./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2809039234 <...> Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. execve("./syz-executor2809039234", ["./syz-executor2809039234"], 0x7ffd0ca3fb30 /* 10 vars */) = 0 brk(NULL) = 0x555556247000 brk(0x555556247c40) = 0x555556247c40 arch_prctl(ARCH_SET_FS, 0x555556247300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2809039234", 4096) = 28 brk(0x555556268c40) = 0x555556268c40 brk(0x555556269000) = 0x555556269000 mprotect(0x7f82c42bf000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5084 attached , child_tidptr=0x5555562475d0) = 5084 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] write(3, "1000", 4) = 4 [pid 5084] close(3) = 0 [pid 5084] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5084] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5084] write(4, "4", 1) = 1 [ 74.715772][ T5084] FAULT_INJECTION: forcing a failure. [ 74.715772][ T5084] name failslab, interval 1, probability 0, space 0, times 1 [ 74.728579][ T5084] CPU: 1 PID: 5084 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 74.738507][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 74.748595][ T5084] Call Trace: [ 74.751894][ T5084] [ 74.754859][ T5084] dump_stack_lvl+0x136/0x150 [ 74.759612][ T5084] should_fail_ex+0x4a3/0x5b0 [ 74.764344][ T5084] should_failslab+0x9/0x20 [ 74.768899][ T5084] __kmem_cache_alloc_node+0x5b/0x320 [ 74.774306][ T5084] ? tomoyo_init_log+0x1290/0x1f00 [ 74.779469][ T5084] ? tomoyo_init_log+0x1290/0x1f00 [ 74.784614][ T5084] __kmalloc+0x4e/0x190 [ 74.788797][ T5084] tomoyo_init_log+0x1290/0x1f00 [ 74.794145][ T5084] ? common_lsm_audit+0x1ed0/0x1ed0 [ 74.799399][ T5084] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 74.805237][ T5084] tomoyo_supervisor+0x34e/0xec0 [ 74.810209][ T5084] ? tomoyo_profile+0x60/0x60 [ 74.814922][ T5084] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.820285][ T5084] tomoyo_path_number_perm+0x413/0x570 [ 74.825790][ T5084] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 74.831668][ T5084] ? rcu_is_watching+0x12/0xb0 [ 74.836523][ T5084] ? find_held_lock+0x2d/0x110 [ 74.841354][ T5084] ? ptrace_notify+0xfe/0x140 [ 74.846083][ T5084] ? lock_downgrade+0x690/0x690 [ 74.850981][ T5084] security_file_ioctl+0x54/0xb0 [ 74.855957][ T5084] __x64_sys_ioctl+0xb7/0x210 [ 74.860675][ T5084] do_syscall_64+0x39/0xb0 [ 74.865152][ T5084] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.871125][ T5084] RIP: 0033:0x7f82c4252049 [ 74.875602][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.895255][ T5084] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.903701][ T5084] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [pid 5084] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5084] exit_group(0) = ? [pid 5084] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5086 attached , child_tidptr=0x5555562475d0) = 5086 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5086] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5086] write(4, "4", 1) = 1 [ 74.911716][ T5084] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 74.919712][ T5084] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 74.927717][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 74.935712][ T5084] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 74.943814][ T5084] [ 74.963324][ T5086] FAULT_INJECTION: forcing a failure. [ 74.963324][ T5086] name failslab, interval 1, probability 0, space 0, times 0 [ 74.976116][ T5086] CPU: 0 PID: 5086 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 74.986067][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 74.996162][ T5086] Call Trace: [ 74.999451][ T5086] [ 75.002388][ T5086] dump_stack_lvl+0x136/0x150 [ 75.007087][ T5086] should_fail_ex+0x4a3/0x5b0 [ 75.011791][ T5086] should_failslab+0x9/0x20 [ 75.016461][ T5086] __kmem_cache_alloc_node+0x5b/0x320 [ 75.021857][ T5086] ? tomoyo_init_log+0x191/0x1f00 [ 75.026920][ T5086] kmalloc_trace+0x26/0xe0 [ 75.031363][ T5086] tomoyo_init_log+0x191/0x1f00 [ 75.036254][ T5086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.042186][ T5086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.048125][ T5086] ? vsnprintf+0x4df/0x1710 [ 75.052661][ T5086] ? common_lsm_audit+0x1ed0/0x1ed0 [ 75.057881][ T5086] ? tomoyo_profile+0x46/0x60 [ 75.062592][ T5086] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 75.068443][ T5086] tomoyo_supervisor+0x34e/0xec0 [ 75.073431][ T5086] ? tomoyo_profile+0x60/0x60 [ 75.078138][ T5086] ? mark_held_locks+0x9f/0xe0 [ 75.082975][ T5086] ? tomoyo_fill_path_info+0x1ec/0x420 [ 75.088497][ T5086] tomoyo_path_number_perm+0x413/0x570 [ 75.093979][ T5086] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 75.099816][ T5086] ? rcu_is_watching+0x12/0xb0 [ 75.104620][ T5086] ? find_held_lock+0x2d/0x110 [ 75.109410][ T5086] ? ptrace_notify+0xfe/0x140 [ 75.114107][ T5086] ? lock_downgrade+0x690/0x690 [ 75.119005][ T5086] security_file_ioctl+0x54/0xb0 [ 75.123977][ T5086] __x64_sys_ioctl+0xb7/0x210 [ 75.128680][ T5086] do_syscall_64+0x39/0xb0 [ 75.133124][ T5086] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.139117][ T5086] RIP: 0033:0x7f82c4252049 [ 75.143570][ T5086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [pid 5086] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5086] exit_group(0) = ? [pid 5086] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached , child_tidptr=0x5555562475d0) = 5088 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5088] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5088] write(4, "4", 1) = 1 [ 75.163199][ T5086] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.171635][ T5086] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [ 75.179615][ T5086] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 75.187590][ T5086] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 75.195578][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 75.203559][ T5086] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 75.211560][ T5086] [ 75.234747][ T5088] FAULT_INJECTION: forcing a failure. [ 75.234747][ T5088] name failslab, interval 1, probability 0, space 0, times 0 [ 75.247594][ T5088] CPU: 0 PID: 5088 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 75.257526][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 75.267605][ T5088] Call Trace: [ 75.270886][ T5088] [ 75.273837][ T5088] dump_stack_lvl+0x136/0x150 [ 75.278535][ T5088] should_fail_ex+0x4a3/0x5b0 [ 75.283238][ T5088] should_failslab+0x9/0x20 [ 75.288028][ T5088] __kmem_cache_alloc_node+0x5b/0x320 [ 75.293420][ T5088] ? tomoyo_init_log+0x1290/0x1f00 [ 75.298578][ T5088] ? from_kuid+0x89/0xc0 [ 75.302938][ T5088] ? tomoyo_init_log+0x1290/0x1f00 [ 75.308095][ T5088] __kmalloc+0x4e/0x190 [ 75.312294][ T5088] tomoyo_init_log+0x1290/0x1f00 [ 75.317299][ T5088] ? common_lsm_audit+0x1ed0/0x1ed0 [ 75.322539][ T5088] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 75.328404][ T5088] tomoyo_supervisor+0x34e/0xec0 [ 75.333388][ T5088] ? tomoyo_profile+0x60/0x60 [ 75.338094][ T5088] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.343381][ T5088] tomoyo_path_number_perm+0x413/0x570 [ 75.348861][ T5088] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 75.354699][ T5088] ? rcu_is_watching+0x12/0xb0 [ 75.359515][ T5088] ? asm_common_interrupt+0x26/0x40 [ 75.364743][ T5088] ? preempt_schedule_thunk+0x1a/0x20 [ 75.370157][ T5088] ? preempt_schedule_common+0x45/0xb0 [ 75.375639][ T5088] ? preempt_schedule_thunk+0x1a/0x20 [ 75.381041][ T5088] security_file_ioctl+0x54/0xb0 [ 75.386006][ T5088] __x64_sys_ioctl+0xb7/0x210 [ 75.390702][ T5088] do_syscall_64+0x39/0xb0 [ 75.395135][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.401047][ T5088] RIP: 0033:0x7f82c4252049 [ 75.405471][ T5088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 