in_context+0x71a/0xb20 [ 83.800681][ T5243] ? __pfx_perf_install_in_context+0x10/0x10 [ 83.806670][ T5243] ? __pfx___perf_install_in_context+0x10/0x10 [ 83.812831][ T5243] ? anon_inode_getfile+0xff/0x180 [ 83.817953][ T5243] __se_sys_perf_event_open+0x31c5/0x38d0 [ 83.823687][ T5243] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 83.829246][ T5243] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 83.835324][ T5243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.841662][ T5243] ? rcu_is_watching+0x15/0xb0 [ 83.846433][ T5243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.852773][ T5243] ? rcu_is_watching+0x15/0xb0 [ 83.857544][ T5243] ? __x64_sys_perf_event_open+0x20/0xc0 [ 83.863210][ T5243] do_syscall_64+0xf3/0x230 [ 83.867724][ T5243] ? clear_bhb_loop+0x35/0x90 [ 83.872409][ T5243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.878312][ T5243] RIP: 0033:0x7f3f1e4f8c69 [ 83.882731][ T5243] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.902338][ T5243] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 83.910754][ T5243] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 83.918741][ T5243] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 83.926724][ T5243] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [pid 5243] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 7 [pid 5243] exit_group(0) = ? [pid 5243] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 83.934692][ T5243] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 83.942661][ T5243] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 83.950648][ T5243] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5244 attached , child_tidptr=0x555581c9e650) = 5244 [pid 5244] set_robust_list(0x555581c9e660, 24) = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setpgid(0, 0) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1000", 4) = 4 [pid 5244] close(3) = 0 executing program [pid 5244] write(1, "executing program\n", 18) = 18 [pid 5244] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5244] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5244] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5244] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5244] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5244] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5244] write(6, "8", 1) = 1 [ 84.110017][ T5244] FAULT_INJECTION: forcing a failure. [ 84.110017][ T5244] name failslab, interval 1, probability 0, space 0, times 0 [ 84.122924][ T5244] CPU: 0 UID: 0 PID: 5244 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 84.133196][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 84.143245][ T5244] Call Trace: [ 84.146519][ T5244] [ 84.149449][ T5244] dump_stack_lvl+0x241/0x360 [ 84.154140][ T5244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.159356][ T5244] ? __pfx__printk+0x10/0x10 [ 84.163958][ T5244] ? __pfx___might_resched+0x10/0x10 [ 84.169243][ T5244] should_fail_ex+0x3b0/0x4e0 [ 84.173922][ T5244] ? security_file_alloc+0x32/0x310 [ 84.179140][ T5244] should_failslab+0xac/0x100 [ 84.183827][ T5244] ? security_file_alloc+0x32/0x310 [ 84.189025][ T5244] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 84.194401][ T5244] security_file_alloc+0x32/0x310 [ 84.199428][ T5244] init_file+0x93/0x1e0 [ 84.203596][ T5244] alloc_empty_file+0xb8/0x1d0 [ 84.208364][ T5244] alloc_file_pseudo+0x1da/0x290 [ 84.213297][ T5244] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 84.218927][ T5244] ? rcu_is_watching+0x15/0xb0 [ 84.223688][ T5244] anon_inode_getfile+0xc8/0x180 [ 84.228630][ T5244] __se_sys_perf_event_open+0x25df/0x38d0 [ 84.234440][ T5244] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 84.239989][ T5244] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 84.246056][ T5244] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.252385][ T5244] ? rcu_is_watching+0x15/0xb0 [ 84.257145][ T5244] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.263473][ T5244] ? rcu_is_watching+0x15/0xb0 [ 84.268243][ T5244] ? __x64_sys_perf_event_open+0x20/0xc0 [ 84.273874][ T5244] do_syscall_64+0xf3/0x230 [ 84.278375][ T5244] ? clear_bhb_loop+0x35/0x90 [ 84.283051][ T5244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.288937][ T5244] RIP: 0033:0x7f3f1e4f8c69 [ 84.293358][ T5244] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.313063][ T5244] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 84.321481][ T5244] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 84.329466][ T5244] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 84.337516][ T5244] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 84.345477][ T5244] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [pid 5244] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5244] exit_group(0) = ? [pid 5244] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5245 ./strace-static-x86_64: Process 5245 attached [ 84.353439][ T5244] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 84.361496][ T5244] [pid 5245] set_robust_list(0x555581c9e660, 24) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5245] setpgid(0, 0) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5245] write(3, "1000", 4) = 4 [pid 5245] close(3) = 0 executing program [pid 5245] write(1, "executing program\n", 18) = 18 [pid 