./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1923994307 <...> Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts. execve("./syz-executor1923994307", ["./syz-executor1923994307"], 0x7fffe49cf450 /* 10 vars */) = 0 brk(NULL) = 0x555555eff000 brk(0x555555effc40) = 0x555555effc40 arch_prctl(ARCH_SET_FS, 0x555555eff300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1923994307", 4096) = 28 brk(0x555555f20c40) = 0x555555f20c40 brk(0x555555f21000) = 0x555555f21000 mprotect(0x7f607b153000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 5075 ./strace-static-x86_64: Process 5075 attached [pid 5075] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setsid() = 1 [pid 5075] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5075] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5075] unshare(CLONE_NEWNS) = 0 [pid 5075] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5075] unshare(CLONE_NEWIPC) = 0 [pid 5075] unshare(CLONE_NEWCGROUP) = 0 [pid 5075] unshare(CLONE_NEWUTS) = 0 [pid 5075] unshare(CLONE_SYSVSEM) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "16777216", 8) = 8 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "536870912", 9) = 9 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "8192", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5075] close(3) = 0 [pid 5075] getpid() = 1 [pid 5075] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 57.119074][ T5086] dump_stack_lvl+0xd1/0x138 [ 57.123694][ T5086] should_fail_ex.cold+0x5/0xa [ 57.128484][ T5086] ? io_issue_sqe+0x695/0x1250 [ 57.133289][ T5086] should_failslab+0x9/0x20 [ 57.137826][ T5086] __kmem_cache_alloc_node+0x5b/0x330 [ 57.143392][ T5086] ? ref_tracker_alloc+0x158/0x560 [ 57.148544][ T5086] kmalloc_trace+0x26/0x60 [ 57.153025][ T5086] ref_tracker_alloc+0x158/0x560 [ 57.158002][ T5086] ? __lock_acquire+0xbc3/0x56d0 [ 57.163065][ T5086] ? ref_tracker_free+0x6b0/0x6b0 [ 57.168129][ T5086] ? lock_downgrade+0x6e0/0x6e0 [ 57.173128][ T5086] dst_init+0xe4/0x520 [ 57.177418][ T5086] dst_alloc+0x16f/0x1f0 [ 57.181730][ T5086] rt_dst_alloc+0x55/0x430 [ 57.186158][ T5086] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 57.192159][ T5086] ip_route_output_key_hash+0x18f/0x340 [ 57.197714][ T5086] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 57.203982][ T5086] dccp_v4_connect+0x7e1/0x1730 [ 57.208858][ T5086] __inet_stream_connect+0x69e/0xed0 [ 57.214175][ T5086] ? inet_listen+0x640/0x640 [ 57.218814][ T5086] ? mark_held_locks+0x9f/0xe0 [ 57.223640][ T5086] ? __local_bh_enable_ip+0xa4/0x130 [ 57.228976][ T5086] inet_stream_connect+0x57/0xa0 [ 57.233951][ T5086] ? __inet_stream_connect+0xed0/0xed0 [ 57.239449][ T5086] __sys_connect_file+0x153/0x1a0 [ 57.244521][ T5086] io_connect+0x3cc/0x720 [ 57.248864][ T5086] ? io_connect_prep+0x250/0x250 [ 57.253843][ T5086] ? receive_fd+0x110/0x110 [ 57.258393][ T5086] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.263965][ T5086] ? io_connect_prep+0x250/0x250 [ 57.268948][ T5086] io_issue_sqe+0x695/0x1250 [ 57.273558][ T5086] io_submit_sqes+0x96c/0x1e90 [ 57.278403][ T5086] __do_sys_io_uring_enter+0x103d/0x24e0 [ 57.284055][ T5086] ? io_submit_sqes+0x1e90/0x1e90 [ 57.289100][ T5086] ? ptrace_notify+0xfe/0x140 [ 57.293809][ T5086] ? lock_downgrade+0x6e0/0x6e0 [ 57.298700][ T5086] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.304150][ T5086] ? lockdep_hardirqs_on+0x7d/0x100 [ 57.309368][ T5086] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.314588][ T5086] ? ptrace_notify+0xfe/0x140 [ 57.319293][ T5086] do_syscall_64+0x39/0xb0 [ 57.323821][ T5086] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.329737][ T5086] RIP: 0033:0x7f607b0de549 [ 57.334161][ T5086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.353842][ T5086] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 57.362330][ T5086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 57.370348][ T5086] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5086] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5086] close(3) = 0 [pid 5086] close(4) = 0 [pid 5086] close(5) = 0 [pid 5086] close(6) = 0 [pid 5086] close(7) = 0 [pid 5086] close(8) = -1 EBADF (Bad file descriptor) [pid 5086] close(9) = -1 EBADF (Bad file descriptor) [pid 5086] close(10) = -1 EBADF (Bad file descriptor) [pid 5086] close(11) = -1 EBADF (Bad file descriptor) [pid 5086] close(12) = -1 EBADF (Bad file descriptor) [pid 5086] close(13) = -1 EBADF (Bad file descriptor) [pid 5086] close(14) = -1 EBADF (Bad file descriptor) [pid 5086] close(15) = -1 EBADF (Bad file descriptor) [pid 5086] close(16) = -1 EBADF (Bad file descriptor) [pid 5086] close(17) = -1 EBADF (Bad file descriptor) [pid 5086] close(18) = -1 EBADF (Bad file descriptor) [pid 5086] close(19) = -1 EBADF (Bad file descriptor) [pid 5086] close(20) = -1 EBADF (Bad file descriptor) [pid 5086] close(21) = -1 EBADF (Bad file descriptor) [pid 5086] close(22) = -1 EBADF (Bad file descriptor) [pid 5086] close(23) = -1 EBADF (Bad file descriptor) [pid 5086] close(24) = -1 EBADF (Bad file descriptor) [pid 5086] close(25) = -1 EBADF (Bad file descriptor) [pid 5086] close(26) = -1 EBADF (Bad file descriptor) [pid 5086] close(27) = -1 EBADF (Bad file descriptor) [pid 5086] close(28) = -1 EBADF (Bad file descriptor) [pid 5086] close(29) = -1 EBADF (Bad file descriptor) [pid 5086] exit_group(0) = ? [pid 5086] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached , child_tidptr=0x555555eff5d0) = 3 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setpgid(0, 0) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5087] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5087] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5087] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5087] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5087] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5087] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5087] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5087] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5087] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5087] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5087] write(7, "5", 1) = 1 [ 57.378347][ T5086] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 57.386415][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 57.394395][ T5086] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 0000000000000003 [ 57.402413][ T5086] [ 57.409734][ T5086] memory allocation failure, unreliable refcount tracker. [ 57.454546][ T5087] FAULT_INJECTION: forcing a failure. [ 57.454546][ T5087] name failslab, interval 1, probability 0, space 0, times 0 [ 57.470166][ T5087] CPU: 0 PID: 5087 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 57.480329][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 57.490667][ T5087] Call Trace: [ 57.493963][ T5087] [ 57.496938][ T5087] dump_stack_lvl+0xd1/0x138 [ 57.501591][ T5087] should_fail_ex.cold+0x5/0xa [ 57.506387][ T5087] ? io_issue_sqe+0x695/0x1250 [ 57.511167][ T5087] should_failslab+0x9/0x20 [ 57.515709][ T5087] __kmem_cache_alloc_node+0x5b/0x330 [ 57.521105][ T5087] ? ref_tracker_alloc+0x158/0x560 [ 57.526268][ T5087] kmalloc_trace+0x26/0x60 [ 57.530719][ T5087] ref_tracker_alloc+0x158/0x560 [ 57.535670][ T5087] ? __lock_acquire+0xbc3/0x56d0 [ 57.540626][ T5087] ? ref_tracker_free+0x6b0/0x6b0 [ 57.545678][ T5087] dst_init+0xe4/0x520 [ 57.549768][ T5087] dst_alloc+0x16f/0x1f0 [ 57.554038][ T5087] rt_dst_alloc+0x55/0x430 [ 57.558470][ T5087] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 57.564492][ T5087] ip_route_output_key_hash+0x18f/0x340 [ 57.570085][ T5087] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 57.576446][ T5087] dccp_v4_connect+0x7e1/0x1730 [ 57.581362][ T5087] __inet_stream_connect+0x69e/0xed0 [ 57.586698][ T5087] ? inet_listen+0x640/0x640 [ 57.591461][ T5087] ? mark_held_locks+0x9f/0xe0 [ 57.596364][ T5087] ? __local_bh_enable_ip+0xa4/0x130 [ 57.601691][ T5087] inet_stream_connect+0x57/0xa0 [ 57.606650][ T5087] ? __inet_stream_connect+0xed0/0xed0 [ 57.612221][ T5087] __sys_connect_file+0x153/0x1a0 [ 57.617273][ T5087] io_connect+0x3cc/0x720 [ 57.621665][ T5087] ? io_connect_prep+0x250/0x250 [ 57.626654][ T5087] ? receive_fd+0x110/0x110 [ 57.631177][ T5087] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.636738][ T5087] ? io_connect_prep+0x250/0x250 [ 57.641692][ T5087] io_issue_sqe+0x695/0x1250 [ 57.646315][ T5087] io_submit_sqes+0x96c/0x1e90 [ 57.651144][ T5087] __do_sys_io_uring_enter+0x103d/0x24e0 [ 57.656879][ T5087] ? io_submit_sqes+0x1e90/0x1e90 [ 57.661936][ T5087] ? ptrace_notify+0xfe/0x140 [ 57.666651][ T5087] ? lock_downgrade+0x6e0/0x6e0 [ 57.671693][ T5087] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.677013][ T5087] ? lockdep_hardirqs_on+0x7d/0x100 [ 57.682316][ T5087] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.687624][ T5087] ? ptrace_notify+0xfe/0x140 [ 57.692333][ T5087] do_syscall_64+0x39/0xb0 [ 57.696802][ T5087] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.702702][ T5087] RIP: 0033:0x7f607b0de549 [ 57.707119][ T5087] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.726749][ T5087] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 57.735311][ T5087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 57.743312][ T5087] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5087] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5087] close(3) = 0 [pid 5087] close(4) = 0 [pid 5087] close(5) = 0 [pid 5087] close(6) = 0 [pid 5087] close(7) = 0 [pid 5087] close(8) = -1 EBADF (Bad file descriptor) [pid 5087] close(9) = -1 EBADF (Bad file descriptor) [pid 5087] close(10) = -1 EBADF (Bad file descriptor) [pid 5087] close(11) = -1 EBADF (Bad file descriptor) [pid 5087] close(12) = -1 EBADF (Bad file descriptor) [pid 5087] close(13) = -1 EBADF (Bad file descriptor) [pid 5087] close(14) = -1 EBADF (Bad file descriptor) [pid 5087] close(15) = -1 EBADF (Bad file descriptor) [pid 5087] close(16) = -1 EBADF (Bad file descriptor) [pid 5087] close(17) = -1 EBADF (Bad file descriptor) [pid 5087] close(18) = -1 EBADF (Bad file descriptor) [pid 5087] close(19) = -1 EBADF (Bad file descriptor) [pid 5087] close(20) = -1 EBADF (Bad file descriptor) [pid 5087] close(21) = -1 EBADF (Bad file descriptor) [pid 5087] close(22) = -1 EBADF (Bad file descriptor) [pid 5087] close(23) = -1 EBADF (Bad file descriptor) [pid 5087] close(24) = -1 EBADF (Bad file descriptor) [pid 5087] close(25) = -1 EBADF (Bad file descriptor) [pid 5087] close(26) = -1 EBADF (Bad file descriptor) [pid 5087] close(27) = -1 EBADF (Bad file descriptor) [pid 5087] close(28) = -1 EBADF (Bad file descriptor) [pid 5087] close(29) = -1 EBADF (Bad file descriptor) [pid 5087] exit_group(0) = ? [pid 5087] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 4 ./strace-static-x86_64: Process 5088 attached [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5088] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5088] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5088] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5088] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5088] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5088] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5088] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5088] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 57.751292][ T5087] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 57.759272][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 57.767354][ T5087] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 57.775374][ T5087] [pid 5088] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5088] write(7, "5", 1) = 1 [ 57.817689][ T5088] FAULT_INJECTION: forcing a failure. [ 57.817689][ T5088] name failslab, interval 1, probability 0, space 0, times 0 [ 57.831323][ T5088] CPU: 0 PID: 5088 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 57.841427][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 57.851505][ T5088] Call Trace: [ 57.854786][ T5088] [ 57.857718][ T5088] dump_stack_lvl+0xd1/0x138 [ 57.862323][ T5088] should_fail_ex.cold+0x5/0xa [ 57.867109][ T5088] ? io_issue_sqe+0x695/0x1250 [ 57.872066][ T5088] should_failslab+0x9/0x20 [ 57.876628][ T5088] __kmem_cache_alloc_node+0x5b/0x330 [ 57.882025][ T5088] ? ref_tracker_alloc+0x158/0x560 [ 57.887179][ T5088] kmalloc_trace+0x26/0x60 [ 57.891625][ T5088] ref_tracker_alloc+0x158/0x560 [ 57.896616][ T5088] ? __lock_acquire+0xbc3/0x56d0 [ 57.901593][ T5088] ? ref_tracker_free+0x6b0/0x6b0 [ 57.906697][ T5088] dst_init+0xe4/0x520 [ 57.910814][ T5088] dst_alloc+0x16f/0x1f0 [ 57.915100][ T5088] rt_dst_alloc+0x55/0x430 [ 57.919546][ T5088] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 57.925573][ T5088] ip_route_output_key_hash+0x18f/0x340 [ 57.931148][ T5088] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 57.937524][ T5088] dccp_v4_connect+0x7e1/0x1730 [ 57.942427][ T5088] __inet_stream_connect+0x69e/0xed0 [ 57.947873][ T5088] ? inet_listen+0x640/0x640 [ 57.952510][ T5088] ? mark_held_locks+0x9f/0xe0 [ 57.957300][ T5088] ? __local_bh_enable_ip+0xa4/0x130 [ 57.962615][ T5088] inet_stream_connect+0x57/0xa0 [ 57.967587][ T5088] ? __inet_stream_connect+0xed0/0xed0 [ 57.973080][ T5088] __sys_connect_file+0x153/0x1a0 [ 57.978130][ T5088] io_connect+0x3cc/0x720 [ 57.982580][ T5088] ? io_connect_prep+0x250/0x250 [ 57.987549][ T5088] ? receive_fd+0x110/0x110 [ 57.992098][ T5088] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.997665][ T5088] ? io_connect_prep+0x250/0x250 [ 58.002734][ T5088] io_issue_sqe+0x695/0x1250 [ 58.007362][ T5088] io_submit_sqes+0x96c/0x1e90 [ 58.012174][ T5088] __do_sys_io_uring_enter+0x103d/0x24e0 [ 58.017850][ T5088] ? io_submit_sqes+0x1e90/0x1e90 [ 58.022910][ T5088] ? ptrace_notify+0xfe/0x140 [ 58.027609][ T5088] ? lock_downgrade+0x6e0/0x6e0 [ 58.032490][ T5088] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.037827][ T5088] ? lockdep_hardirqs_on+0x7d/0x100 [ 58.043052][ T5088] ? _raw_spin_unlock_irq+0x2e/0x50 [ 58.048364][ T5088] ? ptrace_notify+0xfe/0x140 [ 58.053070][ T5088] do_syscall_64+0x39/0xb0 [ 58.057603][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.063528][ T5088] RIP: 0033:0x7f607b0de549 [ 58.068046][ T5088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.087679][ T5088] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 58.096123][ T5088] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 58.104110][ T5088] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5088] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5088] close(3) = 0 [pid 5088] close(4) = 0 [pid 5088] close(5) = 0 [pid 5088] close(6) = 0 [pid 5088] close(7) = 0 [pid 5088] close(8) = -1 EBADF (Bad file descriptor) [pid 5088] close(9) = -1 EBADF (Bad file descriptor) [pid 5088] close(10) = -1 EBADF (Bad file descriptor) [pid 5088] close(11) = -1 EBADF (Bad file descriptor) [pid 5088] close(12) = -1 EBADF (Bad file descriptor) [pid 5088] close(13) = -1 EBADF (Bad file descriptor) [pid 5088] close(14) = -1 EBADF (Bad file descriptor) [pid 5088] close(15) = -1 EBADF (Bad file descriptor) [pid 5088] close(16) = -1 EBADF (Bad file descriptor) [pid 5088] close(17) = -1 EBADF (Bad file descriptor) [pid 5088] close(18) = -1 EBADF (Bad file descriptor) [pid 5088] close(19) = -1 EBADF (Bad file descriptor) [pid 5088] close(20) = -1 EBADF (Bad file descriptor) [pid 5088] close(21) = -1 EBADF (Bad file descriptor) [pid 5088] close(22) = -1 EBADF (Bad file descriptor) [pid 5088] close(23) = -1 EBADF (Bad file descriptor) [pid 5088] close(24) = -1 EBADF (Bad file descriptor) [pid 5088] close(25) = -1 EBADF (Bad file descriptor) [pid 5088] close(26) = -1 EBADF (Bad file descriptor) [pid 5088] close(27) = -1 EBADF (Bad file descriptor) [pid 5088] close(28) = -1 EBADF (Bad file descriptor) [pid 5088] close(29) = -1 EBADF (Bad file descriptor) [pid 5088] exit_group(0) = ? [pid 5088] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 5 ./strace-static-x86_64: Process 5089 attached [ 58.112094][ T5088] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 58.120084][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 58.128071][ T5088] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 58.136170][ T5088] [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5089] setpgid(0, 0) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1000", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5089] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5089] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5089] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5089] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5089] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5089] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5089] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5089] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5089] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5089] write(7, "5", 1) = 1 [ 58.199275][ T5089] FAULT_INJECTION: forcing a failure. [ 58.199275][ T5089] name failslab, interval 1, probability 0, space 0, times 0 [ 58.212393][ T5089] CPU: 0 PID: 5089 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 58.222304][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 58.232402][ T5089] Call Trace: [ 58.235688][ T5089] [ 58.238619][ T5089] dump_stack_lvl+0xd1/0x138 [ 58.243221][ T5089] should_fail_ex.cold+0x5/0xa [ 58.248011][ T5089] ? __inet_hash_connect+0x95e/0x1ba0 [ 58.253420][ T5089] should_failslab+0x9/0x20 [ 58.257981][ T5089] kmem_cache_alloc+0x5a/0x320 [ 58.262782][ T5089] __inet_hash_connect+0x95e/0x1ba0 [ 58.268011][ T5089] ? __inet_lookup_listener+0xbf0/0xbf0 [ 58.273702][ T5089] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 58.280078][ T5089] dccp_v4_connect+0xb82/0x1730 [ 58.284985][ T5089] __inet_stream_connect+0x69e/0xed0 [ 58.290327][ T5089] ? inet_listen+0x640/0x640 [ 58.294977][ T5089] ? mark_held_locks+0x9f/0xe0 [ 58.299877][ T5089] ? __local_bh_enable_ip+0xa4/0x130 [ 58.305260][ T5089] inet_stream_connect+0x57/0xa0 [ 58.310209][ T5089] ? __inet_stream_connect+0xed0/0xed0 [ 58.315680][ T5089] __sys_connect_file+0x153/0x1a0 [ 58.320801][ T5089] io_connect+0x3cc/0x720 [ 58.325196][ T5089] ? io_connect_prep+0x250/0x250 [ 58.331062][ T5089] ? receive_fd+0x110/0x110 [ 58.335653][ T5089] ? rcu_read_lock_sched_held+0x3e/0x70 [ 58.341922][ T5089] ? io_connect_prep+0x250/0x250 [ 58.347344][ T5089] io_issue_sqe+0x695/0x1250 [ 58.352015][ T5089] io_submit_sqes+0x96c/0x1e90 [ 58.356897][ T5089] __do_sys_io_uring_enter+0x103d/0x24e0 [ 58.362557][ T5089] ? io_submit_sqes+0x1e90/0x1e90 [ 58.367611][ T5089] ? ptrace_notify+0xfe/0x140 [ 58.372340][ T5089] ? lock_downgrade+0x6e0/0x6e0 [ 58.377236][ T5089] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.382487][ T5089] ? lockdep_hardirqs_on+0x7d/0x100 [ 58.387910][ T5089] ? _raw_spin_unlock_irq+0x2e/0x50 [ 58.393219][ T5089] ? ptrace_notify+0xfe/0x140 [ 58.397931][ T5089] do_syscall_64+0x39/0xb0 [ 58.402366][ T5089] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.408278][ T5089] RIP: 0033:0x7f607b0de549 [ 58.412727][ T5089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.432375][ T5089] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 58.440839][ T5089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5089] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5089] close(3) = 0 [pid 5089] close(4) = 0 [pid 5089] close(5) = 0 [pid 5089] close(6) = 0 [pid 5089] close(7) = 0 [pid 5089] close(8) = -1 EBADF (Bad file descriptor) [pid 5089] close(9) = -1 EBADF (Bad file descriptor) [pid 5089] close(10) = -1 EBADF (Bad file descriptor) [pid 5089] close(11) = -1 EBADF (Bad file descriptor) [pid 5089] close(12) = -1 EBADF (Bad file descriptor) [pid 5089] close(13) = -1 EBADF (Bad file descriptor) [pid 5089] close(14) = -1 EBADF (Bad file descriptor) [pid 5089] close(15) = -1 EBADF (Bad file descriptor) [pid 5089] close(16) = -1 EBADF (Bad file descriptor) [pid 5089] close(17) = -1 EBADF (Bad file descriptor) [pid 5089] close(18) = -1 EBADF (Bad file descriptor) [pid 5089] close(19) = -1 EBADF (Bad file descriptor) [pid 5089] close(20) = -1 EBADF (Bad file descriptor) [pid 5089] close(21) = -1 EBADF (Bad file descriptor) [pid 5089] close(22) = -1 EBADF (Bad file descriptor) [pid 5089] close(23) = -1 EBADF (Bad file descriptor) [pid 5089] close(24) = -1 EBADF (Bad file descriptor) [pid 5089] close(25) = -1 EBADF (Bad file descriptor) [pid 5089] close(26) = -1 EBADF (Bad file descriptor) [pid 5089] close(27) = -1 EBADF (Bad file descriptor) [pid 5089] close(28) = -1 EBADF (Bad file descriptor) [pid 5089] close(29) = -1 EBADF (Bad file descriptor) [pid 5089] exit_group(0) = ? [pid 5089] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 6 ./strace-static-x86_64: Process 5090 attached [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5090] write(3, "1000", 4) = 4 [pid 5090] close(3) = 0 [pid 5090] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5090] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 58.448840][ T5089] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 58.456861][ T5089] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 58.464899][ T5089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 58.472908][ T5089] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 58.481024][ T5089] [pid 5090] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5090] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5090] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5090] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5090] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5090] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5090] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5090] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5090] write(7, "5", 1) = 1 [ 58.542300][ T5090] FAULT_INJECTION: forcing a failure. [ 58.542300][ T5090] name failslab, interval 1, probability 0, space 0, times 0 [ 58.554987][ T5090] CPU: 1 PID: 5090 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 58.564884][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 58.574951][ T5090] Call Trace: [ 58.578232][ T5090] [ 58.581165][ T5090] dump_stack_lvl+0xd1/0x138 [ 58.585768][ T5090] should_fail_ex.cold+0x5/0xa [ 58.590562][ T5090] ? __inet_hash_connect+0x95e/0x1ba0 [ 58.595991][ T5090] should_failslab+0x9/0x20 [ 58.600524][ T5090] kmem_cache_alloc+0x5a/0x320 [ 58.605334][ T5090] __inet_hash_connect+0x95e/0x1ba0 [ 58.610553][ T5090] ? __inet_lookup_listener+0xbf0/0xbf0 [ 58.616118][ T5090] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 58.622491][ T5090] dccp_v4_connect+0xb82/0x1730 [ 58.627424][ T5090] __inet_stream_connect+0x69e/0xed0 [ 58.632834][ T5090] ? inet_listen+0x640/0x640 [ 58.637440][ T5090] ? mark_held_locks+0x9f/0xe0 [ 58.642301][ T5090] ? __local_bh_enable_ip+0xa4/0x130 [ 58.647598][ T5090] inet_stream_connect+0x57/0xa0 [ 58.652571][ T5090] ? __inet_stream_connect+0xed0/0xed0 [ 58.658178][ T5090] __sys_connect_file+0x153/0x1a0 [ 58.663237][ T5090] io_connect+0x3cc/0x720 [ 58.667585][ T5090] ? io_connect_prep+0x250/0x250 [ 58.672550][ T5090] ? receive_fd+0x110/0x110 [ 58.677116][ T5090] ? rcu_read_lock_sched_held+0x3e/0x70 [ 58.682705][ T5090] ? io_connect_prep+0x250/0x250 [ 58.687696][ T5090] io_issue_sqe+0x695/0x1250 [ 58.692304][ T5090] io_submit_sqes+0x96c/0x1e90 [ 58.697119][ T5090] __do_sys_io_uring_enter+0x103d/0x24e0 [ 58.702803][ T5090] ? io_submit_sqes+0x1e90/0x1e90 [ 58.707874][ T5090] ? ptrace_notify+0xfe/0x140 [ 58.712650][ T5090] ? lock_downgrade+0x6e0/0x6e0 [ 58.717541][ T5090] ? _raw_spin_unlock_irq+0x23/0x50 [ 58.722793][ T5090] ? lockdep_hardirqs_on+0x7d/0x100 [ 58.728028][ T5090] ? _raw_spin_unlock_irq+0x2e/0x50 [ 58.733584][ T5090] ? ptrace_notify+0xfe/0x140 [ 58.738276][ T5090] do_syscall_64+0x39/0xb0 [ 58.742729][ T5090] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.748670][ T5090] RIP: 0033:0x7f607b0de549 [ 58.753118][ T5090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.772752][ T5090] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 58.781210][ T5090] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5090] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5090] close(3) = 0 [pid 5090] close(4) = 0 [pid 5090] close(5) = 0 [pid 5090] close(6) = 0 [pid 5090] close(7) = 0 [pid 5090] close(8) = -1 EBADF (Bad file descriptor) [pid 5090] close(9) = -1 EBADF (Bad file descriptor) [pid 5090] close(10) = -1 EBADF (Bad file descriptor) [pid 5090] close(11) = -1 EBADF (Bad file descriptor) [pid 5090] close(12) = -1 EBADF (Bad file descriptor) [pid 5090] close(13) = -1 EBADF (Bad file descriptor) [pid 5090] close(14) = -1 EBADF (Bad file descriptor) [pid 5090] close(15) = -1 EBADF (Bad file descriptor) [pid 5090] close(16) = -1 EBADF (Bad file descriptor) [pid 5090] close(17) = -1 EBADF (Bad file descriptor) [pid 5090] close(18) = -1 EBADF (Bad file descriptor) [pid 5090] close(19) = -1 EBADF (Bad file descriptor) [pid 5090] close(20) = -1 EBADF (Bad file descriptor) [pid 5090] close(21) = -1 EBADF (Bad file descriptor) [pid 5090] close(22) = -1 EBADF (Bad file descriptor) [pid 5090] close(23) = -1 EBADF (Bad file descriptor) [pid 5090] close(24) = -1 EBADF (Bad file descriptor) [pid 5090] close(25) = -1 EBADF (Bad file descriptor) [pid 5090] close(26) = -1 EBADF (Bad file descriptor) [pid 5090] close(27) = -1 EBADF (Bad file descriptor) [pid 5090] close(28) = -1 EBADF (Bad file descriptor) [pid 5090] close(29) = -1 EBADF (Bad file descriptor) [pid 5090] exit_group(0) = ? [pid 5090] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 7 ./strace-static-x86_64: Process 5091 attached [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5091] setpgid(0, 0) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5091] write(3, "1000", 4) = 4 [pid 5091] close(3) = 0 [pid 5091] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5091] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5091] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5091] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5091] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5091] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5091] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5091] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5091] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5091] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5091] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5091] write(7, "5", 1) = 1 [ 58.789207][ T5090] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 58.797203][ T5090] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 58.805214][ T5090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 58.813228][ T5090] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 58.821220][ T5090] [ 58.859964][ T5091] FAULT_INJECTION: forcing a failure. [ 58.859964][ T5091] name failslab, interval 1, probability 0, space 0, times 0 [ 58.872673][ T5091] CPU: 0 PID: 5091 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 58.883514][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 58.893578][ T5091] Call Trace: [ 58.896860][ T5091] [ 58.899792][ T5091] dump_stack_lvl+0xd1/0x138 [ 58.904389][ T5091] should_fail_ex.cold+0x5/0xa [ 58.909242][ T5091] ? __inet_hash_connect+0x95e/0x1ba0 [ 58.914617][ T5091] should_failslab+0x9/0x20 [ 58.919123][ T5091] kmem_cache_alloc+0x5a/0x320 [ 58.923889][ T5091] __inet_hash_connect+0x95e/0x1ba0 [ 58.929093][ T5091] ? __inet_lookup_listener+0xbf0/0xbf0 [ 58.934668][ T5091] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 58.941051][ T5091] dccp_v4_connect+0xb82/0x1730 [ 58.945953][ T5091] __inet_stream_connect+0x69e/0xed0 [ 58.951283][ T5091] ? inet_listen+0x640/0x640 [ 58.955909][ T5091] ? mark_held_locks+0x9f/0xe0 [ 58.960699][ T5091] ? __local_bh_enable_ip+0xa4/0x130 [ 58.966014][ T5091] inet_stream_connect+0x57/0xa0 [ 58.970986][ T5091] ? __inet_stream_connect+0xed0/0xed0 [ 58.976479][ T5091] __sys_connect_file+0x153/0x1a0 [ 58.981532][ T5091] io_connect+0x3cc/0x720 [ 58.985985][ T5091] ? io_connect_prep+0x250/0x250 [ 58.990959][ T5091] ? receive_fd+0x110/0x110 [ 58.995512][ T5091] ? rcu_read_lock_sched_held+0x3e/0x70 [ 59.001083][ T5091] ? io_connect_prep+0x250/0x250 [ 59.006087][ T5091] io_issue_sqe+0x695/0x1250 [ 59.010796][ T5091] io_submit_sqes+0x96c/0x1e90 [ 59.015610][ T5091] __do_sys_io_uring_enter+0x103d/0x24e0 [ 59.021282][ T5091] ? io_submit_sqes+0x1e90/0x1e90 [ 59.026337][ T5091] ? ptrace_notify+0xfe/0x140 [ 59.031036][ T5091] ? lock_downgrade+0x6e0/0x6e0 [ 59.035919][ T5091] ? _raw_spin_unlock_irq+0x23/0x50 [ 59.041154][ T5091] ? lockdep_hardirqs_on+0x7d/0x100 [ 59.046375][ T5091] ? _raw_spin_unlock_irq+0x2e/0x50 [ 59.051597][ T5091] ? ptrace_notify+0xfe/0x140 [ 59.056302][ T5091] do_syscall_64+0x39/0xb0 [ 59.060758][ T5091] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.066682][ T5091] RIP: 0033:0x7f607b0de549 [ 59.071111][ T5091] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.090746][ T5091] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 59.099277][ T5091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5091] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5091] close(3) = 0 [pid 5091] close(4) = 0 [pid 5091] close(5) = 0 [pid 5091] close(6) = 0 [pid 5091] close(7) = 0 [pid 5091] close(8) = -1 EBADF (Bad file descriptor) [pid 5091] close(9) = -1 EBADF (Bad file descriptor) [pid 5091] close(10) = -1 EBADF (Bad file descriptor) [pid 5091] close(11) = -1 EBADF (Bad file descriptor) [pid 5091] close(12) = -1 EBADF (Bad file descriptor) [pid 5091] close(13) = -1 EBADF (Bad file descriptor) [pid 5091] close(14) = -1 EBADF (Bad file descriptor) [pid 5091] close(15) = -1 EBADF (Bad file descriptor) [pid 5091] close(16) = -1 EBADF (Bad file descriptor) [pid 5091] close(17) = -1 EBADF (Bad file descriptor) [pid 5091] close(18) = -1 EBADF (Bad file descriptor) [pid 5091] close(19) = -1 EBADF (Bad file descriptor) [pid 5091] close(20) = -1 EBADF (Bad file descriptor) [pid 5091] close(21) = -1 EBADF (Bad file descriptor) [pid 5091] close(22) = -1 EBADF (Bad file descriptor) [pid 5091] close(23) = -1 EBADF (Bad file descriptor) [pid 5091] close(24) = -1 EBADF (Bad file descriptor) [pid 5091] close(25) = -1 EBADF (Bad file descriptor) [pid 5091] close(26) = -1 EBADF (Bad file descriptor) [pid 5091] close(27) = -1 EBADF (Bad file descriptor) [pid 5091] close(28) = -1 EBADF (Bad file descriptor) [pid 5091] close(29) = -1 EBADF (Bad file descriptor) [pid 5091] exit_group(0) = ? [pid 5091] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5093 attached , child_tidptr=0x555555eff5d0) = 8 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5093] setpgid(0, 0) = 0 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5093] write(3, "1000", 4) = 4 [pid 5093] close(3) = 0 [pid 5093] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5093] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5093] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5093] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5093] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5093] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5093] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5093] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5093] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5093] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5093] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 59.107275][ T5091] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 59.115267][ T5091] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 59.123252][ T5091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 59.131337][ T5091] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 59.139344][ T5091] [pid 5093] write(7, "5", 1) = 1 [pid 5093] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5093] close(3) = 0 [pid 5093] close(4) = 0 [pid 5093] close(5) = 0 [pid 5093] close(6) = 0 [pid 5093] close(7) = 0 [pid 5093] close(8) = -1 EBADF (Bad file descriptor) [pid 5093] close(9) = -1 EBADF (Bad file descriptor) [pid 5093] close(10) = -1 EBADF (Bad file descriptor) [pid 5093] close(11) = -1 EBADF (Bad file descriptor) [pid 5093] close(12) = -1 EBADF (Bad file descriptor) [pid 5093] close(13) = -1 EBADF (Bad file descriptor) [pid 5093] close(14) = -1 EBADF (Bad file descriptor) [pid 5093] close(15) = -1 EBADF (Bad file descriptor) [pid 5093] close(16) = -1 EBADF (Bad file descriptor) [pid 5093] close(17) = -1 EBADF (Bad file