75.425088][ T5088] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [pid 5088] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5088] exit_group(0) = ? [pid 5088] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached , child_tidptr=0x5555562475d0) = 5090 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5090] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5090] write(4, "4", 1) = 1 [ 75.433524][ T5088] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [ 75.441504][ T5088] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 75.449486][ T5088] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 75.457464][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 75.465444][ T5088] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 75.473438][ T5088] [ 75.491963][ T5090] FAULT_INJECTION: forcing a failure. [ 75.491963][ T5090] name failslab, interval 1, probability 0, space 0, times 0 [ 75.504761][ T5090] CPU: 0 PID: 5090 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 75.514689][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 75.524759][ T5090] Call Trace: [ 75.528047][ T5090] [ 75.530990][ T5090] dump_stack_lvl+0x136/0x150 [ 75.535695][ T5090] should_fail_ex+0x4a3/0x5b0 [ 75.540403][ T5090] should_failslab+0x9/0x20 [ 75.544935][ T5090] __kmem_cache_alloc_node+0x5b/0x320 [ 75.550339][ T5090] ? tomoyo_init_log+0x1290/0x1f00 [ 75.555477][ T5090] ? from_kuid+0x89/0xc0 [ 75.559756][ T5090] ? tomoyo_init_log+0x1290/0x1f00 [ 75.564986][ T5090] __kmalloc+0x4e/0x190 [ 75.569196][ T5090] tomoyo_init_log+0x1290/0x1f00 [ 75.574203][ T5090] ? common_lsm_audit+0x1ed0/0x1ed0 [ 75.579463][ T5090] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 75.585300][ T5090] tomoyo_supervisor+0x34e/0xec0 [ 75.590284][ T5090] ? tomoyo_profile+0x60/0x60 [ 75.595016][ T5090] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.600300][ T5090] tomoyo_path_number_perm+0x413/0x570 [ 75.605808][ T5090] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 75.611659][ T5090] ? rcu_is_watching+0x12/0xb0 [ 75.616497][ T5090] ? find_held_lock+0x2d/0x110 [ 75.621304][ T5090] ? ptrace_notify+0xfe/0x140 [ 75.626003][ T5090] ? lock_downgrade+0x690/0x690 [ 75.630892][ T5090] security_file_ioctl+0x54/0xb0 [ 75.635938][ T5090] __x64_sys_ioctl+0xb7/0x210 [ 75.640649][ T5090] do_syscall_64+0x39/0xb0 [ 75.645084][ T5090] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.651014][ T5090] RIP: 0033:0x7f82c4252049 [ 75.655440][ T5090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 75.675083][ T5090] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.683540][ T5090] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [pid 5090] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5090] exit_group(0) = ? [pid 5090] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5092 attached , child_tidptr=0x5555562475d0) = 5092 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5092] setpgid(0, 0) = 0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5092] write(3, "1000", 4) = 4 [pid 5092] close(3) = 0 [pid 5092] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5092] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5092] write(4, "4", 1) = 1 [ 75.691524][ T5090] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 75.699522][ T5090] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 75.707504][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 75.715486][ T5090] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 75.723484][ T5090] [ 75.744134][ T5092] FAULT_INJECTION: forcing a failure. [ 75.744134][ T5092] name failslab, interval 1, probability 0, space 0, times 0 [ 75.757212][ T5092] CPU: 1 PID: 5092 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 75.767139][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 75.777294][ T5092] Call Trace: [ 75.780604][ T5092] [ 75.783547][ T5092] dump_stack_lvl+0x136/0x150 [ 75.788357][ T5092] should_fail_ex+0x4a3/0x5b0 [ 75.793099][ T5092] should_failslab+0x9/0x20 [ 75.797633][ T5092] __kmem_cache_alloc_node+0x5b/0x320 [ 75.803043][ T5092] ? tomoyo_init_log+0x1290/0x1f00 [ 75.808208][ T5092] ? from_kuid+0x89/0xc0 [ 75.812474][ T5092] ? tomoyo_init_log+0x1290/0x1f00 [ 75.817632][ T5092] __kmalloc+0x4e/0x190 [ 75.821863][ T5092] tomoyo_init_log+0x1290/0x1f00 [ 75.826872][ T5092] ? common_lsm_audit+0x1ed0/0x1ed0 [ 75.832109][ T5092] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 75.837957][ T5092] tomoyo_supervisor+0x34e/0xec0 [ 75.842940][ T5092] ? tomoyo_profile+0x60/0x60 [ 75.847675][ T5092] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.852942][ T5092] tomoyo_path_number_perm+0x413/0x570 [ 75.858433][ T5092] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 75.864280][ T5092] ? rcu_is_watching+0x12/0xb0 [ 75.869102][ T5092] ? find_held_lock+0x2d/0x110 [ 75.873897][ T5092] ? ptrace_notify+0xfe/0x140 [ 75.878601][ T5092] ? lock_downgrade+0x690/0x690 [ 75.883494][ T5092] security_file_ioctl+0x54/0xb0 [ 75.888473][ T5092] __x64_sys_ioctl+0xb7/0x210 [ 75.893182][ T5092] do_syscall_64+0x39/0xb0 [ 75.897621][ T5092] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.903551][ T5092] RIP: 0033:0x7f82c4252049 [ 75.907987][ T5092] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 75.927627][ T5092] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.936073][ T5092] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [pid 5092] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5092] exit_group(0) = ? [pid 5092] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562475d0) = 5094 ./strace-static-x86_64: Process 5094 attached [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5094] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5094] write(4, "4", 1) = 1 [ 75.944066][ T5092] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 75.952062][ T5092] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 75.960149][ T5092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 75.968149][ T5092] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 75.976157][ T5092] [ 75.994250][ T5094] FAULT_INJECTION: forcing a failure. [ 75.994250][ T5094] name failslab, interval 1, probability 0, space 0, times 0 [ 76.007717][ T5094] CPU: 1 PID: 5094 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 76.017672][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 76.027751][ T5094] Call Trace: [ 76.031040][ T5094] [ 76.034009][ T5094] dump_stack_lvl+0x136/0x150 [ 76.038733][ T5094] should_fail_ex+0x4a3/0x5b0 [ 76.043451][ T5094] should_failslab+0x9/0x20 [ 76.047978][ T5094] __kmem_cache_alloc_node+0x5b/0x320 [ 76.053374][ T5094] ? tomoyo_init_log+0x1290/0x1f00 [ 76.058511][ T5094] ? from_kuid+0x89/0xc0 [ 76.062783][ T5094] ? tomoyo_init_log+0x1290/0x1f00 [ 76.067930][ T5094] __kmalloc+0x4e/0x190 [ 76.072131][ T5094] tomoyo_init_log+0x1290/0x1f00 [ 76.077155][ T5094] ? common_lsm_audit+0x1ed0/0x1ed0 [ 76.082381][ T5094] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 76.088217][ T5094] tomoyo_supervisor+0x34e/0xec0 [ 76.093211][ T5094] ? tomoyo_profile+0x60/0x60 [ 76.097930][ T5094] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.103217][ T5094] tomoyo_path_number_perm+0x413/0x570 [ 76.108698][ T5094] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 76.114539][ T5094] ? rcu_is_watching+0x12/0xb0 [ 76.119342][ T5094] ? find_held_lock+0x2d/0x110 [ 76.124127][ T5094] ? ptrace_notify+0xfe/0x140 [ 76.128853][ T5094] ? lock_downgrade+0x690/0x690 [ 76.133758][ T5094] security_file_ioctl+0x54/0xb0 [ 76.138732][ T5094] __x64_sys_ioctl+0xb7/0x210 [ 76.143472][ T5094] do_syscall_64+0x39/0xb0 [ 76.147944][ T5094] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.153901][ T5094] RIP: 0033:0x7f82c4252049 [ 76.158344][ T5094] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.177970][ T5094] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.186404][ T5094] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [pid 5094] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5094] exit_group(0) = ? [pid 5094] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562475d0) = 5096 ./strace-static-x86_64: Process 5096 attached [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5096] setpgid(0, 0) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] write(3, "1000", 4) = 4 [pid 5096] close(3) = 0 [pid 5096] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5096] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5096] write(4, "4", 1) = 1 [ 76.194391][ T5094] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 76.202379][ T5094] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 76.210455][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 76.218460][ T5094] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 76.226473][ T5094] [ 76.245128][ T5096] FAULT_INJECTION: forcing a failure. [ 76.245128][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 76.258063][ T5096] CPU: 0 PID: 5096 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 76.267994][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 76.278094][ T5096] Call Trace: [ 76.281385][ T5096] [ 76.284332][ T5096] dump_stack_lvl+0x136/0x150 [ 76.289045][ T5096] should_fail_ex+0x4a3/0x5b0 [ 76.293799][ T5096] should_failslab+0x9/0x20 [ 76.298362][ T5096] __kmem_cache_alloc_node+0x5b/0x320 [ 76.303799][ T5096] ? tomoyo_init_log+0x1290/0x1f00 [ 76.308970][ T5096] ? from_kuid+0x89/0xc0 [ 76.313236][ T5096] ? tomoyo_init_log+0x1290/0x1f00 [ 76.318406][ T5096] __kmalloc+0x4e/0x190 [ 76.322628][ T5096] tomoyo_init_log+0x1290/0x1f00 [ 76.327638][ T5096] ? common_lsm_audit+0x1ed0/0x1ed0 [ 76.332881][ T5096] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 76.338758][ T5096] tomoyo_supervisor+0x34e/0xec0 [ 76.343758][ T5096] ? tomoyo_profile+0x60/0x60 [ 76.348553][ T5096] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.353803][ T5096] tomoyo_path_number_perm+0x413/0x570 [ 76.359297][ T5096] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 76.365164][ T5096] ? rcu_is_watching+0x12/0xb0 [ 76.369994][ T5096] ? find_held_lock+0x2d/0x110 [ 76.374790][ T5096] ? ptrace_notify+0xfe/0x140 [ 76.379491][ T5096] ? lock_downgrade+0x690/0x690 [ 76.384379][ T5096] security_file_ioctl+0x54/0xb0 [ 76.389354][ T5096] __x64_sys_ioctl+0xb7/0x210 [ 76.394108][ T5096] do_syscall_64+0x39/0xb0 [ 76.398574][ T5096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.404534][ T5096] RIP: 0033:0x7f82c4252049 [ 76.408995][ T5096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.428634][ T5096] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.437083][ T5096] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [pid 5096] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5096] exit_group(0) = ? [pid 5096] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562475d0) = 5098 ./strace-static-x86_64: Process 5098 attached [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5098] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5098] write(4, "4", 1) = 1 [ 76.445108][ T5096] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 76.453114][ T5096] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 76.461103][ T5096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 76.469097][ T5096] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 76.477135][ T5096] [ 76.510986][ T5098] FAULT_INJECTION: forcing a failure. [ 76.510986][ T5098] name failslab, interval 1, probability 0, space 0, times 0 [ 76.524145][ T5098] CPU: 0 PID: 5098 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 76.534060][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 76.544134][ T5098] Call Trace: [ 76.547428][ T5098] [ 76.550365][ T5098] dump_stack_lvl+0x136/0x150 [ 76.555060][ T5098] should_fail_ex+0x4a3/0x5b0 [ 