./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3188388694 <...> DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d forked to background, child pid 4707 [ 38.648436][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.662453][ T4708] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 81.917609][ T924] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. execve("./syz-executor3188388694", ["./syz-executor3188388694"], 0x7ffe6a777c20 /* 10 vars */) = 0 brk(NULL) = 0x555556930000 brk(0x555556930d00) = 0x555556930d00 arch_prctl(ARCH_SET_FS, 0x555556930380) = 0 set_tid_address(0x555556930650) = 5040 set_robust_list(0x555556930660, 24) = 0 rseq(0x555556930ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3188388694", 4096) = 28 getrandom("\x3d\x47\xe6\x4e\x75\x57\xac\x42", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556930d00 brk(0x555556951d00) = 0x555556951d00 brk(0x555556952000) = 0x555556952000 mprotect(0x7f227a178000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556930650) = 5041 ./strace-static-x86_64: Process 5041 attached [pid 5041] set_robust_list(0x555556930660, 24) = 0 [pid 5041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5041] setpgid(0, 0) = 0 [pid 5041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5041] write(3, "1000", 4) = 4 [pid 5041] close(3) = 0 [pid 5041] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5041] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5041] write(4, "30", 2) = 2 [ 82.927006][ T5041] FAULT_INJECTION: forcing a failure. [ 82.927006][ T5041] name failslab, interval 1, probability 0, space 0, times 1 [ 82.940160][ T5041] CPU: 0 PID: 5041 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 82.950064][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 82.960209][ T5041] Call Trace: [ 82.963482][ T5041] [ 82.966416][ T5041] dump_stack_lvl+0x125/0x1b0 [ 82.971096][ T5041] should_fail_ex+0x496/0x5b0 [ 82.975770][ T5041] should_failslab+0x9/0x20 [ 82.980294][ T5041] __kmem_cache_alloc_node+0x2fd/0x350 [ 82.985754][ T5041] ? kasprintf+0xc8/0x100 [ 82.990070][ T5041] ? pointer+0xbf0/0xbf0 [ 82.994299][ T5041] ? kasprintf+0xc8/0x100 [ 82.998878][ T5041] __kmalloc_node_track_caller+0x50/0x100 [ 83.004588][ T5041] kvasprintf+0xbd/0x150 [ 83.008827][ T5041] ? bust_spinlocks+0xe0/0xe0 [ 83.013509][ T5041] ? fill_ptr_key+0x30/0x30 [ 83.018001][ T5041] ? preempt_count_add+0x72/0x140 [ 83.023023][ T5041] kasprintf+0xc8/0x100 [ 83.027297][ T5041] ? kvasprintf_const+0x190/0x190 [ 83.032323][ T5041] ? free_zapped_rcu+0x290/0x290 [ 83.037262][ T5041] ? lockdep_init_map_type+0x16d/0x7c0 [ 83.042893][ T5041] alloc_workqueue+0x590/0x1490 [ 83.047746][ T5041] ? workqueue_sysfs_register+0x400/0x400 [ 83.053481][ T5041] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 83.058803][ T5041] kvm_mmu_init_vm+0x248/0x2e0 [ 83.063564][ T5041] kvm_arch_init_vm+0x39/0x720 [ 83.068326][ T5041] ? __kasan_kmalloc+0xa2/0xb0 [ 83.073105][ T5041] kvm_dev_ioctl+0xa31/0x1c20 [ 83.077777][ T5041] ? rcu_is_watching+0x12/0xb0 [ 83.082530][ T5041] ? kvm_vcpu_stats_release+0x80/0x80 [ 83.087893][ T5041] ? bpf_lsm_file_ioctl+0x9/0x10 [ 83.092829][ T5041] ? kvm_vcpu_stats_release+0x80/0x80 [ 83.098206][ T5041] __x64_sys_ioctl+0x18f/0x210 [ 83.103051][ T5041] do_syscall_64+0x38/0xb0 [ 83.107464][ T5041] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.113391][ T5041] RIP: 0033:0x7f227a104cf9 [ 83.117819][ T5041] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.137592][ T5041] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.145992][ T5041] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 83.153969][ T5041] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 83.162012][ T5041] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 83.169973][ T5041] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [pid 5041] ioctl(3, KVM_CREATE_VM, 0) = 5 [pid 5041] exit_group(0) = ? [ 83.177979][ T5041] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 83.185945][ T5041] [ 83.191687][ T5041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [pid 5041] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5041, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556930650) = 5044 ./strace-static-x86_64: Process 5044 attached [pid 5044] set_robust_list(0x555556930660, 24) = 0 [pid 5044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5044] setpgid(0, 0) = 0 [pid 5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5044] write(3, "1000", 4) = 4 [pid 5044] close(3) = 0 [pid 5044] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5044] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5044] write(4, "30", 2) = 2 [ 83.279255][ T5044] FAULT_INJECTION: forcing a failure. [ 83.279255][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 83.291899][ T5044] CPU: 1 PID: 5044 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 83.301782][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 83.311922][ T5044] Call Trace: [ 83.315195][ T5044] [ 83.318117][ T5044] dump_stack_lvl+0x125/0x1b0 [ 83.322892][ T5044] should_fail_ex+0x496/0x5b0 [ 83.327580][ T5044] should_failslab+0x9/0x20 [ 83.332076][ T5044] kmem_cache_alloc_node+0x389/0x3f0 [ 83.337365][ T5044] ? alloc_unbound_pwq+0x41e/0xd00 [ 83.342502][ T5044] alloc_unbound_pwq+0x41e/0xd00 [ 83.347904][ T5044] ? kasan_set_track+0x25/0x30 [ 83.352683][ T5044] apply_wqattrs_prepare+0x3be/0xa90 [ 83.358078][ T5044] apply_workqueue_attrs_locked+0xcb/0x150 [ 83.363940][ T5044] alloc_workqueue+0xdae/0x1490 [ 83.368813][ T5044] ? workqueue_sysfs_register+0x400/0x400 [ 83.374580][ T5044] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 83.379707][ T5044] kvm_mmu_init_vm+0x248/0x2e0 [ 83.384484][ T5044] kvm_arch_init_vm+0x39/0x720 [ 83.389249][ T5044] ? __kasan_kmalloc+0xa2/0xb0 [ 83.394020][ T5044] kvm_dev_ioctl+0xa31/0x1c20 [ 83.398699][ T5044] ? rcu_is_watching+0x12/0xb0 [ 83.403462][ T5044] ? kvm_vcpu_stats_release+0x80/0x80 [ 83.408938][ T5044] ? bpf_lsm_file_ioctl+0x9/0x10 [ 83.413929][ T5044] ? kvm_vcpu_stats_release+0x80/0x80 [ 83.419303][ T5044] __x64_sys_ioctl+0x18f/0x210 [ 83.424064][ T5044] do_syscall_64+0x38/0xb0 [ 83.428500][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.434421][ T5044] RIP: 0033:0x7f227a104cf9 [ 83.438832][ T5044] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.458443][ T5044] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.467035][ T5044] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [pid 5044] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5044] exit_group(0) = ? [pid 5044] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556930650) = 5045 ./strace-static-x86_64: Process 5045 attached [pid 5045] set_robust_list(0x555556930660, 24) = 0 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5045] setpgid(0, 0) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "1000", 4) = 4 [pid 5045] close(3) = 0 [pid 5045] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5045] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5045] write(4, "30", 2) = 2 [ 83.475094][ T5044] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 83.483061][ T5044] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 83.491040][ T5044] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 83.499025][ T5044] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 83.507010][ T5044] [ 83.527677][ T5045] FAULT_INJECTION: forcing a failure. [ 83.527677][ T5045] name failslab, interval 1, probability 0, space 0, times 0 [ 83.540345][ T5045] CPU: 1 PID: 5045 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 83.550237][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 83.560281][ T5045] Call Trace: [ 83.563547][ T5045] [ 83.566464][ T5045] dump_stack_lvl+0x125/0x1b0 [ 83.571148][ T5045] should_fail_ex+0x496/0x5b0 [ 83.575847][ T5045] should_failslab+0x9/0x20 [ 83.580338][ T5045] kmem_cache_alloc_node+0x389/0x3f0 [ 83.585630][ T5045] ? alloc_unbound_pwq+0x41e/0xd00 [ 83.590734][ T5045] alloc_unbound_pwq+0x41e/0xd00 [ 83.595687][ T5045] apply_wqattrs_prepare+0x696/0xa90 [ 83.600991][ T5045] apply_workqueue_attrs_locked+0xcb/0x150 [ 83.606803][ T5045] alloc_workqueue+0xdae/0x1490 [ 83.611656][ T5045] ? workqueue_sysfs_register+0x400/0x400 [ 83.617391][ T5045] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 83.622681][ T5045] kvm_mmu_init_vm+0x248/0x2e0 [ 83.627451][ T5045] kvm_arch_init_vm+0x39/0x720 [ 83.632217][ T5045] ? __kasan_kmalloc+0xa2/0xb0 [ 83.637009][ T5045] kvm_dev_ioctl+0xa31/0x1c20 [ 83.641690][ T5045] ? rcu_is_watching+0x12/0xb0 [ 83.646462][ T5045] ? kvm_vcpu_stats_release+0x80/0x80 [ 83.651929][ T5045] ? bpf_lsm_file_ioctl+0x9/0x10 [ 83.656952][ T5045] ? kvm_vcpu_stats_release+0x80/0x80 [ 83.662332][ T5045] __x64_sys_ioctl+0x18f/0x210 [ 83.667107][ T5045] do_syscall_64+0x38/0xb0 [ 83.671530][ T5045] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.677437][ T5045] RIP: 0033:0x7f227a104cf9 [ 83.681932][ T5045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.701537][ T5045] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.710031][ T5045] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 83.717998][ T5045] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [pid 5045] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5045] exit_group(0) = ? [pid 5045] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5046 attached , child_tidptr=0x555556930650) = 5046 [pid 5046] set_robust_list(0x555556930660, 24) = 0 [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5046] setpgid(0, 0) = 0 [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1000", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5046] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5046] write(4, "30", 2) = 2 [ 83.725977][ T5045] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 83.733959][ T5045] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 83.741943][ T5045] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 83.749924][ T5045] [ 83.769682][ T5046] FAULT_INJECTION: forcing a failure. [ 83.769682][ T5046] name failslab, interval 1, probability 0, space 0, times 0 [ 83.782328][ T5046] CPU: 1 PID: 5046 