descriptor) [pid 5093] close(18) = -1 EBADF (Bad file descriptor) [pid 5093] close(19) = -1 EBADF (Bad file descriptor) [pid 5093] close(20) = -1 EBADF (Bad file descriptor) [pid 5093] close(21) = -1 EBADF (Bad file descriptor) [pid 5093] close(22) = -1 EBADF (Bad file descriptor) [pid 5093] close(23) = -1 EBADF (Bad file descriptor) [pid 5093] close(24) = -1 EBADF (Bad file descriptor) [pid 5093] close(25) = -1 EBADF (Bad file descriptor) [pid 5093] close(26) = -1 EBADF (Bad file descriptor) [pid 5093] close(27) = -1 EBADF (Bad file descriptor) [pid 5093] close(28) = -1 EBADF (Bad file descriptor) [pid 5093] close(29) = -1 EBADF (Bad file descriptor) [pid 5093] exit_group(0) = ? [pid 5093] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5094 attached , child_tidptr=0x555555eff5d0) = 9 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5094] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5094] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5094] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5094] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5094] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5094] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5094] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5094] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5094] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5094] write(7, "5", 1) = 1 [ 59.241228][ T5094] FAULT_INJECTION: forcing a failure. [ 59.241228][ T5094] name failslab, interval 1, probability 0, space 0, times 0 [ 59.255197][ T5094] CPU: 0 PID: 5094 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 59.265144][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 59.275224][ T5094] Call Trace: [ 59.278508][ T5094] [ 59.281438][ T5094] dump_stack_lvl+0xd1/0x138 [ 59.286036][ T5094] should_fail_ex.cold+0x5/0xa [ 59.290799][ T5094] ? io_issue_sqe+0x695/0x1250 [ 59.295571][ T5094] should_failslab+0x9/0x20 [ 59.300105][ T5094] __kmem_cache_alloc_node+0x5b/0x330 [ 59.305501][ T5094] ? ref_tracker_alloc+0x158/0x560 [ 59.310663][ T5094] kmalloc_trace+0x26/0x60 [ 59.315147][ T5094] ref_tracker_alloc+0x158/0x560 [ 59.320127][ T5094] ? __lock_acquire+0xbc3/0x56d0 [ 59.325100][ T5094] ? ref_tracker_free+0x6b0/0x6b0 [ 59.330186][ T5094] dst_init+0xe4/0x520 [ 59.334290][ T5094] dst_alloc+0x16f/0x1f0 [ 59.338545][ T5094] rt_dst_alloc+0x55/0x430 [ 59.342976][ T5094] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 59.348973][ T5094] ip_route_output_key_hash+0x18f/0x340 [ 59.354533][ T5094] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 59.360910][ T5094] dccp_v4_connect+0x7e1/0x1730 [ 59.365787][ T5094] __inet_stream_connect+0x69e/0xed0 [ 59.371103][ T5094] ? inet_listen+0x640/0x640 [ 59.375713][ T5094] ? mark_held_locks+0x9f/0xe0 [ 59.381008][ T5094] ? __local_bh_enable_ip+0xa4/0x130 [ 59.386317][ T5094] inet_stream_connect+0x57/0xa0 [ 59.391298][ T5094] ? __inet_stream_connect+0xed0/0xed0 [ 59.396865][ T5094] __sys_connect_file+0x153/0x1a0 [ 59.401908][ T5094] io_connect+0x3cc/0x720 [ 59.406264][ T5094] ? io_connect_prep+0x250/0x250 [ 59.411214][ T5094] ? receive_fd+0x110/0x110 [ 59.415776][ T5094] ? rcu_read_lock_sched_held+0x3e/0x70 [ 59.421354][ T5094] ? io_connect_prep+0x250/0x250 [ 59.426374][ T5094] io_issue_sqe+0x695/0x1250 [ 59.430985][ T5094] io_submit_sqes+0x96c/0x1e90 [ 59.435840][ T5094] __do_sys_io_uring_enter+0x103d/0x24e0 [ 59.441552][ T5094] ? io_submit_sqes+0x1e90/0x1e90 [ 59.446591][ T5094] ? ptrace_notify+0xfe/0x140 [ 59.451288][ T5094] ? lock_downgrade+0x6e0/0x6e0 [ 59.456180][ T5094] ? _raw_spin_unlock_irq+0x23/0x50 [ 59.461400][ T5094] ? lockdep_hardirqs_on+0x7d/0x100 [ 59.466631][ T5094] ? _raw_spin_unlock_irq+0x2e/0x50 [ 59.471878][ T5094] ? ptrace_notify+0xfe/0x140 [ 59.476570][ T5094] do_syscall_64+0x39/0xb0 [ 59.481002][ T5094] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.486916][ T5094] RIP: 0033:0x7f607b0de549 [ 59.491443][ T5094] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.511080][ T5094] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 59.519501][ T5094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 59.527580][ T5094] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5094] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5094] close(3) = 0 [pid 5094] close(4) = 0 [pid 5094] close(5) = 0 [pid 5094] close(6) = 0 [pid 5094] close(7) = 0 [pid 5094] close(8) = -1 EBADF (Bad file descriptor) [pid 5094] close(9) = -1 EBADF (Bad file descriptor) [pid 5094] close(10) = -1 EBADF (Bad file descriptor) [pid 5094] close(11) = -1 EBADF (Bad file descriptor) [pid 5094] close(12) = -1 EBADF (Bad file descriptor) [pid 5094] close(13) = -1 EBADF (Bad file descriptor) [pid 5094] close(14) = -1 EBADF (Bad file descriptor) [pid 5094] close(15) = -1 EBADF (Bad file descriptor) [pid 5094] close(16) = -1 EBADF (Bad file descriptor) [pid 5094] close(17) = -1 EBADF (Bad file descriptor) [pid 5094] close(18) = -1 EBADF (Bad file descriptor) [pid 5094] close(19) = -1 EBADF (Bad file descriptor) [pid 5094] close(20) = -1 EBADF (Bad file descriptor) [pid 5094] close(21) = -1 EBADF (Bad file descriptor) [pid 5094] close(22) = -1 EBADF (Bad file descriptor) [pid 5094] close(23) = -1 EBADF (Bad file descriptor) [pid 5094] close(24) = -1 EBADF (Bad file descriptor) [pid 5094] close(25) = -1 EBADF (Bad file descriptor) [pid 5094] close(26) = -1 EBADF (Bad file descriptor) [pid 5094] close(27) = -1 EBADF (Bad file descriptor) [pid 5094] close(28) = -1 EBADF (Bad file descriptor) [pid 5094] close(29) = -1 EBADF (Bad file descriptor) [pid 5094] exit_group(0) = ? [pid 5094] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 10 ./strace-static-x86_64: Process 5095 attached [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1000", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5095] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5095] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5095] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5095] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5095] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5095] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5095] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5095] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5095] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5095] write(7, "5", 1) = 1 [pid 5095] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5095] close(3) = 0 [pid 5095] close(4) = 0 [pid 5095] close(5) = 0 [pid 5095] close(6) = 0 [ 59.535650][ T5094] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 59.543645][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 59.551682][ T5094] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 59.559693][ T5094] [pid 5095] close(7) = 0 [pid 5095] close(8) = -1 EBADF (Bad file descriptor) [pid 5095] close(9) = -1 EBADF (Bad file descriptor) [pid 5095] close(10) = -1 EBADF (Bad file descriptor) [pid 5095] close(11) = -1 EBADF (Bad file descriptor) [pid 5095] close(12) = -1 EBADF (Bad file descriptor) [pid 5095] close(13) = -1 EBADF (Bad file descriptor) [pid 5095] close(14) = -1 EBADF (Bad file descriptor) [pid 5095] close(15) = -1 EBADF (Bad file descriptor) [pid 5095] close(16) = -1 EBADF (Bad file descriptor) [pid 5095] close(17) = -1 EBADF (Bad file descriptor) [pid 5095] close(18) = -1 EBADF (Bad file descriptor) [pid 5095] close(19) = -1 EBADF (Bad file descriptor) [pid 5095] close(20) = -1 EBADF (Bad file descriptor) [pid 5095] close(21) = -1 EBADF (Bad file descriptor) [pid 5095] close(22) = -1 EBADF (Bad file descriptor) [pid 5095] close(23) = -1 EBADF (Bad file descriptor) [pid 5095] close(24) = -1 EBADF (Bad file descriptor) [pid 5095] close(25) = -1 EBADF (Bad file descriptor) [pid 5095] close(26) = -1 EBADF (Bad file descriptor) [pid 5095] close(27) = -1 EBADF (Bad file descriptor) [pid 5095] close(28) = -1 EBADF (Bad file descriptor) [pid 5095] close(29) = -1 EBADF (Bad file descriptor) [pid 5095] exit_group(0) = ? [pid 5095] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 11 ./strace-static-x86_64: Process 5096 attached [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5096] setpgid(0, 0) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] write(3, "1000", 4) = 4 [pid 5096] close(3) = 0 [pid 5096] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5096] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5096] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5096] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5096] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5096] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5096] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5096] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5096] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5096] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5096] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5096] write(7, "5", 1) = 1 [ 59.637434][ T5096] FAULT_INJECTION: forcing a failure. [ 59.637434][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 59.650173][ T5096] CPU: 0 PID: 5096 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 59.660115][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 59.670206][ T5096] Call Trace: [ 59.673511][ T5096] [ 59.676441][ T5096] dump_stack_lvl+0xd1/0x138 [ 59.681108][ T5096] should_fail_ex.cold+0x5/0xa [ 59.685899][ T5096] ? __inet_hash_connect+0x95e/0x1ba0 [ 59.691320][ T5096] should_failslab+0x9/0x20 [ 59.695876][ T5096] kmem_cache_alloc+0x5a/0x320 [ 59.700683][ T5096] __inet_hash_connect+0x95e/0x1ba0 [ 59.705912][ T5096] ? __inet_lookup_listener+0xbf0/0xbf0 [ 59.711513][ T5096] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 59.717884][ T5096] dccp_v4_connect+0xb82/0x1730 [ 59.722782][ T5096] __inet_stream_connect+0x69e/0xed0 [ 59.728118][ T5096] ? inet_listen+0x640/0x640 [ 59.732748][ T5096] ? mark_held_locks+0x9f/0xe0 [ 59.737541][ T5096] ? __local_bh_enable_ip+0xa4/0x130 [ 59.742854][ T5096] inet_stream_connect+0x57/0xa0 [ 59.747848][ T5096] ? __inet_stream_connect+0xed0/0xed0 [ 59.753319][ T5096] __sys_connect_file+0x153/0x1a0 [ 59.758455][ T5096] io_connect+0x3cc/0x720 [ 59.762842][ T5096] ? io_connect_prep+0x250/0x250 [ 59.767817][ T5096] ? receive_fd+0x110/0x110 [ 59.772337][ T5096] ? rcu_read_lock_sched_held+0x3e/0x70 [ 59.777902][ T5096] ? io_connect_prep+0x250/0x250 [ 59.782954][ T5096] io_issue_sqe+0x695/0x1250 [ 59.787576][ T5096] io_submit_sqes+0x96c/0x1e90 [ 59.792363][ T5096] __do_sys_io_uring_enter+0x103d/0x24e0 [ 59.798008][ T5096] ? io_submit_sqes+0x1e90/0x1e90 [ 59.803074][ T5096] ? ptrace_notify+0xfe/0x140 [ 59.807797][ T5096] ? lock_downgrade+0x6e0/0x6e0 [ 59.813325][ T5096] ? _raw_spin_unlock_irq+0x23/0x50 [ 59.818581][ T5096] ? lockdep_hardirqs_on+0x7d/0x100 [ 59.824779][ T5096] ? _raw_spin_unlock_irq+0x2e/0x50 [ 59.831246][ T5096] ? ptrace_notify+0xfe/0x140 [ 59.836922][ T5096] do_syscall_64+0x39/0xb0 [ 59.842175][ T5096] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.849269][ T5096] RIP: 0033:0x7f607b0de549 [ 59.853707][ T5096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.873356][ T5096] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [pid 5096] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5096] close(3) = 0 [pid 5096] close(4) = 0 [pid 5096] close(5) = 0 [pid 5096] close(6) = 0 [pid 5096] close(7) = 0 [pid 5096] close(8) = -1 EBADF (Bad file descriptor) [pid 5096] close(9) = -1 EBADF (Bad file descriptor) [pid 5096] close(10) = -1 EBADF (Bad file descriptor) [pid 5096] close(11) = -1 EBADF (Bad file descriptor) [pid 5096] close(12) = -1 EBADF (Bad file descriptor) [pid 5096] close(13) = -1 EBADF (Bad file descriptor) [pid 5096] close(14) = -1 EBADF (Bad file descriptor) [pid 5096] close(15) = -1 EBADF (Bad file descriptor) [pid 5096] close(16) = -1 EBADF (Bad file descriptor) [pid 5096] close(17) = -1 EBADF (Bad file descriptor) [pid 5096] close(18) = -1 EBADF (Bad file descriptor) [pid 5096] close(19) = -1 EBADF (Bad file descriptor) [pid 5096] close(20) = -1 EBADF (Bad file descriptor) [pid 5096] close(21) = -1 EBADF (Bad file descriptor) [pid 5096] close(22) = -1 EBADF (Bad file descriptor) [pid 5096] close(23) = -1 EBADF (Bad file descriptor) [pid 5096] close(24) = -1 EBADF (Bad file descriptor) [pid 5096] close(25) = -1 EBADF (Bad file descriptor) [pid 5096] close(26) = -1 EBADF (Bad file descriptor) [pid 5096] close(27) = -1 EBADF (Bad file descriptor) [pid 5096] close(28) = -1 EBADF (Bad file descriptor) [pid 5096] close(29) = -1 EBADF (Bad file descriptor) [pid 5096] exit_group(0) = ? [pid 5096] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 12 ./strace-static-x86_64: Process 5097 attached [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5097] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5097] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5097] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5097] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5097] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5097] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5097] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5097] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5097] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 59.881781][ T5096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 59.889776][ T5096] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 59.897776][ T5096] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 59.905843][ T5096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 59.913830][ T5096] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 59.921838][ T5096] [pid 5097] write(7, "5", 1) = 1 [ 59.970048][ T5097] FAULT_INJECTION: forcing a failure. [ 59.970048][ T5097] name failslab, interval 1, probability 0, space 0, times 0 [ 59.983904][ T5097] CPU: 0 PID: 5097 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 59.993927][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 60.003977][ T5097] Call Trace: [ 60.007251][ T5097] [ 60.010179][ T5097] dump_stack_lvl+0xd1/0x138 [ 60.014862][ T5097] should_fail_ex.cold+0x5/0xa [ 60.019667][ T5097] ? io_issue_sqe+0x695/0x1250 [ 60.024437][ T5097] should_failslab+0x9/0x20 [ 60.028943][ T5097] __kmem_cache_alloc_node+0x5b/0x330 [ 60.034317][ T5097] ? ref_tracker_alloc+0x158/0x560 [ 60.039441][ T5097] kmalloc_trace+0x26/0x60 [ 60.043863][ T5097] ref_tracker_alloc+0x158/0x560 [ 60.048802][ T5097] ? __lock_acquire+0xbc3/0x56d0 [ 60.053739][ T5097] ? ref_tracker_free+0x6b0/0x6b0 [ 60.058785][ T5097] dst_init+0xe4/0x520 [ 60.062859][ T5097] dst_alloc+0x16f/0x1f0 [ 60.067104][ T5097] rt_dst_alloc+0x55/0x430 [ 60.071527][ T5097] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 60.077542][ T5097] ip_route_output_key_hash+0x18f/0x340 [ 60.083182][ T5097] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 60.089445][ T5097] dccp_v4_connect+0x7e1/0x1730 [ 60.094748][ T5097] __inet_stream_connect+0x69e/0xed0 [ 60.100045][ T5097] ? inet_listen+0x640/0x640 [ 60.104775][ T5097] ? mark_held_locks+0x9f/0xe0 [ 60.109544][ T5097] ? __local_bh_enable_ip+0xa4/0x130 [ 60.114838][ T5097] inet_stream_connect+0x57/0xa0 [ 60.119785][ T5097] ? __inet_stream_connect+0xed0/0xed0 [ 60.125249][ T5097] __sys_connect_file+0x153/0x1a0 [ 60.130374][ T5097] io_connect+0x3cc/0x720 [ 60.134770][ T5097] ? io_connect_prep+0x250/0x250 [ 60.139724][ T5097] ? receive_fd+0x110/0x110 [ 60.144241][ T5097] ? rcu_read_lock_sched_held+0x3e/0x70 [ 60.149804][ T5097] ? io_connect_prep+0x250/0x250 [ 60.154768][ T5097] io_issue_sqe+0x695/0x1250 [ 60.159373][ T5097] io_submit_sqes+0x96c/0x1e90 [ 60.164153][ T5097] __do_sys_io_uring_enter+0x103d/0x24e0 [ 60.169797][ T5097] ? io_submit_sqes+0x1e90/0x1e90 [ 60.174947][ T5097] ? ptrace_notify+0xfe/0x140 [ 60.179631][ T5097] ? lock_downgrade+0x6e0/0x6e0 [ 60.184502][ T5097] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.189713][ T5097] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.195001][ T5097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.200197][ T5097] ? ptrace_notify+0xfe/0x140 [ 60.204900][ T5097] do_syscall_64+0x39/0xb0 [ 60.209348][ T5097] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.215265][ T5097] RIP: 0033:0x7f607b0de549 [ 60.219698][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.239316][ T5097] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 60.247731][ T5097] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 60.255703][ T5097] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 60.263677][ T5097] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5097] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5097] close(3) = 0 [pid 5097] close(4) = 0 [pid 5097] close(5) = 0 [pid 5097] close(6) = 0 [pid 5097] close(7) = 0 [pid 5097] close(8) = -1 EBADF (Bad file descriptor) [pid 5097] close(9) = -1 EBADF (Bad file descriptor) [pid 5097] close(10) = -1 EBADF (Bad file descriptor) [pid 5097] close(11) = -1 EBADF (Bad file descriptor) [pid 5097] close(12) = -1 EBADF (Bad file descriptor) [pid 5097] close(13) = -1 EBADF (Bad file descriptor) [pid 5097] close(14) = -1 EBADF (Bad file descriptor) [pid 5097] close(15) = -1 EBADF (Bad file descriptor) [pid 5097] close(16) = -1 EBADF (Bad file descriptor) [pid 5097] close(17) = -1 EBADF (Bad file descriptor) [pid 5097] close(18) = -1 EBADF (Bad file descriptor) [pid 5097] close(19) = -1 EBADF (Bad file descriptor) [pid 5097] close(20) = -1 EBADF (Bad file descriptor) [pid 5097] close(21) = -1 EBADF (Bad file descriptor) [pid 5097] close(22) = -1 EBADF (Bad file descriptor) [pid 5097] close(23) = -1 EBADF (Bad file descriptor) [pid 5097] close(24) = -1 EBADF (Bad file descriptor) [pid 5097] close(25) = -1 EBADF (Bad file descriptor) [pid 5097] close(26) = -1 EBADF (Bad file descriptor) [pid 5097] close(27) = -1 EBADF (Bad file descriptor) [pid 5097] close(28) = -1 EBADF (Bad file descriptor) [pid 5097] close(29) = -1 EBADF (Bad file descriptor) [pid 5097] exit_group(0) = ? [pid 5097] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5098 attached , child_tidptr=0x555555eff5d0) = 13 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5098] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5098] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5098] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5098] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5098] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5098] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 60.271646][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 60.279710][ T5097] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 60.287727][ T5097] [pid 5098] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5098] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5098] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5098] write(7, "5", 1) = 1 [ 60.337736][ T5098] FAULT_INJECTION: forcing a failure. [ 60.337736][ T5098] name failslab, interval 1, probability 0, space 0, times 0 [ 60.351432][ T5098] CPU: 0 PID: 5098 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 60.361443][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 60.371510][ T5098] Call Trace: [ 60.374784][ T5098] [ 60.377713][ T5098] dump_stack_lvl+0xd1/0x138 [ 60.382312][ T5098] should_fail_ex.cold+0x5/0xa [ 60.387076][ T5098] ? io_issue_sqe+0x695/0x1250 [ 60.391852][ T5098] should_failslab+0x9/0x20 [ 60.396360][ T5098] __kmem_cache_alloc_node+0x5b/0x330 [ 60.401732][ T5098] ? ref_tracker_alloc+0x158/0x560 [ 60.406854][ T5098] kmalloc_trace+0x26/0x60 [ 60.411294][ T5098] ref_tracker_alloc+0x158/0x560 [ 60.416272][ T5098] ? __lock_acquire+0xbc3/0x56d0 [ 60.421234][ T5098] ? ref_tracker_free+0x6b0/0x6b0 [ 60.426346][ T5098] dst_init+0xe4/0x520 [ 60.430463][ T5098] dst_alloc+0x16f/0x1f0 [ 60.435003][ T5098] rt_dst_alloc+0x55/0x430 [ 60.439450][ T5098] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 60.445561][ T5098] ip_route_output_key_hash+0x18f/0x340 [ 60.451232][ T5098] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 60.457525][ T5098] dccp_v4_connect+0x7e1/0x1730 [ 60.462455][ T5098] __inet_stream_connect+0x69e/0xed0 [ 60.467813][ T5098] ? inet_listen+0x640/0x640 [ 60.472450][ T5098] ? mark_held_locks+0x9f/0xe0 [ 60.477246][ T5098] ? __local_bh_enable_ip+0xa4/0x130 [ 60.482574][ T5098] inet_stream_connect+0x57/0xa0 [ 60.487556][ T5098] ? __inet_stream_connect+0xed0/0xed0 [ 60.493136][ T5098] __sys_connect_file+0x153/0x1a0 [ 60.498194][ T5098] io_connect+0x3cc/0x720 [ 60.502565][ T5098] ? io_connect_prep+0x250/0x250 [ 60.507537][ T5098] ? receive_fd+0x110/0x110 [ 60.512177][ T5098] ? rcu_read_lock_sched_held+0x3e/0x70 [ 60.517818][ T5098] ? io_connect_prep+0x250/0x250 [ 60.522793][ T5098] io_issue_sqe+0x695/0x1250 [ 60.527420][ T5098] io_submit_sqes+0x96c/0x1e90 [ 60.532234][ T5098] __do_sys_io_uring_enter+0x103d/0x24e0 [ 60.537902][ T5098] ? io_submit_sqes+0x1e90/0x1e90 [ 60.543397][ T5098] ? ptrace_notify+0xfe/0x140 [ 60.548101][ T5098] ? lock_downgrade+0x6e0/0x6e0 [ 60.553242][ T5098] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.558473][ T5098] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.563797][ T5098] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.569023][ T5098] ? ptrace_notify+0xfe/0x140 [ 60.573820][ T5098] do_syscall_64+0x39/0xb0 [ 60.578272][ T5098] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.584187][ T5098] RIP: 0033:0x7f607b0de549 [ 60.588636][ T5098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.608306][ T5098] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 60.616748][ T5098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 60.624735][ T5098] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5098] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5098] close(3) = 0 [pid 5098] close(4) = 0 [pid 5098] close(5) = 0 [pid 5098] close(6) = 0 [pid 5098] close(7) = 0 [pid 5098] close(8) = -1 EBADF (Bad file descriptor) [pid 5098] close(9) = -1 EBADF (Bad file descriptor) [pid 5098] close(10) = -1 EBADF (Bad file descriptor) [pid 5098] close(11) = -1 EBADF (Bad file descriptor) [pid 5098] close(12) = -1 EBADF (Bad file descriptor) [pid 5098] close(13) = -1 EBADF (Bad file descriptor) [pid 5098] close(14) = -1 EBADF (Bad file descriptor) [pid 5098] close(15) = -1 EBADF (Bad file descriptor) [pid 5098] close(16) = -1 EBADF (Bad file descriptor) [pid 5098] close(17) = -1 EBADF (Bad file descriptor) [pid 5098] close(18) = -1 EBADF (Bad file descriptor) [pid 5098] close(19) = -1 EBADF (Bad file descriptor) [pid 5098] close(20) = -1 EBADF (Bad file descriptor) [pid 5098] close(21) = -1 EBADF (Bad file descriptor) [pid 5098] close(22) = -1 EBADF (Bad file descriptor) [pid 5098] close(23) = -1 EBADF (Bad file descriptor) [pid 5098] close(24) = -1 EBADF (Bad file descriptor) [pid 5098] close(25) = -1 EBADF (Bad file descriptor) [pid 5098] close(26) = -1 EBADF (Bad file descriptor) [pid 5098] close(27) = -1 EBADF (Bad file descriptor) [pid 5098] close(28) = -1 EBADF (Bad file descriptor) [pid 5098] close(29) = -1 EBADF (Bad file descriptor) [pid 5098] exit_group(0) = ? [pid 5098] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached , child_tidptr=0x555555eff5d0) = 14 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5099] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5099] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5099] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5099] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5099] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5099] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5099] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5099] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 60.632721][ T5098] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 60.640707][ T5098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 60.648694][ T5098] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 60.656729][ T5098] [pid 5099] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5099] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5099] write(7, "5", 1) = 1 [ 60.702944][ T5099] FAULT_INJECTION: forcing a failure. [ 60.702944][ T5099] name failslab, interval 1, probability 0, space 0, times 0 [ 60.716449][ T5099] CPU: 0 PID: 5099 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 60.726360][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 60.736417][ T5099] Call Trace: [ 60.739694][ T5099] [ 60.742620][ T5099] dump_stack_lvl+0xd1/0x138 [ 60.747233][ T5099] should_fail_ex.cold+0x5/0xa [ 60.751995][ T5099] ? io_issue_sqe+0x695/0x1250 [ 60.756771][ T5099] should_failslab+0x9/0x20 [ 60.761278][ T5099] __kmem_cache_alloc_node+0x5b/0x330 [ 60.766648][ T5099] ? ref_tracker_alloc+0x158/0x560 [ 60.771786][ T5099] kmalloc_trace+0x26/0x60 [ 60.776248][ T5099] ref_tracker_alloc+0x158/0x560 [ 60.781189][ T5099] ? __lock_acquire+0xbc3/0x56d0 [ 60.786130][ T5099] ? ref_tracker_free+0x6b0/0x6b0 [ 60.791170][ T5099] dst_init+0xe4/0x520 [ 60.795252][ T5099] dst_alloc+0x16f/0x1f0 [ 60.799499][ T5099] rt_dst_alloc+0x55/0x430 [ 60.803920][ T5099] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 60.809914][ T5099] ip_route_output_key_hash+0x18f/0x340 [ 60.815563][ T5099] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 60.821883][ T5099] dccp_v4_connect+0x7e1/0x1730 [ 60.826788][ T5099] __inet_stream_connect+0x69e/0xed0 [ 60.832092][ T5099] ? inet_listen+0x640/0x640 [ 60.836718][ T5099] ? mark_held_locks+0x9f/0xe0 [ 60.841505][ T5099] ? __local_bh_enable_ip+0xa4/0x130 [ 60.846803][ T5099] inet_stream_connect+0x57/0xa0 [ 60.851748][ T5099] ? __inet_stream_connect+0xed0/0xed0 [ 60.857388][ T5099] __sys_connect_file+0x153/0x1a0 [ 60.862411][ T5099] io_connect+0x3cc/0x720 [ 60.866745][ T5099] ? io_connect_prep+0x250/0x250 [ 60.871699][ T5099] ? receive_fd+0x110/0x110 [ 60.876240][ T5099] ? rcu_read_lock_sched_held+0x3e/0x70 [ 60.881786][ T5099] ? io_connect_prep+0x250/0x250 [ 60.886726][ T5099] io_issue_sqe+0x695/0x1250 [ 60.891320][ T5099] io_submit_sqes+0x96c/0x1e90 [ 60.896096][ T5099] __do_sys_io_uring_enter+0x103d/0x24e0 [ 60.901736][ T5099] ? io_submit_sqes+0x1e90/0x1e90 [ 60.906766][ T5099] ? ptrace_notify+0xfe/0x140 [ 60.911439][ T5099] ? lock_downgrade+0x6e0/0x6e0 [ 60.916294][ T5099] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.921511][ T5099] ? lockdep_hardirqs_on+0x7d/0x100 [ 60.926735][ T5099] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.931932][ T5099] ? ptrace_notify+0xfe/0x140 [ 60.936698][ T5099] do_syscall_64+0x39/0xb0 [ 60.941119][ T5099] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.947011][ T5099] RIP: 0033:0x7f607b0de549 [ 60.951424][ T5099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 60.971043][ T5099] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 60.979485][ T5099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 60.987454][ T5099] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 60.995423][ T5099] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5099] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5099] close(3) = 0 [pid 5099] close(4) = 0 [pid 5099] close(5) = 0 [pid 5099] close(6) = 0 [pid 5099] close(7) = 0 [pid 5099] close(8) = -1 EBADF (Bad file descriptor) [pid 5099] close(9) = -1 EBADF (Bad file descriptor) [pid 5099] close(10) = -1 EBADF (Bad file descriptor) [pid 5099] close(11) = -1 EBADF (Bad file descriptor) [pid 5099] close(12) = -1 EBADF (Bad file descriptor) [pid 5099] close(13) = -1 EBADF (Bad file descriptor) [pid 5099] close(14) = -1 EBADF (Bad file descriptor) [pid 5099] close(15) = -1 EBADF (Bad file descriptor) [pid 5099] close(16) = -1 EBADF (Bad file descriptor) [pid 5099] close(17) = -1 EBADF (Bad file descriptor) [pid 5099] close(18) = -1 EBADF (Bad file descriptor) [pid 5099] close(19) = -1 EBADF (Bad file descriptor) [pid 5099] close(20) = -1 EBADF (Bad file descriptor) [pid 5099] close(21) = -1 EBADF (Bad file descriptor) [pid 5099] close(22) = -1 EBADF (Bad file descriptor) [pid 5099] close(23) = -1 EBADF (Bad file descriptor) [pid 5099] close(24) = -1 EBADF (Bad file descriptor) [pid 5099] close(25) = -1 EBADF (Bad file descriptor) [pid 5099] close(26) = -1 EBADF (Bad file descriptor) [pid 5099] close(27) = -1 EBADF (Bad file descriptor) [pid 5099] close(28) = -1 EBADF (Bad file descriptor) [pid 5099] close(29) = -1 EBADF (Bad file descriptor) [pid 5099] exit_group(0) = ? [pid 5099] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 15 ./strace-static-x86_64: Process 5100 attached [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5100] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5100] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5100] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 61.003398][ T5099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 61.011365][ T5099] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 61.019349][ T5099] [pid 5100] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5100] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5100] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5100] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5100] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5100] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5100] write(7, "5", 1) = 1 [ 61.075026][ T5100] FAULT_INJECTION: forcing a failure. [ 61.075026][ T5100] name failslab, interval 1, probability 0, space 0, times 0 [ 61.087716][ T5100] CPU: 1 PID: 5100 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 61.097687][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 61.107785][ T5100] Call Trace: [ 61.111083][ T5100] [ 61.114019][ T5100] dump_stack_lvl+0xd1/0x138 [ 61.118625][ T5100] should_fail_ex.cold+0x5/0xa [ 61.123411][ T5100] ? __inet_hash_connect+0x95e/0x1ba0 [ 61.128792][ T5100] should_failslab+0x9/0x20 [ 61.133309][ T5100] kmem_cache_alloc+0x5a/0x320 [ 61.138087][ T5100] __inet_hash_connect+0x95e/0x1ba0 [ 61.143298][ T5100] ? __inet_lookup_listener+0xbf0/0xbf0 [ 61.148858][ T5100] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 61.155212][ T5100] dccp_v4_connect+0xb82/0x1730 [ 61.160173][ T5100] __inet_stream_connect+0x69e/0xed0 [ 61.165589][ T5100] ? inet_listen+0x640/0x640 [ 61.170228][ T5100] ? mark_held_locks+0x9f/0xe0 [ 61.175006][ T5100] ? __local_bh_enable_ip+0xa4/0x130 [ 61.180307][ T5100] inet_stream_connect+0x57/0xa0 [ 61.185299][ T5100] ? __inet_stream_connect+0xed0/0xed0 [ 61.190770][ T5100] __sys_connect_file+0x153/0x1a0 [ 61.195888][ T5100] io_connect+0x3cc/0x720 [ 61.200229][ T5100] ? io_connect_prep+0x250/0x250 [ 61.205182][ T5100] ? receive_fd+0x110/0x110 [ 61.209728][ T5100] ? rcu_read_lock_sched_held+0x3e/0x70 [ 61.215319][ T5100] ? io_connect_prep+0x250/0x250 [ 61.220300][ T5100] io_issue_sqe+0x695/0x1250 [ 61.224923][ T5100] io_submit_sqes+0x96c/0x1e90 [ 61.229733][ T5100] __do_sys_io_uring_enter+0x103d/0x24e0 [ 61.235433][ T5100] ? io_submit_sqes+0x1e90/0x1e90 [ 61.240523][ T5100] ? ptrace_notify+0xfe/0x140 [ 61.245232][ T5100] ? lock_downgrade+0x6e0/0x6e0 [ 61.250121][ T5100] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.255445][ T5100] ? lockdep_hardirqs_on+0x7d/0x100 [ 61.260678][ T5100] ? _raw_spin_unlock_irq+0x2e/0x50 [ 61.265892][ T5100] ? ptrace_notify+0xfe/0x140 [ 61.270585][ T5100] do_syscall_64+0x39/0xb0 [ 61.275016][ T5100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.280935][ T5100] RIP: 0033:0x7f607b0de549 [ 61.285356][ T5100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.304976][ T5100] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 61.313453][ T5100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5100] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5100] close(3) = 0 [pid 5100] close(4) = 0 [pid 5100] close(5) = 0 [pid 5100] close(6) = 0 [pid 5100] close(7) = 0 [pid 5100] close(8) = -1 EBADF (Bad file descriptor) [pid 5100] close(9) = -1 EBADF (Bad file descriptor) [pid 5100] close(10) = -1 EBADF (Bad file descriptor) [pid 5100] close(11) = -1 EBADF (Bad file descriptor) [pid 5100] close(12) = -1 EBADF (Bad file descriptor) [pid 5100] close(13) = -1 EBADF (Bad file descriptor) [pid 5100] close(14) = -1 EBADF (Bad file descriptor) [pid 5100] close(15) = -1 EBADF (Bad file descriptor) [pid 5100] close(16) = -1 EBADF (Bad file descriptor) [pid 5100] close(17) = -1 EBADF (Bad file descriptor) [pid 5100] close(18) = -1 EBADF (Bad file descriptor) [pid 5100] close(19) = -1 EBADF (Bad file descriptor) [pid 5100] close(20) = -1 EBADF (Bad file descriptor) [pid 5100] close(21) = -1 EBADF (Bad file descriptor) [pid 5100] close(22) = -1 EBADF (Bad file descriptor) [pid 5100] close(23) = -1 EBADF (Bad file descriptor) [pid 5100] close(24) = -1 EBADF (Bad file descriptor) [pid 5100] close(25) = -1 EBADF (Bad file descriptor) [pid 5100] close(26) = -1 EBADF (Bad file descriptor) [pid 5100] close(27) = -1 EBADF (Bad file descriptor) [pid 5100] close(28) = -1 EBADF (Bad file descriptor) [pid 5100] close(29) = -1 EBADF (Bad file descriptor) [pid 5100] exit_group(0) = ? [pid 5100] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5101 attached , child_tidptr=0x555555eff5d0) = 16 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5101] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5101] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5101] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5101] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5101] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5101] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5101] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5101] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5101] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5101] write(7, "5", 1) = 1 [ 61.321442][ T5100] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 61.329513][ T5100] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 61.337590][ T5100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 61.345593][ T5100] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 61.353583][ T5100] [ 61.398661][ T5101] FAULT_INJECTION: forcing a failure. [ 61.398661][ T5101] name failslab, interval 1, probability 0, space 0, times 0 [ 61.411361][ T5101] CPU: 0 PID: 5101 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 61.421448][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 61.431536][ T5101] Call Trace: [ 61.434829][ T5101] [ 61.437790][ T5101] dump_stack_lvl+0xd1/0x138 [ 61.442428][ T5101] should_fail_ex.cold+0x5/0xa [ 61.447219][ T5101] ? __inet_hash_connect+0x95e/0x1ba0 [ 61.452881][ T5101] should_failslab+0x9/0x20 [ 61.457443][ T5101] kmem_cache_alloc+0x5a/0x320 [ 61.462257][ T5101] __inet_hash_connect+0x95e/0x1ba0 [ 61.467524][ T5101] ? __inet_lookup_listener+0xbf0/0xbf0 [ 61.473188][ T5101] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 61.479580][ T5101] dccp_v4_connect+0xb82/0x1730 [ 61.484574][ T5101] __inet_stream_connect+0x69e/0xed0 [ 61.489990][ T5101] ? inet_listen+0x640/0x640 [ 61.494636][ T5101] ? mark_held_locks+0x9f/0xe0 [ 61.499458][ T5101] ? __local_bh_enable_ip+0xa4/0x130 [ 61.504779][ T5101] inet_stream_connect+0x57/0xa0 [ 61.509752][ T5101] ? __inet_stream_connect+0xed0/0xed0 [ 61.515246][ T5101] __sys_connect_file+0x153/0x1a0 [ 61.520310][ T5101] io_connect+0x3cc/0x720 [ 61.524740][ T5101] ? io_connect_prep+0x250/0x250 [ 61.529710][ T5101] ? receive_fd+0x110/0x110 [ 61.534257][ T5101] ? rcu_read_lock_sched_held+0x3e/0x70 [ 61.539826][ T5101] ? io_connect_prep+0x250/0x250 [ 61.544799][ T5101] io_issue_sqe+0x695/0x1250 [ 61.549425][ T5101] io_submit_sqes+0x96c/0x1e90 [ 61.554239][ T5101] __do_sys_io_uring_enter+0x103d/0x24e0 [ 61.559942][ T5101] ? io_submit_sqes+0x1e90/0x1e90 [ 61.564999][ T5101] ? ptrace_notify+0xfe/0x140 [ 61.569701][ T5101] ? lock_downgrade+0x6e0/0x6e0 [ 61.574595][ T5101] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.579917][ T5101] ? lockdep_hardirqs_on+0x7d/0x100 [ 61.585142][ T5101] ? _raw_spin_unlock_irq+0x2e/0x50 [ 61.590367][ T5101] ? ptrace_notify+0xfe/0x140 [ 61.595077][ T5101] do_syscall_64+0x39/0xb0 [ 61.599541][ T5101] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.605457][ T5101] RIP: 0033:0x7f607b0de549 [ 61.609895][ T5101] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 61.629550][ T5101] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 61.637991][ T5101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5101] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5101] close(3) = 0 [pid 5101] close(4) = 0 [pid 5101] close(5) = 0 [pid 5101] close(6) = 0 [pid 5101] close(7) = 0 [pid 5101] close(8) = -1 EBADF (Bad file descriptor) [pid 5101] close(9) = -1 EBADF (Bad file descriptor) [pid 5101] close(10) = -1 EBADF (Bad file descriptor) [pid 5101] close(11) = -1 EBADF (Bad file descriptor) [pid 5101] close(12) = -1 EBADF (Bad file descriptor) [pid 5101] close(13) = -1 EBADF (Bad file descriptor) [pid 5101] close(14) = -1 EBADF (Bad file descriptor) [pid 5101] close(15) = -1 EBADF (Bad file descriptor) [pid 5101] close(16) = -1 EBADF (Bad file descriptor) [pid 5101] close(17) = -1 EBADF (Bad file descriptor) [pid 5101] close(18) = -1 EBADF (Bad file descriptor) [pid 5101] close(19) = -1 EBADF (Bad file descriptor) [pid 5101] close(20) = -1 EBADF (Bad file descriptor) [pid 5101] close(21) = -1 EBADF (Bad file descriptor) [pid 5101] close(22) = -1 EBADF (Bad file descriptor) [pid 5101] close(23) = -1 EBADF (Bad file descriptor) [pid 5101] close(24) = -1 EBADF (Bad file descriptor) [pid 5101] close(25) = -1 EBADF (Bad file descriptor) [pid 5101] close(26) = -1 EBADF (Bad file descriptor) [pid 5101] close(27) = -1 EBADF (Bad file descriptor) [pid 5101] close(28) = -1 EBADF (Bad file descriptor) [pid 5101] close(29) = -1 EBADF (Bad file descriptor) [pid 5101] exit_group(0) = ? [pid 5101] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5102 attached , child_tidptr=0x555555eff5d0) = 17 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5102] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5102] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5102] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5102] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5102] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5102] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5102] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5102] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5102] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 61.645976][ T5101] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 61.653959][ T5101] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 61.661944][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 61.669932][ T5101] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 61.677947][ T5101] [pid 5102] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5102] write(7, "5", 1) = 1 [ 61.735498][ T5102] FAULT_INJECTION: forcing a failure. [ 61.735498][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 61.748994][ T5102] CPU: 0 PID: 5102 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 61.758949][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 61.769037][ T5102] Call Trace: [ 61.772353][ T5102] [ 61.775325][ T5102] dump_stack_lvl+0xd1/0x138 [ 61.779933][ T5102] should_fail_ex.cold+0x5/0xa [ 61.784791][ T5102] ? io_issue_sqe+0x695/0x1250 [ 61.789827][ T5102] should_failslab+0x9/0x20 [ 61.795038][ T5102] __kmem_cache_alloc_node+0x5b/0x330 [ 61.801235][ T5102] ? ref_tracker_alloc+0x158/0x560 [ 61.806497][ T5102] kmalloc_trace+0x26/0x60 [ 61.811029][ T5102] ref_tracker_alloc+0x158/0x560 [ 61.816014][ T5102] ? __lock_acquire+0xbc3/0x56d0 [ 61.820977][ T5102] ? ref_tracker_free+0x6b0/0x6b0 [ 61.826037][ T5102] dst_init+0xe4/0x520 [ 61.830135][ T5102] dst_alloc+0x16f/0x1f0 [ 61.835906][ T5102] rt_dst_alloc+0x55/0x430 [ 61.840382][ T5102] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 61.846406][ T5102] ip_route_output_key_hash+0x18f/0x340 [ 61.851976][ T5102] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 61.858428][ T5102] dccp_v4_connect+0x7e1/0x1730 [ 61.863395][ T5102] __inet_stream_connect+0x69e/0xed0 [ 61.868790][ T5102] ? inet_listen+0x640/0x640 [ 61.873431][ T5102] ? mark_held_locks+0x9f/0xe0 [ 61.878418][ T5102] ? __local_bh_enable_ip+0xa4/0x130 [ 61.883751][ T5102] inet_stream_connect+0x57/0xa0 [ 61.888707][ T5102] ? __inet_stream_connect+0xed0/0xed0 [ 61.894194][ T5102] __sys_connect_file+0x153/0x1a0 [ 61.899256][ T5102] io_connect+0x3cc/0x720 [ 61.903603][ T5102] ? io_connect_prep+0x250/0x250 [ 61.908562][ T5102] ? receive_fd+0x110/0x110 [ 61.913083][ T5102] ? rcu_read_lock_sched_held+0x3e/0x70 [ 61.918641][ T5102] ? io_connect_prep+0x250/0x250 [ 61.923595][ T5102] io_issue_sqe+0x695/0x1250 [ 61.928218][ T5102] io_submit_sqes+0x96c/0x1e90 [ 61.933031][ T5102] __do_sys_io_uring_enter+0x103d/0x24e0 [ 61.938684][ T5102] ? io_submit_sqes+0x1e90/0x1e90 [ 61.943807][ T5102] ? ptrace_notify+0xfe/0x140 [ 61.948530][ T5102] ? lock_downgrade+0x6e0/0x6e0 [ 61.953440][ T5102] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.958676][ T5102] ? lockdep_hardirqs_on+0x7d/0x100 [ 61.964198][ T5102] ? _raw_spin_unlock_irq+0x2e/0x50 [ 61.969424][ T5102] ? ptrace_notify+0xfe/0x140 [ 61.974119][ T5102] do_syscall_64+0x39/0xb0 [ 61.978550][ T5102] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.984484][ T5102] RIP: 0033:0x7f607b0de549 [ 61.988913][ T5102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 62.008550][ T5102] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 62.017058][ T5102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 62.025155][ T5102] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5102] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5102] close(3) = 0 [pid 5102] close(4) = 0 [pid 5102] close(5) = 0 [pid 5102] close(6) = 0 [pid 5102] close(7) = 0 [pid 5102] close(8) = -1 EBADF (Bad file descriptor) [pid 5102] close(9) = -1 EBADF (Bad file descriptor) [pid 5102] close(10) = -1 EBADF (Bad file descriptor) [pid 5102] close(11) = -1 EBADF (Bad file descriptor) [pid 5102] close(12) = -1 EBADF (Bad file descriptor) [pid 5102] close(13) = -1 EBADF (Bad file descriptor) [pid 5102] close(14) = -1 EBADF (Bad file descriptor) [pid 5102] close(15) = -1 EBADF (Bad file descriptor) [pid 5102] close(16) = -1 EBADF (Bad file descriptor) [pid 5102] close(17) = -1 EBADF (Bad file descriptor) [pid 5102] close(18) = -1 EBADF (Bad file descriptor) [pid 5102] close(19) = -1 EBADF (Bad file descriptor) [pid 5102] close(20) = -1 EBADF (Bad file descriptor) [pid 5102] close(21) = -1 EBADF (Bad file descriptor) [pid 5102] close(22) = -1 EBADF (Bad file descriptor) [pid 5102] close(23) = -1 EBADF (Bad file descriptor) [pid 5102] close(24) = -1 EBADF (Bad file descriptor) [pid 5102] close(25) = -1 EBADF (Bad file descriptor) [pid 5102] close(26) = -1 EBADF (Bad file descriptor) [pid 5102] close(27) = -1 EBADF (Bad file descriptor) [pid 5102] close(28) = -1 EBADF (Bad file descriptor) [pid 5102] close(29) = -1 EBADF (Bad file descriptor) [pid 5102] exit_group(0) = ? [pid 5102] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached , child_tidptr=0x555555eff5d0) = 18 [ 62.033159][ T5102] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 62.041164][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 62.049160][ T5102] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 62.057313][ T5102] [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5103] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5103] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5103] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5103] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5103] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5103] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5103] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5103] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5103] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5103] write(7, "5", 1) = 1 [ 62.119840][ T5103] FAULT_INJECTION: forcing a failure. [ 62.119840][ T5103] name failslab, interval 1, probability 0, space 0, times 0 [ 62.133176][ T5103] CPU: 0 PID: 5103 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 62.143120][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 62.153534][ T5103] Call Trace: [ 62.156814][ T5103] [ 62.159854][ T5103] dump_stack_lvl+0xd1/0x138 [ 62.164480][ T5103] should_fail_ex.cold+0x5/0xa [ 62.169369][ T5103] ? io_issue_sqe+0x695/0x1250 [ 62.174162][ T5103] should_failslab+0x9/0x20 [ 62.178694][ T5103] __kmem_cache_alloc_node+0x5b/0x330 [ 62.184084][ T5103] ? ref_tracker_alloc+0x158/0x560 [ 62.189224][ T5103] kmalloc_trace+0x26/0x60 [ 62.193673][ T5103] ref_tracker_alloc+0x158/0x560 [ 62.198656][ T5103] ? __lock_acquire+0xbc3/0x56d0 [ 62.203656][ T5103] ? ref_tracker_free+0x6b0/0x6b0 [ 62.208749][ T5103] dst_init+0xe4/0x520 [ 62.212851][ T5103] dst_alloc+0x16f/0x1f0 [ 62.217137][ T5103] rt_dst_alloc+0x55/0x430 [ 62.221624][ T5103] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 62.227685][ T5103] ip_route_output_key_hash+0x18f/0x340 [ 62.233291][ T5103] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 62.239596][ T5103] dccp_v4_connect+0x7e1/0x1730 [ 62.244527][ T5103] __inet_stream_connect+0x69e/0xed0 [ 62.249861][ T5103] ? inet_listen+0x640/0x640 [ 62.254491][ T5103] ? mark_held_locks+0x9f/0xe0 [ 62.259316][ T5103] ? __local_bh_enable_ip+0xa4/0x130 [ 62.264658][ T5103] inet_stream_connect+0x57/0xa0 [ 62.269643][ T5103] ? __inet_stream_connect+0xed0/0xed0 [ 62.275143][ T5103] __sys_connect_file+0x153/0x1a0 [ 62.280204][ T5103] io_connect+0x3cc/0x720 [ 62.284587][ T5103] ? io_connect_prep+0x250/0x250 [ 62.289644][ T5103] ? receive_fd+0x110/0x110 [ 62.294203][ T5103] ? rcu_read_lock_sched_held+0x3e/0x70 [ 62.299776][ T5103] ? io_connect_prep+0x250/0x250 [ 62.304762][ T5103] io_issue_sqe+0x695/0x1250 [ 62.309416][ T5103] io_submit_sqes+0x96c/0x1e90 [ 62.314231][ T5103] __do_sys_io_uring_enter+0x103d/0x24e0 [ 62.319995][ T5103] ? io_submit_sqes+0x1e90/0x1e90 [ 62.325051][ T5103] ? ptrace_notify+0xfe/0x140 [ 62.329925][ T5103] ? lock_downgrade+0x6e0/0x6e0 [ 62.334808][ T5103] ? _raw_spin_unlock_irq+0x23/0x50 [ 62.340036][ T5103] ? lockdep_hardirqs_on+0x7d/0x100 [ 62.345260][ T5103] ? _raw_spin_unlock_irq+0x2e/0x50 [ 62.350489][ T5103] ? ptrace_notify+0xfe/0x140 [ 62.355198][ T5103] do_syscall_64+0x39/0xb0 [ 62.360353][ T5103] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.366276][ T5103] RIP: 0033:0x7f607b0de549 [ 62.370724][ T5103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 62.390706][ T5103] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 62.399147][ T5103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 62.407137][ T5103] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5103] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5103] close(3) = 0 [pid 5103] close(4) = 0 [pid 5103] close(5) = 0 [pid 5103] close(6) = 0 [pid 5103] close(7) = 0 [pid 5103] close(8) = -1 EBADF (Bad file descriptor) [pid 5103] close(9) = -1 EBADF (Bad file descriptor) [pid 5103] close(10) = -1 EBADF (Bad file descriptor) [pid 5103] close(11) = -1 EBADF (Bad file descriptor) [pid 5103] close(12) = -1 EBADF (Bad file descriptor) [pid 5103] close(13) = -1 EBADF (Bad file descriptor) [pid 5103] close(14) = -1 EBADF (Bad file descriptor) [pid 5103] close(15) = -1 EBADF (Bad file descriptor) [pid 5103] close(16) = -1 EBADF (Bad file descriptor) [pid 5103] close(17) = -1 EBADF (Bad file descriptor) [pid 5103] close(18) = -1 EBADF (Bad file descriptor) [pid 5103] close(19) = -1 EBADF (Bad file descriptor) [pid 5103] close(20) = -1 EBADF (Bad file descriptor) [pid 5103] close(21) = -1 EBADF (Bad file descriptor) [pid 5103] close(22) = -1 EBADF (Bad file descriptor) [pid 5103] close(23) = -1 EBADF (Bad file descriptor) [pid 5103] close(24) = -1 EBADF (Bad file descriptor) [pid 5103] close(25) = -1 EBADF (Bad file descriptor) [pid 5103] close(26) = -1 EBADF (Bad file descriptor) [pid 5103] close(27) = -1 EBADF (Bad file descriptor) [pid 5103] close(28) = -1 EBADF (Bad file descriptor) [pid 5103] close(29) = -1 EBADF (Bad file descriptor) [pid 5103] exit_group(0) = ? [pid 5103] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 19 ./strace-static-x86_64: Process 5104 attached [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5104] setpgid(0, 0) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5104] write(3, "1000", 4) = 4 [pid 5104] close(3) = 0 [pid 5104] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 62.415136][ T5103] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 62.423493][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 62.431480][ T5103] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 62.439535][ T5103] [pid 5104] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5104] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5104] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5104] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5104] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5104] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5104] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5104] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5104] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5104] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5104] write(7, "5", 1) = 1 [ 62.494174][ T5104] FAULT_INJECTION: forcing a failure. [ 62.494174][ T5104] name failslab, interval 1, probability 0, space 0, times 0 [ 62.507862][ T5104] CPU: 0 PID: 5104 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 62.517795][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 62.527849][ T5104] Call Trace: [ 62.531123][ T5104] [ 62.534095][ T5104] dump_stack_lvl+0xd1/0x138 [ 62.538817][ T5104] should_fail_ex.cold+0x5/0xa [ 62.543589][ T5104] ? io_issue_sqe+0x695/0x1250 [ 62.548358][ T5104] should_failslab+0x9/0x20 [ 62.552882][ T5104] __kmem_cache_alloc_node+0x5b/0x330 [ 62.558307][ T5104] ? ref_tracker_alloc+0x158/0x560 [ 62.563460][ T5104] kmalloc_trace+0x26/0x60 [ 62.567900][ T5104] ref_tracker_alloc+0x158/0x560 [ 62.574165][ T5104] ? ref_tracker_free+0x6b0/0x6b0 [ 62.579254][ T5104] ? dst_alloc+0x14a/0x1f0 [ 62.583688][ T5104] ? lockdep_hardirqs_on+0x7d/0x100 [ 62.588902][ T5104] ? dst_alloc+0x14a/0x1f0 [ 62.593331][ T5104] dst_init+0xe4/0x520 [ 62.597410][ T5104] dst_alloc+0x16f/0x1f0 [ 62.601655][ T5104] rt_dst_alloc+0x55/0x430 [ 62.606075][ T5104] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 62.612072][ T5104] ip_route_output_key_hash+0x18f/0x340 [ 62.617625][ T5104] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 62.623883][ T5104] dccp_v4_connect+0x7e1/0x1730 [ 62.628756][ T5104] __inet_stream_connect+0x69e/0xed0 [ 62.634053][ T5104] ? inet_listen+0x640/0x640 [ 62.638654][ T5104] ? mark_held_locks+0x9f/0xe0 [ 62.643462][ T5104] ? __local_bh_enable_ip+0xa4/0x130 [ 62.648841][ T5104] inet_stream_connect+0x57/0xa0 [ 62.653785][ T5104] ? __inet_stream_connect+0xed0/0xed0 [ 62.659250][ T5104] __sys_connect_file+0x153/0x1a0 [ 62.664283][ T5104] io_connect+0x3cc/0x720 [ 62.668621][ T5104] ? io_connect_prep+0x250/0x250 [ 62.673637][ T5104] ? receive_fd+0x110/0x110 [ 62.678148][ T5104] ? rcu_read_lock_sched_held+0x3e/0x70 [ 62.683694][ T5104] ? io_connect_prep+0x250/0x250 [ 62.688637][ T5104] io_issue_sqe+0x695/0x1250 [ 62.693240][ T5104] io_submit_sqes+0x96c/0x1e90 [ 62.698018][ T5104] __do_sys_io_uring_enter+0x103d/0x24e0 [ 62.703658][ T5104] ? io_submit_sqes+0x1e90/0x1e90 [ 62.708689][ T5104] ? ptrace_notify+0xfe/0x140 [ 62.713376][ T5104] ? lock_downgrade+0x6e0/0x6e0 [ 62.718240][ T5104] ? _raw_spin_unlock_irq+0x23/0x50 [ 62.723445][ T5104] ? lockdep_hardirqs_on+0x7d/0x100 [ 62.728681][ T5104] ? _raw_spin_unlock_irq+0x2e/0x50 [ 62.733887][ T5104] ? ptrace_notify+0xfe/0x140 [ 62.738568][ T5104] do_syscall_64+0x39/0xb0 [ 62.742992][ T5104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.748910][ T5104] RIP: 0033:0x7f607b0de549 [ 62.753595][ T5104] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 62.773457][ T5104] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 62.781956][ T5104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5104] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5104] close(3) = 0 [pid 5104] close(4) = 0 [pid 5104] close(5) = 0 [pid 5104] close(6) = 0 [pid 5104] close(7) = 0 [pid 5104] close(8) = -1 EBADF (Bad file descriptor) [pid 5104] close(9) = -1 EBADF (Bad file descriptor) [pid 5104] close(10) = -1 EBADF (Bad file descriptor) [pid 5104] close(11) = -1 EBADF (Bad file descriptor) [pid 5104] close(12) = -1 EBADF (Bad file descriptor) [pid 5104] close(13) = -1 EBADF (Bad file descriptor) [pid 5104] close(14) = -1 EBADF (Bad file descriptor) [pid 5104] close(15) = -1 EBADF (Bad file descriptor) [pid 5104] close(16) = -1 EBADF (Bad file descriptor) [pid 5104] close(17) = -1 EBADF (Bad file descriptor) [pid 5104] close(18) = -1 EBADF (Bad file descriptor) [pid 5104] close(19) = -1 EBADF (Bad file descriptor) [pid 5104] close(20) = -1 EBADF (Bad file descriptor) [pid 5104] close(21) = -1 EBADF (Bad file descriptor) [pid 5104] close(22) = -1 EBADF (Bad file descriptor) [pid 5104] close(23) = -1 EBADF (Bad file descriptor) [pid 5104] close(24) = -1 EBADF (Bad file descriptor) [pid 5104] close(25) = -1 EBADF (Bad file descriptor) [pid 5104] close(26) = -1 EBADF (Bad file descriptor) [pid 5104] close(27) = -1 EBADF (Bad file descriptor) [pid 5104] close(28) = -1 EBADF (Bad file descriptor) [pid 5104] close(29) = -1 EBADF (Bad file descriptor) [pid 5104] exit_group(0) = ? [pid 5104] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 20 ./strace-static-x86_64: Process 5105 attached [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5105] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5105] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5105] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5105] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5105] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5105] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5105] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5105] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5105] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5105] write(7, "5", 1) = 1 [ 62.790049][ T5104] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 62.798109][ T5104] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 62.806079][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 62.814052][ T5104] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 62.822126][ T5104] [ 62.867896][ T5105] FAULT_INJECTION: forcing a failure. [ 62.867896][ T5105] name failslab, interval 1, probability 0, space 0, times 0 [ 62.881275][ T5105] CPU: 0 PID: 5105 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 62.891319][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 62.901374][ T5105] Call Trace: [ 62.904649][ T5105] [ 62.907673][ T5105] dump_stack_lvl+0xd1/0x138 [ 62.912274][ T5105] should_fail_ex.cold+0x5/0xa [ 62.917042][ T5105] ? io_issue_sqe+0x695/0x1250 [ 62.922593][ T5105] should_failslab+0x9/0x20 [ 62.927109][ T5105] __kmem_cache_alloc_node+0x5b/0x330 [ 62.932486][ T5105] ? ref_tracker_alloc+0x158/0x560 [ 62.937611][ T5105] kmalloc_trace+0x26/0x60 [ 62.942031][ T5105] ref_tracker_alloc+0x158/0x560 [ 62.946977][ T5105] ? __lock_acquire+0xbc3/0x56d0 [ 62.951929][ T5105] ? ref_tracker_free+0x6b0/0x6b0 [ 62.956994][ T5105] dst_init+0xe4/0x520 [ 62.961075][ T5105] dst_alloc+0x16f/0x1f0 [ 62.965329][ T5105] rt_dst_alloc+0x55/0x430 [ 62.969750][ T5105] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 62.975761][ T5105] ip_route_output_key_hash+0x18f/0x340 [ 62.981505][ T5105] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 62.987811][ T5105] dccp_v4_connect+0x7e1/0x1730 [ 62.992741][ T5105] __inet_stream_connect+0x69e/0xed0 [ 62.998070][ T5105] ? inet_listen+0x640/0x640 [ 63.002697][ T5105] ? mark_held_locks+0x9f/0xe0 [ 63.007487][ T5105] ? __local_bh_enable_ip+0xa4/0x130 [ 63.012801][ T5105] inet_stream_connect+0x57/0xa0 [ 63.017865][ T5105] ? __inet_stream_connect+0xed0/0xed0 [ 63.023363][ T5105] __sys_connect_file+0x153/0x1a0 [ 63.028516][ T5105] io_connect+0x3cc/0x720 [ 63.032883][ T5105] ? io_connect_prep+0x250/0x250 [ 63.037853][ T5105] ? receive_fd+0x110/0x110 [ 63.042400][ T5105] ? rcu_read_lock_sched_held+0x3e/0x70 [ 63.047973][ T5105] ? io_connect_prep+0x250/0x250 [ 63.052947][ T5105] io_issue_sqe+0x695/0x1250 [ 63.057573][ T5105] io_submit_sqes+0x96c/0x1e90 [ 63.062390][ T5105] __do_sys_io_uring_enter+0x103d/0x24e0 [ 63.068075][ T5105] ? io_submit_sqes+0x1e90/0x1e90 [ 63.073133][ T5105] ? ptrace_notify+0xfe/0x140 [ 63.077835][ T5105] ? lock_downgrade+0x6e0/0x6e0 [ 63.082720][ T5105] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.087966][ T5105] ? lockdep_hardirqs_on+0x7d/0x100 [ 63.093195][ T5105] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.098447][ T5105] ? ptrace_notify+0xfe/0x140 [ 63.103158][ T5105] do_syscall_64+0x39/0xb0 [ 63.107627][ T5105] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.113576][ T5105] RIP: 0033:0x7f607b0de549 [ 63.118112][ T5105] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 63.137743][ T5105] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 63.146185][ T5105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 63.154174][ T5105] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5105] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5105] close(3) = 0 [pid 5105] close(4) = 0 [pid 5105] close(5) = 0 [pid 5105] close(6) = 0 [pid 5105] close(7) = 0 [pid 5105] close(8) = -1 EBADF (Bad file descriptor) [pid 5105] close(9) = -1 EBADF (Bad file descriptor) [pid 5105] close(10) = -1 EBADF (Bad file descriptor) [pid 5105] close(11) = -1 EBADF (Bad file descriptor) [pid 5105] close(12) = -1 EBADF (Bad file descriptor) [pid 5105] close(13) = -1 EBADF (Bad file descriptor) [pid 5105] close(14) = -1 EBADF (Bad file descriptor) [pid 5105] close(15) = -1 EBADF (Bad file descriptor) [pid 5105] close(16) = -1 EBADF (Bad file descriptor) [pid 5105] close(17) = -1 EBADF (Bad file descriptor) [pid 5105] close(18) = -1 EBADF (Bad file descriptor) [pid 5105] close(19) = -1 EBADF (Bad file descriptor) [pid 5105] close(20) = -1 EBADF (Bad file descriptor) [pid 5105] close(21) = -1 EBADF (Bad file descriptor) [pid 5105] close(22) = -1 EBADF (Bad file descriptor) [pid 5105] close(23) = -1 EBADF (Bad file descriptor) [pid 5105] close(24) = -1 EBADF (Bad file descriptor) [pid 5105] close(25) = -1 EBADF (Bad file descriptor) [pid 5105] close(26) = -1 EBADF (Bad file descriptor) [pid 5105] close(27) = -1 EBADF (Bad file descriptor) [pid 5105] close(28) = -1 EBADF (Bad file descriptor) [pid 5105] close(29) = -1 EBADF (Bad file descriptor) [pid 5105] exit_group(0) = ? [pid 5105] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5106 attached , child_tidptr=0x555555eff5d0) = 21 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5106] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5106] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5106] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5106] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5106] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5106] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5106] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5106] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5106] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5106] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5106] write(7, "5", 1) = 1 [ 63.162249][ T5105] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 63.170240][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 63.178237][ T5105] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 63.186345][ T5105] [ 63.229359][ T5106] FAULT_INJECTION: forcing a failure. [ 63.229359][ T5106] name failslab, interval 1, probability 0, space 0, times 0 [ 63.242286][ T5106] CPU: 1 PID: 5106 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 63.252285][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 63.262467][ T5106] Call Trace: [ 63.265793][ T5106] [ 63.268775][ T5106] dump_stack_lvl+0xd1/0x138 [ 63.273409][ T5106] should_fail_ex.cold+0x5/0xa [ 63.278202][ T5106] ? io_issue_sqe+0x695/0x1250 [ 63.282978][ T5106] should_failslab+0x9/0x20 [ 63.287499][ T5106] __kmem_cache_alloc_node+0x5b/0x330 [ 63.292881][ T5106] ? ref_tracker_alloc+0x158/0x560 [ 63.298007][ T5106] kmalloc_trace+0x26/0x60 [ 63.302451][ T5106] ref_tracker_alloc+0x158/0x560 [ 63.307433][ T5106] ? __lock_acquire+0xbc3/0x56d0 [ 63.312381][ T5106] ? ref_tracker_free+0x6b0/0x6b0 [ 63.317441][ T5106] dst_init+0xe4/0x520 [ 63.321538][ T5106] dst_alloc+0x16f/0x1f0 [ 63.325828][ T5106] rt_dst_alloc+0x55/0x430 [ 63.330257][ T5106] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 63.336281][ T5106] ip_route_output_key_hash+0x18f/0x340 [ 63.341972][ T5106] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 63.348265][ T5106] dccp_v4_connect+0x7e1/0x1730 [ 63.353143][ T5106] __inet_stream_connect+0x69e/0xed0 [ 63.358670][ T5106] ? inet_listen+0x640/0x640 [ 63.363298][ T5106] ? mark_held_locks+0x9f/0xe0 [ 63.368108][ T5106] ? __local_bh_enable_ip+0xa4/0x130 [ 63.373423][ T5106] inet_stream_connect+0x57/0xa0 [ 63.378404][ T5106] ? __inet_stream_connect+0xed0/0xed0 [ 63.383883][ T5106] __sys_connect_file+0x153/0x1a0 [ 63.388922][ T5106] io_connect+0x3cc/0x720 [ 63.393284][ T5106] ? io_connect_prep+0x250/0x250 [ 63.398342][ T5106] ? receive_fd+0x110/0x110 [ 63.402871][ T5106] ? rcu_read_lock_sched_held+0x3e/0x70 [ 63.408550][ T5106] ? io_connect_prep+0x250/0x250 [ 63.413506][ T5106] io_issue_sqe+0x695/0x1250 [ 63.418114][ T5106] io_submit_sqes+0x96c/0x1e90 [ 63.422904][ T5106] __do_sys_io_uring_enter+0x103d/0x24e0 [ 63.428557][ T5106] ? io_submit_sqes+0x1e90/0x1e90 [ 63.433617][ T5106] ? ptrace_notify+0xfe/0x140 [ 63.438434][ T5106] ? lock_downgrade+0x6e0/0x6e0 [ 63.443337][ T5106] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.448854][ T5106] ? lockdep_hardirqs_on+0x7d/0x100 [ 63.454161][ T5106] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.459372][ T5106] ? ptrace_notify+0xfe/0x140 [ 63.464345][ T5106] do_syscall_64+0x39/0xb0 [ 63.468793][ T5106] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.474795][ T5106] RIP: 0033:0x7f607b0de549 [ 63.479232][ T5106] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 63.498862][ T5106] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 63.507288][ T5106] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 63.515269][ T5106] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5106] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5106] close(3) = 0 [pid 5106] close(4) = 0 [pid 5106] close(5) = 0 [pid 5106] close(6) = 0 [pid 5106] close(7) = 0 [pid 5106] close(8) = -1 EBADF (Bad file descriptor) [pid 5106] close(9) = -1 EBADF (Bad file descriptor) [pid 5106] close(10) = -1 EBADF (Bad file descriptor) [pid 5106] close(11) = -1 EBADF (Bad file descriptor) [pid 5106] close(12) = -1 EBADF (Bad file descriptor) [pid 5106] close(13) = -1 EBADF (Bad file descriptor) [pid 5106] close(14) = -1 EBADF (Bad file descriptor) [pid 5106] close(15) = -1 EBADF (Bad file descriptor) [pid 5106] close(16) = -1 EBADF (Bad file descriptor) [pid 5106] close(17) = -1 EBADF (Bad file descriptor) [pid 5106] close(18) = -1 EBADF (Bad file descriptor) [pid 5106] close(19) = -1 EBADF (Bad file descriptor) [pid 5106] close(20) = -1 EBADF (Bad file descriptor) [pid 5106] close(21) = -1 EBADF (Bad file descriptor) [pid 5106] close(22) = -1 EBADF (Bad file descriptor) [pid 5106] close(23) = -1 EBADF (Bad file descriptor) [pid 5106] close(24) = -1 EBADF (Bad file descriptor) [pid 5106] close(25) = -1 EBADF (Bad file descriptor) [pid 5106] close(26) = -1 EBADF (Bad file descriptor) [pid 5106] close(27) = -1 EBADF (Bad file descriptor) [pid 5106] close(28) = -1 EBADF (Bad file descriptor) [pid 5106] close(29) = -1 EBADF (Bad file descriptor) [pid 5106] exit_group(0) = ? [pid 5106] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5107 attached , child_tidptr=0x555555eff5d0) = 22 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4) = 4 [pid 5107] close(3) = 0 [pid 5107] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 63.523348][ T5106] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 63.531347][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 63.539323][ T5106] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 63.547321][ T5106] [pid 5107] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5107] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5107] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5107] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5107] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5107] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5107] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5107] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5107] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5107] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5107] write(7, "5", 