76.559766][ T5098] should_failslab+0x9/0x20 [ 76.564292][ T5098] __kmem_cache_alloc_node+0x5b/0x320 [ 76.569681][ T5098] ? tomoyo_init_log+0x1290/0x1f00 [ 76.574815][ T5098] ? from_kuid+0x89/0xc0 [ 76.579075][ T5098] ? tomoyo_init_log+0x1290/0x1f00 [ 76.584220][ T5098] __kmalloc+0x4e/0x190 [ 76.588418][ T5098] tomoyo_init_log+0x1290/0x1f00 [ 76.593413][ T5098] ? common_lsm_audit+0x1ed0/0x1ed0 [ 76.598667][ T5098] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 76.604512][ T5098] tomoyo_supervisor+0x34e/0xec0 [ 76.609494][ T5098] ? tomoyo_profile+0x60/0x60 [ 76.614206][ T5098] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.619481][ T5098] tomoyo_path_number_perm+0x413/0x570 [ 76.624968][ T5098] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 76.630810][ T5098] ? rcu_is_watching+0x12/0xb0 [ 76.635633][ T5098] ? find_held_lock+0x2d/0x110 [ 76.640425][ T5098] ? ptrace_notify+0xfe/0x140 [ 76.645127][ T5098] ? lock_downgrade+0x690/0x690 [ 76.650036][ T5098] security_file_ioctl+0x54/0xb0 [ 76.655036][ T5098] __x64_sys_ioctl+0xb7/0x210 [ 76.659761][ T5098] do_syscall_64+0x39/0xb0 [ 76.664215][ T5098] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.670172][ T5098] RIP: 0033:0x7f82c4252049 [ 76.674609][ T5098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.694241][ T5098] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.702690][ T5098] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [pid 5098] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5098] exit_group(0) = ? [pid 5098] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5100 attached , child_tidptr=0x5555562475d0) = 5100 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5100] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5100] write(4, "4", 1) = 1 [pid 5100] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5100] exit_group(0) = ? [pid 5100] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562475d0) = 5102 ./strace-static-x86_64: Process 5102 attached [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5102] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5102] write(4, "4", 1) = 1 [ 76.710685][ T5098] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 76.718675][ T5098] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 76.726671][ T5098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 76.734665][ T5098] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 76.742682][ T5098] [ 76.776331][ T5102] FAULT_INJECTION: forcing a failure. [ 76.776331][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 76.789373][ T5102] CPU: 0 PID: 5102 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 76.799326][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 76.809397][ T5102] Call Trace: [ 76.812686][ T5102] [ 76.815626][ T5102] dump_stack_lvl+0x136/0x150 [ 76.820326][ T5102] should_fail_ex+0x4a3/0x5b0 [ 76.825057][ T5102] should_failslab+0x9/0x20 [ 76.829627][ T5102] __kmem_cache_alloc_node+0x5b/0x320 [ 76.835480][ T5102] ? vhost_dev_set_owner+0x20d/0xa90 [ 76.840814][ T5102] kmalloc_trace+0x26/0xe0 [ 76.845259][ T5102] vhost_dev_set_owner+0x20d/0xa90 [ 76.850396][ T5102] ? rcu_is_watching+0x12/0xb0 [ 76.855197][ T5102] ? vhost_dev_stop+0x280/0x280 [ 76.860089][ T5102] ? __mutex_lock+0x231/0x1350 [ 76.864889][ T5102] vhost_dev_ioctl+0xb4b/0xe70 [ 76.869671][ T5102] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 76.875239][ T5102] ? vfs_fileattr_set+0xc40/0xc40 [ 76.880285][ T5102] ? vhost_dev_set_owner+0xa90/0xa90 [ 76.885599][ T5102] ? find_held_lock+0x2d/0x110 [ 76.890380][ T5102] vhost_vsock_dev_ioctl+0x389/0xb30 [ 76.895692][ T5102] ? ptrace_notify+0xfe/0x140 [ 76.900395][ T5102] ? vhost_vsock_stop+0x110/0x110 [ 76.905470][ T5102] ? bpf_lsm_file_ioctl+0x9/0x10 [ 76.910448][ T5102] ? vhost_vsock_stop+0x110/0x110 [ 76.915509][ T5102] __x64_sys_ioctl+0x197/0x210 [ 76.920304][ T5102] do_syscall_64+0x39/0xb0 [ 76.924744][ T5102] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.930762][ T5102] RIP: 0033:0x7f82c4252049 [ 76.935195][ T5102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.954823][ T5102] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.963256][ T5102] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [pid 5102] ioctl(3, VHOST_SET_OWNER, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5102] exit_group(0) = ? [pid 5102] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555562475d0) = 5103 ./strace-static-x86_64: Process 5103 attached [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 [pid 5103] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5103] write(4, "4", 1) = 1 [ 76.971243][ T5102] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 76.979231][ T5102] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 76.987216][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 76.995206][ T5102] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 77.003209][ T5102] [ 77.031118][ T5103] FAULT_INJECTION: forcing a failure. [ 77.031118][ T5103] name failslab, interval 1, probability 0, space 0, times 0 [ 77.043968][ T5103] CPU: 1 PID: 5103 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 77.053906][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 77.063983][ T5103] Call Trace: [ 77.067299][ T5103] [ 77.070250][ T5103] dump_stack_lvl+0x136/0x150 [ 77.074992][ T5103] should_fail_ex+0x4a3/0x5b0 [ 77.079733][ T5103] should_failslab+0x9/0x20 [ 77.084261][ T5103] __kmem_cache_alloc_node+0x5b/0x320 [ 77.089660][ T5103] ? vhost_task_create+0xca/0x270 [ 77.094730][ T5103] kmalloc_trace+0x26/0xe0 [ 77.099181][ T5103] ? vhost_flush_work+0x20/0x20 [ 77.104054][ T5103] vhost_task_create+0xca/0x270 [ 77.108941][ T5103] ? vhost_task_start+0x40/0x40 [ 77.113854][ T5103] ? vhost_task_should_stop+0x50/0x50 [ 77.119283][ T5103] vhost_dev_set_owner+0x300/0xa90 [ 77.124431][ T5103] ? rcu_is_watching+0x12/0xb0 [ 77.129252][ T5103] ? vhost_dev_stop+0x280/0x280 [ 77.134135][ T5103] ? __mutex_lock+0x231/0x1350 [ 77.138952][ T5103] vhost_dev_ioctl+0xb4b/0xe70 [ 77.143750][ T5103] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 77.149337][ T5103] ? vfs_fileattr_set+0xc40/0xc40 [ 77.154398][ T5103] ? vhost_dev_set_owner+0xa90/0xa90 [ 77.159734][ T5103] ? find_held_lock+0x2d/0x110 [ 77.164536][ T5103] vhost_vsock_dev_ioctl+0x389/0xb30 [ 77.169866][ T5103] ? ptrace_notify+0xfe/0x140 [ 77.174580][ T5103] ? vhost_vsock_stop+0x110/0x110 [ 77.179663][ T5103] ? bpf_lsm_file_ioctl+0x9/0x10 [ 77.184643][ T5103] ? vhost_vsock_stop+0x110/0x110 [ 77.189709][ T5103] __x64_sys_ioctl+0x197/0x210 [ 77.194522][ T5103] do_syscall_64+0x39/0xb0 [ 77.198980][ T5103] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.204918][ T5103] RIP: 0033:0x7f82c4252049 [ 77.209354][ T5103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 77.228987][ T5103] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.237427][ T5103] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [ 77.245413][ T5103] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 77.253400][ T5103] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 77.261391][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 77.269377][ T5103] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 77.277385][ T5103] [ 77.281019][ T5103] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] PREEMPT SMP KASAN [ 77.292790][ T5103] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 77.301214][ T5103] CPU: 0 PID: 5103 Comm: syz-executor280 Not tainted 6.3.0-rc2-next-20230317-syzkaller #0 [ 77.311136][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 77.321202][ T5103] RIP: 0010:vhost_task_start+0x22/0x40 [ 77.326706][ T5103] Code: 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 53 48 89 fb e8 c3 67 2c 00 48 8d 7b 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 0a 48 8b 7b 70 5b e9 fe bd 