./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1244223238 <...> Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. execve("./syz-executor1244223238", ["./syz-executor1244223238"], 0x7ffd8e5b5a80 /* 10 vars */) = 0 brk(NULL) = 0x555556b3c000 brk(0x555556b3cd00) = 0x555556b3cd00 arch_prctl(ARCH_SET_FS, 0x555556b3c380) = 0 set_tid_address(0x555556b3c650) = 5039 set_robust_list(0x555556b3c660, 24) = 0 rseq(0x555556b3cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1244223238", 4096) = 28 getrandom("\x30\x51\xe5\x07\x63\x21\x14\xec", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b3cd00 brk(0x555556b5dd00) = 0x555556b5dd00 brk(0x555556b5e000) = 0x555556b5e000 mprotect(0x7f37b66e2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5040 ./strace-static-x86_64: Process 5040 attached [pid 5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5040] set_robust_list(0x555556b3c660, 24) = 0 [pid 5040] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5041 attached [pid 5039] <... clone resumed>, child_tidptr=0x555556b3c650) = 5041 [pid 5041] set_robust_list(0x555556b3c660, 24 [pid 5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5042 attached [pid 5041] <... set_robust_list resumed>) = 0 [pid 5042] set_robust_list(0x555556b3c660, 24) = 0 [pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5041] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5040] <... clone resumed>, child_tidptr=0x555556b3c650) = 5042 [pid 5042] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5043 attached [pid 5039] <... clone resumed>, child_tidptr=0x555556b3c650) = 5043 [pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5042] <... openat resumed>) = 3 [pid 5042] write(3, "1000", 4) = 4 [pid 5042] close(3) = 0 [pid 5042] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5043] set_robust_list(0x555556b3c660, 24) = 0 ./strace-static-x86_64: Process 5044 attached [pid 5039] <... clone resumed>, child_tidptr=0x555556b3c650) = 5044 ./strace-static-x86_64: Process 5045 attached [pid 5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5044] set_robust_list(0x555556b3c660, 24 [pid 5043] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5042] <... openat resumed>) = 3 [pid 5041] <... clone resumed>, child_tidptr=0x555556b3c650) = 5045 [pid 5045] set_robust_list(0x555556b3c660, 24) = 0 [pid 5042] write(3, "4", 1 [pid 5044] <... set_robust_list resumed>) = 0 [pid 5044] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5042] <... write resumed>) = 1 [pid 5042] socketpair(AF_ALG, SOCK_SEQPACKET, 0, ./strace-static-x86_64: Process 5048 attached [pid 5045] <... prctl resumed>) = 0 [pid 5039] <... clone resumed>, child_tidptr=0x555556b3c650) = 5047 [pid 5044] <... clone resumed>, child_tidptr=0x555556b3c650) = 5048 [pid 5045] setpgid(0, 0 [pid 5043] <... clone resumed>, child_tidptr=0x555556b3c650) = 5046 [pid 5039] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5048] set_robust_list(0x555556b3c660, 24 [pid 5045] <... setpgid resumed>) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5048] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5046 attached ./strace-static-x86_64: Process 5047 attached [pid 5048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5048] setpgid(0, 0 [pid 5045] <... openat resumed>) = 3 [pid 5048] <... setpgid resumed>) = 0 [pid 5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5045] write(3, "1000", 4 [pid 5039] <... clone resumed>, child_tidptr=0x555556b3c650) = 5049 [pid 5045] <... write resumed>) = 4 [pid 5048] <... openat resumed>) = 3 [pid 5045] close(3) = 0 [pid 5048] write(3, "1000", 4) = 4 [pid 5045] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5048] close(3) = 0 [pid 5048] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5045] <... openat resumed>) = 3 [pid 5048] <... openat resumed>) = 3 [pid 5048] write(3, "4", 1) = 1 [pid 5045] write(3, "4", 1 [ 77.215718][ T5042] FAULT_INJECTION: forcing a failure. [ 77.215718][ T5042] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.229411][ T5042] CPU: 0 PID: 5042 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 77.239858][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 77.249258][ T5048] FAULT_INJECTION: forcing a failure. [ 77.249258][ T5048] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.249912][ T5042] Call Trace: [pid 5048] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5045] <... write resumed>) = 1 [ 77.249923][ T5042] [ 77.264582][ T5045] FAULT_INJECTION: forcing a failure. [ 77.264582][ T5045] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.266345][ T5042] dump_stack_lvl+0x125/0x1b0 [ 77.287172][ T5042] should_fail_ex+0x496/0x5b0 [ 77.291867][ T5042] ? fs_reclaim_acquire+0xb0/0x150 [ 77.297007][ T5042] __should_fail_alloc_page+0xe7/0x130 [ 77.302495][ T5042] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 77.308667][ T5042] __alloc_pages+0x14e/0x4a0 [ 77.313269][ T5042] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 77.320152][ T5042] alloc_pages+0x1a9/0x270 [ 77.324592][ T5042] pte_alloc_one+0x20/0x370 [ 77.329109][ T5042] __pte_alloc+0x6e/0x3b0 [ 77.333448][ T5042] ? pmd_install+0x170/0x170 [ 77.338052][ T5042] ? __pmd_alloc+0x375/0x840 [ 77.342648][ T5042] ? __pud_alloc+0x194/0x240 [ 77.347263][ T5042] __handle_mm_fault+0x3394/0x3e10 [ 77.352398][ T5042] ? vm_iomap_memory+0x170/0x170 [ 77.357361][ T5042] ? find_vma+0x10e/0x1b0 [ 77.361707][ T5042] ? can_vma_merge_before+0x3a0/0x3a0 [ 77.367100][ T5042] handle_mm_fault+0x478/0xa00 [ 77.371879][ T5042] ? lock_mm_and_find_vma+0xa6/0x760 [ 77.377176][ T5042] do_user_addr_fault+0x3d1/0x1000 [ 77.382297][ T5042] ? rcu_is_watching+0x12/0xb0 [ 77.387075][ T5042] exc_page_fault+0x5c/0xd0 [ 77.391599][ T5042] asm_exc_page_fault+0x26/0x30 [ 77.396466][ T5042] RIP: 0010:__put_user_4+0x11/0x20 [ 77.401591][ T5042] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 77.421211][ T5042] RSP: 0018:ffffc90003b9fe40 EFLAGS: 00050206 [ 77.427288][ T5042] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 77.435266][ T5042] RDX: ffff8880765ebb80 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 77.443245][ T5042] RBP: 1ffff92000773fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 77.451220][ T5042] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 77.459201][ T5042] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 77.467191][ T5042] ? __sys_socketpair+0x115/0x5a0 [ 77.472250][ T5042] __sys_socketpair+0x121/0x5a0 [ 77.477125][ T5042] ? __ia32_sys_socket+0xb0/0xb0 [ 77.482090][ T5042] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.487296][ T5042] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.492515][ T5042] __x64_sys_socketpair+0x96/0x100 [ 77.497654][ T5042] do_syscall_64+0x38/0xb0 [ 77.502086][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.507993][ T5042] RIP: 0033:0x7f37b666ede9 [ 77.512419][ T5042] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.532040][ T5042] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 77.540464][ T5042] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 77.548444][ T5042] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 77.556420][ T5042] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [pid 5045] socketpair(AF_ALG, SOCK_SEQPACKET, 0, ./strace-static-x86_64: Process 5049 attached [pid 5046] set_robust_list(0x555556b3c660, 24 [ 77.564401][ T5042] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.572377][ T5042] R13: 00007ffcf8c9e9e8 R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 77.580369][ T5042] [ 77.583954][ T5048] CPU: 0 PID: 5048 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 77.594397][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 77.604456][ T5048] Call Trace: [ 77.607739][ T5048] [ 77.610673][ T5048] dump_stack_lvl+0x125/0x1b0 [ 77.615366][ T5048] should_fail_ex+0x496/0x5b0 [ 77.620064][ T5048] ? fs_reclaim_acquire+0xb0/0x150 [ 77.625201][ T5048] __should_fail_alloc_page+0xe7/0x130 [ 77.630682][ T5048] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 77.636855][ T5048] __alloc_pages+0x14e/0x4a0 [ 77.641455][ T5048] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 77.648266][ T5048] alloc_pages+0x1a9/0x270 [ 77.652716][ T5048] pte_alloc_one+0x20/0x370 [ 77.657237][ T5048] __pte_alloc+0x6e/0x3b0 [ 77.661586][ T5048] ? pmd_install+0x170/0x170 [ 77.666194][ T5048] ? __pmd_alloc+0x375/0x840 [ 77.670814][ T5048] ? __pud_alloc+0x194/0x240 [ 77.675426][ T5048] __handle_mm_fault+0x3394/0x3e10 [ 77.680571][ T5048] ? vm_iomap_memory+0x170/0x170 [ 77.685543][ T5048] ? find_vma+0x10e/0x1b0 [ 77.689892][ T5048] ? can_vma_merge_before+0x3a0/0x3a0 [ 77.695290][ T5048] handle_mm_fault+0x478/0xa00 [ 77.700072][ T5048] ? lock_mm_and_find_vma+0xa6/0x760 [ 77.705372][ T5048] do_user_addr_fault+0x3d1/0x1000 [ 77.710496][ T5048] ? rcu_is_watching+0x12/0xb0 [ 77.715274][ T5048] exc_page_fault+0x5c/0xd0 [ 77.719826][ T5048] asm_exc_page_fault+0x26/0x30 [ 77.724695][ T5048] RIP: 0010:__put_user_4+0x11/0x20 [ 77.729821][ T5048] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 77.749461][ T5048] RSP: 0018:ffffc90003bffe40 EFLAGS: 00050206 [ 77.755546][ T5048] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 77.763574][ T5048] RDX: ffff88801fb88000 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 77.771562][ T5048] RBP: 1ffff9200077ffcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 