./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor997987817 <...> forked to background, child pid 3189 no interfaces have a carrier [ 26.475187][ T3190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.485941][ T3190] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. execve("./syz-executor997987817", ["./syz-executor997987817"], 0x7ffe555527a0 /* 10 vars */) = 0 brk(NULL) = 0x555555cbb000 brk(0x555555cbbc40) = 0x555555cbbc40 arch_prctl(ARCH_SET_FS, 0x555555cbb300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555555cbb5d0) = 3617 set_robust_list(0x555555cbb5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fac495d8df0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fac495d94c0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fac495d8e90, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fac495d94c0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor997987817", 4096) = 27 brk(0x555555cdcc40) = 0x555555cdcc40 brk(0x555555cdd000) = 0x555555cdd000 mprotect(0x7fac4969a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3618 attached , child_tidptr=0x555555cbb5d0) = 3618 [pid 3618] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3618] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3618] setsid() = 1 [pid 3618] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3618] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3618] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3618] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3618] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3618] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3618] unshare(CLONE_NEWNS) = 0 [pid 3618] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3618] unshare(CLONE_NEWIPC) = 0 [pid 3618] unshare(CLONE_NEWCGROUP) = 0 [pid 3618] unshare(CLONE_NEWUTS) = 0 [pid 3618] unshare(CLONE_SYSVSEM) = 0 [pid 3618] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "16777216", 8) = 8 [pid 3618] close(3) = 0 [pid 3618] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "536870912", 9) = 9 [pid 3618] close(3) = 0 [pid 3618] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "1024", 4) = 4 [pid 3618] close(3) = 0 [pid 3618] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "8192", 4) = 4 [pid 3618] close(3) = 0 [pid 3618] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "1024", 4) = 4 [pid 3618] close(3) = 0 [pid 3618] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "1024", 4) = 4 [pid 3618] close(3) = 0 [pid 3618] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3618] close(3) = 0 [pid 3618] getpid() = 1 [pid 3618] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 3620] set_robust_list(0x7fac495c89e0, 24) = 0 [pid 3620] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 3 [pid 3620] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3619] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] <... futex resumed>) = 1 [pid 3620] ioctl(3, TUNSETIFF, 0x20000200) = 0 [pid 3620] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3619] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] <... futex resumed>) = 1 [pid 3620] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3620] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3619] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] <... futex resumed>) = 1 [pid 3620] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 5 [pid 3620] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3619] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] <... futex resumed>) = 1 [pid 3620] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0", ifr_ifindex=12}) = 0 [pid 3620] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3619] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] <... futex resumed>) = 1 [pid 3620] ioctl(3, TUNSETQUEUE, 0x20000340) = 0 [pid 3620] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3619] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] <... futex resumed>) = 1 [pid 3620] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 52 [pid 3620] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3619] <... futex resumed>) = 0 [pid 3620] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3619] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3619] <... futex resumed>) = 0 [pid 3620] ioctl(3, TUNSETIFF, 0x20000200 [pid 3619] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] <... ioctl resumed>) = 0 [pid 3620] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3619] <... futex resumed>) = 0 [pid 3620] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL syzkaller login: [ 49.106500][ T3620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3619] close(3) = 0 [pid 3619] close(4) = 0 [pid 3619] close(5) = 0 [pid 3619] close(6) = -1 EBADF (Bad file descriptor) [pid 3619] close(7) = -1 EBADF (Bad file descriptor) [pid 3619] close(8) = -1 EBADF (Bad file descriptor) [pid 3619] close(9) = -1 EBADF (Bad file descriptor) [pid 3619] close(10) = -1 EBADF (Bad file descriptor) [pid 3619] close(11) = -1 EBADF (Bad file descriptor) [pid 3619] close(12) = -1 EBADF (Bad file descriptor) [pid 3619] close(13) = -1 EBADF (Bad file descriptor) [pid 3619] close(14) = -1 EBADF (Bad file descriptor) [pid 3619] close(15) = -1 EBADF (Bad file descriptor) [pid 3619] close(16) = -1 EBADF (Bad file descriptor) [pid 3619] close(17) = -1 EBADF (Bad file descriptor) [pid 3619] close(18) = -1 EBADF (Bad file descriptor) [pid 3619] close(19) = -1 EBADF (Bad file descriptor) [pid 3619] close(20) = -1 EBADF (Bad file descriptor) [pid 3619] close(21) = -1 EBADF (Bad file descriptor) [pid 3619] close(22) = -1 EBADF (Bad file descriptor) [pid 3619] close(23) = -1 EBADF (Bad file descriptor) [pid 3619] close(24) = -1 EBADF (Bad file descriptor) [pid 3619] close(25) = -1 EBADF (Bad file descriptor) [pid 3619] close(26) = -1 EBADF (Bad file descriptor) [pid 3619] close(27) = -1 EBADF (Bad file descriptor) [pid 3619] close(28) = -1 EBADF (Bad file descriptor) [pid 3619] close(29) = -1 EBADF (Bad file descriptor) [pid 3619] exit_group(0 [pid 3620] <... futex resumed>) = ? [pid 3619] <... exit_group resumed>) = ? [pid 3620] +++ exited with 0 +++ [pid 3619] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 3618] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cbb5d0) = 4 ./strace-static-x86_64: Process 3621 attached [pid 3621] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3621] setpgid(0, 0) = 0 [pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3621] write(3, "1000", 4) = 4 [pid 3621] close(3) = 0 [pid 3621] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 3621] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 