./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3719295851 <...> Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. execve("./syz-executor3719295851", ["./syz-executor3719295851"], 0x7ffc24ebf140 /* 10 vars */) = 0 brk(NULL) = 0x5555560b4000 brk(0x5555560b4d40) = 0x5555560b4d40 arch_prctl(ARCH_SET_FS, 0x5555560b43c0) = 0 set_tid_address(0x5555560b4690) = 296 set_robust_list(0x5555560b46a0, 24) = 0 rseq(0x5555560b4ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3719295851", 4096) = 28 getrandom("\xb5\xaf\x88\x84\x16\x6b\xa5\x6e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555560b4d40 brk(0x5555560d5d40) = 0x5555560d5d40 brk(0x5555560d6000) = 0x5555560d6000 mprotect(0x7f25db454000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 297 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 298 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 299 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 300 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 301 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 302 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x5555560b46a0, 24) = 0 [pid 301] unshare(CLONE_NEWPID) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 303 ./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x5555560b46a0, 24) = 0 [pid 300] unshare(CLONE_NEWPID) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 304 ./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x5555560b46a0, 24) = 0 [pid 303] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setsid() = 1 [pid 303] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 303] unshare(CLONE_NEWNS) = 0 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x5555560b46a0, 24) = 0 [pid 304] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 303] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setsid() = 1 [pid 304] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 303] unshare(CLONE_NEWIPC [pid 304] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 303] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 304] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 303] unshare(CLONE_NEWCGROUP [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 304] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 303] <... unshare resumed>) = 0 [pid 304] <... prlimit64 resumed>NULL) = 0 [pid 304] unshare(CLONE_NEWNS./strace-static-x86_64: Process 297 attached ./strace-static-x86_64: Process 302 attached ./strace-static-x86_64: Process 299 attached ./strace-static-x86_64: Process 298 attached [pid 297] set_robust_list(0x5555560b46a0, 24 [pid 302] set_robust_list(0x5555560b46a0, 24 [pid 299] set_robust_list(0x5555560b46a0, 24 [pid 298] set_robust_list(0x5555560b46a0, 24 [pid 302] <... set_robust_list resumed>) = 0 [pid 299] <... set_robust_list resumed>) = 0 [pid 297] <... set_robust_list resumed>) = 0 [pid 303] unshare(CLONE_NEWUTS [pid 304] <... unshare resumed>) = 0 [pid 303] <... unshare resumed>) = 0 [pid 303] unshare(CLONE_SYSVSEM) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 304] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 304] unshare(CLONE_NEWCGROUP) = 0 [pid 304] unshare(CLONE_NEWUTS) = 0 [pid 303] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] unshare(CLONE_SYSVSEM) = 0 [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [ 24.961677][ T30] audit: type=1400 audit(1696113956.385:66): avc: denied { execmem } for pid=296 comm="syz-executor371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.981103][ T30] audit: type=1400 audit(1696113956.385:67): avc: denied { integrity } for pid=296 comm="syz-executor371" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 303] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 303] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 303] getpid( [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] <... getpid resumed>) = 1 [pid 303] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 303] unshare(CLONE_NEWNET [pid 304] <... getpid resumed>) = 1 [pid 304] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 298] <... set_robust_list resumed>) = 0 [pid 302] unshare(CLONE_NEWPID [pid 298] unshare(CLONE_NEWPID [pid 299] unshare(CLONE_NEWPID [pid 297] unshare(CLONE_NEWPID [pid 302] <... unshare resumed>) = 0 [pid 299] <... unshare resumed>) = 0 [pid 298] <... unshare resumed>) = 0 [pid 297] <... unshare resumed>) = 0 [pid 304] <... unshare resumed>) = 0 [pid 303] <... unshare resumed>) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] <... openat resumed>) = 3 [pid 303] write(3, "0 65535", 7) = 7 [pid 303] close(3) = 0 [pid 303] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 303] dup2(3, 200) = 200 [pid 303] close(3) = 0 [pid 303] ioctl(200, TUNSETIFF, 0x7fffe2d84240 [pid 297] <... clone resumed>, child_tidptr=0x5555560b4690) = 307 [pid 302] <... clone resumed>, child_tidptr=0x5555560b4690) = 305 [pid 299] <... clone resumed>, child_tidptr=0x5555560b4690) = 308 [pid 298] <... clone resumed>, child_tidptr=0x5555560b4690) = 306 ./strace-static-x86_64: Process 308 attached ./strace-static-x86_64: Process 306 attached [pid 308] set_robust_list(0x5555560b46a0, 24 [pid 303] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x5555560b46a0, 24./strace-static-x86_64: Process 305 attached ) = 0 [pid 307] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 305] set_robust_list(0x5555560b46a0, 24) = 0 [pid 305] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 307] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 305] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 303] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... prctl resumed>) = 0 [pid 305] <... prctl resumed>) = 0 [pid 307] setsid() = 1 [pid 305] setsid( [pid 307] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 305] <... setsid resumed>) = 1 [pid 307] <... prlimit64 resumed>NULL) = 0 [pid 305] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 307] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 307] <... prlimit64 resumed>NULL) = 0 [ 25.004509][ T30] audit: type=1400 audit(1696113956.405:68): avc: denied { mounton } for pid=303 comm="syz-executor371" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 25.029301][ T30] audit: type=1400 audit(1696113956.405:69): avc: denied { mount } for pid=303 comm="syz-executor371" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [pid 305] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 307] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 307] <... prlimit64 resumed>NULL) = 0 [pid 305] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 305] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 307] <... prlimit64 resumed>NULL) = 0 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 307] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 305] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 307] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 307] <... prlimit64 resumed>NULL) = 0 [pid 305] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 307] unshare(CLONE_NEWNS [pid 303] write(3, "0", 1 [pid 307] <... unshare resumed>) = 0 [pid 305] <... prlimit64 resumed>NULL) = 0 [pid 305] unshare(CLONE_NEWNS) = 0 [pid 303] <... write resumed>) = 1 [pid 303] close(3) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC) = 3 [pid 307] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 307] unshare(CLONE_NEWCGROUP) = 0 [pid 303] write(3, "0", 1 [pid 307] unshare(CLONE_NEWUTS [pid 303] <... write resumed>) = 1 [pid 307] <... unshare resumed>) = 0 [pid 307] unshare(CLONE_SYSVSEM [pid 303] close(3 [pid 307] <... unshare resumed>) = 0 [pid 303] <... close resumed>) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 305] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 305] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 305] unshare(CLONE_NEWCGROUP) = 0 [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] unshare(CLONE_NEWUTS) = 0 [pid 305] unshare(CLONE_SYSVSEM) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] <... set_robust_list resumed>) = 0 [pid 306] set_robust_list(0x5555560b46a0, 24 [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 308] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 306] <... set_robust_list resumed>) = 0 [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 308] <... prctl resumed>) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 306] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 308] setsid( [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... setsid resumed>) = 1 [pid 306] <... prctl resumed>) = 0 [pid 308] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] <... prlimit64 resumed>NULL) = 0 [pid 306] setsid( [pid 308] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 308] <... prlimit64 resumed>NULL) = 0 [pid 306] <... setsid resumed>) = 1 [pid 308] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 306] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 308] <... prlimit64 resumed>NULL) = 0 [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 306] <... prlimit64 resumed>NULL) = 0 [pid 308] <... prlimit64 resumed>NULL) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 308] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 306] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 308] <... prlimit64 resumed>NULL) = 0 [pid 306] <... prlimit64 resumed>NULL) = 0 [pid 308] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] <... prlimit64 resumed>NULL) = 0 [pid 306] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 308] unshare(CLONE_NEWNS [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 306] <... prlimit64 resumed>NULL) = 0 [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 308] <... unshare resumed>) = 0 [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 308] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] <... prlimit64 resumed>NULL) = 0 [pid 308] <... mount resumed>) = 0 [pid 306] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] unshare(CLONE_NEWIPC [pid 306] <... prlimit64 resumed>NULL) = 0 [pid 308] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] unshare(CLONE_NEWCGROUP [pid 306] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 308] <... unshare resumed>) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 306] <... prlimit64 resumed>NULL) = 0 [pid 308] unshare(CLONE_NEWUTS [pid 306] unshare(CLONE_NEWNS [pid 308] <... unshare resumed>) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] unshare(CLONE_SYSVSEM [pid 306] <... unshare resumed>) = 0 [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] <... socket resumed>) = 4 [pid 306] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 308] <... unshare resumed>) = 0 [pid 305] getpid( [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 306] <... mount resumed>) = 0 [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 305] <... getpid resumed>) = 1 [pid 306] unshare(CLONE_NEWIPC [pid 308] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 305] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 306] unshare(CLONE_NEWCGROUP [pid 305] <... capget resumed>{effective=1<) = -1 ENOENT (No such file or directory) [pid 306] <... unshare resumed>) = 0 [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 305] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 308] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] unshare(CLONE_NEWUTS [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 305] <... capset resumed>) = 0 [pid 306] <... unshare resumed>) = 0 [pid 308] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] unshare(CLONE_SYSVSEM [pid 305] unshare(CLONE_NEWNET [pid 306] <... unshare resumed>) = 0 [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 307] getpid( [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 308] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] <... getpid resumed>) = 1 [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 307] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 308] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 307] <... capget resumed>{effective=1< [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] getpid( [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 308] <... getpid resumed>) = 1 [pid 308] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 307] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] <... capget resumed>{effective=1< [pid 308] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 308] <... capset resumed>) = 0 [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 308] unshare(CLONE_NEWNET [pid 307] <... capset resumed>) = 0 [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... openat resumed>) = 3 [pid 303] close(4 [pid 307] unshare(CLONE_NEWNET [pid 304] write(3, "0 65535", 7 [pid 303] <... close resumed>) = 0 [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 304] <... write resumed>) = 7 [pid 303] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 304] dup2(3, 200) = 200 [pid 304] close(3) = 0 [pid 304] ioctl(200, TUNSETIFF, 0x7fffe2d84240) = 0 [pid 303] <... sendto resumed>) = 40 [pid 304] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 303] recvfrom(3, [pid 304] <... openat resumed>) = 3 [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 304] write(3, "0", 1 [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 304] <... write resumed>) = 1 [pid 303] <... socket resumed>) = 4 [pid 304] close(3 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 304] <... close resumed>) = 0 [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 304] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 303] close(4 [pid 304] <... openat resumed>) = 3 [pid 303] <... close resumed>) = 0 [pid 304] write(3, "0", 1 [pid 303] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 304] <... write resumed>) = 1 [pid 303] <... sendto resumed>) = 64 [pid 304] close(3 [pid 303] recvfrom(3, [pid 304] <... close resumed>) = 0 [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 304] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 304] <... socket resumed>) = 3 [pid 303] <... socket resumed>) = 4 [pid 304] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 304] <... socket resumed>) = 4 [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 304] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] close(4 [pid 304] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] <... close resumed>) = 0 [pid 304] close(4 [pid 303] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 304] <... close resumed>) = 0 [pid 303] <... sendto resumed>) = 48 [pid 304] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [ 25.054599][ T30] audit: type=1400 audit(1696113956.405:70): avc: denied { mounton } for pid=303 comm="syz-executor371" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 303] recvfrom(3, [pid 306] getpid( [pid 304] <... sendto resumed>) = 40 [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 306] <... getpid resumed>) = 1 [pid 304] recvfrom(3, [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 304] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 303] <... socket resumed>) = 4 [pid 304] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 304] <... socket resumed>) = 4 [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 304] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] close(4 [pid 304] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] <... close resumed>) = 0 [pid 304] close(4 [pid 303] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 304] <... close resumed>) = 0 [pid 303] <... sendto resumed>) = 60 [pid 304] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 303] recvfrom(3, [pid 306] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 304] <... sendto resumed>) = 64 [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 306] <... capget resumed>{effective=1< [pid 303] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 306] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 304] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 303] <... socket resumed>) = 4 [pid 306] <... capset resumed>) = 0 [pid 304] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 306] unshare(CLONE_NEWNET [pid 304] <... socket resumed>) = 4 [pid 303] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 304] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] close(4 [pid 304] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] <... close resumed>) = 0 [pid 304] close(4 [pid 303] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 304] <... close resumed>) = 0 [pid 304] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 48 [pid 303] <... sendto resumed>) = 44 [pid 304] recvfrom(3, [pid 303] recvfrom(3, [pid 304] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 303] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 304] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] close(3 [pid 304] <... socket resumed>) = 4 [pid 303] <... close resumed>) = 0 [pid 304] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 303] mkdir("/dev/binderfs", 0777 [pid 304] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 303] <... mkdir resumed>) = 0 [pid 304] close(4 [pid 303] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 304] <... close resumed>) = 0 [pid 303] <... mount resumed>) = 0 [pid 304] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 303] symlink("/dev/binderfs", "./binderfs" [pid 304] <... sendto resumed>) = 60 [pid 303] <... symlink resumed>) = 0 [pid 304] recvfrom(3, [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... unshare resumed>) = 0 [pid 304] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [ 25.093052][ T30] audit: type=1400 audit(1696113956.515:71): avc: denied { create } for pid=293 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [pid 304] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 303] <... clone resumed>, child_tidptr=0x5555560b4690) = 2 [pid 304] <... socket