77.779543][ T5048] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 77.787532][ T5048] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 77.795529][ T5048] ? __sys_socketpair+0x115/0x5a0 [ 77.800591][ T5048] __sys_socketpair+0x121/0x5a0 [ 77.805470][ T5048] ? __ia32_sys_socket+0xb0/0xb0 [ 77.810437][ T5048] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.815648][ T5048] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.820885][ T5048] __x64_sys_socketpair+0x96/0x100 [ 77.826024][ T5048] do_syscall_64+0x38/0xb0 [ 77.830459][ T5048] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.836382][ T5048] RIP: 0033:0x7f37b666ede9 [ 77.840810][ T5048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.860433][ T5048] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 77.868865][ T5048] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 77.876847][ T5048] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 77.884827][ T5048] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 77.892818][ T5048] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.900811][ T5048] R13: 00007ffcf8c9e9e8 R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 77.908815][ T5048] [ 77.911991][ T5045] CPU: 0 PID: 5045 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 77.922434][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 77.932506][ T5045] Call Trace: [ 77.935791][ T5045] [ 77.938739][ T5045] dump_stack_lvl+0x125/0x1b0 [ 77.943439][ T5045] should_fail_ex+0x496/0x5b0 [ 77.948126][ T5045] ? fs_reclaim_acquire+0xb0/0x150 [ 77.953262][ T5045] __should_fail_alloc_page+0xe7/0x130 [ 77.958744][ T5045] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 77.964920][ T5045] __alloc_pages+0x14e/0x4a0 [ 77.969524][ T5045] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 77.976321][ T5045] alloc_pages+0x1a9/0x270 [ 77.980760][ T5045] pte_alloc_one+0x20/0x370 [ 77.985278][ T5045] __pte_alloc+0x6e/0x3b0 [ 77.989617][ T5045] ? pmd_install+0x170/0x170 [ 77.994222][ T5045] ? __pmd_alloc+0x375/0x840 [ 77.998826][ T5045] ? __pud_alloc+0x194/0x240 [ 78.003435][ T5045] __handle_mm_fault+0x3394/0x3e10 [ 78.008567][ T5045] ? vm_iomap_memory+0x170/0x170 [ 78.013530][ T5045] ? find_vma+0x10e/0x1b0 [ 78.017876][ T5045] ? can_vma_merge_before+0x3a0/0x3a0 [ 78.023276][ T5045] handle_mm_fault+0x478/0xa00 [ 78.028058][ T5045] ? lock_mm_and_find_vma+0xa6/0x760 [ 78.033358][ T5045] do_user_addr_fault+0x3d1/0x1000 [ 78.038487][ T5045] ? rcu_is_watching+0x12/0xb0 [ 78.043265][ T5045] exc_page_fault+0x5c/0xd0 [ 78.047795][ T5045] asm_exc_page_fault+0x26/0x30 [ 78.052663][ T5045] RIP: 0010:__put_user_4+0x11/0x20 [ 78.057789][ T5045] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 78.077411][ T5045] RSP: 0018:ffffc90003bbfe40 EFLAGS: 00050206 [ 78.083487][ T5045] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 78.091465][ T5045] RDX: ffff88801f228000 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 78.099448][ T5045] RBP: 1ffff92000777fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 78.107430][ T5045] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 78.115409][ T5045] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 78.123396][ T5045] ? __sys_socketpair+0x115/0x5a0 [ 78.128456][ T5045] __sys_socketpair+0x121/0x5a0 [ 78.133330][ T5045] ? __ia32_sys_socket+0xb0/0xb0 [ 78.138299][ T5045] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.143513][ T5045] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.148747][ T5045] __x64_sys_socketpair+0x96/0x100 [ 78.153890][ T5045] do_syscall_64+0x38/0xb0 [ 78.158319][ T5045] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.164230][ T5045] RIP: 0033:0x7f37b666ede9 [ 78.168655][ T5045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.188273][ T5045] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 78.196696][ T5045] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 78.204677][ T5045] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 78.212652][ T5045] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [pid 5047] set_robust_list(0x555556b3c660, 24 [pid 5049] set_robust_list(0x555556b3c660, 24 [pid 5048] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5046] <... set_robust_list resumed>) = 0 [pid 5047] <... set_robust_list resumed>) = 0 [pid 5045] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5042] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5049] <... set_robust_list resumed>) = 0 [pid 5048] openat(AT_FDCWD, "/dev/fb0", O_RDONLY [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5047] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5045] openat(AT_FDCWD, "/dev/fb0", O_RDONLY [pid 5042] openat(AT_FDCWD, "/dev/fb0", O_RDONLY [pid 5049] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5048] <... openat resumed>) = 4 [pid 5046] <... prctl resumed>) = 0 [pid 5045] <... openat resumed>) = 4 [pid 5042] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5050 attached [pid 5048] ioctl(4, FBIO_WAITFORVSYNC [pid 5046] setpgid(0, 0 [pid 5042] ioctl(4, FBIO_WAITFORVSYNC [pid 5050] set_robust_list(0x555556b3c660, 24 [pid 5046] <... setpgid resumed>) = 0 [pid 5047] <... clone resumed>, child_tidptr=0x555556b3c650) = 5050 [pid 5045] ioctl(4, FBIO_WAITFORVSYNC [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5050] <... set_robust_list resumed>) = 0 [pid 5046] <... openat resumed>) = 3 [pid 5050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5046] write(3, "1000", 4./strace-static-x86_64: Process 5051 attached [pid 5050] <... prctl resumed>) = 0 [pid 5046] <... write resumed>) = 4 [pid 5050] setpgid(0, 0 [pid 5046] close(3 [pid 5051] set_robust_list(0x555556b3c660, 24 [pid 5050] <... setpgid resumed>) = 0 [pid 5049] <... clone resumed>, child_tidptr=0x555556b3c650) = 5051 [pid 5046] <... close resumed>) = 0 [pid 5051] <... set_robust_list resumed>) = 0 [pid 5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5046] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5046] <... openat resumed>) = 3 [pid 5046] write(3, "4", 1) = 1 [ 78.220630][ T5045] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.228607][ T5045] R13: 00007ffcf8c9e9e8 R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 78.236612][ T5045] [pid 5046] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5051] <... prctl resumed>) = 0 [pid 5050] <... openat resumed>) = 3 [pid 5051] setpgid(0, 0) = 0 [pid 5050] write(3, "1000", 4 [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5050] <... write resumed>) = 4 [pid 5051] <... openat resumed>) = 3 [pid 5050] close(3) = 0 [pid 5050] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5048] <... ioctl resumed>, 0) = 0 [pid 5048] exit_group(0) = ? [pid 5051] write(3, "1000", 4) = 4 [pid 5051] close(3 [pid 5050] <... openat resumed>) = 3 [pid 5051] <... close resumed>) = 0 [pid 5051] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5051] write(3, "4", 1) = 1 [ 78.263281][ T5046] FAULT_INJECTION: forcing a failure. [ 78.263281][ T5046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.277112][ T5046] CPU: 0 PID: 5046 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 78.287562][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 78.287626][ T5051] FAULT_INJECTION: forcing a failure. [ 78.287626][ T5051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [pid 5051] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5042] <... ioctl resumed>, 0) = 0 [pid 5042] exit_group(0) = ? [pid 5045] <... ioctl resumed>, 0) = 0 [pid 5045] exit_group(0) = ? [pid 5045] +++ exited with 0 +++ [pid 5041] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5041] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5052 [pid 5048] +++ exited with 0 +++ [pid 5042] +++ exited with 0 +++ [pid 5040] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5042, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5040] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5040] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5053 ./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x555556b3c660, 24) = 0 [pid 5053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5053] setpgid(0, 0) = 0 [pid 5053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5053] write(3, "1000", 4) = 4 [pid 5053] close(3) = 0 [ 78.297613][ T5046] Call Trace: [ 78.297624][ T5046] [ 78.297633][ T5046] dump_stack_lvl+0x125/0x1b0 [ 78.297666][ T5046] should_fail_ex+0x496/0x5b0 [ 78.297694][ T5046] ? fs_reclaim_acquire+0xb0/0x150 [ 78.331587][ T5046] __should_fail_alloc_page+0xe7/0x130 [ 78.337095][ T5046] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 78.343292][ T5046] __alloc_pages+0x14e/0x4a0 [ 78.347946][ T5046] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 78.354768][ T5046] alloc_pages+0x1a9/0x270 [ 78.359230][ T5046] pte_alloc_one+0x20/0x370 [pid 5053] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5053] write(3, "4", 1) = 1 [ 78.363770][ T5046] __pte_alloc+0x6e/0x3b0 [ 78.368133][ T5046] ? pmd_install+0x170/0x170 [ 78.369178][ T5053] FAULT_INJECTION: forcing a failure. [ 78.369178][ T5053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.372744][ T5046] ? __pmd_alloc+0x375/0x840 [ 78.372773][ T5046] ? __pud_alloc+0x194/0x240 [ 78.372804][ T5046] __handle_mm_fault+0x3394/0x3e10 [ 78.400248][ T5046] ? vm_iomap_memory+0x170/0x170 [ 78.405221][ T5046] ? find_vma+0x10e/0x1b0 [ 78.409567][ T5046] ? can_vma_merge_before+0x3a0/0x3a0 [ 78.414965][ T5046] handle_mm_fault+0x478/0xa00 [ 78.419832][ T5046] ? lock_mm_and_find_vma+0xa6/0x760 [ 78.425133][ T5046] do_user_addr_fault+0x3d1/0x1000 [ 78.430262][ T5046] ? rcu_is_watching+0x12/0xb0 [ 78.435042][ T5046] exc_page_fault+0x5c/0xd0 [ 78.439566][ T5046] asm_exc_page_fault+0x26/0x30 [ 78.444436][ T5046] RIP: 0010:__put_user_4+0x11/0x20 [ 78.449558][ T5046] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 78.469211][ T5046] RSP: 0018:ffffc90003befe40 EFLAGS: 00050206 [ 78.475289][ T5046] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 78.483267][ T5046] RDX: ffff88801f22d940 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 78.491246][ T5046] RBP: 1ffff9200077dfcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 78.499226][ T5046] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 78.507204][ T5046] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 78.515199][ T5046] ? __sys_socketpair+0x115/0x5a0 [ 78.520263][ T5046] __sys_socketpair+0x121/0x5a0 [ 78.525141][ T5046] ? __ia32_sys_socket+0xb0/0xb0 [ 78.530107][ T5046] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.535315][ T5046] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.540542][ T5046] __x64_sys_socketpair+0x96/0x100 [ 78.545681][ T5046] do_syscall_64+0x38/0xb0 [ 78.550113][ T5046] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.556023][ T5046] RIP: 0033:0x7f37b666ede9 [ 78.560445][ T5046] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.580063][ T5046] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 78.588486][ T5046] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 78.596465][ T5046] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 78.604444][ T5046] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 78.612422][ T5046] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.620405][ T5046] R13: 00007ffcf8c9e9e8 R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 78.628403][ T5046] [ 78.631540][ T5051] CPU: 1 PID: 5051 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 78.641981][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 78.652047][ T5051] Call Trace: [ 78.655335][ T5051] [ 78.658277][ T5051] dump_stack_lvl+0x125/0x1b0 [ 78.662979][ T5051] should_fail_ex+0x496/0x5b0 [ 78.667693][ T5051] ? fs_reclaim_acquire+0xb0/0x150 [ 78.672853][ T5051] __should_fail_alloc_page+0xe7/0x130 [ 78.678360][ T5051] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 78.684553][ T5051] __alloc_pages+0x14e/0x4a0 [ 78.689164][ T5051] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 78.695971][ T5051] alloc_pages+0x1a9/0x270 [ 78.700417][ T5051] pte_alloc_one+0x20/0x370 [ 78.704949][ T5051] __pte_alloc+0x6e/0x3b0 [ 78.709303][ T5051] ? pmd_install+0x170/0x170 [ 78.713917][ T5051] ? __pmd_alloc+0x375/0x840 [ 78.718529][ T5051] ? __pud_alloc+0x194/0x240 [ 78.723143][ T5051] __handle_mm_fault+0x3394/0x3e10 [ 78.728288][ T5051] ? vm_iomap_memory+0x170/0x170 [ 78.733267][ T5051] ? find_vma+0x10e/0x1b0 [ 78.737627][ T5051] ? can_vma_merge_before+0x3a0/0x3a0 [ 78.743032][ T5051] handle_mm_fault+0x478/0xa00 [ 78.747822][ T5051] ? lock_mm_and_find_vma+0xa6/0x760 [ 78.753134][ T5051] do_user_addr_fault+0x3d1/0x1000 [ 78.758268][ T5051] ? rcu_is_watching+0x12/0xb0 [ 78.763055][ T5051] exc_page_fault+0x5c/0xd0 [ 78.767590][ T5051] asm_exc_page_fault+0x26/0x30 [ 78.772480][ T5051] RIP: 0010:__put_user_4+0x11/0x20 [ 78.777619][ T5051] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 78.797250][ T5051] RSP: 0018:ffffc90003c2fe40 EFLAGS: 00050206 [ 78.803335][ T5051] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 78.811322][ T5051] RDX: ffff88801fb8bb80 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 78.819315][ T5051] RBP: 1ffff92000785fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 78.827308][ T5051] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 78.835304][ T5051] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 78.843305][ T5051] ? __sys_socketpair+0x115/0x5a0 [ 78.848437][ T5051] __sys_socketpair+0x121/0x5a0 [ 78.853327][ T5051] ? __ia32_sys_socket+0xb0/0xb0 [ 78.858305][ T5051] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.863521][ T5051] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.864686][ T5050] FAULT_INJECTION: forcing a failure. [ 78.864686][ T5050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.868740][ T5051] __x64_sys_socketpair+0x96/0x100 [ 78.887052][ T5051] do_syscall_64+0x38/0xb0 [ 78.891494][ T5051] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.897414][ T5051] RIP: 0033:0x7f37b666ede9 [ 78.901846][ T5051] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.921478][ T5051] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 78.929919][ T5051] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 78.937916][ T5051] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 78.945903][ T5051] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 78.953887][ T5051] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [pid 5053] socketpair(AF_ALG, SOCK_SEQPACKET, 0, ./strace-static-x86_64: Process 5052 attached [pid 5050] write(3, "4", 1 [pid 5052] set_robust_list(0x555556b3c660, 24 [pid 5050] <... write resumed>) = 1 [pid 5044] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5048, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5052] <... set_robust_list resumed>) = 0 [pid 5050] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5044] restart_syscall(<... resuming interrupted clone ...> [pid 5052] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5044] <... restart_syscall resumed>) = 0 [pid 5052] <... prctl resumed>) = 0 [pid 5052] setpgid(0, 0 [pid 5044] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5052] <... setpgid resumed>) = 0 [pid 5044] <... clone resumed>, child_tidptr=0x555556b3c650) = 5054 [pid 5052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5052] write(3, "1000", 4) = 4 [ 78.961878][ T5051] R13: 00007ffcf8c9e9e8 R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 78.969886][ T5051] [ 78.972918][ T5050] CPU: 0 PID: 5050 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 78.973016][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.983337][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 78.999389][ T5050] Call Trace: [ 79.002682][ T5050] [ 79.005619][ T5050] dump_stack_lvl+0x125/0x1b0 [ 79.010314][ T5050] should_fail_ex+0x496/0x5b0 [ 79.015019][ T5050] ? fs_reclaim_acquire+0xb0/0x150 [ 79.020165][ T5050] __should_fail_alloc_page+0xe7/0x130 [ 79.025650][ T5050] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 79.031840][ T5050] __alloc_pages+0x14e/0x4a0 [ 79.036449][ T5050] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 79.043247][ T5050] alloc_pages+0x1a9/0x270 [ 79.047690][ T5050] pte_alloc_one+0x20/0x370 [ 79.052208][ T5050] __pte_alloc+0x6e/0x3b0 [ 79.056547][ T5050] ? pmd_install+0x170/0x170 [ 79.061150][ T5050] ? __pmd_alloc+0x375/0x840 [ 79.065751][ T5050] ? __pud_alloc+0x194/0x240 [ 79.070356][ T5050] __handle_mm_fault+0x3394/0x3e10 [ 79.075499][ T5050] ? vm_iomap_memory+0x170/0x170 [ 79.080467][ T5050] ? find_vma+0x10e/0x1b0 [ 79.084817][ T5050] ? can_vma_merge_before+0x3a0/0x3a0 [ 79.090211][ T5050] handle_mm_fault+0x478/0xa00 [ 79.094995][ T5050] ? lock_mm_and_find_vma+0xa6/0x760 [ 79.100300][ T5050] do_user_addr_fault+0x3d1/0x1000 [ 79.105433][ T5050] ? rcu_is_watching+0x12/0xb0 [ 79.110215][ T5050] exc_page_fault+0x5c/0xd0 [ 79.114742][ T5050] asm_exc_page_fault+0x26/0x30 [ 79.119610][ T5050] RIP: 0010:__put_user_4+0x11/0x20 [ 79.124737][ T5050] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 79.144357][ T5050] RSP: 0018:ffffc90003c1fe40 EFLAGS: 00050206 [ 79.150438][ T5050] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 79.158412][ T5050] RDX: ffff88807d2a3b80 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 79.166396][ T5050] RBP: 1ffff92000783fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 79.174373][ T5050] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 79.182354][ T5050] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 79.190345][ T5050] ? __sys_socketpair+0x115/0x5a0 [ 79.195408][ T5050] __sys_socketpair+0x121/0x5a0 [ 79.200282][ T5050] ? __ia32_sys_socket+0xb0/0xb0 [ 79.205245][ T5050] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.210453][ T5050] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.215679][ T5050] __x64_sys_socketpair+0x96/0x100 [ 79.220818][ T5050] do_syscall_64+0x38/0xb0 [ 79.225249][ T5050] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.231158][ T5050] RIP: 0033:0x7f37b666ede9 [ 79.235577][ T5050] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.255197][ T5050] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 ./strace-static-x86_64: Process 5054 attached [pid 5046] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5054] set_robust_list(0x555556b3c660, 24 [pid 5052] close(3 [pid 5051] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5046] openat(AT_FDCWD, "/dev/fb0", O_RDONLY [pid 5054] <... set_robust_list resumed>) = 0 [pid 5051] openat(AT_FDCWD, "/dev/fb0", O_RDONLY) = 4 [pid 5046] <... openat resumed>) = 4 [pid 5054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5051] ioctl(4, FBIO_WAITFORVSYNC [pid 5046] ioctl(4, FBIO_WAITFORVSYNC [pid 5054] <... prctl resumed>) = 0 [pid 5054] setpgid(0, 0) = 0 [pid 5054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 79.263625][ T5050] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 79.271606][ T5050] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 79.279580][ T5050] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 79.287565][ T5050] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.295544][ T5050] R13: 00007ffcf8c9e9e8 R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 79.303721][ T5050] [pid 5054] write(3, "1000", 4) = 4 [pid 5054] close(3 [pid 5046] <... ioctl resumed>, 0) = 0 [pid 5046] exit_group(0) = ? [pid 5054] <... close resumed>) = 0 [pid 5054] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5054] write(3, "4", 1) = 1 [pid 5054] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5051] <... ioctl resumed>, 0) = 0 [pid 5046] +++ exited with 0 +++ [pid 5051] exit_group(0 [pid 5043] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5051] <... exit_group resumed>) = ? [pid 5051] +++ exited with 0 +++ [pid 5043] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5049] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5049] restart_syscall(<... resuming interrupted clone ...