3621] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3621] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3621] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3621] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 5 [pid 3621] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3622 attached [pid 3622] set_robust_list(0x7fac495c89e0, 24) = 0 [pid 3622] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 3 [pid 3622] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... futex resumed>) = 1 [pid 3622] ioctl(3, TUNSETIFF, 0x20000200) = 0 [pid 3622] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... socket resumed>) = 4 [pid 3622] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] <... futex resumed>) = 0 [pid 3622] <... futex resumed>) = 1 [pid 3621] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL) [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... socket resumed>) = 5 [pid 3622] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0", ifr_ifindex=14}) = 0 [pid 3622] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] <... futex resumed>) = 0 [pid 3622] <... futex resumed>) = 1 [pid 3621] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] ioctl(3, TUNSETQUEUE, 0x20000340 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... ioctl resumed>) = 0 [pid 3622] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3622] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3622] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... sendmsg resumed>) = 52 [pid 3622] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3622] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... futex resumed>) = 0 [pid 3622] ioctl(3, TUNSETIFF, 0x20000200) = 0 [pid 3622] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3622] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 49.246487][ T3622] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3621] close(3) = 0 [pid 3621] close(4) = 0 [pid 3621] close(5) = 0 [pid 3621] close(6) = -1 EBADF (Bad file descriptor) [pid 3621] close(7) = -1 EBADF (Bad file descriptor) [pid 3621] close(8) = -1 EBADF (Bad file descriptor) [pid 3621] close(9) = -1 EBADF (Bad file descriptor) [pid 3621] close(10) = -1 EBADF (Bad file descriptor) [pid 3621] close(11) = -1 EBADF (Bad file descriptor) [pid 3621] close(12) = -1 EBADF (Bad file descriptor) [pid 3621] close(13) = -1 EBADF (Bad file descriptor) [pid 3621] close(14) = -1 EBADF (Bad file descriptor) [pid 3621] close(15) = -1 EBADF (Bad file descriptor) [pid 3621] close(16) = -1 EBADF (Bad file descriptor) [pid 3621] close(17) = -1 EBADF (Bad file descriptor) [pid 3621] close(18) = -1 EBADF (Bad file descriptor) [pid 3621] close(19) = -1 EBADF (Bad file descriptor) [pid 3621] close(20) = -1 EBADF (Bad file descriptor) [pid 3621] close(21) = -1 EBADF (Bad file descriptor) [pid 3621] close(22) = -1 EBADF (Bad file descriptor) [pid 3621] close(23) = -1 EBADF (Bad file descriptor) [pid 3621] close(24) = -1 EBADF (Bad file descriptor) [pid 3621] close(25) = -1 EBADF (Bad file descriptor) [pid 3621] close(26) = -1 EBADF (Bad file descriptor) [pid 3621] close(27) = -1 EBADF (Bad file descriptor) [pid 3621] close(28) = -1 EBADF (Bad file descriptor) [pid 3621] close(29) = -1 EBADF (Bad file descriptor) [pid 3621] exit_group(0 [pid 3622] <... futex resumed>) = ? [pid 3621] <... exit_group resumed>) = ? [pid 3622] +++ exited with 0 +++ [pid 3621] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cbb5d0) = 6 ./strace-static-x86_64: Process 3623 attached [pid 3623] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3623] setpgid(0, 0) = 0 [pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3623] write(3, "1000", 4) = 4 [pid 3623] close(3) = 0 [pid 3623] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 3623] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3623] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3623] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3623] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3624 attached [pid 3624] set_robust_list(0x7fac495c89e0, 24 [pid 3623] <... clone resumed>, parent_tid=[7], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 7 [pid 3624] <... set_robust_list resumed>) = 0 [pid 3623] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3624] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY [pid 3623] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... openat resumed>) = 3 [pid 3624] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] ioctl(3, TUNSETIFF, 0x20000200 [pid 3623] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... ioctl resumed>) = 0 [pid 3624] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = 0 [pid 3623] <... futex resumed>) = 1 [pid 3624] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3623] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3623] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL) [pid 3623] <... futex resumed>) = 0 [pid 3623] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... socket resumed>) = 5 [pid 3624] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3623] <... futex resumed>) = 0 [pid 3624] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0" [pid 3623] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... ioctl resumed>, ifr_ifindex=16}) = 0 [pid 3624] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] ioctl(3, TUNSETQUEUE, 0x20000340 [pid 3623] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3624] <... ioctl resumed>) = 0 [pid 3623] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3624] <... futex resumed>) = 0 [pid 3623] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3623] <... futex resumed>) = 0 [pid 3623] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... sendmsg resumed>) = 52 [ 49.379997][ T3624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3624] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3624] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] <... futex resumed>) = 0 [pid 3623] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = 0 [pid 3623] <... futex resumed>) = 1 [pid 3624] ioctl(3, TUNSETIFF, 0x20000200 [pid 3623] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... ioctl resumed>) = 0 [pid 3624] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3623] <... futex resumed>) = 0 [pid 3624] <... futex resumed>) = 1 [pid 3624] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] close(3) = 0 [pid 3623] close(4) = 0 [pid 3623] close(5) = 0 [pid 3623] close(6) = -1 EBADF (Bad file descriptor) [pid 3623] close(7) = -1 EBADF (Bad file descriptor) [pid 3623] close(8) = -1 EBADF (Bad file descriptor) [pid 3623] close(9) = -1 EBADF (Bad file descriptor) [pid 3623] close(10) = -1 EBADF (Bad file descriptor) [pid 3623] close(11) = -1 EBADF (Bad file descriptor) [pid 3623] close(12) = -1 EBADF (Bad file descriptor) [pid 3623] close(13) = -1 EBADF (Bad file descriptor) [pid 3623] close(14) = -1 EBADF (Bad file descriptor) [pid 3623] close(15) = -1 EBADF (Bad file descriptor) [pid 3623] close(16) = -1 EBADF (Bad file descriptor) [pid 3623] close(17) = -1 EBADF (Bad file descriptor) [pid 3623] close(18) = -1 EBADF (Bad file descriptor) [pid 3623] close(19) = -1 EBADF (Bad file descriptor) [pid 3623] close(20) = -1 EBADF (Bad file descriptor) [pid 3623] close(21) = -1 EBADF (Bad file descriptor) [pid 3623] close(22) = -1 EBADF (Bad file descriptor) [pid 3623] close(23) = -1 EBADF (Bad file descriptor) [pid 3623] close(24) = -1 EBADF (Bad file descriptor) [pid 3623] close(25) = -1 EBADF (Bad file descriptor) [pid 3623] close(26) = -1 EBADF (Bad file descriptor) [pid 3623] close(27) = -1 EBADF (Bad file descriptor) [pid 3623] close(28) = -1 EBADF (Bad file descriptor) [pid 3623] close(29) = -1 EBADF (Bad file descriptor) [pid 3623] exit_group(0) = ? [pid 3624] <... futex resumed>) = ? [pid 3624] +++ exited with 0 +++ [pid 3623] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3618] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cbb5d0) = 8 ./strace-static-x86_64: Process 3625 attached [pid 3625] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3625] setpgid(0, 0) = 0 [pid 3625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3625] write(3, "1000", 4) = 4 [pid 3625] close(3) = 0 [pid 3625] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3625] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3625] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3625] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[9], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 9 [pid 3625] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3626 attached [pid 3626] set_robust_list(0x7fac495c89e0, 24) = 0 [pid 3626] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 3 [pid 3626] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... futex resumed>) = 1 [pid 3626] ioctl(3, TUNSETIFF, 0x20000200) = 0 [pid 3626] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... futex resumed>) = 1 [pid 3626] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3626] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... futex resumed>) = 1 [pid 3626] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 5 [pid 3626] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... futex resumed>) = 1 [pid 3626] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0", ifr_ifindex=18}) = 0 [pid 3626] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... futex resumed>) = 1 [pid 3626] ioctl(3, TUNSETQUEUE, 0x20000340) = 0 [pid 3626] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... futex resumed>) = 0 [pid 3625] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... futex resumed>) = 1 [pid 3626] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 3626] <... sendmsg resumed>) = 52 [pid 3625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3626] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] <... futex resumed>) = 0 [pid 3625] <... futex resumed>) = 0 [pid 3626] ioctl(3, TUNSETIFF, 0x20000200 [pid 3625] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... ioctl resumed>) = 0 [pid 3626] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3625] <... futex resumed>) = 0 [pid 3626] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 49.540778][ T3626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3625] close(3) = 0 [pid 3625] close(4) = 0 [pid 3625] close(5) = 0 [pid 3625] close(6) = -1 EBADF (Bad file descriptor) [pid 3625] close(7) = -1 EBADF (Bad file descriptor) [pid 3625] close(8) = -1 EBADF (Bad file descriptor) [pid 3625] close(9) = -1 EBADF (Bad file descriptor) [pid 3625] close(10) = -1 EBADF (Bad file descriptor) [pid 3625] close(11) = -1 EBADF (Bad file descriptor) [pid 3625] close(12) = -1 EBADF (Bad file descriptor) [pid 3625] close(13) = -1 EBADF (Bad file descriptor) [pid 3625] close(14) = -1 EBADF (Bad file descriptor) [pid 3625] close(15) = -1 EBADF (Bad file descriptor) [pid 3625] close(16) = -1 EBADF (Bad file descriptor) [pid 3625] close(17) = -1 EBADF (Bad file descriptor) [pid 3625] close(18) = -1 EBADF (Bad file descriptor) [pid 3625] close(19) = -1 EBADF (Bad file descriptor) [pid 3625] close(20) = -1 EBADF (Bad file descriptor) [pid 3625] close(21) = -1 EBADF (Bad file descriptor) [pid 3625] close(22) = -1 EBADF (Bad file descriptor) [pid 3625] close(23) = -1 EBADF (Bad file descriptor) [pid 3625] close(24) = -1 EBADF (Bad file descriptor) [pid 3625] close(25) = -1 EBADF (Bad file descriptor) [pid 3625] close(26) = -1 EBADF (Bad file descriptor) [pid 3625] close(27) = -1 EBADF (Bad file descriptor) [pid 3625] close(28) = -1 EBADF (Bad file descriptor) [pid 3625] close(29) = -1 EBADF (Bad file descriptor) [pid 3625] exit_group(0 [pid 3626] <... futex resumed>) = ? [pid 3625] <... exit_group resumed>) = ? [pid 3626] +++ exited with 0 +++ [pid 3625] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3627 attached , child_tidptr=0x555555cbb5d0) = 10 [pid 3627] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3627] setpgid(0, 0) = 0 [pid 3627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3627] write(3, "1000", 4) = 4 [pid 3627] close(3) = 0 [pid 3627] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3627] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3627] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3627] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3628 attached [pid 3628] set_robust_list(0x7fac495c89e0, 24 [pid 3627] <... clone resumed>, parent_tid=[11], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 11 [pid 3628] <... set_robust_list resumed>) = 0 [pid 3627] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY [pid 3627] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] <... openat resumed>) = 3 [pid 3628] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3627] <... futex resumed>) = 0 [pid 3628] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3627] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3627] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] <... futex resumed>) = 0 [pid 3628] ioctl(3, TUNSETIFF, 0x20000200) = 0 [pid 3628] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] <... futex resumed>) = 0 [pid 3627] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3627] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] <... futex resumed>) = 1 [pid 3628] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3628] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] <... futex resumed>) = 0 [pid 3627] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3627] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] <... futex resumed>) = 1 [pid 3628] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 