5245] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5245] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5245] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5245] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5245] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5245] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5245] write(6, "8", 1) = 1 [ 84.520501][ T5245] FAULT_INJECTION: forcing a failure. [ 84.520501][ T5245] name failslab, interval 1, probability 0, space 0, times 0 [ 84.533321][ T5245] CPU: 0 UID: 0 PID: 5245 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 84.543591][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 84.553660][ T5245] Call Trace: [ 84.556938][ T5245] [ 84.559875][ T5245] dump_stack_lvl+0x241/0x360 [ 84.564564][ T5245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.569857][ T5245] ? __pfx__printk+0x10/0x10 [ 84.574449][ T5245] ? __pfx___might_resched+0x10/0x10 [ 84.579758][ T5245] should_fail_ex+0x3b0/0x4e0 [ 84.584469][ T5245] ? security_file_alloc+0x32/0x310 [ 84.589706][ T5245] should_failslab+0xac/0x100 [ 84.594393][ T5245] ? security_file_alloc+0x32/0x310 [ 84.599597][ T5245] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 84.604993][ T5245] security_file_alloc+0x32/0x310 [ 84.610041][ T5245] init_file+0x93/0x1e0 [ 84.614197][ T5245] alloc_empty_file+0xb8/0x1d0 [ 84.618963][ T5245] alloc_file_pseudo+0x1da/0x290 [ 84.623916][ T5245] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 84.629376][ T5245] ? rcu_is_watching+0x15/0xb0 [ 84.634144][ T5245] anon_inode_getfile+0xc8/0x180 [ 84.639101][ T5245] __se_sys_perf_event_open+0x25df/0x38d0 [ 84.644847][ T5245] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 84.650413][ T5245] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 84.656486][ T5245] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.662813][ T5245] ? rcu_is_watching+0x15/0xb0 [ 84.667575][ T5245] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.673911][ T5245] ? rcu_is_watching+0x15/0xb0 [ 84.678672][ T5245] ? __x64_sys_perf_event_open+0x20/0xc0 [ 84.684303][ T5245] do_syscall_64+0xf3/0x230 [ 84.688827][ T5245] ? clear_bhb_loop+0x35/0x90 [ 84.693506][ T5245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.699400][ T5245] RIP: 0033:0x7f3f1e4f8c69 [ 84.703897][ T5245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.723520][ T5245] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 84.731932][ T5245] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 84.739908][ T5245] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 84.747882][ T5245] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 84.755851][ T5245] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 84.763825][ T5245] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [pid 5245] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5245] exit_group(0) = ? [pid 5245] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5246 ./strace-static-x86_64: Process 5246 attached [ 84.771803][ T5245] [pid 5246] set_robust_list(0x555581c9e660, 24) = 0 [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5246] setpgid(0, 0) = 0 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5246] write(3, "1000", 4) = 4 [pid 5246] close(3) = 0 [pid 5246] write(1, "executing program\n", 18executing program ) = 18 [pid 5246] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5246] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5246] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5246] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5246] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5246] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5246] write(6, "8", 1) = 1 [ 84.992311][ T5246] FAULT_INJECTION: forcing a failure. [ 84.992311][ T5246] name failslab, interval 1, probability 0, space 0, times 0 [ 85.005034][ T5246] CPU: 1 UID: 0 PID: 5246 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 85.015289][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.025887][ T5246] Call Trace: [ 85.029177][ T5246] [ 85.032121][ T5246] dump_stack_lvl+0x241/0x360 [ 85.036809][ T5246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.042025][ T5246] ? __pfx__printk+0x10/0x10 [ 85.046630][ T5246] ? __pfx___might_resched+0x10/0x10 [ 85.051915][ T5246] ? trace_contention_end+0x3c/0x120 [ 85.057199][ T5246] should_fail_ex+0x3b0/0x4e0 [ 85.061879][ T5246] should_failslab+0xac/0x100 [ 85.066554][ T5246] ? find_get_pmu_context+0x83/0x830 [ 85.071840][ T5246] __kmalloc_cache_noprof+0x6c/0x2c0 [ 85.077154][ T5246] find_get_pmu_context+0x83/0x830 [ 85.082264][ T5246] ? bpf_lsm_capable+0x9/0x10 [ 85.086951][ T5246] __se_sys_perf_event_open+0x1461/0x38d0 [ 85.092676][ T5246] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 85.098239][ T5246] ? rcu_is_watching+0x15/0xb0 [ 85.103007][ T5246] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 85.109081][ T5246] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.115418][ T5246] ? rcu_is_watching+0x15/0xb0 [ 85.120196][ T5246] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.126533][ T5246] ? rcu_is_watching+0x15/0xb0 [ 85.131300][ T5246] ? __x64_sys_perf_event_open+0x20/0xc0 [ 85.136940][ T5246] do_syscall_64+0xf3/0x230 [ 85.141456][ T5246] ? clear_bhb_loop+0x35/0x90 [ 85.146150][ T5246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.152054][ T5246] RIP: 0033:0x7f3f1e4f8c69 [ 85.156472][ T5246] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.176079][ T5246] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 85.184507][ T5246] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [pid 5246] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5246] exit_group(0) = ? [pid 5246] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5247 ./strace-static-x86_64: Process 5247 attached [ 85.192481][ T5246] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 85.200457][ T5246] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 85.208437][ T5246] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 85.216408][ T5246] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 85.224399][ T5246] [pid 5247] set_robust_list(0x555581c9e660, 24) = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] write(3, "1000", 4) = 4 [pid 5247] close(3) = 0 executing program [pid 5247] write(1, "executing program\n", 18) = 18 [pid 5247] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5247] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5247] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5247] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5247] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5247] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5247] write(6, "8", 1) = 1 [ 85.405164][ T5247] FAULT_INJECTION: forcing a failure. [ 85.405164][ T5247] name failslab, interval 1, probability 0, space 0, times 0 [ 85.417989][ T5247] CPU: 1 UID: 0 PID: 5247 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 85.428247][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.438301][ T5247] Call Trace: [ 85.441575][ T5247] [ 85.444520][ T5247] dump_stack_lvl+0x241/0x360 [ 85.449210][ T5247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.454410][ T5247] ? __pfx__printk+0x10/0x10 [ 85.459027][ T5247] ? __pfx___might_resched+0x10/0x10 [ 85.464329][ T5247] should_fail_ex+0x3b0/0x4e0 [ 85.469108][ T5247] ? security_file_alloc+0x32/0x310 [ 85.474316][ T5247] should_failslab+0xac/0x100 [ 85.478993][ T5247] ? security_file_alloc+0x32/0x310 [ 85.484219][ T5247] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 85.489593][ T5247] security_file_alloc+0x32/0x310 [ 85.494643][ T5247] init_file+0x93/0x1e0 [ 85.498802][ T5247] alloc_empty_file+0xb8/0x1d0 [ 85.503567][ T5247] alloc_file_pseudo+0x1da/0x290 [ 85.508508][ T5247] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 85.513998][ T5247] ? rcu_is_watching+0x15/0xb0 [ 85.518766][ T5247] anon_inode_getfile+0xc8/0x180 [ 85.523806][ T5247] __se_sys_perf_event_open+0x25df/0x38d0 [ 85.529543][ T5247] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 85.535097][ T5247] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 85.541171][ T5247] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.547501][ T5247] ? rcu_is_watching+0x15/0xb0 [ 85.552266][ T5247] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.558610][ T5247] ? rcu_is_watching+0x15/0xb0 [ 85.563374][ T5247] ? __x64_sys_perf_event_open+0x20/0xc0 [ 85.569009][ T5247] do_syscall_64+0xf3/0x230 [ 85.573536][ T5247] ? clear_bhb_loop+0x35/0x90 [ 85.578219][ T5247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.584134][ T5247] RIP: 0033:0x7f3f1e4f8c69 [ 85.588546][ T5247] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.608161][ T5247] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 85.616701][ T5247] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 85.624696][ T5247] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 85.632846][ T5247] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 85.640838][ T5247] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [pid 5247] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5247] exit_group(0) = ? [pid 5247] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 85.648832][ T5247] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 85.656813][ T5247] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5248 attached , child_tidptr=0x555581c9e650) = 5248 [pid 5248] set_robust_list(0x555581c9e660, 24) = 0 [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5248] setpgid(0, 0) = 0 [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5248] write(3, "1000", 4) = 4 [pid 5248] close(3) = 0 [pid 5248] write(1, "executing program\n", 18executing program ) = 18 [pid 5248] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5248] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5248] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5248] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5248] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5248] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5248] write(6, "8", 1) = 1 [pid 5248] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 7 [pid 5248] exit_group(0) = ? [pid 5248] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5248, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5249 ./strace-static-x86_64: Process 5249 attached [pid 5249] set_robust_list(0x555581c9e660, 24) = 0 [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5249] setpgid(0, 0) = 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5249] write(3, "1000", 4) = 4 [pid 5249] close(3) = 0 [pid 5249] write(1, "executing program\n", 18executing program ) = 18 [pid 5249] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5249] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5249] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5249] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5249] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5249] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5249] write(6, "8", 