./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2166083665 <...> [ 3.321685][ T86] acpid (86) used greatest stack depth: 23440 bytes left [ 3.627665][ T101] udevd[101]: starting version 3.2.11 [ 3.675982][ T102] udevd[102]: starting eudev-3.2.11 [ 4.475113][ T127] iptables-restor (127) used greatest stack depth: 22352 bytes left [ 12.689107][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 12.689117][ T28] audit: type=1400 audit(1694298047.850:61): avc: denied { transition } for pid=226 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.693321][ T28] audit: type=1400 audit(1694298047.850:62): avc: denied { noatsecure } for pid=226 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.698025][ T28] audit: type=1400 audit(1694298047.860:63): avc: denied { write } for pid=226 comm="sh" path="pipe:[12654]" dev="pipefs" ino=12654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.703330][ T28] audit: type=1400 audit(1694298047.860:64): avc: denied { rlimitinh } for pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.707042][ T28] audit: type=1400 audit(1694298047.860:65): avc: denied { siginh } for pid=226 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.179' (ED25519) to the list of known hosts. execve("./syz-executor2166083665", ["./syz-executor2166083665"], 0x7ffe22c13660 /* 10 vars */) = 0 brk(NULL) = 0x555556883000 brk(0x555556883e00) = 0x555556883e00 arch_prctl(ARCH_SET_FS, 0x555556883480) = 0 set_tid_address(0x555556883750) = 295 set_robust_list(0x555556883760, 24) = 0 rseq(0x555556883da0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2166083665", 4096) = 28 getrandom("\x50\xd9\xdd\x6e\xe0\x66\x4b\x76", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556883e00 brk(0x5555568a4e00) = 0x5555568a4e00 brk(0x5555568a5000) = 0x5555568a5000 mprotect(0x7f6548d7b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 295 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "295", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f6548cd5d20, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6548cde160}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f6548cd5d20, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6548cde160}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 296 ./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x555556883760, 24) = 0 [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 296] setpgid(0, 0) = 0 [pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 296] write(3, "1000", 4) = 4 [pid 296] close(3) = 0 [pid 296] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [ 21.223628][ T28] audit: type=1400 audit(1694298056.380:66): avc: denied { execmem } for pid=295 comm="syz-executor216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 296] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 296] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 296] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 296] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 296] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = 0 [pid 296] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 296] write(6, "7", 1) = 1 [pid 296] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}, msg_len=0}], 1, 0) = 1 [pid 296] exit_group(0) = ? [pid 296] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 297 ./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x555556883760, 24) = 0 [pid 297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 297] setpgid(0, 0) = 0 [pid 297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "1000", 4) = 4 [pid 297] close(3) = 0 [pid 297] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 297] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 297] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 297] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 297] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 297] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 297] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 297] write(6, "7", 1) = 1 [pid 297] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 21.249938][ T28] audit: type=1400 audit(1694298056.410:67): avc: denied { bpf } for pid=296 comm="syz-executor216" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 21.270977][ T28] audit: type=1400 audit(1694298056.430:68): avc: denied { prog_load } for pid=296 comm="syz-executor216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 21.285672][ T297] FAULT_INJECTION: forcing a failure. [ 21.285672][ T297] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 21.290104][ T28] audit: type=1400 audit(1694298056.430:69): avc: denied { perfmon } for pid=296 comm="syz-executor216" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 21.303492][ T297] CPU: 0 PID: 297 Comm: syz-executor216 Not tainted 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 21.324224][ T28] audit: type=1400 audit(1694298056.430:70): avc: denied { prog_run } for pid=296 comm="syz-executor216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 21.333805][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 21.333815][ T297] Call Trace: [ 21.333820][ T297] [ 21.333826][ T297] dump_stack_lvl+0x151/0x1b7 [ 21.352759][ T28] audit: type=1400 audit(1694298056.430:71): avc: denied { map_create } for pid=296 comm="syz-executor216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 21.362735][ T297] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 21.362770][ T297] ? __this_cpu_preempt_check+0x13/0x20 [ 21.365871][ T28] audit: type=1400 audit(1694298056.430:72): avc: denied { map_read map_write } for pid=296 comm="syz-executor216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 21.368621][ T297] ? memcg_rstat_updated+0x4f/0x110 [ 21.427906][ T297] dump_stack+0x15/0x17 [ 21.433412][ T297] should_fail_ex+0x3d0/0x520 [ 21.438739][ T297] should_fail_alloc_page+0x68/0x90 [ 21.443779][ T297] __alloc_pages+0x1f4/0x780 [ 21.448198][ T297] ? prep_new_page+0x110/0x110 [ 21.452797][ T297] __folio_alloc+0x15/0x40 [ 21.457049][ T297] wp_page_copy+0x20c/0x1610 [ 21.461476][ T297] ? filemap_read_folio+0x2a0/0x2a0 [ 21.466508][ T297] ? fault_dirty_shared_page+0x300/0x300 [ 21.471980][ T297] ? vm_normal_page+0x1de/0x1f0 [ 21.476663][ T297] do_wp_page+0xbbf/0xd80 [ 21.480831][ T297] handle_mm_fault+0x15a2/0x2f40 [ 21.485604][ T297] ? numa_migrate_prep+0xe0/0xe0 [ 21.490376][ T297] ? lock_vma_under_rcu+0x47a/0x540 [ 21.495424][ T297] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 21.501349][ T297] ? exit_to_user_mode_prepare+0x39/0xa0 [ 21.506799][ T297] exc_page_fault+0x3a6/0x6e0 [ 21.511396][ T297] asm_exc_page_fault+0x27/0x30 [ 21.516067][ T297] RIP: 0033:0x7f6548cde750 [ 21.520322][ T297] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 21.539790][ T297] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 21.545670][ T297] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 21.553647][ T297] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 21.561632][ T297] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 21.569545][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 21.577353][ T297] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 21.585163][ T297] [ 21.588694][ T19] ================================================================== [ 21.596559][ T19] BUG: KASAN: use-after-free in consume_skb+0x3c/0x250 [ 21.603334][ T19] Read of size 4 at addr ffff888122269374 by task kworker/0:1/19 [ 21.611226][ T19] [ 21.613397][ T19] CPU: 0 PID: 19 Comm: kworker/0:1 Not tainted 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 21.623043][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 21.632927][ T19] Workqueue: events sk_psock_destroy [ 21.638043][ T19] Call Trace: [ 21.641256][ T19] [ 21.644045][ T19] dump_stack_lvl+0x151/0x1b7 [ 21.648556][ T19] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 21.653844][ T19] ? _printk+0xd1/0x111 [ 21.657836][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 21.662789][ T19] print_report+0x158/0x4e0 [ 21.667127][ T19] ? __virt_addr_valid+0x242/0x2f0 [ 21.672072][ T19] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 21.678141][ T19] ? consume_skb+0x3c/0x250 [ 21.682481][ T19] kasan_report+0x13c/0x170 [ 21.686820][ T19] ? consume_skb+0x3c/0x250 [ 21.691162][ T19] ? __kasan_check_write+0x14/0x20 [ 21.696108][ T19] kasan_check_range+0x294/0x2a0 [ 21.700882][ T19] __kasan_check_read+0x11/0x20 [ 21.705572][ T19] consume_skb+0x3c/0x250 [ 21.709736][ T19] __sk_msg_free+0x2dd/0x370 [ 21.714161][ T19] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 21.719803][ T19] ? skb_dequeue+0x123/0x160 [ 21.724229][ T19] sk_psock_destroy+0x351/0x810 [ 21.728929][ T19] process_one_work+0x73d/0xcb0 [ 21.733611][ T19] worker_thread+0xa60/0x1260 [ 21.738123][ T19] kthread+0x26d/0x300 [ 21.742025][ T19] ? worker_clr_flags+0x1a0/0x1a0 [ 21.746885][ T19] ? kthread_blkcg+0xd0/0xd0 [ 21.751310][ T19] ret_from_fork+0x1f/0x30 [ 21.755562][ T19] [ 21.758426][ T19] [ 21.760593][ T19] Allocated by task 296: [ 21.764680][ T19] kasan_set_track+0x4b/0x70 [ 21.769102][ T19] kasan_save_alloc_info+0x1f/0x30 [ 21.774050][ T19] __kasan_slab_alloc+0x6c/0x80 [ 21.778735][ T19] slab_post_alloc_hook+0x53/0x2c0 [ 21.783940][ T19] kmem_cache_alloc_node+0x18a/0x2d0 [ 21.789075][ T19] __alloc_skb+0xcc/0x2c0 [ 21.793242][ T19] alloc_skb_with_frags+0xa6/0x680 [ 21.798175][ T19] sock_alloc_send_pskb+0x915/0xa50 [ 21.803210][ T19] unix_dgram_sendmsg+0x5b1/0x2050 [ 21.808174][ T19] ____sys_sendmsg+0x5dc/0x9d0 [ 21.812766][ T19] __sys_sendmmsg+0x3b9/0x6f0 [ 21.817276][ T19] __x64_sys_sendmmsg+0xa0/0xb0 [ 21.821959][ T19] do_syscall_64+0x3d/0xb0 [ 21.826218][ T19] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 21.831939][ T19] [ 21.834125][ T19] Freed by task 19: [ 21.837760][ T19] kasan_set_track+0x4b/0x70 [ 21.842179][ T19] kasan_save_free_info+0x2b/0x40 [ 21.847042][ T19] ____kasan_slab_free+0x131/0x180 [ 21.851992][ T19] __kasan_slab_free+0x11/0x20 [ 21.856592][ T19] kmem_cache_free+0x291/0x510 [ 21.861197][ T19] kfree_skbmem+0x104/0x170 [ 21.865527][ T19] kfree_skb_reason+0xdb/0x250 [ 21.870248][ T19] sk_psock_destroy+0x143/0x810 [ 21.874932][ T19] process_one_work+0x73d/0xcb0 [ 21.879626][ T19] worker_thread+0xa60/0x1260 [ 21.884134][ T19] kthread+0x26d/0x300 [ 21.888038][ T19] ret_from_fork+0x1f/0x30 [ 21.892297][ T19] [ 21.894460][ T19] The buggy address belongs to the object at ffff888122269280 [ 21.894460][ T19] which belongs to the cache skbuff_head_cache of size 256 [ 21.908876][ T19] The buggy address is located 244 bytes inside of [ 21.908876][ T19] 256-byte region [ffff888122269280, ffff888122269380) [ 21.921984][ T19] [ 21.924145][ T19] The buggy address belongs to the physical page: [ 21.930403][ T19] page:ffffea0004889a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122269 [ 21.940510][ T19] flags: 0x4000000000000200(slab|zone=1) [ 21.946198][ T19] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100b90780 [ 21.954720][ T19] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 21.963307][ T19] page dumped because: kasan: bad access detected [ 21.969546][ T19] page_owner tracks the page as allocated [ 21.975217][ T19] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 289, tgid 289 (sshd), ts 21273274744, free_ts 21273233117 [ 21.992887][ T19] post_alloc_hook+0x213/0x220 [ 21.997733][ T19] prep_new_page+0x1b/0x110 [ 22.002371][ T19] get_page_from_freelist+0x2762/0x27f0 [ 22.007841][ T19] __alloc_pages+0x3a1/0x780 [ 22.012347][ T19] new_slab+0xce/0x4c0 [ 22.016271][ T19] ___slab_alloc+0x6f9/0xb80 [ 22.020825][ T19] __slab_alloc+0x5d/0xa0 [ 22.025071][ T19] kmem_cache_alloc+0x1b9/0x2c0 [ 22.029833][ T19] skb_clone+0x1f8/0x380 [ 22.033924][ T19] dev_queue_xmit_nit+0x248/0xa90 [ 22.038776][ T19] dev_hard_start_xmit+0x140/0x630 [ 22.043950][ T19] sch_direct_xmit+0x298/0x9b0 [ 22.048737][ T19] __dev_queue_xmit+0x17df/0x3660 [ 22.053598][ T19] ip_finish_output2+0xb60/0xf90 [ 22.058527][ T19] __ip_finish_output+0x162/0x370 [ 22.063428][ T19] ip_finish_output+0x31/0x2a0 [ 22.068075][ T19] page last free stack trace: [ 22.072595][ T19] free_unref_page_prepare+0x83d/0x850 [ 22.077970][ T19] free_unref_page+0x8d/0x480 [ 22.082490][ T19] free_the_page+0x13/0x20 [ 22.086732][ T19] page_frag_free+0x108/0x120 [ 22.091247][ T19] skb_release_data+0x6ba/0x840 [ 22.095932][ T19] __kfree_skb+0x50/0x70 [ 22.100020][ T19] tcp_rcv_established+0xe39/0x1c60 [ 22.105045][ T19] tcp_v4_do_rcv+0x430/0xa20 [ 22.109474][ T19] tcp_v4_rcv+0x20d7/0x2a30 [ 22.113811][ T19] ip_protocol_deliver_rcu+0x32f/0x720 [ 22.119105][ T19] ip_local_deliver_finish+0x24b/0x430 [ 22.124400][ T19] ip_local_deliver+0x1b3/0x3b0 [ 22.129087][ T19] ip_sublist_rcv+0x782/0x920 [ 22.133600][ T19] ip_list_rcv+0x422/0x470 [ 22.137853][ T19] __netif_receive_skb_list_core+0x6b1/0x890 [ 22.143675][ T19] netif_receive_skb_list_internal+0x967/0xcc0 [ 22.149658][ T19] [ 22.151832][ T19] Memory state around the buggy address: [ 22.157298][ T19] ffff888122269200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 22.165194][ T19] ffff888122269280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 22.173094][ T19] >ffff888122269300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 22.181078][ T19] ^ [ 22.188630][ T19] ffff888122269380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [pid 297] exit_group(0) = ? [pid 297] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 299 ./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x555556883760, 24) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setpgid(0, 0) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 299] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 299] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 299] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 299] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 299] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 299] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 299] write(6, "7", 1) = 1 [pid 299] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 22.196526][ T19] ffff888122269400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 22.204423][ T19] ================================================================== [ 22.212966][ T297] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 22.213603][ T19] Disabling lock debugging due to kernel taint [ 22.234577][ T299] FAULT_INJECTION: forcing a failure. [ 22.234577][ T299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 22.247720][ T299] CPU: 0 PID: 299 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 22.259031][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 22.268929][ T299] Call Trace: [ 22.272047][ T299] [ 22.274913][ T299] dump_stack_lvl+0x151/0x1b7 [ 22.279425][ T299] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 22.284722][ T299] dump_stack+0x15/0x17 [ 22.288719][ T299] should_fail_ex+0x3d0/0x520 [ 22.293227][ T299] should_fail_alloc_page+0x68/0x90 [ 22.298260][ T299] __alloc_pages+0x1f4/0x780 [ 22.302689][ T299] ? schedule_preempt_disabled+0x20/0x20 [ 22.308155][ T299] ? prep_new_page+0x110/0x110 [ 22.312760][ T299] ? preempt_schedule_thunk+0x16/0x18 [ 22.317962][ T299] __folio_alloc+0x15/0x40 [ 22.322214][ T299] wp_page_copy+0x20c/0x1610 [ 22.326643][ T299] ? filemap_read_folio+0x2a0/0x2a0 [ 22.331675][ T299] ? fault_dirty_shared_page+0x300/0x300 [ 22.337145][ T299] ? vm_normal_page+0x1de/0x1f0 [ 22.341837][ T299] do_wp_page+0xbbf/0xd80 [ 22.345996][ T299] handle_mm_fault+0x15a2/0x2f40 [ 22.350771][ T299] ? numa_migrate_prep+0xe0/0xe0 [ 22.355541][ T299] ? lock_vma_under_rcu+0x47a/0x540 [ 22.360576][ T299] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 22.366045][ T299] exc_page_fault+0x3a6/0x6e0 [ 22.370558][ T299] asm_exc_page_fault+0x27/0x30 [ 22.375245][ T299] RIP: 0033:0x7f6548cde750 [ 22.379501][ T299] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 22.398940][ T299] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [pid 299] exit_group(0) = ? [pid 299] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 300 ./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x555556883760, 24) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3) = 0 [pid 300] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 300] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 300] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 300] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 300] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 300] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 300] write(6, "7", 1) = 1 [pid 300] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 22.404838][ T299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 22.412747][ T299] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 22.420551][ T299] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 22.428532][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 22.436348][ T299] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 22.444167][ T299] [ 22.447111][ T299] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 22.465570][ T300] FAULT_INJECTION: forcing a failure. [ 22.465570][ T300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 22.478881][ T300] CPU: 0 PID: 300 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 22.490344][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 22.500370][ T300] Call Trace: [ 22.503486][ T300] [ 22.506265][ T300] dump_stack_lvl+0x151/0x1b7 [ 22.510779][ T300] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 22.516071][ T300] ? __this_cpu_preempt_check+0x13/0x20 [ 22.521538][ T300] ? memcg_rstat_updated+0x4f/0x110 [ 22.526571][ T300] dump_stack+0x15/0x17 [ 22.530562][ T300] should_fail_ex+0x3d0/0x520 [ 22.535076][ T300] should_fail_alloc_page+0x68/0x90 [ 22.540115][ T300] __alloc_pages+0x1f4/0x780 [ 22.544543][ T300] ? prep_new_page+0x110/0x110 [ 22.549571][ T300] __folio_alloc+0x15/0x40 [ 22.553822][ T300] wp_page_copy+0x20c/0x1610 [ 22.558251][ T300] ? filemap_read_folio+0x2a0/0x2a0 [ 22.563286][ T300] ? fault_dirty_shared_page+0x300/0x300 [ 22.568755][ T300] ? _raw_spin_lock+0xa4/0x1b0 [ 22.573352][ T300] ? vm_normal_page+0x1de/0x1f0 [ 22.578045][ T300] do_wp_page+0xbbf/0xd80 [ 22.582207][ T300] handle_mm_fault+0x15a2/0x2f40 [ 22.586986][ T300] ? numa_migrate_prep+0xe0/0xe0 [ 22.591754][ T300] ? lock_vma_under_rcu+0x47a/0x540 [ 22.596792][ T300] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 22.602254][ T300] exc_page_fault+0x3a6/0x6e0 [ 22.606768][ T300] asm_exc_page_fault+0x27/0x30 [ 22.611453][ T300] RIP: 0033:0x7f6548cde750 [ 22.615707][ T300] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 22.635147][ T300] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 22.641047][ T300] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 22.648860][ T300] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 22.656671][ T300] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 300] exit_group(0) = ? [pid 300] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 301 attached , child_tidptr=0x555556883750) = 301 [pid 301] set_robust_list(0x555556883760, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1000", 4) = 4 [pid 301] close(3) = 0 [pid 301] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 301] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 301] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 301] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 301] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 301] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 301] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 301] write(6, "7", 1) = 1 [pid 301] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [pid 301] exit_group(0) = ? [pid 301] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 302 ./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x555556883760, 24) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1000", 4) = 4 [pid 302] close(3) = 0 [pid 302] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 302] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 302] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 302] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 302] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 302] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 302] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 302] write(6, "7", 1) = 1 [pid 302] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 22.664487][ T300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 22.672394][ T300] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 22.680211][ T300] [ 22.683135][ T300] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 22.710307][ T302] FAULT_INJECTION: forcing a failure. [ 22.710307][ T302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 22.723728][ T302] CPU: 1 PID: 302 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 22.735210][ T302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 22.745104][ T302] Call Trace: [ 22.748232][ T302] [ 22.751012][ T302] dump_stack_lvl+0x151/0x1b7 [ 22.755517][ T302] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 22.760812][ T302] dump_stack+0x15/0x17 [ 22.764806][ T302] should_fail_ex+0x3d0/0x520 [ 22.769322][ T302] should_fail_alloc_page+0x68/0x90 [ 22.774352][ T302] __alloc_pages+0x1f4/0x780 [ 22.778785][ T302] ? prep_new_page+0x110/0x110 [ 22.783378][ T302] ? __this_cpu_preempt_check+0x13/0x20 [ 22.788759][ T302] __folio_alloc+0x15/0x40 [ 22.793013][ T302] wp_page_copy+0x23c/0x1610 [ 22.797436][ T302] ? __switch_to+0x62c/0x1190 [ 22.801951][ T302] ? compat_start_thread+0x20/0x20 [ 22.806909][ T302] ? fault_dirty_shared_page+0x300/0x300 [ 22.812368][ T302] do_wp_page+0xbbf/0xd80 [ 22.816537][ T302] handle_mm_fault+0x15a2/0x2f40 [ 22.821305][ T302] ? numa_migrate_prep+0xe0/0xe0 [ 22.826078][ T302] ? lock_vma_under_rcu+0x47a/0x540 [ 22.831118][ T302] ? __kasan_check_write+0x14/0x20 [ 22.836059][ T302] ? fpregs_restore_userregs+0x130/0x290 [ 22.841528][ T302] exc_page_fault+0x3a6/0x6e0 [ 22.846041][ T302] asm_exc_page_fault+0x27/0x30 [ 22.850725][ T302] RIP: 0033:0x7f6548cde5e0 [ 22.854982][ T302] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0a 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 37 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 37 0a 00 4c [ 22.874421][ T302] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 22.880322][ T302] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 22.888135][ T302] RDX: 0000000000000001 RSI: 00007f6548d7f120 RDI: 0000000000000000 [ 22.895945][ T302] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 302] exit_group(0) = ? [pid 302] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 303 ./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x555556883760, 24) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 303] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 303] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 303] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 303] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 303] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 303] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 303] write(6, "7", 1) = 1 [pid 303] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 22.903767][ T302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc65ac59c [ 22.911569][ T302] R13: 431bde82d7b634db R14: 00007fffc65ac5c0 R15: 00007fffc65ac5a0 [ 22.919383][ T302] [ 22.922418][ T302] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 22.939156][ T303] FAULT_INJECTION: forcing a failure. [ 22.939156][ T303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 22.952279][ T303] CPU: 0 PID: 303 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 22.963539][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 22.973431][ T303] Call Trace: [ 22.976553][ T303] [ 22.979331][ T303] dump_stack_lvl+0x151/0x1b7 [ 22.983848][ T303] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 22.989140][ T303] dump_stack+0x15/0x17 [ 22.993136][ T303] should_fail_ex+0x3d0/0x520 [ 22.997651][ T303] should_fail_alloc_page+0x68/0x90 [ 23.002679][ T303] __alloc_pages+0x1f4/0x780 [ 23.007109][ T303] ? prep_new_page+0x110/0x110 [ 23.011704][ T303] ? __this_cpu_preempt_check+0x13/0x20 [ 23.017088][ T303] __folio_alloc+0x15/0x40 [ 23.021336][ T303] wp_page_copy+0x23c/0x1610 [ 23.025769][ T303] ? __switch_to+0x62c/0x1190 [ 23.030277][ T303] ? compat_start_thread+0x20/0x20 [ 23.035231][ T303] ? fault_dirty_shared_page+0x300/0x300 [ 23.040705][ T303] do_wp_page+0xbbf/0xd80 [ 23.044891][ T303] handle_mm_fault+0x15a2/0x2f40 [ 23.049638][ T303] ? numa_migrate_prep+0xe0/0xe0 [ 23.054406][ T303] ? lock_vma_under_rcu+0x47a/0x540 [ 23.059443][ T303] ? __kasan_check_write+0x14/0x20 [ 23.064388][ T303] ? fpregs_restore_userregs+0x130/0x290 [ 23.069862][ T303] exc_page_fault+0x3a6/0x6e0 [ 23.074370][ T303] asm_exc_page_fault+0x27/0x30 [ 23.079055][ T303] RIP: 0033:0x7f6548cde5e0 [ 23.083308][ T303] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0a 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 37 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 37 0a 00 4c [ 23.102754][ T303] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [pid 303] exit_group(0) = ? [pid 303] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 304 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x555556883760, 24) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 [pid 304] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 304] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 304] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 304] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 304] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 304] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 304] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 304] write(6, "7", 1) = 1 [pid 304] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 23.108650][ T303] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 23.116464][ T303] RDX: 0000000000000001 RSI: 00007f6548d7f120 RDI: 0000000000000000 [ 23.124273][ T303] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 23.132085][ T303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc65ac59c [ 23.139897][ T303] R13: 431bde82d7b634db R14: 00007fffc65ac5c0 R15: 00007fffc65ac5a0 [ 23.147712][ T303] [ 23.150686][ T303] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 23.166642][ T304] FAULT_INJECTION: forcing a failure. [ 23.166642][ T304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 23.179922][ T304] CPU: 0 PID: 304 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 23.191411][ T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 23.201299][ T304] Call Trace: [ 23.204430][ T304] [ 23.207203][ T304] dump_stack_lvl+0x151/0x1b7 [ 23.211722][ T304] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 23.217009][ T304] ? __this_cpu_preempt_check+0x13/0x20 [ 23.222398][ T304] ? memcg_rstat_updated+0x4f/0x110 [ 23.229709][ T304] dump_stack+0x15/0x17 [ 23.233674][ T304] should_fail_ex+0x3d0/0x520 [ 23.238186][ T304] should_fail_alloc_page+0x68/0x90 [ 23.243250][ T304] __alloc_pages+0x1f4/0x780 [ 23.248774][ T304] ? prep_new_page+0x110/0x110 [ 23.253373][ T304] __folio_alloc+0x15/0x40 [ 23.257625][ T304] wp_page_copy+0x20c/0x1610 [ 23.262094][ T304] ? filemap_read_folio+0x2a0/0x2a0 [ 23.267451][ T304] ? fault_dirty_shared_page+0x300/0x300 [ 23.272905][ T304] ? vm_normal_page+0x1de/0x1f0 [ 23.277596][ T304] do_wp_page+0xbbf/0xd80 [ 23.281760][ T304] handle_mm_fault+0x15a2/0x2f40 [ 23.286534][ T304] ? numa_migrate_prep+0xe0/0xe0 [ 23.291303][ T304] ? lock_vma_under_rcu+0x47a/0x540 [ 23.296340][ T304] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 23.302324][ T304] ? exit_to_user_mode_prepare+0x39/0xa0 [ 23.307796][ T304] exc_page_fault+0x3a6/0x6e0 [ 23.312309][ T304] asm_exc_page_fault+0x27/0x30 [ 23.316991][ T304] RIP: 0033:0x7f6548cde750 [ 23.321429][ T304] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 23.341133][ T304] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 23.347035][ T304] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 23.354940][ T304] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [pid 304] exit_group(0) = ? [pid 304] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 306 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x555556883760, 24) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 306] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 306] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 306] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 306] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 306] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 306] write(6, "7", 1) = 1 [ 23.362751][ T304] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 23.370555][ T304] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 23.378367][ T304] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 23.386193][ T304] [ 23.389323][ T304] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 23.406241][ T306] FAULT_INJECTION: forcing a failure. [pid 306] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 23.406241][ T306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 23.419613][ T306] CPU: 1 PID: 306 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 23.431134][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 23.441117][ T306] Call Trace: [ 23.444223][ T306] [ 23.447089][ T306] dump_stack_lvl+0x151/0x1b7 [ 23.451603][ T306] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 23.456983][ T306] ? __this_cpu_preempt_check+0x13/0x20 [ 23.462374][ T306] ? memcg_rstat_updated+0x4f/0x110 [ 23.467398][ T306] dump_stack+0x15/0x17 [ 23.471389][ T306] should_fail_ex+0x3d0/0x520 [ 23.475903][ T306] should_fail_alloc_page+0x68/0x90 [ 23.480936][ T306] __alloc_pages+0x1f4/0x780 [ 23.485366][ T306] ? prep_new_page+0x110/0x110 [ 23.489966][ T306] __folio_alloc+0x15/0x40 [ 23.494218][ T306] wp_page_copy+0x20c/0x1610 [ 23.498643][ T306] ? filemap_read_folio+0x2a0/0x2a0 [ 23.503679][ T306] ? fault_dirty_shared_page+0x300/0x300 [ 23.509148][ T306] ? vm_normal_page+0x1de/0x1f0 [ 23.513832][ T306] do_wp_page+0xbbf/0xd80 [ 23.518010][ T306] handle_mm_fault+0x15a2/0x2f40 [ 23.522797][ T306] ? numa_migrate_prep+0xe0/0xe0 [ 23.527545][ T306] ? lock_vma_under_rcu+0x47a/0x540 [ 23.532581][ T306] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 23.538489][ T306] ? exit_to_user_mode_prepare+0x39/0xa0 [ 23.544245][ T306] exc_page_fault+0x3a6/0x6e0 [ 23.548920][ T306] asm_exc_page_fault+0x27/0x30 [ 23.553607][ T306] RIP: 0033:0x7f6548cde750 [ 23.558036][ T306] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 23.577474][ T306] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 23.583485][ T306] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 23.591568][ T306] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 23.599565][ T306] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 23.607444][ T306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [pid 306] exit_group(0) = ? [pid 306] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 307 ./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x555556883760, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 [pid 307] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 307] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 307] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 307] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 307] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 307] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 307] write(6, "7", 1) = 1 [pid 307] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 23.615516][ T306] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 23.623342][ T306] [ 23.626340][ T306] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 23.644070][ T307] FAULT_INJECTION: forcing a failure. [ 23.644070][ T307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 23.657391][ T307] CPU: 0 PID: 307 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 23.668847][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 