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 83.792216][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 83.802275][ T5046] Call Trace: [ 83.805547][ T5046] [ 83.808477][ T5046] dump_stack_lvl+0x125/0x1b0 [ 83.813155][ T5046] should_fail_ex+0x496/0x5b0 [ 83.817832][ T5046] should_failslab+0x9/0x20 [ 83.822330][ T5046] kmem_cache_alloc_node+0x389/0x3f0 [ 83.827642][ T5046] ? alloc_unbound_pwq+0x41e/0xd00 [ 83.832747][ T5046] alloc_unbound_pwq+0x41e/0xd00 [ 83.837685][ T5046] apply_wqattrs_prepare+0x696/0xa90 [ 83.842969][ T5046] apply_workqueue_attrs_locked+0xcb/0x150 [ 83.848771][ T5046] alloc_workqueue+0xdae/0x1490 [ 83.853792][ T5046] ? workqueue_sysfs_register+0x400/0x400 [ 83.859516][ T5046] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 83.864727][ T5046] kvm_mmu_init_vm+0x248/0x2e0 [ 83.869600][ T5046] kvm_arch_init_vm+0x39/0x720 [ 83.874378][ T5046] ? __kasan_kmalloc+0xa2/0xb0 [ 83.879138][ T5046] kvm_dev_ioctl+0xa31/0x1c20 [ 83.883808][ T5046] ? rcu_is_watching+0x12/0xb0 [ 83.888596][ T5046] ? kvm_vcpu_stats_release+0x80/0x80 [ 83.894071][ T5046] ? bpf_lsm_file_ioctl+0x9/0x10 [ 83.899034][ T5046] ? kvm_vcpu_stats_release+0x80/0x80 [ 83.904408][ T5046] __x64_sys_ioctl+0x18f/0x210 [ 83.909187][ T5046] do_syscall_64+0x38/0xb0 [ 83.913605][ T5046] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.919495][ T5046] RIP: 0033:0x7f227a104cf9 [pid 5046] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5046] exit_group(0) = ? [pid 5046] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5047 attached [pid 5047] set_robust_list(0x555556930660, 24) = 0 [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5047] setpgid(0, 0) = 0 [pid 5040] <... clone resumed>, child_tidptr=0x555556930650) = 5047 [pid 5047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1000", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5047] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5047] write(4, "30", 2) = 2 [pid 5047] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5047] exit_group(0) = ? [pid 5047] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5047, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5048 attached , child_tidptr=0x555556930650) = 5048 [pid 5048] set_robust_list(0x555556930660, 24) = 0 [pid 5048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5048] setpgid(0, 0) = 0 [pid 5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5048] write(3, "1000", 4) = 4 [pid 5048] close(3) = 0 [pid 5048] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5048] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5048] write(4, "30", 2) = 2 [pid 5048] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5048] exit_group(0) = ? [pid 5048] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5048, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5049 attached , child_tidptr=0x555556930650) = 5049 [pid 5049] set_robust_list(0x555556930660, 24) = 0 [pid 5049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5049] setpgid(0, 0) = 0 [pid 5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5049] write(3, "1000", 4) = 4 [pid 5049] close(3) = 0 [pid 5049] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5049] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5049] write(4, "30", 2) = 2 [pid 5049] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5049] exit_group(0) = ? [pid 5049] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5049, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556930650) = 5050 ./strace-static-x86_64: Process 5050 attached [pid 5050] set_robust_list(0x555556930660, 24) = 0 [pid 5050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5050] setpgid(0, 0) = 0 [pid 5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5050] write(3, "1000", 4) = 4 [pid 5050] close(3) = 0 [pid 5050] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5050] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5050] write(4, "30", 2) = 2 [pid 5050] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5050] exit_group(0) = ? [pid 5050] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5051 attached , child_tidptr=0x555556930650) = 5051 [pid 5051] set_robust_list(0x555556930660, 24) = 0 [pid 5051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5051] setpgid(0, 0) = 0 [pid 5051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5051] write(3, "1000", 4) = 4 [pid 5051] close(3) = 0 [pid 5051] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5051] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5051] write(4, "30", 2) = 2 [pid 5051] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5051] exit_group(0) = ? [pid 5051] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5051, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5052 attached , child_tidptr=0x555556930650) = 5052 [pid 5052] set_robust_list(0x555556930660, 24) = 0 [pid 5052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5052] setpgid(0, 0) = 0 [pid 5052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5052] write(3, "1000", 4) = 4 [pid 5052] close(3) = 0 [pid 