1) = 1 [ 63.608783][ T5107] FAULT_INJECTION: forcing a failure. [ 63.608783][ T5107] name failslab, interval 1, probability 0, space 0, times 0 [ 63.622039][ T5107] CPU: 0 PID: 5107 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 63.631968][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 63.642018][ T5107] Call Trace: [ 63.645296][ T5107] [ 63.648228][ T5107] dump_stack_lvl+0xd1/0x138 [ 63.652828][ T5107] should_fail_ex.cold+0x5/0xa [ 63.657589][ T5107] ? io_issue_sqe+0x695/0x1250 [ 63.662358][ T5107] should_failslab+0x9/0x20 [ 63.666867][ T5107] __kmem_cache_alloc_node+0x5b/0x330 [ 63.672239][ T5107] ? ref_tracker_alloc+0x158/0x560 [ 63.677358][ T5107] kmalloc_trace+0x26/0x60 [ 63.681794][ T5107] ref_tracker_alloc+0x158/0x560 [ 63.686763][ T5107] ? __lock_acquire+0xbc3/0x56d0 [ 63.691707][ T5107] ? ref_tracker_free+0x6b0/0x6b0 [ 63.696774][ T5107] dst_init+0xe4/0x520 [ 63.700855][ T5107] dst_alloc+0x16f/0x1f0 [ 63.705107][ T5107] rt_dst_alloc+0x55/0x430 [ 63.709532][ T5107] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 63.715560][ T5107] ip_route_output_key_hash+0x18f/0x340 [ 63.721115][ T5107] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 63.727381][ T5107] dccp_v4_connect+0x7e1/0x1730 [ 63.732295][ T5107] __inet_stream_connect+0x69e/0xed0 [ 63.737617][ T5107] ? inet_listen+0x640/0x640 [ 63.742263][ T5107] ? mark_held_locks+0x9f/0xe0 [ 63.748775][ T5107] ? __local_bh_enable_ip+0xa4/0x130 [ 63.754070][ T5107] inet_stream_connect+0x57/0xa0 [ 63.759072][ T5107] ? __inet_stream_connect+0xed0/0xed0 [ 63.764691][ T5107] __sys_connect_file+0x153/0x1a0 [ 63.769748][ T5107] io_connect+0x3cc/0x720 [ 63.774090][ T5107] ? io_connect_prep+0x250/0x250 [ 63.779051][ T5107] ? receive_fd+0x110/0x110 [ 63.783619][ T5107] ? rcu_read_lock_sched_held+0x3e/0x70 [ 63.789211][ T5107] ? io_connect_prep+0x250/0x250 [ 63.794193][ T5107] io_issue_sqe+0x695/0x1250 [ 63.798812][ T5107] io_submit_sqes+0x96c/0x1e90 [ 63.803616][ T5107] __do_sys_io_uring_enter+0x103d/0x24e0 [ 63.809285][ T5107] ? io_submit_sqes+0x1e90/0x1e90 [ 63.814384][ T5107] ? ptrace_notify+0xfe/0x140 [ 63.819265][ T5107] ? lock_downgrade+0x6e0/0x6e0 [ 63.824175][ T5107] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.829493][ T5107] ? lockdep_hardirqs_on+0x7d/0x100 [ 63.834997][ T5107] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.840253][ T5107] ? ptrace_notify+0xfe/0x140 [ 63.844962][ T5107] do_syscall_64+0x39/0xb0 [ 63.849444][ T5107] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.855419][ T5107] RIP: 0033:0x7f607b0de549 [ 63.859846][ T5107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 63.879575][ T5107] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 63.887999][ T5107] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 63.896065][ T5107] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5107] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5107] close(3) = 0 [pid 5107] close(4) = 0 [pid 5107] close(5) = 0 [pid 5107] close(6) = 0 [pid 5107] close(7) = 0 [pid 5107] close(8) = -1 EBADF (Bad file descriptor) [pid 5107] close(9) = -1 EBADF (Bad file descriptor) [pid 5107] close(10) = -1 EBADF (Bad file descriptor) [pid 5107] close(11) = -1 EBADF (Bad file descriptor) [pid 5107] close(12) = -1 EBADF (Bad file descriptor) [pid 5107] close(13) = -1 EBADF (Bad file descriptor) [pid 5107] close(14) = -1 EBADF (Bad file descriptor) [pid 5107] close(15) = -1 EBADF (Bad file descriptor) [pid 5107] close(16) = -1 EBADF (Bad file descriptor) [pid 5107] close(17) = -1 EBADF (Bad file descriptor) [pid 5107] close(18) = -1 EBADF (Bad file descriptor) [pid 5107] close(19) = -1 EBADF (Bad file descriptor) [pid 5107] close(20) = -1 EBADF (Bad file descriptor) [pid 5107] close(21) = -1 EBADF (Bad file descriptor) [pid 5107] close(22) = -1 EBADF (Bad file descriptor) [pid 5107] close(23) = -1 EBADF (Bad file descriptor) [pid 5107] close(24) = -1 EBADF (Bad file descriptor) [pid 5107] close(25) = -1 EBADF (Bad file descriptor) [pid 5107] close(26) = -1 EBADF (Bad file descriptor) [pid 5107] close(27) = -1 EBADF (Bad file descriptor) [pid 5107] close(28) = -1 EBADF (Bad file descriptor) [pid 5107] close(29) = -1 EBADF (Bad file descriptor) [pid 5107] exit_group(0) = ? [pid 5107] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5108 attached , child_tidptr=0x555555eff5d0) = 23 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5108] close(3) = 0 [pid 5108] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5108] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5108] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5108] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5108] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5108] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5108] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 63.904045][ T5107] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 63.912026][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 63.920016][ T5107] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 63.928027][ T5107] [pid 5108] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5108] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5108] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5108] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5108] write(7, "5", 1) = 1 [ 63.978396][ T5108] FAULT_INJECTION: forcing a failure. [ 63.978396][ T5108] name failslab, interval 1, probability 0, space 0, times 0 [ 63.991655][ T5108] CPU: 0 PID: 5108 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 64.001602][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 64.011670][ T5108] Call Trace: [ 64.014945][ T5108] [ 64.017874][ T5108] dump_stack_lvl+0xd1/0x138 [ 64.022518][ T5108] should_fail_ex.cold+0x5/0xa [ 64.027641][ T5108] ? io_issue_sqe+0x695/0x1250 [ 64.032463][ T5108] should_failslab+0x9/0x20 [ 64.036980][ T5108] __kmem_cache_alloc_node+0x5b/0x330 [ 64.042364][ T5108] ? ref_tracker_alloc+0x158/0x560 [ 64.047488][ T5108] kmalloc_trace+0x26/0x60 [ 64.051932][ T5108] ref_tracker_alloc+0x158/0x560 [ 64.056920][ T5108] ? __lock_acquire+0xbc3/0x56d0 [ 64.061885][ T5108] ? ref_tracker_free+0x6b0/0x6b0 [ 64.066966][ T5108] dst_init+0xe4/0x520 [ 64.071063][ T5108] dst_alloc+0x16f/0x1f0 [ 64.075350][ T5108] rt_dst_alloc+0x55/0x430 [ 64.081789][ T5108] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 64.087813][ T5108] ip_route_output_key_hash+0x18f/0x340 [ 64.093435][ T5108] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 64.099729][ T5108] dccp_v4_connect+0x7e1/0x1730 [ 64.104633][ T5108] __inet_stream_connect+0x69e/0xed0 [ 64.109963][ T5108] ? inet_listen+0x640/0x640 [ 64.114596][ T5108] ? mark_held_locks+0x9f/0xe0 [ 64.119389][ T5108] ? __local_bh_enable_ip+0xa4/0x130 [ 64.124747][ T5108] inet_stream_connect+0x57/0xa0 [ 64.129717][ T5108] ? __inet_stream_connect+0xed0/0xed0 [ 64.135212][ T5108] __sys_connect_file+0x153/0x1a0 [ 64.140403][ T5108] io_connect+0x3cc/0x720 [ 64.144773][ T5108] ? io_connect_prep+0x250/0x250 [ 64.149743][ T5108] ? receive_fd+0x110/0x110 [ 64.154374][ T5108] ? rcu_read_lock_sched_held+0x3e/0x70 [ 64.160032][ T5108] ? io_connect_prep+0x250/0x250 [ 64.165019][ T5108] io_issue_sqe+0x695/0x1250 [ 64.169644][ T5108] io_submit_sqes+0x96c/0x1e90 [ 64.174457][ T5108] __do_sys_io_uring_enter+0x103d/0x24e0 [ 64.180133][ T5108] ? io_submit_sqes+0x1e90/0x1e90 [ 64.185191][ T5108] ? ptrace_notify+0xfe/0x140 [ 64.189918][ T5108] ? lock_downgrade+0x6e0/0x6e0 [ 64.194813][ T5108] ? _raw_spin_unlock_irq+0x23/0x50 [ 64.200048][ T5108] ? lockdep_hardirqs_on+0x7d/0x100 [ 64.205304][ T5108] ? _raw_spin_unlock_irq+0x2e/0x50 [ 64.210540][ T5108] ? ptrace_notify+0xfe/0x140 [ 64.215426][ T5108] do_syscall_64+0x39/0xb0 [ 64.219880][ T5108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.226494][ T5108] RIP: 0033:0x7f607b0de549 [ 64.230928][ T5108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 64.250569][ T5108] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 64.259035][ T5108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 64.267037][ T5108] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5108] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5108] close(3) = 0 [pid 5108] close(4) = 0 [pid 5108] close(5) = 0 [pid 5108] close(6) = 0 [pid 5108] close(7) = 0 [pid 5108] close(8) = -1 EBADF (Bad file descriptor) [pid 5108] close(9) = -1 EBADF (Bad file descriptor) [pid 5108] close(10) = -1 EBADF (Bad file descriptor) [pid 5108] close(11) = -1 EBADF (Bad file descriptor) [pid 5108] close(12) = -1 EBADF (Bad file descriptor) [pid 5108] close(13) = -1 EBADF (Bad file descriptor) [pid 5108] close(14) = -1 EBADF (Bad file descriptor) [pid 5108] close(15) = -1 EBADF (Bad file descriptor) [pid 5108] close(16) = -1 EBADF (Bad file descriptor) [pid 5108] close(17) = -1 EBADF (Bad file descriptor) [pid 5108] close(18) = -1 EBADF (Bad file descriptor) [pid 5108] close(19) = -1 EBADF (Bad file descriptor) [pid 5108] close(20) = -1 EBADF (Bad file descriptor) [pid 5108] close(21) = -1 EBADF (Bad file descriptor) [pid 5108] close(22) = -1 EBADF (Bad file descriptor) [pid 5108] close(23) = -1 EBADF (Bad file descriptor) [pid 5108] close(24) = -1 EBADF (Bad file descriptor) [pid 5108] close(25) = -1 EBADF (Bad file descriptor) [pid 5108] close(26) = -1 EBADF (Bad file descriptor) [pid 5108] close(27) = -1 EBADF (Bad file descriptor) [pid 5108] close(28) = -1 EBADF (Bad file descriptor) [pid 5108] close(29) = -1 EBADF (Bad file descriptor) [pid 5108] exit_group(0) = ? [pid 5108] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 24 ./strace-static-x86_64: Process 5109 attached [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5109] setpgid(0, 0) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3) = 0 [pid 5109] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 64.275031][ T5108] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 64.283085][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 64.291073][ T5108] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 64.299085][ T5108] [pid 5109] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5109] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5109] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5109] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5109] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5109] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5109] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5109] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5109] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5109] write(7, "5", 1) = 1 [ 64.361842][ T5109] FAULT_INJECTION: forcing a failure. [ 64.361842][ T5109] name failslab, interval 1, probability 0, space 0, times 0 [ 64.375014][ T5109] CPU: 0 PID: 5109 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 64.384959][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 64.395041][ T5109] Call Trace: [ 64.398326][ T5109] [ 64.401262][ T5109] dump_stack_lvl+0xd1/0x138 [ 64.405866][ T5109] should_fail_ex.cold+0x5/0xa [ 64.410648][ T5109] ? io_issue_sqe+0x695/0x1250 [ 64.415451][ T5109] should_failslab+0x9/0x20 [ 64.419962][ T5109] __kmem_cache_alloc_node+0x5b/0x330 [ 64.425430][ T5109] ? ref_tracker_alloc+0x158/0x560 [ 64.430760][ T5109] kmalloc_trace+0x26/0x60 [ 64.435338][ T5109] ref_tracker_alloc+0x158/0x560 [ 64.440350][ T5109] ? __lock_acquire+0xbc3/0x56d0 [ 64.445324][ T5109] ? ref_tracker_free+0x6b0/0x6b0 [ 64.450409][ T5109] dst_init+0xe4/0x520 [ 64.454625][ T5109] dst_alloc+0x16f/0x1f0 [ 64.458916][ T5109] rt_dst_alloc+0x55/0x430 [ 64.463386][ T5109] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 64.469415][ T5109] ip_route_output_key_hash+0x18f/0x340 [ 64.474999][ T5109] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 64.481295][ T5109] dccp_v4_connect+0x7e1/0x1730 [ 64.486199][ T5109] __inet_stream_connect+0x69e/0xed0 [ 64.491530][ T5109] ? inet_listen+0x640/0x640 [ 64.496182][ T5109] ? mark_held_locks+0x9f/0xe0 [ 64.500998][ T5109] ? __local_bh_enable_ip+0xa4/0x130 [ 64.506354][ T5109] inet_stream_connect+0x57/0xa0 [ 64.511340][ T5109] ? __inet_stream_connect+0xed0/0xed0 [ 64.517744][ T5109] __sys_connect_file+0x153/0x1a0 [ 64.522815][ T5109] io_connect+0x3cc/0x720 [ 64.527226][ T5109] ? io_connect_prep+0x250/0x250 [ 64.532217][ T5109] ? receive_fd+0x110/0x110 [ 64.536855][ T5109] ? rcu_read_lock_sched_held+0x3e/0x70 [ 64.542445][ T5109] ? io_connect_prep+0x250/0x250 [ 64.547429][ T5109] io_issue_sqe+0x695/0x1250 [ 64.552062][ T5109] io_submit_sqes+0x96c/0x1e90 [ 64.556901][ T5109] __do_sys_io_uring_enter+0x103d/0x24e0 [ 64.562600][ T5109] ? io_submit_sqes+0x1e90/0x1e90 [ 64.567674][ T5109] ? ptrace_notify+0xfe/0x140 [ 64.572377][ T5109] ? lock_downgrade+0x6e0/0x6e0 [ 64.577285][ T5109] ? _raw_spin_unlock_irq+0x23/0x50 [ 64.582527][ T5109] ? lockdep_hardirqs_on+0x7d/0x100 [ 64.587758][ T5109] ? _raw_spin_unlock_irq+0x2e/0x50 [ 64.592985][ T5109] ? ptrace_notify+0xfe/0x140 [ 64.597698][ T5109] do_syscall_64+0x39/0xb0 [ 64.602170][ T5109] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.608088][ T5109] RIP: 0033:0x7f607b0de549 [ 64.612520][ T5109] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 64.632173][ T5109] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 64.640637][ T5109] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 64.648727][ T5109] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5109] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5109] close(3) = 0 [pid 5109] close(4) = 0 [pid 5109] close(5) = 0 [pid 5109] close(6) = 0 [pid 5109] close(7) = 0 [pid 5109] close(8) = -1 EBADF (Bad file descriptor) [pid 5109] close(9) = -1 EBADF (Bad file descriptor) [pid 5109] close(10) = -1 EBADF (Bad file descriptor) [pid 5109] close(11) = -1 EBADF (Bad file descriptor) [pid 5109] close(12) = -1 EBADF (Bad file descriptor) [pid 5109] close(13) = -1 EBADF (Bad file descriptor) [pid 5109] close(14) = -1 EBADF (Bad file descriptor) [pid 5109] close(15) = -1 EBADF (Bad file descriptor) [pid 5109] close(16) = -1 EBADF (Bad file descriptor) [pid 5109] close(17) = -1 EBADF (Bad file descriptor) [pid 5109] close(18) = -1 EBADF (Bad file descriptor) [pid 5109] close(19) = -1 EBADF (Bad file descriptor) [pid 5109] close(20) = -1 EBADF (Bad file descriptor) [pid 5109] close(21) = -1 EBADF (Bad file descriptor) [pid 5109] close(22) = -1 EBADF (Bad file descriptor) [pid 5109] close(23) = -1 EBADF (Bad file descriptor) [pid 5109] close(24) = -1 EBADF (Bad file descriptor) [pid 5109] close(25) = -1 EBADF (Bad file descriptor) [pid 5109] close(26) = -1 EBADF (Bad file descriptor) [pid 5109] close(27) = -1 EBADF (Bad file descriptor) [pid 5109] close(28) = -1 EBADF (Bad file descriptor) [pid 5109] close(29) = -1 EBADF (Bad file descriptor) [pid 5109] exit_group(0) = ? [pid 5109] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5110 attached , child_tidptr=0x555555eff5d0) = 25 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5110] write(3, "1000", 4) = 4 [pid 5110] close(3) = 0 [pid 5110] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5110] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5110] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5110] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5110] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5110] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 64.656714][ T5109] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 64.664708][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 64.672698][ T5109] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 64.680721][ T5109] [pid 5110] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5110] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5110] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5110] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5110] write(7, "5", 1) = 1 [ 64.728435][ T5110] FAULT_INJECTION: forcing a failure. [ 64.728435][ T5110] name failslab, interval 1, probability 0, space 0, times 0 [ 64.741459][ T5110] CPU: 0 PID: 5110 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 64.751400][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 64.761497][ T5110] Call Trace: [ 64.764772][ T5110] [ 64.767718][ T5110] dump_stack_lvl+0xd1/0x138 [ 64.772316][ T5110] should_fail_ex.cold+0x5/0xa [ 64.777105][ T5110] ? io_issue_sqe+0x695/0x1250 [ 64.781874][ T5110] should_failslab+0x9/0x20 [ 64.786468][ T5110] __kmem_cache_alloc_node+0x5b/0x330 [ 64.791844][ T5110] ? ref_tracker_alloc+0x158/0x560 [ 64.796966][ T5110] kmalloc_trace+0x26/0x60 [ 64.801401][ T5110] ref_tracker_alloc+0x158/0x560 [ 64.806383][ T5110] ? __lock_acquire+0xbc3/0x56d0 [ 64.811347][ T5110] ? ref_tracker_free+0x6b0/0x6b0 [ 64.816459][ T5110] dst_init+0xe4/0x520 [ 64.820737][ T5110] dst_alloc+0x16f/0x1f0 [ 64.825012][ T5110] rt_dst_alloc+0x55/0x430 [ 64.829469][ T5110] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 64.835496][ T5110] ip_route_output_key_hash+0x18f/0x340 [ 64.841148][ T5110] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 64.847528][ T5110] dccp_v4_connect+0x7e1/0x1730 [ 64.852430][ T5110] __inet_stream_connect+0x69e/0xed0 [ 64.857771][ T5110] ? inet_listen+0x640/0x640 [ 64.862416][ T5110] ? mark_held_locks+0x9f/0xe0 [ 64.867337][ T5110] ? __local_bh_enable_ip+0xa4/0x130 [ 64.872833][ T5110] inet_stream_connect+0x57/0xa0 [ 64.877988][ T5110] ? __inet_stream_connect+0xed0/0xed0 [ 64.883480][ T5110] __sys_connect_file+0x153/0x1a0 [ 64.888530][ T5110] io_connect+0x3cc/0x720 [ 64.892894][ T5110] ? io_connect_prep+0x250/0x250 [ 64.897859][ T5110] ? receive_fd+0x110/0x110 [ 64.902409][ T5110] ? rcu_read_lock_sched_held+0x3e/0x70 [ 64.907979][ T5110] ? io_connect_prep+0x250/0x250 [ 64.912949][ T5110] io_issue_sqe+0x695/0x1250 [ 64.917586][ T5110] io_submit_sqes+0x96c/0x1e90 [ 64.922399][ T5110] __do_sys_io_uring_enter+0x103d/0x24e0 [ 64.928069][ T5110] ? io_submit_sqes+0x1e90/0x1e90 [ 64.933126][ T5110] ? ptrace_notify+0xfe/0x140 [ 64.937826][ T5110] ? lock_downgrade+0x6e0/0x6e0 [ 64.942707][ T5110] ? _raw_spin_unlock_irq+0x23/0x50 [ 64.947936][ T5110] ? lockdep_hardirqs_on+0x7d/0x100 [ 64.953161][ T5110] ? _raw_spin_unlock_irq+0x2e/0x50 [ 64.958385][ T5110] ? ptrace_notify+0xfe/0x140 [ 64.963093][ T5110] do_syscall_64+0x39/0xb0 [ 64.967634][ T5110] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.973564][ T5110] RIP: 0033:0x7f607b0de549 [ 64.978014][ T5110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 64.997642][ T5110] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 65.006102][ T5110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 65.014088][ T5110] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5110] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5110] close(3) = 0 [pid 5110] close(4) = 0 [pid 5110] close(5) = 0 [pid 5110] close(6) = 0 [pid 5110] close(7) = 0 [pid 5110] close(8) = -1 EBADF (Bad file descriptor) [pid 5110] close(9) = -1 EBADF (Bad file descriptor) [pid 5110] close(10) = -1 EBADF (Bad file descriptor) [pid 5110] close(11) = -1 EBADF (Bad file descriptor) [pid 5110] close(12) = -1 EBADF (Bad file descriptor) [pid 5110] close(13) = -1 EBADF (Bad file descriptor) [pid 5110] close(14) = -1 EBADF (Bad file descriptor) [pid 5110] close(15) = -1 EBADF (Bad file descriptor) [pid 5110] close(16) = -1 EBADF (Bad file descriptor) [pid 5110] close(17) = -1 EBADF (Bad file descriptor) [pid 5110] close(18) = -1 EBADF (Bad file descriptor) [pid 5110] close(19) = -1 EBADF (Bad file descriptor) [pid 5110] close(20) = -1 EBADF (Bad file descriptor) [pid 5110] close(21) = -1 EBADF (Bad file descriptor) [pid 5110] close(22) = -1 EBADF (Bad file descriptor) [pid 5110] close(23) = -1 EBADF (Bad file descriptor) [pid 5110] close(24) = -1 EBADF (Bad file descriptor) [pid 5110] close(25) = -1 EBADF (Bad file descriptor) [pid 5110] close(26) = -1 EBADF (Bad file descriptor) [pid 5110] close(27) = -1 EBADF (Bad file descriptor) [pid 5110] close(28) = -1 EBADF (Bad file descriptor) [pid 5110] close(29) = -1 EBADF (Bad file descriptor) [pid 5110] exit_group(0) = ? [pid 5110] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 26 ./strace-static-x86_64: Process 5111 attached [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5111] setpgid(0, 0) = 0 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5111] write(3, "1000", 4) = 4 [pid 5111] close(3) = 0 [pid 5111] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5111] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5111] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5111] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [ 65.022073][ T5110] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 65.030059][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 65.038062][ T5110] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 65.046071][ T5110] [pid 5111] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5111] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5111] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5111] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5111] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5111] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5111] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5111] write(7, "5", 1) = 1 [ 65.099551][ T5111] FAULT_INJECTION: forcing a failure. [ 65.099551][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 65.112251][ T5111] CPU: 0 PID: 5111 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 65.122157][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 65.132230][ T5111] Call Trace: [ 65.135519][ T5111] [ 65.138451][ T5111] dump_stack_lvl+0xd1/0x138 [ 65.143059][ T5111] should_fail_ex.cold+0x5/0xa [ 65.147845][ T5111] ? __inet_hash_connect+0x95e/0x1ba0 [ 65.153272][ T5111] should_failslab+0x9/0x20 [ 65.157827][ T5111] kmem_cache_alloc+0x5a/0x320 [ 65.162710][ T5111] __inet_hash_connect+0x95e/0x1ba0 [ 65.167916][ T5111] ? __inet_lookup_listener+0xbf0/0xbf0 [ 65.173483][ T5111] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 65.179945][ T5111] dccp_v4_connect+0xb82/0x1730 [ 65.184854][ T5111] __inet_stream_connect+0x69e/0xed0 [ 65.190171][ T5111] ? inet_listen+0x640/0x640 [ 65.194797][ T5111] ? mark_held_locks+0x9f/0xe0 [ 65.199600][ T5111] ? __local_bh_enable_ip+0xa4/0x130 [ 65.204920][ T5111] inet_stream_connect+0x57/0xa0 [ 65.209883][ T5111] ? __inet_stream_connect+0xed0/0xed0 [ 65.215385][ T5111] __sys_connect_file+0x153/0x1a0 [ 65.220453][ T5111] io_connect+0x3cc/0x720 [ 65.224825][ T5111] ? io_connect_prep+0x250/0x250 [ 65.229793][ T5111] ? receive_fd+0x110/0x110 [ 65.234337][ T5111] ? rcu_read_lock_sched_held+0x3e/0x70 [ 65.239904][ T5111] ? io_connect_prep+0x250/0x250 [ 65.244890][ T5111] io_issue_sqe+0x695/0x1250 [ 65.249515][ T5111] io_submit_sqes+0x96c/0x1e90 [ 65.254330][ T5111] __do_sys_io_uring_enter+0x103d/0x24e0 [ 65.260090][ T5111] ? io_submit_sqes+0x1e90/0x1e90 [ 65.265147][ T5111] ? ptrace_notify+0xfe/0x140 [ 65.269844][ T5111] ? lock_downgrade+0x6e0/0x6e0 [ 65.274737][ T5111] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.279981][ T5111] ? lockdep_hardirqs_on+0x7d/0x100 [ 65.285204][ T5111] ? _raw_spin_unlock_irq+0x2e/0x50 [ 65.290424][ T5111] ? ptrace_notify+0xfe/0x140 [ 65.295132][ T5111] do_syscall_64+0x39/0xb0 [ 65.299582][ T5111] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.305501][ T5111] RIP: 0033:0x7f607b0de549 [ 65.310026][ T5111] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 65.329655][ T5111] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 65.338092][ T5111] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5111] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5111] close(3) = 0 [pid 5111] close(4) = 0 [pid 5111] close(5) = 0 [pid 5111] close(6) = 0 [pid 5111] close(7) = 0 [pid 5111] close(8) = -1 EBADF (Bad file descriptor) [pid 5111] close(9) = -1 EBADF (Bad file descriptor) [pid 5111] close(10) = -1 EBADF (Bad file descriptor) [pid 5111] close(11) = -1 EBADF (Bad file descriptor) [pid 5111] close(12) = -1 EBADF (Bad file descriptor) [pid 5111] close(13) = -1 EBADF (Bad file descriptor) [pid 5111] close(14) = -1 EBADF (Bad file descriptor) [pid 5111] close(15) = -1 EBADF (Bad file descriptor) [pid 5111] close(16) = -1 EBADF (Bad file descriptor) [pid 5111] close(17) = -1 EBADF (Bad file descriptor) [pid 5111] close(18) = -1 EBADF (Bad file descriptor) [pid 5111] close(19) = -1 EBADF (Bad file descriptor) [pid 5111] close(20) = -1 EBADF (Bad file descriptor) [pid 5111] close(21) = -1 EBADF (Bad file descriptor) [pid 5111] close(22) = -1 EBADF (Bad file descriptor) [pid 5111] close(23) = -1 EBADF (Bad file descriptor) [pid 5111] close(24) = -1 EBADF (Bad file descriptor) [pid 5111] close(25) = -1 EBADF (Bad file descriptor) [pid 5111] close(26) = -1 EBADF (Bad file descriptor) [pid 5111] close(27) = -1 EBADF (Bad file descriptor) [pid 5111] close(28) = -1 EBADF (Bad file descriptor) [pid 5111] close(29) = -1 EBADF (Bad file descriptor) [pid 5111] exit_group(0) = ? [pid 5111] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 27 ./strace-static-x86_64: Process 5112 attached [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5112] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5112] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5112] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5112] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5112] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5112] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5112] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5112] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5112] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5112] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5112] write(7, "5", 1) = 1 [ 65.346080][ T5111] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 65.354082][ T5111] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 65.362068][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 65.370137][ T5111] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 65.378145][ T5111] [ 65.431118][ T5112] FAULT_INJECTION: forcing a failure. [ 65.431118][ T5112] name failslab, interval 1, probability 0, space 0, times 0 [ 65.444082][ T5112] CPU: 0 PID: 5112 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 65.454113][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 65.464177][ T5112] Call Trace: [ 65.467459][ T5112] [ 65.470393][ T5112] dump_stack_lvl+0xd1/0x138 [ 65.475018][ T5112] should_fail_ex.cold+0x5/0xa [ 65.479811][ T5112] ? io_issue_sqe+0x695/0x1250 [ 65.484620][ T5112] should_failslab+0x9/0x20 [ 65.489146][ T5112] __kmem_cache_alloc_node+0x5b/0x330 [ 65.494654][ T5112] ? ref_tracker_alloc+0x158/0x560 [ 65.499818][ T5112] kmalloc_trace+0x26/0x60 [ 65.504275][ T5112] ref_tracker_alloc+0x158/0x560 [ 65.509246][ T5112] ? __lock_acquire+0xbc3/0x56d0 [ 65.514210][ T5112] ? ref_tracker_free+0x6b0/0x6b0 [ 65.519293][ T5112] dst_init+0xe4/0x520 [ 65.523394][ T5112] dst_alloc+0x16f/0x1f0 [ 65.527679][ T5112] rt_dst_alloc+0x55/0x430 [ 65.532138][ T5112] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 65.538166][ T5112] ip_route_output_key_hash+0x18f/0x340 [ 65.543747][ T5112] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 65.550045][ T5112] dccp_v4_connect+0x7e1/0x1730 [ 65.554949][ T5112] __inet_stream_connect+0x69e/0xed0 [ 65.560280][ T5112] ? inet_listen+0x640/0x640 [ 65.564909][ T5112] ? mark_held_locks+0x9f/0xe0 [ 65.569702][ T5112] ? __local_bh_enable_ip+0xa4/0x130 [ 65.575019][ T5112] inet_stream_connect+0x57/0xa0 [ 65.580014][ T5112] ? __inet_stream_connect+0xed0/0xed0 [ 65.585542][ T5112] __sys_connect_file+0x153/0x1a0 [ 65.590615][ T5112] io_connect+0x3cc/0x720 [ 65.594984][ T5112] ? io_connect_prep+0x250/0x250 [ 65.599972][ T5112] ? receive_fd+0x110/0x110 [ 65.604517][ T5112] ? rcu_read_lock_sched_held+0x3e/0x70 [ 65.610089][ T5112] ? io_connect_prep+0x250/0x250 [ 65.615062][ T5112] io_issue_sqe+0x695/0x1250 [ 65.619689][ T5112] io_submit_sqes+0x96c/0x1e90 [ 65.624936][ T5112] __do_sys_io_uring_enter+0x103d/0x24e0 [ 65.630613][ T5112] ? io_submit_sqes+0x1e90/0x1e90 [ 65.635679][ T5112] ? ptrace_notify+0xfe/0x140 [ 65.640381][ T5112] ? lock_downgrade+0x6e0/0x6e0 [ 65.645285][ T5112] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.650549][ T5112] ? lockdep_hardirqs_on+0x7d/0x100 [ 65.655781][ T5112] ? _raw_spin_unlock_irq+0x2e/0x50 [ 65.661096][ T5112] ? ptrace_notify+0xfe/0x140 [ 65.665810][ T5112] do_syscall_64+0x39/0xb0 [ 65.670256][ T5112] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.676172][ T5112] RIP: 0033:0x7f607b0de549 [ 65.680601][ T5112] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 65.700330][ T5112] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 65.708948][ T5112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 65.717027][ T5112] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5112] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5112] close(3) = 0 [pid 5112] close(4) = 0 [pid 5112] close(5) = 0 [pid 5112] close(6) = 0 [pid 5112] close(7) = 0 [pid 5112] close(8) = -1 EBADF (Bad file descriptor) [pid 5112] close(9) = -1 EBADF (Bad file descriptor) [pid 5112] close(10) = -1 EBADF (Bad file descriptor) [pid 5112] close(11) = -1 EBADF (Bad file descriptor) [pid 5112] close(12) = -1 EBADF (Bad file descriptor) [pid 5112] close(13) = -1 EBADF (Bad file descriptor) [pid 5112] close(14) = -1 EBADF (Bad file descriptor) [pid 5112] close(15) = -1 EBADF (Bad file descriptor) [pid 5112] close(16) = -1 EBADF (Bad file descriptor) [pid 5112] close(17) = -1 EBADF (Bad file descriptor) [pid 5112] close(18) = -1 EBADF (Bad file descriptor) [pid 5112] close(19) = -1 EBADF (Bad file descriptor) [pid 5112] close(20) = -1 EBADF (Bad file descriptor) [pid 5112] close(21) = -1 EBADF (Bad file descriptor) [pid 5112] close(22) = -1 EBADF (Bad file descriptor) [pid 5112] close(23) = -1 EBADF (Bad file descriptor) [pid 5112] close(24) = -1 EBADF (Bad file descriptor) [pid 5112] close(25) = -1 EBADF (Bad file descriptor) [pid 5112] close(26) = -1 EBADF (Bad file descriptor) [pid 5112] close(27) = -1 EBADF (Bad file descriptor) [pid 5112] close(28) = -1 EBADF (Bad file descriptor) [pid 5112] close(29) = -1 EBADF (Bad file descriptor) [pid 5112] exit_group(0) = ? [pid 5112] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5113 attached , child_tidptr=0x555555eff5d0) = 28 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 [pid 5113] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5113] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5113] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5113] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5113] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5113] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5113] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5113] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5113] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5113] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5113] write(7, "5", 1) = 1 [ 65.725016][ T5112] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 65.733013][ T5112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 65.741022][ T5112] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 65.749067][ T5112] [ 65.789906][ T5113] FAULT_INJECTION: forcing a failure. [ 65.789906][ T5113] name failslab, interval 1, probability 0, space 0, times 0 [ 65.802781][ T5113] CPU: 0 PID: 5113 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 65.812803][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 65.822863][ T5113] Call Trace: [ 65.826144][ T5113] [ 65.829071][ T5113] dump_stack_lvl+0xd1/0x138 [ 65.833753][ T5113] should_fail_ex.cold+0x5/0xa [ 65.838625][ T5113] ? io_issue_sqe+0x695/0x1250 [ 65.843493][ T5113] should_failslab+0x9/0x20 [ 65.848006][ T5113] __kmem_cache_alloc_node+0x5b/0x330 [ 65.853394][ T5113] ? ref_tracker_alloc+0x158/0x560 [ 65.858533][ T5113] kmalloc_trace+0x26/0x60 [ 65.862968][ T5113] ref_tracker_alloc+0x158/0x560 [ 65.867958][ T5113] ? __lock_acquire+0xbc3/0x56d0 [ 65.872957][ T5113] ? ref_tracker_free+0x6b0/0x6b0 [ 65.878056][ T5113] dst_init+0xe4/0x520 [ 65.882162][ T5113] dst_alloc+0x16f/0x1f0 [ 65.886465][ T5113] rt_dst_alloc+0x55/0x430 [ 65.890937][ T5113] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 65.897005][ T5113] ip_route_output_key_hash+0x18f/0x340 [ 65.902597][ T5113] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 