resumed>) = 4 [pid 304] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 304] close(4) = 0 [pid 304] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x5555560b46a0, 24) = 0 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] setpgid(0, 0) = 0 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 [pid 309] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 309] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 309] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 309] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[3]}, 88) = 3 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 310] write(3, "67", 2) = 2 [pid 310] clone(child_stack=NULL, flags=0 [pid 308] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 306] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 307] <... unshare resumed>) = 0 [pid 304] <... sendto resumed>) = 44 [pid 304] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 304] close(3) = 0 [pid 304] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 304] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 304] symlink("/dev/binderfs", "./binderfs") = -1 EEXIST (File exists) [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "0 65535", 7) = 7 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 307] dup2(3, 200) = 200 [pid 307] close(3) = 0 [pid 307] ioctl(200, TUNSETIFF, 0x7fffe2d84240) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "0", 1) = 1 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "0", 1) = 1 [pid 307] close(3) = 0 [pid 307] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 307] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 307] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 307] close(4) = 0 [ 25.151575][ T30] audit: type=1400 audit(1696113956.515:72): avc: denied { write } for pid=293 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 25.168516][ T310] FAULT_INJECTION: forcing a failure. [ 25.168516][ T310] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [pid 307] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 308] <... openat resumed>) = 3 [pid 306] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 308] write(3, "0 65535", 7 [pid 306] <... openat resumed>) = 3 [pid 308] <... write resumed>) = 7 [pid 306] write(3, "0 65535", 7 [pid 305] <... openat resumed>) = 3 [pid 307] <... sendto resumed>) = 40 [pid 307] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 307] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 307] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 307] close(4) = 0 [pid 307] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 64 [pid 307] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 307] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 307] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 307] close(4) = 0 [pid 307] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 309] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] <... sendto resumed>) = 48 [pid 307] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 307] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 307] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 307] close(4) = 0 [pid 307] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 60 [pid 307] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 307] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 307] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 307] close(4) = 0 [pid 307] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 [pid 307] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 307] close(3) = 0 [pid 307] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 307] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 307] symlink("/dev/binderfs", "./binderfs") = -1 EEXIST (File exists) [ 25.178654][ T30] audit: type=1400 audit(1696113956.515:73): avc: denied { nlmsg_read } for pid=293 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 25.207683][ T30] audit: type=1400 audit(1696113956.515:74): avc: denied { module_request } for pid=293 comm="strace-static-x" kmod="net-pf-16-proto-4-type-16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.225296][ T310] CPU: 0 PID: 310 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.231884][ T30] audit: type=1400 audit(1696113956.515:75): avc: denied { read } for pid=293 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 25.241489][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 25.241504][ T310] Call Trace: [ 25.241510][ T310] [ 25.241517][ T310] dump_stack_lvl+0x151/0x1b7 [ 25.282480][ T310] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.288040][ T310] ? arch_stack_walk+0xf3/0x140 [ 25.292726][ T310] dump_stack+0x15/0x17 [ 25.296816][ T310] should_fail+0x3c6/0x510 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] close(3 [pid 306] <... write resumed>) = 7 [pid 305] write(3, "0 65535", 7 [pid 308] <... close resumed>) = 0 [pid 306] close(3 [pid 305] <... write resumed>) = 7 [pid 308] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 306] <... close resumed>) = 0 [pid 305] close(3 [pid 308] <... openat resumed>) = 3 [pid 306] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 305] <... close resumed>) = 0 [pid 308] dup2(3, 200 [pid 306] <... openat resumed>) = 3 [pid 305] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 308] <... dup2 resumed>) = 200 [pid 306] dup2(3, 200 [pid 305] <... openat resumed>) = 3 [pid 308] close(3 [pid 306] <... dup2 resumed>) = 200 [pid 305] dup2(3, 200 [pid 308] <... close resumed>) = 0 [pid 306] close(3 [pid 305] <... dup2 resumed>) = 200 [pid 308] ioctl(200, TUNSETIFF, 0x7fffe2d84240 [pid 306] <... close resumed>) = 0 [pid 305] close(3 [pid 308] <... ioctl resumed>) = 0 [pid 306] ioctl(200, TUNSETIFF, 0x7fffe2d84240 [pid 305] <... close resumed>) = 0 [pid 306] <... ioctl resumed>) = 0 [pid 305] ioctl(200, TUNSETIFF, 0x7fffe2d84240) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 306] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 305] <... openat resumed>) = 3 [pid 308] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "0", 1) = 1 [pid 306] write(3, "0", 1) = 1 [pid 305] close(3) = 0 [pid 306] close(3) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 306] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 305] <... openat resumed>) = 3 [pid 308] write(3, "0", 1 [pid 306] <... openat resumed>) = 3 [pid 305] write(3, "0", 1 [pid 308] <... write resumed>) = 1 [pid 306] write(3, "0", 1 [pid 305] <... write resumed>) = 1 [pid 308] close(3 [pid 306] <... write resumed>) = 1 [pid 305] close(3 [pid 308] <... close resumed>) = 0 [pid 306] close(3 [pid 305] <... close resumed>) = 0 [pid 308] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 306] <... close resumed>) = 0 [pid 305] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 308] <... openat resumed>) = 3 [pid 306] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 305] <... socket resumed>) = 3 [pid 308] write(3, "0", 1 [pid 306] <... socket resumed>) = 3 [pid 305] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] <... write resumed>) = 1 [pid 306] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 305] <... socket resumed>) = 4 [pid 308] close(3) = 0 [pid 306] <... socket resumed>) = 4 [pid 305] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 306] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 305] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] <... socket resumed>) = 3 [pid 306] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 305] close(4 [pid 308] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 306] close(4 [pid 305] <... close resumed>) = 0 [pid 308] <... socket resumed>) = 4 [pid 306] <... close resumed>) = 0 [pid 305] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 308] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 306] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 305] <... sendto resumed>) = 40 [pid 308] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 306] <... sendto resumed>) = 40 [pid 305] recvfrom(3, [pid 308] close(4 [pid 306] recvfrom(3, [pid 305] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 308] <... close resumed>) = 0 [pid 306] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 305] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 306] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 305] <... socket resumed>) = 4 [pid 308] <... sendto resumed>) = 40 [pid 306] <... socket resumed>) = 4 [pid 305] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] recvfrom(3, [pid 306] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 305] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 306] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 305] close(4 [pid 308] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 306] close(4 [pid 305] <... close resumed>) = 0 [pid 308] <... socket resumed>) = 4 [pid 306] <... close resumed>) = 0 [pid 305] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 308] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 306] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 305] <... sendto resumed>) = 64 [pid 308] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 306] <... sendto resumed>) = 64 [pid 305] recvfrom(3, [pid 308] close(4 [pid 306] recvfrom(3, [pid 305] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 308] <... close resumed>) = 0 [pid 306] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 305] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 306] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 305] <... socket resumed>) = 4 [pid 308] <... sendto resumed>) = 64 [pid 306] <... socket resumed>) = 4 [pid 305] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] recvfrom(3, [pid 306] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 305] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 306] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 305] close(4 [pid 308] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 306] close(4 [pid 305] <... close resumed>) = 0 [pid 308] <... socket resumed>) = 4 [pid 306] <... close resumed>) = 0 [pid 305] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 308] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 306] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 305] <... sendto resumed>) = 48 [pid 308] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 306] <... sendto resumed>) = 48 [pid 305] recvfrom(3, [pid 308] close(4 [pid 306] recvfrom(3, [pid 305] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 308] <... close resumed>) = 0 [pid 306] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 305] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 306] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 305] <... socket resumed>) = 4 [pid 308] <... sendto resumed>) = 48 [pid 306] <... socket resumed>) = 4 [pid 305] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] recvfrom(3, [pid 306] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 305] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 306] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 305] close(4 [pid 308] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 306] close(4 [pid 305] <... close resumed>) = 0 [pid 308] <... socket resumed>) = 4 [pid 306] <... close resumed>) = 0 [pid 305] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 308] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 306] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 305] <... sendto resumed>) = 60 [pid 308] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 306] <... sendto resumed>) = 60 [pid 305] recvfrom(3, [pid 308] close(4 [pid 306] recvfrom(3, [pid 305] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 308] <... close resumed>) = 0 [pid 306] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 305] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 308] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 306] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 305] <... socket resumed>) = 4 [pid 308] <... sendto resumed>) = 60 [pid 306] <... socket resumed>) = 4 [pid 305] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 308] recvfrom(3, [pid 306] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 305] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 308] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 306] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 305] close(4 [pid 308] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 306] close(4 [pid 305] <... close resumed>) = 0 [pid 308] <... socket resumed>) = 4 [pid 306] <... close resumed>) = 0 [pid 305] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 308] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 306] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 305] <... sendto resumed>) = 44 [pid 308] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 306] <... sendto resumed>) = 44 [pid 305] recvfrom(3, [pid 308] close(4 [pid 306] recvfrom(3, [pid 305] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 308] <... close resumed>) = 0 [pid 306] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 305] close(3 [pid 308] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 306] close(3 [pid 305] <... close resumed>) = 0 [pid 308] <... sendto resumed>) = 44 [pid 306] <... close resumed>) = 0 [pid 305] mkdir("/dev/binderfs", 0777 [pid 308] recvfrom(3, [pid 306] mkdir("/dev/binderfs", 0777 [pid 305] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 308] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 306] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 305] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 308] close(3 [pid 306] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 305] <... mount resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 306] <... mount resumed>) = 0 [pid 305] symlink("/dev/binderfs", "./binderfs" [pid 308] mkdir("/dev/binderfs", 0777 [pid 306] symlink("/dev/binderfs", "./binderfs" [pid 305] <... symlink resumed>) = -1 EEXIST (File exists) [pid 308] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] <... symlink resumed>) = -1 EEXIST (File exists) [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... mount resumed>) = 0 [pid 308] symlink("/dev/binderfs", "./binderfs") = -1 EEXIST (File exists) [ 25.301069][ T310] should_fail_alloc_page+0x5a/0x80 [ 25.306101][ T310] prepare_alloc_pages+0x15c/0x700 [ 25.311046][ T310] ? __alloc_pages_bulk+0xe60/0xe60 [ 25.316081][ T310] ? __kasan_slab_alloc+0xc3/0xe0 [ 25.320951][ T310] __alloc_pages+0x138/0x5e0 [ 25.325566][ T310] ? prep_new_page+0x110/0x110 [ 25.330245][ T310] new_slab+0x9a/0x4e0 [ 25.334152][ T310] ___slab_alloc+0x39e/0x830 [ 25.338680][ T310] ? anon_vma_clone+0x9a/0x500 [ 25.343287][ T310] ? anon_vma_clone+0x9a/0x500 [ 25.347890][ T310] __slab_alloc+0x4a/0x90 [ 25.352050][ T310] ? anon_vma_clone+0x9a/0x500 [ 25.356669][ T310] kmem_cache_alloc+0x134/0x200 [ 25.361649][ T310] anon_vma_clone+0x9a/0x500 [ 25.366074][ T310] anon_vma_fork+0x91/0x4e0 [ 25.370410][ T310] ? anon_vma_name+0x43/0x70 [ 25.374843][ T310] ? vm_area_dup+0x17a/0x230 [ 25.380515][ T310] copy_mm+0xa3a/0x13e0 [ 25.384506][ T310] ? copy_signal+0x610/0x610 [ 25.388934][ T310] ? __init_rwsem+0xd6/0x1c0 [ 25.395175][ T310] ? copy_signal+0x4e3/0x610 [ 25.400016][ T310] copy_process+0x12bc/0x3260 [ 25.406098][ T310] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.411039][ T310] ? __kasan_check_write+0x14/0x20 [ 25.415991][ T310] kernel_clone+0x21e/0x9e0 [ 25.420322][ T310] ? _raw_spin_unlock_irq+0x4e/0x70 [ 25.425356][ T310] ? create_io_thread+0x1e0/0x1e0 [ 25.430306][ T310] __x64_sys_clone+0x23f/0x290 [ 25.435016][ T310] ? __do_sys_vfork+0x130/0x130 [ 25.439706][ T310] ? __kasan_check_read+0x11/0x20 [ 25.444563][ T310] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 25.450380][ T310] do_syscall_64+0x3d/0xb0 [ 25.454642][ T310] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.461063][ T310] RIP: 0033:0x7f25db3d0399 [ 25.465305][ T310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.484749][ T310] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 25.492995][ T310] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 316 attached ./strace-static-x86_64: Process 315 attached ./strace-static-x86_64: Process 314 attached ./strace-static-x86_64: Process 312 attached [pid 316] set_robust_list(0x5555560b46a0, 24) = 0 [pid 315] set_robust_list(0x5555560b46a0, 24 [pid 314] set_robust_list(0x5555560b46a0, 24 [pid 312] set_robust_list(0x5555560b46a0, 24 [pid 310] <... clone resumed>) = 4 [pid 308] <... clone resumed>, child_tidptr=0x5555560b4690) = 2 [pid 307] <... clone resumed>, child_tidptr=0x5555560b4690) = 2 [pid 306] <... clone resumed>, child_tidptr=0x5555560b4690) = 2 [pid 305] <... clone resumed>, child_tidptr=0x5555560b4690) = 2 [pid 304] <... clone resumed>, child_tidptr=0x5555560b4690) = 2 ./strace-static-x86_64: Process 317 attached ./strace-static-x86_64: Process 313 attached [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 315] <... set_robust_list resumed>) = 0 [pid 314] <... set_robust_list resumed>) = 0 [pid 312] <... set_robust_list resumed>) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 [pid 312] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 312] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 312] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[3]}, 88) = 3 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] close(3 [pid 316] <... prctl resumed>) = 0 [pid 315] <... prctl resumed>) = 0 [pid 314] <... prctl resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 316] setpgid(0, 0 [pid 315] setpgid(0, 0 [pid 310] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] close(4 [pid 316] <... setpgid resumed>) = 0 [pid 315] <... setpgid resumed>) = 0 [pid 314] setpgid(0, 0 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] close(5 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... setpgid