1) = 1 [ 86.044218][ T5249] FAULT_INJECTION: forcing a failure. [ 86.044218][ T5249] name failslab, interval 1, probability 0, space 0, times 0 [ 86.057224][ T5249] CPU: 1 UID: 0 PID: 5249 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 86.067475][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.077530][ T5249] Call Trace: [ 86.080822][ T5249] [ 86.083744][ T5249] dump_stack_lvl+0x241/0x360 [ 86.088435][ T5249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.093647][ T5249] ? __pfx__printk+0x10/0x10 [ 86.098241][ T5249] ? __pfx___might_resched+0x10/0x10 [ 86.103622][ T5249] should_fail_ex+0x3b0/0x4e0 [ 86.108304][ T5249] ? security_file_alloc+0x32/0x310 [ 86.113503][ T5249] should_failslab+0xac/0x100 [ 86.118184][ T5249] ? security_file_alloc+0x32/0x310 [ 86.123401][ T5249] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 86.128798][ T5249] security_file_alloc+0x32/0x310 [ 86.133825][ T5249] init_file+0x93/0x1e0 [ 86.137984][ T5249] alloc_empty_file+0xb8/0x1d0 [ 86.142748][ T5249] alloc_file_pseudo+0x1da/0x290 [ 86.147709][ T5249] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 86.153173][ T5249] ? rcu_is_watching+0x15/0xb0 [ 86.157953][ T5249] anon_inode_getfile+0xc8/0x180 [ 86.162896][ T5249] __se_sys_perf_event_open+0x25df/0x38d0 [ 86.168632][ T5249] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 86.174204][ T5249] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 86.180277][ T5249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.186626][ T5249] ? rcu_is_watching+0x15/0xb0 [ 86.191406][ T5249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.197735][ T5249] ? rcu_is_watching+0x15/0xb0 [ 86.202494][ T5249] ? __x64_sys_perf_event_open+0x20/0xc0 [ 86.208132][ T5249] do_syscall_64+0xf3/0x230 [ 86.212631][ T5249] ? clear_bhb_loop+0x35/0x90 [ 86.217314][ T5249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.223219][ T5249] RIP: 0033:0x7f3f1e4f8c69 [ 86.227635][ T5249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.247348][ T5249] RSP: 002b:00007ffee8508bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 86.255774][ T5249] RAX: ffffffffffffffda RBX: 00007ffee8508bf0 RCX: 00007f3f1e4f8c69 [ 86.263748][ T5249] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 86.271740][ T5249] RBP: 0000000000000001 R08: 0000000000000000 R09: 00000000000000a0 [ 86.279712][ T5249] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [pid 5249] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=511, sample_type=0, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5249] exit_group(0) = ? [pid 5249] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 86.287678][ T5249] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 86.295689][ T5249] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581c9e650) = 5250 ./strace-static-x86_64: Process 5250 attached [pid 5250] set_robust_list(0x555581c9e660, 24) = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5250] write(3, "1000", 4) = 4 [pid 5250] close(3) = 0 executing program [pid 5250] write(1, "executing program\n", 18) = 18 [pid 5250] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5250] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_ARRAY, key_size=4, value_size=6, max_entries=5, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 80) = 3 [pid 5250] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x20000440, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5250] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=12, insns=0x20000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 4 [pid 5250] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="hrtimer_start", prog_fd=4}}, 61) = 5 [pid 5250] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5250] write(6, "8", 1) = 1 [ 86.456763][ T5250] FAULT_INJECTION: forcing a failure. [ 86.456763][ T5250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.469877][ T5250] CPU: 0 UID: 0 PID: 5250 Comm: syz-executor228 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 86.480145][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.490219][ T5250] Call Trace: [ 86.493526][ T5250] [ 86.496457][ T5250] dump_stack_lvl+0x241/0x360 [ 86.501168][ T5250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.506396][ T5250] ? __pfx__printk+0x10/0x10 [ 86.510993][ T5250] ? bpf_trace_run2+0x1fc/0x540 [ 86.515840][ T5250] ? rcu_is_watching+0x15/0xb0 [ 86.520603][ T5250] ? bpf_trace_run2+0x1fc/0x540 [ 86.525471][ T5250] ? lock_acquire+0xe3/0x550 [ 86.530108][ T5250] should_fail_ex+0x3b0/0x4e0 [ 86.534811][ T5250] strncpy_from_user+0x36/0x2e0 [ 86.539710][ T5250] strncpy_from_user_nofault+0x71/0x140 [ 86.545291][ T5250] bpf_probe_read_user_str+0x2a/0x70 [ 86.550601][ T5250] ? bpf_trace_run2+0x1fc/0x540 [ 86.555454][ T5250] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 86.560927][ T5250] bpf_trace_run2+0x2ec/0x540 [ 86.565607][ T5250] ? __pfx_bpf_trace_run2+0x10/0x10 [ 86.570804][ T5250] ? read_tsc+0x9/0x20 [ 86.574873][ T5250] ? timekeeping_get_ns+0x2c0/0x420 [ 86.580074][ T5250] enqueue_hrtimer+0x35a/0x3c0 [ 86.584839][ T5250] hrtimer_start_range_ns+0xac8/0xca0 [ 86.590220][ T5250] cpu_clock_event_add+0x180/0x1a0 [ 86.595356][ T5250] event_sched_in+0x832/0xe90 [ 86.600068][ T5250] ? __asan_memcpy+0x40/0x70