23.678734][ T307] Call Trace: [ 23.681856][ T307] [ 23.684635][ T307] dump_stack_lvl+0x151/0x1b7 [ 23.689151][ T307] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 23.694452][ T307] ? __this_cpu_preempt_check+0x13/0x20 [ 23.700002][ T307] ? memcg_rstat_updated+0x4f/0x110 [ 23.705206][ T307] dump_stack+0x15/0x17 [ 23.709253][ T307] should_fail_ex+0x3d0/0x520 [ 23.713717][ T307] should_fail_alloc_page+0x68/0x90 [ 23.718744][ T307] __alloc_pages+0x1f4/0x780 [ 23.723170][ T307] ? prep_new_page+0x110/0x110 [ 23.727771][ T307] __folio_alloc+0x15/0x40 [ 23.732022][ T307] wp_page_copy+0x20c/0x1610 [ 23.736449][ T307] ? filemap_read_folio+0x2a0/0x2a0 [ 23.741484][ T307] ? fault_dirty_shared_page+0x300/0x300 [ 23.746955][ T307] ? vm_normal_page+0x1de/0x1f0 [ 23.751726][ T307] do_wp_page+0xbbf/0xd80 [ 23.755892][ T307] handle_mm_fault+0x15a2/0x2f40 [ 23.760667][ T307] ? numa_migrate_prep+0xe0/0xe0 [ 23.765716][ T307] ? lock_vma_under_rcu+0x47a/0x540 [ 23.770910][ T307] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 23.776981][ T307] ? exit_to_user_mode_prepare+0x39/0xa0 [ 23.782452][ T307] exc_page_fault+0x3a6/0x6e0 [ 23.786960][ T307] asm_exc_page_fault+0x27/0x30 [ 23.791649][ T307] RIP: 0033:0x7f6548cde750 [ 23.795901][ T307] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 23.815346][ T307] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 23.821257][ T307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 23.829152][ T307] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 23.836962][ T307] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 23.844782][ T307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 23.852586][ T307] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 23.860406][ T307] [pid 307] exit_group(0) = ? [pid 307] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 308 ./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x555556883760, 24) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 [pid 308] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 308] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 308] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 308] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 308] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 308] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 308] write(6, "7", 1) = 1 [pid 308] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 23.863464][ T307] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 23.877455][ T308] FAULT_INJECTION: forcing a failure. [ 23.877455][ T308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 23.891147][ T308] CPU: 1 PID: 308 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 23.902610][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 23.912493][ T308] Call Trace: [ 23.915616][ T308] [ 23.918393][ T308] dump_stack_lvl+0x151/0x1b7 [ 23.922912][ T308] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 23.928291][ T308] ? __this_cpu_preempt_check+0x13/0x20 [ 23.933674][ T308] ? memcg_rstat_updated+0x4f/0x110 [ 23.938798][ T308] dump_stack+0x15/0x17 [ 23.942881][ T308] should_fail_ex+0x3d0/0x520 [ 23.947398][ T308] should_fail_alloc_page+0x68/0x90 [ 23.952417][ T308] __alloc_pages+0x1f4/0x780 [ 23.956843][ T308] ? prep_new_page+0x110/0x110 [ 23.961444][ T308] __folio_alloc+0x15/0x40 [ 23.965695][ T308] wp_page_copy+0x20c/0x1610 [ 23.970124][ T308] ? filemap_read_folio+0x2a0/0x2a0 [ 23.975160][ T308] ? fault_dirty_shared_page+0x300/0x300 [ 23.980637][ T308] ? vm_normal_page+0x1de/0x1f0 [ 23.985310][ T308] do_wp_page+0xbbf/0xd80 [ 23.989487][ T308] handle_mm_fault+0x15a2/0x2f40 [ 23.994256][ T308] ? numa_migrate_prep+0xe0/0xe0 [ 23.999025][ T308] ? lock_vma_under_rcu+0x47a/0x540 [ 24.004058][ T308] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 24.009969][ T308] ? exit_to_user_mode_prepare+0x39/0xa0 [ 24.015427][ T308] exc_page_fault+0x3a6/0x6e0 [ 24.019940][ T308] asm_exc_page_fault+0x27/0x30 [ 24.024624][ T308] RIP: 0033:0x7f6548cde750 [ 24.028965][ T308] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 24.048678][ T308] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 24.054577][ T308] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 24.062386][ T308] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [pid 308] exit_group(0) = ? [pid 308] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x555556883760, 24) = 0 [pid 295] <... clone resumed>, child_tidptr=0x555556883750) = 309 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] setpgid(0, 0) = 0 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 [pid 309] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 309] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 309] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 309] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 309] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 309] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 309] write(6, "7", 1) = 1 [pid 309] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 24.070200][ T308] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 24.078361][ T308] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 24.086166][ T308] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 24.094003][ T308] [ 24.097258][ T308] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 24.111227][ T309] FAULT_INJECTION: forcing a failure. [ 24.111227][ T309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 24.124746][ T309] CPU: 0 PID: 309 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 24.136096][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 24.145979][ T309] Call Trace: [ 24.149103][ T309] [ 24.151886][ T309] dump_stack_lvl+0x151/0x1b7 [ 24.156406][ T309] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 24.161693][ T309] ? yield_to_task_fair+0x190/0x190 [ 24.166721][ T309] dump_stack+0x15/0x17 [ 24.170711][ T309] should_fail_ex+0x3d0/0x520 [ 24.175703][ T309] should_fail_alloc_page+0x68/0x90 [ 24.180721][ T309] __alloc_pages+0x1f4/0x780 [ 24.185325][ T309] ? prep_new_page+0x110/0x110 [ 24.189929][ T309] ? __this_cpu_preempt_check+0x13/0x20 [ 24.195297][ T309] __folio_alloc+0x15/0x40 [ 24.199557][ T309] wp_page_copy+0x23c/0x1610 [ 24.203978][ T309] ? __switch_to+0x62c/0x1190 [ 24.208927][ T309] ? compat_start_thread+0x20/0x20 [ 24.213872][ T309] ? fault_dirty_shared_page+0x300/0x300 [ 24.219341][ T309] ? native_set_ldt+0x130/0x130 [ 24.224027][ T309] do_wp_page+0xbbf/0xd80 [ 24.228192][ T309] handle_mm_fault+0x15a2/0x2f40 [ 24.232971][ T309] ? numa_migrate_prep+0xe0/0xe0 [ 24.237740][ T309] ? lock_vma_under_rcu+0x47a/0x540 [ 24.242786][ T309] ? __kasan_check_write+0x14/0x20 [ 24.247723][ T309] ? fpregs_restore_userregs+0x130/0x290 [ 24.253202][ T309] exc_page_fault+0x3a6/0x6e0 [ 24.257703][ T309] asm_exc_page_fault+0x27/0x30 [ 24.262389][ T309] RIP: 0033:0x7f6548cde5e0 [ 24.266649][ T309] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0a 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 37 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 37 0a 00 4c [ 24.286345][ T309] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 24.292329][ T309] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 24.300141][ T309] RDX: 0000000000000001 RSI: 00007f6548d7f120 RDI: 0000000000000000 [ 24.308040][ T309] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 309] exit_group(0) = ? [pid 309] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x555556883760, 24) = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] <... clone resumed>, child_tidptr=0x555556883750) = 310 [pid 310] <... openat resumed>) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3) = 0 [pid 310] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 310] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 310] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 310] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 310] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 310] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 310] write(6, "7", 1) = 1 [pid 310] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 24.315853][ T309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc65ac59c [ 24.324019][ T309] R13: 431bde82d7b634db R14: 00007fffc65ac5c0 R15: 00007fffc65ac5a0 [ 24.331828][ T309] [ 24.334794][ T309] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 24.350273][ T310] FAULT_INJECTION: forcing a failure. [ 24.350273][ T310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 24.363831][ T310] CPU: 1 PID: 310 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 24.375193][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 24.385089][ T310] Call Trace: [ 24.388209][ T310] [ 24.390993][ T310] dump_stack_lvl+0x151/0x1b7 [ 24.395606][ T310] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 24.400893][ T310] ? __this_cpu_preempt_check+0x13/0x20 [ 24.406271][ T310] ? memcg_rstat_updated+0x4f/0x110 [ 24.411568][ T310] dump_stack+0x15/0x17 [ 24.415557][ T310] should_fail_ex+0x3d0/0x520 [ 24.420073][ T310] should_fail_alloc_page+0x68/0x90 [ 24.425124][ T310] __alloc_pages+0x1f4/0x780 [ 24.429703][ T310] ? prep_new_page+0x110/0x110 [ 24.434309][ T310] __folio_alloc+0x15/0x40 [ 24.438573][ T310] wp_page_copy+0x20c/0x1610 [ 24.443073][ T310] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 24.448547][ T310] ? fault_dirty_shared_page+0x300/0x300 [ 24.454006][ T310] ? __kasan_check_write+0x14/0x20 [ 24.458956][ T310] ? __switch_to+0x62c/0x1190 [ 24.463465][ T310] ? vm_normal_page+0x1de/0x1f0 [ 24.468152][ T310] do_wp_page+0xbbf/0xd80 [ 24.472320][ T310] handle_mm_fault+0x15a2/0x2f40 [ 24.477180][ T310] ? numa_migrate_prep+0xe0/0xe0 [ 24.482060][ T310] ? lock_vma_under_rcu+0x47a/0x540 [ 24.487094][ T310] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 24.492561][ T310] exc_page_fault+0x3a6/0x6e0 [ 24.497096][ T310] asm_exc_page_fault+0x27/0x30 [ 24.501759][ T310] RIP: 0033:0x7f6548cde750 [ 24.506195][ T310] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 24.525891][ T310] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 24.531976][ T310] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 24.539774][ T310] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 24.547590][ T310] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 24.555403][ T310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 24.563227][ T310] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [pid 310] exit_group(0) = ? [pid 310] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 312 ./strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x555556883760, 24) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 312] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 312] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 312] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 312] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 312] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 312] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 312] write(6, "7", 1) = 1 [pid 312] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 24.571024][ T310] [ 24.580294][ T312] FAULT_INJECTION: forcing a failure. [ 24.580294][ T312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 24.593477][ T312] CPU: 0 PID: 312 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 24.604815][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 24.614896][ T312] Call Trace: [ 24.618097][ T312] [ 24.620869][ T312] dump_stack_lvl+0x151/0x1b7 [ 24.625383][ T312] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 24.630784][ T312] ? __this_cpu_preempt_check+0x13/0x20 [ 24.636144][ T312] ? memcg_rstat_updated+0x4f/0x110 [ 24.641199][ T312] dump_stack+0x15/0x17 [ 24.645181][ T312] should_fail_ex+0x3d0/0x520 [ 24.649692][ T312] should_fail_alloc_page+0x68/0x90 [ 24.654759][ T312] __alloc_pages+0x1f4/0x780 [ 24.659153][ T312] ? prep_new_page+0x110/0x110 [ 24.663750][ T312] __folio_alloc+0x15/0x40 [ 24.668088][ T312] wp_page_copy+0x20c/0x1610 [ 24.672533][ T312] ? filemap_read_folio+0x2a0/0x2a0 [ 24.677550][ T312] ? fault_dirty_shared_page+0x300/0x300 [ 24.683016][ T312] ? vm_normal_page+0x1de/0x1f0 [ 24.687702][ T312] do_wp_page+0xbbf/0xd80 [ 24.691867][ T312] handle_mm_fault+0x15a2/0x2f40 [ 24.696644][ T312] ? numa_migrate_prep+0xe0/0xe0 [ 24.701432][ T312] ? lock_vma_under_rcu+0x47a/0x540 [ 24.706626][ T312] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 24.712530][ T312] ? exit_to_user_mode_prepare+0x39/0xa0 [ 24.717992][ T312] exc_page_fault+0x3a6/0x6e0 [ 24.722508][ T312] asm_exc_page_fault+0x27/0x30 [ 24.727190][ T312] RIP: 0033:0x7f6548cde750 [ 24.731443][ T312] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 24.751291][ T312] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 24.757163][ T312] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 24.764983][ T312] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [pid 312] exit_group(0) = ? [pid 312] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 313 ./strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x555556883760, 24) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 313] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 313] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 313] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 313] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 313] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 313] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 313] write(6, "7", 1) = 1 [pid 313] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 24.772786][ T312] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 24.780685][ T312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 24.788529][ T312] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 24.796487][ T312] [ 24.807065][ T313] FAULT_INJECTION: forcing a failure. [ 24.807065][ T313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 24.820237][ T313] CPU: 1 PID: 313 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 24.831840][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 24.841718][ T313] Call Trace: [ 24.844841][ T313] [ 24.847620][ T313] dump_stack_lvl+0x151/0x1b7 [ 24.852309][ T313] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 24.857602][ T313] ? __this_cpu_preempt_check+0x13/0x20 [ 24.862984][ T313] ? memcg_rstat_updated+0x4f/0x110 [ 24.868019][ T313] dump_stack+0x15/0x17 [ 24.872107][ T313] should_fail_ex+0x3d0/0x520 [ 24.876619][ T313] should_fail_alloc_page+0x68/0x90 [ 24.881822][ T313] __alloc_pages+0x1f4/0x780 [ 24.886364][ T313] ? prep_new_page+0x110/0x110 [ 24.890979][ T313] __folio_alloc+0x15/0x40 [ 24.895200][ T313] wp_page_copy+0x20c/0x1610 [ 24.899628][ T313] ? filemap_read_folio+0x2a0/0x2a0 [ 24.904663][ T313] ? fault_dirty_shared_page+0x300/0x300 [ 24.910141][ T313] ? vm_normal_page+0x1de/0x1f0 [ 24.914817][ T313] do_wp_page+0xbbf/0xd80 [ 24.918982][ T313] handle_mm_fault+0x15a2/0x2f40 [ 24.923859][ T313] ? numa_migrate_prep+0xe0/0xe0 [ 24.928621][ T313] ? lock_vma_under_rcu+0x47a/0x540 [ 24.933965][ T313] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 24.939862][ T313] ? exit_to_user_mode_prepare+0x39/0xa0 [ 24.945328][ T313] exc_page_fault+0x3a6/0x6e0 [ 24.949849][ T313] asm_exc_page_fault+0x27/0x30 [ 24.954633][ T313] RIP: 0033:0x7f6548cde750 [ 24.958866][ T313] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 24.978325][ T313] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 24.984215][ T313] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 24.992468][ T313] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 25.000352][ T313] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 25.008464][ T313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 25.016764][ T313] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [pid 313] exit_group(0) = ? [pid 313] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 314 attached , child_tidptr=0x555556883750) = 314 [pid 314] set_robust_list(0x555556883760, 24) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 314] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 314] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 314] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 314] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 314] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 314] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 314] write(6, "7", 1) = 1 [pid 314] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 25.024567][ T313] [ 25.036802][ T314] FAULT_INJECTION: forcing a failure. [ 25.036802][ T314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 25.050059][ T314] CPU: 0 PID: 314 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 25.061409][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 25.071552][ T314] Call Trace: [ 25.074684][ T314] [ 25.077456][ T314] dump_stack_lvl+0x151/0x1b7 [ 25.082052][ T314] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 25.087351][ T314] ? __this_cpu_preempt_check+0x13/0x20 [ 25.092737][ T314] ? memcg_rstat_updated+0x4f/0x110 [ 25.097760][ T314] dump_stack+0x15/0x17 [ 25.101750][ T314] should_fail_ex+0x3d0/0x520 [ 25.106358][ T314] should_fail_alloc_page+0x68/0x90 [ 25.111533][ T314] __alloc_pages+0x1f4/0x780 [ 25.115923][ T314] ? prep_new_page+0x110/0x110 [ 25.120502][ T314] __folio_alloc+0x15/0x40 [ 25.124870][ T314] wp_page_copy+0x20c/0x1610 [ 25.129289][ T314] ? filemap_read_folio+0x2a0/0x2a0 [ 25.134430][ T314] ? fault_dirty_shared_page+0x300/0x300 [ 25.139893][ T314] ? vm_normal_page+0x1de/0x1f0 [ 25.144578][ T314] do_wp_page+0xbbf/0xd80 [ 25.148742][ T314] handle_mm_fault+0x15a2/0x2f40 [ 25.153517][ T314] ? numa_migrate_prep+0xe0/0xe0 [ 25.158457][ T314] ? lock_vma_under_rcu+0x47a/0x540 [ 25.163494][ T314] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.169479][ T314] ? exit_to_user_mode_prepare+0x39/0xa0 [ 25.174945][ T314] exc_page_fault+0x3a6/0x6e0 [ 25.179462][ T314] asm_exc_page_fault+0x27/0x30 [ 25.184150][ T314] RIP: 0033:0x7f6548cde750 [ 25.188395][ T314] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 25.208010][ T314] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 25.214433][ T314] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [pid 314] exit_group(0) = ? [pid 314] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x555556883760, 24) = 0 [pid 295] <... clone resumed>, child_tidptr=0x555556883750) = 315 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3) = 0 [pid 315] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 315] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 315] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 315] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 315] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 315] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 315] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 315] write(6, "7", 1) = 1 [pid 315] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 25.222335][ T314] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 25.230225][ T314] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 25.238300][ T314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 25.246290][ T314] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 25.254183][ T314] [ 25.275422][ T315] FAULT_INJECTION: forcing a failure. [ 25.275422][ T315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 25.289098][ T315] CPU: 0 PID: 315 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 25.300901][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 25.310967][ T315] Call Trace: [ 25.314274][ T315] [ 25.317048][ T315] dump_stack_lvl+0x151/0x1b7 [ 25.321554][ T315] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 25.326848][ T315] ? __this_cpu_preempt_check+0x13/0x20 [ 25.332325][ T315] ? memcg_rstat_updated+0x4f/0x110 [ 25.337384][ T315] dump_stack+0x15/0x17 [ 25.341348][ T315] should_fail_ex+0x3d0/0x520 [ 25.345862][ T315] should_fail_alloc_page+0x68/0x90 [ 25.350915][ T315] __alloc_pages+0x1f4/0x780 [ 25.355421][ T315] ? prep_new_page+0x110/0x110 [ 25.360018][ T315] __folio_alloc+0x15/0x40 [ 25.364269][ T315] wp_page_copy+0x20c/0x1610 [ 25.368699][ T315] ? filemap_read_folio+0x2a0/0x2a0 [ 25.373729][ T315] ? fault_dirty_shared_page+0x300/0x300 [ 25.379199][ T315] ? vm_normal_page+0x1de/0x1f0 [ 25.383934][ T315] do_wp_page+0xbbf/0xd80 [ 25.388052][ T315] handle_mm_fault+0x15a2/0x2f40 [ 25.392827][ T315] ? numa_migrate_prep+0xe0/0xe0 [ 25.397600][ T315] ? lock_vma_under_rcu+0x47a/0x540 [ 25.402648][ T315] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.408542][ T315] ? exit_to_user_mode_prepare+0x39/0xa0 [ 25.414093][ T315] exc_page_fault+0x3a6/0x6e0 [ 25.418707][ T315] asm_exc_page_fault+0x27/0x30 [ 25.423377][ T315] RIP: 0033:0x7f6548cde750 [ 25.427626][ T315] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 25.447162][ T315] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 25.453139][ T315] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 25.460979][ T315] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 25.468776][ T315] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 315] exit_group(0) = ? [pid 315] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 317 ./strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x555556883760, 24) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 317] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 317] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 317] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 317] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 317] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 317] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 317] write(6, "7", 1) = 1 [pid 317] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 25.476596][ T315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 25.484481][ T315] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 25.492304][ T315] [ 25.505890][ T317] FAULT_INJECTION: forcing a failure. [ 25.505890][ T317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 25.519331][ T317] CPU: 0 PID: 317 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 25.530681][ T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 25.540665][ T317] Call Trace: [ 25.543960][ T317] [ 25.546748][ T317] dump_stack_lvl+0x151/0x1b7 [ 25.551250][ T317] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 25.556641][ T317] ? __this_cpu_preempt_check+0x13/0x20 [ 25.562101][ T317] ? memcg_rstat_updated+0x4f/0x110 [ 25.567663][ T317] dump_stack+0x15/0x17 [ 25.571647][ T317] should_fail_ex+0x3d0/0x520 [ 25.576172][ T317] should_fail_alloc_page+0x68/0x90 [ 25.581456][ T317] __alloc_pages+0x1f4/0x780 [ 25.585882][ T317] ? prep_new_page+0x110/0x110 [ 25.590507][ T317] __folio_alloc+0x15/0x40 [ 25.596901][ T317] wp_page_copy+0x20c/0x1610 [ 25.601335][ T317] ? filemap_read_folio+0x2a0/0x2a0 [ 25.606367][ T317] ? fault_dirty_shared_page+0x300/0x300 [ 25.611832][ T317] ? vm_normal_page+0x1de/0x1f0 [ 25.616518][ T317] do_wp_page+0xbbf/0xd80 [ 25.620692][ T317] handle_mm_fault+0x15a2/0x2f40 [ 25.625462][ T317] ? numa_migrate_prep+0xe0/0xe0 [ 25.630234][ T317] ? lock_vma_under_rcu+0x47a/0x540 [ 25.635375][ T317] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.641270][ T317] ? exit_to_user_mode_prepare+0x39/0xa0 [ 25.646736][ T317] exc_page_fault+0x3a6/0x6e0 [ 25.651336][ T317] asm_exc_page_fault+0x27/0x30 [ 25.656022][ T317] RIP: 0033:0x7f6548cde750 [pid 317] exit_group(0) = ? [pid 317] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 318 ./strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x555556883760, 24) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 318] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 318] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 318] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 318] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 318] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 318] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 318] write(6, "7", 1) = 1 [pid 318] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 25.660277][ T317] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 25.679714][ T317] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 25.685615][ T317] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 25.693453][ T317] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 25.701337][ T317] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 25.709225][ T317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 25.717036][ T317] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 25.724868][ T317] [ 25.735696][ T318] FAULT_INJECTION: forcing a failure. [ 25.735696][ T318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 25.748860][ T318] CPU: 1 PID: 318 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 25.760176][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 25.770080][ T318] Call Trace: [ 25.773279][ T318] [ 25.776071][ T318] dump_stack_lvl+0x151/0x1b7 [ 25.780884][ T318] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 25.786440][ T318] ? __this_cpu_preempt_check+0x13/0x20 [ 25.791816][ T318] ? memcg_rstat_updated+0x4f/0x110 [ 25.796940][ T318] dump_stack+0x15/0x17 [ 25.800934][ T318] should_fail_ex+0x3d0/0x520 [ 25.805444][ T318] should_fail_alloc_page+0x68/0x90 [ 25.810564][ T318] __alloc_pages+0x1f4/0x780 [ 25.814993][ T318] ? prep_new_page+0x110/0x110 [ 25.819593][ T318] __folio_alloc+0x15/0x40 [ 25.823885][ T318] wp_page_copy+0x20c/0x1610 [ 25.828284][ T318] ? filemap_read_folio+0x2a0/0x2a0 [ 25.833475][ T318] ? fault_dirty_shared_page+0x300/0x300 [ 25.838944][ T318] ? vm_normal_page+0x1de/0x1f0 [ 25.843638][ T318] do_wp_page+0xbbf/0xd80 [ 25.847800][ T318] handle_mm_fault+0x15a2/0x2f40 [ 25.852574][ T318] ? numa_migrate_prep+0xe0/0xe0 [ 25.857360][ T318] ? lock_vma_under_rcu+0x47a/0x540 [ 25.862466][ T318] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.868371][ T318] ? exit_to_user_mode_prepare+0x39/0xa0 [ 25.874706][ T318] exc_page_fault+0x3a6/0x6e0 [ 25.879225][ T318] asm_exc_page_fault+0x27/0x30 [ 25.883907][ T318] RIP: 0033:0x7f6548cde750 [ 25.888348][ T318] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 25.907769][ T318] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 25.913810][ T318] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 25.921618][ T318] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [pid 318] exit_group(0) = ? [pid 318] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 319 ./strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x555556883760, 24) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3) = 0 [pid 319] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 319] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 319] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 319] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 319] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 319] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 319] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 319] write(6, "7", 1) = 1 [pid 319] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 25.929518][ T318] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 25.937338][ T318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 25.945138][ T318] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 25.952954][ T318] [ 25.965309][ T319] FAULT_INJECTION: forcing a failure. [ 25.965309][ T319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 25.978511][ T319] CPU: 0 PID: 319 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 25.989859][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 25.999753][ T319] Call Trace: [ 26.002880][ T319] [ 26.005662][ T319] dump_stack_lvl+0x151/0x1b7 [ 26.010170][ T319] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 26.015464][ T319] ? __this_cpu_preempt_check+0x13/0x20 [ 26.020847][ T319] ? memcg_rstat_updated+0x4f/0x110 [ 26.025879][ T319] dump_stack+0x15/0x17 [ 26.029870][ T319] should_fail_ex+0x3d0/0x520 [ 26.034385][ T319] should_fail_alloc_page+0x68/0x90 [ 26.039418][ T319] __alloc_pages+0x1f4/0x780 [ 26.043852][ T319] ? prep_new_page+0x110/0x110 [ 26.048468][ T319] __folio_alloc+0x15/0x40 [ 26.052705][ T319] wp_page_copy+0x20c/0x1610 [ 26.057126][ T319] ? filemap_read_folio+0x2a0/0x2a0 [ 26.062158][ T319] ? fault_dirty_shared_page+0x300/0x300 [ 26.067625][ T319] ? vm_normal_page+0x1de/0x1f0 [ 26.072314][ T319] do_wp_page+0xbbf/0xd80 [ 26.076497][ T319] handle_mm_fault+0x15a2/0x2f40 [ 26.081252][ T319] ? numa_migrate_prep+0xe0/0xe0 [ 26.086025][ T319] ? lock_vma_under_rcu+0x47a/0x540 [ 26.091060][ T319] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 26.096962][ T319] ? exit_to_user_mode_prepare+0x39/0xa0 [ 26.102428][ T319] exc_page_fault+0x3a6/0x6e0 [ 26.106941][ T319] asm_exc_page_fault+0x27/0x30 [ 26.111626][ T319] RIP: 0033:0x7f6548cde750 [ 26.115882][ T319] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [pid 319] exit_group(0) = ? [pid 319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 320 ./strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x555556883760, 24) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 [pid 320] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 320] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 320] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 320] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 320] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 320] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 320] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 320] write(6, "7", 1) = 1 [pid 320] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 26.135329][ T319] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 26.141222][ T319] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 26.149035][ T319] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 26.156846][ T319] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 26.164658][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 26.172553][ T319] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 26.180373][ T319] [ 26.188869][ T320] FAULT_INJECTION: forcing a failure. [ 26.188869][ T320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 26.201952][ T320] CPU: 1 PID: 320 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 26.213257][ T320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 26.223154][ T320] Call Trace: [ 26.226273][ T320] [ 26.229051][ T320] dump_stack_lvl+0x151/0x1b7 [ 26.233567][ T320] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 26.238860][ T320] ? __this_cpu_preempt_check+0x13/0x20 [ 26.244240][ T320] ? memcg_rstat_updated+0x4f/0x110 [ 26.249274][ T320] dump_stack+0x15/0x17 [ 26.253264][ T320] should_fail_ex+0x3d0/0x520 [ 26.257803][ T320] should_fail_alloc_page+0x68/0x90 [ 26.262816][ T320] __alloc_pages+0x1f4/0x780 [ 26.267243][ T320] ? prep_new_page+0x110/0x110 [ 26.271841][ T320] __folio_alloc+0x15/0x40 [ 26.276093][ T320] wp_page_copy+0x20c/0x1610 [ 26.280521][ T320] ? filemap_read_folio+0x2a0/0x2a0 [ 26.285552][ T320] ? fault_dirty_shared_page+0x300/0x300 [ 26.291025][ T320] ? vm_normal_page+0x1de/0x1f0 [ 26.295707][ T320] do_wp_page+0xbbf/0xd80 [ 26.299895][ T320] handle_mm_fault+0x15a2/0x2f40 [ 26.304648][ T320] ? numa_migrate_prep+0xe0/0xe0 [ 26.309421][ T320] ? lock_vma_under_rcu+0x47a/0x540 [ 26.314456][ T320] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 26.320365][ T320] ? exit_to_user_mode_prepare+0x39/0xa0 [ 26.325824][ T320] exc_page_fault+0x3a6/0x6e0 [ 26.330338][ T320] asm_exc_page_fault+0x27/0x30 [ 26.335025][ T320] RIP: 0033:0x7f6548cde750 [ 26.339277][ T320] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 26.358718][ T320] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 26.364621][ T320] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 26.372430][ T320] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 26.380242][ T320] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 321 ./strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x555556883760, 24) = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 [pid 321] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 321] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 321] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 321] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 321] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 321] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 321] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 321] write(6, "7", 1) = 1 [pid 321] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 26.388053][ T320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 26.395864][ T320] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 26.403678][ T320] [ 26.415858][ T321] FAULT_INJECTION: forcing a failure. [ 26.415858][ T321] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 26.429061][ T321] CPU: 0 PID: 321 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 26.440484][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 26.450378][ T321] Call Trace: [ 26.453497][ T321] [ 26.456281][ T321] dump_stack_lvl+0x151/0x1b7 [ 26.460791][ T321] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 26.466097][ T321] ? __this_cpu_preempt_check+0x13/0x20 [ 26.471484][ T321] ? memcg_rstat_updated+0x4f/0x110 [ 26.476499][ T321] dump_stack+0x15/0x17 [ 26.480493][ T321] should_fail_ex+0x3d0/0x520 [ 26.485007][ T321] should_fail_alloc_page+0x68/0x90 [ 26.490041][ T321] __alloc_pages+0x1f4/0x780 [ 26.494468][ T321] ? prep_new_page+0x110/0x110 [ 26.499077][ T321] __folio_alloc+0x15/0x40 [ 26.503317][ T321] wp_page_copy+0x20c/0x1610 [ 26.507745][ T321] ? filemap_read_folio+0x2a0/0x2a0 [ 26.512777][ T321] ? fault_dirty_shared_page+0x300/0x300 [ 26.518247][ T321] ? vm_normal_page+0x1de/0x1f0 [ 26.522932][ T321] do_wp_page+0xbbf/0xd80 [ 26.527102][ T321] handle_mm_fault+0x15a2/0x2f40 [ 26.531873][ T321] ? numa_migrate_prep+0xe0/0xe0 [ 26.536648][ T321] ? lock_vma_under_rcu+0x47a/0x540 [ 26.541682][ T321] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 26.547581][ T321] ? exit_to_user_mode_prepare+0x39/0xa0 [ 26.553046][ T321] exc_page_fault+0x3a6/0x6e0 [ 26.557563][ T321] asm_exc_page_fault+0x27/0x30 [ 26.562249][ T321] RIP: 0033:0x7f6548cde750 [ 26.566555][ T321] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 323 ./strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x555556883760, 24) = 0 [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 323] setpgid(0, 0) = 0 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 323] write(3, "1000", 4) = 4 [pid 323] close(3) = 0 [pid 323] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 323] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 323] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 323] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 323] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 323] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 323] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 323] write(6, "7", 1) = 1 [pid 323] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 26.585953][ T321] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 26.591849][ T321] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 26.599665][ T321] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 26.607467][ T321] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 26.615279][ T321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 26.623091][ T321] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 26.630912][ T321] [ 26.642064][ T323] FAULT_INJECTION: forcing a failure. [ 26.642064][ T323] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 26.655319][ T323] CPU: 0 PID: 323 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 26.666674][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 26.676743][ T323] Call Trace: [ 26.679865][ T323] [ 26.682644][ T323] dump_stack_lvl+0x151/0x1b7 [ 26.687162][ T323] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 26.692451][ T323] ? __this_cpu_preempt_check+0x13/0x20 [ 26.697831][ T323] ? memcg_rstat_updated+0x4f/0x110 [ 26.702867][ T323] dump_stack+0x15/0x17 [ 26.706859][ T323] should_fail_ex+0x3d0/0x520 [ 26.711373][ T323] should_fail_alloc_page+0x68/0x90 [ 26.716520][ T323] __alloc_pages+0x1f4/0x780 [ 26.720968][ T323] ? prep_new_page+0x110/0x110 [ 26.725565][ T323] __folio_alloc+0x15/0x40 [ 26.729815][ T323] wp_page_copy+0x20c/0x1610 [ 26.734244][ T323] ? filemap_read_folio+0x2a0/0x2a0 [ 26.739277][ T323] ? fault_dirty_shared_page+0x300/0x300 [ 26.745268][ T323] ? vm_normal_page+0x1de/0x1f0 [ 26.749951][ T323] do_wp_page+0xbbf/0xd80 [ 26.754123][ T323] handle_mm_fault+0x15a2/0x2f40 [ 26.758892][ T323] ? numa_migrate_prep+0xe0/0xe0 [ 26.763665][ T323] ? lock_vma_under_rcu+0x47a/0x540 [ 26.768789][ T323] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 26.774687][ T323] ? exit_to_user_mode_prepare+0x39/0xa0 [ 26.780155][ T323] exc_page_fault+0x3a6/0x6e0 [ 26.784670][ T323] asm_exc_page_fault+0x27/0x30 [ 26.789358][ T323] RIP: 0033:0x7f6548cde750 [ 26.793610][ T323] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 26.813050][ T323] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 26.818948][ T323] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 26.826760][ T323] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 26.834572][ T323] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 323] exit_group(0) = ? [pid 323] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 324 ./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x555556883760, 24) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 [pid 324] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 324] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 324] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 324] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 324] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 324] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 324] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 324] write(6, "7", 1) = 1 [pid 324] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 26.842389][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 26.850197][ T323] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 26.858012][ T323] [ 26.866512][ T324] FAULT_INJECTION: forcing a failure. [ 26.866512][ T324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 26.879565][ T324] CPU: 1 PID: 324 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 26.890894][ T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 26.900787][ T324] Call Trace: [ 26.903910][ T324] [ 26.906688][ T324] dump_stack_lvl+0x151/0x1b7 [ 26.911201][ T324] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 26.916497][ T324] ? __this_cpu_preempt_check+0x13/0x20 [ 26.921879][ T324] ? memcg_rstat_updated+0x4f/0x110 [ 26.926912][ T324] dump_stack+0x15/0x17 [ 26.930902][ T324] should_fail_ex+0x3d0/0x520 [ 26.935431][ T324] should_fail_alloc_page+0x68/0x90 [ 26.940449][ T324] __alloc_pages+0x1f4/0x780 [ 26.944877][ T324] ? prep_new_page+0x110/0x110 [ 26.949480][ T324] __folio_alloc+0x15/0x40 [ 26.953730][ T324] wp_page_copy+0x20c/0x1610 [ 26.958156][ T324] ? filemap_read_folio+0x2a0/0x2a0 [ 26.963191][ T324] ? fault_dirty_shared_page+0x300/0x300 [ 26.968658][ T324] ? vm_normal_page+0x1de/0x1f0 [ 26.973350][ T324] do_wp_page+0xbbf/0xd80 [ 26.977513][ T324] handle_mm_fault+0x15a2/0x2f40 [ 26.982374][ T324] ? numa_migrate_prep+0xe0/0xe0 [ 26.987145][ T324] ? lock_vma_under_rcu+0x47a/0x540 [ 26.992180][ T324] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 26.998171][ T324] ? exit_to_user_mode_prepare+0x39/0xa0 [ 27.003635][ T324] exc_page_fault+0x3a6/0x6e0 [ 27.008149][ T324] asm_exc_page_fault+0x27/0x30 [ 27.012834][ T324] RIP: 0033:0x7f6548cde750 [ 27.017087][ T324] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 27.036530][ T324] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [pid 324] exit_group(0) = ? [pid 324] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 325 ./strace-static-x86_64: Process 325 attached [pid 325] set_robust_list(0x555556883760, 24) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 325] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 325] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 325] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 325] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 325] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 325] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 325] write(6, "7", 1) = 1 [pid 325] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 27.042430][ T324] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 27.050240][ T324] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 27.058052][ T324] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 27.065865][ T324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 27.073677][ T324] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 27.081496][ T324] [ 27.092990][ T325] FAULT_INJECTION: forcing a failure. [ 27.092990][ T325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 27.106093][ T325] CPU: 1 PID: 325 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 27.117373][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 27.127351][ T325] Call Trace: [ 27.130468][ T325] [ 27.133249][ T325] dump_stack_lvl+0x151/0x1b7 [ 27.137764][ T325] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 27.143054][ T325] ? __this_cpu_preempt_check+0x13/0x20 [ 27.148437][ T325] ? memcg_rstat_updated+0x4f/0x110 [ 27.153471][ T325] dump_stack+0x15/0x17 [ 27.157461][ T325] should_fail_ex+0x3d0/0x520 [ 27.161977][ T325] should_fail_alloc_page+0x68/0x90 [ 27.167095][ T325] __alloc_pages+0x1f4/0x780 [ 27.171528][ T325] ? prep_new_page+0x110/0x110 [ 27.176128][ T325] __folio_alloc+0x15/0x40 [ 27.180372][ T325] wp_page_copy+0x20c/0x1610 [ 27.184799][ T325] ? filemap_read_folio+0x2a0/0x2a0 [ 27.189833][ T325] ? fault_dirty_shared_page+0x300/0x300 [ 27.195307][ T325] ? vm_normal_page+0x1de/0x1f0 [ 27.199991][ T325] do_wp_page+0xbbf/0xd80 [ 27.204155][ T325] handle_mm_fault+0x15a2/0x2f40 [ 27.208939][ T325] ? numa_migrate_prep+0xe0/0xe0 [ 27.213699][ T325] ? lock_vma_under_rcu+0x47a/0x540 [ 27.219089][ T325] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 27.224988][ T325] ? exit_to_user_mode_prepare+0x39/0xa0 [ 27.230454][ T325] exc_page_fault+0x3a6/0x6e0 [ 27.234969][ T325] asm_exc_page_fault+0x27/0x30 [ 27.239711][ T325] RIP: 0033:0x7f6548cde750 [ 27.243919][ T325] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 27.263351][ T325] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 27.269254][ T325] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 27.277067][ T325] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 27.284886][ T325] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 325] exit_group(0) = ? [pid 325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 326 ./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x555556883760, 24) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 [pid 326] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 326] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 326] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 326] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 326] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 326] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 326] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 326] write(6, "7", 1) = 1 [pid 326] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 27.292684][ T325] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 27.300496][ T325] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 27.308311][ T325] [ 27.312199][ T325] pagefault_out_of_memory: 12 callbacks suppressed [ 27.312212][ T325] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 27.344665][ T326] FAULT_INJECTION: forcing a failure. [ 27.344665][ T326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 27.357976][ T326] CPU: 0 PID: 326 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 27.369310][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 27.379205][ T326] Call Trace: [ 27.382326][ T326] [ 27.385103][ T326] dump_stack_lvl+0x151/0x1b7 [ 27.389626][ T326] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 27.394911][ T326] ? __this_cpu_preempt_check+0x13/0x20 [ 27.400294][ T326] ? memcg_rstat_updated+0x4f/0x110 [ 27.405327][ T326] dump_stack+0x15/0x17 [ 27.409320][ T326] should_fail_ex+0x3d0/0x520 [ 27.413833][ T326] should_fail_alloc_page+0x68/0x90 [ 27.418867][ T326] __alloc_pages+0x1f4/0x780 [ 27.423296][ T326] ? prep_new_page+0x110/0x110 [ 27.427895][ T326] __folio_alloc+0x15/0x40 [ 27.432145][ T326] wp_page_copy+0x20c/0x1610 [ 27.436577][ T326] ? filemap_read_folio+0x2a0/0x2a0 [ 27.441607][ T326] ? fault_dirty_shared_page+0x300/0x300 [ 27.447076][ T326] ? vm_normal_page+0x1de/0x1f0 [ 27.451761][ T326] do_wp_page+0xbbf/0xd80 [ 27.455930][ T326] handle_mm_fault+0x15a2/0x2f40 [ 27.460704][ T326] ? numa_migrate_prep+0xe0/0xe0 [ 27.465475][ T326] ? lock_vma_under_rcu+0x47a/0x540 [ 27.470508][ T326] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 27.476506][ T326] ? exit_to_user_mode_prepare+0x39/0xa0 [ 27.482155][ T326] exc_page_fault+0x3a6/0x6e0 [ 27.486650][ T326] asm_exc_page_fault+0x27/0x30 [ 27.491334][ T326] RIP: 0033:0x7f6548cde750 [ 27.495589][ T326] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 27.515034][ T326] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 27.520933][ T326] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 27.528745][ T326] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 27.536556][ T326] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 326] exit_group(0) = ? [pid 326] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x555556883760, 24) = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 [pid 327] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 327] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72 [pid 295] <... clone resumed>, child_tidptr=0x555556883750) = 327 [pid 327] <... bpf resumed>) = 4 [pid 327] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 327] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 327] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 327] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 327] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 327] write(6, "7", 1) = 1 [pid 327] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 27.544369][ T326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 27.552283][ T326] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 27.560097][ T326] [ 27.563222][ T326] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 27.576843][ T327] FAULT_INJECTION: forcing a failure. [ 27.576843][ T327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 27.590059][ T327] CPU: 0 PID: 327 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 27.601394][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 27.611290][ T327] Call Trace: [ 27.614410][ T327] [ 27.617187][ T327] dump_stack_lvl+0x151/0x1b7 [ 27.621703][ T327] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 27.626996][ T327] ? __this_cpu_preempt_check+0x13/0x20 [ 27.632376][ T327] ? memcg_rstat_updated+0x4f/0x110 [ 27.637417][ T327] dump_stack+0x15/0x17 [ 27.641491][ T327] should_fail_ex+0x3d0/0x520 [ 27.646007][ T327] should_fail_alloc_page+0x68/0x90 [ 27.651038][ T327] __alloc_pages+0x1f4/0x780 [ 27.655466][ T327] ? prep_new_page+0x110/0x110 [ 27.660067][ T327] __folio_alloc+0x15/0x40 [ 27.664316][ T327] wp_page_copy+0x20c/0x1610 [ 27.669009][ T327] ? filemap_read_folio+0x2a0/0x2a0 [ 27.674038][ T327] ? fault_dirty_shared_page+0x300/0x300 [ 27.679507][ T327] ? vm_normal_page+0x1de/0x1f0 [ 27.684194][ T327] do_wp_page+0xbbf/0xd80 [ 27.688361][ T327] handle_mm_fault+0x15a2/0x2f40 [ 27.693136][ T327] ? numa_migrate_prep+0xe0/0xe0 [ 27.697907][ T327] ? lock_vma_under_rcu+0x47a/0x540 [ 27.702942][ T327] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 27.708927][ T327] ? exit_to_user_mode_prepare+0x39/0xa0 [ 27.714395][ T327] exc_page_fault+0x3a6/0x6e0 [ 27.718909][ T327] asm_exc_page_fault+0x27/0x30 [ 27.723593][ T327] RIP: 0033:0x7f6548cde750 [ 27.727850][ T327] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 27.747469][ T327] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 27.753371][ T327] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 27.761190][ T327] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 27.768987][ T327] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 27.776799][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 27.784624][ T327] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 27.792426][ T327] [pid 327] exit_group(0) = ? [pid 327] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 330 ./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x555556883760, 24) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 330] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 330] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 330] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 330] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 330] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 330] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 330] write(6, "7", 1) = 1 [pid 330] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 27.795504][ T327] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 27.797492][ T28] audit: type=1400 audit(1694298062.960:73): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.825946][ T28] audit: type=1400 audit(1694298062.960:74): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.852250][ T330] FAULT_INJECTION: forcing a failure. [ 27.852250][ T330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 27.865571][ T330] CPU: 0 PID: 330 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 27.876922][ T330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 27.886810][ T330] Call Trace: [ 27.889933][ T330] [ 27.892712][ T330] dump_stack_lvl+0x151/0x1b7 [ 27.897223][ T330] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 27.902520][ T330] ? __this_cpu_preempt_check+0x13/0x20 [ 27.907902][ T330] ? memcg_rstat_updated+0x4f/0x110 [ 27.912935][ T330] dump_stack+0x15/0x17 [ 27.916929][ T330] should_fail_ex+0x3d0/0x520 [ 27.921441][ T330] should_fail_alloc_page+0x68/0x90 [ 27.926475][ T330] __alloc_pages+0x1f4/0x780 [ 27.930900][ T330] ? prep_new_page+0x110/0x110 [ 27.935501][ T330] __folio_alloc+0x15/0x40 [ 27.939750][ T330] wp_page_copy+0x20c/0x1610 [ 27.944180][ T330] ? filemap_read_folio+0x2a0/0x2a0 [ 27.949212][ T330] ? fault_dirty_shared_page+0x300/0x300 [ 27.954682][ T330] ? vm_normal_page+0x1de/0x1f0 [ 27.959367][ T330] do_wp_page+0xbbf/0xd80 [ 27.963534][ T330] handle_mm_fault+0x15a2/0x2f40 [ 27.968307][ T330] ? numa_migrate_prep+0xe0/0xe0 [ 27.973081][ T330] ? lock_vma_under_rcu+0x47a/0x540 [ 27.978127][ T330] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 27.984017][ T330] ? exit_to_user_mode_prepare+0x39/0xa0 [ 27.989482][ T330] exc_page_fault+0x3a6/0x6e0 [ 27.993997][ T330] asm_exc_page_fault+0x27/0x30 [ 27.998687][ T330] RIP: 0033:0x7f6548cde750 [ 28.002945][ T330] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 28.022377][ T330] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 28.028301][ T330] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 28.036089][ T330] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 28.043907][ T330] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 331 ./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x555556883760, 24) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 [pid 331] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 331] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 331] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 331] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 331] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 331] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 331] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 331] write(6, "7", 1) = 1 [pid 331] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 28.051714][ T330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 28.059523][ T330] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 28.067347][ T330] [ 28.070528][ T330] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 28.085862][ T331] FAULT_INJECTION: forcing a failure. [ 28.085862][ T331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 28.099006][ T331] CPU: 0 PID: 331 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 28.110344][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 28.120237][ T331] Call Trace: [ 28.123359][ T331] [ 28.126139][ T331] dump_stack_lvl+0x151/0x1b7 [ 28.130651][ T331] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 28.135947][ T331] ? __this_cpu_preempt_check+0x13/0x20 [ 28.141325][ T331] ? memcg_rstat_updated+0x4f/0x110 [ 28.146361][ T331] dump_stack+0x15/0x17 [ 28.150353][ T331] should_fail_ex+0x3d0/0x520 [ 28.154866][ T331] should_fail_alloc_page+0x68/0x90 [ 28.159914][ T331] __alloc_pages+0x1f4/0x780 [ 28.164333][ T331] ? prep_new_page+0x110/0x110 [ 28.168929][ T331] __folio_alloc+0x15/0x40 [ 28.173187][ T331] wp_page_copy+0x20c/0x1610 [ 28.177607][ T331] ? filemap_read_folio+0x2a0/0x2a0 [ 28.182642][ T331] ? fault_dirty_shared_page+0x300/0x300 [ 28.188110][ T331] ? vm_normal_page+0x1de/0x1f0 [ 28.192797][ T331] do_wp_page+0xbbf/0xd80 [ 28.196962][ T331] handle_mm_fault+0x15a2/0x2f40 [ 28.201735][ T331] ? numa_migrate_prep+0xe0/0xe0 [ 28.206507][ T331] ? lock_vma_under_rcu+0x47a/0x540 [ 28.211547][ T331] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 28.217442][ T331] ? exit_to_user_mode_prepare+0x39/0xa0 [ 28.222910][ T331] exc_page_fault+0x3a6/0x6e0 [ 28.227425][ T331] asm_exc_page_fault+0x27/0x30 [ 28.232110][ T331] RIP: 0033:0x7f6548cde750 [ 28.236362][ T331] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 28.255810][ T331] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 28.261708][ T331] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 28.269518][ T331] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 28.277328][ T331] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 28.285229][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 28.293037][ T331] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 28.300855][ T331] [pid 331] exit_group(0) = ? [pid 331] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 332 ./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x555556883760, 24) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 332] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 332] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 332] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 332] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 332] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 332] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 332] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 332] write(6, "7", 1) = 1 [ 28.303915][ T331] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 28.320059][ T332] FAULT_INJECTION: forcing a failure. [ 28.320059][ T332] name failslab, interval 1, probability 0, space 0, times 0 [ 28.332579][ T332] CPU: 0 PID: 332 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 28.343828][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 28.353724][ T332] Call Trace: [ 28.356846][ T332] [ 28.359747][ T332] dump_stack_lvl+0x151/0x1b7 [ 28.364224][ T332] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 28.369516][ T332] ? __build_skb_around+0x23f/0x3d0 [ 28.374560][ T332] dump_stack+0x15/0x17 [ 28.378551][ T332] should_fail_ex+0x3d0/0x520 [ 28.383059][ T332] ? getname_kernel+0x59/0x2e0 [ 28.387660][ T332] __should_failslab+0xaf/0xf0 [ 28.392258][ T332] should_failslab+0x9/0x20 [ 28.396598][ T332] kmem_cache_alloc+0x3b/0x2c0 [ 28.401199][ T332] ? sock_alloc_send_pskb+0x936/0xa50 [ 28.406405][ T332] getname_kernel+0x59/0x2e0 [ 28.410831][ T332] kern_path+0x23/0x1a0 [ 28.414834][ T332] unix_find_other+0xf9/0x8e0 [ 28.419340][ T332] ? avc_has_perm+0x16f/0x260 [ 28.423849][ T332] ? unix_insert_bsd_socket+0x250/0x250 [ 28.429240][ T332] unix_dgram_sendmsg+0xc1f/0x2050 [ 28.434187][ T332] ? unix_dgram_poll+0x710/0x710 [ 28.438953][ T332] ? security_socket_sendmsg+0x82/0xb0 [ 28.444251][ T332] ? unix_dgram_poll+0x710/0x710 [ 28.449113][ T332] ____sys_sendmsg+0x5dc/0x9d0 [ 28.453707][ T332] ? __sys_sendmsg_sock+0x40/0x40 [ 28.458572][ T332] __sys_sendmmsg+0x3b9/0x6f0 [ 28.463079][ T332] ? __ia32_sys_sendmsg+0x90/0x90 [ 28.467943][ T332] ? __switch_to+0x62c/0x1190 [ 28.472460][ T332] ? __sched_clock_gtod_offset+0x100/0x100 [ 28.478097][ T332] ? _raw_spin_unlock+0x4c/0x70 [ 28.482783][ T332] ? finish_task_switch+0x167/0x7b0 [ 28.487816][ T332] ? __schedule+0xca1/0x1540 [ 28.492241][ T332] ? __kasan_check_write+0x14/0x20 [ 28.497189][ T332] ? __kasan_check_write+0x14/0x20 [ 28.502136][ T332] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 28.507085][ T332] ? _raw_spin_lock_irqsave+0x210/0x210 [ 28.512463][ T332] ? cgroup_update_frozen+0x15f/0x980 [ 28.517678][ T332] ? memset+0x35/0x40 [ 28.521498][ T332] ? __kasan_check_write+0x14/0x20 [ 28.526438][ T332] ? fpregs_restore_userregs+0x130/0x290 [ 28.531910][ T332] __x64_sys_sendmmsg+0xa0/0xb0 [ 28.536595][ T332] do_syscall_64+0x3d/0xb0 [ 28.540844][ T332] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 28.546574][ T332] RIP: 0033:0x7f6548d10069 [ 28.550827][ T332] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 28.570270][ T332] RSP: 002b:00007fffc65ac4b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 28.578515][ T332] RAX: ffffffffffffffda RBX: 00007fffc65ac4c0 RCX: 00007f6548d10069 [ 28.586325][ T332] RDX: 0000000000000001 RSI: 00000000200063c0 RDI: 0000000000000003 [ 28.594141][ T332] RBP: 0000000000000001 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 332] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ENOMEM (Cannot allocate memory) [pid 332] exit_group(0) = ? [pid 332] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 333 ./strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x555556883760, 24) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 333] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 333] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 333] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 333] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 333] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 333] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 333] write(6, "7", 1) = 1 [pid 333] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 28.601946][ T332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc65ac59c [ 28.609755][ T332] R13: 431bde82d7b634db R14: 00007fffc65ac5c0 R15: 00007fffc65ac5a0 [ 28.617580][ T332] [ 28.630145][ T333] FAULT_INJECTION: forcing a failure. [ 28.630145][ T333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 28.643371][ T333] CPU: 0 PID: 333 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 28.654722][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 28.664612][ T333] Call Trace: [ 28.667738][ T333] [ 28.670514][ T333] dump_stack_lvl+0x151/0x1b7 [ 28.675027][ T333] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 28.680321][ T333] ? __this_cpu_preempt_check+0x13/0x20 [ 28.685702][ T333] ? memcg_rstat_updated+0x4f/0x110 [ 28.690737][ T333] dump_stack+0x15/0x17 [ 28.694736][ T333] should_fail_ex+0x3d0/0x520 [ 28.699243][ T333] should_fail_alloc_page+0x68/0x90 [ 28.704277][ T333] __alloc_pages+0x1f4/0x780 [ 28.708709][ T333] ? prep_new_page+0x110/0x110 [ 28.713305][ T333] __folio_alloc+0x15/0x40 [ 28.717565][ T333] wp_page_copy+0x20c/0x1610 [ 28.721983][ T333] ? filemap_read_folio+0x2a0/0x2a0 [ 28.727017][ T333] ? fault_dirty_shared_page+0x300/0x300 [ 28.732485][ T333] ? vm_normal_page+0x1de/0x1f0 [ 28.737170][ T333] do_wp_page+0xbbf/0xd80 [ 28.741338][ T333] handle_mm_fault+0x15a2/0x2f40 [ 28.746113][ T333] ? numa_migrate_prep+0xe0/0xe0 [ 28.750883][ T333] ? lock_vma_under_rcu+0x47a/0x540 [ 28.755920][ T333] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 28.761820][ T333] ? exit_to_user_mode_prepare+0x39/0xa0 [ 28.767290][ T333] exc_page_fault+0x3a6/0x6e0 [ 28.771804][ T333] asm_exc_page_fault+0x27/0x30 [ 28.776486][ T333] RIP: 0033:0x7f6548cde750 [ 28.780740][ T333] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 28.800182][ T333] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [pid 333] exit_group(0) = ? [pid 333] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [ 28.806087][ T333] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 28.813894][ T333] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 28.821703][ T333] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 28.829524][ T333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 28.837334][ T333] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 28.845141][ T333] [ 28.848370][ T333] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 335 ./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x555556883760, 24) = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 335] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 335] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 335] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 335] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 335] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 335] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 335] write(6, "7", 1) = 1 [pid 335] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 28.861912][ T335] FAULT_INJECTION: forcing a failure. [ 28.861912][ T335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 28.875279][ T335] CPU: 0 PID: 335 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 28.886624][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 28.896519][ T335] Call Trace: [ 28.899641][ T335] [ 28.902422][ T335] dump_stack_lvl+0x151/0x1b7 [ 28.906933][ T335] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 28.912313][ T335] ? __this_cpu_preempt_check+0x13/0x20 [ 28.917697][ T335] ? memcg_rstat_updated+0x4f/0x110 [ 28.922730][ T335] dump_stack+0x15/0x17 [ 28.926723][ T335] should_fail_ex+0x3d0/0x520 [ 28.931234][ T335] should_fail_alloc_page+0x68/0x90 [ 28.936268][ T335] __alloc_pages+0x1f4/0x780 [ 28.940694][ T335] ? prep_new_page+0x110/0x110 [ 28.945296][ T335] __folio_alloc+0x15/0x40 [ 28.949548][ T335] wp_page_copy+0x20c/0x1610 [ 28.953976][ T335] ? filemap_read_folio+0x2a0/0x2a0 [ 28.959008][ T335] ? fault_dirty_shared_page+0x300/0x300 [ 28.964479][ T335] ? vm_normal_page+0x1de/0x1f0 [ 28.969162][ T335] do_wp_page+0xbbf/0xd80 [ 28.973330][ T335] handle_mm_fault+0x15a2/0x2f40 [ 28.978105][ T335] ? numa_migrate_prep+0xe0/0xe0 [ 28.982875][ T335] ? lock_vma_under_rcu+0x47a/0x540 [ 28.987912][ T335] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 28.993988][ T335] ? exit_to_user_mode_prepare+0x39/0xa0 [ 28.999455][ T335] exc_page_fault+0x3a6/0x6e0 [ 29.003969][ T335] asm_exc_page_fault+0x27/0x30 [ 29.008654][ T335] RIP: 0033:0x7f6548cde750 [ 29.012905][ T335] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 29.032525][ T335] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 29.038596][ T335] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 29.046410][ T335] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 29.054219][ T335] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 335] exit_group(0) = ? [pid 335] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 336 ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x555556883760, 24) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 336] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 336] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 336] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 336] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 336] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 336] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 336] write(6, "7", 1) = 1 [pid 336] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 29.062040][ T335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 29.069853][ T335] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 29.077661][ T335] [ 29.080774][ T335] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 29.094782][ T336] FAULT_INJECTION: forcing a failure. [ 29.094782][ T336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.107915][ T336] CPU: 0 PID: 336 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 29.119266][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 29.129159][ T336] Call Trace: [ 29.132283][ T336] [ 29.135061][ T336] dump_stack_lvl+0x151/0x1b7 [ 29.139573][ T336] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 29.144868][ T336] ? __this_cpu_preempt_check+0x13/0x20 [ 29.150248][ T336] ? memcg_rstat_updated+0x4f/0x110 [ 29.155285][ T336] dump_stack+0x15/0x17 [ 29.159392][ T336] should_fail_ex+0x3d0/0x520 [ 29.163904][ T336] should_fail_alloc_page+0x68/0x90 [ 29.168936][ T336] __alloc_pages+0x1f4/0x780 [ 29.173365][ T336] ? prep_new_page+0x110/0x110 [ 29.177968][ T336] __folio_alloc+0x15/0x40 [ 29.182214][ T336] wp_page_copy+0x20c/0x1610 [ 29.186643][ T336] ? filemap_read_folio+0x2a0/0x2a0 [ 29.191681][ T336] ? fault_dirty_shared_page+0x300/0x300 [ 29.197146][ T336] ? vm_normal_page+0x1de/0x1f0 [ 29.201830][ T336] do_wp_page+0xbbf/0xd80 [ 29.205996][ T336] handle_mm_fault+0x15a2/0x2f40 [ 29.210773][ T336] ? numa_migrate_prep+0xe0/0xe0 [ 29.215543][ T336] ? lock_vma_under_rcu+0x47a/0x540 [ 29.220581][ T336] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 29.226483][ T336] ? exit_to_user_mode_prepare+0x39/0xa0 [ 29.231947][ T336] exc_page_fault+0x3a6/0x6e0 [ 29.236460][ T336] asm_exc_page_fault+0x27/0x30 [ 29.241150][ T336] RIP: 0033:0x7f6548cde750 [ 29.245404][ T336] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 29.264843][ T336] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 29.270745][ T336] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 29.278557][ T336] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 29.286366][ T336] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 29.294176][ T336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 29.301987][ T336] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 29.309801][ T336] [pid 336] exit_group(0) = ? [pid 336] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 337 ./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x555556883760, 24) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 337] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 337] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 337] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 337] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 337] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 337] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 337] write(6, "7", 1) = 1 [pid 337] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 29.313099][ T336] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 29.328325][ T337] FAULT_INJECTION: forcing a failure. [ 29.328325][ T337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.341525][ T337] CPU: 0 PID: 337 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 29.353035][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 29.362933][ T337] Call Trace: [ 29.366053][ T337] [ 29.368833][ T337] dump_stack_lvl+0x151/0x1b7 [ 29.373348][ T337] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 29.378646][ T337] ? __this_cpu_preempt_check+0x13/0x20 [ 29.384019][ T337] ? memcg_rstat_updated+0x4f/0x110 [ 29.389060][ T337] dump_stack+0x15/0x17 [ 29.393045][ T337] should_fail_ex+0x3d0/0x520 [ 29.397561][ T337] should_fail_alloc_page+0x68/0x90 [ 29.402595][ T337] __alloc_pages+0x1f4/0x780 [ 29.407021][ T337] ? prep_new_page+0x110/0x110 [ 29.411621][ T337] __folio_alloc+0x15/0x40 [ 29.415872][ T337] wp_page_copy+0x20c/0x1610 [ 29.420358][ T337] ? filemap_read_folio+0x2a0/0x2a0 [ 29.425333][ T337] ? fault_dirty_shared_page+0x300/0x300 [ 29.430802][ T337] ? vm_normal_page+0x1de/0x1f0 [ 29.435485][ T337] do_wp_page+0xbbf/0xd80 [ 29.439654][ T337] handle_mm_fault+0x15a2/0x2f40 [ 29.444429][ T337] ? numa_migrate_prep+0xe0/0xe0 [ 29.449202][ T337] ? lock_vma_under_rcu+0x47a/0x540 [ 29.454235][ T337] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 29.460136][ T337] ? exit_to_user_mode_prepare+0x39/0xa0 [ 29.465605][ T337] exc_page_fault+0x3a6/0x6e0 [ 29.470119][ T337] asm_exc_page_fault+0x27/0x30 [ 29.474803][ T337] RIP: 0033:0x7f6548cde750 [ 29.479059][ T337] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 29.498499][ T337] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 29.504399][ T337] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [pid 337] exit_group(0) = ? [pid 337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 338 attached , child_tidptr=0x555556883750) = 338 [pid 338] set_robust_list(0x555556883760, 24) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 338] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 338] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 338] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 338] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 338] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 338] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 338] write(6, "7", 1) = 1 [pid 338] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 29.512216][ T337] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 29.520109][ T337] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 29.527919][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 29.535731][ T337] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 29.543545][ T337] [ 29.546623][ T337] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 29.558716][ T338] FAULT_INJECTION: forcing a failure. [ 29.558716][ T338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.571875][ T338] CPU: 1 PID: 338 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 29.583190][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 29.593087][ T338] Call Trace: [ 29.596206][ T338] [ 29.598983][ T338] dump_stack_lvl+0x151/0x1b7 [ 29.603497][ T338] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 29.608791][ T338] ? __this_cpu_preempt_check+0x13/0x20 [ 29.614178][ T338] ? memcg_rstat_updated+0x4f/0x110 [ 29.619208][ T338] dump_stack+0x15/0x17 [ 29.623199][ T338] should_fail_ex+0x3d0/0x520 [ 29.627712][ T338] should_fail_alloc_page+0x68/0x90 [ 29.632746][ T338] __alloc_pages+0x1f4/0x780 [ 29.637175][ T338] ? prep_new_page+0x110/0x110 [ 29.641773][ T338] __folio_alloc+0x15/0x40 [ 29.646026][ T338] wp_page_copy+0x20c/0x1610 [ 29.650452][ T338] ? filemap_read_folio+0x2a0/0x2a0 [ 29.655482][ T338] ? fault_dirty_shared_page+0x300/0x300 [ 29.660956][ T338] ? vm_normal_page+0x1de/0x1f0 [ 29.665727][ T338] do_wp_page+0xbbf/0xd80 [ 29.669893][ T338] handle_mm_fault+0x15a2/0x2f40 [ 29.674667][ T338] ? numa_migrate_prep+0xe0/0xe0 [ 29.679441][ T338] ? lock_vma_under_rcu+0x47a/0x540 [ 29.684474][ T338] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 29.690379][ T338] ? exit_to_user_mode_prepare+0x39/0xa0 [ 29.695845][ T338] exc_page_fault+0x3a6/0x6e0 [ 29.700358][ T338] asm_exc_page_fault+0x27/0x30 [ 29.705044][ T338] RIP: 0033:0x7f6548cde750 [ 29.709295][ T338] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 29.728917][ T338] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 29.734823][ T338] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 29.742623][ T338] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 29.750436][ T338] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 29.758247][ T338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [pid 338] exit_group(0) = ? [pid 338] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 340 ./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x555556883760, 24) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 340] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 340] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 340] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 340] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 340] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 340] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 340] write(6, "7", 1) = 1 [pid 340] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 29.766057][ T338] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 29.773871][ T338] [ 29.777275][ T338] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 29.790172][ T340] FAULT_INJECTION: forcing a failure. [ 29.790172][ T340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.803974][ T340] CPU: 0 PID: 340 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 29.815292][ T340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 29.825147][ T340] Call Trace: [ 29.828294][ T340] [ 29.831049][ T340] dump_stack_lvl+0x151/0x1b7 [ 29.835567][ T340] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 29.840859][ T340] dump_stack+0x15/0x17 [ 29.844855][ T340] should_fail_ex+0x3d0/0x520 [ 29.849363][ T340] should_fail_alloc_page+0x68/0x90 [ 29.854397][ T340] __alloc_pages+0x1f4/0x780 [ 29.858824][ T340] ? prep_new_page+0x110/0x110 [ 29.863431][ T340] ? __this_cpu_preempt_check+0x13/0x20 [ 29.868805][ T340] __folio_alloc+0x15/0x40 [ 29.873055][ T340] wp_page_copy+0x23c/0x1610 [ 29.877482][ T340] ? __switch_to+0x62c/0x1190 [ 29.882002][ T340] ? compat_start_thread+0x20/0x20 [ 29.886953][ T340] ? fault_dirty_shared_page+0x300/0x300 [ 29.892418][ T340] do_wp_page+0xbbf/0xd80 [ 29.896579][ T340] handle_mm_fault+0x15a2/0x2f40 [ 29.901352][ T340] ? numa_migrate_prep+0xe0/0xe0 [ 29.906124][ T340] ? lock_vma_under_rcu+0x47a/0x540 [ 29.911162][ T340] ? __kasan_check_write+0x14/0x20 [ 29.916104][ T340] ? fpregs_restore_userregs+0x130/0x290 [ 29.921575][ T340] exc_page_fault+0x3a6/0x6e0 [ 29.926091][ T340] asm_exc_page_fault+0x27/0x30 [ 29.930773][ T340] RIP: 0033:0x7f6548cde5e0 [ 29.935025][ T340] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0a 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 37 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 37 0a 00 4c [ 29.954469][ T340] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [pid 340] exit_group(0) = ? [pid 340] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 341 ./strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x555556883760, 24) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 341] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 341] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 341] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 341] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 341] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 341] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 341] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 341] write(6, "7", 1) = 1 [pid 341] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 29.960372][ T340] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 29.968183][ T340] RDX: 0000000000000001 RSI: 00007f6548d7f120 RDI: 0000000000000000 [ 29.975991][ T340] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 29.983888][ T340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc65ac59c [ 29.991700][ T340] R13: 431bde82d7b634db R14: 00007fffc65ac5c0 R15: 00007fffc65ac5a0 [ 29.999521][ T340] [ 30.007967][ T341] FAULT_INJECTION: forcing a failure. [ 30.007967][ T341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.021035][ T341] CPU: 1 PID: 341 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 30.032357][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 30.042256][ T341] Call Trace: [ 30.045373][ T341] [ 30.048153][ T341] dump_stack_lvl+0x151/0x1b7 [ 30.052667][ T341] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 30.057968][ T341] ? __this_cpu_preempt_check+0x13/0x20 [ 30.063340][ T341] ? memcg_rstat_updated+0x4f/0x110 [ 30.068377][ T341] dump_stack+0x15/0x17 [ 30.072368][ T341] should_fail_ex+0x3d0/0x520 [ 30.076883][ T341] should_fail_alloc_page+0x68/0x90 [ 30.081963][ T341] __alloc_pages+0x1f4/0x780 [ 30.086343][ T341] ? prep_new_page+0x110/0x110 [ 30.090950][ T341] __folio_alloc+0x15/0x40 [ 30.095201][ T341] wp_page_copy+0x20c/0x1610 [ 30.099621][ T341] ? filemap_read_folio+0x2a0/0x2a0 [ 30.104662][ T341] ? fault_dirty_shared_page+0x300/0x300 [ 30.110124][ T341] ? vm_normal_page+0x1de/0x1f0 [ 30.114809][ T341] do_wp_page+0xbbf/0xd80 [ 30.119001][ T341] handle_mm_fault+0x15a2/0x2f40 [ 30.123752][ T341] ? numa_migrate_prep+0xe0/0xe0 [ 30.128524][ T341] ? lock_vma_under_rcu+0x47a/0x540 [ 30.133556][ T341] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 30.139458][ T341] ? exit_to_user_mode_prepare+0x39/0xa0 [ 30.144929][ T341] exc_page_fault+0x3a6/0x6e0 [ 30.149443][ T341] asm_exc_page_fault+0x27/0x30 [ 30.154124][ T341] RIP: 0033:0x7f6548cde750 [ 30.158465][ T341] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 30.177908][ T341] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 30.183809][ T341] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 30.191705][ T341] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 30.199519][ T341] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 30.207328][ T341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [pid 341] exit_group(0) = ? [pid 341] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 342 ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x555556883760, 24) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 342] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 342] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 342] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 342] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 342] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 342] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 342] write(6, "7", 1) = 1 [pid 342] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 30.215140][ T341] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 30.222954][ T341] [ 30.234820][ T342] FAULT_INJECTION: forcing a failure. [ 30.234820][ T342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.248096][ T342] CPU: 1 PID: 342 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 30.259455][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 30.269482][ T342] Call Trace: [ 30.272607][ T342] [ 30.275380][ T342] dump_stack_lvl+0x151/0x1b7 [ 30.279896][ T342] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 30.285189][ T342] ? yield_to_task_fair+0x190/0x190 [ 30.290224][ T342] dump_stack+0x15/0x17 [ 30.294215][ T342] should_fail_ex+0x3d0/0x520 [ 30.298729][ T342] should_fail_alloc_page+0x68/0x90 [ 30.303763][ T342] __alloc_pages+0x1f4/0x780 [ 30.308190][ T342] ? prep_new_page+0x110/0x110 [ 30.312789][ T342] ? __this_cpu_preempt_check+0x13/0x20 [ 30.318169][ T342] __folio_alloc+0x15/0x40 [ 30.322421][ T342] wp_page_copy+0x23c/0x1610 [ 30.326854][ T342] ? __switch_to+0x62c/0x1190 [ 30.331449][ T342] ? compat_start_thread+0x20/0x20 [ 30.336483][ T342] ? fault_dirty_shared_page+0x300/0x300 [ 30.341952][ T342] ? native_set_ldt+0x130/0x130 [ 30.346642][ T342] do_wp_page+0xbbf/0xd80 [ 30.350803][ T342] handle_mm_fault+0x15a2/0x2f40 [ 30.355587][ T342] ? numa_migrate_prep+0xe0/0xe0 [ 30.360353][ T342] ? lock_vma_under_rcu+0x47a/0x540 [ 30.365383][ T342] ? __kasan_check_write+0x14/0x20 [ 30.370330][ T342] ? fpregs_restore_userregs+0x130/0x290 [ 30.375799][ T342] exc_page_fault+0x3a6/0x6e0 [ 30.380400][ T342] asm_exc_page_fault+0x27/0x30 [ 30.385086][ T342] RIP: 0033:0x7f6548cde5e0 [ 30.389340][ T342] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0a 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 37 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 37 0a 00 4c [ 30.408958][ T342] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [pid 342] exit_group(0) = ? [pid 342] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 343 ./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x555556883760, 24) = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 343] setpgid(0, 0) = 0 