> [pid 5043] <... clone resumed>, child_tidptr=0x555556b3c650) = 5055 [pid 5049] <... restart_syscall resumed>) = 0 [pid 5049] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5056 ./strace-static-x86_64: Process 5055 attached [ 79.307960][ T5053] CPU: 0 PID: 5053 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 79.318413][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 79.328488][ T5053] Call Trace: [ 79.331783][ T5053] [ 79.334735][ T5053] dump_stack_lvl+0x125/0x1b0 [ 79.335205][ T5054] FAULT_INJECTION: forcing a failure. [ 79.335205][ T5054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.339423][ T5053] should_fail_ex+0x496/0x5b0 [ 79.339454][ T5053] ? fs_reclaim_acquire+0xb0/0x150 [ 79.339498][ T5053] __should_fail_alloc_page+0xe7/0x130 [pid 5055] set_robust_list(0x555556b3c660, 24) = 0 [pid 5055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5055] setpgid(0, 0) = 0 [pid 5055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1000", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5055] write(3, "4", 1) = 1 [ 79.367929][ T5053] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 79.374120][ T5053] __alloc_pages+0x14e/0x4a0 [ 79.376344][ T5055] FAULT_INJECTION: forcing a failure. [ 79.376344][ T5055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.378722][ T5053] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 79.378780][ T5053] alloc_pages+0x1a9/0x270 [ 79.403129][ T5053] pte_alloc_one+0x20/0x370 [ 79.407663][ T5053] __pte_alloc+0x6e/0x3b0 [ 79.412016][ T5053] ? pmd_install+0x170/0x170 [ 79.416626][ T5053] ? __pmd_alloc+0x375/0x840 [ 79.421227][ T5053] ? __pud_alloc+0x194/0x240 [ 79.425834][ T5053] __handle_mm_fault+0x3394/0x3e10 [ 79.430965][ T5053] ? vm_iomap_memory+0x170/0x170 [ 79.435928][ T5053] ? find_vma+0x10e/0x1b0 [ 79.440274][ T5053] ? can_vma_merge_before+0x3a0/0x3a0 [ 79.445672][ T5053] handle_mm_fault+0x478/0xa00 [ 79.450451][ T5053] ? lock_mm_and_find_vma+0xa6/0x760 [ 79.455749][ T5053] do_user_addr_fault+0x3d1/0x1000 [ 79.460874][ T5053] ? rcu_is_watching+0x12/0xb0 [ 79.465652][ T5053] exc_page_fault+0x5c/0xd0 [ 79.470174][ T5053] asm_exc_page_fault+0x26/0x30 [ 79.475040][ T5053] RIP: 0010:__put_user_4+0x11/0x20 [ 79.480166][ T5053] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 79.499783][ T5053] RSP: 0018:ffffc90003bffe40 EFLAGS: 00050206 [ 79.505861][ T5053] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 79.513836][ T5053] RDX: ffff88801be20000 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 79.521818][ T5053] RBP: 1ffff9200077ffcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 79.529797][ T5053] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 79.537775][ T5053] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 79.545762][ T5053] ? __sys_socketpair+0x115/0x5a0 [ 79.550817][ T5053] __sys_socketpair+0x121/0x5a0 [ 79.555699][ T5053] ? __ia32_sys_socket+0xb0/0xb0 [ 79.560664][ T5053] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.565873][ T5053] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.571095][ T5053] __x64_sys_socketpair+0x96/0x100 [ 79.576229][ T5053] do_syscall_64+0x38/0xb0 [ 79.580660][ T5053] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.586572][ T5053] RIP: 0033:0x7f37b666ede9 [ 79.590991][ T5053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.610612][ T5053] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 79.619035][ T5053] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 79.627031][ T5053] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 79.635018][ T5053] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 79.643006][ T5053] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000012d75 [ 79.650987][ T5053] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 79.658988][ T5053] [ 79.662272][ T5054] CPU: 1 PID: 5054 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 79.672720][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 79.682794][ T5054] Call Trace: [ 79.686094][ T5054] [ 79.689038][ T5054] dump_stack_lvl+0x125/0x1b0 [ 79.693742][ T5054] should_fail_ex+0x496/0x5b0 [ 79.698443][ T5054] ? fs_reclaim_acquire+0xb0/0x150 [ 79.703594][ T5054] __should_fail_alloc_page+0xe7/0x130 [ 79.709089][ T5054] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 79.715277][ T5054] __alloc_pages+0x14e/0x4a0 [ 79.719894][ T5054] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 79.726710][ T5054] alloc_pages+0x1a9/0x270 [ 79.731158][ T5054] pte_alloc_one+0x20/0x370 [ 79.735694][ T5054] __pte_alloc+0x6e/0x3b0 [ 79.740043][ T5054] ? pmd_install+0x170/0x170 [ 79.744655][ T5054] ? __pmd_alloc+0x375/0x840 [ 79.749261][ T5054] ? __pud_alloc+0x194/0x240 [ 79.753876][ T5054] __handle_mm_fault+0x3394/0x3e10 [ 79.759019][ T5054] ? vm_iomap_memory+0x170/0x170 [ 79.763998][ T5054] ? find_vma+0x10e/0x1b0 [ 79.768353][ T5054] ? can_vma_merge_before+0x3a0/0x3a0 [ 79.773758][ T5054] handle_mm_fault+0x478/0xa00 [ 79.778567][ T5054] ? lock_mm_and_find_vma+0xa6/0x760 [ 79.783892][ T5054] do_user_addr_fault+0x3d1/0x1000 [ 79.789039][ T5054] ? rcu_is_watching+0x12/0xb0 [ 79.793829][ T5054] exc_page_fault+0x5c/0xd0 [ 79.798363][ T5054] asm_exc_page_fault+0x26/0x30 [ 79.803239][ T5054] RIP: 0010:__put_user_4+0x11/0x20 [ 79.808371][ T5054] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 79.828008][ T5054] RSP: 0018:ffffc90003c3fe40 EFLAGS: 00050206 [ 79.834099][ T5054] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 79.842090][ T5054] RDX: ffff88807d2a5940 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 79.850084][ T5054] RBP: 1ffff92000787fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 79.858076][ T5054] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 79.863781][ T5052] FAULT_INJECTION: forcing a failure. [ 79.863781][ T5052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.866048][ T5054] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 79.887223][ T5054] ? __sys_socketpair+0x115/0x5a0 [ 79.892293][ T5054] __sys_socketpair+0x121/0x5a0 [ 79.897191][ T5054] ? __ia32_sys_socket+0xb0/0xb0 [ 79.902171][ T5054] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.907389][ T5054] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.912627][ T5054] __x64_sys_socketpair+0x96/0x100 [ 79.917780][ T5054] do_syscall_64+0x38/0xb0 [ 79.922228][ T5054] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.924984][ T5056] FAULT_INJECTION: forcing a failure. [ 79.924984][ T5056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 79.928141][ T5054] RIP: 0033:0x7f37b666ede9 [ 79.945748][ T5054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.965380][ T5054] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 79.973820][ T5054] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 79.981840][ T5054] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 79.989828][ T5054] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 79.997818][ T5054] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000012d86 [ 80.005807][ T5054] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 80.013819][ T5054] [pid 5055] socketpair(AF_ALG, SOCK_SEQPACKET, 0, ./strace-static-x86_64: Process 5056 attached [pid 5052] <... close resumed>) = 0 [pid 5056] set_robust_list(0x555556b3c660, 24 [pid 5052] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 5056] <... set_robust_list resumed>) = 0 [pid 5052] <... openat resumed>) = 3 [pid 5056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5052] write(3, "4", 1) = 1 [pid 5056] <... prctl resumed>) = 0 [pid 5056] setpgid(0, 0 [pid 5052] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5056] <... setpgid resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] write(3, "1000", 4) = 4 [pid 5056] close(3) = 0 [pid 5056] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5056] write(3, "4", 1) = 1 [pid 5056] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5050] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5050] openat(AT_FDCWD, "/dev/fb0", O_RDONLY) = 4 [ 80.016849][ T5056] CPU: 0 PID: 5056 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 