02 00 e8 79 ec 7e 00 eb [ 77.346327][ T5103] RSP: 0018:ffffc90003a9fc38 EFLAGS: 00010207 [ 77.352418][ T5103] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: 0000000000000000 [ 77.360403][ T5103] RDX: 000000000000000c RSI: ffffffff81564c8d RDI: 0000000000000064 [ 77.368384][ T5103] RBP: ffff88802b21dd40 R08: 0000000000000100 R09: ffffffff8c917cf3 [ 77.376380][ T5103] R10: 00000000fffffff4 R11: 0000000000000000 R12: fffffffffffffff4 [ 77.384364][ T5103] R13: ffff888075d000b0 R14: ffff888075d00000 R15: ffff888075d00008 [ 77.392349][ T5103] FS: 0000555556247300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 77.401295][ T5103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.407889][ T5103] CR2: 00007ffe3d8e5ff8 CR3: 00000000215d4000 CR4: 00000000003506f0 [ 77.415873][ T5103] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.423862][ T5103] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.431861][ T5103] Call Trace: [ 77.435152][ T5103] [ 77.438115][ T5103] vhost_dev_set_owner+0x338/0xa90 [ 77.443257][ T5103] ? rcu_is_watching+0x12/0xb0 [ 77.448067][ T5103] ? vhost_dev_stop+0x280/0x280 [ 77.452952][ T5103] ? __mutex_lock+0x231/0x1350 [ 77.457740][ T5103] vhost_dev_ioctl+0xb4b/0xe70 [ 77.462533][ T5103] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 77.468112][ T5103] ? vfs_fileattr_set+0xc40/0xc40 [ 77.473165][ T5103] ? vhost_dev_set_owner+0xa90/0xa90 [ 77.478477][ T5103] ? find_held_lock+0x2d/0x110 [ 77.483361][ T5103] vhost_vsock_dev_ioctl+0x389/0xb30 [ 77.488680][ T5103] ? ptrace_notify+0xfe/0x140 [ 77.493379][ T5103] ? vhost_vsock_stop+0x110/0x110 [ 77.498466][ T5103] ? bpf_lsm_file_ioctl+0x9/0x10 [ 77.503783][ T5103] ? vhost_vsock_stop+0x110/0x110 [ 77.508850][ T5103] __x64_sys_ioctl+0x197/0x210 [ 77.513640][ T5103] do_syscall_64+0x39/0xb0 [ 77.518075][ T5103] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.524005][ T5103] RIP: 0033:0x7f82c4252049 [ 77.528440][ T5103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 77.548074][ T5103] RSP: 002b:00007ffe3d8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.556517][ T5103] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82c4252049 [ 77.564509][ T5103] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 77.572493][ T5103] RBP: 00007ffe3d8e6050 R08: 0000000000000001 R09: 0000000000000001 [ 77.580477][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 77.588458][ T5103] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 77.596455][ T5103] [ 77.599493][ T5103] Modules linked in: [ 77.604092][ T5103] ---[ end trace 0000000000000000 ]--- [ 77.609699][ T5103] RIP: 0010:vhost_task_start+0x22/0x40 [ 77.615422][ T5103] Code: 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 53 48 89 fb e8 c3 67 2c 00 48 8d 7b 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 0a 48 8b 7b 70 5b e9 fe bd 02 00 e8 79 ec 7e 00 eb [ 77.635123][ T5103] RSP: 0018:ffffc90003a9fc38 EFLAGS: 00010207 [ 77.641415][ T5103] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: 0000000000000000 [ 77.649606][ T5103] RDX: 000000000000000c RSI: ffffffff81564c8d RDI: 0000000000000064 [ 77.657681][ T5103] RBP: ffff88802b21dd40 R08: 0000000000000100 R09: ffffffff8c917cf3 [ 77.665751][ T5103] R10: 00000000fffffff4 R11: 0000000000000000 R12: fffffffffffffff4 [ 77.673785][ T5103] R13: ffff888075d000b0 R14: ffff888075d00000 R15: ffff888075d00008 [ 77.681821][ T5103] FS: 0000555556247300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 77.690781][ T5103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.697582][ T5103] CR2: 00007ffe3d8e5ff8 CR3: 00000000215d4000 CR4: 00000000003506f0 [ 77.705727][ T5103] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.713752][ T5103] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.721809][ T5103] Kernel panic - not syncing: Fatal exception [ 77.728134][ T5103] Kernel Offset: disabled [ 77.732464][ T5103] Rebooting in 86400 seconds..