5 [pid 3628] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] <... futex resumed>) = 0 [pid 3627] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3627] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] <... futex resumed>) = 1 [pid 3628] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0", ifr_ifindex=20}) = 0 [pid 3628] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] <... futex resumed>) = 0 [pid 3627] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3627] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] <... futex resumed>) = 1 [pid 3628] ioctl(3, TUNSETQUEUE, 0x20000340) = 0 [pid 3628] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] <... futex resumed>) = 0 [pid 3627] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] <... futex resumed>) = 1 [pid 3627] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 52 [pid 3628] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3627] <... futex resumed>) = 0 [pid 3628] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3627] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3627] <... futex resumed>) = 0 [pid 3628] ioctl(3, TUNSETIFF, 0x20000200 [pid 3627] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] <... ioctl resumed>) = 0 [pid 3628] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3627] <... futex resumed>) = 0 [pid 3628] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 49.673713][ T3628] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3627] close(3) = 0 [pid 3627] close(4) = 0 [pid 3627] close(5) = 0 [pid 3627] close(6) = -1 EBADF (Bad file descriptor) [pid 3627] close(7) = -1 EBADF (Bad file descriptor) [pid 3627] close(8) = -1 EBADF (Bad file descriptor) [pid 3627] close(9) = -1 EBADF (Bad file descriptor) [pid 3627] close(10) = -1 EBADF (Bad file descriptor) [pid 3627] close(11) = -1 EBADF (Bad file descriptor) [pid 3627] close(12) = -1 EBADF (Bad file descriptor) [pid 3627] close(13) = -1 EBADF (Bad file descriptor) [pid 3627] close(14) = -1 EBADF (Bad file descriptor) [pid 3627] close(15) = -1 EBADF (Bad file descriptor) [pid 3627] close(16) = -1 EBADF (Bad file descriptor) [pid 3627] close(17) = -1 EBADF (Bad file descriptor) [pid 3627] close(18) = -1 EBADF (Bad file descriptor) [pid 3627] close(19) = -1 EBADF (Bad file descriptor) [pid 3627] close(20) = -1 EBADF (Bad file descriptor) [pid 3627] close(21) = -1 EBADF (Bad file descriptor) [pid 3627] close(22) = -1 EBADF (Bad file descriptor) [pid 3627] close(23) = -1 EBADF (Bad file descriptor) [pid 3627] close(24) = -1 EBADF (Bad file descriptor) [pid 3627] close(25) = -1 EBADF (Bad file descriptor) [pid 3627] close(26) = -1 EBADF (Bad file descriptor) [pid 3627] close(27) = -1 EBADF (Bad file descriptor) [pid 3627] close(28) = -1 EBADF (Bad file descriptor) [pid 3627] close(29) = -1 EBADF (Bad file descriptor) [pid 3627] exit_group(0 [pid 3628] <... futex resumed>) = ? [pid 3627] <... exit_group resumed>) = ? [pid 3628] +++ exited with 0 +++ [pid 3627] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cbb5d0) = 12 ./strace-static-x86_64: Process 3629 attached [pid 3629] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3629] setpgid(0, 0) = 0 [pid 3629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3629] write(3, "1000", 4) = 4 [pid 3629] close(3) = 0 [pid 3629] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3629] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3629] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3629] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3630 attached [pid 3630] set_robust_list(0x7fac495c89e0, 24 [pid 3629] <... clone resumed>, parent_tid=[13], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 13 [pid 3630] <... set_robust_list resumed>) = 0 [pid 3629] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3629] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3630] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 3 [pid 3630] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3629] <... futex resumed>) = 0 [pid 3629] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] ioctl(3, TUNSETIFF, 0x20000200 [pid 3629] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3630] <... ioctl resumed>) = 0 [pid 3630] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3629] <... futex resumed>) = 0 [pid 3630] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 3629] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3629] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3630] <... socket resumed>) = 4 [pid 3630] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3629] <... futex resumed>) = 0 [pid 3630] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL) [pid 3629] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] <... socket resumed>) = 5 [pid 3629] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3630] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3629] <... futex resumed>) = 0 [pid 3630] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3629] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3629] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3630] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0", ifr_ifindex=22}) = 0 [pid 3630] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3629] <... futex resumed>) = 0 [pid 3629] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] ioctl(3, TUNSETQUEUE, 0x20000340 [pid 3629] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3630] <... ioctl resumed>) = 0 [pid 3630] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3629] <... futex resumed>) = 0 [pid 3629] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3630] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x16\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3629] <... futex resumed>) = 0 [pid 3629] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3629] futex(0x7fac496a04fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac49587000 [pid 3629] mprotect(0x7fac49588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3629] clone(child_stack=0x7fac495a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3631 attached , parent_tid=[14], tls=0x7fac495a7700, child_tidptr=0x7fac495a79d0) = 14 [pid 3631] set_robust_list(0x7fac495a79e0, 24 [pid 3629] futex(0x7fac496a04f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... set_robust_list resumed>) = 0 [pid 3629] <... futex resumed>) = 0 [pid 3631] ioctl(3, TUNSETIFF, 0x20000200 [pid 3629] futex(0x7fac496a04fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3630] <... sendmsg resumed>) = 52 [pid 3630] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 49.787044][ T3630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3630] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3631] <... ioctl