80.016905][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.027266][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 80.043300][ T5056] Call Trace: [ 80.046584][ T5056] [ 80.049518][ T5056] dump_stack_lvl+0x125/0x1b0 [ 80.054212][ T5056] should_fail_ex+0x496/0x5b0 [ 80.058902][ T5056] ? fs_reclaim_acquire+0xb0/0x150 [ 80.064037][ T5056] __should_fail_alloc_page+0xe7/0x130 [ 80.069516][ T5056] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 80.076210][ T5056] __alloc_pages+0x14e/0x4a0 [ 80.080834][ T5056] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 80.087631][ T5056] alloc_pages+0x1a9/0x270 [ 80.092069][ T5056] pte_alloc_one+0x20/0x370 [ 80.096594][ T5056] __pte_alloc+0x6e/0x3b0 [ 80.100934][ T5056] ? pmd_install+0x170/0x170 [ 80.105535][ T5056] ? __pmd_alloc+0x375/0x840 [ 80.110136][ T5056] ? __pud_alloc+0x194/0x240 [ 80.114741][ T5056] __handle_mm_fault+0x3394/0x3e10 [ 80.119870][ T5056] ? vm_iomap_memory+0x170/0x170 [ 80.124838][ T5056] ? find_vma+0x10e/0x1b0 [ 80.129186][ T5056] ? can_vma_merge_before+0x3a0/0x3a0 [ 80.134581][ T5056] handle_mm_fault+0x478/0xa00 [ 80.139360][ T5056] ? lock_mm_and_find_vma+0xa6/0x760 [ 80.144661][ T5056] do_user_addr_fault+0x3d1/0x1000 [ 80.149785][ T5056] ? rcu_is_watching+0x12/0xb0 [ 80.154568][ T5056] exc_page_fault+0x5c/0xd0 [ 80.159092][ T5056] asm_exc_page_fault+0x26/0x30 [ 80.163960][ T5056] RIP: 0010:__put_user_4+0x11/0x20 [ 80.169082][ T5056] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 80.188701][ T5056] RSP: 0018:ffffc90003b9fe40 EFLAGS: 00050206 [ 80.194776][ T5056] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 80.202756][ T5056] RDX: ffff88801be23b80 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 80.210736][ T5056] RBP: 1ffff92000773fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 80.218715][ T5056] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 80.226696][ T5056] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 80.234687][ T5056] ? __sys_socketpair+0x115/0x5a0 [ 80.239741][ T5056] __sys_socketpair+0x121/0x5a0 [ 80.244618][ T5056] ? __ia32_sys_socket+0xb0/0xb0 [ 80.249580][ T5056] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.254788][ T5056] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.260014][ T5056] __x64_sys_socketpair+0x96/0x100 [ 80.265148][ T5056] do_syscall_64+0x38/0xb0 [ 80.269581][ T5056] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.275491][ T5056] RIP: 0033:0x7f37b666ede9 [ 80.279914][ T5056] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.299533][ T5056] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 80.307953][ T5056] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [pid 5050] ioctl(4, FBIO_WAITFORVSYNC, 0) = 0 [pid 5050] exit_group(0) = ? [pid 5050] +++ exited with 0 +++ [ 80.315933][ T5056] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 80.323909][ T5056] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 80.331883][ T5056] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000013192 [ 80.339859][ T5056] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 80.347854][ T5056] [ 80.351324][ T5055] CPU: 0 PID: 5055 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 80.361769][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 80.371831][ T5055] Call Trace: [ 80.375113][ T5055] [ 80.378050][ T5055] dump_stack_lvl+0x125/0x1b0 [ 80.382744][ T5055] should_fail_ex+0x496/0x5b0 [ 80.387435][ T5055] ? fs_reclaim_acquire+0xb0/0x150 [ 80.392571][ T5055] __should_fail_alloc_page+0xe7/0x130 [ 80.398052][ T5055] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 80.404224][ T5055] __alloc_pages+0x14e/0x4a0 [ 80.408830][ T5055] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 80.415636][ T5055] alloc_pages+0x1a9/0x270 [ 80.420075][ T5055] pte_alloc_one+0x20/0x370 [ 80.424592][ T5055] __pte_alloc+0x6e/0x3b0 [ 80.428932][ T5055] ? pmd_install+0x170/0x170 [ 80.433531][ T5055] ? __pmd_alloc+0x375/0x840 [ 80.438129][ T5055] ? __pud_alloc+0x194/0x240 [ 80.442731][ T5055] __handle_mm_fault+0x3394/0x3e10 [ 80.447862][ T5055] ? vm_iomap_memory+0x170/0x170 [ 80.452828][ T5055] ? find_vma+0x10e/0x1b0 [ 80.457176][ T5055] ? can_vma_merge_before+0x3a0/0x3a0 [ 80.462571][ T5055] handle_mm_fault+0x478/0xa00 [ 80.467352][ T5055] ? lock_mm_and_find_vma+0xa6/0x760 [ 80.472653][ T5055] do_user_addr_fault+0x3d1/0x1000 [ 80.477797][ T5055] ? rcu_is_watching+0x12/0xb0 [ 80.482575][ T5055] exc_page_fault+0x5c/0xd0 [ 80.487100][ T5055] asm_exc_page_fault+0x26/0x30 [ 80.491966][ T5055] RIP: 0010:__put_user_4+0x11/0x20 [ 80.497091][ T5055] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 80.516711][ T5055] RSP: 0018:ffffc90003befe40 EFLAGS: 00050206 [ 80.522801][ T5055] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 80.530779][ T5055] RDX: ffff88801be21dc0 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 80.538793][ T5055] RBP: 1ffff9200077dfcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 80.546769][ T5055] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 80.554752][ T5055] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 80.562743][ T5055] ? __sys_socketpair+0x115/0x5a0 [ 80.567804][ T5055] __sys_socketpair+0x121/0x5a0 [ 80.572679][ T5055] ? __ia32_sys_socket+0xb0/0xb0 [ 80.577642][ T5055] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.582848][ T5055] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.588072][ T5055] __x64_sys_socketpair+0x96/0x100 [ 80.593207][ T5055] do_syscall_64+0x38/0xb0 [ 80.597640][ T5055] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.603549][ T5055] RIP: 0033:0x7f37b666ede9 [ 80.607973][ T5055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.627596][ T5055] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 80.636019][ T5055] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 80.643997][ T5055] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 80.651985][ T5055] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 80.659975][ T5055] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000012d87 [pid 5053] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5053] openat(AT_FDCWD, "/dev/fb0", O_RDONLY) = 4 [pid 5053] ioctl(4, FBIO_WAITFORVSYNC [pid 5056] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5056] openat(AT_FDCWD, "/dev/fb0", O_RDONLY [pid 5047] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5056] <... openat resumed>) = 4 [pid 5053] <... ioctl resumed>, 0) = 0 [pid 5053] exit_group(0) = ? [pid 5056] ioctl(4, FBIO_WAITFORVSYNC [pid 5053] +++ exited with 0 +++ [pid 5040] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5053, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5040] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5057 [pid 5047] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] <... ioctl resumed>, 0) = 0 [pid 5056] exit_group(0) = ? [pid 5056] +++ exited with 0 +++ [pid 5049] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5056, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5049] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5058 ./strace-static-x86_64: Process 5059 attached [pid 5059] set_robust_list(0x555556b3c660, 24) = 0 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setpgid(0, 0) = 0 [ 80.667968][ T5055] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 80.675972][ T5055] [ 80.679203][ T5052] CPU: 0 PID: 5052 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 80.689649][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 80.699731][ T5052] Call Trace: [ 80.703039][ T5052] [ 80.705989][ T5052] dump_stack_lvl+0x125/0x1b0 [ 80.710700][ T5052] should_fail_ex+0x496/0x5b0 [ 80.715415][ T5052] ? fs_reclaim_acquire+0xb0/0x150 [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1000", 4) = 4 [pid 5059] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5059] write(3, "4", 1) = 1 [pid 5059] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5047] <... clone resumed>, child_tidptr=0x555556b3c650) = 5059 [ 80.720570][ T5052] __should_fail_alloc_page+0xe7/0x130 [ 80.726071][ T5052] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 80.731573][ T5059] FAULT_INJECTION: forcing a failure. [ 80.731573][ T5059] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 80.732243][ T5052] __alloc_pages+0x14e/0x4a0 [ 80.732277][ T5052] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 80.756846][ T5052] alloc_pages+0x1a9/0x270 [ 80.761302][ T5052] pte_alloc_one+0x20/0x370 [ 80.765830][ T5052] __pte_alloc+0x6e/0x3b0 [ 80.770187][ T5052] ? pmd_install+0x170/0x170 [ 80.774804][ T5052] ? __pmd_alloc+0x375/0x840 [ 80.779417][ T5052] ? __pud_alloc+0x194/0x240 [ 80.784036][ T5052] __handle_mm_fault+0x3394/0x3e10 [ 80.789181][ T5052] ? vm_iomap_memory+0x170/0x170 [ 80.794159][ T5052] ? find_vma+0x10e/0x1b0 [ 80.798515][ T5052] ? can_vma_merge_before+0x3a0/0x3a0 [ 80.803928][ T5052] handle_mm_fault+0x478/0xa00 [ 80.808719][ T5052] ? lock_mm_and_find_vma+0xa6/0x760 [ 80.814039][ T5052] do_user_addr_fault+0x3d1/0x1000 [ 80.819176][ T5052] ? rcu_is_watching+0x12/0xb0 [pid 5054] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5054] openat(AT_FDCWD, "/dev/fb0", O_RDONLY) = 4 [pid 5054] ioctl(4, FBIO_WAITFORVSYNC, 0) = 0 [ 80.823972][ T5052] exc_page_fault+0x5c/0xd0 [ 80.828521][ T5052] asm_exc_page_fault+0x26/0x30 [ 80.833403][ T5052] RIP: 0010:__put_user_4+0x11/0x20 [ 80.838543][ T5052] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 80.858182][ T5052] RSP: 0018:ffffc90003bbfe40 EFLAGS: 00050206 [ 80.864305][ T5052] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [pid 5054] exit_group(0) = ? [pid 5054] +++ exited with 0 +++ [pid 5055] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5055] openat(AT_FDCWD, "/dev/fb0", O_RDONLY) = 4 [pid 5055] ioctl(4, FBIO_WAITFORVSYNC, 0) = 0 [pid 5055] exit_group(0) = ? [pid 5055] +++ exited with 0 +++ [ 80.872299][ T5052] RDX: ffff88801fb8d940 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 80.880296][ T5052] RBP: 1ffff92000777fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 80.888293][ T5052] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 80.896288][ T5052] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 80.904289][ T5052] ? __sys_socketpair+0x115/0x5a0 [ 80.909369][ T5052] __sys_socketpair+0x121/0x5a0 [ 80.914263][ T5052] ? __ia32_sys_socket+0xb0/0xb0 [ 80.919248][ T5052] ? _raw_spin_unlock_irq+0x23/0x50 [pid 5044] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5054, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5044] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5060 ./strace-static-x86_64: Process 5060 attached [pid 5060] set_robust_list(0x555556b3c660, 24) = 0 [pid 5060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] setpgid(0, 0) = 0 [pid 5060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5060] write(3, "1000", 4) = 4 [pid 5060] close(3) = 0 [pid 5060] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [ 80.924474][ T5052] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.929722][ T5052] __x64_sys_socketpair+0x96/0x100 [ 80.934882][ T5052] do_syscall_64+0x38/0xb0 [ 80.939332][ T5052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.945260][ T5052] RIP: 0033:0x7f37b666ede9 [ 80.949704][ T5052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.955198][ T5060] FAULT_INJECTION: forcing a failure. [pid 5060] write(3, "4", 1) = 1 [ 80.955198][ T5060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 80.969318][ T5052] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 80.969347][ T5052] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 80.969365][ T5052] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 80.969381][ T5052] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 80.969398][ T5052] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000012d7c [pid 5060] socketpair(AF_ALG, SOCK_SEQPACKET, 0, ./strace-static-x86_64: Process 5058 attached ./strace-static-x86_64: Process 5057 attached [pid 5043] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5055, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5052] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5058] set_robust_list(0x555556b3c660, 24) = 0 [pid 5058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5058] setpgid(0, 0) = 0 [pid 5058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "1000", 4) = 4 [pid 5058] close(3) = 0 [pid 5058] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5058] write(3, "4", 1) = 1 [ 80.969415][ T5052] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 81.030864][ T5052] [ 81.034891][ T5059] CPU: 0 PID: 5059 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 81.045344][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 81.055417][ T5059] Call Trace: [ 81.057958][ T5058] FAULT_INJECTION: forcing a failure. [ 81.057958][ T5058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.058696][ T5059] [ 81.058708][ T5059] dump_stack_lvl+0x125/0x1b0 [ 81.058742][ T5059] should_fail_ex+0x496/0x5b0 [ 81.084303][ T5059] ? fs_reclaim_acquire+0xb0/0x150 [ 81.089459][ T5059] __should_fail_alloc_page+0xe7/0x130 [ 81.094953][ T5059] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 81.101141][ T5059] __alloc_pages+0x14e/0x4a0 [ 81.105758][ T5059] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 81.112573][ T5059] alloc_pages+0x1a9/0x270 [ 81.117025][ T5059] pte_alloc_one+0x20/0x370 [ 81.121566][ T5059] __pte_alloc+0x6e/0x3b0 [pid 5058] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5057] set_robust_list(0x555556b3c660, 24) = 0 [pid 5057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5057] setpgid(0, 0) = 0 [pid 5057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5057] write(3, "1000", 4) = 4 [pid 5057] close(3) = 0 [pid 5057] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5057] write(3, "4", 1) = 1 [ 81.125924][ T5059] ? pmd_install+0x170/0x170 [ 81.130543][ T5059] ? __pmd_alloc+0x375/0x840 [ 81.135163][ T5059] ? __pud_alloc+0x194/0x240 [ 81.139786][ T5059] __handle_mm_fault+0x3394/0x3e10 [ 81.144949][ T5059] ? vm_iomap_memory+0x170/0x170 [ 81.149935][ T5059] ? find_vma+0x10e/0x1b0 [ 81.154297][ T5059] ? can_vma_merge_before+0x3a0/0x3a0 [ 81.155899][ T5057] FAULT_INJECTION: forcing a failure. [ 81.155899][ T5057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.159693][ T5059] handle_mm_fault+0x478/0xa00 [ 81.177648][ T5059] ? lock_mm_and_find_vma+0xa6/0x760 [ 81.182965][ T5059] do_user_addr_fault+0x3d1/0x1000 [ 81.188104][ T5059] ? rcu_is_watching+0x12/0xb0 [ 81.192896][ T5059] exc_page_fault+0x5c/0xd0 [ 81.197435][ T5059] asm_exc_page_fault+0x26/0x30 [ 81.202317][ T5059] RIP: 0010:__put_user_4+0x11/0x20 [ 81.207456][ T5059] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 81.227093][ T5059] RSP: 0018:ffffc90003bffe40 EFLAGS: 00050206 [ 81.233183][ T5059] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 81.241178][ T5059] RDX: ffff888076718000 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 81.249167][ T5059] RBP: 1ffff9200077ffcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 81.257156][ T5059] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 81.265146][ T5059] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 81.273146][ T5059] ? __sys_socketpair+0x115/0x5a0 [ 81.278214][ T5059] __sys_socketpair+0x121/0x5a0 [ 81.283106][ T5059] ? __ia32_sys_socket+0xb0/0xb0 [ 81.288089][ T5059] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.293309][ T5059] ? lockdep_hardirqs_on+0x7d/0x100 [ 81.298541][ T5059] __x64_sys_socketpair+0x96/0x100 [ 81.303694][ T5059] do_syscall_64+0x38/0xb0 [ 81.308138][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.314056][ T5059] RIP: 0033:0x7f37b666ede9 [ 81.318489][ T5059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.338115][ T5059] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 81.346548][ T5059] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 81.354540][ T5059] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 81.362523][ T5059] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 81.370510][ T5059] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000001318e [ 81.378499][ T5059] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 81.386521][ T5059] [ 81.389554][ T5060] CPU: 1 PID: 5060 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 81.399991][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 81.410054][ T5060] Call Trace: [ 81.413336][ T5060] [ 81.416270][ T5060] dump_stack_lvl+0x125/0x1b0 [ 81.420979][ T5060] should_fail_ex+0x496/0x5b0 [ 81.425681][ T5060] ? fs_reclaim_acquire+0xb0/0x150 [ 81.430831][ T5060] __should_fail_alloc_page+0xe7/0x130 [ 81.436313][ T5060] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 81.442488][ T5060] __alloc_pages+0x14e/0x4a0 [ 81.447097][ T5060] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 81.453897][ T5060] alloc_pages+0x1a9/0x270 [ 81.458340][ T5060] pte_alloc_one+0x20/0x370 [ 81.462873][ T5060] __pte_alloc+0x6e/0x3b0 [ 81.467223][ T5060] ? pmd_install+0x170/0x170 [ 81.471835][ T5060] ? __pmd_alloc+0x375/0x840 [ 81.476437][ T5060] ? __pud_alloc+0x194/0x240 [ 81.481041][ T5060] __handle_mm_fault+0x3394/0x3e10 [ 81.486180][ T5060] ? vm_iomap_memory+0x170/0x170 [ 81.491151][ T5060] ? find_vma+0x10e/0x1b0 [ 81.495505][ T5060] ? can_vma_merge_before+0x3a0/0x3a0 [ 81.500899][ T5060] handle_mm_fault+0x478/0xa00 [ 81.505684][ T5060] ? lock_mm_and_find_vma+0xa6/0x760 [ 81.510995][ T5060] do_user_addr_fault+0x3d1/0x1000 [ 81.516119][ T5060] ? rcu_is_watching+0x12/0xb0 [ 81.520902][ T5060] exc_page_fault+0x5c/0xd0 [ 81.525429][ T5060] asm_exc_page_fault+0x26/0x30 [ 81.530297][ T5060] RIP: 0010:__put_user_4+0x11/0x20 [ 81.535435][ T5060] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 81.555069][ T5060] RSP: 0018:ffffc90003c3fe40 EFLAGS: 00050206 [ 81.561148][ T5060] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 81.569131][ T5060] RDX: ffff88807671bb80 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 81.577110][ T5060] RBP: 1ffff92000787fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 81.585089][ T5060] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 81.593077][ T5060] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 81.601071][ T5060] ? __sys_socketpair+0x115/0x5a0 [ 81.606136][ T5060] __sys_socketpair+0x121/0x5a0 [ 81.611020][ T5060] ? __ia32_sys_socket+0xb0/0xb0 [ 81.615986][ T5060] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.621199][ T5060] ? lockdep_hardirqs_on+0x7d/0x100 [ 81.626429][ T5060] __x64_sys_socketpair+0x96/0x100 [ 81.631568][ T5060] do_syscall_64+0x38/0xb0 [ 81.636005][ T5060] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.641936][ T5060] RIP: 0033:0x7f37b666ede9 [ 81.646371][ T5060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.665998][ T5060] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 81.674440][ T5060] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 81.682424][ T5060] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 81.690406][ T5060] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 81.698400][ T5060] R10: 0000000020000000 R11: 0000000000000246 R12: 000000000001342e [ 81.706383][ T5060] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 81.714388][ T5060] [ 81.717523][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.723815][ T5057] CPU: 1 PID: 5057 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 81.734262][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 81.739124][ T5062] FAULT_INJECTION: forcing a failure. [ 81.739124][ T5062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.744313][ T5057] Call Trace: [ 81.744324][ T5057] [ 81.744334][ T5057] dump_stack_lvl+0x125/0x1b0 [ 81.744369][ T5057] should_fail_ex+0x496/0x5b0 [ 81.773102][ T5057] ? fs_reclaim_acquire+0xb0/0x150 [ 81.778255][ T5057] __should_fail_alloc_page+0xe7/0x130 [ 81.783744][ T5057] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 81.789920][ T5057] __alloc_pages+0x14e/0x4a0 [ 81.794523][ T5057] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 81.801354][ T5057] alloc_pages+0x1a9/0x270 [ 81.805803][ T5057] pte_alloc_one+0x20/0x370 [ 81.810331][ T5057] __pte_alloc+0x6e/0x3b0 [ 81.814673][ T5057] ? pmd_install+0x170/0x170 [ 81.819277][ T5057] ? __pmd_alloc+0x375/0x840 [ 81.823893][ T5057] ? __pud_alloc+0x194/0x240 [ 81.828496][ T5057] __handle_mm_fault+0x3394/0x3e10 [ 81.833629][ T5057] ? vm_iomap_memory+0x170/0x170 [ 81.838595][ T5057] ? find_vma+0x10e/0x1b0 [ 81.842944][ T5057] ? can_vma_merge_before+0x3a0/0x3a0 [ 81.848346][ T5057] handle_mm_fault+0x478/0xa00 [ 81.853125][ T5057] ? lock_mm_and_find_vma+0xa6/0x760 [ 81.858423][ T5057] do_user_addr_fault+0x3d1/0x1000 [ 81.863550][ T5057] ? rcu_is_watching+0x12/0xb0 [ 81.868326][ T5057] exc_page_fault+0x5c/0xd0 [ 81.872848][ T5057] asm_exc_page_fault+0x26/0x30 [ 81.877722][ T5057] RIP: 0010:__put_user_4+0x11/0x20 [ 81.882845][ T5057] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 81.902462][ T5057] RSP: 0018:ffffc90003c1fe40 EFLAGS: 00050206 [ 81.908539][ T5057] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 81.916519][ T5057] RDX: ffff88801be25940 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 81.924500][ T5057] RBP: 1ffff92000783fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 81.932474][ T5057] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 81.940450][ T5057] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 81.948449][ T5057] ? __sys_socketpair+0x115/0x5a0 [ 81.953503][ T5057] __sys_socketpair+0x121/0x5a0 [ 81.958389][ T5057] ? __ia32_sys_socket+0xb0/0xb0 [ 81.963354][ T5057] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.968561][ T5057] ? lockdep_hardirqs_on+0x7d/0x100 [ 81.973784][ T5057] __x64_sys_socketpair+0x96/0x100 [ 81.978923][ T5057] do_syscall_64+0x38/0xb0 [ 81.983350][ T5057] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.989259][ T5057] RIP: 0033:0x7f37b666ede9 [ 81.993721][ T5057] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.013338][ T5057] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 82.021764][ T5057] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 82.029832][ T5057] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 82.037818][ T5057] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 82.045793][ T5057] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000000131ec [ 82.053773][ T5057] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 82.061771][ T5057] [ 82.064856][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.064948][ T5059] ------------[ cut here ]------------ [ 82.071447][ T5058] CPU: 1 PID: 5058 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 82.076737][ T5059] platform vkms: vblank wait timed out on crtc 0 [ 82.086912][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 82.086928][ T5058] Call Trace: [ 82.086937][ T5058] [ 82.086947][ T5058] dump_stack_lvl+0x125/0x1b0 [ 82.114217][ T5058] should_fail_ex+0x496/0x5b0 [ 82.118916][ T5058] ? fs_reclaim_acquire+0xb0/0x150 [ 82.124403][ T5058] __should_fail_alloc_page+0xe7/0x130 [ 82.128708][ T5059] WARNING: CPU: 0 PID: 5059 at drivers/gpu/drm/drm_vblank.c:1310 drm_wait_one_vblank+0x32d/0x540 [ 82.129876][ T5058] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 82.140382][ T5059] Modules linked in: [ 82.146488][ T5058] __alloc_pages+0x14e/0x4a0 [ 82.150374][ T5059] [ 82.150383][ T5059] CPU: 0 PID: 5059 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 82.154944][ T5058] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 82.157269][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 82.167671][ T5058] alloc_pages+0x1a9/0x270 [ 82.174441][ T5059] RIP: 0010:drm_wait_one_vblank+0x32d/0x540 [ 82.184449][ T5058] pte_alloc_one+0x20/0x370 [ 82.184484][ T5058] __pte_alloc+0x6e/0x3b0 [ 82.188865][ T5059] Code: 4d 85 ed 0f 84 49 01 00 00 e8 1f 3f cf fc 4c 89 e7 e8 37 20 7a 00 89 e9 4c 89 ea 48 c7 c7 60 f5 fd 8a 48 89 c6 e8 63 67 95 fc <0f> 0b e9 16 fe ff ff e8 f7 3e cf fc 48 8d 7b 08 48 b8 00 00 00 00 [ 82.194734][ T5058] ? pmd_install+0x170/0x170 [ 82.194765][ T5058] ? __pmd_alloc+0x375/0x840 [ 82.199234][ T5059] RSP: 0018:ffffc90003bffb38 EFLAGS: 00010286 [ 82.203539][ T5058] ? __pud_alloc+0x194/0x240 [ 82.223144][ T5059] [ 82.227688][ T5058] __handle_mm_fault+0x3394/0x3e10 [ 82.232269][ T5059] RAX: 0000000000000000 RBX: ffff88801c6f8000 RCX: 0000000000000000 [ 82.238318][ T5058] ? vm_iomap_memory+0x170/0x170 [ 82.238371][ T5058] ? find_vma+0x10e/0x1b0 [ 82.242953][ T5059] RDX: ffff888076718000 RSI: ffffffff814df0c6 RDI: 0000000000000001 [ 82.245261][ T5058] ? can_vma_merge_before+0x3a0/0x3a0 [ 82.245304][ T5058] handle_mm_fault+0x478/0xa00 [ 82.250376][ T5059] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 82.258340][ T5058] ? lock_mm_and_find_vma+0xa6/0x760 [ 82.258374][ T5058] do_user_addr_fault+0x3d1/0x1000 [ 82.263274][ T5059] R10: 0000000000000001 R11: 205d393530355420 R12: ffff88801be2c010 [ 82.267585][ T5058] ? rcu_is_watching+0x12/0xb0 [ 82.267618][ T5058] exc_page_fault+0x5c/0xd0 [ 82.275576][ T5059] R13: ffff888017f45f00 R14: 1ffff9200077ff69 R15: 00000000000010ea [ 82.280906][ T5058] asm_exc_page_fault+0x26/0x30 [ 82.285673][ T5059] FS: 0000555556b3c380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 82.293594][ T5058] RIP: 0010:__put_user_4+0x11/0x20 [ 82.298877][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.303938][ T5058] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 82.303966][ T5058] RSP: 0018:ffffc90003b9fe40 EFLAGS: 00050206 [ 82.311916][ T5059] CR2: 0000000020000000 CR3: 00000000292a9000 CR4: 00000000003506f0 [ 82.316655][ T5058] [ 82.316661][ T5058] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 82.316678][ T5058] RDX: ffff888076719dc0 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 82.321161][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.329106][ T5058] RBP: 1ffff92000773fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 82.329125][ T5058] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 82.333995][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.342858][ T5058] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 82.347968][ T5059] Call Trace: [ 82.354519][ T5058] ? __sys_socketpair+0x115/0x5a0 [ 82.374138][ T5059] [ 82.380162][ T5058] __sys_socketpair+0x121/0x5a0 [ 82.388129][ T5059] ? show_regs+0x8f/0xa0 [ 82.390420][ T5058] ? __ia32_sys_socket+0xb0/0xb0 [ 82.398412][ T5059] ? __warn+0xe6/0x380 [ 82.406323][ T5058] ? _raw_spin_unlock_irq+0x23/0x50 [pid 5057] socketpair(AF_ALG, SOCK_SEQPACKET, 0, [pid 5052] openat(AT_FDCWD, "/dev/fb0", O_RDONLY) = 4 [pid 5052] ioctl(4, FBIO_WAITFORVSYNC [pid 5043] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5061 [pid 5059] <... socketpair resumed>0x20000000) = -1 EFAULT (Bad address) [pid 5059] openat(AT_FDCWD, "/dev/fb0", O_RDONLY [pid 5052] <... ioctl resumed>, 0) = 0 [pid 5052] exit_group(0) = ? [pid 5052] +++ exited with 0 +++ [pid 5041] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5052, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5059] <... openat resumed>) = 4 [pid 5041] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b3c650) = 5062 [pid 5059] ioctl(4, FBIO_WAITFORVSYNC./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x555556b3c660, 24) = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5062] write(3, "4", 1) = 1 [ 82.406352][ T5058] ? lockdep_hardirqs_on+0x7d/0x100 [ 82.414316][ T5059] ? preempt_schedule_notrace+0x5f/0xe0 [ 82.422255][ T5058] __x64_sys_socketpair+0x96/0x100 [ 82.430227][ T5059] ? drm_wait_one_vblank+0x32d/0x540 [ 82.438161][ T5058] do_syscall_64+0x38/0xb0 [ 82.446163][ T5059] ? report_bug+0x3bc/0x580 [ 82.449397][ T5058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.454428][ T5059] ? handle_bug+0x3c/0x70 [ 82.457314][ T5058] RIP: 0033:0x7f37b666ede9 [ 82.462138][ T5059] ? exc_invalid_op+0x17/0x40 [pid 5062] socketpair(AF_ALG, SOCK_SEQPACKET, 0, ./strace-static-x86_64: Process 5061 attached [pid 5061] set_robust_list(0x555556b3c660, 24) = 0 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0) = 0 