resumed>) = 0 [pid 316] <... openat resumed>) = 3 [pid 309] close(6 [pid 318] <... openat resumed>) = 3 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 315] <... openat resumed>) = 3 [pid 309] close(7 [pid 318] write(3, "67", 2 [pid 314] <... openat resumed>) = 3 [pid 315] write(3, "1000", 4 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] write(3, "1000", 4 [pid 314] write(3, "1000", 4 [pid 309] close(8 [pid 315] <... write resumed>) = 4 [pid 316] <... write resumed>) = 4 [pid 315] close(3 [pid 314] <... write resumed>) = 4 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(3 [pid 315] <... close resumed>) = 0 [pid 314] close(3 [pid 309] close(9 [pid 316] <... close resumed>) = 0 [pid 315] read(200, [pid 314] <... close resumed>) = 0 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] read(200, [pid 315] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 314] read(200, [pid 309] close(10 [pid 316] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 315] read(200, [pid 314] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] read(200, [pid 315] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] read(200, [pid 309] close(11 [pid 316] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 315] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] read(200, [pid 315] <... futex resumed>) = 0 [pid 309] close(12 [pid 318] <... write resumed>) = 2 [pid 318] clone(child_stack=NULL, flags=0 [pid 314] read(200, [pid 316] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 315] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 314] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... rt_sigaction resumed>NULL, 8) = 0 [pid 314] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] set_robust_list(0x5555560b46a0, 24 [pid 309] close(13 [pid 316] <... futex resumed>) = 0 [pid 315] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 314] <... futex resumed>) = 0 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 314] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 309] close(14 [pid 316] <... rt_sigaction resumed>NULL, 8) = 0 [pid 315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 314] <... rt_sigaction resumed>NULL, 8) = 0 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 315] <... mmap resumed>) = 0x7f25db370000 [pid 314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 313] <... set_robust_list resumed>) = 0 [pid 309] close(15 [pid 316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 315] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 314] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 25.500803][ T310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.508621][ T310] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 25.516459][ T310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 25.524238][ T310] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 25.532052][ T310] [ 25.548144][ T318] FAULT_INJECTION: forcing a failure. [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 315] <... mprotect resumed>) = 0 [pid 314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 313] <... prctl resumed>) = 0 [pid 309] close(16 [pid 316] <... mmap resumed>) = 0x7f25db370000 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [pid 314] <... mmap resumed>) = 0x7f25db370000 [pid 313] setpgid(0, 0 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 315] <... rt_sigprocmask resumed>[], 8) = 0 [pid 314] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 313] <... setpgid resumed>) = 0 [pid 309] close(17 [pid 316] <... mprotect resumed>) = 0 [pid 315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 314] <... mprotect resumed>) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [pid 313] <... openat resumed>) = 3 [pid 309] close(18 [pid 316] <... rt_sigprocmask resumed>[], 8) = 0 [pid 315] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 314] <... rt_sigprocmask resumed>[], 8) = 0 [pid 313] write(3, "1000", 4 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 315] rt_sigprocmask(SIG_SETMASK, [], [pid 314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 313] <... write resumed>) = 4 [pid 309] close(19 [pid 315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 313] close(3 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 315] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 313] <... close resumed>) = 0 [pid 309] close(20 [pid 316] rt_sigprocmask(SIG_SETMASK, [], [pid 315] <... futex resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], [pid 313] read(200, [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 315] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 313] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 309] close(21 [pid 316] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] read(200, [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = 0 [pid 313] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 309] close(22 [pid 316] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] read(200, [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] close(23 [pid 313] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... futex resumed>) = 0 [pid 309] close(24 [pid 313] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... rt_sigaction resumed>NULL, 8) = 0 [pid 309] close(25 [pid 313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 309] close(26 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... mmap resumed>) = 0x7f25db370000 [pid 309] close(27 [pid 313] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... mprotect resumed>) = 0 [pid 309] close(28 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... rt_sigprocmask resumed>[], 8) = 0 [pid 309] close(29 [pid 313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] exit_group(0 [pid 313] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 310] <... futex resumed>) = ? [pid 309] <... exit_group resumed>) = ? [pid 313] rt_sigprocmask(SIG_SETMASK, [], [pid 310] +++ exited with 0 +++ [pid 309] +++ exited with 0 +++ [pid 313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 313] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 322] write(3, "67", 2) = 2 [ 25.548144][ T318] name failslab, interval 1, probability 0, space 0, times 1 [ 25.560888][ T318] CPU: 1 PID: 318 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.571055][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 25.580945][ T318] Call Trace: [ 25.584072][ T318] [ 25.586848][ T318] dump_stack_lvl+0x151/0x1b7 [ 25.587565][ T322] FAULT_INJECTION: forcing a failure. [pid 322] clone(child_stack=NULL, flags=0 [pid 315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 314] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 25.587565][ T322] name failslab, interval 1, probability 0, space 0, times 1 [ 25.591362][ T318] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.591393][ T318] dump_stack+0x15/0x17 [ 25.591412][ T318] should_fail+0x3c6/0x510 [ 25.618268][ T318] __should_failslab+0xa4/0xe0 [ 25.622875][ T318] ? anon_vma_fork+0x1df/0x4e0 [ 25.627459][ T318] should_failslab+0x9/0x20 [ 25.631884][ T318] slab_pre_alloc_hook+0x37/0xd0 [ 25.636665][ T318] ? anon_vma_fork+0x1df/0x4e0 [ 25.641344][ T318] kmem_cache_alloc+0x44/0x200 [ 25.645948][ T318] anon_vma_fork+0x1df/0x4e0 [pid 317] exit(0) = ? [pid 317] +++ exited with 0 +++ [ 25.650373][ T318] copy_mm+0xa3a/0x13e0 [ 25.654473][ T318] ? copy_signal+0x610/0x610 [ 25.659082][ T318] ? __init_rwsem+0xd6/0x1c0 [ 25.663563][ T318] ? copy_signal+0x4e3/0x610 [ 25.668001][ T318] copy_process+0x12bc/0x3260 [ 25.672514][ T318] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.677454][ T318] ? __kasan_check_write+0x14/0x20 [ 25.682403][ T318] kernel_clone+0x21e/0x9e0 [ 25.686911][ T318] ? _raw_spin_unlock_irq+0x4e/0x70 [ 25.692146][ T318] ? create_io_thread+0x1e0/0x1e0 [ 25.697004][ T318] __x64_sys_clone+0x23f/0x290 ./strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 319] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 319] write(3, "67", 2) = 2 [ 25.701694][ T318] ? __do_sys_vfork+0x130/0x130 [ 25.706470][ T318] ? __kasan_check_read+0x11/0x20 [ 25.711330][ T318] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 25.717248][ T318] do_syscall_64+0x3d/0xb0 [ 25.721672][ T318] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.721795][ T319] FAULT_INJECTION: forcing a failure. [ 25.721795][ T319] name failslab, interval 1, probability 0, space 0, times 1 [ 25.727395][ T318] RIP: 0033:0x7f25db3d0399 [pid 319] clone(child_stack=NULL, flags=0 [pid 316] close(3 [pid 314] close(3 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(4 [pid 314] close(4 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(5 [pid 314] close(5 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(6 [pid 314] close(6 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(7 [pid 314] close(7 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(8 [pid 314] close(8 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(9 [pid 314] close(9 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(10 [pid 314] close(10 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(11 [pid 314] close(11 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(12 [pid 314] close(12 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(13 [pid 314] close(13 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(14 [pid 314] close(14 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(15 [pid 314] close(15 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(16 [pid 314] close(16 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(17 [pid 314] close(17 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(18 [pid 314] close(18 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(19 [pid 314] close(19 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(20 [pid 314] close(20 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(21 [pid 314] close(21 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(22 [pid 314] close(22 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(23 [pid 314] close(23 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(24 [pid 314] close(24 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(25 [pid 314] close(25 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(26 [pid 314] close(26 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(27 [pid 314] close(27 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(28 [pid 314] close(28 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(29 [pid 314] close(29 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 25.727416][ T318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.727433][ T318] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 25.727456][ T318] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 25.780025][ T318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.787835][ T318] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 25.795682][ T318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [pid 314] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] exit_group(0 [pid 314] exit_group(0 [pid 316] <... exit_group resumed>) = ? [pid 314] <... exit_group resumed>) = ? [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 25.803624][ T318] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 25.811442][ T318] [ 25.815481][ T322] CPU: 0 PID: 322 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.825653][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 25.835774][ T322] Call Trace: [ 25.839001][ T322] [ 25.841768][ T322] dump_stack_lvl+0x151/0x1b7 [ 25.846285][ T322] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.851758][ T322] dump_stack+0x15/0x17 [ 25.855745][ T322] should_fail+0x3c6/0x510 [ 25.860260][ T322] __should_failslab+0xa4/0xe0 [ 25.864982][ T322] ? anon_vma_fork+0xf7/0x4e0 [ 25.869852][ T322] should_failslab+0x9/0x20 [ 25.874331][ T322] slab_pre_alloc_hook+0x37/0xd0 [ 25.879264][ T322] ? anon_vma_fork+0xf7/0x4e0 [ 25.884042][ T322] kmem_cache_alloc+0x44/0x200 [ 25.888991][ T322] anon_vma_fork+0xf7/0x4e0 [ 25.893364][ T322] ? anon_vma_name+0x4c/0x70 [ 25.897772][ T322] ? vm_area_dup+0x17a/0x230 [ 25.902189][ T322] copy_mm+0xa3a/0x13e0 [ 25.906877][ T322] ? copy_signal+0x610/0x610 [ 25.911300][ T322] ? __init_rwsem+0xd6/0x1c0 [ 25.915723][ T322] ? copy_signal+0x4e3/0x610 [ 25.920169][ T322] copy_process+0x12bc/0x3260 [ 25.924675][ T322] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.929621][ T322] ? __kasan_check_write+0x14/0x20 [ 25.934562][ T322] kernel_clone+0x21e/0x9e0 [ 25.938912][ T322] ? _raw_spin_unlock_irq+0x4e/0x70 [ 25.943935][ T322] ? create_io_thread+0x1e0/0x1e0 [ 25.948795][ T322] __x64_sys_clone+0x23f/0x290 ./strace-static-x86_64: Process 321 attached ./strace-static-x86_64: Process 320 attached [pid 318] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 321] +++ exited with 0 +++ [pid 320] +++ exited with 0 +++ [pid 318] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] +++ exited with 0 +++ [pid 314] +++ exited with 0 +++ [pid 318] <... futex resumed>) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 318] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... clone resumed>, child_tidptr=0x5555560b4690) = 5 [pid 312] close(3) = 0 [pid 312] close(4) = -1 EBADF (Bad file descriptor) [pid 312] close(5) = -1 EBADF (Bad file descriptor) [pid 312] close(6) = -1 EBADF (Bad file descriptor) [pid 312] close(7) = -1 EBADF (Bad file descriptor) [pid 312] close(8) = -1 EBADF (Bad file descriptor) [pid 312] close(9) = -1 EBADF (Bad file descriptor) [pid 312] close(10) = -1 EBADF (Bad file descriptor) [pid 312] close(11) = -1 EBADF (Bad file descriptor) [pid 312] close(12) = -1 EBADF (Bad file descriptor) [pid 312] close(13) = -1 EBADF (Bad file descriptor) [pid 312] close(14) = -1 EBADF (Bad file descriptor) [pid 312] close(15) = -1 EBADF (Bad file descriptor) [pid 312] close(16) = -1 EBADF (Bad file descriptor) [pid 312] close(17) = -1 EBADF (Bad file descriptor) [pid 312] close(18) = -1 EBADF (Bad file descriptor) [pid 312] close(19) = -1 EBADF (Bad file descriptor) [pid 312] close(20) = -1 EBADF (Bad file descriptor) [pid 312] close(21) = -1 EBADF (Bad file descriptor) [pid 312] close(22) = -1 EBADF (Bad file descriptor) [pid 312] close(23) = -1 EBADF (Bad file descriptor) [pid 312] close(24) = -1 EBADF (Bad file descriptor) [pid 312] close(25) = -1 EBADF (Bad file descriptor) [pid 312] close(26) = -1 EBADF (Bad file descriptor) [pid 312] close(27) = -1 EBADF (Bad file descriptor) [pid 312] close(28) = -1 EBADF (Bad file descriptor) [pid 312] close(29) = -1 EBADF (Bad file descriptor) [pid 312] exit_group(0 [pid 318] <... futex resumed>) = ? [pid 312] <... exit_group resumed>) = ? [pid 318] +++ exited with 0 +++ [pid 312] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 308] <... restart_syscall resumed>) = 0 [pid 305] <... restart_syscall resumed>) = 0 [pid 304] <... restart_syscall resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x5555560b4690) = 4 [pid 305] <... clone resumed>, child_tidptr=0x5555560b4690) = 4 [pid 304] <... clone resumed>, child_tidptr=0x5555560b4690) = 4 ./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x5555560b46a0, 24) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 [pid 326] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [ 25.953397][ T322] ? __do_sys_vfork+0x130/0x130 [ 25.958607][ T322] ? debug_smp_processor_id+0x17/0x20 [ 25.964213][ T322] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.970114][ T322] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 25.976006][ T322] do_syscall_64+0x3d/0xb0 [ 25.980266][ T322] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.985993][ T322] RIP: 0033:0x7f25db3d0399 [pid 326] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 326] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 326] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[5]}, 88) = 5 [pid 326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 326] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 327] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 327] write(3, "67", 2) = 2 [pid 327] clone(child_stack=NULL, flags=0./strace-static-x86_64: Process 325 attached ./strace-static-x86_64: Process 324 attached ./strace-static-x86_64: Process 323 attached [pid 322] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [ 25.990329][ T322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.009862][ T322] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.018496][ T327] FAULT_INJECTION: forcing a failure. [ 26.018496][ T327] name failslab, interval 1, probability 0, space 0, times 0 [ 26.031357][ T322] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 26.031382][ T322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.031393][ T322] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [pid 326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 26.031405][ T322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 26.031419][ T322] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 26.031437][ T322] [ 26.032932][ T319] CPU: 0 PID: 319 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 26.083800][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 26.094296][ T319] Call Trace: [ 26.097424][ T319] [ 26.100197][ T319] dump_stack_lvl+0x151/0x1b7 [pid 325] set_robust_list(0x5555560b46a0, 24) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 325] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 325] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 26.104709][ T319] ? io_uring_drop_tctx_refs+0x190/0x190 [ 26.111048][ T319] dump_stack+0x15/0x17 [ 26.115039][ T319] should_fail+0x3c6/0x510 [ 26.120069][ T319] __should_failslab+0xa4/0xe0 [ 26.124672][ T319] ? anon_vma_fork+0x1df/0x4e0 [ 26.129707][ T319] should_failslab+0x9/0x20 [ 26.134373][ T319] slab_pre_alloc_hook+0x37/0xd0 [ 26.139773][ T319] ? anon_vma_fork+0x1df/0x4e0 [ 