65.908873][ T5113] dccp_v4_connect+0x7e1/0x1730 [ 65.913786][ T5113] __inet_stream_connect+0x69e/0xed0 [ 65.919097][ T5113] ? inet_listen+0x640/0x640 [ 65.923720][ T5113] ? mark_held_locks+0x9f/0xe0 [ 65.928516][ T5113] ? __local_bh_enable_ip+0xa4/0x130 [ 65.933833][ T5113] inet_stream_connect+0x57/0xa0 [ 65.938825][ T5113] ? __inet_stream_connect+0xed0/0xed0 [ 65.944444][ T5113] __sys_connect_file+0x153/0x1a0 [ 65.949477][ T5113] io_connect+0x3cc/0x720 [ 65.953824][ T5113] ? io_connect_prep+0x250/0x250 [ 65.958799][ T5113] ? receive_fd+0x110/0x110 [ 65.963366][ T5113] ? rcu_read_lock_sched_held+0x3e/0x70 [ 65.968930][ T5113] ? io_connect_prep+0x250/0x250 [ 65.973920][ T5113] io_issue_sqe+0x695/0x1250 [ 65.978559][ T5113] io_submit_sqes+0x96c/0x1e90 [ 65.983346][ T5113] __do_sys_io_uring_enter+0x103d/0x24e0 [ 65.988996][ T5113] ? io_submit_sqes+0x1e90/0x1e90 [ 65.994062][ T5113] ? ptrace_notify+0xfe/0x140 [ 65.998775][ T5113] ? lock_downgrade+0x6e0/0x6e0 [ 66.003650][ T5113] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.008856][ T5113] ? lockdep_hardirqs_on+0x7d/0x100 [ 66.014066][ T5113] ? _raw_spin_unlock_irq+0x2e/0x50 [ 66.019282][ T5113] ? ptrace_notify+0xfe/0x140 [ 66.023985][ T5113] do_syscall_64+0x39/0xb0 [ 66.028435][ T5113] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.034341][ T5113] RIP: 0033:0x7f607b0de549 [ 66.038768][ T5113] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.058594][ T5113] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 66.067018][ T5113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 66.075037][ T5113] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 66.083038][ T5113] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5113] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5113] close(3) = 0 [pid 5113] close(4) = 0 [pid 5113] close(5) = 0 [pid 5113] close(6) = 0 [pid 5113] close(7) = 0 [pid 5113] close(8) = -1 EBADF (Bad file descriptor) [pid 5113] close(9) = -1 EBADF (Bad file descriptor) [pid 5113] close(10) = -1 EBADF (Bad file descriptor) [pid 5113] close(11) = -1 EBADF (Bad file descriptor) [pid 5113] close(12) = -1 EBADF (Bad file descriptor) [pid 5113] close(13) = -1 EBADF (Bad file descriptor) [pid 5113] close(14) = -1 EBADF (Bad file descriptor) [pid 5113] close(15) = -1 EBADF (Bad file descriptor) [pid 5113] close(16) = -1 EBADF (Bad file descriptor) [pid 5113] close(17) = -1 EBADF (Bad file descriptor) [pid 5113] close(18) = -1 EBADF (Bad file descriptor) [pid 5113] close(19) = -1 EBADF (Bad file descriptor) [pid 5113] close(20) = -1 EBADF (Bad file descriptor) [pid 5113] close(21) = -1 EBADF (Bad file descriptor) [pid 5113] close(22) = -1 EBADF (Bad file descriptor) [pid 5113] close(23) = -1 EBADF (Bad file descriptor) [pid 5113] close(24) = -1 EBADF (Bad file descriptor) [pid 5113] close(25) = -1 EBADF (Bad file descriptor) [pid 5113] close(26) = -1 EBADF (Bad file descriptor) [pid 5113] close(27) = -1 EBADF (Bad file descriptor) [pid 5113] close(28) = -1 EBADF (Bad file descriptor) [pid 5113] close(29) = -1 EBADF (Bad file descriptor) [pid 5113] exit_group(0) = ? [pid 5113] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5114 attached [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... clone resumed>, child_tidptr=0x555555eff5d0) = 29 [pid 5114] <... prctl resumed>) = 0 [pid 5114] setpgid(0, 0) = 0 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5114] write(3, "1000", 4) = 4 [pid 5114] close(3) = 0 [pid 5114] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5114] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5114] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5114] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5114] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5114] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5114] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5114] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5114] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5114] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5114] write(7, "5", 1) = 1 [ 66.091099][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 66.099079][ T5113] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 66.107070][ T5113] [ 66.148720][ T5114] FAULT_INJECTION: forcing a failure. [ 66.148720][ T5114] name failslab, interval 1, probability 0, space 0, times 0 [ 66.161677][ T5114] CPU: 0 PID: 5114 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 66.171614][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 66.181710][ T5114] Call Trace: [ 66.185356][ T5114] [ 66.188291][ T5114] dump_stack_lvl+0xd1/0x138 [ 66.192903][ T5114] should_fail_ex.cold+0x5/0xa [ 66.197700][ T5114] ? io_issue_sqe+0x695/0x1250 [ 66.202471][ T5114] should_failslab+0x9/0x20 [ 66.206999][ T5114] __kmem_cache_alloc_node+0x5b/0x330 [ 66.212385][ T5114] ? ref_tracker_alloc+0x158/0x560 [ 66.217539][ T5114] kmalloc_trace+0x26/0x60 [ 66.222010][ T5114] ref_tracker_alloc+0x158/0x560 [ 66.227076][ T5114] ? __lock_acquire+0xbc3/0x56d0 [ 66.232035][ T5114] ? ref_tracker_free+0x6b0/0x6b0 [ 66.237112][ T5114] dst_init+0xe4/0x520 [ 66.241210][ T5114] dst_alloc+0x16f/0x1f0 [ 66.245479][ T5114] rt_dst_alloc+0x55/0x430 [ 66.249945][ T5114] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 66.255983][ T5114] ip_route_output_key_hash+0x18f/0x340 [ 66.261579][ T5114] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 66.267874][ T5114] dccp_v4_connect+0x7e1/0x1730 [ 66.272794][ T5114] __inet_stream_connect+0x69e/0xed0 [ 66.278153][ T5114] ? inet_listen+0x640/0x640 [ 66.282789][ T5114] ? mark_held_locks+0x9f/0xe0 [ 66.287666][ T5114] ? __local_bh_enable_ip+0xa4/0x130 [ 66.292977][ T5114] inet_stream_connect+0x57/0xa0 [ 66.297958][ T5114] ? __inet_stream_connect+0xed0/0xed0 [ 66.303468][ T5114] __sys_connect_file+0x153/0x1a0 [ 66.308558][ T5114] io_connect+0x3cc/0x720 [ 66.312946][ T5114] ? io_connect_prep+0x250/0x250 [ 66.317936][ T5114] ? receive_fd+0x110/0x110 [ 66.322508][ T5114] ? rcu_read_lock_sched_held+0x3e/0x70 [ 66.328077][ T5114] ? io_connect_prep+0x250/0x250 [ 66.333074][ T5114] io_issue_sqe+0x695/0x1250 [ 66.337721][ T5114] io_submit_sqes+0x96c/0x1e90 [ 66.342543][ T5114] __do_sys_io_uring_enter+0x103d/0x24e0 [ 66.348308][ T5114] ? io_submit_sqes+0x1e90/0x1e90 [ 66.353364][ T5114] ? ptrace_notify+0xfe/0x140 [ 66.358063][ T5114] ? lock_downgrade+0x6e0/0x6e0 [ 66.362950][ T5114] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.368175][ T5114] ? lockdep_hardirqs_on+0x7d/0x100 [ 66.373396][ T5114] ? _raw_spin_unlock_irq+0x2e/0x50 [ 66.378623][ T5114] ? ptrace_notify+0xfe/0x140 [ 66.383335][ T5114] do_syscall_64+0x39/0xb0 [ 66.387777][ T5114] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.393691][ T5114] RIP: 0033:0x7f607b0de549 [ 66.398124][ T5114] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.417839][ T5114] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 66.426274][ T5114] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 66.434471][ T5114] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5114] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5114] close(3) = 0 [pid 5114] close(4) = 0 [pid 5114] close(5) = 0 [pid 5114] close(6) = 0 [pid 5114] close(7) = 0 [pid 5114] close(8) = -1 EBADF (Bad file descriptor) [pid 5114] close(9) = -1 EBADF (Bad file descriptor) [pid 5114] close(10) = -1 EBADF (Bad file descriptor) [pid 5114] close(11) = -1 EBADF (Bad file descriptor) [pid 5114] close(12) = -1 EBADF (Bad file descriptor) [pid 5114] close(13) = -1 EBADF (Bad file descriptor) [pid 5114] close(14) = -1 EBADF (Bad file descriptor) [pid 5114] close(15) = -1 EBADF (Bad file descriptor) [pid 5114] close(16) = -1 EBADF (Bad file descriptor) [pid 5114] close(17) = -1 EBADF (Bad file descriptor) [pid 5114] close(18) = -1 EBADF (Bad file descriptor) [pid 5114] close(19) = -1 EBADF (Bad file descriptor) [pid 5114] close(20) = -1 EBADF (Bad file descriptor) [pid 5114] close(21) = -1 EBADF (Bad file descriptor) [pid 5114] close(22) = -1 EBADF (Bad file descriptor) [pid 5114] close(23) = -1 EBADF (Bad file descriptor) [pid 5114] close(24) = -1 EBADF (Bad file descriptor) [pid 5114] close(25) = -1 EBADF (Bad file descriptor) [pid 5114] close(26) = -1 EBADF (Bad file descriptor) [pid 5114] close(27) = -1 EBADF (Bad file descriptor) [pid 5114] close(28) = -1 EBADF (Bad file descriptor) [pid 5114] close(29) = -1 EBADF (Bad file descriptor) [pid 5114] exit_group(0) = ? [pid 5114] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 30 ./strace-static-x86_64: Process 5115 attached [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4) = 4 [pid 5115] close(3) = 0 [pid 5115] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5115] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5115] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5115] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5115] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5115] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5115] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5115] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5115] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5115] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5115] write(7, "5", 1) = 1 [pid 5115] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5115] close(3) = 0 [pid 5115] close(4) = 0 [pid 5115] close(5) = 0 [pid 5115] close(6) = 0 [pid 5115] close(7) = 0 [pid 5115] close(8) = -1 EBADF (Bad file descriptor) [pid 5115] close(9) = -1 EBADF (Bad file descriptor) [pid 5115] close(10) = -1 EBADF (Bad file descriptor) [pid 5115] close(11) = -1 EBADF (Bad file descriptor) [pid 5115] close(12) = -1 EBADF (Bad file descriptor) [pid 5115] close(13) = -1 EBADF (Bad file descriptor) [pid 5115] close(14) = -1 EBADF (Bad file descriptor) [pid 5115] close(15) = -1 EBADF (Bad file descriptor) [ 66.444296][ T5114] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 66.452285][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 66.460272][ T5114] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 66.468308][ T5114] [pid 5115] close(16) = -1 EBADF (Bad file descriptor) [pid 5115] close(17) = -1 EBADF (Bad file descriptor) [pid 5115] close(18) = -1 EBADF (Bad file descriptor) [pid 5115] close(19) = -1 EBADF (Bad file descriptor) [pid 5115] close(20) = -1 EBADF (Bad file descriptor) [pid 5115] close(21) = -1 EBADF (Bad file descriptor) [pid 5115] close(22) = -1 EBADF (Bad file descriptor) [pid 5115] close(23) = -1 EBADF (Bad file descriptor) [pid 5115] close(24) = -1 EBADF (Bad file descriptor) [pid 5115] close(25) = -1 EBADF (Bad file descriptor) [pid 5115] close(26) = -1 EBADF (Bad file descriptor) [pid 5115] close(27) = -1 EBADF (Bad file descriptor) [pid 5115] close(28) = -1 EBADF (Bad file descriptor) [pid 5115] close(29) = -1 EBADF (Bad file descriptor) [pid 5115] exit_group(0) = ? [pid 5115] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 31 ./strace-static-x86_64: Process 5116 attached [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5116] setpgid(0, 0) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "1000", 4) = 4 [pid 5116] close(3) = 0 [pid 5116] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5116] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5116] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5116] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5116] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5116] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5116] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5116] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5116] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5116] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5116] write(7, "5", 1) = 1 [ 66.537226][ T5116] FAULT_INJECTION: forcing a failure. [ 66.537226][ T5116] name failslab, interval 1, probability 0, space 0, times 0 [ 66.550825][ T5116] CPU: 0 PID: 5116 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 66.560787][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 66.570883][ T5116] Call Trace: [ 66.574174][ T5116] [ 66.577108][ T5116] dump_stack_lvl+0xd1/0x138 [ 66.581712][ T5116] should_fail_ex.cold+0x5/0xa [ 66.586504][ T5116] ? io_issue_sqe+0x695/0x1250 [ 66.591313][ T5116] should_failslab+0x9/0x20 [ 66.595829][ T5116] __kmem_cache_alloc_node+0x5b/0x330 [ 66.601211][ T5116] ? ref_tracker_alloc+0x158/0x560 [ 66.606337][ T5116] kmalloc_trace+0x26/0x60 [ 66.610779][ T5116] ref_tracker_alloc+0x158/0x560 [ 66.615931][ T5116] ? __lock_acquire+0xbc3/0x56d0 [ 66.620881][ T5116] ? ref_tracker_free+0x6b0/0x6b0 [ 66.625946][ T5116] dst_init+0xe4/0x520 [ 66.630203][ T5116] dst_alloc+0x16f/0x1f0 [ 66.634521][ T5116] rt_dst_alloc+0x55/0x430 [ 66.638956][ T5116] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 66.644987][ T5116] ip_route_output_key_hash+0x18f/0x340 [ 66.650607][ T5116] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 66.656908][ T5116] dccp_v4_connect+0x7e1/0x1730 [ 66.661843][ T5116] __inet_stream_connect+0x69e/0xed0 [ 66.667191][ T5116] ? inet_listen+0x640/0x640 [ 66.671815][ T5116] ? mark_held_locks+0x9f/0xe0 [ 66.676615][ T5116] ? __local_bh_enable_ip+0xa4/0x130 [ 66.681942][ T5116] inet_stream_connect+0x57/0xa0 [ 66.686906][ T5116] ? __inet_stream_connect+0xed0/0xed0 [ 66.692392][ T5116] __sys_connect_file+0x153/0x1a0 [ 66.697453][ T5116] io_connect+0x3cc/0x720 [ 66.701797][ T5116] ? io_connect_prep+0x250/0x250 [ 66.706754][ T5116] ? receive_fd+0x110/0x110 [ 66.711328][ T5116] ? rcu_read_lock_sched_held+0x3e/0x70 [ 66.716916][ T5116] ? io_connect_prep+0x250/0x250 [ 66.721890][ T5116] io_issue_sqe+0x695/0x1250 [ 66.726517][ T5116] io_submit_sqes+0x96c/0x1e90 [ 66.731330][ T5116] __do_sys_io_uring_enter+0x103d/0x24e0 [ 66.736982][ T5116] ? io_submit_sqes+0x1e90/0x1e90 [ 66.742034][ T5116] ? ptrace_notify+0xfe/0x140 [ 66.746913][ T5116] ? lock_downgrade+0x6e0/0x6e0 [ 66.751775][ T5116] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.756980][ T5116] ? lockdep_hardirqs_on+0x7d/0x100 [ 66.762286][ T5116] ? _raw_spin_unlock_irq+0x2e/0x50 [ 66.767511][ T5116] ? ptrace_notify+0xfe/0x140 [ 66.772212][ T5116] do_syscall_64+0x39/0xb0 [ 66.776665][ T5116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.782562][ T5116] RIP: 0033:0x7f607b0de549 [ 66.786976][ T5116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.806677][ T5116] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 66.815121][ T5116] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 66.823137][ T5116] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5116] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5116] close(3) = 0 [pid 5116] close(4) = 0 [pid 5116] close(5) = 0 [pid 5116] close(6) = 0 [pid 5116] close(7) = 0 [pid 5116] close(8) = -1 EBADF (Bad file descriptor) [pid 5116] close(9) = -1 EBADF (Bad file descriptor) [pid 5116] close(10) = -1 EBADF (Bad file descriptor) [pid 5116] close(11) = -1 EBADF (Bad file descriptor) [pid 5116] close(12) = -1 EBADF (Bad file descriptor) [pid 5116] close(13) = -1 EBADF (Bad file descriptor) [pid 5116] close(14) = -1 EBADF (Bad file descriptor) [pid 5116] close(15) = -1 EBADF (Bad file descriptor) [pid 5116] close(16) = -1 EBADF (Bad file descriptor) [pid 5116] close(17) = -1 EBADF (Bad file descriptor) [pid 5116] close(18) = -1 EBADF (Bad file descriptor) [pid 5116] close(19) = -1 EBADF (Bad file descriptor) [pid 5116] close(20) = -1 EBADF (Bad file descriptor) [pid 5116] close(21) = -1 EBADF (Bad file descriptor) [pid 5116] close(22) = -1 EBADF (Bad file descriptor) [pid 5116] close(23) = -1 EBADF (Bad file descriptor) [pid 5116] close(24) = -1 EBADF (Bad file descriptor) [pid 5116] close(25) = -1 EBADF (Bad file descriptor) [pid 5116] close(26) = -1 EBADF (Bad file descriptor) [pid 5116] close(27) = -1 EBADF (Bad file descriptor) [pid 5116] close(28) = -1 EBADF (Bad file descriptor) [pid 5116] close(29) = -1 EBADF (Bad file descriptor) [pid 5116] exit_group(0) = ? [pid 5116] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 32 ./strace-static-x86_64: Process 5117 attached [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5117] setpgid(0, 0) = 0 [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5117] write(3, "1000", 4) = 4 [pid 5117] close(3) = 0 [pid 5117] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5117] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5117] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5117] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5117] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5117] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5117] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5117] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5117] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 66.831129][ T5116] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 66.839129][ T5116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 66.847192][ T5116] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 66.855198][ T5116] [pid 5117] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5117] write(7, "5", 1) = 1 [ 66.901359][ T5117] FAULT_INJECTION: forcing a failure. [ 66.901359][ T5117] name failslab, interval 1, probability 0, space 0, times 0 [ 66.914883][ T5117] CPU: 0 PID: 5117 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 66.924815][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 66.934908][ T5117] Call Trace: [ 66.938202][ T5117] [ 66.941135][ T5117] dump_stack_lvl+0xd1/0x138 [ 66.945753][ T5117] should_fail_ex.cold+0x5/0xa [ 66.950530][ T5117] ? io_issue_sqe+0x695/0x1250 [ 66.955326][ T5117] should_failslab+0x9/0x20 [ 66.959883][ T5117] __kmem_cache_alloc_node+0x5b/0x330 [ 66.965297][ T5117] ? ref_tracker_alloc+0x158/0x560 [ 66.970481][ T5117] kmalloc_trace+0x26/0x60 [ 66.974948][ T5117] ref_tracker_alloc+0x158/0x560 [ 66.979920][ T5117] ? __lock_acquire+0xbc3/0x56d0 [ 66.984885][ T5117] ? ref_tracker_free+0x6b0/0x6b0 [ 66.990136][ T5117] dst_init+0xe4/0x520 [ 66.994236][ T5117] dst_alloc+0x16f/0x1f0 [ 66.998507][ T5117] rt_dst_alloc+0x55/0x430 [ 67.002956][ T5117] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 67.008983][ T5117] ip_route_output_key_hash+0x18f/0x340 [ 67.014562][ T5117] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 67.020852][ T5117] dccp_v4_connect+0x7e1/0x1730 [ 67.025762][ T5117] __inet_stream_connect+0x69e/0xed0 [ 67.031100][ T5117] ? inet_listen+0x640/0x640 [ 67.035749][ T5117] ? mark_held_locks+0x9f/0xe0 [ 67.040547][ T5117] ? __local_bh_enable_ip+0xa4/0x130 [ 67.045877][ T5117] inet_stream_connect+0x57/0xa0 [ 67.050867][ T5117] ? __inet_stream_connect+0xed0/0xed0 [ 67.056396][ T5117] __sys_connect_file+0x153/0x1a0 [ 67.061447][ T5117] io_connect+0x3cc/0x720 [ 67.065834][ T5117] ? io_connect_prep+0x250/0x250 [ 67.070807][ T5117] ? receive_fd+0x110/0x110 [ 67.075359][ T5117] ? rcu_read_lock_sched_held+0x3e/0x70 [ 67.080926][ T5117] ? io_connect_prep+0x250/0x250 [ 67.085927][ T5117] io_issue_sqe+0x695/0x1250 [ 67.090898][ T5117] io_submit_sqes+0x96c/0x1e90 [ 67.095714][ T5117] __do_sys_io_uring_enter+0x103d/0x24e0 [ 67.101386][ T5117] ? io_submit_sqes+0x1e90/0x1e90 [ 67.106446][ T5117] ? ptrace_notify+0xfe/0x140 [ 67.111145][ T5117] ? lock_downgrade+0x6e0/0x6e0 [ 67.116027][ T5117] ? _raw_spin_unlock_irq+0x23/0x50 [ 67.121269][ T5117] ? lockdep_hardirqs_on+0x7d/0x100 [ 67.126493][ T5117] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.131721][ T5117] ? ptrace_notify+0xfe/0x140 [ 67.136427][ T5117] do_syscall_64+0x39/0xb0 [ 67.140888][ T5117] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.146806][ T5117] RIP: 0033:0x7f607b0de549 [ 67.151250][ T5117] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.170880][ T5117] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 67.179320][ T5117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 67.187307][ T5117] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5117] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5117] close(3) = 0 [pid 5117] close(4) = 0 [pid 5117] close(5) = 0 [pid 5117] close(6) = 0 [pid 5117] close(7) = 0 [pid 5117] close(8) = -1 EBADF (Bad file descriptor) [pid 5117] close(9) = -1 EBADF (Bad file descriptor) [pid 5117] close(10) = -1 EBADF (Bad file descriptor) [pid 5117] close(11) = -1 EBADF (Bad file descriptor) [pid 5117] close(12) = -1 EBADF (Bad file descriptor) [pid 5117] close(13) = -1 EBADF (Bad file descriptor) [pid 5117] close(14) = -1 EBADF (Bad file descriptor) [pid 5117] close(15) = -1 EBADF (Bad file descriptor) [pid 5117] close(16) = -1 EBADF (Bad file descriptor) [pid 5117] close(17) = -1 EBADF (Bad file descriptor) [pid 5117] close(18) = -1 EBADF (Bad file descriptor) [pid 5117] close(19) = -1 EBADF (Bad file descriptor) [pid 5117] close(20) = -1 EBADF (Bad file descriptor) [pid 5117] close(21) = -1 EBADF (Bad file descriptor) [pid 5117] close(22) = -1 EBADF (Bad file descriptor) [pid 5117] close(23) = -1 EBADF (Bad file descriptor) [pid 5117] close(24) = -1 EBADF (Bad file descriptor) [pid 5117] close(25) = -1 EBADF (Bad file descriptor) [pid 5117] close(26) = -1 EBADF (Bad file descriptor) [pid 5117] close(27) = -1 EBADF (Bad file descriptor) [pid 5117] close(28) = -1 EBADF (Bad file descriptor) [pid 5117] close(29) = -1 EBADF (Bad file descriptor) [pid 5117] exit_group(0) = ? [pid 5117] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 33 ./strace-static-x86_64: Process 5118 attached [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5118] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5118] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5118] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5118] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5118] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5118] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5118] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5118] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5118] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5118] write(7, "5", 1) = 1 [ 67.195293][ T5117] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 67.203282][ T5117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 67.211268][ T5117] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 67.219279][ T5117] [ 67.263503][ T5118] FAULT_INJECTION: forcing a failure. [ 67.263503][ T5118] name failslab, interval 1, probability 0, space 0, times 0 [ 67.276304][ T5118] CPU: 0 PID: 5118 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 67.286217][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 67.296303][ T5118] Call Trace: [ 67.299596][ T5118] [ 67.302536][ T5118] dump_stack_lvl+0xd1/0x138 [ 67.307142][ T5118] should_fail_ex.cold+0x5/0xa [ 67.312106][ T5118] ? __inet_hash_connect+0x95e/0x1ba0 [ 67.317518][ T5118] should_failslab+0x9/0x20 [ 67.322084][ T5118] kmem_cache_alloc+0x5a/0x320 [ 67.326886][ T5118] __inet_hash_connect+0x95e/0x1ba0 [ 67.332111][ T5118] ? __inet_lookup_listener+0xbf0/0xbf0 [ 67.337699][ T5118] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 67.344072][ T5118] dccp_v4_connect+0xb82/0x1730 [ 67.348967][ T5118] __inet_stream_connect+0x69e/0xed0 [ 67.354304][ T5118] ? inet_listen+0x640/0x640 [ 67.358966][ T5118] ? mark_held_locks+0x9f/0xe0 [ 67.363762][ T5118] ? __local_bh_enable_ip+0xa4/0x130 [ 67.369090][ T5118] inet_stream_connect+0x57/0xa0 [ 67.374070][ T5118] ? __inet_stream_connect+0xed0/0xed0 [ 67.379540][ T5118] __sys_connect_file+0x153/0x1a0 [ 67.384577][ T5118] io_connect+0x3cc/0x720 [ 67.388974][ T5118] ? io_connect_prep+0x250/0x250 [ 67.393967][ T5118] ? receive_fd+0x110/0x110 [ 67.398489][ T5118] ? rcu_read_lock_sched_held+0x3e/0x70 [ 67.404043][ T5118] ? io_connect_prep+0x250/0x250 [ 67.409007][ T5118] io_issue_sqe+0x695/0x1250 [ 67.413730][ T5118] io_submit_sqes+0x96c/0x1e90 [ 67.418521][ T5118] __do_sys_io_uring_enter+0x103d/0x24e0 [ 67.424171][ T5118] ? io_submit_sqes+0x1e90/0x1e90 [ 67.429227][ T5118] ? ptrace_notify+0xfe/0x140 [ 67.433950][ T5118] ? lock_downgrade+0x6e0/0x6e0 [ 67.438813][ T5118] ? _raw_spin_unlock_irq+0x23/0x50 [ 67.444037][ T5118] ? lockdep_hardirqs_on+0x7d/0x100 [ 67.449253][ T5118] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.454484][ T5118] ? ptrace_notify+0xfe/0x140 [ 67.459188][ T5118] do_syscall_64+0x39/0xb0 [ 67.463644][ T5118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.469541][ T5118] RIP: 0033:0x7f607b0de549 [ 67.473956][ T5118] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.493583][ T5118] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 67.502018][ T5118] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5118] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5118] close(3) = 0 [pid 5118] close(4) = 0 [pid 5118] close(5) = 0 [pid 5118] close(6) = 0 [pid 5118] close(7) = 0 [pid 5118] close(8) = -1 EBADF (Bad file descriptor) [pid 5118] close(9) = -1 EBADF (Bad file descriptor) [pid 5118] close(10) = -1 EBADF (Bad file descriptor) [pid 5118] close(11) = -1 EBADF (Bad file descriptor) [pid 5118] close(12) = -1 EBADF (Bad file descriptor) [pid 5118] close(13) = -1 EBADF (Bad file descriptor) [pid 5118] close(14) = -1 EBADF (Bad file descriptor) [pid 5118] close(15) = -1 EBADF (Bad file descriptor) [pid 5118] close(16) = -1 EBADF (Bad file descriptor) [pid 5118] close(17) = -1 EBADF (Bad file descriptor) [pid 5118] close(18) = -1 EBADF (Bad file descriptor) [pid 5118] close(19) = -1 EBADF (Bad file descriptor) [pid 5118] close(20) = -1 EBADF (Bad file descriptor) [pid 5118] close(21) = -1 EBADF (Bad file descriptor) [pid 5118] close(22) = -1 EBADF (Bad file descriptor) [pid 5118] close(23) = -1 EBADF (Bad file descriptor) [pid 5118] close(24) = -1 EBADF (Bad file descriptor) [pid 5118] close(25) = -1 EBADF (Bad file descriptor) [pid 5118] close(26) = -1 EBADF (Bad file descriptor) [pid 5118] close(27) = -1 EBADF (Bad file descriptor) [pid 5118] close(28) = -1 EBADF (Bad file descriptor) [pid 5118] close(29) = -1 EBADF (Bad file descriptor) [pid 5118] exit_group(0) = ? [pid 5118] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 34 ./strace-static-x86_64: Process 5119 attached [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5119] setpgid(0, 0) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5119] write(3, "1000", 4) = 4 [pid 5119] close(3) = 0 [pid 5119] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5119] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5119] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5119] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5119] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5119] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5119] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5119] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5119] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5119] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5119] write(7, "5", 1) = 1 [ 67.510014][ T5118] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 67.517990][ T5118] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 67.525969][ T5118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 67.534000][ T5118] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 67.542020][ T5118] [ 67.578485][ T5119] FAULT_INJECTION: forcing a failure. [ 67.578485][ T5119] name failslab, interval 1, probability 0, space 0, times 0 [ 67.592208][ T5119] CPU: 0 PID: 5119 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 67.602119][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 67.612206][ T5119] Call Trace: [ 67.615488][ T5119] [ 67.618418][ T5119] dump_stack_lvl+0xd1/0x138 [ 67.623207][ T5119] should_fail_ex.cold+0x5/0xa [ 67.628029][ T5119] ? io_issue_sqe+0x695/0x1250 [ 67.632833][ T5119] should_failslab+0x9/0x20 [ 67.637438][ T5119] __kmem_cache_alloc_node+0x5b/0x330 [ 67.642857][ T5119] ? ref_tracker_alloc+0x158/0x560 [ 67.647999][ T5119] kmalloc_trace+0x26/0x60 [ 67.652555][ T5119] ref_tracker_alloc+0x158/0x560 [ 67.657538][ T5119] ? __lock_acquire+0xbc3/0x56d0 [ 67.662500][ T5119] ? ref_tracker_free+0x6b0/0x6b0 [ 67.667581][ T5119] dst_init+0xe4/0x520 [ 67.671681][ T5119] dst_alloc+0x16f/0x1f0 [ 67.675954][ T5119] rt_dst_alloc+0x55/0x430 [ 67.680413][ T5119] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 67.686534][ T5119] ip_route_output_key_hash+0x18f/0x340 [ 67.692118][ T5119] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 67.698409][ T5119] dccp_v4_connect+0x7e1/0x1730 [ 67.703312][ T5119] __inet_stream_connect+0x69e/0xed0 [ 67.708642][ T5119] ? inet_listen+0x640/0x640 [ 67.713270][ T5119] ? mark_held_locks+0x9f/0xe0 [ 67.718058][ T5119] ? __local_bh_enable_ip+0xa4/0x130 [ 67.723378][ T5119] inet_stream_connect+0x57/0xa0 [ 67.728350][ T5119] ? __inet_stream_connect+0xed0/0xed0 [ 67.733842][ T5119] __sys_connect_file+0x153/0x1a0 [ 67.738891][ T5119] io_connect+0x3cc/0x720 [ 67.743263][ T5119] ? io_connect_prep+0x250/0x250 [ 67.748229][ T5119] ? receive_fd+0x110/0x110 [ 67.752776][ T5119] ? rcu_read_lock_sched_held+0x3e/0x70 [ 67.758351][ T5119] ? io_connect_prep+0x250/0x250 [ 67.763324][ T5119] io_issue_sqe+0x695/0x1250 [ 67.767949][ T5119] io_submit_sqes+0x96c/0x1e90 [ 67.772760][ T5119] __do_sys_io_uring_enter+0x103d/0x24e0 [ 67.778430][ T5119] ? io_submit_sqes+0x1e90/0x1e90 [ 67.783485][ T5119] ? ptrace_notify+0xfe/0x140 [ 67.788187][ T5119] ? lock_downgrade+0x6e0/0x6e0 [ 67.793071][ T5119] ? _raw_spin_unlock_irq+0x23/0x50 [ 67.798302][ T5119] ? lockdep_hardirqs_on+0x7d/0x100 [ 67.803524][ T5119] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.808923][ T5119] ? ptrace_notify+0xfe/0x140 [ 67.813653][ T5119] do_syscall_64+0x39/0xb0 [ 67.818127][ T5119] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.824655][ T5119] RIP: 0033:0x7f607b0de549 [ 67.829267][ T5119] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.848900][ T5119] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 67.857408][ T5119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 67.865396][ T5119] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5119] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5119] close(3) = 0 [pid 5119] close(4) = 0 [pid 5119] close(5) = 0 [pid 5119] close(6) = 0 [pid 5119] close(7) = 0 [pid 5119] close(8) = -1 EBADF (Bad file descriptor) [pid 5119] close(9) = -1 EBADF (Bad file descriptor) [pid 5119] close(10) = -1 EBADF (Bad file descriptor) [pid 5119] close(11) = -1 EBADF (Bad file descriptor) [pid 5119] close(12) = -1 EBADF (Bad file descriptor) [pid 5119] close(13) = -1 EBADF (Bad file descriptor) [pid 5119] close(14) = -1 EBADF (Bad file descriptor) [pid 5119] close(15) = -1 EBADF (Bad file descriptor) [pid 5119] close(16) = -1 EBADF (Bad file descriptor) [pid 5119] close(17) = -1 EBADF (Bad file descriptor) [pid 5119] close(18) = -1 EBADF (Bad file descriptor) [pid 5119] close(19) = -1 EBADF (Bad file descriptor) [pid 5119] close(20) = -1 EBADF (Bad file descriptor) [pid 5119] close(21) = -1 EBADF (Bad file descriptor) [pid 5119] close(22) = -1 EBADF (Bad file descriptor) [pid 5119] close(23) = -1 EBADF (Bad file descriptor) [pid 5119] close(24) = -1 EBADF (Bad file descriptor) [pid 5119] close(25) = -1 EBADF (Bad file descriptor) [pid 5119] close(26) = -1 EBADF (Bad file descriptor) [pid 5119] close(27) = -1 EBADF (Bad file descriptor) [pid 5119] close(28) = -1 EBADF (Bad file descriptor) [pid 5119] close(29) = -1 EBADF (Bad file descriptor) [pid 5119] exit_group(0) = ? [pid 5119] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 35 ./strace-static-x86_64: Process 5120 attached [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5120] setpgid(0, 0) = 0 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5120] write(3, "1000", 4) = 4 [pid 5120] close(3) = 0 [pid 5120] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 67.873472][ T5119] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 67.881546][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 67.889534][ T5119] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 67.897542][ T5119] [pid 5120] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5120] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5120] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5120] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5120] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5120] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5120] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5120] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5120] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5120] write(7, "5", 