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 343] write(3, "1000", 4) = 4 [pid 343] close(3) = 0 [pid 343] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 343] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 343] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 343] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 343] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 343] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 343] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 343] write(6, "7", 1) = 1 [pid 343] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 30.414853][ T342] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 30.422669][ T342] RDX: 0000000000000001 RSI: 00007f6548d7f120 RDI: 0000000000000000 [ 30.430481][ T342] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 30.438289][ T342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc65ac59c [ 30.446188][ T342] R13: 431bde82d7b634db R14: 00007fffc65ac5c0 R15: 00007fffc65ac5a0 [ 30.454004][ T342] [ 30.463502][ T343] FAULT_INJECTION: forcing a failure. [ 30.463502][ T343] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.476600][ T343] CPU: 1 PID: 343 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 30.487885][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 30.497796][ T343] Call Trace: [ 30.500915][ T343] [ 30.503682][ T343] dump_stack_lvl+0x151/0x1b7 [ 30.508203][ T343] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 30.513491][ T343] ? __this_cpu_preempt_check+0x13/0x20 [ 30.518883][ T343] ? memcg_rstat_updated+0x4f/0x110 [ 30.523904][ T343] dump_stack+0x15/0x17 [ 30.527905][ T343] should_fail_ex+0x3d0/0x520 [ 30.532411][ T343] should_fail_alloc_page+0x68/0x90 [ 30.537444][ T343] __alloc_pages+0x1f4/0x780 [ 30.541877][ T343] ? prep_new_page+0x110/0x110 [ 30.546477][ T343] __folio_alloc+0x15/0x40 [ 30.550723][ T343] wp_page_copy+0x20c/0x1610 [ 30.555156][ T343] ? filemap_read_folio+0x2a0/0x2a0 [ 30.560276][ T343] ? fault_dirty_shared_page+0x300/0x300 [ 30.565747][ T343] ? vm_normal_page+0x1de/0x1f0 [ 30.570428][ T343] do_wp_page+0xbbf/0xd80 [ 30.574679][ T343] handle_mm_fault+0x15a2/0x2f40 [ 30.579454][ T343] ? numa_migrate_prep+0xe0/0xe0 [ 30.584225][ T343] ? lock_vma_under_rcu+0x47a/0x540 [ 30.589259][ T343] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 30.595162][ T343] ? exit_to_user_mode_prepare+0x39/0xa0 [ 30.600631][ T343] exc_page_fault+0x3a6/0x6e0 [ 30.605142][ T343] asm_exc_page_fault+0x27/0x30 [ 30.609838][ T343] RIP: 0033:0x7f6548cde750 [ 30.614255][ T343] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 30.633696][ T343] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 30.639597][ T343] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 30.647496][ T343] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 30.655307][ T343] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 343] exit_group(0) = ? [pid 343] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 344 attached , child_tidptr=0x555556883750) = 344 [pid 344] set_robust_list(0x555556883760, 24) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 [pid 344] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 344] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 344] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 344] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 344] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 344] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 344] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 344] write(6, "7", 1) = 1 [pid 344] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 30.663115][ T343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 30.670928][ T343] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 30.678743][ T343] [ 30.690843][ T344] FAULT_INJECTION: forcing a failure. [ 30.690843][ T344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.703964][ T344] CPU: 1 PID: 344 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 30.715334][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 30.725224][ T344] Call Trace: [ 30.728341][ T344] [ 30.731120][ T344] dump_stack_lvl+0x151/0x1b7 [ 30.735633][ T344] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 30.740929][ T344] ? unix_dgram_poll+0x710/0x710 [ 30.745702][ T344] dump_stack+0x15/0x17 [ 30.749696][ T344] should_fail_ex+0x3d0/0x520 [ 30.754206][ T344] should_fail_alloc_page+0x68/0x90 [ 30.759241][ T344] __alloc_pages+0x1f4/0x780 [ 30.763668][ T344] ? prep_new_page+0x110/0x110 [ 30.768268][ T344] ? __this_cpu_preempt_check+0x13/0x20 [ 30.773648][ T344] __folio_alloc+0x15/0x40 [ 30.778007][ T344] wp_page_copy+0x23c/0x1610 [ 30.782427][ T344] ? __switch_to+0x62c/0x1190 [ 30.786944][ T344] ? compat_start_thread+0x20/0x20 [ 30.791889][ T344] ? fault_dirty_shared_page+0x300/0x300 [ 30.797359][ T344] ? native_set_ldt+0x130/0x130 [ 30.802049][ T344] do_wp_page+0xbbf/0xd80 [ 30.806211][ T344] handle_mm_fault+0x15a2/0x2f40 [ 30.810985][ T344] ? numa_migrate_prep+0xe0/0xe0 [ 30.815842][ T344] ? lock_vma_under_rcu+0x47a/0x540 [ 30.820879][ T344] ? __kasan_check_write+0x14/0x20 [ 30.825824][ T344] ? fpregs_restore_userregs+0x130/0x290 [ 30.831294][ T344] exc_page_fault+0x3a6/0x6e0 [ 30.835804][ T344] asm_exc_page_fault+0x27/0x30 [ 30.840490][ T344] RIP: 0033:0x7f6548cde5e0 [ 30.844742][ T344] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0a 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 37 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 37 0a 00 4c [ 30.864189][ T344] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [pid 344] exit_group(0) = ? [pid 344] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 346 ./strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x555556883760, 24) = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 346] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 346] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 346] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 346] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 346] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 346] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 346] write(6, "7", 1) = 1 [pid 346] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 30.870084][ T344] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 30.877899][ T344] RDX: 0000000000000001 RSI: 00007f6548d7f120 RDI: 0000000000000000 [ 30.885709][ T344] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 30.893517][ T344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc65ac59c [ 30.901330][ T344] R13: 431bde82d7b634db R14: 00007fffc65ac5c0 R15: 00007fffc65ac5a0 [ 30.909149][ T344] [ 30.918609][ T346] FAULT_INJECTION: forcing a failure. [ 30.918609][ T346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.931767][ T346] CPU: 1 PID: 346 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 30.943100][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 30.952998][ T346] Call Trace: [ 30.956120][ T346] [ 30.958898][ T346] dump_stack_lvl+0x151/0x1b7 [ 30.963406][ T346] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 30.968703][ T346] ? yield_to_task_fair+0x190/0x190 [ 30.973736][ T346] dump_stack+0x15/0x17 [ 30.977731][ T346] should_fail_ex+0x3d0/0x520 [ 30.982245][ T346] should_fail_alloc_page+0x68/0x90 [ 30.987275][ T346] __alloc_pages+0x1f4/0x780 [ 30.991702][ T346] ? prep_new_page+0x110/0x110 [ 30.996305][ T346] ? __this_cpu_preempt_check+0x13/0x20 [ 31.001685][ T346] __folio_alloc+0x15/0x40 [ 31.005939][ T346] wp_page_copy+0x23c/0x1610 [ 31.010365][ T346] ? __switch_to+0x62c/0x1190 [ 31.014966][ T346] ? compat_start_thread+0x20/0x20 [ 31.020003][ T346] ? fault_dirty_shared_page+0x300/0x300 [ 31.025464][ T346] ? native_set_ldt+0x130/0x130 [ 31.030155][ T346] do_wp_page+0xbbf/0xd80 [ 31.034328][ T346] handle_mm_fault+0x15a2/0x2f40 [ 31.039182][ T346] ? numa_migrate_prep+0xe0/0xe0 [ 31.043956][ T346] ? lock_vma_under_rcu+0x47a/0x540 [ 31.048996][ T346] ? __kasan_check_write+0x14/0x20 [ 31.053933][ T346] ? fpregs_restore_userregs+0x130/0x290 [ 31.059404][ T346] exc_page_fault+0x3a6/0x6e0 [ 31.063913][ T346] asm_exc_page_fault+0x27/0x30 [ 31.068690][ T346] RIP: 0033:0x7f6548cde5e0 [ 31.072941][ T346] Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 0a 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 0f b1 15 c0 37 0a 00 0f 85 0f 02 00 00 4c 8d 25 b3 37 0a 00 4c [ 31.092384][ T346] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 31.098295][ T346] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 31.106093][ T346] RDX: 0000000000000001 RSI: 00007f6548d7f120 RDI: 0000000000000000 [ 31.113903][ T346] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [pid 346] exit_group(0) = ? [pid 346] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=346, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 347 attached , child_tidptr=0x555556883750) = 347 [pid 347] set_robust_list(0x555556883760, 24) = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 347] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 347] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 347] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 347] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 347] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 347] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 347] write(6, "7", 1) = 1 [pid 347] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 31.121718][ T346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc65ac59c [ 31.129529][ T346] R13: 431bde82d7b634db R14: 00007fffc65ac5c0 R15: 00007fffc65ac5a0 [ 31.137343][ T346] [ 31.146412][ T347] FAULT_INJECTION: forcing a failure. [ 31.146412][ T347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 31.159522][ T347] CPU: 0 PID: 347 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 31.170801][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 31.180697][ T347] Call Trace: [ 31.183818][ T347] [ 31.186596][ T347] dump_stack_lvl+0x151/0x1b7 [ 31.191114][ T347] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 31.196411][ T347] ? __this_cpu_preempt_check+0x13/0x20 [ 31.201791][ T347] ? memcg_rstat_updated+0x4f/0x110 [ 31.206821][ T347] dump_stack+0x15/0x17 [ 31.210811][ T347] should_fail_ex+0x3d0/0x520 [ 31.215329][ T347] should_fail_alloc_page+0x68/0x90 [ 31.220360][ T347] __alloc_pages+0x1f4/0x780 [ 31.224785][ T347] ? prep_new_page+0x110/0x110 [ 31.229477][ T347] __folio_alloc+0x15/0x40 [ 31.233723][ T347] wp_page_copy+0x20c/0x1610 [ 31.238154][ T347] ? filemap_read_folio+0x2a0/0x2a0 [ 31.243186][ T347] ? fault_dirty_shared_page+0x300/0x300 [ 31.248657][ T347] ? vm_normal_page+0x1de/0x1f0 [ 31.253339][ T347] do_wp_page+0xbbf/0xd80 [ 31.257508][ T347] handle_mm_fault+0x15a2/0x2f40 [ 31.262283][ T347] ? numa_migrate_prep+0xe0/0xe0 [ 31.267053][ T347] ? lock_vma_under_rcu+0x47a/0x540 [ 31.272095][ T347] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 31.277990][ T347] ? exit_to_user_mode_prepare+0x39/0xa0 [ 31.283553][ T347] exc_page_fault+0x3a6/0x6e0 [ 31.288059][ T347] asm_exc_page_fault+0x27/0x30 [ 31.292744][ T347] RIP: 0033:0x7f6548cde750 [ 31.296996][ T347] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 31.316440][ T347] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [pid 347] exit_group(0) = ? [pid 347] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x555556883760, 24) = 0 [pid 295] <... clone resumed>, child_tidptr=0x555556883750) = 348 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 [pid 348] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 348] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 348] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 348] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 348] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 348] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 348] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 348] write(6, "7", 1) = 1 [pid 348] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 31.322342][ T347] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 31.330150][ T347] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [ 31.337961][ T347] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 31.345866][ T347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 31.353678][ T347] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 31.361488][ T347] [ 31.371957][ T348] FAULT_INJECTION: forcing a failure. [ 31.371957][ T348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 31.385096][ T348] CPU: 0 PID: 348 Comm: syz-executor216 Tainted: G B 6.1.25-syzkaller-00088-gcd94fe67fd33 #0 [ 31.396606][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 31.406494][ T348] Call Trace: [ 31.409619][ T348] [ 31.412396][ T348] dump_stack_lvl+0x151/0x1b7 [ 31.416909][ T348] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 31.422204][ T348] ? __this_cpu_preempt_check+0x13/0x20 [ 31.427585][ T348] ? memcg_rstat_updated+0x4f/0x110 [ 31.432621][ T348] dump_stack+0x15/0x17 [ 31.436611][ T348] should_fail_ex+0x3d0/0x520 [ 31.441130][ T348] should_fail_alloc_page+0x68/0x90 [ 31.446158][ T348] __alloc_pages+0x1f4/0x780 [ 31.450593][ T348] ? prep_new_page+0x110/0x110 [ 31.455186][ T348] __folio_alloc+0x15/0x40 [ 31.459438][ T348] wp_page_copy+0x20c/0x1610 [ 31.463865][ T348] ? filemap_read_folio+0x2a0/0x2a0 [ 31.468963][ T348] ? fault_dirty_shared_page+0x300/0x300 [ 31.474368][ T348] ? _raw_spin_lock+0xa4/0x1b0 [ 31.478966][ T348] ? vm_normal_page+0x1de/0x1f0 [ 31.483653][ T348] do_wp_page+0xbbf/0xd80 [ 31.487820][ T348] handle_mm_fault+0x15a2/0x2f40 [ 31.492594][ T348] ? numa_migrate_prep+0xe0/0xe0 [ 31.497367][ T348] ? lock_vma_under_rcu+0x47a/0x540 [ 31.502403][ T348] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 31.508302][ T348] ? exit_to_user_mode_prepare+0x39/0xa0 [ 31.513771][ T348] exc_page_fault+0x3a6/0x6e0 [ 31.518288][ T348] asm_exc_page_fault+0x27/0x30 [ 31.522970][ T348] RIP: 0033:0x7f6548cde750 [ 31.527232][ T348] Code: 84 dd fe ff ff 4c 89 e7 e8 ad ed 00 00 e9 d0 fe ff ff 0f 1f 84 00 00 00 00 00 49 8b 06 48 89 45 00 48 85 c0 0f 85 85 00 00 00 05 79 3a 0a 00 01 31 c0 87 05 49 36 0a 00 83 f8 01 0f 8f 84 00 [ 31.546668][ T348] RSP: 002b:00007fffc65ac490 EFLAGS: 00010246 [ 31.552564][ T348] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 31.560377][ T348] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6548d80ad8 [pid 348] exit_group(0) = ? [pid 348] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556883750) = 349 ./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x555556883760, 24) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4) = 4 [pid 349] close(3) = 0 [pid 349] socket(AF_UNIX, SOCK_DGRAM, 0) = 3 [pid 349] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_SKB, insn_cnt=4, insns=0x20000540, license="GPL", log_level=4, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 4 [pid 349] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKMAP, key_size=4, value_size=4, max_entries=18, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 5 [pid 349] bpf(BPF_PROG_ATTACH, {target_fd=5, attach_bpf_fd=4, attach_type=BPF_SK_SKB_VERDICT, attach_flags=0}, 16) = 0 [pid 349] bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x20000180, value=0x200000c0, flags=BPF_ANY}, 32) = 0 [pid 349] bind(3, {sa_family=AF_UNIX, sun_path="./file0"}, 110) = -1 EADDRINUSE (Address already in use) [pid 349] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 349] write(6, "7", 1) = 1 [pid 349] sendmmsg(3, [{msg_hdr={msg_name={sa_family=AF_UNIX, sun_path="./file0"}, msg_namelen=110, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}}], 1, 0) = -1 ECONNREFUSED (Connection refused) [ 31.568189][ T348] RBP: 00007f6548d7f120 R08: 00007fffc65ac257 R09: 0000000000000037 [ 31.575998][ T348] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6548d81da8 [ 31.583813][ T348] R13: 0000000000000000 R14: 00007f6548d81dc0 R15: 00007f6548cd7260 [ 31.591627][ T348] [ 31.603266][ T349] FAULT_INJECTION: forcing a failure. [ 31.603266][ T349] name fail_page_alloc, interval 1, probability 0, space 0, times 0