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1000", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5061] write(3, "4", 1) = 1 [ 82.466357][ T5058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.466384][ T5058] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 [ 82.471297][ T5059] ? asm_exc_invalid_op+0x1a/0x20 [ 82.475341][ T5058] ORIG_RAX: 0000000000000035 [ 82.475351][ T5058] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 82.475371][ T5058] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 82.480550][ T5059] ? __warn_printk+0x1a6/0x350 [ 82.485711][ T5058] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 82.485729][ T5058] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000000135e4 [ 82.491258][ T5059] ? drm_wait_one_vblank+0x32d/0x540 [ 82.496342][ T5058] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 82.496379][ T5058] [ 82.496400][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.501651][ T5059] ? drm_wait_one_vblank+0x32d/0x540 [ 82.543604][ T5061] FAULT_INJECTION: forcing a failure. [ 82.543604][ T5061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.549508][ T5059] ? drm_crtc_vblank_put+0x80/0x80 [ 82.549554][ T5059] ? mark_held_locks+0x9f/0xe0 [ 82.556217][ T5061] CPU: 1 PID: 5061 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 82.560687][ T5059] ? cpuacct_percpu_seq_show+0x10/0x10 [ 82.565340][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 82.565355][ T5061] Call Trace: [ 82.565364][ T5061] [ 82.565374][ T5061] dump_stack_lvl+0x125/0x1b0 [ 82.573334][ T5059] ? lockdep_hardirqs_on+0x7d/0x100 [ 82.581303][ T5061] should_fail_ex+0x496/0x5b0 [ 82.581333][ T5061] ? fs_reclaim_acquire+0xb0/0x150 [ 82.586126][ T5059] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 82.594052][ T5061] __should_fail_alloc_page+0xe7/0x130 [ 82.594094][ T5061] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 82.602049][ T5059] ? drm_vblank_get+0x14f/0x270 [ 82.607322][ T5061] __alloc_pages+0x14e/0x4a0 [ 82.607351][ T5061] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 82.615371][ T5059] drm_fb_helper_ioctl+0x152/0x190 [ 82.618355][ T5061] alloc_pages+0x1a9/0x270 [ 82.624321][ T5059] ? drm_fb_helper_unregister_info+0x60/0x60 [ 82.629555][ T5061] pte_alloc_one+0x20/0x370 [ 82.642742][ T5059] do_fb_ioctl+0x3d0/0x7d0 [ 82.647806][ T5061] __pte_alloc+0x6e/0x3b0 [ 82.647834][ T5061] ? pmd_install+0x170/0x170 [ 82.647863][ T5061] ? __pmd_alloc+0x375/0x840 [ 82.652615][ T5059] ? fb_getput_cmap+0x2f0/0x2f0 [ 82.662994][ T5061] ? __pud_alloc+0x194/0x240 [ 82.663027][ T5061] __handle_mm_fault+0x3394/0x3e10 [ 82.668523][ T5059] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 82.678513][ T5061] ? vm_iomap_memory+0x170/0x170 [ 82.681816][ T5059] ? do_vfs_ioctl+0x379/0x1920 [ 82.684734][ T5061] ? find_vma+0x10e/0x1b0 [ 82.689870][ T5059] ? handle_mm_fault+0x4ef/0xa00 [ 82.695009][ T5061] ? can_vma_merge_before+0x3a0/0x3a0 [ 82.695063][ T5061] handle_mm_fault+0x478/0xa00 [ 82.699705][ T5059] fb_ioctl+0xf1/0x160 [ 82.704788][ T5061] ? lock_mm_and_find_vma+0xa6/0x760 [ 82.704822][ T5061] do_user_addr_fault+0x3d1/0x1000 [ 82.710595][ T5059] ? do_fb_ioctl+0x7d0/0x7d0 [ 82.716030][ T5061] ? rcu_is_watching+0x12/0xb0 [ 82.716067][ T5061] exc_page_fault+0x5c/0xd0 [ 82.722213][ T5059] __x64_sys_ioctl+0x18f/0x210 [ 82.727048][ T5061] asm_exc_page_fault+0x26/0x30 [ 82.731641][ T5059] do_syscall_64+0x38/0xb0 [ 82.738372][ T5061] RIP: 0010:__put_user_4+0x11/0x20 [ 82.738404][ T5061] Code: 01 ca c3 66 0f 1f 44 00 00 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 0f 1f 80 00 00 00 00 f3 0f 1e fa 0f 01 cb [ 82.743498][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.747898][ T5061] RSP: 0018:ffffc90003c4fe40 EFLAGS: 00050206 [ 82.747922][ T5061] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000000 [ 82.753900][ T5059] RIP: 0033:0x7f37b666ede9 [ 82.758351][ T5061] RDX: ffff88801f578000 RSI: ffffffff8827f9a5 RDI: ffffffff8ae930e0 [ 82.762744][ T5059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.767046][ T5061] RBP: 1ffff92000789fcc R08: 0000000000000000 R09: fffffbfff1d9ca3a [ 82.767065][ T5061] R10: ffffffff8ece51d7 R11: 0000000000000000 R12: 0000000000000004 [ 82.767082][ T5061] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 82.771646][ T5059] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 [ 82.776223][ T5061] ? __sys_socketpair+0x115/0x5a0 [ 82.781073][ T5059] ORIG_RAX: 0000000000000010 [ 82.785654][ T5061] __sys_socketpair+0x121/0x5a0 [ 82.790760][ T5059] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 82.796549][ T5061] ? __ia32_sys_socket+0xb0/0xb0 [ 82.801481][ T5059] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 82.806226][ T5061] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.806255][ T5061] ? lockdep_hardirqs_on+0x7d/0x100 [ 82.810552][ T5059] RBP: 0000000000000001 R08: 0000000000000140 R09: 0000000000000140 [ 82.815476][ T5061] __x64_sys_socketpair+0x96/0x100 [ 82.815524][ T5061] do_syscall_64+0x38/0xb0 [ 82.820887][ T5059] R10: 0000000000000140 R11: 0000000000000246 R12: 000000000001318e [ 82.825647][ T5061] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.825687][ T5061] RIP: 0033:0x7f37b666ede9 [ 82.829735][ T5059] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 82.835006][ T5061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.835033][ T5061] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 82.840152][ T5059] [ 82.844699][ T5061] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 82.844718][ T5061] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 82.844735][ T5061] RBP: 0000000000000001 R08: 00007ffcf8c9e557 R09: 0000000000000140 [ 82.849471][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.853947][ T5061] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000000135df [ 82.853965][ T5061] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 82.854002][ T5061] [ 82.854010][ T5059] CPU: 0 PID: 5059 Comm: syz-executor124 Not tainted 6.6.0-rc3-syzkaller-00025-g50768a425b46 #0 [ 82.854051][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.162554][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 83.172614][ T5059] Call Trace: [ 83.175897][ T5059] [ 83.178833][ T5059] dump_stack_lvl+0xd9/0x1b0 [ 83.183441][ T5059] panic+0x6a6/0x750 [ 83.187351][ T5059] ? panic_smp_self_stop+0xa0/0xa0 [ 83.192496][ T5059] ? drm_wait_one_vblank+0x32d/0x540 [ 83.197805][ T5059] check_panic_on_warn+0xab/0xb0 [ 83.202760][ T5059] __warn+0xf2/0x380 [ 83.206668][ T5059] ? preempt_schedule_notrace+0x5f/0xe0 [ 83.212232][ T5059] ? drm_wait_one_vblank+0x32d/0x540 [ 83.217538][ T5059] report_bug+0x3bc/0x580 [ 83.221887][ T5059] handle_bug+0x3c/0x70 [ 83.226055][ T5059] exc_invalid_op+0x17/0x40 [ 83.230572][ T5059] asm_exc_invalid_op+0x1a/0x20 [ 83.235441][ T5059] RIP: 0010:drm_wait_one_vblank+0x32d/0x540 [ 83.241358][ T5059] Code: 4d 85 ed 0f 84 49 01 00 00 e8 1f 3f cf fc 4c 89 e7 e8 37 20 7a 00 89 e9 4c 89 ea 48 c7 c7 60 f5 fd 8a 48 89 c6 e8 63 67 95 fc <0f> 0b e9 16 fe ff ff e8 f7 3e cf fc 48 8d 7b 08 48 b8 00 00 00 00 [ 83.260980][ T5059] RSP: 0018:ffffc90003bffb38 EFLAGS: 00010286 [ 83.267059][ T5059] RAX: 0000000000000000 RBX: ffff88801c6f8000 RCX: 0000000000000000 [ 83.275039][ T5059] RDX: ffff888076718000 RSI: ffffffff814df0c6 RDI: 0000000000000001 [ 83.283015][ T5059] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 83.290992][ T5059] R10: 0000000000000001 R11: 205d393530355420 R12: ffff88801be2c010 [ 83.298973][ T5059] R13: ffff888017f45f00 R14: 1ffff9200077ff69 R15: 00000000000010ea [ 83.306968][ T5059] ? __warn_printk+0x1a6/0x350 [ 83.311757][ T5059] ? drm_wait_one_vblank+0x32d/0x540 [ 83.317063][ T5059] ? drm_crtc_vblank_put+0x80/0x80 [ 83.322202][ T5059] ? mark_held_locks+0x9f/0xe0 [ 83.326987][ T5059] ? cpuacct_percpu_seq_show+0x10/0x10 [ 83.332471][ T5059] ? lockdep_hardirqs_on+0x7d/0x100 [ 83.337691][ T5059] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 83.343509][ T5059] ? drm_vblank_get+0x14f/0x270 [ 83.348383][ T5059] drm_fb_helper_ioctl+0x152/0x190 [ 83.353519][ T5059] ? drm_fb_helper_unregister_info+0x60/0x60 [ 83.359522][ T5059] do_fb_ioctl+0x3d0/0x7d0 [ 83.363965][ T5059] ? fb_getput_cmap+0x2f0/0x2f0 [ 83.368840][ T5059] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 83.374678][ T5059] ? do_vfs_ioctl+0x379/0x1920 [ 83.379577][ T5059] ? handle_mm_fault+0x4ef/0xa00 [ 83.384536][ T5059] fb_ioctl+0xf1/0x160 [ 83.388630][ T5059] ? do_fb_ioctl+0x7d0/0x7d0 [ 83.393243][ T5059] __x64_sys_ioctl+0x18f/0x210 [ 83.398029][ T5059] do_syscall_64+0x38/0xb0 [ 83.402486][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.408402][ T5059] RIP: 0033:0x7f37b666ede9 [ 83.412826][ T5059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.432445][ T5059] RSP: 002b:00007ffcf8c9e7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.440887][ T5059] RAX: ffffffffffffffda RBX: 00007ffcf8c9e7d0 RCX: 00007f37b666ede9 [ 83.448867][ T5059] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 83.456844][ T5059] RBP: 0000000000000001 R08: 0000000000000140 R09: 0000000000000140 [ 83.464820][ T5059] R10: 0000000000000140 R11: 0000000000000246 R12: 000000000001318e [ 83.472798][ T5059] R13: 00007ffcf8c9e7cc R14: 00007ffcf8c9e7f0 R15: 00007ffcf8c9e7e0 [ 83.480797][ T5059] [ 83.484063][ T5059] Kernel Offset: disabled [ 83.488465][ T5059] Rebooting in 86400 seconds..