resumed>) = 0 [pid 3631] futex(0x7fac496a04fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3629] <... futex resumed>) = 0 [pid 3631] futex(0x7fac496a04f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3629] close(3) = 0 [pid 3629] close(4) = 0 [pid 3629] close(5) = 0 [pid 3629] close(6) = -1 EBADF (Bad file descriptor) [pid 3629] close(7) = -1 EBADF (Bad file descriptor) [pid 3629] close(8) = -1 EBADF (Bad file descriptor) [pid 3629] close(9) = -1 EBADF (Bad file descriptor) [pid 3629] close(10) = -1 EBADF (Bad file descriptor) [pid 3629] close(11) = -1 EBADF (Bad file descriptor) [pid 3629] close(12) = -1 EBADF (Bad file descriptor) [pid 3629] close(13) = -1 EBADF (Bad file descriptor) [pid 3629] close(14) = -1 EBADF (Bad file descriptor) [pid 3629] close(15) = -1 EBADF (Bad file descriptor) [pid 3629] close(16) = -1 EBADF (Bad file descriptor) [pid 3629] close(17) = -1 EBADF (Bad file descriptor) [pid 3629] close(18) = -1 EBADF (Bad file descriptor) [pid 3629] close(19) = -1 EBADF (Bad file descriptor) [pid 3629] close(20) = -1 EBADF (Bad file descriptor) [pid 3629] close(21) = -1 EBADF (Bad file descriptor) [pid 3629] close(22) = -1 EBADF (Bad file descriptor) [pid 3629] close(23) = -1 EBADF (Bad file descriptor) [pid 3629] close(24) = -1 EBADF (Bad file descriptor) [pid 3629] close(25) = -1 EBADF (Bad file descriptor) [pid 3629] close(26) = -1 EBADF (Bad file descriptor) [pid 3629] close(27) = -1 EBADF (Bad file descriptor) [pid 3629] close(28) = -1 EBADF (Bad file descriptor) [pid 3629] close(29) = -1 EBADF (Bad file descriptor) [pid 3629] exit_group(0 [pid 3631] <... futex resumed>) = ? [pid 3630] <... futex resumed>) = ? [pid 3629] <... exit_group resumed>) = ? [pid 3631] +++ exited with 0 +++ [pid 3630] +++ exited with 0 +++ [pid 3629] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 3618] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3632 attached , child_tidptr=0x555555cbb5d0) = 15 [pid 3632] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3632] setpgid(0, 0) = 0 [pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3632] write(3, "1000", 4) = 4 [pid 3632] close(3) = 0 [pid 3632] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3632] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3632] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3632] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3633 attached [pid 3633] set_robust_list(0x7fac495c89e0, 24 [pid 3632] <... clone resumed>, parent_tid=[16], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 16 [pid 3633] <... set_robust_list resumed>) = 0 [pid 3632] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3632] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 3 [pid 3633] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] <... futex resumed>) = 0 [pid 3633] <... futex resumed>) = 1 [pid 3632] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] ioctl(3, TUNSETIFF, 0x20000200 [pid 3632] <... futex resumed>) = 0 [pid 3632] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] <... ioctl resumed>) = 0 [pid 3633] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3632] <... futex resumed>) = 0 [pid 3633] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3632] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3632] <... futex resumed>) = 0 [pid 3633] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 3632] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] <... socket resumed>) = 4 [pid 3633] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3632] <... futex resumed>) = 0 [pid 3633] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL) [pid 3632] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... socket resumed>) = 5 [pid 3632] <... futex resumed>) = 0 [pid 3633] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 3632] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3633] <... futex resumed>) = 0 [pid 3632] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0", ifr_ifindex=24}) = 0 [pid 3633] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3632] <... futex resumed>) = 0 [pid 3633] ioctl(3, TUNSETQUEUE, 0x20000340 [pid 3632] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... ioctl resumed>) = 0 [pid 3632] <... futex resumed>) = 0 [pid 3633] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] <... futex resumed>) = 0 [pid 3632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3633] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3632] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3632] <... futex resumed>) = 0 [pid 3633] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3632] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] <... sendmsg resumed>) = 52 [pid 3633] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3632] <... futex resumed>) = 0 [pid 3633] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3632] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... futex resumed>) = 0 [pid 3632] <... futex resumed>) = 1 [pid 3633] ioctl(3, TUNSETIFF, 0x20000200 [pid 3632] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] <... ioctl resumed>) = 0 [pid 3633] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3632] <... futex resumed>) = 0 [pid 3633] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 49.935620][ T3633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3632] close(3) = 0 [pid 3632] close(4) = 0 [pid 3632] close(5) = 0 [pid 3632] close(6) = -1 EBADF (Bad file descriptor) [pid 3632] close(7) = -1 EBADF (Bad file descriptor) [pid 3632] close(8) = -1 EBADF (Bad file descriptor) [pid 3632] close(9) = -1 EBADF (Bad file descriptor) [pid 3632] close(10) = -1 EBADF (Bad file descriptor) [pid 3632] close(11) = -1 EBADF (Bad file descriptor) [pid 3632] close(12) = -1 EBADF (Bad file descriptor) [pid 3632] close(13) = -1 EBADF (Bad file descriptor) [pid 3632] close(14) = -1 EBADF (Bad file descriptor) [pid 3632] close(15) = -1 EBADF (Bad file descriptor) [pid 3632] close(16) = -1 EBADF (Bad file descriptor) [pid 3632] close(17) = -1 EBADF (Bad file descriptor) [pid 3632] close(18) = -1 EBADF (Bad file descriptor) [pid 3632] close(19) = -1 EBADF (Bad file descriptor) [pid 3632] close(20) = -1 EBADF (Bad file descriptor) [pid 3632] close(21) = -1 EBADF (Bad file descriptor) [pid 3632] close(22) = -1 EBADF (Bad file descriptor) [pid 3632] close(23) = -1 EBADF (Bad file descriptor) [pid 3632] close(24) = -1 EBADF (Bad file descriptor) [pid 3632] close(25) = -1 EBADF (Bad file descriptor) [pid 3632] close(26) = -1 EBADF (Bad file descriptor) [pid 3632] close(27) = -1 EBADF (Bad file descriptor) [pid 3632] close(28) = -1 EBADF (Bad file descriptor) [pid 3632] close(29) = -1 EBADF (Bad file descriptor) [pid 3632] exit_group(0 [pid 3633] <... futex