26.144352][ T319] kmem_cache_alloc+0x44/0x200 [ 26.148942][ T319] anon_vma_fork+0x1df/0x4e0 [pid 325] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 325] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[5]}, 88) = 5 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 328] write(3, "67", 2) = 2 [ 26.153373][ T319] copy_mm+0xa3a/0x13e0 [ 26.157364][ T319] ? copy_signal+0x610/0x610 [ 26.161785][ T319] ? __init_rwsem+0xd6/0x1c0 [ 26.166209][ T319] ? copy_signal+0x4e3/0x610 [ 26.170742][ T319] copy_process+0x12bc/0x3260 [ 26.173892][ T328] FAULT_INJECTION: forcing a failure. [ 26.173892][ T328] name failslab, interval 1, probability 0, space 0, times 0 [ 26.175253][ T319] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.192880][ T319] ? __kasan_check_write+0x14/0x20 [ 26.199036][ T319] kernel_clone+0x21e/0x9e0 [pid 328] clone(child_stack=NULL, flags=0 [pid 325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 313] close(3) = 0 [pid 313] close(4) = -1 EBADF (Bad file descriptor) [pid 313] close(5) = -1 EBADF (Bad file descriptor) [pid 313] close(6) = -1 EBADF (Bad file descriptor) [pid 313] close(7) = -1 EBADF (Bad file descriptor) [pid 313] close(8) = -1 EBADF (Bad file descriptor) [pid 313] close(9) = -1 EBADF (Bad file descriptor) [pid 313] close(10) = -1 EBADF (Bad file descriptor) [pid 313] close(11) = -1 EBADF (Bad file descriptor) [pid 313] close(12) = -1 EBADF (Bad file descriptor) [pid 313] close(13) = -1 EBADF (Bad file descriptor) [pid 313] close(14) = -1 EBADF (Bad file descriptor) [pid 313] close(15) = -1 EBADF (Bad file descriptor) [pid 313] close(16) = -1 EBADF (Bad file descriptor) [pid 313] close(17) = -1 EBADF (Bad file descriptor) [pid 313] close(18) = -1 EBADF (Bad file descriptor) [pid 313] close(19) = -1 EBADF (Bad file descriptor) [pid 313] close(20) = -1 EBADF (Bad file descriptor) [pid 313] close(21) = -1 EBADF (Bad file descriptor) [pid 313] close(22) = -1 EBADF (Bad file descriptor) [pid 313] close(23) = -1 EBADF (Bad file descriptor) [pid 313] close(24) = -1 EBADF (Bad file descriptor) [pid 313] close(25) = -1 EBADF (Bad file descriptor) [pid 313] close(26) = -1 EBADF (Bad file descriptor) [pid 313] close(27) = -1 EBADF (Bad file descriptor) [pid 313] close(28) = -1 EBADF (Bad file descriptor) [pid 313] close(29) = -1 EBADF (Bad file descriptor) [pid 313] exit_group(0) = ? [ 26.203389][ T319] ? _raw_spin_unlock_irq+0x4e/0x70 [ 26.208423][ T319] ? create_io_thread+0x1e0/0x1e0 [ 26.213970][ T319] __x64_sys_clone+0x23f/0x290 [ 26.218808][ T319] ? __do_sys_vfork+0x130/0x130 [ 26.223497][ T319] ? __kasan_check_read+0x11/0x20 [ 26.228489][ T319] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 26.234342][ T319] do_syscall_64+0x3d/0xb0 [ 26.238600][ T319] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.244330][ T319] RIP: 0033:0x7f25db3d0399 [ 26.248581][ T319] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.268138][ T319] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.276394][ T319] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 26.284752][ T319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.292561][ T319] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 26.300378][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 26.308181][ T319] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 26.316326][ T319] [ 26.319180][ T328] CPU: 1 PID: 328 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 26.329389][ T328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 26.339284][ T328] Call Trace: [ 26.342404][ T328] [ 26.345193][ T328] dump_stack_lvl+0x151/0x1b7 [ 26.349691][ T328] ? io_uring_drop_tctx_refs+0x190/0x190 [ 26.355164][ T328] dump_stack+0x15/0x17 [ 26.359154][ T328] should_fail+0x3c6/0x510 [ 26.363408][ T328] __should_failslab+0xa4/0xe0 [ 26.368007][ T328] ? anon_vma_fork+0x1df/0x4e0 [ 26.372606][ T328] should_failslab+0x9/0x20 [ 26.376950][ T328] slab_pre_alloc_hook+0x37/0xd0 [ 26.381721][ T328] ? anon_vma_fork+0x1df/0x4e0 [ 26.386317][ T328] kmem_cache_alloc+0x44/0x200 [ 26.390922][ T328] anon_vma_fork+0x1df/0x4e0 [ 26.395346][ T328] copy_mm+0xa3a/0x13e0 [ 26.399340][ T328] ? copy_signal+0x610/0x610 [ 26.403766][ T328] ? __init_rwsem+0xd6/0x1c0 [ 26.408193][ T328] ? copy_signal+0x4e3/0x610 [ 26.412621][ T328] copy_process+0x12bc/0x3260 [ 26.417137][ T328] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.422077][ T328] ? __kasan_check_write+0x14/0x20 [ 26.427026][ T328] kernel_clone+0x21e/0x9e0 [ 26.431372][ T328] ? _raw_spin_unlock_irq+0x4e/0x70 [ 26.436399][ T328] ? create_io_thread+0x1e0/0x1e0 [ 26.441261][ T328] __x64_sys_clone+0x23f/0x290 [ 26.445870][ T328] ? __do_sys_vfork+0x130/0x130 [ 26.450562][ T328] ? __kasan_check_read+0x11/0x20 [ 26.455410][ T328] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 26.461227][ T328] do_syscall_64+0x3d/0xb0 [ 26.465502][ T328] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.471208][ T328] RIP: 0033:0x7f25db3d0399 [ 26.475460][ T328] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.494902][ T328] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [pid 324] set_robust_list(0x5555560b46a0, 24 [pid 323] set_robust_list(0x5555560b46a0, 24 [pid 319] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 328] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 328] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 325] close(3) = 0 [pid 325] close(4) = -1 EBADF (Bad file descriptor) [pid 325] close(5) = -1 EBADF (Bad file descriptor) [pid 325] close(6) = -1 EBADF (Bad file descriptor) [pid 325] close(7) = -1 EBADF (Bad file descriptor) [pid 325] close(8) = -1 EBADF (Bad file descriptor) [pid 325] close(9) = -1 EBADF (Bad file descriptor) [pid 325] close(10) = -1 EBADF (Bad file descriptor) [pid 325] close(11) = -1 EBADF (Bad file descriptor) [pid 325] close(12) = -1 EBADF (Bad file descriptor) [pid 325] close(13) = -1 EBADF (Bad file descriptor) [pid 325] close(14) = -1 EBADF (Bad file descriptor) [pid 325] close(15) = -1 EBADF (Bad file descriptor) [pid 325] close(16) = -1 EBADF (Bad file descriptor) [pid 325] close(17) = -1 EBADF (Bad file descriptor) [pid 325] close(18) = -1 EBADF (Bad file descriptor) [pid 325] close(19) = -1 EBADF (Bad file descriptor) [pid 325] close(20) = -1 EBADF (Bad file descriptor) [pid 325] close(21) = -1 EBADF (Bad file descriptor) [pid 325] close(22) = -1 EBADF (Bad file descriptor) [pid 325] close(23) = -1 EBADF (Bad file descriptor) [pid 325] close(24) = -1 EBADF (Bad file descriptor) [pid 325] close(25) = -1 EBADF (Bad file descriptor) [pid 325] close(26) = -1 EBADF (Bad file descriptor) [pid 325] close(27) = -1 EBADF (Bad file descriptor) [pid 325] close(28) = -1 EBADF (Bad file descriptor) [pid 325] close(29) = -1 EBADF (Bad file descriptor) [pid 325] exit_group(0) = ? [pid 328] +++ exited with 0 +++ [pid 325] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 304] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 6 [ 26.503141][ T328] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 26.510955][ T328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.518766][ T328] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 26.526577][ T328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 26.534388][ T328] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 26.542215][ T328] [ 26.546771][ T327] CPU: 0 PID: 327 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 ./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x5555560b46a0, 24) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 330] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 330] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 330] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[7]}, 88) = 7 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 331] write(3, "67", 2) = 2 [ 26.556855][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 26.567122][ T327] Call Trace: [ 26.570233][ T327] [ 26.573012][ T327] dump_stack_lvl+0x151/0x1b7 [ 26.577527][ T327] ? io_uring_drop_tctx_refs+0x190/0x190 [ 26.582470][ T331] FAULT_INJECTION: forcing a failure. [ 26.582470][ T331] name failslab, interval 1, probability 0, space 0, times 0 [ 26.582987][ T327] dump_stack+0x15/0x17 [ 26.583015][ T327] should_fail+0x3c6/0x510 [pid 331] clone(child_stack=NULL, flags=0 [pid 330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 26.583041][ T327] __should_failslab+0xa4/0xe0 [ 26.608248][ T327] ? anon_vma_fork+0xf7/0x4e0 [ 26.612757][ T327] should_failslab+0x9/0x20 [ 26.617095][ T327] slab_pre_alloc_hook+0x37/0xd0 [ 26.621874][ T327] ? anon_vma_fork+0xf7/0x4e0 [ 26.626381][ T327] kmem_cache_alloc+0x44/0x200 [ 26.630986][ T327] anon_vma_fork+0xf7/0x4e0 [ 26.635324][ T327] ? anon_vma_name+0x43/0x70 [ 26.639749][ T327] ? vm_area_dup+0x17a/0x230 [ 26.644177][ T327] copy_mm+0xa3a/0x13e0 [ 26.648180][ T327] ? copy_signal+0x610/0x610 [ 26.652594][ T327] ? __init_rwsem+0xd6/0x1c0 [ 26.657022][ T327] ? copy_signal+0x4e3/0x610 [ 26.661449][ T327] copy_process+0x12bc/0x3260 [ 26.665972][ T327] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.670909][ T327] ? __kasan_check_write+0x14/0x20 [ 26.675861][ T327] kernel_clone+0x21e/0x9e0 [ 26.680206][ T327] ? _raw_spin_unlock_irq+0x4e/0x70 [ 26.685230][ T327] ? create_io_thread+0x1e0/0x1e0 [ 26.690089][ T327] __x64_sys_clone+0x23f/0x290 [ 26.694690][ T327] ? __do_sys_vfork+0x130/0x130 [ 26.699379][ T327] ? __kasan_check_read+0x11/0x20 [ 26.704246][ T327] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 26.710054][ T327] do_syscall_64+0x3d/0xb0 [ 26.714307][ T327] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.720036][ T327] RIP: 0033:0x7f25db3d0399 [ 26.724293][ T327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.743732][ T327] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.751971][ T327] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 26.759467][ T336] FAULT_INJECTION: forcing a failure. [ 26.759467][ T336] name failslab, interval 1, probability 0, space 0, times 0 [ 26.759782][ T327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.759799][ T327] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 26.759813][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 26.795730][ T327] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 26.803544][ T327] [pid 324] <... set_robust_list resumed>) = 0 [pid 323] <... set_robust_list resumed>) = 0 [pid 322] +++ exited with 0 +++ [pid 313] +++ exited with 0 +++ [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 324] <... prctl resumed>) = 0 [pid 323] <... prctl resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 324] setpgid(0, 0 [pid 323] setpgid(0, 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 324] <... setpgid resumed>) = 0 [pid 323] <... setpgid resumed>) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 324] <... openat resumed>) = 3 [pid 323] <... openat resumed>) = 3 [pid 307] <... restart_syscall resumed>) = 0 [pid 324] write(3, "1000", 4 [pid 323] write(3, "1000", 4 [pid 324] <... write resumed>) = 4 [pid 323] <... write resumed>) = 4 [pid 324] close(3 [pid 323] close(3 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 324] <... close resumed>) = 0 [pid 323] <... close resumed>) = 0 [pid 324] read(200, [pid 323] read(200, [pid 307] <... clone resumed>, child_tidptr=0x5555560b4690) = 4 [pid 324] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 323] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 324] read(200, [pid 323] read(200, [pid 324] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 323] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 324] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] read(200, [pid 324] <... futex resumed>) = 0 [pid 323] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 324] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 323] read(200, [pid 324] <... rt_sigaction resumed>NULL, 8) = 0 [pid 323] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 323] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 323] <... futex resumed>) = 0 [pid 324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 323] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 324] <... mmap resumed>) = 0x7f25db370000 [pid 323] <... rt_sigaction resumed>NULL, 8) = 0 [pid 324] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 324] <... mprotect resumed>) = 0 [pid 323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 324] rt_sigprocmask(SIG_BLOCK, ~[], [pid 323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 324] <... rt_sigprocmask resumed>[], 8) = 0 [pid 323] <... mmap resumed>) = 0x7f25db370000 [pid 324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 323] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 324] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 323] rt_sigprocmask(SIG_BLOCK, ~[], [pid 324] rt_sigprocmask(SIG_SETMASK, [], [pid 323] <... rt_sigprocmask resumed>[], 8) = 0 [pid 324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 324] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 323] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6 [pid 324] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 323] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 323] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] close(3) = 0 [pid 315] close(4) = -1 EBADF (Bad file descriptor) [pid 315] close(5) = -1 EBADF (Bad file descriptor) [pid 315] close(6) = -1 EBADF (Bad file descriptor) [pid 315] close(7) = -1 EBADF (Bad file descriptor) [pid 315] close(8) = -1 EBADF (Bad file descriptor) [pid 315] close(9) = -1 EBADF (Bad file descriptor) [pid 315] close(10) = -1 EBADF (Bad file descriptor) [pid 315] close(11) = -1 EBADF (Bad file descriptor) [pid 315] close(12) = -1 EBADF (Bad file descriptor) [pid 315] close(13) = -1 EBADF (Bad file descriptor) [pid 315] close(14) = -1 EBADF (Bad file descriptor) [pid 315] close(15) = -1 EBADF (Bad file descriptor) [pid 315] close(16) = -1 EBADF (Bad file descriptor) [pid 315] close(17) = -1 EBADF (Bad file descriptor) [pid 315] close(18) = -1 EBADF (Bad file descriptor) [pid 315] close(19) = -1 EBADF (Bad file descriptor) [pid 315] close(20) = -1 EBADF (Bad file descriptor) [pid 315] close(21) = -1 EBADF (Bad file descriptor) [pid 315] close(22) = -1 EBADF (Bad file descriptor) [pid 315] close(23) = -1 EBADF (Bad file descriptor) [pid 315] close(24) = -1 EBADF (Bad file descriptor) [pid 315] close(25) = -1 EBADF (Bad file descriptor) [pid 315] close(26) = -1 EBADF (Bad file descriptor) [pid 315] close(27) = -1 EBADF (Bad file descriptor) [pid 315] close(28) = -1 EBADF (Bad file descriptor) [pid 315] close(29) = -1 EBADF (Bad file descriptor) [pid 315] exit_group(0) = ? [pid 319] +++ exited with 0 +++ [pid 315] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=21} --- [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 4 [pid 324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 324] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 323] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 323] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x5555560b46a0, 24) = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 335] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 335] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 335] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 335] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[5]}, 88) = 5 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 335] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 336] write(3, "67", 2) = 2 [pid 336] clone(child_stack=NULL, flags=0 [pid 335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 26.806402][ T336] CPU: 1 PID: 336 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 26.816470][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 26.826365][ T336] Call Trace: [ 26.829487][ T336] [ 26.832265][ T336] dump_stack_lvl+0x151/0x1b7 [ 26.836780][ T336] ? io_uring_drop_tctx_refs+0x190/0x190 [ 26.842246][ T336] dump_stack+0x15/0x17 [ 26.846239][ T336] should_fail+0x3c6/0x510 [ 26.850496][ T336] __should_failslab+0xa4/0xe0 [ 26.855094][ T336] ? anon_vma_clone+0x9a/0x500 [ 26.859691][ T336] should_failslab+0x9/0x20 [ 26.864031][ T336] slab_pre_alloc_hook+0x37/0xd0 [ 26.868802][ T336] ? anon_vma_clone+0x9a/0x500 [ 26.873404][ T336] kmem_cache_alloc+0x44/0x200 [ 26.878004][ T336] anon_vma_clone+0x9a/0x500 [ 26.882434][ T336] anon_vma_fork+0x91/0x4e0 [ 26.886768][ T336] ? anon_vma_name+0x43/0x70 [ 26.891201][ T336] ? vm_area_dup+0x17a/0x230 [ 26.895626][ T336] copy_mm+0xa3a/0x13e0 [ 26.899621][ T336] ? copy_signal+0x610/0x610 [ 26.904043][ T336] ? __init_rwsem+0xd6/0x1c0 [ 26.908491][ T336] ? copy_signal+0x4e3/0x610 [ 26.912900][ T336] copy_process+0x12bc/0x3260 [ 26.917413][ T336] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.922401][ T336] ? __kasan_check_write+0x14/0x20 [ 26.927307][ T336] kernel_clone+0x21e/0x9e0 [ 26.931643][ T336] ? _raw_spin_unlock_irq+0x4e/0x70 [ 26.936676][ T336] ? create_io_thread+0x1e0/0x1e0 [ 26.941545][ T336] __x64_sys_clone+0x23f/0x290 [ 26.946142][ T336] ? __do_sys_vfork+0x130/0x130 [ 26.950822][ T336] ? __kasan_check_read+0x11/0x20 ./strace-static-x86_64: Process 334 attached ./strace-static-x86_64: Process 333 attached ./strace-static-x86_64: Process 332 attached [pid 334] set_robust_list(0x7f25db3909a0, 24 [pid 333] set_robust_list(0x7f25db3909a0, 24 [pid 332] set_robust_list(0x5555560b46a0, 24 [pid 334] <... set_robust_list resumed>) = 0 [pid 333] <... set_robust_list resumed>) = 0 [pid 332] <... set_robust_list resumed>) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [], [pid 333] rt_sigprocmask(SIG_SETMASK, [], [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 332] <... prctl resumed>) = 0 [pid 334] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 333] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 332] setpgid(0, 0 [pid 334] <... openat resumed>) = 3 [pid 333] <... openat resumed>) = 3 [pid 332] <... setpgid resumed>) = 0 [pid 334] write(3, "67", 2 [pid 333] write(3, "67", 2 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 334] <... write resumed>) = 2 [pid 333] <... write resumed>) = 2 [pid 332] <... openat resumed>) = 3 [pid 334] clone(child_stack=NULL, flags=0 [pid 333] clone(child_stack=NULL, flags=0 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 332] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 332] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 332] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [ 26.955683][ T336] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 26.961502][ T336] do_syscall_64+0x3d/0xb0 [ 26.965753][ T336] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.971481][ T336] RIP: 0033:0x7f25db3d0399 [ 26.975738][ T336] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.995181][ T336] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [pid 332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[5]}, 88) = 5 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 27.003432][ T336] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 27.011390][ T336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.019202][ T336] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 27.027005][ T336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 27.034842][ T336] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 27.042639][ T336] [ 27.045501][ T331] CPU: 0 PID: 331 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 27.050515][ T337] FAULT_INJECTION: forcing a failure. [ 27.050515][ T337] name failslab, interval 1, probability 0, space 0, times 0 [ 27.055566][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 27.055581][ T331] Call Trace: [ 27.055587][ T331] [ 27.055594][ T331] dump_stack_lvl+0x151/0x1b7 [ 27.055623][ T331] ? io_uring_drop_tctx_refs+0x190/0x190 [ 27.055645][ T331] ? avc_denied+0x1b0/0x1b0 [ 27.098190][ T331] dump_stack+0x15/0x17 [ 27.102175][ T331] should_fail+0x3c6/0x510 [ 27.106425][ T331] __should_failslab+0xa4/0xe0 [ 27.111025][ T331] ? vm_area_dup+0x26/0x230 [ 27.115362][ T331] should_failslab+0x9/0x20 [ 27.119703][ T331] slab_pre_alloc_hook+0x37/0xd0 [ 27.124476][ T331] ? vm_area_dup+0x26/0x230 [ 27.128812][ T331] kmem_cache_alloc+0x44/0x200 [ 27.133421][ T331] vm_area_dup+0x26/0x230 [ 27.137584][ T331] copy_mm+0x9a1/0x13e0 [ 27.141583][ T331] ? copy_signal+0x610/0x610 [ 27.145997][ T331] ? __init_rwsem+0xd6/0x1c0 [ 27.150475][ T331] ? copy_signal+0x4e3/0x610 [ 27.154858][ T331] copy_process+0x12bc/0x3260 [pid 332] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 338 attached ./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x7f25db3909a0, 24 [pid 336] <... clone resumed>) = 6 [pid 337] <... set_robust_list resumed>) = 0 [pid 336] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] rt_sigprocmask(SIG_SETMASK, [], [pid 336] <... futex resumed>) = 0 [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 336] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 337] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 337] write(3, "67", 2 [pid 335] close(3 [pid 337] <... write resumed>) = 2 [pid 335] <... close resumed>) = 0 [pid 337] clone(child_stack=NULL, flags=0 [pid 335] close(4) = -1 EBADF (Bad file descriptor) [pid 335] close(5) = -1 EBADF (Bad file descriptor) [pid 335] close(6) = -1 EBADF (Bad file descriptor) [pid 335] close(7) = -1 EBADF (Bad file descriptor) [pid 335] close(8) = -1 EBADF (Bad file descriptor) [pid 335] close(9) = -1 EBADF (Bad file descriptor) [pid 335] close(10) = -1 EBADF (Bad file descriptor) [pid 335] close(11) = -1 EBADF (Bad file descriptor) [pid 335] close(12) = -1 EBADF (Bad file descriptor) [pid 335] close(13) = -1 EBADF (Bad file descriptor) [pid 335] close(14) = -1 EBADF (Bad file descriptor) [pid 335] close(15) = -1 EBADF (Bad file descriptor) [pid 335] close(16) = -1 EBADF (Bad file descriptor) [pid 335] close(17) = -1 EBADF (Bad file descriptor) [pid 335] close(18) = -1 EBADF (Bad file descriptor) [pid 335] close(19) = -1 EBADF (Bad file descriptor) [pid 335] close(20) = -1 EBADF (Bad file descriptor) [pid 335] close(21) = -1 EBADF (Bad file descriptor) [pid 335] close(22) = -1 EBADF (Bad file descriptor) [pid 335] close(23) = -1 EBADF (Bad file descriptor) [pid 335] close(24) = -1 EBADF (Bad file descriptor) [pid 335] close(25) = -1 EBADF (Bad file descriptor) [pid 335] close(26) = -1 EBADF (Bad file descriptor) [pid 335] close(27) = -1 EBADF (Bad file descriptor) [pid 335] close(28) = -1 EBADF (Bad file descriptor) [pid 335] close(29) = -1 EBADF (Bad file descriptor) [pid 335] exit_group(0 [pid 336] <... futex resumed>) = ? [pid 335] <... exit_group resumed>) = ? [pid 336] +++ exited with 0 +++ [pid 335] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 7 [pid 327] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 327] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 327] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] close(3) = 0 [pid 326] close(4) = -1 EBADF (Bad file descriptor) [pid 326] close(5) = -1 EBADF (Bad file descriptor) [pid 326] close(6) = -1 EBADF (Bad file descriptor) [pid 326] close(7) = -1 EBADF (Bad file descriptor) [pid 326] close(8) = -1 EBADF (Bad file descriptor) [pid 326] close(9) = -1 EBADF (Bad file descriptor) [pid 326] close(10) = -1 EBADF (Bad file descriptor) [pid 326] close(11) = -1 EBADF (Bad file descriptor) [pid 326] close(12) = -1 EBADF (Bad file descriptor) [pid 326] close(13) = -1 EBADF (Bad file descriptor) [pid 326] close(14) = -1 EBADF (Bad file descriptor) [pid 326] close(15) = -1 EBADF (Bad file descriptor) [pid 326] close(16) = -1 EBADF (Bad file descriptor) [pid 326] close(17) = -1 EBADF (Bad file descriptor) [pid 326] close(18) = -1 EBADF (Bad file descriptor) [pid 326] close(19) = -1 EBADF (Bad file descriptor) [pid 326] close(20) = -1 EBADF (Bad file descriptor) [pid 326] close(21) = -1 EBADF (Bad file descriptor) [pid 326] close(22) = -1 EBADF (Bad file descriptor) [pid 326] close(23) = -1 EBADF (Bad file descriptor) [pid 326] close(24) = -1 EBADF (Bad file descriptor) [pid 326] close(25) = -1 EBADF (Bad file descriptor) [pid 326] close(26) = -1 EBADF (Bad file descriptor) [pid 326] close(27) = -1 EBADF (Bad file descriptor) [pid 326] close(28) = -1 EBADF (Bad file descriptor) [pid 326] close(29) = -1 EBADF (Bad file descriptor) [pid 326] exit_group(0 [pid 327] <... futex resumed>) = ? [pid 326] <... exit_group resumed>) = ? [pid 327] +++ exited with 0 +++ [pid 326] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=11} --- [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555560b4690) = 6 [ 27.159373][ T331] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 27.164321][ T331] ? __kasan_check_write+0x14/0x20 [ 27.169267][ T331] kernel_clone+0x21e/0x9e0 [ 27.173611][ T331] ? _raw_spin_unlock_irq+0x4e/0x70 [ 27.178638][ T331] ? create_io_thread+0x1e0/0x1e0 [ 27.183501][ T331] __x64_sys_clone+0x23f/0x290 [ 27.188098][ T331] ? __do_sys_vfork+0x130/0x130 [ 27.192792][ T331] ? __kasan_check_read+0x11/0x20 [ 27.197651][ T331] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 27.203471][ T331] do_syscall_64+0x3d/0xb0 [pid 338] exit(0) = ? [ 27.207712][ T331] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.213555][ T331] RIP: 0033:0x7f25db3d0399 [ 27.218072][ T331] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 27.221610][ T334] FAULT_INJECTION: forcing a failure. [ 27.221610][ T334] name failslab, interval 1, probability 0, space 0, times 0 [ 27.239818][ T331] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 27.239851][ T331] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 27.239866][ T331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.239878][ T331] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 27.239891][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 27.293335][ T331] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 27.301153][ T331] [ 27.304274][ T337] CPU: 1 PID: 337 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 27.314430][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 27.324320][ T337] Call Trace: [ 27.327445][ T337] [ 27.330572][ T337] dump_stack_lvl+0x151/0x1b7 [ 27.335083][ T337] ? io_uring_drop_tctx_refs+0x190/0x190 [ 27.340552][ T337] dump_stack+0x15/0x17 [ 27.344590][ T337] should_fail+0x3c6/0x510 [ 27.348813][ T337] __should_failslab+0xa4/0xe0 [ 27.353528][ T337] ? anon_vma_fork+0x1df/0x4e0 [ 27.358218][ T337] should_failslab+0x9/0x20 [ 27.362579][ T337] slab_pre_alloc_hook+0x37/0xd0 [ 27.367689][ T337] ? anon_vma_fork+0x1df/0x4e0 [ 27.372269][ T337] kmem_cache_alloc+0x44/0x200 [ 27.376872][ T337] anon_vma_fork+0x1df/0x4e0 [ 27.381391][ T337] copy_mm+0xa3a/0x13e0 [ 27.385465][ T337] ? copy_signal+0x610/0x610 [ 27.390035][ T337] ? __init_rwsem+0xd6/0x1c0 [ 27.394455][ T337] ? copy_signal+0x4e3/0x610 [ 27.398887][ T337] copy_process+0x12bc/0x3260 [ 27.403415][ T337] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 27.408343][ T337] ? __kasan_check_write+0x14/0x20 [ 27.413548][ T337] kernel_clone+0x21e/0x9e0 [ 27.417911][ T337] ? _raw_spin_unlock_irq+0x4e/0x70 [ 27.422919][ T337] ? create_io_thread+0x1e0/0x1e0 [ 27.427801][ T337] __x64_sys_clone+0x23f/0x290 [ 27.432381][ T337] ? __do_sys_vfork+0x130/0x130 [ 27.437068][ T337] ? __kasan_check_read+0x11/0x20 [ 27.441932][ T337] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 27.447831][ T337] do_syscall_64+0x3d/0xb0 [ 27.452080][ T337] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.457810][ T337] RIP: 0033:0x7f25db3d0399 [ 27.462066][ T337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 27.481503][ T337] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 27.489751][ T337] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 27.497560][ T337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 ./strace-static-x86_64: Process 340 attached ./strace-static-x86_64: Process 339 attached [pid 332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 331] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 337] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 337] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] set_robust_list(0x5555560b46a0, 24) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 340] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 340] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 340] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 340] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[7]}, 88) = 7 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 341] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 341] write(3, "67", 2) = 2 [pid 341] clone(child_stack=NULL, flags=0 [pid 339] set_robust_list(0x5555560b46a0, 24) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 339] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 339] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 339] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[8]}, 88) = 8 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 339] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] close(3) = 0 [pid 332] close(4) = -1 EBADF (Bad file descriptor) [ 27.506026][ T337] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 27.513805][ T337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 27.521608][ T337] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 27.529428][ T337] [ 27.532843][ T334] CPU: 0 PID: 334 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 27.543722][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 27.553977][ T334] Call Trace: [ 27.557100][ T334] [pid 332] close(5) = -1 EBADF (Bad file descriptor) [pid 332] close(6) = -1 EBADF (Bad file descriptor) [pid 332] close(7) = -1 EBADF (Bad file descriptor) [pid 332] close(8) = -1 EBADF (Bad file descriptor) [pid 332] close(9) = -1 EBADF (Bad file descriptor) [pid 332] close(10) = -1 EBADF (Bad file descriptor) [pid 332] close(11) = -1 EBADF (Bad file descriptor) [pid 332] close(12) = -1 EBADF (Bad file descriptor) [pid 332] close(13) = -1 EBADF (Bad file descriptor) [pid 332] close(14) = -1 EBADF (Bad file descriptor) [pid 332] close(15) = -1 EBADF (Bad file descriptor) [pid 332] close(16) = -1 EBADF (Bad file descriptor) [pid 332] close(17) = -1 EBADF (Bad file descriptor) [pid 332] close(18) = -1 EBADF (Bad file descriptor) [pid 332] close(19) = -1 EBADF (Bad file descriptor) [pid 332] close(20) = -1 EBADF (Bad file descriptor) [pid 332] close(21) = -1 EBADF (Bad file descriptor) [pid 332] close(22) = -1 EBADF (Bad file descriptor) [pid 332] close(23) = -1 EBADF (Bad file descriptor) [pid 332] close(24) = -1 EBADF (Bad file descriptor) [pid 332] close(25) = -1 EBADF (Bad file descriptor) [pid 332] close(26) = -1 EBADF (Bad file descriptor) [pid 332] close(27) = -1 EBADF (Bad file descriptor) [pid 332] close(28) = -1 EBADF (Bad file descriptor) [pid 332] close(29) = -1 EBADF (Bad file descriptor) [pid 332] exit_group(0 [pid 337] <... futex resumed>) = ? [pid 332] <... exit_group resumed>) = ? [pid 337] +++ exited with 0 +++ [pid 331] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 331] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 330] close(3 [pid 342] rt_sigprocmask(SIG_SETMASK, [], [pid 330] <... close resumed>) = 0 [pid 342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 330] close(4 [pid 342] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... openat resumed>) = 3 [pid 330] close(5 [pid 342] write(3, "67", 2 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... write resumed>) = 2 [pid 330] close(6 [pid 342] clone(child_stack=NULL, flags=0 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(7) = -1 EBADF (Bad file descriptor) [pid 330] close(8) = -1 EBADF (Bad file descriptor) [pid 330] close(9) = -1 EBADF (Bad file descriptor) [pid 330] close(10) = -1 EBADF (Bad file descriptor) [pid 330] close(11) = -1 EBADF (Bad file descriptor) [pid 330] close(12) = -1 EBADF (Bad file descriptor) [pid 330] close(13) = -1 EBADF (Bad file descriptor) [ 27.559860][ T334] dump_stack_lvl+0x151/0x1b7 [ 27.564381][ T334] ? io_uring_drop_tctx_refs+0x190/0x190 [ 27.569844][ T334] dump_stack+0x15/0x17 [ 27.573925][ T334] should_fail+0x3c6/0x510 [ 27.578176][ T334] __should_failslab+0xa4/0xe0 [ 27.582776][ T334] ? anon_vma_clone+0x9a/0x500 [ 27.587376][ T334] should_failslab+0x9/0x20 [ 27.591714][ T334] slab_pre_alloc_hook+0x37/0xd0 [ 27.596748][ T334] ? anon_vma_clone+0x9a/0x500 [ 27.601344][ T334] kmem_cache_alloc+0x44/0x200 [ 27.606145][ T334] anon_vma_clone+0x9a/0x500 [ 27.610665][ T334] anon_vma_fork+0x91/0x4e0 [ 27.614975][ T334] ? anon_vma_name+0x4c/0x70 [ 27.619401][ T334] ? vm_area_dup+0x17a/0x230 [ 27.624013][ T334] copy_mm+0xa3a/0x13e0 [ 27.628102][ T334] ? copy_signal+0x610/0x610 [ 27.632524][ T334] ? __init_rwsem+0xd6/0x1c0 [ 27.636946][ T334] ? copy_signal+0x4e3/0x610 [ 27.641374][ T334] copy_process+0x12bc/0x3260 [ 27.645895][ T334] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 27.651048][ T334] ? __kasan_check_write+0x14/0x20 [ 27.655995][ T334] kernel_clone+0x21e/0x9e0 [ 27.660592][ T334] ? _raw_spin_unlock_irq+0x4e/0x70 [ 27.665717][ T334] ? create_io_thread+0x1e0/0x1e0 [ 27.671013][ T334] __x64_sys_clone+0x23f/0x290 [ 27.676466][ T334] ? __do_sys_vfork+0x130/0x130 [ 27.681161][ T334] ? __kasan_check_read+0x11/0x20 [ 27.686019][ T334] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 27.691832][ T334] do_syscall_64+0x3d/0xb0 [ 27.696173][ T334] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.702066][ T334] RIP: 0033:0x7f25db3d0399 [ 27.706320][ T334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 27.725855][ T334] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 27.734229][ T334] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 27.742643][ T334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.750538][ T334] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [pid 330] close(14) = -1 EBADF (Bad file descriptor) [pid 330] close(15) = -1 EBADF (Bad file descriptor) [pid 330] close(16) = -1 EBADF (Bad file descriptor) [pid 330] close(17) = -1 EBADF (Bad file descriptor) [pid 330] close(18) = -1 EBADF (Bad file descriptor) [pid 330] close(19) = -1 EBADF (Bad file descriptor) [pid 330] close(20) = -1 EBADF (Bad file descriptor) [pid 330] close(21) = -1 EBADF (Bad file descriptor) [pid 330] close(22) = -1 EBADF (Bad file descriptor) [pid 330] close(23) = -1 EBADF (Bad file descriptor) [pid 330] close(24) = -1 EBADF (Bad file descriptor) [pid 330] close(25) = -1 EBADF (Bad file descriptor) [pid 330] close(26) = -1 EBADF (Bad file descriptor) [pid 330] close(27) = -1 EBADF (Bad file descriptor) [pid 330] close(28) = -1 EBADF (Bad file descriptor) [pid 330] close(29) = -1 EBADF (Bad file descriptor) [pid 330] exit_group(0 [pid 331] <... futex resumed>) = ? [pid 330] <... exit_group resumed>) = ? [pid 331] +++ exited with 0 +++ [pid 340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 339] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 27.758355][ T334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 27.766554][ T334] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 27.774477][ T334] [ 27.780529][ T333] FAULT_INJECTION: forcing a failure. [ 27.780529][ T333] name failslab, interval 1, probability 0, space 0, times 0 [ 27.793215][ T333] CPU: 0 PID: 333 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 27.803275][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 27.813166][ T333] Call Trace: [ 27.816293][ T333] [ 27.819073][ T333] dump_stack_lvl+0x151/0x1b7 [ 27.823584][ T333] ? io_uring_drop_tctx_refs+0x190/0x190 [ 27.829058][ T333] dump_stack+0x15/0x17 [ 27.833055][ T333] should_fail+0x3c6/0x510 [ 27.837301][ T333] __should_failslab+0xa4/0xe0 [ 27.841898][ T333] ? anon_vma_clone+0x9a/0x500 [ 27.846496][ T333] should_failslab+0x9/0x20 [ 27.850836][ T333] slab_pre_alloc_hook+0x37/0xd0 [ 27.855614][ T333] ? anon_vma_clone+0x9a/0x500 [ 27.860211][ T333] kmem_cache_alloc+0x44/0x200 [ 27.864814][ T333] anon_vma_clone+0x9a/0x500 [ 27.869243][ T333] anon_vma_fork+0x91/0x4e0 [ 27.873573][ T333] ? anon_vma_name+0x4c/0x70 [ 27.878012][ T333] ? vm_area_dup+0x17a/0x230 [ 27.882433][ T333] copy_mm+0xa3a/0x13e0 [ 27.886424][ T333] ? copy_signal+0x610/0x610 [ 27.890854][ T333] ? __init_rwsem+0xd6/0x1c0 [ 27.895278][ T333] ? copy_signal+0x4e3/0x610 [ 27.899877][ T333] copy_process+0x12bc/0x3260 [ 27.904391][ T333] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 27.909337][ T333] ? __kasan_check_write+0x14/0x20 [ 27.914280][ T333] kernel_clone+0x21e/0x9e0 [ 27.918620][ T333] ? _raw_spin_unlock_irq+0x4e/0x70 [ 27.923649][ T333] ? create_io_thread+0x1e0/0x1e0 [ 27.928512][ T333] __x64_sys_clone+0x23f/0x290 [ 27.933114][ T333] ? __do_sys_vfork+0x130/0x130 [ 27.937809][ T333] ? __kasan_check_read+0x11/0x20 [ 27.942671][ T333] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 27.948472][ T333] do_syscall_64+0x3d/0xb0 [ 27.952784][ T333] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.958456][ T333] RIP: 0033:0x7f25db3d0399 [ 27.962710][ T333] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 27.982152][ T333] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 27.990392][ T333] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 27.998222][ T333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.006016][ T333] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [pid 333] <... clone resumed>) = 6 [pid 333] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] close(3) = 0 [pid 324] close(4) = -1 EBADF (Bad file descriptor) [pid 324] close(5) = -1 EBADF (Bad file descriptor) [pid 324] close(6) = -1 EBADF (Bad file descriptor) [pid 324] close(7) = -1 EBADF (Bad file descriptor) [pid 324] close(8) = -1 EBADF (Bad file descriptor) [pid 324] close(9) = -1 EBADF (Bad file descriptor) [pid 324] close(10) = -1 EBADF (Bad file descriptor) [pid 324] close(11) = -1 EBADF (Bad file descriptor) [pid 324] close(12) = -1 EBADF (Bad file descriptor) [pid 324] close(13) = -1 EBADF (Bad file descriptor) [pid 324] close(14) = -1 EBADF (Bad file descriptor) [pid 324] close(15) = -1 EBADF (Bad file descriptor) [pid 324] close(16) = -1 EBADF (Bad file descriptor) [pid 324] close(17) = -1 EBADF (Bad file descriptor) [pid 324] close(18) = -1 EBADF (Bad file descriptor) [pid 324] close(19) = -1 EBADF (Bad file descriptor) [pid 324] close(20) = -1 EBADF (Bad file descriptor) [pid 324] close(21) = -1 EBADF (Bad file descriptor) [pid 324] close(22) = -1 EBADF (Bad file descriptor) [pid 324] close(23) = -1 EBADF (Bad file descriptor) [pid 324] close(24) = -1 EBADF (Bad file descriptor) [pid 324] close(25) = -1 EBADF (Bad file descriptor) [pid 324] close(26) = -1 EBADF (Bad file descriptor) [pid 324] close(27) = -1 EBADF (Bad file descriptor) [pid 324] close(28) = -1 EBADF (Bad file descriptor) [pid 324] close(29) = -1 EBADF (Bad file descriptor) [pid 324] exit_group(0 [pid 333] <... futex resumed>) = ? [pid 324] <... exit_group resumed>) = ? [pid 333] +++ exited with 0 +++ [pid 324] +++ exited with 0 +++ ./strace-static-x86_64: Process 344 attached [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 332] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=14} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] <... restart_syscall resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... clone resumed>, child_tidptr=0x5555560b4690) = 6 [pid 305] <... clone resumed>, child_tidptr=0x5555560b4690) = 7 [ 28.013833][ T333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 28.021639][ T333] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 28.029456][ T333] [ 28.032799][ T341] FAULT_INJECTION: forcing a failure. [ 28.032799][ T341] name failslab, interval 1, probability 0, space 0, times 0 [ 28.043170][ T342] FAULT_INJECTION: forcing a failure. [ 28.043170][ T342] name failslab, interval 1, probability 0, space 0, times 0 [ 28.045469][ T341] CPU: 1 PID: 341 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 28.067787][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 28.077765][ T341] Call Trace: [ 28.080891][ T341] [ 28.083668][ T341] dump_stack_lvl+0x151/0x1b7 [ 28.088183][ T341] ? io_uring_drop_tctx_refs+0x190/0x190 [ 28.093652][ T341] ? rwsem_wake+0x12e/0x220 [ 28.097989][ T341] dump_stack+0x15/0x17 [ 28.101979][ T341] should_fail+0x3c6/0x510 [ 28.106235][ T341] __should_failslab+0xa4/0xe0 [ 28.110833][ T341] ? anon_vma_fork+0xf7/0x4e0 [ 28.115349][ T341] should_failslab+0x9/0x20 [ 28.119687][ T341] slab_pre_alloc_hook+0x37/0xd0 [ 28.124459][ T341] ? anon_vma_fork+0xf7/0x4e0 [ 28.128971][ T341] kmem_cache_alloc+0x44/0x200 [ 28.133576][ T341] anon_vma_fork+0xf7/0x4e0 [ 28.137913][ T341] ? anon_vma_name+0x4c/0x70 [ 28.142339][ T341] ? vm_area_dup+0x17a/0x230 [ 28.146765][ T341] copy_mm+0xa3a/0x13e0 [ 28.150760][ T341] ? copy_signal+0x610/0x610 [ 28.155193][ T341] ? __init_rwsem+0xd6/0x1c0 [ 28.159626][ T341] ? copy_signal+0x4e3/0x610 [ 28.164036][ T341] copy_process+0x12bc/0x3260 [ 28.168553][ T341] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 28.173499][ T341] ? __kasan_check_write+0x14/0x20 [ 28.178456][ T341] kernel_clone+0x21e/0x9e0 [ 28.182785][ T341] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.187817][ T341] ? create_io_thread+0x1e0/0x1e0 [ 28.192684][ T341] __x64_sys_clone+0x23f/0x290 [ 28.197298][ T341] ? __do_sys_vfork+0x130/0x130 [ 28.201969][ T341] ? __kasan_check_read+0x11/0x20 [ 28.206827][ T341] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 28.212646][ T341] do_syscall_64+0x3d/0xb0 [ 28.216896][ T341] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.222621][ T341] RIP: 0033:0x7f25db3d0399 [ 28.226965][ T341] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 28.246408][ T341] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 28.254649][ T341] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 ./strace-static-x86_64: Process 346 attached ./strace-static-x86_64: Process 345 attached [pid 346] set_robust_list(0x5555560b46a0, 24 [pid 345] set_robust_list(0x5555560b46a0, 24 [pid 344] exit(0 [pid 346] <... set_robust_list resumed>) = 0 [pid 345] <... set_robust_list resumed>) = 0 [pid 344] <... exit resumed>) = ? [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 346] <... prctl resumed>) = 0 [pid 345] <... prctl resumed>) = 0 [pid 346] setpgid(0, 0 [pid 345] setpgid(0, 0) = 0 [pid 346] <... setpgid resumed>) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 28.262460][ T341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.270271][ T341] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 28.278082][ T341] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 28.285894][ T341] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 28.293709][ T341] [ 28.300392][ T342] CPU: 1 PID: 342 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 28.310474][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 28.320365][ T342] Call Trace: [ 28.323494][ T342] [ 28.326266][ T342] dump_stack_lvl+0x151/0x1b7 [ 28.330789][ T342] ? io_uring_drop_tctx_refs+0x190/0x190 [ 28.336245][ T342] dump_stack+0x15/0x17 [ 28.340407][ T342] should_fail+0x3c6/0x510 [ 28.344770][ T342] __should_failslab+0xa4/0xe0 [ 28.349377][ T342] ? anon_vma_clone+0x9a/0x500 [ 28.353974][ T342] should_failslab+0x9/0x20 [ 28.358368][ T342] slab_pre_alloc_hook+0x37/0xd0 [ 28.363083][ T342] ? anon_vma_clone+0x9a/0x500 [ 28.367826][ T342] kmem_cache_alloc+0x44/0x200 [ 28.372407][ T342] anon_vma_clone+0x9a/0x500 [ 28.376837][ T342] anon_vma_fork+0x91/0x4e0 [ 28.381174][ T342] ? anon_vma_name+0x4c/0x70 [ 28.385600][ T342] ? vm_area_dup+0x17a/0x230 [ 28.390026][ T342] copy_mm+0xa3a/0x13e0 [ 28.394021][ T342] ? copy_signal+0x610/0x610 [ 28.398444][ T342] ? __init_rwsem+0xd6/0x1c0 [ 28.402870][ T342] ? copy_signal+0x4e3/0x610 [ 28.407310][ T342] copy_process+0x12bc/0x3260 [ 28.411826][ T342] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 28.416765][ T342] ? __kasan_check_write+0x14/0x20 [ 28.421705][ T342] kernel_clone+0x21e/0x9e0 [ 28.426051][ T342] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.431080][ T342] ? create_io_thread+0x1e0/0x1e0 [ 28.435942][ T342] __x64_sys_clone+0x23f/0x290 [ 28.440537][ T342] ? __do_sys_vfork+0x130/0x130 [ 28.445225][ T342] ? __kasan_check_read+0x11/0x20 [ 28.450091][ T342] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 28.455900][ T342] do_syscall_64+0x3d/0xb0 [ 28.460155][ T342] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.466025][ T342] RIP: 0033:0x7f25db3d0399 [ 28.470256][ T342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 28.489870][ T342] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 28.498353][ T342] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 28.506155][ T342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 346] <... openat resumed>) = 3 [pid 345] <... openat resumed>) = 3 [pid 342] <... clone resumed>) = 9 [pid 330] +++ exited with 0 +++ [pid 338] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 345] write(3, "1000", 4 [pid 344] +++ exited with 0 +++ [pid 341] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 346] write(3, "1000", 4 [pid 334] <... clone resumed>) = 7 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=29} --- [pid 346] <... write resumed>) = 4 [pid 345] <... write resumed>) = 4 [pid 341] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 346] close(3 [pid 345] close(3 [pid 341] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 0 [pid 345] <... close resumed>) = 0 [pid 334] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 346] <... close resumed>) = 0 [pid 341] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 346] read(200, [pid 345] read(200, [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 340] close(3 [pid 323] close(3 [pid 346] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 345] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... close resumed>) = 0 [pid 323] <... close resumed>) = 0 ./strace-static-x86_64: Process 348 attached ./strace-static-x86_64: Process 349 attached [pid 345] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] close(4 [pid 323] close(4 [pid 346] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... clone resumed>, child_tidptr=0x5555560b4690) = 8 ./strace-static-x86_64: Process 347 attached [pid 345] <... futex resumed>) = 0 [pid 342] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] set_robust_list(0x5555560b46a0, 24 [pid 346] <... futex resumed>) = 0 [pid 345] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 340] close(5 [pid 323] close(5 [pid 349] <... set_robust_list resumed>) = 0 [pid 346] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 345] <... rt_sigaction resumed>NULL, 8) = 0 [pid 342] <... futex resumed>) = 0 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] <... rt_sigaction resumed>NULL, 8) = 0 [pid 345] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 342] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] close(6 [pid 323] close(6 [pid 349] setpgid(0, 0 [pid 346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(3 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... setpgid resumed>) = 0 [pid 346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 345] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 340] close(7 [pid 339] <... close resumed>) = 0 [pid 323] close(7 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 345] <... mmap resumed>) = 0x7f25db370000 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(4 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... openat resumed>) = 3 [pid 345] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 340] close(8 [pid 346] <... mmap resumed>) = 0x7f25db370000 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(8 [pid 349] write(3, "1000", 4 [pid 346] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 345] <... mprotect resumed>) = 0 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(5 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... write resumed>) = 4 [pid 346] <... mprotect resumed>) = 0 [pid 349] close(3 [pid 346] rt_sigprocmask(SIG_BLOCK, ~[], [pid 345] rt_sigprocmask(SIG_BLOCK, ~[], [pid 340] close(9 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(9 [pid 349] <... close resumed>) = 0 [pid 346] <... rt_sigprocmask resumed>[], 8) = 0 [pid 345] <... rt_sigprocmask resumed>[], 8) = 0 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(6 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] read(200, [pid 346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 345] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 340] close(10 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(10 [pid 349] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(7./strace-static-x86_64: Process 350 attached ./strace-static-x86_64: Process 351 attached [pid 349] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 345] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 340] close(11 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(11 [pid 349] <... futex resumed>) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], [pid 345] rt_sigprocmask(SIG_SETMASK, [], [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(8 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] set_robust_list(0x7f25db3909a0, 24 [pid 351] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 350] <... set_robust_list resumed>) = 0 [pid 349] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 340] close(12 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(12 [pid 351] rt_sigprocmask(SIG_SETMASK, [], [pid 349] <... rt_sigaction resumed>NULL, 8) = 0 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 345] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 339] close(9 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], [pid 351] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 349] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 346] <... futex resumed>) = 0 [pid 345] <... futex resumed>) = 0 [pid 340] close(13 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(13 [pid 350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 350] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 346] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(10 [pid 351] <... openat resumed>) = 3 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 340] close(14 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(14 [pid 349] <... mmap resumed>) = 0x7f25db370000 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(11 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 340] close(15 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(15 [pid 349] <... mprotect resumed>) = 0 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(12 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] write(3, "67", 2 [pid 349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 340] close(16 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(16 [pid 351] <... write resumed>) = 2 [pid 349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(13 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] clone(child_stack=NULL, flags=0 [pid 350] <... openat resumed>) = 3 [pid 349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 340] close(17 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 28.513972][ T342] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 28.521774][ T342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 28.529587][ T342] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 28.537417][ T342] [pid 323] close(17 [pid 350] write(3, "67", 2 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(14 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... write resumed>) = 2 [pid 349] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9 [pid 340] close(18 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(18 [pid 350] clone(child_stack=NULL, flags=0 [pid 349] rt_sigprocmask(SIG_SETMASK, [], [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(15 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 352 attached [pid 349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 340] close(19 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(19 [pid 349] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(16 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... futex resumed>) = 0 [pid 340] close(20 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(20 [pid 349] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(17 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(21 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(21 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(18 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(22 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(22 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(19 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(23 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(23 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(20 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(24 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(24 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(21 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(25 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(25 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(22 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(26 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(26 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(23 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(27 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(27 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(24 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(28 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(28 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(25 