5052] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5052] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5052] write(4, "30", 2) = 2 [pid 5052] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5052] exit_group(0) = ? [pid 5052] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5052, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5053 attached [pid 5053] set_robust_list(0x555556930660, 24 [pid 5040] <... clone resumed>, child_tidptr=0x555556930650) = 5053 [pid 5053] <... set_robust_list resumed>) = 0 [pid 5053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5053] setpgid(0, 0) = 0 [pid 5053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5053] write(3, "1000", 4) = 4 [pid 5053] close(3) = 0 [pid 5053] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5053] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5053] write(4, "30", 2) = 2 [pid 5053] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5053] exit_group(0) = ? [pid 5053] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5053, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556930650) = 5054 ./strace-static-x86_64: Process 5054 attached [pid 5054] set_robust_list(0x555556930660, 24) = 0 [pid 5054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5054] setpgid(0, 0) = 0 [pid 5054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "1000", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] openat(AT_FDCWD, "/dev/kvm", O_RDONLY) = 3 [pid 5054] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5054] write(4, "30", 2) = 2 [pid 5054] ioctl(3, KVM_CREATE_VM, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5054] exit_group(0) = ? [ 83.923905][ T5046] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.943599][ T5046] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.952005][ T5046] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 83.959969][ T5046] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 83.967928][ T5046] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 83.975900][ T5046] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 83.983902][ T5046] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 83.991879][ T5046] [ 84.007984][ T5047] FAULT_INJECTION: forcing a failure. [ 84.007984][ T5047] name failslab, interval 1, probability 0, space 0, times 0 [ 84.020786][ T5047] CPU: 0 PID: 5047 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [pid 5054] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5054, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 84.030692][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 84.040738][ T5047] Call Trace: [ 84.044005][ T5047] [ 84.046921][ T5047] dump_stack_lvl+0x125/0x1b0 [ 84.051604][ T5047] should_fail_ex+0x496/0x5b0 [ 84.056282][ T5047] should_failslab+0x9/0x20 [ 84.060872][ T5047] kmem_cache_alloc_node+0x389/0x3f0 [ 84.066177][ T5047] ? alloc_unbound_pwq+0x41e/0xd00 [ 84.071279][ T5047] alloc_unbound_pwq+0x41e/0xd00 [ 84.076212][ T5047] apply_wqattrs_prepare+0x696/0xa90 [ 84.081496][ T5047] apply_workqueue_attrs_locked+0xcb/0x150 [ 84.087310][ T5047] alloc_workqueue+0xdae/0x1490 [ 84.092247][ T5047] ? workqueue_sysfs_register+0x400/0x400 [ 84.097969][ T5047] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 84.103095][ T5047] kvm_mmu_init_vm+0x248/0x2e0 [ 84.107902][ T5047] kvm_arch_init_vm+0x39/0x720 [ 84.112690][ T5047] ? __kasan_kmalloc+0xa2/0xb0 [ 84.117473][ T5047] kvm_dev_ioctl+0xa31/0x1c20 [ 84.122150][ T5047] ? rcu_is_watching+0x12/0xb0 [ 84.126907][ T5047] ? kvm_vcpu_stats_release+0x80/0x80 [ 84.132283][ T5047] ? bpf_lsm_file_ioctl+0x9/0x10 [ 84.137237][ T5047] ? kvm_vcpu_stats_release+0x80/0x80 [ 84.142891][ T5047] __x64_sys_ioctl+0x18f/0x210 [ 84.147668][ T5047] do_syscall_64+0x38/0xb0 [ 84.152095][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.158677][ T5047] RIP: 0033:0x7f227a104cf9 [ 84.163087][ T5047] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.182706][ T5047] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.191133][ T5047] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 84.199109][ T5047] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 84.207086][ T5047] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 84.215154][ T5047] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 84.223128][ T5047] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 84.231188][ T5047] [ 84.248247][ T5048] FAULT_INJECTION: forcing a failure. [ 84.248247][ T5048] name failslab, interval 1, probability 0, space 0, times 0 [ 84.261122][ T5048] CPU: 0 PID: 5048 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 84.271017][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 84.281084][ T5048] Call Trace: [ 84.284353][ T5048] [ 84.287266][ T5048] dump_stack_lvl+0x125/0x1b0 [ 84.292497][ T5048] should_fail_ex+0x496/0x5b0 [ 84.297165][ T5048] should_failslab+0x9/0x20 [ 84.301649][ T5048] kmem_cache_alloc_node+0x389/0x3f0 [ 84.306931][ T5048] ? alloc_unbound_pwq+0x41e/0xd00 [ 84.312128][ T5048] alloc_unbound_pwq+0x41e/0xd00 [ 84.317079][ T5048] apply_wqattrs_prepare+0x696/0xa90 [ 84.322384][ T5048] apply_workqueue_attrs_locked+0xcb/0x150 [ 84.328186][ T5048] alloc_workqueue+0xdae/0x1490 [ 84.333031][ T5048] ? workqueue_sysfs_register+0x400/0x400 [ 84.338763][ T5048] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 84.343872][ T5048] kvm_mmu_init_vm+0x248/0x2e0 [ 84.348645][ T5048] kvm_arch_init_vm+0x39/0x720 [ 84.353514][ T5048] ? __kasan_kmalloc+0xa2/0xb0 [ 84.358284][ T5048] kvm_dev_ioctl+0xa31/0x1c20 [ 84.362967][ T5048] ? rcu_is_watching+0x12/0xb0 [ 84.367959][ T5048] ? kvm_vcpu_stats_release+0x80/0x80 [ 84.373344][ T5048] ? bpf_lsm_file_ioctl+0x9/0x10 [ 84.378317][ T5048] ? kvm_vcpu_stats_release+0x80/0x80 [ 84.383716][ T5048] __x64_sys_ioctl+0x18f/0x210 [ 84.388480][ T5048] do_syscall_64+0x38/0xb0 [ 84.392902][ T5048] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.398801][ T5048] RIP: 0033:0x7f227a104cf9 [ 84.403206][ T5048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.422813][ T5048] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.431221][ T5048] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 84.439185][ T5048] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 84.447151][ T5048] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 84.455127][ T5048] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 84.463084][ T5048] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 84.471136][ T5048] [ 84.489984][ T5049] FAULT_INJECTION: forcing a failure. [ 84.489984][ T5049] name failslab, interval 1, probability 0, space 0, times 0 [ 84.502629][ T5049] CPU: 1 PID: 5049 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 84.512515][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 84.522654][ T5049] Call Trace: [ 84.526278][ T5049] [ 84.529208][ T5049] dump_stack_lvl+0x125/0x1b0 [ 84.533888][ T5049] should_fail_ex+0x496/0x5b0 [ 84.538567][ T5049] should_failslab+0x9/0x20 [ 84.543071][ T5049] kmem_cache_alloc_node+0x389/0x3f0 [ 84.548374][ T5049] ? alloc_unbound_pwq+0x41e/0xd00 [ 84.553487][ T5049] alloc_unbound_pwq+0x41e/0xd00 [ 84.558469][ T5049] apply_wqattrs_prepare+0x696/0xa90 [ 84.563751][ T5049] apply_workqueue_attrs_locked+0xcb/0x150 [ 84.569557][ T5049] alloc_workqueue+0xdae/0x1490 [ 84.574442][ T5049] ? workqueue_sysfs_register+0x400/0x400 [ 84.580261][ T5049] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 84.585391][ T5049] kvm_mmu_init_vm+0x248/0x2e0 [ 84.590175][ T5049] kvm_arch_init_vm+0x39/0x720 [ 84.594972][ T5049] ? __kasan_kmalloc+0xa2/0xb0 [ 84.599733][ T5049] kvm_dev_ioctl+0xa31/0x1c20 [ 84.604405][ T5049] ? rcu_is_watching+0x12/0xb0 [ 84.609160][ T5049] ? kvm_vcpu_stats_release+0x80/0x80 [ 84.614529][ T5049] ? bpf_lsm_file_ioctl+0x9/0x10 [ 84.619471][ T5049] ? kvm_vcpu_stats_release+0x80/0x80 [ 84.624843][ T5049] __x64_sys_ioctl+0x18f/0x210 [ 84.629663][ T5049] do_syscall_64+0x38/0xb0 [ 84.634091][ T5049] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.639992][ T5049] RIP: 0033:0x7f227a104cf9 [ 84.644401][ T5049] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.664011][ T5049] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.672434][ T5049] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 84.680412][ T5049] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 84.688374][ T5049] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 84.696331][ T5049] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 84.704386][ T5049] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 84.712376][ T5049] [ 84.729372][ T5050] FAULT_INJECTION: forcing a failure. [ 84.729372][ T5050] name failslab, interval 1, probability 0, space 0, times 0 [ 84.742063][ T5050] CPU: 1 PID: 5050 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 84.751974][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 84.762047][ T5050] Call Trace: [ 84.765343][ T5050] [ 84.768278][ T5050] dump_stack_lvl+0x125/0x1b0 [ 84.772978][ T5050] should_fail_ex+0x496/0x5b0 [ 84.777651][ T5050] should_failslab+0x9/0x20 [ 84.782146][ T5050] kmem_cache_alloc_node+0x389/0x3f0 [ 84.787434][ T5050] ? alloc_unbound_pwq+0x41e/0xd00 [ 84.792544][ T5050] alloc_unbound_pwq+0x41e/0xd00 [ 84.797481][ T5050] apply_wqattrs_prepare+0x696/0xa90 [ 84.802766][ T5050] apply_workqueue_attrs_locked+0xcb/0x150 [ 84.808573][ T5050] alloc_workqueue+0xdae/0x1490 [ 84.813444][ T5050] ? workqueue_sysfs_register+0x400/0x400 [ 84.819184][ T5050] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 84.824284][ T5050] kvm_mmu_init_vm+0x248/0x2e0 [ 84.829044][ T5050] kvm_arch_init_vm+0x39/0x720 [ 84.833851][ T5050] ? __kasan_kmalloc+0xa2/0xb0 [ 84.838610][ T5050] kvm_dev_ioctl+0xa31/0x1c20 [ 84.843289][ T5050] ? rcu_is_watching+0x12/0xb0 [ 84.848077][ T5050] ? kvm_vcpu_stats_release+0x80/0x80 [ 84.853459][ T5050] ? bpf_lsm_file_ioctl+0x9/0x10 [ 84.858407][ T5050] ? kvm_vcpu_stats_release+0x80/0x80 [ 84.863808][ T5050] __x64_sys_ioctl+0x18f/0x210 [ 84.868559][ T5050] do_syscall_64+0x38/0xb0 [ 84.873146][ T5050] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.879036][ T5050] RIP: 0033:0x7f227a104cf9 [ 84.883528][ T5050] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.903219][ T5050] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.911638][ T5050] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 84.919604][ T5050] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 84.927578][ T5050] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 84.935540][ T5050] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 84.943497][ T5050] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 84.951465][ T5050] [ 84.970518][ T5051] FAULT_INJECTION: forcing a failure. [ 84.970518][ T5051] name failslab, interval 1, probability 0, space 0, times 0 [ 84.983209][ T5051] CPU: 1 PID: 5051 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 84.993115][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 85.003186][ T5051] Call Trace: [ 85.006454][ T5051] [ 85.009374][ T5051] dump_stack_lvl+0x125/0x1b0 [ 85.014061][ T5051] should_fail_ex+0x496/0x5b0 [ 85.018770][ T5051] should_failslab+0x9/0x20 [ 85.023273][ T5051] kmem_cache_alloc_node+0x389/0x3f0 [ 85.028566][ T5051] ? alloc_unbound_pwq+0x41e/0xd00 [ 85.033766][ T5051] alloc_unbound_pwq+0x41e/0xd00 [ 85.038703][ T5051] apply_wqattrs_prepare+0x696/0xa90 [ 85.043989][ T5051] apply_workqueue_attrs_locked+0xcb/0x150 [ 85.049877][ T5051] alloc_workqueue+0xdae/0x1490 [ 85.054725][ T5051] ? workqueue_sysfs_register+0x400/0x400 [ 85.060460][ T5051] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 85.065587][ T5051] kvm_mmu_init_vm+0x248/0x2e0 [ 85.070356][ T5051] kvm_arch_init_vm+0x39/0x720 [ 85.075119][ T5051] ? __kasan_kmalloc+0xa2/0xb0 [ 85.079901][ T5051] kvm_dev_ioctl+0xa31/0x1c20 [ 85.084575][ T5051] ? rcu_is_watching+0x12/0xb0 [ 85.089329][ T5051] ? kvm_vcpu_stats_release+0x80/0x80 [ 85.094692][ T5051] ? bpf_lsm_file_ioctl+0x9/0x10 [ 85.099623][ T5051] ? kvm_vcpu_stats_release+0x80/0x80 [ 85.105077][ T5051] __x64_sys_ioctl+0x18f/0x210 [ 85.109855][ T5051] do_syscall_64+0x38/0xb0 [ 85.114303][ T5051] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.120194][ T5051] RIP: 0033:0x7f227a104cf9 [ 85.124597][ T5051] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.144203][ T5051] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.152621][ T5051] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 85.160601][ T5051] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 85.168559][ T5051] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 85.176517][ T5051] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 85.184487][ T5051] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 85.192476][ T5051] [ 85.211629][ T5052] FAULT_INJECTION: forcing a failure. [ 85.211629][ T5052] name failslab, interval 1, probability 0, space 0, times 0 [ 85.224332][ T5052] CPU: 1 PID: 5052 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 85.234216][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 85.244259][ T5052] Call Trace: [ 85.247543][ T5052] [ 85.250465][ T5052] dump_stack_lvl+0x125/0x1b0 [ 85.255144][ T5052] should_fail_ex+0x496/0x5b0 [ 85.259846][ T5052] should_failslab+0x9/0x20 [ 85.264359][ T5052] kmem_cache_alloc_node+0x389/0x3f0 [ 85.269652][ T5052] ? alloc_unbound_pwq+0x41e/0xd00 [ 85.274775][ T5052] alloc_unbound_pwq+0x41e/0xd00 [ 85.279774][ T5052] apply_wqattrs_prepare+0x696/0xa90 [ 85.285086][ T5052] apply_workqueue_attrs_locked+0xcb/0x150 [ 85.290898][ T5052] alloc_workqueue+0xdae/0x1490 [ 85.295803][ T5052] ? workqueue_sysfs_register+0x400/0x400 [ 85.301637][ T5052] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 85.307006][ T5052] kvm_mmu_init_vm+0x248/0x2e0 [ 85.312244][ T5052] kvm_arch_init_vm+0x39/0x720 [ 85.317459][ T5052] ? __kasan_kmalloc+0xa2/0xb0 [ 85.322240][ T5052] kvm_dev_ioctl+0xa31/0x1c20 [ 85.327041][ T5052] ? rcu_is_watching+0x12/0xb0 [ 85.331834][ T5052] ? kvm_vcpu_stats_release+0x80/0x80 [ 85.337399][ T5052] ? bpf_lsm_file_ioctl+0x9/0x10 [ 85.342506][ T5052] ? kvm_vcpu_stats_release+0x80/0x80 [ 85.348170][ T5052] __x64_sys_ioctl+0x18f/0x210 [ 85.353040][ T5052] do_syscall_64+0x38/0xb0 [ 85.357584][ T5052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.363489][ T5052] RIP: 0033:0x7f227a104cf9 [ 85.367928][ T5052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.387660][ T5052] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.396080][ T5052] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 85.404048][ T5052] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 85.412025][ T5052] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 85.420539][ T5052] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 85.428559][ T5052] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 85.436551][ T5052] [ 85.454006][ T5053] FAULT_INJECTION: forcing a failure. [ 85.454006][ T5053] name failslab, interval 1, probability 0, space 0, times 0 [ 85.466699][ T5053] CPU: 0 PID: 5053 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 85.476595][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 85.486677][ T5053] Call Trace: [ 85.489954][ T5053] [ 85.492874][ T5053] dump_stack_lvl+0x125/0x1b0 [ 85.497592][ T5053] should_fail_ex+0x496/0x5b0 [ 85.502280][ T5053] should_failslab+0x9/0x20 [ 85.506864][ T5053] kmem_cache_alloc_node+0x389/0x3f0 [ 85.512241][ T5053] ? alloc_unbound_pwq+0x41e/0xd00 [ 85.517366][ T5053] alloc_unbound_pwq+0x41e/0xd00 [ 85.522354][ T5053] apply_wqattrs_prepare+0x696/0xa90 [ 85.527765][ T5053] apply_workqueue_attrs_locked+0xcb/0x150 [ 85.533578][ T5053] alloc_workqueue+0xdae/0x1490 [ 85.538550][ T5053] ? workqueue_sysfs_register+0x400/0x400 [ 85.544286][ T5053] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 85.549394][ T5053] kvm_mmu_init_vm+0x248/0x2e0 [ 85.554171][ T5053] kvm_arch_init_vm+0x39/0x720 [ 85.558962][ T5053] ? __kasan_kmalloc+0xa2/0xb0 [ 85.563748][ T5053] kvm_dev_ioctl+0xa31/0x1c20 [ 85.568435][ T5053] ? rcu_is_watching+0x12/0xb0 [ 85.573199][ T5053] ? kvm_vcpu_stats_release+0x80/0x80 [ 85.578576][ T5053] ? bpf_lsm_file_ioctl+0x9/0x10 [ 85.583518][ T5053] ? kvm_vcpu_stats_release+0x80/0x80 [ 85.588892][ T5053] __x64_sys_ioctl+0x18f/0x210 [ 85.593657][ T5053] do_syscall_64+0x38/0xb0 [ 85.598077][ T5053] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.603978][ T5053] RIP: 0033:0x7f227a104cf9 [ 85.608388][ T5053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.628085][ T5053] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.636495][ T5053] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 85.644459][ T5053] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 85.652424][ T5053] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 85.660479][ T5053] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 85.668442][ T5053] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 85.676412][ T5053] [ 85.694562][ T5054] FAULT_INJECTION: forcing a failure. [ 85.694562][ T5054] name failslab, interval 1, probability 0, space 0, times 0 [ 85.707423][ T5054] CPU: 0 PID: 5054 Comm: syz-executor318 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 85.717400][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 85.727442][ T5054] Call Trace: [ 85.730707][ T5054] [ 85.733622][ T5054] dump_stack_lvl+0x125/0x1b0 [ 85.738336][ T5054] should_fail_ex+0x496/0x5b0 [ 85.743067][ T5054] should_failslab+0x9/0x20 [ 85.747560][ T5054] kmem_cache_alloc_node+0x389/0x3f0 [ 85.752922][ T5054] ? alloc_unbound_pwq+0x41e/0xd00 [ 85.758022][ T5054] alloc_unbound_pwq+0x41e/0xd00 [ 85.762947][ T5054] apply_wqattrs_prepare+0x696/0xa90 [ 85.768312][ T5054] apply_workqueue_attrs_locked+0xcb/0x150 [ 85.774109][ T5054] alloc_workqueue+0xdae/0x1490 [ 85.778955][ T5054] ? workqueue_sysfs_register+0x400/0x400 [ 85.784777][ T5054] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 85.789904][ T5054] kvm_mmu_init_vm+0x248/0x2e0 [ 85.794676][ T5054] kvm_arch_init_vm+0x39/0x720 [ 85.799441][ T5054] ? __kasan_kmalloc+0xa2/0xb0 [ 85.804307][ T5054] kvm_dev_ioctl+0xa31/0x1c20 [ 85.808991][ T5054] ? rcu_is_watching+0x12/0xb0 [ 85.813747][ T5054] ? kvm_vcpu_stats_release+0x80/0x80 [ 85.819816][ T5054] ? bpf_lsm_file_ioctl+0x9/0x10 [ 85.824781][ T5054] ? kvm_vcpu_stats_release+0x80/0x80 [ 85.830476][ T5054] __x64_sys_ioctl+0x18f/0x210 [ 85.835262][ T5054] do_syscall_64+0x38/0xb0 [ 85.839770][ T5054] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.845770][ T5054] RIP: 0033:0x7f227a104cf9 [ 85.850266][ T5054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 85.869882][ T5054] RSP: 002b:00007ffed9384878 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.878381][ T5054] RAX: ffffffffffffffda RBX: 00007ffed9384890 RCX: 00007f227a104cf9 [ 85.886347][ T5054] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 85.894313][ T5054] RBP: 0000000000000002 R08: 00007ffed9384616 R09: 00000000000000a0 [ 85.902276][ T5054] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffed938488c [ 85.910256][ T5054] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 85.918245][ T5054] [ 85.925013][ T3] ================================================================== [ 85.933201][ T3] BUG: KASAN: slab-use-after-free in pwq_release_workfn+0x339/0x380 [ 85.941313][ T3] Read of size 4 at addr ffff888027b831c0 by task pool_workqueue_/3 [ 85.949726][ T3] [ 85.952050][ T3] CPU: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 85.961675][ T3] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 85.971740][ T3] Call Trace: [ 85.975102][ T3] [ 85.978116][ T3] dump_stack_lvl+0xd9/0x1b0 [ 85.982720][ T3] print_report+0xc4/0x620 [ 85.987258][ T3] ? __virt_addr_valid+0x5e/0x2d0 [ 85.992283][ T3] ? __phys_addr+0xc6/0x140 [ 85.996813][ T3] kasan_report+0xda/0x110 [ 86.001239][ T3] ? pwq_release_workfn+0x339/0x380 [ 86.006539][ T3] ? pwq_release_workfn+0x339/0x380 [ 86.011754][ T3] pwq_release_workfn+0x339/0x380 [ 86.016801][ T3] kthread_worker_fn+0x2fc/0xa80 [ 86.021765][ T3] ? put_unbound_pool+0x7c0/0x7c0 [ 86.026807][ T3] ? kthread_freezable_should_stop+0x190/0x190 [ 86.033026][ T3] kthread+0x33a/0x430 [ 86.037095][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 86.042727][ T3] ret_from_fork+0x45/0x80 [ 86.047267][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 86.052924][ T3] ret_from_fork_asm+0x11/0x20 [ 86.057722][ T3] [ 86.060736][ T3] [ 86.063309][ T3] Allocated by task 5054: [ 86.067638][ T3] kasan_save_stack+0x33/0x50 [ 86.072325][ T3] kasan_set_track+0x25/0x30 [ 86.076918][ T3] __kasan_kmalloc+0xa2/0xb0 [ 86.081507][ T3] alloc_workqueue+0x16f/0x1490 [ 86.086363][ T3] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 86.091501][ T3] kvm_mmu_init_vm+0x248/0x2e0 [ 86.096381][ T3] kvm_arch_init_vm+0x39/0x720 [ 86.101170][ T3] kvm_dev_ioctl+0xa31/0x1c20 [ 86.105855][ T3] __x64_sys_ioctl+0x18f/0x210 [ 86.110616][ T3] do_syscall_64+0x38/0xb0 [ 86.115036][ T3] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.120936][ T3] [ 86.123250][ T3] Freed by task 5054: [ 86.127214][ T3] kasan_save_stack+0x33/0x50 [ 86.131896][ T3] kasan_set_track+0x25/0x30 [ 86.136574][ T3] kasan_save_free_info+0x2b/0x40 [ 86.141610][ T3] ____kasan_slab_free+0x15b/0x1b0 [ 86.146735][ T3] slab_free_freelist_hook+0x114/0x1e0 [ 86.152300][ T3] __kmem_cache_free+0xb8/0x2f0 [ 86.157157][ T3] alloc_workqueue+0xe76/0x1490 [ 86.162129][ T3] kvm_mmu_init_tdp_mmu+0x23/0x100 [ 86.167255][ T3] kvm_mmu_init_vm+0x248/0x2e0 [ 86.172034][ T3] kvm_arch_init_vm+0x39/0x720 [ 86.176798][ T3] kvm_dev_ioctl+0xa31/0x1c20 [ 86.181492][ T3] __x64_sys_ioctl+0x18f/0x210 [ 86.186263][ T3] do_syscall_64+0x38/0xb0 [ 86.190723][ T3] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.196824][ T3] [ 86.199144][ T3] The buggy address belongs to the object at ffff888027b83000 [ 86.199144][ T3] which belongs to the cache kmalloc-512 of size 512 [ 86.213193][ T3] The buggy address is located 448 bytes inside of [ 86.213193][ T3] freed 512-byte region [ffff888027b83000, ffff888027b83200) [ 86.226995][ T3] [ 86.229317][ T3] The buggy address belongs to the physical page: [ 86.235718][ T3] page:ffffea00009ee000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27b80 [ 86.246647][ T3] head:ffffea00009ee000 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.255573][ T3] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 86.263557][ T3] page_type: 0xffffffff() [ 86.267887][ T3] raw: 00fff00000000840 ffff888012c41c80 ffffea000084fd00 dead000000000002 [ 86.276480][ T3] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 86.285239][ T3] page dumped because: kasan: bad access detected [ 86.291643][ T3] page_owner tracks the page as allocated [ 86.297353][ T3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3260, tgid 3260 (kworker/u4:1), ts 17219877730, free_ts 0 [ 86.317857][ T3] post_alloc_hook+0x2cf/0x340 [ 86.322641][ T3] get_page_from_freelist+0xf17/0x2e50 [ 86.328091][ T3] __alloc_pages+0x1d0/0x4a0 [ 86.333541][ T3] alloc_pages+0x1a9/0x270 [ 86.337960][ T3] allocate_slab+0x251/0x380 [ 86.342551][ T3] ___slab_alloc+0x8be/0x1570 [ 86.347248][ T3] __slab_alloc.constprop.0+0x56/0xa0 [ 86.352655][ T3] __kmem_cache_alloc_node+0x137/0x350 [ 86.358131][ T3] kmalloc_trace+0x25/0xe0 [ 86.362672][ T3] alloc_bprm+0x51/0xaf0 [ 86.366920][ T3] kernel_execve+0xaf/0x4e0 [ 86.371477][ T3] call_usermodehelper_exec_async+0x256/0x4c0 [ 86.377585][ T3] ret_from_fork+0x45/0x80 [ 86.382011][ T3] ret_from_fork_asm+0x11/0x20 [ 86.386791][ T3] page_owner free stack trace missing [ 86.392150][ T3] [ 86.394465][ T3] Memory state around the buggy address: [ 86.400085][ T3] ffff888027b83080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.408225][ T3] ffff888027b83100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.416281][ T3] >ffff888027b83180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.424333][ T3] ^ [ 86.430472][ T3] ffff888027b83200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.438528][ T3] ffff888027b83280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.446579][ T3] ================================================================== [ 86.460495][ T3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.467720][ T3] CPU: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.5.0-rc7-next-20230825-syzkaller #0 [ 86.477362][ T3] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 86.487410][ T3] Call Trace: [ 86.490675][ T3] [ 86.493592][ T3] dump_stack_lvl+0xd9/0x1b0 [ 86.498179][ T3] panic+0x6a6/0x750 [ 86.502061][ T3] ? panic_smp_self_stop+0xa0/0xa0 [ 86.507248][ T3] ? preempt_schedule_thunk+0x1a/0x30 [ 86.512613][ T3] ? preempt_schedule_common+0x45/0xc0 [ 86.518063][ T3] check_panic_on_warn+0xab/0xb0 [ 86.523020][ T3] end_report+0x108/0x150 [ 86.527334][ T3] kasan_report+0xea/0x110 [ 86.531733][ T3] ? pwq_release_workfn+0x339/0x380 [ 86.536917][ T3] ? pwq_release_workfn+0x339/0x380 [ 86.542103][ T3] pwq_release_workfn+0x339/0x380 [ 86.547206][ T3] kthread_worker_fn+0x2fc/0xa80 [ 86.552212][ T3] ? put_unbound_pool+0x7c0/0x7c0 [ 86.557234][ T3] ? kthread_freezable_should_stop+0x190/0x190 [ 86.563370][ T3] kthread+0x33a/0x430 [ 86.567428][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 86.573056][ T3] ret_from_fork+0x45/0x80 [ 86.577460][ T3] ? kthread_complete_and_exit+0x40/0x40 [ 86.583119][ T3] ret_from_fork_asm+0x11/0x20 [ 86.587880][ T3] [ 86.591087][ T3] Kernel Offset: disabled [ 86.595398][ T3] Rebooting in 86400 seconds..