resumed>) = ? [pid 3632] <... exit_group resumed>) = ? [pid 3633] +++ exited with 0 +++ [pid 3632] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cbb5d0) = 17 ./strace-static-x86_64: Process 3634 attached [pid 3634] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3634] setpgid(0, 0) = 0 [pid 3634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3634] write(3, "1000", 4) = 4 [pid 3634] close(3) = 0 [pid 3634] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3634] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3634] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3634] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3635 attached [pid 3635] set_robust_list(0x7fac495c89e0, 24 [pid 3634] <... clone resumed>, parent_tid=[18], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 18 [pid 3635] <... set_robust_list resumed>) = 0 [pid 3634] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 3 [pid 3635] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... futex resumed>) = 0 [pid 3635] <... futex resumed>) = 1 [pid 3634] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] ioctl(3, TUNSETIFF, 0x20000200 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... ioctl resumed>) = 0 [pid 3635] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... futex resumed>) = 0 [pid 3635] <... futex resumed>) = 1 [pid 3634] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... socket resumed>) = 4 [pid 3635] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL) [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... socket resumed>) = 5 [pid 3635] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3635] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0" [pid 3634] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... ioctl resumed>, ifr_ifindex=26}) = 0 [pid 3635] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... futex resumed>) = 0 [pid 3635] <... futex resumed>) = 1 [pid 3634] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] ioctl(3, TUNSETQUEUE, 0x20000340 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... ioctl resumed>) = 0 [pid 3635] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... futex resumed>) = 0 [pid 3635] <... futex resumed>) = 1 [pid 3634] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 52 [pid 3635] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3634] <... futex resumed>) = 0 [pid 3635] ioctl(3, TUNSETIFF, 0x20000200 [pid 3634] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... ioctl resumed>) = 0 [pid 3635] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3634] <... futex resumed>) = 0 [pid 3634] close(3 [ 50.041635][ T3635] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3635] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3634] <... close resumed>) = 0 [pid 3634] close(4) = 0 [pid 3634] close(5) = 0 [pid 3634] close(6) = -1 EBADF (Bad file descriptor) [pid 3634] close(7) = -1 EBADF (Bad file descriptor) [pid 3634] close(8) = -1 EBADF (Bad file descriptor) [pid 3634] close(9) = -1 EBADF (Bad file descriptor) [pid 3634] close(10) = -1 EBADF (Bad file descriptor) [pid 3634] close(11) = -1 EBADF (Bad file descriptor) [pid 3634] close(12) = -1 EBADF (Bad file descriptor) [pid 3634] close(13) = -1 EBADF (Bad file descriptor) [pid 3634] close(14) = -1 EBADF (Bad file descriptor) [pid 3634] close(15) = -1 EBADF (Bad file descriptor) [pid 3634] close(16) = -1 EBADF (Bad file descriptor) [pid 3634] close(17) = -1 EBADF (Bad file descriptor) [pid 3634] close(18) = -1 EBADF (Bad file descriptor) [pid 3634] close(19) = -1 EBADF (Bad file descriptor) [pid 3634] close(20) = -1 EBADF (Bad file descriptor) [pid 3634] close(21) = -1 EBADF (Bad file descriptor) [pid 3634] close(22) = -1 EBADF (Bad file descriptor) [pid 3634] close(23) = -1 EBADF (Bad file descriptor) [pid 3634] close(24) = -1 EBADF (Bad file descriptor) [pid 3634] close(25) = -1 EBADF (Bad file descriptor) [pid 3634] close(26) = -1 EBADF (Bad file descriptor) [pid 3634] close(27) = -1 EBADF (Bad file descriptor) [pid 3634] close(28) = -1 EBADF (Bad file descriptor) [pid 3634] close(29) = -1 EBADF (Bad file descriptor) [pid 3634] exit_group(0 [pid 3635] <... futex resumed>) = ? [pid 3634] <... exit_group resumed>) = ? [pid 3635] +++ exited with 0 +++ [pid 3634] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3618] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cbb5d0) = 19 ./strace-static-x86_64: Process 3636 attached [pid 3636] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3636] setpgid(0, 0) = 0 [pid 3636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3636] write(3, "1000", 4) = 4 [pid 3636] close(3) = 0 [pid 3636] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3636] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3636] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3636] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3637 attached , parent_tid=[20], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 20 [pid 3637] set_robust_list(0x7fac495c89e0, 24 [pid 3636] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... set_robust_list resumed>) = 0 [pid 3636] <... futex resumed>) = 0 [pid 3636] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 3 [pid 3637] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] <... futex resumed>) = 0 [pid 3637] <... futex resumed>) = 1 [pid 3636] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] ioctl(3, TUNSETIFF, 0x20000200 [pid 3636] <... futex resumed>) = 0 [pid 3636] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... ioctl resumed>) = 0 [pid 3637] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3636] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 3636] <... futex resumed>) = 0 [pid 3636] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... socket resumed>) = 4 [pid 3637] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3637] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3636] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3636] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 5 [pid 3637] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3637] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3636] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3636] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3637] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0", ifr_ifindex=28}) = 0 [pid 3637] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3637] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3636] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3636] <... futex resumed>) = 0 [pid 3637] ioctl(3, TUNSETQUEUE, 0x20000340 [pid 3636] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... ioctl resumed>) = 0 [pid 