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(29 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] close(29 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(26 [pid 323] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] exit_group(0 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 323] exit_group(0 [pid 341] <... futex resumed>) = ? [pid 340] <... exit_group resumed>) = ? [pid 339] close(27 [pid 334] <... futex resumed>) = ? [pid 323] <... exit_group resumed>) = ? [pid 341] +++ exited with 0 +++ [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] +++ exited with 0 +++ [pid 339] close(28) = -1 EBADF (Bad file descriptor) [pid 339] close(29) = -1 EBADF (Bad file descriptor) [pid 339] exit_group(0 [pid 342] <... futex resumed>) = ? [pid 339] <... exit_group resumed>) = ? [pid 342] +++ exited with 0 +++ [pid 346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 345] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 28.558843][ T351] FAULT_INJECTION: forcing a failure. [ 28.558843][ T351] name failslab, interval 1, probability 0, space 0, times 0 [ 28.563698][ T350] FAULT_INJECTION: forcing a failure. [ 28.563698][ T350] name failslab, interval 1, probability 0, space 0, times 0 [ 28.571839][ T351] CPU: 0 PID: 351 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 28.593745][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 28.603638][ T351] Call Trace: [pid 349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 352] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 352] write(3, "67", 2) = 2 [ 28.606760][ T351] [ 28.609537][ T351] dump_stack_lvl+0x151/0x1b7 [ 28.614058][ T351] ? io_uring_drop_tctx_refs+0x190/0x190 [ 28.619519][ T351] dump_stack+0x15/0x17 [ 28.623518][ T351] should_fail+0x3c6/0x510 [ 28.627765][ T351] __should_failslab+0xa4/0xe0 [ 28.632364][ T351] ? anon_vma_clone+0x9a/0x500 [ 28.636982][ T351] should_failslab+0x9/0x20 [ 28.641306][ T351] slab_pre_alloc_hook+0x37/0xd0 [ 28.646084][ T351] ? anon_vma_clone+0x9a/0x500 [ 28.650676][ T351] kmem_cache_alloc+0x44/0x200 [pid 352] clone(child_stack=NULL, flags=0 [pid 348] exit(0) = ? [pid 347] exit(0) = ? [ 28.655282][ T351] anon_vma_clone+0x9a/0x500 [ 28.659707][ T351] anon_vma_fork+0x91/0x4e0 [ 28.664177][ T351] ? anon_vma_name+0x4c/0x70 [ 28.668585][ T351] ? vm_area_dup+0x17a/0x230 [ 28.673014][ T351] copy_mm+0xa3a/0x13e0 [ 28.677010][ T351] ? copy_signal+0x610/0x610 [ 28.681447][ T351] ? __init_rwsem+0xd6/0x1c0 [ 28.685869][ T351] ? copy_signal+0x4e3/0x610 [ 28.690290][ T351] copy_process+0x12bc/0x3260 [ 28.694805][ T351] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 28.699746][ T351] ? __kasan_check_write+0x14/0x20 [ 28.704696][ T351] kernel_clone+0x21e/0x9e0 [ 28.709038][ T351] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.714071][ T351] ? create_io_thread+0x1e0/0x1e0 [ 28.719019][ T351] __x64_sys_clone+0x23f/0x290 [ 28.723614][ T351] ? __do_sys_vfork+0x130/0x130 [ 28.728305][ T351] ? __kasan_check_read+0x11/0x20 [ 28.733172][ T351] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 28.738977][ T351] do_syscall_64+0x3d/0xb0 [ 28.743240][ T351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.748960][ T351] RIP: 0033:0x7f25db3d0399 [ 28.753222][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 28.772779][ T351] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 28.781018][ T351] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 28.788830][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.796643][ T351] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 28.804453][ T351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 28.812263][ T351] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 28.820080][ T351] [ 28.822943][ T350] CPU: 1 PID: 350 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 28.833011][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 28.833376][ T352] FAULT_INJECTION: forcing a failure. [ 28.833376][ T352] name failslab, interval 1, probability 0, space 0, times 0 [ 28.842997][ T350] Call Trace: ./strace-static-x86_64: Process 354 attached [pid 340] +++ exited with 0 +++ [pid 339] +++ exited with 0 +++ [pid 323] +++ exited with 0 +++ [pid 351] <... clone resumed>) = 9 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 351] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 345] close(3) = 0 [pid 345] close(4) = -1 EBADF (Bad file descriptor) [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 345] close(5) = -1 EBADF (Bad file descriptor) [pid 303] <... clone resumed>, child_tidptr=0x5555560b4690) = 8 [pid 345] close(6) = -1 EBADF (Bad file descriptor) [pid 345] close(7) = -1 EBADF (Bad file descriptor) [pid 345] close(8) = -1 EBADF (Bad file descriptor) [pid 345] close(9) = -1 EBADF (Bad file descriptor) [pid 345] close(10) = -1 EBADF (Bad file descriptor) [pid 345] close(11) = -1 EBADF (Bad file descriptor) [pid 345] close(12) = -1 EBADF (Bad file descriptor) [pid 345] close(13) = -1 EBADF (Bad file descriptor) [pid 345] close(14) = -1 EBADF (Bad file descriptor) [pid 345] close(15) = -1 EBADF (Bad file descriptor) [pid 345] close(16) = -1 EBADF (Bad file descriptor) [pid 345] close(17) = -1 EBADF (Bad file descriptor) [pid 345] close(18) = -1 EBADF (Bad file descriptor) [pid 345] close(19) = -1 EBADF (Bad file descriptor) [pid 345] close(20) = -1 EBADF (Bad file descriptor) [pid 345] close(21) = -1 EBADF (Bad file descriptor) [pid 345] close(22) = -1 EBADF (Bad file descriptor) [pid 345] close(23) = -1 EBADF (Bad file descriptor) [pid 345] close(24) = -1 EBADF (Bad file descriptor) [pid 345] close(25) = -1 EBADF (Bad file descriptor) [pid 345] close(26) = -1 EBADF (Bad file descriptor) [pid 345] close(27) = -1 EBADF (Bad file descriptor) [pid 345] close(28) = -1 EBADF (Bad file descriptor) [pid 345] close(29) = -1 EBADF (Bad file descriptor) [pid 345] exit_group(0 [pid 351] <... futex resumed>) = ? [pid 345] <... exit_group resumed>) = ? [pid 351] +++ exited with 0 +++ [pid 345] +++ exited with 0 +++ [pid 348] +++ exited with 0 +++ [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 347] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... restart_syscall resumed>) = 0 [pid 305] <... restart_syscall resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x5555560b4690) = 8 [pid 306] <... clone resumed>, child_tidptr=0x5555560b4690) = 10 [pid 305] <... clone resumed>, child_tidptr=0x5555560b4690) = 10 [ 28.843005][ T350] [ 28.843012][ T350] dump_stack_lvl+0x151/0x1b7 [ 28.865835][ T350] ? io_uring_drop_tctx_refs+0x190/0x190 [ 28.871297][ T350] dump_stack+0x15/0x17 [ 28.875295][ T350] should_fail+0x3c6/0x510 [ 28.879542][ T350] __should_failslab+0xa4/0xe0 [ 28.884159][ T350] ? anon_vma_fork+0xf7/0x4e0 [ 28.888650][ T350] should_failslab+0x9/0x20 [ 28.892989][ T350] slab_pre_alloc_hook+0x37/0xd0 [ 28.897766][ T350] ? anon_vma_fork+0xf7/0x4e0 [ 28.902276][ T350] kmem_cache_alloc+0x44/0x200 ./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x5555560b46a0, 24) = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 355] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 355] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 355] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[9]}, 88) = 9 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 359] write(3, "67", 2) = 2 [ 28.906881][ T350] anon_vma_fork+0xf7/0x4e0 [ 28.911218][ T350] ? anon_vma_name+0x43/0x70 [ 28.915648][ T350] ? vm_area_dup+0x17a/0x230 [ 28.920206][ T350] copy_mm+0xa3a/0x13e0 [ 28.924198][ T350] ? copy_signal+0x610/0x610 [ 28.928624][ T350] ? __init_rwsem+0xd6/0x1c0 [ 28.933051][ T350] ? copy_signal+0x4e3/0x610 [ 28.937479][ T350] copy_process+0x12bc/0x3260 [ 28.941990][ T350] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 28.946941][ T350] ? __kasan_check_write+0x14/0x20 [ 28.950961][ T359] FAULT_INJECTION: forcing a failure. [pid 359] clone(child_stack=NULL, flags=0 [pid 354] exit(0) = ? [pid 354] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 355] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 28.950961][ T359] name failslab, interval 1, probability 0, space 0, times 0 [ 28.951880][ T350] kernel_clone+0x21e/0x9e0 [ 28.951914][ T350] ? _raw_spin_unlock_irq+0x4e/0x70 [ 28.973665][ T350] ? create_io_thread+0x1e0/0x1e0 [ 28.978532][ T350] __x64_sys_clone+0x23f/0x290 [ 28.983147][ T350] ? __do_sys_vfork+0x130/0x130 [ 28.988050][ T350] ? __kasan_check_read+0x11/0x20 [ 28.993064][ T350] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 28.998872][ T350] do_syscall_64+0x3d/0xb0 [ 29.003119][ T350] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.008843][ T350] RIP: 0033:0x7f25db3d0399 [ 29.013106][ T350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 29.032537][ T350] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 29.040784][ T350] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 29.048596][ T350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.056407][ T350] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 29.064218][ T350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 29.072030][ T350] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 29.079847][ T350] [ 29.082710][ T352] CPU: 0 PID: 352 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 29.092782][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 29.102668][ T352] Call Trace: [ 29.105792][ T352] [ 29.108567][ T352] dump_stack_lvl+0x151/0x1b7 [ 29.113085][ T352] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.118548][ T352] dump_stack+0x15/0x17 [ 29.122539][ T352] should_fail+0x3c6/0x510 [ 29.126804][ T352] __should_failslab+0xa4/0xe0 [ 29.131398][ T352] ? anon_vma_fork+0x1df/0x4e0 [ 29.136004][ T352] should_failslab+0x9/0x20 [ 29.140336][ T352] slab_pre_alloc_hook+0x37/0xd0 [ 29.145112][ T352] ? anon_vma_fork+0x1df/0x4e0 [ 29.149704][ T352] kmem_cache_alloc+0x44/0x200 [ 29.154314][ T352] anon_vma_fork+0x1df/0x4e0 [ 29.158741][ T352] copy_mm+0xa3a/0x13e0 [ 29.162828][ T352] ? copy_signal+0x610/0x610 [ 29.167239][ T352] ? __init_rwsem+0xd6/0x1c0 [ 29.171669][ T352] ? copy_signal+0x4e3/0x610 [ 29.176099][ T352] copy_process+0x12bc/0x3260 [ 29.180609][ T352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 29.185553][ T352] ? __kasan_check_write+0x14/0x20 [ 29.190498][ T352] kernel_clone+0x21e/0x9e0 [ 29.194839][ T352] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.199871][ T352] ? create_io_thread+0x1e0/0x1e0 [ 29.204737][ T352] __x64_sys_clone+0x23f/0x290 [ 29.209331][ T352] ? __do_sys_vfork+0x130/0x130 [ 29.214022][ T352] ? __kasan_check_read+0x11/0x20 [ 29.218879][ T352] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 29.224721][ T352] do_syscall_64+0x3d/0xb0 [ 29.228969][ T352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.234676][ T352] RIP: 0033:0x7f25db3d0399 [ 29.238996][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 29.258461][ T352] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 29.266710][ T352] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 29.274514][ T352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.282326][ T352] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 29.290136][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 29.297950][ T352] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 29.305765][ T352] [ 29.309236][ T359] CPU: 1 PID: 359 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 29.319305][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 29.329199][ T359] Call Trace: [ 29.332318][ T359] [ 29.335098][ T359] dump_stack_lvl+0x151/0x1b7 [ 29.339610][ T359] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.345083][ T359] dump_stack+0x15/0x17 [ 29.349071][ T359] should_fail+0x3c6/0x510 [ 29.353324][ T359] __should_failslab+0xa4/0xe0 [ 29.357924][ T359] ? anon_vma_fork+0xf7/0x4e0 [ 29.362433][ T359] should_failslab+0x9/0x20 [ 29.366778][ T359] slab_pre_alloc_hook+0x37/0xd0 [ 29.371551][ T359] ? anon_vma_fork+0xf7/0x4e0 [ 29.376063][ T359] kmem_cache_alloc+0x44/0x200 [ 29.380666][ T359] anon_vma_fork+0xf7/0x4e0 [ 29.385005][ T359] ? anon_vma_name+0x43/0x70 [ 29.389428][ T359] ? vm_area_dup+0x17a/0x230 [ 29.393854][ T359] copy_mm+0xa3a/0x13e0 [ 29.397853][ T359] ? copy_signal+0x610/0x610 [ 29.402277][ T359] ? __init_rwsem+0xd6/0x1c0 [ 29.406711][ T359] ? copy_signal+0x4e3/0x610 [ 29.411133][ T359] copy_process+0x12bc/0x3260 [ 29.415651][ T359] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 29.420585][ T359] ? __kasan_check_write+0x14/0x20 [ 29.425538][ T359] kernel_clone+0x21e/0x9e0 [ 29.429877][ T359] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.434911][ T359] ? create_io_thread+0x1e0/0x1e0 [ 29.439777][ T359] __x64_sys_clone+0x23f/0x290 [ 29.444373][ T359] ? __do_sys_vfork+0x130/0x130 [ 29.449061][ T359] ? __kasan_check_read+0x11/0x20 [ 29.453918][ T359] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 29.459877][ T359] do_syscall_64+0x3d/0xb0 [ 29.464117][ T359] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.469847][ T359] RIP: 0033:0x7f25db3d0399 [ 29.474104][ T359] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 29.493542][ T359] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 29.501784][ T359] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 ./strace-static-x86_64: Process 357 attached ./strace-static-x86_64: Process 356 attached [pid 350] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 357] set_robust_list(0x5555560b46a0, 24 [pid 356] set_robust_list(0x5555560b46a0, 24 [pid 357] <... set_robust_list resumed>) = 0 [pid 356] <... set_robust_list resumed>) = 0 [pid 350] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 346] close(3) = 0 [pid 346] close(4) = -1 EBADF (Bad file descriptor) [pid 346] close(5) = -1 EBADF (Bad file descriptor) [pid 346] close(6 [pid 357] <... prctl resumed>) = 0 [pid 356] <... prctl resumed>) = 0 [pid 350] <... futex resumed>) = 0 ./strace-static-x86_64: Process 358 attached [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 357] setpgid(0, 0 [pid 358] set_robust_list(0x5555560b46a0, 24 [pid 356] setpgid(0, 0 [pid 346] close(7 [pid 358] <... set_robust_list resumed>) = 0 [pid 357] <... setpgid resumed>) = 0 [pid 356] <... setpgid resumed>) = 0 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 346] close(8 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 358] <... prctl resumed>) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(9) = -1 EBADF (Bad file descriptor) [pid 346] close(10) = -1 EBADF (Bad file descriptor) [pid 346] close(11 [pid 357] <... openat resumed>) = 3 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 356] <... openat resumed>) = 3 [pid 358] setpgid(0, 0 [pid 357] write(3, "1000", 4 [pid 346] close(12 [pid 358] <... setpgid resumed>) = 0 [pid 357] <... write resumed>) = 4 [pid 356] write(3, "1000", 4 [pid 352] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] <... clone resumed>) = -1 ENOMEM (Cannot allocate memory) [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 357] close(3 [pid 356] <... write resumed>) = 4 [pid 352] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] close(13) = -1 EBADF (Bad file descriptor) [pid 359] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... openat resumed>) = 3 [pid 357] <... close resumed>) = 0 [pid 356] close(3 [pid 352] <... futex resumed>) = 0 [pid 349] close(3 [pid 346] close(14) = -1 EBADF (Bad file descriptor) [pid 346] close(15) = -1 EBADF (Bad file descriptor) [pid 346] close(16) = -1 EBADF (Bad file descriptor) [pid 346] close(17) = -1 EBADF (Bad file descriptor) [pid 359] <... futex resumed>) = 0 [pid 358] write(3, "1000", 4 [pid 357] read(200, [pid 356] <... close resumed>) = 0 [pid 352] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] <... close resumed>) = 0 [pid 346] close(18 [pid 359] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] <... write resumed>) = 4 [pid 357] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 355] close(3 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(3 [pid 357] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] read(200, [pid 355] <... close resumed>) = 0 [pid 349] close(4 [pid 346] close(19 [pid 355] close(4 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = 0 [pid 357] <... futex resumed>) = 0 [pid 356] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(20 [pid 358] read(200, [pid 355] close(5 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(21 [pid 355] close(6 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(22 [pid 355] close(7 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(23 [pid 358] <... read resumed>0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 357] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 356] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] close(8 [pid 349] close(5 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... rt_sigaction resumed>NULL, 8) = 0 [pid 356] <... futex resumed>) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(24 [pid 358] <... futex resumed>) = 0 [pid 357] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 356] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 355] close(9 [pid 349] close(6 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, [pid 357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 356] <... rt_sigaction resumed>NULL, 8) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(25 [pid 358] <... rt_sigaction resumed>NULL, 8) = 0 [pid 357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 355] close(10 [pid 349] close(7 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 357] <... mmap resumed>) = 0x7f25db370000 [pid 356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(26 [pid 358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 357] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 355] close(11 [pid 349] close(8 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 357] <... mprotect resumed>) = 0 [pid 356] <... mmap resumed>) = 0x7f25db370000 