3637] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3637] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3636] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3636] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... sendmsg resumed>) = 52 [pid 3637] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3636] <... futex resumed>) = 0 [pid 3637] ioctl(3, TUNSETIFF, 0x20000200 [pid 3636] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... ioctl resumed>) = 0 [pid 3636] <... futex resumed>) = 0 [pid 3637] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3637] <... futex resumed>) = 0 [pid 3636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3637] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 50.159585][ T3637] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3636] close(3) = 0 [pid 3636] close(4) = 0 [pid 3636] close(5) = 0 [pid 3636] close(6) = -1 EBADF (Bad file descriptor) [pid 3636] close(7) = -1 EBADF (Bad file descriptor) [pid 3636] close(8) = -1 EBADF (Bad file descriptor) [pid 3636] close(9) = -1 EBADF (Bad file descriptor) [pid 3636] close(10) = -1 EBADF (Bad file descriptor) [pid 3636] close(11) = -1 EBADF (Bad file descriptor) [pid 3636] close(12) = -1 EBADF (Bad file descriptor) [pid 3636] close(13) = -1 EBADF (Bad file descriptor) [pid 3636] close(14) = -1 EBADF (Bad file descriptor) [pid 3636] close(15) = -1 EBADF (Bad file descriptor) [pid 3636] close(16) = -1 EBADF (Bad file descriptor) [pid 3636] close(17) = -1 EBADF (Bad file descriptor) [pid 3636] close(18) = -1 EBADF (Bad file descriptor) [pid 3636] close(19) = -1 EBADF (Bad file descriptor) [pid 3636] close(20) = -1 EBADF (Bad file descriptor) [pid 3636] close(21) = -1 EBADF (Bad file descriptor) [pid 3636] close(22) = -1 EBADF (Bad file descriptor) [pid 3636] close(23) = -1 EBADF (Bad file descriptor) [pid 3636] close(24) = -1 EBADF (Bad file descriptor) [pid 3636] close(25) = -1 EBADF (Bad file descriptor) [pid 3636] close(26) = -1 EBADF (Bad file descriptor) [pid 3636] close(27) = -1 EBADF (Bad file descriptor) [pid 3636] close(28) = -1 EBADF (Bad file descriptor) [pid 3636] close(29) = -1 EBADF (Bad file descriptor) [pid 3636] exit_group(0) = ? [pid 3637] <... futex resumed>) = ? [pid 3637] +++ exited with 0 +++ [pid 3636] +++ exited with 0 +++ [pid 3618] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555cbb5d0) = 21 ./strace-static-x86_64: Process 3638 attached [pid 3638] set_robust_list(0x555555cbb5e0, 24) = 0 [pid 3638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3638] setpgid(0, 0) = 0 [pid 3638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3638] write(3, "1000", 4) = 4 [pid 3638] close(3) = 0 [pid 3638] read(200, 0x7fff2d5e5910, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 3638] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac495a8000 [pid 3638] mprotect(0x7fac495a9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3638] clone(child_stack=0x7fac495c83f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[22], tls=0x7fac495c8700, child_tidptr=0x7fac495c89d0) = 22 [pid 3638] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3639 attached [pid 3639] set_robust_list(0x7fac495c89e0, 24) = 0 [pid 3639] openat(AT_FDCWD, "/dev/net/tun", O_RDONLY) = 3 [pid 3639] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3638] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 1 [pid 3639] ioctl(3, TUNSETIFF, 0x20000200) = 0 [pid 3639] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3638] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 1 [pid 3639] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 3639] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3638] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 1 [pid 3639] socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 5 [pid 3639] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3638] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 1 [pid 3639] ioctl(5, SIOCGIFINDEX, {ifr_name="rose0", ifr_ifindex=30}) = 0 [pid 3639] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3638] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 1 [pid 3639] ioctl(3, TUNSETQUEUE, 0x20000340) = 0 [pid 3639] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3638] futex(0x7fac496a04e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7fac496a04ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 1 [pid 3639] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x34\x00\x00\x00\x11\x00\x01\xe9\x0d\x7d\x1f\xc7\x4e\x1b\xed\x42\xec\x45\xb2\xfc\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=52}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3638] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3638] futex(0x7fac496a04fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fac49587000 [pid 3638] mprotect(0x7fac49588000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3638] clone(child_stack=0x7fac495a73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[23], tls=0x7fac495a7700, child_tidptr=0x7fac495a79d0) = 23 [pid 3638] futex(0x7fac496a04f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7fac496a04fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3640 attached [pid 3640] set_robust_list(0x7fac495a79e0, 24) = 0 [ 50.281500][ T3639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor997'. [pid 3640] ioctl(3, TUNSETIFF, 0x20000200 [pid 3639] <... sendmsg resumed>) = 52 [pid 3639] futex(0x7fac496a04ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3639] futex(0x7fac496a04e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3638] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 50.334910][ T3640] ------------[ cut here ]------------ [ 50.334921][ T3640] WARNING: CPU: 0 PID: 3640 at net/core/dev.c:6374 netif_napi_add_weight+0x8de/0xb00 [ 50.350553][ T3640] Modules linked in: [ 50.355146][ T3640] CPU: 1 PID: 3640 Comm: syz-executor997 Not tainted 5.19.0-rc2-syzkaller-00312-g4875d94c69d5 #0 [ 50.366141][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.376458][ T3640] RIP: 0010:netif_napi_add_weight+0x8de/0xb00 [ 50.382639][ T3640] Code: 08 84 c0 0f 85 b5 00 00 00 48 8b 04 24 80 a0 b1 0b 00 00 fd e9 6c fd ff ff e8 6e 01 27 fa 0f 0b e9 98 fc ff ff e8 62 01 27 fa <0f> 0b e9 54 fd ff ff e8 f6 c5 73 fa e9 40 fe ff ff e8 dc c5 73 fa [ 50.402535][ T3640] RSP: 0018:ffffc9000307fb18 EFLAGS: 00010293 [ 50.408637][ T3640] RAX: 0000000000000000 RBX: ffff88801f950000 RCX: 0000000000000000 [ 50.416700][ T3640] RDX: ffff88801b550000 RSI: ffffffff8753709e RDI: 0000000000000001 [ 50.424757][ T3640] RBP: ffff88801f9505e8 R08: 0000000000000001 R09: 0000000000000000 [ 50.432817][ T3640] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888026618001 [ 50.440898][ T3640] R13: ffff88801f9505d8 R14: ffff888026618c80 R15: 0000000000000000 [ 50.448904][ T3640] FS: 