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(27 [pid 358] <... mmap resumed>) = 0x7f25db370000 [pid 355] close(12 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 357] rt_sigprocmask(SIG_BLOCK, ~[], [pid 349] close(9 [pid 356] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 358] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE [pid 357] <... rt_sigprocmask resumed>[], 8) = 0 [pid 356] <... mprotect resumed>) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(28 [pid 358] <... mprotect resumed>) = 0 [pid 357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 356] rt_sigprocmask(SIG_BLOCK, ~[], [pid 355] close(13 [pid 349] close(10 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] rt_sigprocmask(SIG_BLOCK, ~[], [pid 356] <... rt_sigprocmask resumed>[], 8) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] close(29 [pid 358] <... rt_sigprocmask resumed>[], 8) = 0 [pid 357] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9 [pid 356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 355] close(14 [pid 349] close(11 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} [pid 357] rt_sigprocmask(SIG_SETMASK, [], [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 346] exit_group(0 [pid 355] close(15 [pid 346] <... exit_group resumed>) = ? [pid 357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 356] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... futex resumed>) = ? [pid 349] close(12 [pid 358] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 357] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] rt_sigprocmask(SIG_SETMASK, [], [pid 355] close(16) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] rt_sigprocmask(SIG_SETMASK, [], [pid 357] <... futex resumed>) = 0 [pid 356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 355] close(17 [pid 350] +++ exited with 0 +++ [pid 349] close(13 [pid 346] +++ exited with 0 +++ [pid 358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 357] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=18} --- [pid 358] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 355] close(18 [pid 349] close(14 [pid 358] <... futex resumed>) = 0 [pid 356] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 362 attached [pid 358] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] close(19 [pid 349] close(15 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 361 attached ./strace-static-x86_64: Process 360 attached [pid 362] set_robust_list(0x7f25db3909a0, 24 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... set_robust_list resumed>) = 0 [pid 360] set_robust_list(0x7f25db3909a0, 24 [pid 355] close(20./strace-static-x86_64: Process 363 attached [pid 362] rt_sigprocmask(SIG_SETMASK, [], [pid 360] <... set_robust_list resumed>) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(16 [pid 361] set_robust_list(0x7f25db3909a0, 24 [pid 307] <... clone resumed>, child_tidptr=0x5555560b4690) = 8 [pid 362] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 29.509732][ T359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.517705][ T359] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 29.525518][ T359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 29.533323][ T359] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 29.541139][ T359] [pid 360] rt_sigprocmask(SIG_SETMASK, [], [pid 355] close(21 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... set_robust_list resumed>) = 0 [pid 362] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(17 [pid 355] close(22 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] close(18 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 355] close(23 [pid 349] close(19 [pid 360] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... openat resumed>) = 3 [pid 361] rt_sigprocmask(SIG_SETMASK, [], [pid 355] close(24 [pid 349] close(20 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 355] close(25 [pid 349] close(21 [pid 362] write(3, "67", 2 [pid 361] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 360] <... openat resumed>) = 3 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] <... write resumed>) = 2 [pid 355] close(26 [pid 349] close(22 [pid 362] clone(child_stack=NULL, flags=0 [pid 360] write(3, "67", 2 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 355] close(27 [pid 349] close(23 [pid 360] <... write resumed>) = 2 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] set_robust_list(0x5555560b46a0, 24 [pid 355] close(28 [pid 360] clone(child_stack=NULL, flags=0 [pid 349] close(24 [pid 361] <... openat resumed>) = 3 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 355] close(29 [pid 349] close(25 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] write(3, "67", 2 [pid 355] exit_group(0 [pid 349] close(26 [pid 363] <... set_robust_list resumed>) = 0 [pid 361] <... write resumed>) = 2 [pid 359] <... futex resumed>) = ? [pid 355] <... exit_group resumed>) = ? [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 359] +++ exited with 0 +++ [pid 363] <... prctl resumed>) = 0 [pid 363] setpgid(0, 0) = 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 363] write(3, "1000", 4) = 4 [pid 363] close(3) = 0 [pid 363] read(200, 0x7fffe2d83da0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 363] rt_sigaction(SIGRT_1, {sa_handler=0x7f25db3f7fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f25db3e9620}, NULL, 8) = 0 [pid 363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f25db370000 [pid 363] mprotect(0x7f25db371000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f25db390990, parent_tid=0x7f25db390990, exit_signal=0, stack=0x7f25db370000, stack_size=0x20300, tls=0x7f25db3906c0} => {parent_tid=[9]}, 88) = 9 [pid 363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 363] futex(0x7f25db45a3c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 363] futex(0x7f25db45a3cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x7f25db3909a0, 24) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 364] write(3, "67", 2) = 2 [pid 364] clone(child_stack=NULL, flags=0 [pid 361] clone(child_stack=NULL, flags=0 [ 29.567448][ T362] FAULT_INJECTION: forcing a failure. [ 29.567448][ T362] name failslab, interval 1, probability 0, space 0, times 0 [ 29.571324][ T360] FAULT_INJECTION: forcing a failure. [ 29.571324][ T360] name failslab, interval 1, probability 0, space 0, times 0 [ 29.580647][ T362] CPU: 0 PID: 362 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 29.593233][ T364] general protection fault, probably for non-canonical address 0xe3ba437d20000001: 0000 [#1] PREEMPT SMP KASAN [ 29.602437][ T362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 29.613979][ T364] KASAN: maybe wild-memory-access in range [0x1dd23be900000008-0x1dd23be90000000f] [ 29.623874][ T362] Call Trace: [ 29.623882][ T362] [ 29.632985][ T364] CPU: 1 PID: 364 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 29.636113][ T362] dump_stack_lvl+0x151/0x1b7 [ 29.638890][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 29.648960][ T362] ? io_uring_drop_tctx_refs+0x190/0x190 [ 29.653470][ T364] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 29.663366][ T362] dump_stack+0x15/0x17 [ 29.668835][ T364] Code: 00 74 08 4c 89 ef e8 7e b8 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 50 b8 2b ff 48 89 d8 48 8b 1b 4c [ 29.674648][ T362] should_fail+0x3c6/0x510 [ 29.678648][ T364] RSP: 0018:ffffc90000bf78f8 EFLAGS: 00010202 [ 29.698183][ T362] __should_failslab+0xa4/0xe0 [ 29.702430][ T364] [ 29.702437][ T364] RAX: 1dd23be900000000 RBX: 1dd23be900000008 RCX: dffffc0000000000 [ 29.708328][ T362] ? anon_vma_clone+0x9a/0x500 [ 29.712942][ T364] RDX: ffffffff81a4c130 RSI: ffff8881091a9aa8 RDI: ffff8881085f7870 [ 29.715104][ T362] should_failslab+0x9/0x20 [ 29.722912][ T364] RBP: ffffc90000bf7960 R08: dffffc0000000000 R09: ffff8881085f7878 [ 29.727515][ T362] slab_pre_alloc_hook+0x37/0xd0 [ 29.735327][ T364] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 29.739663][ T362] ? anon_vma_clone+0x9a/0x500 [ 29.747476][ T364] R13: ffff88811dd393cc R14: 03ba477d20000001 R15: ffff88811e81dd10 [ 29.752249][ T362] kmem_cache_alloc+0x44/0x200 [ 29.760064][ T364] FS: 00007f25db3906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 29.764662][ T362] anon_vma_clone+0x9a/0x500 [ 29.772471][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.777076][ T362] anon_vma_fork+0x91/0x4e0 [ 29.785837][ T364] CR2: 00007f25db43ca94 CR3: 000000011f754000 CR4: 00000000003506a0 [ 29.790293][ T362] ? anon_vma_name+0x4c/0x70 [ 29.796691][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.801162][ T362] ? vm_area_dup+0x17a/0x230 [ 29.809245][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.813669][ T362] copy_mm+0xa3a/0x13e0 [ 29.821477][ T364] Call Trace: [ 29.821486][ T364] [ 29.825906][ T362] ? copy_signal+0x610/0x610 [ 29.833716][ T364] ? __die_body+0x62/0xb0 [ 29.837707][ T362] ? __init_rwsem+0xd6/0x1c0 [ 29.840832][ T364] ? die_addr+0x9f/0xd0 [ 29.843607][ T362] ? copy_signal+0x4e3/0x610 [ 29.848036][ T364] ? exc_general_protection+0x311/0x4b0 [ 29.852200][ T362] copy_process+0x12bc/0x3260 [ 29.856635][ T364] ? asm_exc_general_protection+0x27/0x30 [ 29.860627][ T362] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 29.865051][ T364] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 29.870447][ T362] ? __kasan_check_write+0x14/0x20 [ 29.874952][ T364] ? __rb_insert_augmented+0x91/0x610 [ 29.880498][ T362] kernel_clone+0x21e/0x9e0 [ 29.885455][ T364] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 29.891703][ T362] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.896643][ T364] vma_interval_tree_insert_after+0x2be/0x2d0 [ 29.901855][ T362] ? create_io_thread+0x1e0/0x1e0 [ 29.906276][ T364] copy_mm+0xba2/0x13e0 [ 29.912532][ T362] __x64_sys_clone+0x23f/0x290 [ 29.917560][ T364] ? copy_signal+0x610/0x610 [ 29.923457][ T362] ? __do_sys_vfork+0x130/0x130 [ 29.928319][ T364] ? __init_rwsem+0xd6/0x1c0 [ 29.932319][ T362] ? __kasan_check_read+0x11/0x20 [ 29.936913][ T364] ? copy_signal+0x4e3/0x610 [ 29.941338][ T362] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 29.946024][ T364] copy_process+0x12bc/0x3260 [ 29.950453][ T362] do_syscall_64+0x3d/0xb0 [ 29.955320][ T364] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 29.959738][ T362] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.965557][ T364] ? __kasan_check_write+0x14/0x20 [ 29.970067][ T362] RIP: 0033:0x7f25db3d0399 [ 29.974321][ T364] kernel_clone+0x21e/0x9e0 [ 29.979268][ T362] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 29.984998][ T364] ? _raw_spin_unlock_irq+0x4e/0x70 [ 29.989950][ T362] RSP: 002b:00007f25db390208 EFLAGS: 00000246 [ 29.994207][ T364] ? create_io_thread+0x1e0/0x1e0 [ 29.998539][ T362] ORIG_RAX: 0000000000000038 [ 30.017980][ T364] __x64_sys_clone+0x23f/0x290 [ 30.023009][ T362] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 30.028915][ T364] ? __do_sys_vfork+0x130/0x130 [ 30.033769][ T362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.038288][ T364] ? __kasan_check_read+0x11/0x20 [ 30.042884][ T362] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 30.050708][ T364] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 30.055391][ T362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 30.063195][ T364] do_syscall_64+0x3d/0xb0 [ 30.068054][ T362] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 30.075872][ T364] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.081687][ T362] [ 30.089493][ T364] RIP: 0033:0x7f25db3d0399 [ 30.095008][ T360] CPU: 0 PID: 360 Comm: syz-executor371 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 30.101625][ T364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 30.107285][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 30.110147][ T364] RSP: 002b:00007f25db390208 EFLAGS: 00000246 [ 30.114401][ T360] Call Trace: [ 30.114409][ T360] [ 30.124470][ T364] ORIG_RAX: 0000000000000038 [ 30.143914][ T360] dump_stack_lvl+0x151/0x1b7 [ 30.153806][ T364] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 30.159717][ T360] ? io_uring_drop_tctx_refs+0x190/0x190 [ 30.162835][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.165611][ T360] dump_stack+0x15/0x17 [ 30.170121][ T364] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 30.174638][ T360] should_fail+0x3c6/0x510 [ 30.182462][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 30.187917][ T360] __should_failslab+0xa4/0xe0 [ 30.195724][ T364] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 30.199719][ T360] ? anon_vma_fork+0x1df/0x4e0 [ 30.207534][ T364] [ 30.211782][ T360] should_failslab+0x9/0x20 [ 30.219596][ T364] Modules linked in: [ 30.224207][ T360] slab_pre_alloc_hook+0x37/0xd0 [ 30.252327][ T360] ? anon_vma_fork+0x1df/0x4e0 [ 30.256980][ T360] kmem_cache_alloc+0x44/0x200 [ 30.261518][ T360] anon_vma_fork+0x1df/0x4e0 [ 30.265950][ T360] copy_mm+0xa3a/0x13e0 [ 30.269940][ T360] ? copy_signal+0x610/0x610 [ 30.274361][ T360] ? __init_rwsem+0xd6/0x1c0 [ 30.278790][ T360] ? copy_signal+0x4e3/0x610 [ 30.283219][ T360] copy_process+0x12bc/0x3260 [ 30.287733][ T360] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 30.292676][ T360] ? __kasan_check_write+0x14/0x20 [ 30.297627][ T360] kernel_clone+0x21e/0x9e0 [ 30.301964][ T360] ? _raw_spin_unlock_irq+0x4e/0x70 [ 30.307006][ T360] ? create_io_thread+0x1e0/0x1e0 [ 30.311860][ T360] __x64_sys_clone+0x23f/0x290 [ 30.316457][ T360] ? __do_sys_vfork+0x130/0x130 [ 30.321147][ T360] ? __kasan_check_read+0x11/0x20 [ 30.326014][ T360] ? syscall_enter_from_user_mode+0x70/0x1b0 [ 30.331819][ T360] do_syscall_64+0x3d/0xb0 [ 30.336080][ T360] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.341908][ T360] RIP: 0033:0x7f25db3d0399 [ 30.346167][ T360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [pid 349] close(27./strace-static-x86_64: Process 365 attached [pid 355] +++ exited with 0 +++ [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 362] <... clone resumed>) = 12 [pid 358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 357] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 356] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 349] close(28 [pid 362] futex(0x7f25db45a3cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] close(3 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 358] <... close resumed>) = 0 [pid 358] close(4) = -1 EBADF (Bad file descriptor) [pid 358] close(5) = -1 EBADF (Bad file descriptor) [ 30.365862][ T360] RSP: 002b:00007f25db390208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 30.374107][ T360] RAX: ffffffffffffffda RBX: 00007f25db45a3c8 RCX: 00007f25db3d0399 [ 30.382016][ T360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.389818][ T360] RBP: 00007f25db45a3c0 R08: 0000000000000000 R09: 0000000000003736 [ 30.397800][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25db45a3cc [ 30.405700][ T360] R13: 00007f25db390210 R14: 0000000000000002 R15: 00007f25db42701d [ 30.413601][ T360] [pid 358] close(6) = -1 EBADF (Bad file descriptor) [pid 358] close(7) = -1 EBADF (Bad file descriptor) [pid 358] close(8) = -1 EBADF (Bad file descriptor) [pid 358] close(9) = -1 EBADF (Bad file descriptor) [pid 362] <... futex resumed>) = 0 [pid 358] close(10 [pid 349] close(29 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] futex(0x7f25db45a3c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 358] close(11 [pid 349] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(12) = -1 EBADF (Bad file descriptor) [pid 358] close(13) = -1 EBADF (Bad file descriptor) [pid 358] close(14) = -1 EBADF (Bad file descriptor) [pid 358] close(15) = -1 EBADF (Bad file descriptor) [pid 358] close(16) = -1 EBADF (Bad file descriptor) [pid 358] close(17) = -1 EBADF (Bad file descriptor) [pid 358] close(18) = -1 EBADF (Bad file descriptor) [pid 358] close(19) = -1 EBADF (Bad file descriptor) [pid 358] close(20) = -1 EBADF (Bad file descriptor) [pid 358] close(21) = -1 EBADF (Bad file descriptor) [pid 358] close(22) = -1 EBADF (Bad file descriptor) [pid 358] close(23) = -1 EBADF (Bad file descriptor) [pid 358] close(24) = -1 EBADF (Bad file descriptor) [pid 358] close(25) = -1 EBADF (Bad file descriptor) [pid 358] close(26) = -1 EBADF (Bad file descriptor) [pid 358] close(27) = -1 EBADF (Bad file descriptor) [pid 358] close(28) = -1 EBADF (Bad file descriptor) [pid 358] close(29 [pid 349] exit_group(0 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] exit_group(0 [pid 362] <... futex resumed>) = ? [pid 358] <... exit_group resumed>) = ? [pid 362] +++ exited with 0 +++ [pid 352] <... futex resumed>) = ? [pid 349] <... exit_group resumed>) = ? [ 30.417871][ T364] ---[ end trace 1e558f1be26f5242 ]--- [ 30.424030][ T364] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 30.430319][ T364] Code: 00 74 08 4c 89 ef e8 7e b8 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 50 b8 2b ff 48 89 d8 48 8b 1b 4c [ 30.449996][ T364] RSP: 0018:ffffc90000bf78f8 EFLAGS: 00010202 [ 30.456077][ T364] RAX: 1dd23be900000000 RBX: 1dd23be900000008 RCX: dffffc0000000000 [ 30.464107][ T364] RDX: ffffffff81a4c130 RSI: ffff8881091a9aa8 RDI: ffff8881085f7870 [ 30.472212][ T364] RBP: ffffc90000bf7960 R08: dffffc0000000000 R09: ffff8881085f7878 [ 30.480022][ T364] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 30.487999][ T364] R13: ffff88811dd393cc R14: 03ba477d20000001 R15: ffff88811e81dd10 [ 30.495899][ T364] FS: 00007f25db3906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.505058][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.511730][ T364] CR2: 00007f25db45c370 CR3: 000000011f754000 CR4: 00000000003506b0 [ 30.519654][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.527701][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.535710][ T364] Kernel panic - not syncing: Fatal exception [ 30.541901][ T364] Kernel Offset: disabled [ 30.546050][ T364] Rebooting in 86400 seconds..