00007fac495a7700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 50.458017][ T3640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.464725][ T3640] CR2: 00007fff2d5e5ce8 CR3: 000000007184d000 CR4: 00000000003506e0 [ 50.472807][ T3640] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 3638] close(3) = 0 [ 50.472859][ T3640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.488966][ T3640] Call Trace: [ 50.492368][ T3640] [ 50.495325][ T3640] ? owner_show+0x130/0x130 [ 50.499870][ T3640] tun_attach.isra.0+0x1096/0x16c0 [ 50.505126][ T3640] tun_net_init+0x45e/0x660 [ 50.509670][ T3640] ? tun_attach.isra.0+0x16c0/0x16c0 [ 50.515078][ T3640] register_netdevice+0x57d/0x15b0 [ 50.520228][ T3640] ? netdev_change_features+0xb0/0xb0 [ 50.525760][ T3640] ? dev_addr_mod+0x2c9/0x3f0 [ 50.530564][ T3640] __tun_chr_ioctl+0x2a19/0x3da0 [pid 3638] close(4) = 0 [pid 3638] close(5) = 0 [pid 3638] close(6) = -1 EBADF (Bad file descriptor) [pid 3638] close(7) = -1 EBADF (Bad file descriptor) [pid 3638] close(8) = -1 EBADF (Bad file descriptor) [pid 3638] close(9) = -1 EBADF (Bad file descriptor) [pid 3638] close(10) = -1 EBADF (Bad file descriptor) [pid 3638] close(11) = -1 EBADF (Bad file descriptor) [pid 3638] close(12) = -1 EBADF (Bad file descriptor) [pid 3638] close(13) = -1 EBADF (Bad file descriptor) [pid 3638] close(14) = -1 EBADF (Bad file descriptor) [pid 3638] close(15) = -1 EBADF (Bad file descriptor) [pid 3638] close(16) = -1 EBADF (Bad file descriptor) [pid 3638] close(17) = -1 EBADF (Bad file descriptor) [pid 3638] close(18) = -1 EBADF (Bad file descriptor) [pid 3638] close(19) = -1 EBADF (Bad file descriptor) [pid 3638] close(20) = -1 EBADF (Bad file descriptor) [pid 3638] close(21) = -1 EBADF (Bad file descriptor) [pid 3638] close(22) = -1 EBADF (Bad file descriptor) [pid 3638] close(23) = -1 EBADF (Bad file descriptor) [pid 3638] close(24) = -1 EBADF (Bad file descriptor) [pid 3638] close(25) = -1 EBADF (Bad file descriptor) [pid 3638] close(26) = -1 EBADF (Bad file descriptor) [pid 3638] close(27) = -1 EBADF (Bad file descriptor) [pid 3638] close(28) = -1 EBADF (Bad file descriptor) [pid 3638] close(29) = -1 EBADF (Bad file descriptor) [pid 3638] exit_group(0 [pid 3639] <... futex resumed>) = ? [pid 3638] <... exit_group resumed>) = ? [pid 3639] +++ exited with 0 +++ [ 50.535643][ T3640] ? tun_chr_read_iter+0x270/0x270 [ 50.541408][ T3640] ? calibrate_delay+0xd83/0x1120 [ 50.547309][ T3640] ? __fget_files+0x26a/0x440 [ 50.552744][ T3640] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.558198][ T3640] ? tun_chr_compat_ioctl+0x30/0x30 [ 50.563869][ T3640] __x64_sys_ioctl+0x193/0x200 [ 50.568974][ T3640] do_syscall_64+0x35/0xb0 [ 50.573594][ T3640] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.579520][ T3640] RIP: 0033:0x7fac496179d9 [ 50.584076][ T3640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.603786][ T3640] RSP: 002b:00007fac495a7308 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.612303][ T3640] RAX: ffffffffffffffda RBX: 00007fac496a04f8 RCX: 00007fac496179d9 [ 50.620302][ T3640] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 50.628399][ T3640] RBP: 00007fac496a04f0 R08: 00007fac495a7700 R09: 0000000000000000 [ 50.636508][ T3640] R10: 00007fac495a7700 R11: 0000000000000246 R12: 00007fac496a04fc [ 50.644628][ T3640] R13: 00007fac4966d280 R14: 74656e2f7665642f R15: 0000000000022000 [ 50.652747][ T3640] [ 50.655781][ T3640] Kernel panic - not syncing: panic_on_warn set ... [ 50.662358][ T3640] CPU: 0 PID: 3640 Comm: syz-executor997 Not tainted 5.19.0-rc2-syzkaller-00312-g4875d94c69d5 #0 [ 50.672859][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.682940][ T3640] Call Trace: [ 50.686226][ T3640] [ 50.689148][ T3640] dump_stack_lvl+0xcd/0x134 [ 50.693825][ T3640] panic+0x2d7/0x636 [ 50.697719][ T3640] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.703701][ T3640] ? __warn.cold+0x1d9/0x2cd [ 50.708364][ T3640] ? netif_napi_add_weight+0x8de/0xb00 [ 50.713833][ T3640] __warn.cold+0x1ea/0x2cd [ 50.718257][ T3640] ? netif_napi_add_weight+0x8de/0xb00 [ 50.723739][ T3640] report_bug+0x1bc/0x210 [ 50.728082][ T3640] handle_bug+0x3c/0x60 [ 50.732274][ T3640] exc_invalid_op+0x14/0x40 [ 50.736804][ T3640] asm_exc_invalid_op+0x1b/0x20 [ 50.741672][ T3640] RIP: 0010:netif_napi_add_weight+0x8de/0xb00 [ 50.747739][ T3640] Code: 08 84 c0 0f 85 b5 00 00 00 48 8b 04 24 80 a0 b1 0b 00 00 fd e9 6c fd ff ff e8 6e 01 27 fa 0f 0b e9 98 fc ff ff e8 62 01 27 fa <0f> 0b e9 54 fd ff ff e8 f6 c5 73 fa e9 40 fe ff ff e8 dc c5 73 fa [ 50.767452][ T3640] RSP: 0018:ffffc9000307fb18 EFLAGS: 00010293 [ 50.773523][ T3640] RAX: 0000000000000000 RBX: ffff88801f950000 RCX: 0000000000000000 [ 50.781506][ T3640] RDX: ffff88801b550000 RSI: ffffffff8753709e RDI: 0000000000000001 [ 50.789480][ T3640] RBP: ffff88801f9505e8 R08: 0000000000000001 R09: 0000000000000000 [ 50.797458][ T3640] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888026618001 [ 50.805480][ T3640] R13: ffff88801f9505d8 R14: ffff888026618c80 R15: 0000000000000000 [ 50.813469][ T3640] ? netif_napi_add_weight+0x8de/0xb00 [ 50.818937][ T3640] ? netif_napi_add_weight+0x8de/0xb00 [ 50.824414][ T3640] ? owner_show+0x130/0x130 [ 50.828937][ T3640] tun_attach.isra.0+0x1096/0x16c0 [ 50.834074][ T3640] tun_net_init+0x45e/0x660 [ 50.838582][ T3640] ? tun_attach.isra.0+0x16c0/0x16c0 [ 50.843865][ T3640] register_netdevice+0x57d/0x15b0 [ 50.848994][ T3640] ? netdev_change_features+0xb0/0xb0 [ 50.854365][ T3640] ? dev_addr_mod+0x2c9/0x3f0 [ 50.859063][ T3640] __tun_chr_ioctl+0x2a19/0x3da0 [ 50.864034][ T3640] ? tun_chr_read_iter+0x270/0x270 [ 50.869182][ T3640] ? calibrate_delay+0xd83/0x1120 [ 50.874298][ T3640] ? __fget_files+0x26a/0x440 [ 50.879002][ T3640] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.883960][ T3640] ? tun_chr_compat_ioctl+0x30/0x30 [ 50.889157][ T3640] __x64_sys_ioctl+0x193/0x200 [ 50.893934][ T3640] do_syscall_64+0x35/0xb0 [ 50.898372][ T3640] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.904277][ T3640] RIP: 0033:0x7fac496179d9 [ 50.908717][ T3640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.928343][ T3640] RSP: 002b:00007fac495a7308 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.936768][ T3640] RAX: ffffffffffffffda RBX: 00007fac496a04f8 RCX: 00007fac496179d9 [ 50.944767][ T3640] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 50.952750][ T3640] RBP: 00007fac496a04f0 R08: 00007fac495a7700 R09: 0000000000000000 [ 50.960827][ T3640] R10: 00007fac495a7700 R11: 0000000000000246 R12: 00007fac496a04fc [ 50.968810][ T3640] R13: 00007fac4966d280 R14: 74656e2f7665642f R15: 0000000000022000 [ 50.976809][ T3640] [ 50.980224][ T3640] Kernel Offset: disabled [ 50.984619][ T3640] Rebooting in 86400 seconds..