1) = 1 [ 67.955684][ T5120] FAULT_INJECTION: forcing a failure. [ 67.955684][ T5120] name failslab, interval 1, probability 0, space 0, times 0 [ 67.968593][ T5120] CPU: 0 PID: 5120 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 67.978514][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 67.988571][ T5120] Call Trace: [ 67.991850][ T5120] [ 67.994781][ T5120] dump_stack_lvl+0xd1/0x138 [ 67.999397][ T5120] should_fail_ex.cold+0x5/0xa [ 68.004189][ T5120] ? io_issue_sqe+0x695/0x1250 [ 68.008966][ T5120] should_failslab+0x9/0x20 [ 68.013478][ T5120] __kmem_cache_alloc_node+0x5b/0x330 [ 68.018857][ T5120] ? ref_tracker_alloc+0x158/0x560 [ 68.024000][ T5120] kmalloc_trace+0x26/0x60 [ 68.028453][ T5120] ref_tracker_alloc+0x158/0x560 [ 68.033421][ T5120] ? __lock_acquire+0xbc3/0x56d0 [ 68.038385][ T5120] ? ref_tracker_free+0x6b0/0x6b0 [ 68.043467][ T5120] dst_init+0xe4/0x520 [ 68.047569][ T5120] dst_alloc+0x16f/0x1f0 [ 68.051845][ T5120] rt_dst_alloc+0x55/0x430 [ 68.056292][ T5120] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 68.062411][ T5120] ip_route_output_key_hash+0x18f/0x340 [ 68.067986][ T5120] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 68.074286][ T5120] dccp_v4_connect+0x7e1/0x1730 [ 68.079283][ T5120] __inet_stream_connect+0x69e/0xed0 [ 68.084622][ T5120] ? inet_listen+0x640/0x640 [ 68.089254][ T5120] ? mark_held_locks+0x9f/0xe0 [ 68.094045][ T5120] ? __local_bh_enable_ip+0xa4/0x130 [ 68.099365][ T5120] inet_stream_connect+0x57/0xa0 [ 68.104348][ T5120] ? __inet_stream_connect+0xed0/0xed0 [ 68.109852][ T5120] __sys_connect_file+0x153/0x1a0 [ 68.114994][ T5120] io_connect+0x3cc/0x720 [ 68.119359][ T5120] ? io_connect_prep+0x250/0x250 [ 68.124334][ T5120] ? receive_fd+0x110/0x110 [ 68.128879][ T5120] ? rcu_read_lock_sched_held+0x3e/0x70 [ 68.134446][ T5120] ? io_connect_prep+0x250/0x250 [ 68.139417][ T5120] io_issue_sqe+0x695/0x1250 [ 68.144040][ T5120] io_submit_sqes+0x96c/0x1e90 [ 68.148944][ T5120] __do_sys_io_uring_enter+0x103d/0x24e0 [ 68.154615][ T5120] ? io_submit_sqes+0x1e90/0x1e90 [ 68.159691][ T5120] ? ptrace_notify+0xfe/0x140 [ 68.164387][ T5120] ? lock_downgrade+0x6e0/0x6e0 [ 68.169273][ T5120] ? _raw_spin_unlock_irq+0x23/0x50 [ 68.174503][ T5120] ? lockdep_hardirqs_on+0x7d/0x100 [ 68.179728][ T5120] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.184954][ T5120] ? ptrace_notify+0xfe/0x140 [ 68.189661][ T5120] do_syscall_64+0x39/0xb0 [ 68.194110][ T5120] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.200116][ T5120] RIP: 0033:0x7f607b0de549 [ 68.204549][ T5120] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.224186][ T5120] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 68.232623][ T5120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 68.240610][ T5120] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 68.248687][ T5120] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5120] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5120] close(3) = 0 [pid 5120] close(4) = 0 [pid 5120] close(5) = 0 [pid 5120] close(6) = 0 [pid 5120] close(7) = 0 [pid 5120] close(8) = -1 EBADF (Bad file descriptor) [pid 5120] close(9) = -1 EBADF (Bad file descriptor) [pid 5120] close(10) = -1 EBADF (Bad file descriptor) [pid 5120] close(11) = -1 EBADF (Bad file descriptor) [pid 5120] close(12) = -1 EBADF (Bad file descriptor) [pid 5120] close(13) = -1 EBADF (Bad file descriptor) [pid 5120] close(14) = -1 EBADF (Bad file descriptor) [pid 5120] close(15) = -1 EBADF (Bad file descriptor) [pid 5120] close(16) = -1 EBADF (Bad file descriptor) [pid 5120] close(17) = -1 EBADF (Bad file descriptor) [pid 5120] close(18) = -1 EBADF (Bad file descriptor) [pid 5120] close(19) = -1 EBADF (Bad file descriptor) [pid 5120] close(20) = -1 EBADF (Bad file descriptor) [pid 5120] close(21) = -1 EBADF (Bad file descriptor) [pid 5120] close(22) = -1 EBADF (Bad file descriptor) [pid 5120] close(23) = -1 EBADF (Bad file descriptor) [pid 5120] close(24) = -1 EBADF (Bad file descriptor) [pid 5120] close(25) = -1 EBADF (Bad file descriptor) [pid 5120] close(26) = -1 EBADF (Bad file descriptor) [pid 5120] close(27) = -1 EBADF (Bad file descriptor) [pid 5120] close(28) = -1 EBADF (Bad file descriptor) [pid 5120] close(29) = -1 EBADF (Bad file descriptor) [pid 5120] exit_group(0) = ? [pid 5120] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 36 ./strace-static-x86_64: Process 5121 attached [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5121] setpgid(0, 0) = 0 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5121] write(3, "1000", 4) = 4 [pid 5121] close(3) = 0 [ 68.256677][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 68.264660][ T5120] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 68.272669][ T5120] [pid 5121] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5121] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5121] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5121] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5121] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5121] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5121] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5121] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5121] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5121] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5121] write(7, "5", 1) = 1 [ 68.334838][ T5121] FAULT_INJECTION: forcing a failure. [ 68.334838][ T5121] name failslab, interval 1, probability 0, space 0, times 0 [ 68.348490][ T5121] CPU: 0 PID: 5121 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 68.358428][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 68.368573][ T5121] Call Trace: [ 68.371852][ T5121] [ 68.374785][ T5121] dump_stack_lvl+0xd1/0x138 [ 68.379400][ T5121] should_fail_ex.cold+0x5/0xa [ 68.384189][ T5121] ? io_issue_sqe+0x695/0x1250 [ 68.388966][ T5121] should_failslab+0x9/0x20 [ 68.393480][ T5121] __kmem_cache_alloc_node+0x5b/0x330 [ 68.398857][ T5121] ? ref_tracker_alloc+0x158/0x560 [ 68.404001][ T5121] kmalloc_trace+0x26/0x60 [ 68.408464][ T5121] ref_tracker_alloc+0x158/0x560 [ 68.413434][ T5121] ? ref_tracker_free+0x6b0/0x6b0 [ 68.418751][ T5121] ? dst_alloc+0x14a/0x1f0 [ 68.423219][ T5121] dst_init+0xe4/0x520 [ 68.427925][ T5121] dst_alloc+0x16f/0x1f0 [ 68.432284][ T5121] rt_dst_alloc+0x55/0x430 [ 68.436732][ T5121] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 68.442761][ T5121] ip_route_output_key_hash+0x18f/0x340 [ 68.448337][ T5121] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 68.454630][ T5121] dccp_v4_connect+0x7e1/0x1730 [ 68.459538][ T5121] __inet_stream_connect+0x69e/0xed0 [ 68.464891][ T5121] ? inet_listen+0x640/0x640 [ 68.469527][ T5121] ? mark_held_locks+0x9f/0xe0 [ 68.474319][ T5121] ? __local_bh_enable_ip+0xa4/0x130 [ 68.479660][ T5121] inet_stream_connect+0x57/0xa0 [ 68.484644][ T5121] ? __inet_stream_connect+0xed0/0xed0 [ 68.490166][ T5121] __sys_connect_file+0x153/0x1a0 [ 68.495222][ T5121] io_connect+0x3cc/0x720 [ 68.499599][ T5121] ? io_connect_prep+0x250/0x250 [ 68.504583][ T5121] ? receive_fd+0x110/0x110 [ 68.509135][ T5121] ? rcu_read_lock_sched_held+0x3e/0x70 [ 68.514712][ T5121] ? io_connect_prep+0x250/0x250 [ 68.519686][ T5121] io_issue_sqe+0x695/0x1250 [ 68.524327][ T5121] io_submit_sqes+0x96c/0x1e90 [ 68.529154][ T5121] __do_sys_io_uring_enter+0x103d/0x24e0 [ 68.534829][ T5121] ? io_submit_sqes+0x1e90/0x1e90 [ 68.539889][ T5121] ? ptrace_notify+0xfe/0x140 [ 68.544603][ T5121] ? lock_downgrade+0x6e0/0x6e0 [ 68.549482][ T5121] ? _raw_spin_unlock_irq+0x23/0x50 [ 68.554800][ T5121] ? lockdep_hardirqs_on+0x7d/0x100 [ 68.560025][ T5121] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.565248][ T5121] ? ptrace_notify+0xfe/0x140 [ 68.569959][ T5121] do_syscall_64+0x39/0xb0 [ 68.574409][ T5121] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.580329][ T5121] RIP: 0033:0x7f607b0de549 [ 68.584770][ T5121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.604402][ T5121] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 68.612844][ T5121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 68.620860][ T5121] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5121] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5121] close(3) = 0 [pid 5121] close(4) = 0 [pid 5121] close(5) = 0 [pid 5121] close(6) = 0 [pid 5121] close(7) = 0 [pid 5121] close(8) = -1 EBADF (Bad file descriptor) [pid 5121] close(9) = -1 EBADF (Bad file descriptor) [pid 5121] close(10) = -1 EBADF (Bad file descriptor) [pid 5121] close(11) = -1 EBADF (Bad file descriptor) [pid 5121] close(12) = -1 EBADF (Bad file descriptor) [pid 5121] close(13) = -1 EBADF (Bad file descriptor) [pid 5121] close(14) = -1 EBADF (Bad file descriptor) [pid 5121] close(15) = -1 EBADF (Bad file descriptor) [pid 5121] close(16) = -1 EBADF (Bad file descriptor) [pid 5121] close(17) = -1 EBADF (Bad file descriptor) [pid 5121] close(18) = -1 EBADF (Bad file descriptor) [pid 5121] close(19) = -1 EBADF (Bad file descriptor) [pid 5121] close(20) = -1 EBADF (Bad file descriptor) [pid 5121] close(21) = -1 EBADF (Bad file descriptor) [pid 5121] close(22) = -1 EBADF (Bad file descriptor) [pid 5121] close(23) = -1 EBADF (Bad file descriptor) [pid 5121] close(24) = -1 EBADF (Bad file descriptor) [pid 5121] close(25) = -1 EBADF (Bad file descriptor) [pid 5121] close(26) = -1 EBADF (Bad file descriptor) [pid 5121] close(27) = -1 EBADF (Bad file descriptor) [pid 5121] close(28) = -1 EBADF (Bad file descriptor) [pid 5121] close(29) = -1 EBADF (Bad file descriptor) [pid 5121] exit_group(0) = ? [pid 5121] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 37 ./strace-static-x86_64: Process 5122 attached [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5122] setpgid(0, 0) = 0 [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5122] write(3, "1000", 4) = 4 [pid 5122] close(3) = 0 [pid 5122] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5122] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5122] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5122] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5122] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5122] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5122] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5122] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 68.628849][ T5121] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 68.636839][ T5121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 68.644825][ T5121] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 68.652863][ T5121] [pid 5122] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5122] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5122] write(7, "5", 1) = 1 [ 68.699795][ T5122] FAULT_INJECTION: forcing a failure. [ 68.699795][ T5122] name failslab, interval 1, probability 0, space 0, times 0 [ 68.712500][ T5122] CPU: 1 PID: 5122 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 68.722402][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 68.732484][ T5122] Call Trace: [ 68.735803][ T5122] [ 68.738740][ T5122] dump_stack_lvl+0xd1/0x138 [ 68.743346][ T5122] should_fail_ex.cold+0x5/0xa [ 68.748121][ T5122] ? __inet_hash_connect+0x95e/0x1ba0 [ 68.753598][ T5122] should_failslab+0x9/0x20 [ 68.758110][ T5122] kmem_cache_alloc+0x5a/0x320 [ 68.762904][ T5122] __inet_hash_connect+0x95e/0x1ba0 [ 68.768122][ T5122] ? __inet_lookup_listener+0xbf0/0xbf0 [ 68.773690][ T5122] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 68.780065][ T5122] dccp_v4_connect+0xb82/0x1730 [ 68.784988][ T5122] __inet_stream_connect+0x69e/0xed0 [ 68.790297][ T5122] ? inet_listen+0x640/0x640 [ 68.794923][ T5122] ? mark_held_locks+0x9f/0xe0 [ 68.799707][ T5122] ? __local_bh_enable_ip+0xa4/0x130 [ 68.805009][ T5122] inet_stream_connect+0x57/0xa0 [ 68.809975][ T5122] ? __inet_stream_connect+0xed0/0xed0 [ 68.815505][ T5122] __sys_connect_file+0x153/0x1a0 [ 68.820575][ T5122] io_connect+0x3cc/0x720 [ 68.824921][ T5122] ? io_connect_prep+0x250/0x250 [ 68.829887][ T5122] ? receive_fd+0x110/0x110 [ 68.834464][ T5122] ? rcu_read_lock_sched_held+0x3e/0x70 [ 68.840065][ T5122] ? io_connect_prep+0x250/0x250 [ 68.845053][ T5122] io_issue_sqe+0x695/0x1250 [ 68.849658][ T5122] io_submit_sqes+0x96c/0x1e90 [ 68.854444][ T5122] __do_sys_io_uring_enter+0x103d/0x24e0 [ 68.860097][ T5122] ? io_submit_sqes+0x1e90/0x1e90 [ 68.865156][ T5122] ? ptrace_notify+0xfe/0x140 [ 68.869873][ T5122] ? lock_downgrade+0x6e0/0x6e0 [ 68.874743][ T5122] ? _raw_spin_unlock_irq+0x23/0x50 [ 68.879968][ T5122] ? lockdep_hardirqs_on+0x7d/0x100 [ 68.885286][ T5122] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.890499][ T5122] ? ptrace_notify+0xfe/0x140 [ 68.895187][ T5122] do_syscall_64+0x39/0xb0 [ 68.899631][ T5122] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.905570][ T5122] RIP: 0033:0x7f607b0de549 [ 68.910026][ T5122] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 68.929679][ T5122] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 68.938138][ T5122] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5122] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5122] close(3) = 0 [pid 5122] close(4) = 0 [pid 5122] close(5) = 0 [pid 5122] close(6) = 0 [pid 5122] close(7) = 0 [pid 5122] close(8) = -1 EBADF (Bad file descriptor) [pid 5122] close(9) = -1 EBADF (Bad file descriptor) [pid 5122] close(10) = -1 EBADF (Bad file descriptor) [pid 5122] close(11) = -1 EBADF (Bad file descriptor) [pid 5122] close(12) = -1 EBADF (Bad file descriptor) [pid 5122] close(13) = -1 EBADF (Bad file descriptor) [pid 5122] close(14) = -1 EBADF (Bad file descriptor) [pid 5122] close(15) = -1 EBADF (Bad file descriptor) [pid 5122] close(16) = -1 EBADF (Bad file descriptor) [pid 5122] close(17) = -1 EBADF (Bad file descriptor) [pid 5122] close(18) = -1 EBADF (Bad file descriptor) [pid 5122] close(19) = -1 EBADF (Bad file descriptor) [pid 5122] close(20) = -1 EBADF (Bad file descriptor) [pid 5122] close(21) = -1 EBADF (Bad file descriptor) [pid 5122] close(22) = -1 EBADF (Bad file descriptor) [pid 5122] close(23) = -1 EBADF (Bad file descriptor) [pid 5122] close(24) = -1 EBADF (Bad file descriptor) [pid 5122] close(25) = -1 EBADF (Bad file descriptor) [pid 5122] close(26) = -1 EBADF (Bad file descriptor) [pid 5122] close(27) = -1 EBADF (Bad file descriptor) [pid 5122] close(28) = -1 EBADF (Bad file descriptor) [pid 5122] close(29) = -1 EBADF (Bad file descriptor) [pid 5122] exit_group(0) = ? [pid 5122] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5123 attached , child_tidptr=0x555555eff5d0) = 38 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3) = 0 [pid 5123] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5123] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5123] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5123] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5123] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5123] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5123] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5123] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5123] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 68.946134][ T5122] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 68.954126][ T5122] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 68.962140][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 68.970143][ T5122] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 68.978158][ T5122] [pid 5123] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5123] write(7, "5", 1) = 1 [ 69.033624][ T5123] FAULT_INJECTION: forcing a failure. [ 69.033624][ T5123] name failslab, interval 1, probability 0, space 0, times 0 [ 69.046420][ T5123] CPU: 0 PID: 5123 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 69.056334][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 69.066428][ T5123] Call Trace: [ 69.069722][ T5123] [ 69.072656][ T5123] dump_stack_lvl+0xd1/0x138 [ 69.077256][ T5123] should_fail_ex.cold+0x5/0xa [ 69.082034][ T5123] ? io_issue_sqe+0x695/0x1250 [ 69.086924][ T5123] should_failslab+0x9/0x20 [ 69.091447][ T5123] __kmem_cache_alloc_node+0x5b/0x330 [ 69.096881][ T5123] ? ref_tracker_alloc+0x158/0x560 [ 69.102026][ T5123] kmalloc_trace+0x26/0x60 [ 69.106484][ T5123] ref_tracker_alloc+0x158/0x560 [ 69.111454][ T5123] ? __lock_acquire+0xbc3/0x56d0 [ 69.116419][ T5123] ? ref_tracker_free+0x6b0/0x6b0 [ 69.121501][ T5123] dst_init+0xe4/0x520 [ 69.125604][ T5123] dst_alloc+0x16f/0x1f0 [ 69.129876][ T5123] rt_dst_alloc+0x55/0x430 [ 69.134325][ T5123] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 69.140350][ T5123] ip_route_output_key_hash+0x18f/0x340 [ 69.146101][ T5123] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 69.152403][ T5123] dccp_v4_connect+0x7e1/0x1730 [ 69.157309][ T5123] __inet_stream_connect+0x69e/0xed0 [ 69.162669][ T5123] ? inet_listen+0x640/0x640 [ 69.167323][ T5123] ? mark_held_locks+0x9f/0xe0 [ 69.172114][ T5123] ? __local_bh_enable_ip+0xa4/0x130 [ 69.177427][ T5123] inet_stream_connect+0x57/0xa0 [ 69.182401][ T5123] ? __inet_stream_connect+0xed0/0xed0 [ 69.187984][ T5123] __sys_connect_file+0x153/0x1a0 [ 69.193035][ T5123] io_connect+0x3cc/0x720 [ 69.197401][ T5123] ? io_connect_prep+0x250/0x250 [ 69.202370][ T5123] ? receive_fd+0x110/0x110 [ 69.206920][ T5123] ? rcu_read_lock_sched_held+0x3e/0x70 [ 69.212504][ T5123] ? io_connect_prep+0x250/0x250 [ 69.217476][ T5123] io_issue_sqe+0x695/0x1250 [ 69.222103][ T5123] io_submit_sqes+0x96c/0x1e90 [ 69.226915][ T5123] __do_sys_io_uring_enter+0x103d/0x24e0 [ 69.232678][ T5123] ? io_submit_sqes+0x1e90/0x1e90 [ 69.237735][ T5123] ? ptrace_notify+0xfe/0x140 [ 69.242435][ T5123] ? lock_downgrade+0x6e0/0x6e0 [ 69.247349][ T5123] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.252578][ T5123] ? lockdep_hardirqs_on+0x7d/0x100 [ 69.257801][ T5123] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.263032][ T5123] ? ptrace_notify+0xfe/0x140 [ 69.267739][ T5123] do_syscall_64+0x39/0xb0 [ 69.272191][ T5123] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.278105][ T5123] RIP: 0033:0x7f607b0de549 [ 69.282538][ T5123] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 69.302168][ T5123] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 69.310605][ T5123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 69.318610][ T5123] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 69.326600][ T5123] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5123] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5123] close(3) = 0 [pid 5123] close(4) = 0 [pid 5123] close(5) = 0 [pid 5123] close(6) = 0 [pid 5123] close(7) = 0 [pid 5123] close(8) = -1 EBADF (Bad file descriptor) [pid 5123] close(9) = -1 EBADF (Bad file descriptor) [pid 5123] close(10) = -1 EBADF (Bad file descriptor) [pid 5123] close(11) = -1 EBADF (Bad file descriptor) [pid 5123] close(12) = -1 EBADF (Bad file descriptor) [pid 5123] close(13) = -1 EBADF (Bad file descriptor) [pid 5123] close(14) = -1 EBADF (Bad file descriptor) [pid 5123] close(15) = -1 EBADF (Bad file descriptor) [pid 5123] close(16) = -1 EBADF (Bad file descriptor) [pid 5123] close(17) = -1 EBADF (Bad file descriptor) [pid 5123] close(18) = -1 EBADF (Bad file descriptor) [pid 5123] close(19) = -1 EBADF (Bad file descriptor) [pid 5123] close(20) = -1 EBADF (Bad file descriptor) [pid 5123] close(21) = -1 EBADF (Bad file descriptor) [pid 5123] close(22) = -1 EBADF (Bad file descriptor) [pid 5123] close(23) = -1 EBADF (Bad file descriptor) [pid 5123] close(24) = -1 EBADF (Bad file descriptor) [pid 5123] close(25) = -1 EBADF (Bad file descriptor) [pid 5123] close(26) = -1 EBADF (Bad file descriptor) [pid 5123] close(27) = -1 EBADF (Bad file descriptor) [pid 5123] close(28) = -1 EBADF (Bad file descriptor) [pid 5123] close(29) = -1 EBADF (Bad file descriptor) [pid 5123] exit_group(0) = ? [pid 5123] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 39 ./strace-static-x86_64: Process 5124 attached [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5124] write(3, "1000", 4) = 4 [pid 5124] close(3) = 0 [pid 5124] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5124] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5124] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5124] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5124] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 69.334593][ T5123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 69.342580][ T5123] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 69.350592][ T5123] [pid 5124] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5124] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5124] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5124] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5124] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5124] write(7, "5", 1) = 1 [ 69.403361][ T5124] FAULT_INJECTION: forcing a failure. [ 69.403361][ T5124] name failslab, interval 1, probability 0, space 0, times 0 [ 69.416108][ T5124] CPU: 0 PID: 5124 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 69.426043][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 69.436187][ T5124] Call Trace: [ 69.439462][ T5124] [ 69.442389][ T5124] dump_stack_lvl+0xd1/0x138 [ 69.446986][ T5124] should_fail_ex.cold+0x5/0xa [ 69.451747][ T5124] ? io_issue_sqe+0x695/0x1250 [ 69.456519][ T5124] should_failslab+0x9/0x20 [ 69.461026][ T5124] __kmem_cache_alloc_node+0x5b/0x330 [ 69.466398][ T5124] ? ref_tracker_alloc+0x158/0x560 [ 69.471606][ T5124] kmalloc_trace+0x26/0x60 [ 69.476032][ T5124] ref_tracker_alloc+0x158/0x560 [ 69.480973][ T5124] ? __lock_acquire+0xbc3/0x56d0 [ 69.485908][ T5124] ? ref_tracker_free+0x6b0/0x6b0 [ 69.490951][ T5124] dst_init+0xe4/0x520 [ 69.495026][ T5124] dst_alloc+0x16f/0x1f0 [ 69.499304][ T5124] rt_dst_alloc+0x55/0x430 [ 69.503724][ T5124] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 69.509717][ T5124] ip_route_output_key_hash+0x18f/0x340 [ 69.515279][ T5124] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 69.521537][ T5124] dccp_v4_connect+0x7e1/0x1730 [ 69.526408][ T5124] __inet_stream_connect+0x69e/0xed0 [ 69.531713][ T5124] ? inet_listen+0x640/0x640 [ 69.536404][ T5124] ? mark_held_locks+0x9f/0xe0 [ 69.541171][ T5124] ? __local_bh_enable_ip+0xa4/0x130 [ 69.546460][ T5124] inet_stream_connect+0x57/0xa0 [ 69.551405][ T5124] ? __inet_stream_connect+0xed0/0xed0 [ 69.556871][ T5124] __sys_connect_file+0x153/0x1a0 [ 69.561899][ T5124] io_connect+0x3cc/0x720 [ 69.566237][ T5124] ? io_connect_prep+0x250/0x250 [ 69.571186][ T5124] ? __fget_files+0x2dd/0x480 [ 69.575878][ T5124] ? rcu_read_lock_sched_held+0x3e/0x70 [ 69.581427][ T5124] ? io_connect_prep+0x250/0x250 [ 69.586373][ T5124] io_issue_sqe+0x695/0x1250 [ 69.590968][ T5124] io_submit_sqes+0x96c/0x1e90 [ 69.595751][ T5124] __do_sys_io_uring_enter+0x103d/0x24e0 [ 69.601391][ T5124] ? io_submit_sqes+0x1e90/0x1e90 [ 69.606431][ T5124] ? ptrace_notify+0xfe/0x140 [ 69.611119][ T5124] ? lock_downgrade+0x6e0/0x6e0 [ 69.615997][ T5124] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.621208][ T5124] ? lockdep_hardirqs_on+0x7d/0x100 [ 69.626414][ T5124] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.631619][ T5124] ? ptrace_notify+0xfe/0x140 [ 69.636302][ T5124] do_syscall_64+0x39/0xb0 [ 69.640735][ T5124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.646637][ T5124] RIP: 0033:0x7f607b0de549 [ 69.651069][ T5124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 69.670718][ T5124] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 69.679140][ T5124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 69.687117][ T5124] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 69.695089][ T5124] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5124] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5124] close(3) = 0 [pid 5124] close(4) = 0 [pid 5124] close(5) = 0 [pid 5124] close(6) = 0 [pid 5124] close(7) = 0 [pid 5124] close(8) = -1 EBADF (Bad file descriptor) [pid 5124] close(9) = -1 EBADF (Bad file descriptor) [pid 5124] close(10) = -1 EBADF (Bad file descriptor) [pid 5124] close(11) = -1 EBADF (Bad file descriptor) [pid 5124] close(12) = -1 EBADF (Bad file descriptor) [pid 5124] close(13) = -1 EBADF (Bad file descriptor) [pid 5124] close(14) = -1 EBADF (Bad file descriptor) [pid 5124] close(15) = -1 EBADF (Bad file descriptor) [pid 5124] close(16) = -1 EBADF (Bad file descriptor) [pid 5124] close(17) = -1 EBADF (Bad file descriptor) [pid 5124] close(18) = -1 EBADF (Bad file descriptor) [pid 5124] close(19) = -1 EBADF (Bad file descriptor) [pid 5124] close(20) = -1 EBADF (Bad file descriptor) [pid 5124] close(21) = -1 EBADF (Bad file descriptor) [pid 5124] close(22) = -1 EBADF (Bad file descriptor) [pid 5124] close(23) = -1 EBADF (Bad file descriptor) [pid 5124] close(24) = -1 EBADF (Bad file descriptor) [pid 5124] close(25) = -1 EBADF (Bad file descriptor) [pid 5124] close(26) = -1 EBADF (Bad file descriptor) [pid 5124] close(27) = -1 EBADF (Bad file descriptor) [pid 5124] close(28) = -1 EBADF (Bad file descriptor) [pid 5124] close(29) = -1 EBADF (Bad file descriptor) [pid 5124] exit_group(0) = ? [pid 5124] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 40 ./strace-static-x86_64: Process 5125 attached [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5125] setpgid(0, 0) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5125] write(3, "1000", 4) = 4 [pid 5125] close(3) = 0 [pid 5125] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5125] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5125] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5125] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5125] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5125] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5125] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5125] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5125] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5125] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5125] write(7, "5", 1) = 1 [ 69.703056][ T5124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 69.711026][ T5124] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 69.719008][ T5124] [ 69.760024][ T5125] FAULT_INJECTION: forcing a failure. [ 69.760024][ T5125] name failslab, interval 1, probability 0, space 0, times 0 [ 69.773212][ T5125] CPU: 0 PID: 5125 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 69.783156][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 69.793228][ T5125] Call Trace: [ 69.796509][ T5125] [ 69.799461][ T5125] dump_stack_lvl+0xd1/0x138 [ 69.804105][ T5125] should_fail_ex.cold+0x5/0xa [ 69.808881][ T5125] ? io_issue_sqe+0x695/0x1250 [ 69.813705][ T5125] should_failslab+0x9/0x20 [ 69.818221][ T5125] __kmem_cache_alloc_node+0x5b/0x330 [ 69.823615][ T5125] ? ref_tracker_alloc+0x158/0x560 [ 69.828750][ T5125] kmalloc_trace+0x26/0x60 [ 69.833255][ T5125] ref_tracker_alloc+0x158/0x560 [ 69.838210][ T5125] ? __lock_acquire+0xbc3/0x56d0 [ 69.843163][ T5125] ? ref_tracker_free+0x6b0/0x6b0 [ 69.848223][ T5125] dst_init+0xe4/0x520 [ 69.852318][ T5125] dst_alloc+0x16f/0x1f0 [ 69.856593][ T5125] rt_dst_alloc+0x55/0x430 [ 69.861033][ T5125] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 69.867051][ T5125] ip_route_output_key_hash+0x18f/0x340 [ 69.872609][ T5125] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 69.878917][ T5125] dccp_v4_connect+0x7e1/0x1730 [ 69.883802][ T5125] __inet_stream_connect+0x69e/0xed0 [ 69.889132][ T5125] ? inet_listen+0x640/0x640 [ 69.893776][ T5125] ? mark_held_locks+0x9f/0xe0 [ 69.898573][ T5125] ? __local_bh_enable_ip+0xa4/0x130 [ 69.903867][ T5125] inet_stream_connect+0x57/0xa0 [ 69.908817][ T5125] ? __inet_stream_connect+0xed0/0xed0 [ 69.914291][ T5125] __sys_connect_file+0x153/0x1a0 [ 69.919339][ T5125] io_connect+0x3cc/0x720 [ 69.923709][ T5125] ? io_connect_prep+0x250/0x250 [ 69.928657][ T5125] ? receive_fd+0x110/0x110 [ 69.933266][ T5125] ? rcu_read_lock_sched_held+0x3e/0x70 [ 69.938859][ T5125] ? io_connect_prep+0x250/0x250 [ 69.943812][ T5125] io_issue_sqe+0x695/0x1250 [ 69.948416][ T5125] io_submit_sqes+0x96c/0x1e90 [ 69.953208][ T5125] __do_sys_io_uring_enter+0x103d/0x24e0 [ 69.958860][ T5125] ? io_submit_sqes+0x1e90/0x1e90 [ 69.963903][ T5125] ? ptrace_notify+0xfe/0x140 [ 69.968589][ T5125] ? lock_downgrade+0x6e0/0x6e0 [ 69.973473][ T5125] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.978715][ T5125] ? lockdep_hardirqs_on+0x7d/0x100 [ 69.983929][ T5125] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.989151][ T5125] ? ptrace_notify+0xfe/0x140 [ 69.993863][ T5125] do_syscall_64+0x39/0xb0 [ 69.998293][ T5125] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.004195][ T5125] RIP: 0033:0x7f607b0de549 [ 70.008611][ T5125] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.028230][ T5125] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 70.036654][ T5125] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 70.044636][ T5125] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 70.052628][ T5125] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5125] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5125] close(3) = 0 [pid 5125] close(4) = 0 [pid 5125] close(5) = 0 [pid 5125] close(6) = 0 [pid 5125] close(7) = 0 [pid 5125] close(8) = -1 EBADF (Bad file descriptor) [pid 5125] close(9) = -1 EBADF (Bad file descriptor) [pid 5125] close(10) = -1 EBADF (Bad file descriptor) [pid 5125] close(11) = -1 EBADF (Bad file descriptor) [pid 5125] close(12) = -1 EBADF (Bad file descriptor) [pid 5125] close(13) = -1 EBADF (Bad file descriptor) [pid 5125] close(14) = -1 EBADF (Bad file descriptor) [pid 5125] close(15) = -1 EBADF (Bad file descriptor) [pid 5125] close(16) = -1 EBADF (Bad file descriptor) [pid 5125] close(17) = -1 EBADF (Bad file descriptor) [pid 5125] close(18) = -1 EBADF (Bad file descriptor) [pid 5125] close(19) = -1 EBADF (Bad file descriptor) [pid 5125] close(20) = -1 EBADF (Bad file descriptor) [pid 5125] close(21) = -1 EBADF (Bad file descriptor) [pid 5125] close(22) = -1 EBADF (Bad file descriptor) [pid 5125] close(23) = -1 EBADF (Bad file descriptor) [pid 5125] close(24) = -1 EBADF (Bad file descriptor) [pid 5125] close(25) = -1 EBADF (Bad file descriptor) [pid 5125] close(26) = -1 EBADF (Bad file descriptor) [pid 5125] close(27) = -1 EBADF (Bad file descriptor) [pid 5125] close(28) = -1 EBADF (Bad file descriptor) [pid 5125] close(29) = -1 EBADF (Bad file descriptor) [pid 5125] exit_group(0) = ? [pid 5125] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 41 ./strace-static-x86_64: Process 5126 attached [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5126] setpgid(0, 0) = 0 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5126] write(3, "1000", 4) = 4 [pid 5126] close(3) = 0 [pid 5126] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5126] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5126] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5126] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5126] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5126] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5126] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5126] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5126] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5126] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5126] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5126] write(7, "5", 1) = 1 [ 70.060635][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 70.068615][ T5125] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 70.076611][ T5125] [ 70.118801][ T5126] FAULT_INJECTION: forcing a failure. [ 70.118801][ T5126] name failslab, interval 1, probability 0, space 0, times 0 [ 70.131487][ T5126] CPU: 0 PID: 5126 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 70.141412][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 70.151493][ T5126] Call Trace: [ 70.154833][ T5126] [ 70.157776][ T5126] dump_stack_lvl+0xd1/0x138 [ 70.162396][ T5126] should_fail_ex.cold+0x5/0xa [ 70.167191][ T5126] ? __inet_hash_connect+0x95e/0x1ba0 [ 70.172576][ T5126] should_failslab+0x9/0x20 [ 70.177126][ T5126] kmem_cache_alloc+0x5a/0x320 [ 70.182116][ T5126] __inet_hash_connect+0x95e/0x1ba0 [ 70.187328][ T5126] ? __inet_lookup_listener+0xbf0/0xbf0 [ 70.193008][ T5126] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 70.199385][ T5126] dccp_v4_connect+0xb82/0x1730 [ 70.204310][ T5126] __inet_stream_connect+0x69e/0xed0 [ 70.209638][ T5126] ? inet_listen+0x640/0x640 [ 70.214266][ T5126] ? mark_held_locks+0x9f/0xe0 [ 70.219055][ T5126] ? __local_bh_enable_ip+0xa4/0x130 [ 70.224369][ T5126] inet_stream_connect+0x57/0xa0 [ 70.229428][ T5126] ? __inet_stream_connect+0xed0/0xed0 [ 70.234927][ T5126] __sys_connect_file+0x153/0x1a0 [ 70.240158][ T5126] io_connect+0x3cc/0x720 [ 70.244533][ T5126] ? io_connect_prep+0x250/0x250 [ 70.249506][ T5126] ? receive_fd+0x110/0x110 [ 70.254051][ T5126] ? rcu_read_lock_sched_held+0x3e/0x70 [ 70.259627][ T5126] ? io_connect_prep+0x250/0x250 [ 70.264606][ T5126] io_issue_sqe+0x695/0x1250 [ 70.269233][ T5126] io_submit_sqes+0x96c/0x1e90 [ 70.274045][ T5126] __do_sys_io_uring_enter+0x103d/0x24e0 [ 70.279716][ T5126] ? io_submit_sqes+0x1e90/0x1e90 [ 70.284775][ T5126] ? ptrace_notify+0xfe/0x140 [ 70.289476][ T5126] ? lock_downgrade+0x6e0/0x6e0 [ 70.294360][ T5126] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.299592][ T5126] ? lockdep_hardirqs_on+0x7d/0x100 [ 70.304817][ T5126] ? _raw_spin_unlock_irq+0x2e/0x50 [ 70.310041][ T5126] ? ptrace_notify+0xfe/0x140 [ 70.314756][ T5126] do_syscall_64+0x39/0xb0 [ 70.319208][ T5126] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.325124][ T5126] RIP: 0033:0x7f607b0de549 [ 70.329567][ T5126] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.349288][ T5126] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 70.357731][ T5126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5126] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5126] close(3) = 0 [pid 5126] close(4) = 0 [pid 5126] close(5) = 0 [pid 5126] close(6) = 0 [pid 5126] close(7) = 0 [pid 5126] close(8) = -1 EBADF (Bad file descriptor) [pid 5126] close(9) = -1 EBADF (Bad file descriptor) [pid 5126] close(10) = -1 EBADF (Bad file descriptor) [pid 5126] close(11) = -1 EBADF (Bad file descriptor) [pid 5126] close(12) = -1 EBADF (Bad file descriptor) [pid 5126] close(13) = -1 EBADF (Bad file descriptor) [pid 5126] close(14) = -1 EBADF (Bad file descriptor) [pid 5126] close(15) = -1 EBADF (Bad file descriptor) [pid 5126] close(16) = -1 EBADF (Bad file descriptor) [pid 5126] close(17) = -1 EBADF (Bad file descriptor) [pid 5126] close(18) = -1 EBADF (Bad file descriptor) [pid 5126] close(19) = -1 EBADF (Bad file descriptor) [pid 5126] close(20) = -1 EBADF (Bad file descriptor) [pid 5126] close(21) = -1 EBADF (Bad file descriptor) [pid 5126] close(22) = -1 EBADF (Bad file descriptor) [pid 5126] close(23) = -1 EBADF (Bad file descriptor) [pid 5126] close(24) = -1 EBADF (Bad file descriptor) [pid 5126] close(25) = -1 EBADF (Bad file descriptor) [pid 5126] close(26) = -1 EBADF (Bad file descriptor) [pid 5126] close(27) = -1 EBADF (Bad file descriptor) [pid 5126] close(28) = -1 EBADF (Bad file descriptor) [pid 5126] close(29) = -1 EBADF (Bad file descriptor) [pid 5126] exit_group(0) = ? [pid 5126] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 42 ./strace-static-x86_64: Process 5127 attached [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5127] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5127] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5127] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5127] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5127] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5127] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5127] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5127] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5127] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5127] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5127] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5127] write(7, "5", 1) = 1 [ 70.365721][ T5126] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 70.373713][ T5126] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 70.381821][ T5126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 70.389833][ T5126] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 70.397855][ T5126] [ 70.449828][ T5127] FAULT_INJECTION: forcing a failure. [ 70.449828][ T5127] name failslab, interval 1, probability 0, space 0, times 0 [ 70.463247][ T5127] CPU: 0 PID: 5127 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 70.473186][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 70.483285][ T5127] Call Trace: [ 70.486581][ T5127] [ 70.489514][ T5127] dump_stack_lvl+0xd1/0x138 [ 70.494121][ T5127] should_fail_ex.cold+0x5/0xa [ 70.498902][ T5127] ? io_issue_sqe+0x695/0x1250 [ 70.503704][ T5127] should_failslab+0x9/0x20 [ 70.508222][ T5127] __kmem_cache_alloc_node+0x5b/0x330 [ 70.513609][ T5127] ? ref_tracker_alloc+0x158/0x560 [ 70.518751][ T5127] kmalloc_trace+0x26/0x60 [ 70.523191][ T5127] ref_tracker_alloc+0x158/0x560 [ 70.528163][ T5127] ? __lock_acquire+0xbc3/0x56d0 [ 70.533122][ T5127] ? ref_tracker_free+0x6b0/0x6b0 [ 70.538200][ T5127] dst_init+0xe4/0x520 [ 70.542303][ T5127] dst_alloc+0x16f/0x1f0 [ 70.546577][ T5127] rt_dst_alloc+0x55/0x430 [ 70.551027][ T5127] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 70.557058][ T5127] ip_route_output_key_hash+0x18f/0x340 [ 70.562635][ T5127] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 70.568933][ T5127] dccp_v4_connect+0x7e1/0x1730 [ 70.573862][ T5127] __inet_stream_connect+0x69e/0xed0 [ 70.579215][ T5127] ? inet_listen+0x640/0x640 [ 70.583851][ T5127] ? mark_held_locks+0x9f/0xe0 [ 70.588820][ T5127] ? __local_bh_enable_ip+0xa4/0x130 [ 70.594141][ T5127] inet_stream_connect+0x57/0xa0 [ 70.599118][ T5127] ? __inet_stream_connect+0xed0/0xed0 [ 70.604613][ T5127] __sys_connect_file+0x153/0x1a0 [ 70.609755][ T5127] io_connect+0x3cc/0x720 [ 70.614126][ T5127] ? io_connect_prep+0x250/0x250 [ 70.619097][ T5127] ? receive_fd+0x110/0x110 [ 70.623646][ T5127] ? rcu_read_lock_sched_held+0x3e/0x70 [ 70.629309][ T5127] ? io_connect_prep+0x250/0x250 [ 70.634288][ T5127] io_issue_sqe+0x695/0x1250 [ 70.638943][ T5127] io_submit_sqes+0x96c/0x1e90 [ 70.643778][ T5127] __do_sys_io_uring_enter+0x103d/0x24e0 [ 70.649456][ T5127] ? io_submit_sqes+0x1e90/0x1e90 [ 70.654524][ T5127] ? ptrace_notify+0xfe/0x140 [ 70.659227][ T5127] ? lock_downgrade+0x6e0/0x6e0 [ 70.664112][ T5127] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.669338][ T5127] ? lockdep_hardirqs_on+0x7d/0x100 [ 70.674568][ T5127] ? _raw_spin_unlock_irq+0x2e/0x50 [ 70.679798][ T5127] ? ptrace_notify+0xfe/0x140 [ 70.684513][ T5127] do_syscall_64+0x39/0xb0 [ 70.688965][ T5127] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.694886][ T5127] RIP: 0033:0x7f607b0de549 [ 70.699324][ T5127] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.719307][ T5127] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 70.727832][ T5127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 70.735822][ T5127] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5127] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5127] close(3) = 0 [pid 5127] close(4) = 0 [pid 5127] close(5) = 0 [pid 5127] close(6) = 0 [pid 5127] close(7) = 0 [pid 5127] close(8) = -1 EBADF (Bad file descriptor) [pid 5127] close(9) = -1 EBADF (Bad file descriptor) [pid 5127] close(10) = -1 EBADF (Bad file descriptor) [pid 5127] close(11) = -1 EBADF (Bad file descriptor) [pid 5127] close(12) = -1 EBADF (Bad file descriptor) [pid 5127] close(13) = -1 EBADF (Bad file descriptor) [pid 5127] close(14) = -1 EBADF (Bad file descriptor) [pid 5127] close(15) = -1 EBADF (Bad file descriptor) [pid 5127] close(16) = -1 EBADF (Bad file descriptor) [pid 5127] close(17) = -1 EBADF (Bad file descriptor) [pid 5127] close(18) = -1 EBADF (Bad file descriptor) [pid 5127] close(19) = -1 EBADF (Bad file descriptor) [pid 5127] close(20) = -1 EBADF (Bad file descriptor) [pid 5127] close(21) = -1 EBADF (Bad file descriptor) [pid 5127] close(22) = -1 EBADF (Bad file descriptor) [pid 5127] close(23) = -1 EBADF (Bad file descriptor) [pid 5127] close(24) = -1 EBADF (Bad file descriptor) [pid 5127] close(25) = -1 EBADF (Bad file descriptor) [pid 5127] close(26) = -1 EBADF (Bad file descriptor) [pid 5127] close(27) = -1 EBADF (Bad file descriptor) [pid 5127] close(28) = -1 EBADF (Bad file descriptor) [pid 5127] close(29) = -1 EBADF (Bad file descriptor) [pid 5127] exit_group(0) = ? [pid 5127] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5128 attached , child_tidptr=0x555555eff5d0) = 43 [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5128] setpgid(0, 0) = 0 [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5128] write(3, "1000", 4) = 4 [pid 5128] close(3) = 0 [pid 5128] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5128] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5128] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5128] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5128] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5128] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 70.743829][ T5127] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 70.751816][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 70.759839][ T5127] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 70.767856][ T5127] [pid 5128] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5128] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5128] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5128] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5128] write(7, "5", 1) = 1 [ 70.818551][ T5128] FAULT_INJECTION: forcing a failure. [ 70.818551][ T5128] name failslab, interval 1, probability 0, space 0, times 0 [ 70.831410][ T5128] CPU: 0 PID: 5128 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 70.841359][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 70.851438][ T5128] Call Trace: [ 70.854717][ T5128] [ 70.857644][ T5128] dump_stack_lvl+0xd1/0x138 [ 70.862244][ T5128] should_fail_ex.cold+0x5/0xa [ 70.867004][ T5128] ? io_issue_sqe+0x695/0x1250 [ 70.871799][ T5128] should_failslab+0x9/0x20 [ 70.876315][ T5128] __kmem_cache_alloc_node+0x5b/0x330 [ 70.881728][ T5128] ? ref_tracker_alloc+0x158/0x560 [ 70.886873][ T5128] kmalloc_trace+0x26/0x60 [ 70.891334][ T5128] ref_tracker_alloc+0x158/0x560 [ 70.896330][ T5128] ? __lock_acquire+0xbc3/0x56d0 [ 70.901302][ T5128] ? ref_tracker_free+0x6b0/0x6b0 [ 70.906387][ T5128] dst_init+0xe4/0x520 [ 70.911014][ T5128] dst_alloc+0x16f/0x1f0 [ 70.915271][ T5128] rt_dst_alloc+0x55/0x430 [ 70.919699][ T5128] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 70.925700][ T5128] ip_route_output_key_hash+0x18f/0x340 [ 70.931262][ T5128] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 70.937540][ T5128] dccp_v4_connect+0x7e1/0x1730 [ 70.942434][ T5128] __inet_stream_connect+0x69e/0xed0 [ 70.947765][ T5128] ? inet_listen+0x640/0x640 [ 70.952408][ T5128] ? mark_held_locks+0x9f/0xe0 [ 70.957198][ T5128] ? __local_bh_enable_ip+0xa4/0x130 [ 70.962496][ T5128] inet_stream_connect+0x57/0xa0 [ 70.967445][ T5128] ? __inet_stream_connect+0xed0/0xed0 [ 70.972918][ T5128] __sys_connect_file+0x153/0x1a0 [ 70.978059][ T5128] io_connect+0x3cc/0x720 [ 70.982414][ T5128] ? io_connect_prep+0x250/0x250 [ 70.987368][ T5128] ? receive_fd+0x110/0x110 [ 70.991918][ T5128] ? rcu_read_lock_sched_held+0x3e/0x70 [ 70.997507][ T5128] ? io_connect_prep+0x250/0x250 [ 71.002459][ T5128] io_issue_sqe+0x695/0x1250 [ 71.007094][ T5128] io_submit_sqes+0x96c/0x1e90 [ 71.011894][ T5128] __do_sys_io_uring_enter+0x103d/0x24e0 [ 71.017548][ T5128] ? io_submit_sqes+0x1e90/0x1e90 [ 71.022607][ T5128] ? ptrace_notify+0xfe/0x140 [ 71.027311][ T5128] ? lock_downgrade+0x6e0/0x6e0 [ 71.032176][ T5128] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.037397][ T5128] ? lockdep_hardirqs_on+0x7d/0x100 [ 71.042612][ T5128] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.047837][ T5128] ? ptrace_notify+0xfe/0x140 [ 71.052569][ T5128] do_syscall_64+0x39/0xb0 [ 71.056998][ T5128] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.062898][ T5128] RIP: 0033:0x7f607b0de549 [ 71.067316][ T5128] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.086932][ T5128] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 71.095382][ T5128] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 71.103375][ T5128] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 71.111368][ T5128] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5128] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5128] close(3) = 0 [pid 5128] close(4) = 0 [pid 5128] close(5) = 0 [pid 5128] close(6) = 0 [pid 5128] close(7) = 0 [pid 5128] close(8) = -1 EBADF (Bad file descriptor) [pid 5128] close(9) = -1 EBADF (Bad file descriptor) [pid 5128] close(10) = -1 EBADF (Bad file descriptor) [pid 5128] close(11) = -1 EBADF (Bad file descriptor) [pid 5128] close(12) = -1 EBADF (Bad file descriptor) [pid 5128] close(13) = -1 EBADF (Bad file descriptor) [pid 5128] close(14) = -1 EBADF (Bad file descriptor) [pid 5128] close(15) = -1 EBADF (Bad file descriptor) [pid 5128] close(16) = -1 EBADF (Bad file descriptor) [pid 5128] close(17) = -1 EBADF (Bad file descriptor) [pid 5128] close(18) = -1 EBADF (Bad file descriptor) [pid 5128] close(19) = -1 EBADF (Bad file descriptor) [pid 5128] close(20) = -1 EBADF (Bad file descriptor) [pid 5128] close(21) = -1 EBADF (Bad file descriptor) [pid 5128] close(22) = -1 EBADF (Bad file descriptor) [pid 5128] close(23) = -1 EBADF (Bad file descriptor) [pid 5128] close(24) = -1 EBADF (Bad file descriptor) [pid 5128] close(25) = -1 EBADF (Bad file descriptor) [pid 5128] close(26) = -1 EBADF (Bad file descriptor) [pid 5128] close(27) = -1 EBADF (Bad file descriptor) [pid 5128] close(28) = -1 EBADF (Bad file descriptor) [pid 5128] close(29) = -1 EBADF (Bad file descriptor) [pid 5128] exit_group(0) = ? [pid 5128] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5129 attached , child_tidptr=0x555555eff5d0) = 44 [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5129] setpgid(0, 0) = 0 [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5129] write(3, "1000", 4) = 4 [pid 5129] close(3) = 0 [pid 5129] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 71.119342][ T5128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 71.127430][ T5128] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 71.135434][ T5128] [pid 5129] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5129] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5129] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5129] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5129] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5129] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5129] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5129] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5129] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5129] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5129] write(7, "5", 1) = 1 [ 71.196796][ T5129] FAULT_INJECTION: forcing a failure. [ 71.196796][ T5129] name failslab, interval 1, probability 0, space 0, times 0 [ 71.209558][ T5129] CPU: 0 PID: 5129 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 71.219454][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 71.229507][ T5129] Call Trace: [ 71.232786][ T5129] [ 71.235711][ T5129] dump_stack_lvl+0xd1/0x138 [ 71.240309][ T5129] should_fail_ex.cold+0x5/0xa [ 71.245120][ T5129] ? __inet_hash_connect+0x95e/0x1ba0 [ 71.250494][ T5129] should_failslab+0x9/0x20 [ 71.255001][ T5129] kmem_cache_alloc+0x5a/0x320 [ 71.259798][ T5129] __inet_hash_connect+0x95e/0x1ba0 [ 71.265027][ T5129] ? __inet_lookup_listener+0xbf0/0xbf0 [ 71.270617][ T5129] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 71.276998][ T5129] dccp_v4_connect+0xb82/0x1730 [ 71.281900][ T5129] __inet_stream_connect+0x69e/0xed0 [ 71.287238][ T5129] ? inet_listen+0x640/0x640 [ 71.291864][ T5129] ? mark_held_locks+0x9f/0xe0 [ 71.296654][ T5129] ? __local_bh_enable_ip+0xa4/0x130 [ 71.301970][ T5129] inet_stream_connect+0x57/0xa0 [ 71.306954][ T5129] ? __inet_stream_connect+0xed0/0xed0 [ 71.312473][ T5129] __sys_connect_file+0x153/0x1a0 [ 71.317542][ T5129] io_connect+0x3cc/0x720 [ 71.321918][ T5129] ? io_connect_prep+0x250/0x250 [ 71.326899][ T5129] ? receive_fd+0x110/0x110 [ 71.331603][ T5129] ? rcu_read_lock_sched_held+0x3e/0x70 [ 71.337210][ T5129] ? io_connect_prep+0x250/0x250 [ 71.342374][ T5129] io_issue_sqe+0x695/0x1250 [ 71.347001][ T5129] io_submit_sqes+0x96c/0x1e90 [ 71.351829][ T5129] __do_sys_io_uring_enter+0x103d/0x24e0 [ 71.357523][ T5129] ? io_submit_sqes+0x1e90/0x1e90 [ 71.362588][ T5129] ? ptrace_notify+0xfe/0x140 [ 71.367296][ T5129] ? lock_downgrade+0x6e0/0x6e0 [ 71.372202][ T5129] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.377457][ T5129] ? lockdep_hardirqs_on+0x7d/0x100 [ 71.382690][ T5129] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.387931][ T5129] ? ptrace_notify+0xfe/0x140 [ 71.392638][ T5129] do_syscall_64+0x39/0xb0 [ 71.397141][ T5129] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.403071][ T5129] RIP: 0033:0x7f607b0de549 [ 71.407516][ T5129] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.427537][ T5129] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 71.436044][ T5129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5129] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5129] close(3) = 0 [pid 5129] close(4) = 0 [pid 5129] close(5) = 0 [pid 5129] close(6) = 0 [pid 5129] close(7) = 0 [pid 5129] close(8) = -1 EBADF (Bad file descriptor) [pid 5129] close(9) = -1 EBADF (Bad file descriptor) [pid 5129] close(10) = -1 EBADF (Bad file descriptor) [pid 5129] close(11) = -1 EBADF (Bad file descriptor) [pid 5129] close(12) = -1 EBADF (Bad file descriptor) [pid 5129] close(13) = -1 EBADF (Bad file descriptor) [pid 5129] close(14) = -1 EBADF (Bad file descriptor) [pid 5129] close(15) = -1 EBADF (Bad file descriptor) [pid 5129] close(16) = -1 EBADF (Bad file descriptor) [pid 5129] close(17) = -1 EBADF (Bad file descriptor) [pid 5129] close(18) = -1 EBADF (Bad file descriptor) [pid 5129] close(19) = -1 EBADF (Bad file descriptor) [pid 5129] close(20) = -1 EBADF (Bad file descriptor) [pid 5129] close(21) = -1 EBADF (Bad file descriptor) [pid 5129] close(22) = -1 EBADF (Bad file descriptor) [pid 5129] close(23) = -1 EBADF (Bad file descriptor) [pid 5129] close(24) = -1 EBADF (Bad file descriptor) [pid 5129] close(25) = -1 EBADF (Bad file descriptor) [pid 5129] close(26) = -1 EBADF (Bad file descriptor) [pid 5129] close(27) = -1 EBADF (Bad file descriptor) [pid 5129] close(28) = -1 EBADF (Bad file descriptor) [pid 5129] close(29) = -1 EBADF (Bad file descriptor) [pid 5129] exit_group(0) = ? [pid 5129] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 45 ./strace-static-x86_64: Process 5130 attached [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] setpgid(0, 0) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5130] write(3, "1000", 4) = 4 [pid 5130] close(3) = 0 [pid 5130] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5130] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5130] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5130] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5130] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5130] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5130] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5130] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5130] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5130] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5130] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 71.444051][ T5129] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 71.452038][ T5129] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 71.460051][ T5129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 71.468046][ T5129] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 71.476056][ T5129] [pid 5130] write(7, "5", 1) = 1 [ 71.530112][ T5130] FAULT_INJECTION: forcing a failure. [ 71.530112][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 71.543170][ T5130] CPU: 1 PID: 5130 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 71.553118][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 71.563212][ T5130] Call Trace: [ 71.566509][ T5130] [ 71.569438][ T5130] dump_stack_lvl+0xd1/0x138 [ 71.574041][ T5130] should_fail_ex.cold+0x5/0xa [ 71.578818][ T5130] ? io_issue_sqe+0x695/0x1250 [ 71.583637][ T5130] should_failslab+0x9/0x20 [ 71.588152][ T5130] __kmem_cache_alloc_node+0x5b/0x330 [ 71.593568][ T5130] ? ref_tracker_alloc+0x158/0x560 [ 71.598724][ T5130] kmalloc_trace+0x26/0x60 [ 71.603164][ T5130] ref_tracker_alloc+0x158/0x560 [ 71.608128][ T5130] ? __lock_acquire+0xbc3/0x56d0 [ 71.613073][ T5130] ? ref_tracker_free+0x6b0/0x6b0 [ 71.618188][ T5130] dst_init+0xe4/0x520 [ 71.622269][ T5130] dst_alloc+0x16f/0x1f0 [ 71.626532][ T5130] rt_dst_alloc+0x55/0x430 [ 71.630956][ T5130] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 71.636956][ T5130] ip_route_output_key_hash+0x18f/0x340 [ 71.642513][ T5130] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 71.648775][ T5130] dccp_v4_connect+0x7e1/0x1730 [ 71.653651][ T5130] __inet_stream_connect+0x69e/0xed0 [ 71.659204][ T5130] ? inet_listen+0x640/0x640 [ 71.663924][ T5130] ? mark_held_locks+0x9f/0xe0 [ 71.668700][ T5130] ? __local_bh_enable_ip+0xa4/0x130 [ 71.673994][ T5130] inet_stream_connect+0x57/0xa0 [ 71.678957][ T5130] ? __inet_stream_connect+0xed0/0xed0 [ 71.684467][ T5130] __sys_connect_file+0x153/0x1a0 [ 71.689587][ T5130] io_connect+0x3cc/0x720 [ 71.693931][ T5130] ? io_connect_prep+0x250/0x250 [ 71.698881][ T5130] ? receive_fd+0x110/0x110 [ 71.703412][ T5130] ? rcu_read_lock_sched_held+0x3e/0x70 [ 71.708965][ T5130] ? io_connect_prep+0x250/0x250 [ 71.713919][ T5130] io_issue_sqe+0x695/0x1250 [ 71.718556][ T5130] io_submit_sqes+0x96c/0x1e90 [ 71.723397][ T5130] __do_sys_io_uring_enter+0x103d/0x24e0 [ 71.729275][ T5130] ? io_submit_sqes+0x1e90/0x1e90 [ 71.734328][ T5130] ? ptrace_notify+0xfe/0x140 [ 71.739025][ T5130] ? lock_downgrade+0x6e0/0x6e0 [ 71.743912][ T5130] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.749131][ T5130] ? lockdep_hardirqs_on+0x7d/0x100 [ 71.754358][ T5130] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.759566][ T5130] ? ptrace_notify+0xfe/0x140 [ 71.764257][ T5130] do_syscall_64+0x39/0xb0 [ 71.768797][ T5130] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.774695][ T5130] RIP: 0033:0x7f607b0de549 [ 71.779124][ T5130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.798763][ T5130] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 71.807186][ T5130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 71.815162][ T5130] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 71.823180][ T5130] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5130] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5130] close(3) = 0 [pid 5130] close(4) = 0 [pid 5130] close(5) = 0 [pid 5130] close(6) = 0 [pid 5130] close(7) = 0 [pid 5130] close(8) = -1 EBADF (Bad file descriptor) [pid 5130] close(9) = -1 EBADF (Bad file descriptor) [pid 5130] close(10) = -1 EBADF (Bad file descriptor) [pid 5130] close(11) = -1 EBADF (Bad file descriptor) [pid 5130] close(12) = -1 EBADF (Bad file descriptor) [pid 5130] close(13) = -1 EBADF (Bad file descriptor) [pid 5130] close(14) = -1 EBADF (Bad file descriptor) [pid 5130] close(15) = -1 EBADF (Bad file descriptor) [pid 5130] close(16) = -1 EBADF (Bad file descriptor) [pid 5130] close(17) = -1 EBADF (Bad file descriptor) [pid 5130] close(18) = -1 EBADF (Bad file descriptor) [pid 5130] close(19) = -1 EBADF (Bad file descriptor) [pid 5130] close(20) = -1 EBADF (Bad file descriptor) [pid 5130] close(21) = -1 EBADF (Bad file descriptor) [pid 5130] close(22) = -1 EBADF (Bad file descriptor) [pid 5130] close(23) = -1 EBADF (Bad file descriptor) [pid 5130] close(24) = -1 EBADF (Bad file descriptor) [pid 5130] close(25) = -1 EBADF (Bad file descriptor) [pid 5130] close(26) = -1 EBADF (Bad file descriptor) [pid 5130] close(27) = -1 EBADF (Bad file descriptor) [pid 5130] close(28) = -1 EBADF (Bad file descriptor) [pid 5130] close(29) = -1 EBADF (Bad file descriptor) [pid 5130] exit_group(0) = ? [pid 5130] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 46 ./strace-static-x86_64: Process 5131 attached [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4) = 4 [pid 5131] close(3) = 0 [pid 5131] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5131] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5131] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5131] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5131] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5131] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5131] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5131] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5131] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5131] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5131] write(7, "5", 1) = 1 [ 71.831173][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 71.839163][ T5130] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 71.847193][ T5130] [ 71.885286][ T5131] FAULT_INJECTION: forcing a failure. [ 71.885286][ T5131] name failslab, interval 1, probability 0, space 0, times 0 [ 71.898353][ T5131] CPU: 0 PID: 5131 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 71.908259][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 71.918347][ T5131] Call Trace: [ 71.921629][ T5131] [ 71.924574][ T5131] dump_stack_lvl+0xd1/0x138 [ 71.929209][ T5131] should_fail_ex.cold+0x5/0xa [ 71.933973][ T5131] ? io_issue_sqe+0x695/0x1250 [ 71.938744][ T5131] should_failslab+0x9/0x20 [ 71.943290][ T5131] __kmem_cache_alloc_node+0x5b/0x330 [ 71.948707][ T5131] ? ref_tracker_alloc+0x158/0x560 [ 71.953834][ T5131] kmalloc_trace+0x26/0x60 [ 71.958260][ T5131] ref_tracker_alloc+0x158/0x560 [ 71.963202][ T5131] ? __lock_acquire+0xbc3/0x56d0 [ 71.968138][ T5131] ? ref_tracker_free+0x6b0/0x6b0 [ 71.973214][ T5131] dst_init+0xe4/0x520 [ 71.977317][ T5131] dst_alloc+0x16f/0x1f0 [ 71.981567][ T5131] rt_dst_alloc+0x55/0x430 [ 71.985991][ T5131] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 71.992041][ T5131] ip_route_output_key_hash+0x18f/0x340 [ 71.997638][ T5131] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 72.003932][ T5131] dccp_v4_connect+0x7e1/0x1730 [ 72.008805][ T5131] __inet_stream_connect+0x69e/0xed0 [ 72.014122][ T5131] ? inet_listen+0x640/0x640 [ 72.018722][ T5131] ? mark_held_locks+0x9f/0xe0 [ 72.023501][ T5131] ? __local_bh_enable_ip+0xa4/0x130 [ 72.028820][ T5131] inet_stream_connect+0x57/0xa0 [ 72.033800][ T5131] ? __inet_stream_connect+0xed0/0xed0 [ 72.039282][ T5131] __sys_connect_file+0x153/0x1a0 [ 72.044312][ T5131] io_connect+0x3cc/0x720 [ 72.048650][ T5131] ? io_connect_prep+0x250/0x250 [ 72.053596][ T5131] ? receive_fd+0x110/0x110 [ 72.058110][ T5131] ? rcu_read_lock_sched_held+0x3e/0x70 [ 72.063661][ T5131] ? io_connect_prep+0x250/0x250 [ 72.068605][ T5131] io_issue_sqe+0x695/0x1250 [ 72.073221][ T5131] io_submit_sqes+0x96c/0x1e90 [ 72.078029][ T5131] __do_sys_io_uring_enter+0x103d/0x24e0 [ 72.083673][ T5131] ? io_submit_sqes+0x1e90/0x1e90 [ 72.089583][ T5131] ? ptrace_notify+0xfe/0x140 [ 72.094346][ T5131] ? lock_downgrade+0x6e0/0x6e0 [ 72.099206][ T5131] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.104423][ T5131] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.109650][ T5131] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.114856][ T5131] ? ptrace_notify+0xfe/0x140 [ 72.119550][ T5131] do_syscall_64+0x39/0xb0 [ 72.123975][ T5131] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.129889][ T5131] RIP: 0033:0x7f607b0de549 [ 72.134338][ T5131] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.153973][ T5131] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 72.162388][ T5131] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 72.170372][ T5131] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 72.178445][ T5131] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5131] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5131] close(3) = 0 [pid 5131] close(4) = 0 [pid 5131] close(5) = 0 [pid 5131] close(6) = 0 [pid 5131] close(7) = 0 [pid 5131] close(8) = -1 EBADF (Bad file descriptor) [pid 5131] close(9) = -1 EBADF (Bad file descriptor) [pid 5131] close(10) = -1 EBADF (Bad file descriptor) [pid 5131] close(11) = -1 EBADF (Bad file descriptor) [pid 5131] close(12) = -1 EBADF (Bad file descriptor) [pid 5131] close(13) = -1 EBADF (Bad file descriptor) [pid 5131] close(14) = -1 EBADF (Bad file descriptor) [pid 5131] close(15) = -1 EBADF (Bad file descriptor) [pid 5131] close(16) = -1 EBADF (Bad file descriptor) [pid 5131] close(17) = -1 EBADF (Bad file descriptor) [pid 5131] close(18) = -1 EBADF (Bad file descriptor) [pid 5131] close(19) = -1 EBADF (Bad file descriptor) [pid 5131] close(20) = -1 EBADF (Bad file descriptor) [pid 5131] close(21) = -1 EBADF (Bad file descriptor) [pid 5131] close(22) = -1 EBADF (Bad file descriptor) [pid 5131] close(23) = -1 EBADF (Bad file descriptor) [pid 5131] close(24) = -1 EBADF (Bad file descriptor) [pid 5131] close(25) = -1 EBADF (Bad file descriptor) [pid 5131] close(26) = -1 EBADF (Bad file descriptor) [pid 5131] close(27) = -1 EBADF (Bad file descriptor) [pid 5131] close(28) = -1 EBADF (Bad file descriptor) [pid 5131] close(29) = -1 EBADF (Bad file descriptor) [pid 5131] exit_group(0) = ? [pid 5131] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 47 ./strace-static-x86_64: Process 5132 attached [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5132] setpgid(0, 0) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 72.186499][ T5131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 72.194487][ T5131] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 72.202524][ T5131] [pid 5132] write(3, "1000", 4) = 4 [pid 5132] close(3) = 0 [pid 5132] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5132] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5132] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5132] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5132] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5132] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5132] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5132] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5132] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5132] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5132] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5132] write(7, "5", 1) = 1 [ 72.262515][ T5132] FAULT_INJECTION: forcing a failure. [ 72.262515][ T5132] name failslab, interval 1, probability 0, space 0, times 0 [ 72.275240][ T5132] CPU: 1 PID: 5132 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 72.285157][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 72.295221][ T5132] Call Trace: [ 72.298512][ T5132] [ 72.301895][ T5132] dump_stack_lvl+0xd1/0x138 [ 72.306494][ T5132] should_fail_ex.cold+0x5/0xa [ 72.311278][ T5132] ? __inet_hash_connect+0x95e/0x1ba0 [ 72.316684][ T5132] should_failslab+0x9/0x20 [ 72.321199][ T5132] kmem_cache_alloc+0x5a/0x320 [ 72.325996][ T5132] __inet_hash_connect+0x95e/0x1ba0 [ 72.331218][ T5132] ? __inet_lookup_listener+0xbf0/0xbf0 [ 72.336799][ T5132] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 72.343181][ T5132] dccp_v4_connect+0xb82/0x1730 [ 72.348055][ T5132] __inet_stream_connect+0x69e/0xed0 [ 72.353354][ T5132] ? inet_listen+0x640/0x640 [ 72.357954][ T5132] ? mark_held_locks+0x9f/0xe0 [ 72.362736][ T5132] ? __local_bh_enable_ip+0xa4/0x130 [ 72.368052][ T5132] inet_stream_connect+0x57/0xa0 [ 72.373001][ T5132] ? __inet_stream_connect+0xed0/0xed0 [ 72.378484][ T5132] __sys_connect_file+0x153/0x1a0 [ 72.383543][ T5132] io_connect+0x3cc/0x720 [ 72.387883][ T5132] ? io_connect_prep+0x250/0x250 [ 72.392842][ T5132] ? receive_fd+0x110/0x110 [ 72.397358][ T5132] ? rcu_read_lock_sched_held+0x3e/0x70 [ 72.402910][ T5132] ? io_connect_prep+0x250/0x250 [ 72.407874][ T5132] io_issue_sqe+0x695/0x1250 [ 72.412483][ T5132] io_submit_sqes+0x96c/0x1e90 [ 72.417284][ T5132] __do_sys_io_uring_enter+0x103d/0x24e0 [ 72.422960][ T5132] ? io_submit_sqes+0x1e90/0x1e90 [ 72.428022][ T5132] ? ptrace_notify+0xfe/0x140 [ 72.432725][ T5132] ? lock_downgrade+0x6e0/0x6e0 [ 72.437617][ T5132] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.442844][ T5132] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.448072][ T5132] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.453278][ T5132] ? ptrace_notify+0xfe/0x140 [ 72.457959][ T5132] do_syscall_64+0x39/0xb0 [ 72.462384][ T5132] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.468286][ T5132] RIP: 0033:0x7f607b0de549 [ 72.472715][ T5132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.492437][ T5132] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 72.500854][ T5132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5132] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5132] close(3) = 0 [pid 5132] close(4) = 0 [pid 5132] close(5) = 0 [pid 5132] close(6) = 0 [pid 5132] close(7) = 0 [pid 5132] close(8) = -1 EBADF (Bad file descriptor) [pid 5132] close(9) = -1 EBADF (Bad file descriptor) [pid 5132] close(10) = -1 EBADF (Bad file descriptor) [pid 5132] close(11) = -1 EBADF (Bad file descriptor) [pid 5132] close(12) = -1 EBADF (Bad file descriptor) [pid 5132] close(13) = -1 EBADF (Bad file descriptor) [pid 5132] close(14) = -1 EBADF (Bad file descriptor) [pid 5132] close(15) = -1 EBADF (Bad file descriptor) [pid 5132] close(16) = -1 EBADF (Bad file descriptor) [pid 5132] close(17) = -1 EBADF (Bad file descriptor) [pid 5132] close(18) = -1 EBADF (Bad file descriptor) [pid 5132] close(19) = -1 EBADF (Bad file descriptor) [pid 5132] close(20) = -1 EBADF (Bad file descriptor) [pid 5132] close(21) = -1 EBADF (Bad file descriptor) [pid 5132] close(22) = -1 EBADF (Bad file descriptor) [pid 5132] close(23) = -1 EBADF (Bad file descriptor) [pid 5132] close(24) = -1 EBADF (Bad file descriptor) [pid 5132] close(25) = -1 EBADF (Bad file descriptor) [pid 5132] close(26) = -1 EBADF (Bad file descriptor) [pid 5132] close(27) = -1 EBADF (Bad file descriptor) [pid 5132] close(28) = -1 EBADF (Bad file descriptor) [pid 5132] close(29) = -1 EBADF (Bad file descriptor) [pid 5132] exit_group(0) = ? [pid 5132] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5133 attached , child_tidptr=0x555555eff5d0) = 48 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5133] setpgid(0, 0) = 0 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5133] write(3, "1000", 4) = 4 [pid 5133] close(3) = 0 [pid 5133] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5133] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5133] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5133] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5133] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5133] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5133] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5133] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5133] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5133] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5133] write(7, "5", 1) = 1 [ 72.508827][ T5132] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 72.516813][ T5132] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 72.524803][ T5132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 72.532804][ T5132] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 72.540818][ T5132] [ 72.579878][ T5133] FAULT_INJECTION: forcing a failure. [ 72.579878][ T5133] name failslab, interval 1, probability 0, space 0, times 0 [ 72.593105][ T5133] CPU: 0 PID: 5133 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 72.603167][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 72.613217][ T5133] Call Trace: [ 72.616489][ T5133] [ 72.619476][ T5133] dump_stack_lvl+0xd1/0x138 [ 72.624069][ T5133] should_fail_ex.cold+0x5/0xa [ 72.628828][ T5133] ? io_issue_sqe+0x695/0x1250 [ 72.633593][ T5133] should_failslab+0x9/0x20 [ 72.638100][ T5133] __kmem_cache_alloc_node+0x5b/0x330 [ 72.643473][ T5133] ? ref_tracker_alloc+0x158/0x560 [ 72.648588][ T5133] kmalloc_trace+0x26/0x60 [ 72.653033][ T5133] ref_tracker_alloc+0x158/0x560 [ 72.658029][ T5133] ? __lock_acquire+0xbc3/0x56d0 [ 72.663017][ T5133] ? ref_tracker_free+0x6b0/0x6b0 [ 72.668125][ T5133] dst_init+0xe4/0x520 [ 72.672235][ T5133] dst_alloc+0x16f/0x1f0 [ 72.676505][ T5133] rt_dst_alloc+0x55/0x430 [ 72.681253][ T5133] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 72.687452][ T5133] ip_route_output_key_hash+0x18f/0x340 [ 72.693028][ T5133] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 72.699326][ T5133] dccp_v4_connect+0x7e1/0x1730 [ 72.704231][ T5133] __inet_stream_connect+0x69e/0xed0 [ 72.709559][ T5133] ? inet_listen+0x640/0x640 [ 72.714181][ T5133] ? mark_held_locks+0x9f/0xe0 [ 72.719142][ T5133] ? __local_bh_enable_ip+0xa4/0x130 [ 72.724473][ T5133] inet_stream_connect+0x57/0xa0 [ 72.729442][ T5133] ? __inet_stream_connect+0xed0/0xed0 [ 72.734930][ T5133] __sys_connect_file+0x153/0x1a0 [ 72.740173][ T5133] io_connect+0x3cc/0x720 [ 72.744534][ T5133] ? io_connect_prep+0x250/0x250 [ 72.749508][ T5133] ? receive_fd+0x110/0x110 [ 72.754050][ T5133] ? rcu_read_lock_sched_held+0x3e/0x70 [ 72.759618][ T5133] ? io_connect_prep+0x250/0x250 [ 72.764589][ T5133] io_issue_sqe+0x695/0x1250 [ 72.769217][ T5133] io_submit_sqes+0x96c/0x1e90 [ 72.774035][ T5133] __do_sys_io_uring_enter+0x103d/0x24e0 [ 72.779879][ T5133] ? io_submit_sqes+0x1e90/0x1e90 [ 72.784939][ T5133] ? ptrace_notify+0xfe/0x140 [ 72.789645][ T5133] ? lock_downgrade+0x6e0/0x6e0 [ 72.794531][ T5133] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.799758][ T5133] ? lockdep_hardirqs_on+0x7d/0x100 [ 72.804981][ T5133] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.810206][ T5133] ? ptrace_notify+0xfe/0x140 [ 72.814912][ T5133] do_syscall_64+0x39/0xb0 [ 72.819360][ T5133] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.825285][ T5133] RIP: 0033:0x7f607b0de549 [ 72.829722][ T5133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.849354][ T5133] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 72.857794][ T5133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 72.865873][ T5133] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5133] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5133] close(3) = 0 [pid 5133] close(4) = 0 [pid 5133] close(5) = 0 [pid 5133] close(6) = 0 [pid 5133] close(7) = 0 [pid 5133] close(8) = -1 EBADF (Bad file descriptor) [pid 5133] close(9) = -1 EBADF (Bad file descriptor) [pid 5133] close(10) = -1 EBADF (Bad file descriptor) [pid 5133] close(11) = -1 EBADF (Bad file descriptor) [pid 5133] close(12) = -1 EBADF (Bad file descriptor) [pid 5133] close(13) = -1 EBADF (Bad file descriptor) [pid 5133] close(14) = -1 EBADF (Bad file descriptor) [pid 5133] close(15) = -1 EBADF (Bad file descriptor) [pid 5133] close(16) = -1 EBADF (Bad file descriptor) [pid 5133] close(17) = -1 EBADF (Bad file descriptor) [pid 5133] close(18) = -1 EBADF (Bad file descriptor) [pid 5133] close(19) = -1 EBADF (Bad file descriptor) [pid 5133] close(20) = -1 EBADF (Bad file descriptor) [pid 5133] close(21) = -1 EBADF (Bad file descriptor) [pid 5133] close(22) = -1 EBADF (Bad file descriptor) [pid 5133] close(23) = -1 EBADF (Bad file descriptor) [pid 5133] close(24) = -1 EBADF (Bad file descriptor) [pid 5133] close(25) = -1 EBADF (Bad file descriptor) [pid 5133] close(26) = -1 EBADF (Bad file descriptor) [pid 5133] close(27) = -1 EBADF (Bad file descriptor) [pid 5133] close(28) = -1 EBADF (Bad file descriptor) [pid 5133] close(29) = -1 EBADF (Bad file descriptor) [pid 5133] exit_group(0) = ? [pid 5133] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5134 attached [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... clone resumed>, child_tidptr=0x555555eff5d0) = 49 [pid 5134] <... prctl resumed>) = 0 [pid 5134] setpgid(0, 0) = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5134] write(3, "1000", 4) = 4 [pid 5134] close(3) = 0 [pid 5134] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5134] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5134] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5134] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5134] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5134] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5134] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5134] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5134] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5134] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5134] write(7, "5", 1) = 1 [ 72.873857][ T5133] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 72.881852][ T5133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 72.889838][ T5133] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 72.897854][ T5133] [ 72.938249][ T5134] FAULT_INJECTION: forcing a failure. [ 72.938249][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 72.950945][ T5134] CPU: 0 PID: 5134 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 72.960857][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 72.970961][ T5134] Call Trace: [ 72.974241][ T5134] [ 72.977170][ T5134] dump_stack_lvl+0xd1/0x138 [ 72.981794][ T5134] should_fail_ex.cold+0x5/0xa [ 72.986587][ T5134] ? __inet_hash_connect+0x95e/0x1ba0 [ 72.991991][ T5134] should_failslab+0x9/0x20 [ 72.996547][ T5134] kmem_cache_alloc+0x5a/0x320 [ 73.001326][ T5134] __inet_hash_connect+0x95e/0x1ba0 [ 73.006565][ T5134] ? __inet_lookup_listener+0xbf0/0xbf0 [ 73.012137][ T5134] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 73.018530][ T5134] dccp_v4_connect+0xb82/0x1730 [ 73.023432][ T5134] __inet_stream_connect+0x69e/0xed0 [ 73.028755][ T5134] ? inet_listen+0x640/0x640 [ 73.033383][ T5134] ? mark_held_locks+0x9f/0xe0 [ 73.038168][ T5134] ? __local_bh_enable_ip+0xa4/0x130 [ 73.043481][ T5134] inet_stream_connect+0x57/0xa0 [ 73.048537][ T5134] ? __inet_stream_connect+0xed0/0xed0 [ 73.054027][ T5134] __sys_connect_file+0x153/0x1a0 [ 73.059076][ T5134] io_connect+0x3cc/0x720 [ 73.063444][ T5134] ? io_connect_prep+0x250/0x250 [ 73.068409][ T5134] ? receive_fd+0x110/0x110 [ 73.072961][ T5134] ? rcu_read_lock_sched_held+0x3e/0x70 [ 73.078555][ T5134] ? io_connect_prep+0x250/0x250 [ 73.083527][ T5134] io_issue_sqe+0x695/0x1250 [ 73.088151][ T5134] io_submit_sqes+0x96c/0x1e90 [ 73.092960][ T5134] __do_sys_io_uring_enter+0x103d/0x24e0 [ 73.098631][ T5134] ? io_submit_sqes+0x1e90/0x1e90 [ 73.103690][ T5134] ? ptrace_notify+0xfe/0x140 [ 73.108391][ T5134] ? lock_downgrade+0x6e0/0x6e0 [ 73.113272][ T5134] ? _raw_spin_unlock_irq+0x23/0x50 [ 73.118502][ T5134] ? lockdep_hardirqs_on+0x7d/0x100 [ 73.123743][ T5134] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.128966][ T5134] ? ptrace_notify+0xfe/0x140 [ 73.133667][ T5134] do_syscall_64+0x39/0xb0 [ 73.138112][ T5134] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.144029][ T5134] RIP: 0033:0x7f607b0de549 [ 73.148463][ T5134] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.168092][ T5134] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 73.176545][ T5134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5134] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5134] close(3) = 0 [pid 5134] close(4) = 0 [pid 5134] close(5) = 0 [pid 5134] close(6) = 0 [pid 5134] close(7) = 0 [pid 5134] close(8) = -1 EBADF (Bad file descriptor) [pid 5134] close(9) = -1 EBADF (Bad file descriptor) [pid 5134] close(10) = -1 EBADF (Bad file descriptor) [pid 5134] close(11) = -1 EBADF (Bad file descriptor) [pid 5134] close(12) = -1 EBADF (Bad file descriptor) [pid 5134] close(13) = -1 EBADF (Bad file descriptor) [pid 5134] close(14) = -1 EBADF (Bad file descriptor) [pid 5134] close(15) = -1 EBADF (Bad file descriptor) [pid 5134] close(16) = -1 EBADF (Bad file descriptor) [pid 5134] close(17) = -1 EBADF (Bad file descriptor) [pid 5134] close(18) = -1 EBADF (Bad file descriptor) [pid 5134] close(19) = -1 EBADF (Bad file descriptor) [pid 5134] close(20) = -1 EBADF (Bad file descriptor) [pid 5134] close(21) = -1 EBADF (Bad file descriptor) [pid 5134] close(22) = -1 EBADF (Bad file descriptor) [pid 5134] close(23) = -1 EBADF (Bad file descriptor) [pid 5134] close(24) = -1 EBADF (Bad file descriptor) [pid 5134] close(25) = -1 EBADF (Bad file descriptor) [pid 5134] close(26) = -1 EBADF (Bad file descriptor) [pid 5134] close(27) = -1 EBADF (Bad file descriptor) [pid 5134] close(28) = -1 EBADF (Bad file descriptor) [pid 5134] close(29) = -1 EBADF (Bad file descriptor) [pid 5134] exit_group(0) = ? [pid 5134] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5135 attached , child_tidptr=0x555555eff5d0) = 50 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5135] setpgid(0, 0) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5135] write(3, "1000", 4) = 4 [pid 5135] close(3) = 0 [pid 5135] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5135] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5135] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5135] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5135] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5135] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5135] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5135] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5135] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5135] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5135] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 73.184534][ T5134] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 73.192519][ T5134] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 73.200505][ T5134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 73.208491][ T5134] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 73.216682][ T5134] [pid 5135] write(7, "5", 1) = 1 [ 73.262965][ T5135] FAULT_INJECTION: forcing a failure. [ 73.262965][ T5135] name failslab, interval 1, probability 0, space 0, times 0 [ 73.276031][ T5135] CPU: 0 PID: 5135 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 73.285970][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 73.296025][ T5135] Call Trace: [ 73.299303][ T5135] [ 73.302232][ T5135] dump_stack_lvl+0xd1/0x138 [ 73.306844][ T5135] should_fail_ex.cold+0x5/0xa [ 73.311658][ T5135] ? io_issue_sqe+0x695/0x1250 [ 73.316467][ T5135] should_failslab+0x9/0x20 [ 73.321002][ T5135] __kmem_cache_alloc_node+0x5b/0x330 [ 73.326406][ T5135] ? ref_tracker_alloc+0x158/0x560 [ 73.331549][ T5135] kmalloc_trace+0x26/0x60 [ 73.336026][ T5135] ref_tracker_alloc+0x158/0x560 [ 73.340978][ T5135] ? __lock_acquire+0xbc3/0x56d0 [ 73.345938][ T5135] ? ref_tracker_free+0x6b0/0x6b0 [ 73.351012][ T5135] dst_init+0xe4/0x520 [ 73.355093][ T5135] dst_alloc+0x16f/0x1f0 [ 73.359361][ T5135] rt_dst_alloc+0x55/0x430 [ 73.363789][ T5135] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 73.369813][ T5135] ip_route_output_key_hash+0x18f/0x340 [ 73.375412][ T5135] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 73.381709][ T5135] dccp_v4_connect+0x7e1/0x1730 [ 73.386615][ T5135] __inet_stream_connect+0x69e/0xed0 [ 73.391965][ T5135] ? inet_listen+0x640/0x640 [ 73.396605][ T5135] ? mark_held_locks+0x9f/0xe0 [ 73.401397][ T5135] ? __local_bh_enable_ip+0xa4/0x130 [ 73.406720][ T5135] inet_stream_connect+0x57/0xa0 [ 73.411694][ T5135] ? __inet_stream_connect+0xed0/0xed0 [ 73.417971][ T5135] __sys_connect_file+0x153/0x1a0 [ 73.423027][ T5135] io_connect+0x3cc/0x720 [ 73.427392][ T5135] ? io_connect_prep+0x250/0x250 [ 73.432479][ T5135] ? receive_fd+0x110/0x110 [ 73.437045][ T5135] ? rcu_read_lock_sched_held+0x3e/0x70 [ 73.442627][ T5135] ? io_connect_prep+0x250/0x250 [ 73.447636][ T5135] io_issue_sqe+0x695/0x1250 [ 73.452284][ T5135] io_submit_sqes+0x96c/0x1e90 [ 73.457104][ T5135] __do_sys_io_uring_enter+0x103d/0x24e0 [ 73.462805][ T5135] ? io_submit_sqes+0x1e90/0x1e90 [ 73.467878][ T5135] ? ptrace_notify+0xfe/0x140 [ 73.472578][ T5135] ? lock_downgrade+0x6e0/0x6e0 [ 73.477459][ T5135] ? _raw_spin_unlock_irq+0x23/0x50 [ 73.482702][ T5135] ? lockdep_hardirqs_on+0x7d/0x100 [ 73.487930][ T5135] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.493161][ T5135] ? ptrace_notify+0xfe/0x140 [ 73.497869][ T5135] do_syscall_64+0x39/0xb0 [ 73.502322][ T5135] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.508503][ T5135] RIP: 0033:0x7f607b0de549 [ 73.512937][ T5135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.532662][ T5135] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 73.541099][ T5135] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 73.549177][ T5135] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 73.557167][ T5135] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5135] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5135] close(3) = 0 [pid 5135] close(4) = 0 [pid 5135] close(5) = 0 [pid 5135] close(6) = 0 [pid 5135] close(7) = 0 [pid 5135] close(8) = -1 EBADF (Bad file descriptor) [pid 5135] close(9) = -1 EBADF (Bad file descriptor) [pid 5135] close(10) = -1 EBADF (Bad file descriptor) [pid 5135] close(11) = -1 EBADF (Bad file descriptor) [pid 5135] close(12) = -1 EBADF (Bad file descriptor) [pid 5135] close(13) = -1 EBADF (Bad file descriptor) [pid 5135] close(14) = -1 EBADF (Bad file descriptor) [pid 5135] close(15) = -1 EBADF (Bad file descriptor) [pid 5135] close(16) = -1 EBADF (Bad file descriptor) [pid 5135] close(17) = -1 EBADF (Bad file descriptor) [pid 5135] close(18) = -1 EBADF (Bad file descriptor) [pid 5135] close(19) = -1 EBADF (Bad file descriptor) [pid 5135] close(20) = -1 EBADF (Bad file descriptor) [pid 5135] close(21) = -1 EBADF (Bad file descriptor) [pid 5135] close(22) = -1 EBADF (Bad file descriptor) [pid 5135] close(23) = -1 EBADF (Bad file descriptor) [pid 5135] close(24) = -1 EBADF (Bad file descriptor) [pid 5135] close(25) = -1 EBADF (Bad file descriptor) [pid 5135] close(26) = -1 EBADF (Bad file descriptor) [pid 5135] close(27) = -1 EBADF (Bad file descriptor) [pid 5135] close(28) = -1 EBADF (Bad file descriptor) [pid 5135] close(29) = -1 EBADF (Bad file descriptor) [pid 5135] exit_group(0) = ? [pid 5135] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 51 ./strace-static-x86_64: Process 5136 attached [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3) = 0 [pid 5136] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5136] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5136] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5136] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5136] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5136] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5136] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5136] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5136] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5136] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5136] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5136] write(7, "5", 1) = 1 [ 73.565154][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 73.573141][ T5135] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 73.581268][ T5135] [ 73.624720][ T5136] FAULT_INJECTION: forcing a failure. [ 73.624720][ T5136] name failslab, interval 1, probability 0, space 0, times 0 [ 73.637553][ T5136] CPU: 1 PID: 5136 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 73.647502][ T5136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 73.657566][ T5136] Call Trace: [ 73.660871][ T5136] [ 73.663828][ T5136] dump_stack_lvl+0xd1/0x138 [ 73.668455][ T5136] should_fail_ex.cold+0x5/0xa [ 73.673244][ T5136] should_failslab+0x9/0x20 [ 73.677793][ T5136] __kmem_cache_alloc_node+0x5b/0x330 [ 73.683193][ T5136] ? ref_tracker_alloc+0x158/0x560 [ 73.688591][ T5136] kmalloc_trace+0x26/0x60 [ 73.693031][ T5136] ref_tracker_alloc+0x158/0x560 [ 73.697978][ T5136] ? ref_tracker_free+0x6b0/0x6b0 [ 73.703026][ T5136] ? mark_held_locks+0x9f/0xe0 [ 73.707815][ T5136] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 73.713456][ T5136] ? lockdep_hardirqs_on+0x7d/0x100 [ 73.718757][ T5136] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 73.724430][ T5136] dst_init+0xe4/0x520 [ 73.728605][ T5136] dst_alloc+0x16f/0x1f0 [ 73.732858][ T5136] rt_dst_alloc+0x55/0x430 [ 73.737278][ T5136] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 73.743277][ T5136] ip_route_output_key_hash+0x18f/0x340 [ 73.748835][ T5136] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 73.755097][ T5136] dccp_v4_connect+0x7e1/0x1730 [ 73.759973][ T5136] __inet_stream_connect+0x69e/0xed0 [ 73.765281][ T5136] ? inet_listen+0x640/0x640 [ 73.769882][ T5136] ? mark_held_locks+0x9f/0xe0 [ 73.774662][ T5136] ? __local_bh_enable_ip+0xa4/0x130 [ 73.779982][ T5136] inet_stream_connect+0x57/0xa0 [ 73.785027][ T5136] ? __inet_stream_connect+0xed0/0xed0 [ 73.790529][ T5136] __sys_connect_file+0x153/0x1a0 [ 73.795684][ T5136] io_connect+0x3cc/0x720 [ 73.800650][ T5136] ? io_connect_prep+0x250/0x250 [ 73.805636][ T5136] ? receive_fd+0x110/0x110 [ 73.810203][ T5136] ? rcu_read_lock_sched_held+0x3e/0x70 [ 73.815799][ T5136] ? io_connect_prep+0x250/0x250 [ 73.820783][ T5136] io_issue_sqe+0x695/0x1250 [ 73.825386][ T5136] io_submit_sqes+0x96c/0x1e90 [ 73.830207][ T5136] __do_sys_io_uring_enter+0x103d/0x24e0 [ 73.835885][ T5136] ? io_submit_sqes+0x1e90/0x1e90 [ 73.840947][ T5136] ? ptrace_notify+0xfe/0x140 [ 73.845661][ T5136] ? lock_downgrade+0x6e0/0x6e0 [ 73.850715][ T5136] ? _raw_spin_unlock_irq+0x23/0x50 [ 73.855951][ T5136] ? lockdep_hardirqs_on+0x7d/0x100 [ 73.861187][ T5136] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.866411][ T5136] ? ptrace_notify+0xfe/0x140 [ 73.871148][ T5136] do_syscall_64+0x39/0xb0 [ 73.875611][ T5136] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 73.881509][ T5136] RIP: 0033:0x7f607b0de549 [ 73.885924][ T5136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 73.905561][ T5136] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 73.914000][ T5136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5136] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5136] close(3) = 0 [pid 5136] close(4) = 0 [pid 5136] close(5) = 0 [pid 5136] close(6) = 0 [pid 5136] close(7) = 0 [pid 5136] close(8) = -1 EBADF (Bad file descriptor) [pid 5136] close(9) = -1 EBADF (Bad file descriptor) [pid 5136] close(10) = -1 EBADF (Bad file descriptor) [pid 5136] close(11) = -1 EBADF (Bad file descriptor) [pid 5136] close(12) = -1 EBADF (Bad file descriptor) [pid 5136] close(13) = -1 EBADF (Bad file descriptor) [pid 5136] close(14) = -1 EBADF (Bad file descriptor) [pid 5136] close(15) = -1 EBADF (Bad file descriptor) [pid 5136] close(16) = -1 EBADF (Bad file descriptor) [pid 5136] close(17) = -1 EBADF (Bad file descriptor) [pid 5136] close(18) = -1 EBADF (Bad file descriptor) [pid 5136] close(19) = -1 EBADF (Bad file descriptor) [pid 5136] close(20) = -1 EBADF (Bad file descriptor) [pid 5136] close(21) = -1 EBADF (Bad file descriptor) [pid 5136] close(22) = -1 EBADF (Bad file descriptor) [pid 5136] close(23) = -1 EBADF (Bad file descriptor) [pid 5136] close(24) = -1 EBADF (Bad file descriptor) [pid 5136] close(25) = -1 EBADF (Bad file descriptor) [pid 5136] close(26) = -1 EBADF (Bad file descriptor) [pid 5136] close(27) = -1 EBADF (Bad file descriptor) [pid 5136] close(28) = -1 EBADF (Bad file descriptor) [pid 5136] close(29) = -1 EBADF (Bad file descriptor) [pid 5136] exit_group(0) = ? [pid 5136] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 52 ./strace-static-x86_64: Process 5137 attached [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5137] setpgid(0, 0) = 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5137] write(3, "1000", 4) = 4 [pid 5137] close(3) = 0 [pid 5137] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5137] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5137] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5137] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5137] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5137] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5137] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5137] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5137] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5137] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5137] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5137] write(7, "5", 1) = 1 [pid 5137] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5137] close(3) = 0 [pid 5137] close(4) = 0 [pid 5137] close(5) = 0 [pid 5137] close(6) = 0 [pid 5137] close(7) = 0 [pid 5137] close(8) = -1 EBADF (Bad file descriptor) [pid 5137] close(9) = -1 EBADF (Bad file descriptor) [pid 5137] close(10) = -1 EBADF (Bad file descriptor) [pid 5137] close(11) = -1 EBADF (Bad file descriptor) [pid 5137] close(12) = -1 EBADF (Bad file descriptor) [pid 5137] close(13) = -1 EBADF (Bad file descriptor) [pid 5137] close(14) = -1 EBADF (Bad file descriptor) [pid 5137] close(15) = -1 EBADF (Bad file descriptor) [pid 5137] close(16) = -1 EBADF (Bad file descriptor) [pid 5137] close(17) = -1 EBADF (Bad file descriptor) [pid 5137] close(18) = -1 EBADF (Bad file descriptor) [pid 5137] close(19) = -1 EBADF (Bad file descriptor) [pid 5137] close(20) = -1 EBADF (Bad file descriptor) [pid 5137] close(21) = -1 EBADF (Bad file descriptor) [pid 5137] close(22) = -1 EBADF (Bad file descriptor) [ 73.921997][ T5136] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 73.929972][ T5136] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 73.937946][ T5136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 73.945916][ T5136] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 73.953903][ T5136] [pid 5137] close(23) = -1 EBADF (Bad file descriptor) [pid 5137] close(24) = -1 EBADF (Bad file descriptor) [pid 5137] close(25) = -1 EBADF (Bad file descriptor) [pid 5137] close(26) = -1 EBADF (Bad file descriptor) [pid 5137] close(27) = -1 EBADF (Bad file descriptor) [pid 5137] close(28) = -1 EBADF (Bad file descriptor) [pid 5137] close(29) = -1 EBADF (Bad file descriptor) [pid 5137] exit_group(0) = ? [pid 5137] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 53 ./strace-static-x86_64: Process 5138 attached [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5138] setpgid(0, 0) = 0 [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5138] write(3, "1000", 4) = 4 [pid 5138] close(3) = 0 [pid 5138] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5138] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5138] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5138] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5138] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5138] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5138] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5138] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5138] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5138] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5138] write(7, "5", 1) = 1 [ 74.038606][ T5138] FAULT_INJECTION: forcing a failure. [ 74.038606][ T5138] name failslab, interval 1, probability 0, space 0, times 0 [ 74.051378][ T5138] CPU: 0 PID: 5138 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 74.061284][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 74.071360][ T5138] Call Trace: [ 74.074650][ T5138] [ 74.077605][ T5138] dump_stack_lvl+0xd1/0x138 [ 74.082268][ T5138] should_fail_ex.cold+0x5/0xa [ 74.087032][ T5138] ? io_issue_sqe+0x695/0x1250 [ 74.091818][ T5138] should_failslab+0x9/0x20 [ 74.096528][ T5138] __kmem_cache_alloc_node+0x5b/0x330 [ 74.101914][ T5138] ? ref_tracker_alloc+0x158/0x560 [ 74.107064][ T5138] kmalloc_trace+0x26/0x60 [ 74.111516][ T5138] ref_tracker_alloc+0x158/0x560 [ 74.116488][ T5138] ? __lock_acquire+0xbc3/0x56d0 [ 74.121427][ T5138] ? ref_tracker_free+0x6b0/0x6b0 [ 74.126470][ T5138] dst_init+0xe4/0x520 [ 74.130561][ T5138] dst_alloc+0x16f/0x1f0 [ 74.134853][ T5138] rt_dst_alloc+0x55/0x430 [ 74.139390][ T5138] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 74.145389][ T5138] ip_route_output_key_hash+0x18f/0x340 [ 74.150941][ T5138] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 74.157203][ T5138] dccp_v4_connect+0x7e1/0x1730 [ 74.162093][ T5138] __inet_stream_connect+0x69e/0xed0 [ 74.167415][ T5138] ? inet_listen+0x640/0x640 [ 74.172058][ T5138] ? mark_held_locks+0x9f/0xe0 [ 74.176849][ T5138] ? __local_bh_enable_ip+0xa4/0x130 [ 74.182148][ T5138] inet_stream_connect+0x57/0xa0 [ 74.187095][ T5138] ? __inet_stream_connect+0xed0/0xed0 [ 74.192568][ T5138] __sys_connect_file+0x153/0x1a0 [ 74.197614][ T5138] io_connect+0x3cc/0x720 [ 74.201995][ T5138] ? io_connect_prep+0x250/0x250 [ 74.206967][ T5138] ? receive_fd+0x110/0x110 [ 74.211509][ T5138] ? rcu_read_lock_sched_held+0x3e/0x70 [ 74.217085][ T5138] ? io_connect_prep+0x250/0x250 [ 74.222052][ T5138] io_issue_sqe+0x695/0x1250 [ 74.226769][ T5138] io_submit_sqes+0x96c/0x1e90 [ 74.231549][ T5138] __do_sys_io_uring_enter+0x103d/0x24e0 [ 74.237199][ T5138] ? io_submit_sqes+0x1e90/0x1e90 [ 74.242235][ T5138] ? ptrace_notify+0xfe/0x140 [ 74.246916][ T5138] ? lock_downgrade+0x6e0/0x6e0 [ 74.251862][ T5138] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.257091][ T5138] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.262335][ T5138] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.267585][ T5138] ? ptrace_notify+0xfe/0x140 [ 74.272287][ T5138] do_syscall_64+0x39/0xb0 [ 74.276753][ T5138] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.282690][ T5138] RIP: 0033:0x7f607b0de549 [ 74.287220][ T5138] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.306846][ T5138] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 74.315314][ T5138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 74.323310][ T5138] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5138] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5138] close(3) = 0 [pid 5138] close(4) = 0 [pid 5138] close(5) = 0 [pid 5138] close(6) = 0 [pid 5138] close(7) = 0 [pid 5138] close(8) = -1 EBADF (Bad file descriptor) [pid 5138] close(9) = -1 EBADF (Bad file descriptor) [pid 5138] close(10) = -1 EBADF (Bad file descriptor) [pid 5138] close(11) = -1 EBADF (Bad file descriptor) [pid 5138] close(12) = -1 EBADF (Bad file descriptor) [pid 5138] close(13) = -1 EBADF (Bad file descriptor) [pid 5138] close(14) = -1 EBADF (Bad file descriptor) [pid 5138] close(15) = -1 EBADF (Bad file descriptor) [pid 5138] close(16) = -1 EBADF (Bad file descriptor) [pid 5138] close(17) = -1 EBADF (Bad file descriptor) [pid 5138] close(18) = -1 EBADF (Bad file descriptor) [pid 5138] close(19) = -1 EBADF (Bad file descriptor) [pid 5138] close(20) = -1 EBADF (Bad file descriptor) [pid 5138] close(21) = -1 EBADF (Bad file descriptor) [pid 5138] close(22) = -1 EBADF (Bad file descriptor) [pid 5138] close(23) = -1 EBADF (Bad file descriptor) [pid 5138] close(24) = -1 EBADF (Bad file descriptor) [pid 5138] close(25) = -1 EBADF (Bad file descriptor) [pid 5138] close(26) = -1 EBADF (Bad file descriptor) [pid 5138] close(27) = -1 EBADF (Bad file descriptor) [pid 5138] close(28) = -1 EBADF (Bad file descriptor) [pid 5138] close(29) = -1 EBADF (Bad file descriptor) [pid 5138] exit_group(0) = ? [pid 5138] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5139 attached , child_tidptr=0x555555eff5d0) = 54 [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5139] setpgid(0, 0) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5139] write(3, "1000", 4) = 4 [pid 5139] close(3) = 0 [pid 5139] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5139] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5139] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 74.331327][ T5138] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 74.340645][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 74.348659][ T5138] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 74.356648][ T5138] [pid 5139] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5139] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5139] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5139] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5139] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5139] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5139] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5139] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5139] write(7, "5", 1) = 1 [ 74.411639][ T5139] FAULT_INJECTION: forcing a failure. [ 74.411639][ T5139] name failslab, interval 1, probability 0, space 0, times 0 [ 74.424359][ T5139] CPU: 1 PID: 5139 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 74.434350][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 74.444492][ T5139] Call Trace: [ 74.447786][ T5139] [ 74.450726][ T5139] dump_stack_lvl+0xd1/0x138 [ 74.455334][ T5139] should_fail_ex.cold+0x5/0xa [ 74.460106][ T5139] ? __inet_hash_connect+0x95e/0x1ba0 [ 74.465561][ T5139] should_failslab+0x9/0x20 [ 74.470076][ T5139] kmem_cache_alloc+0x5a/0x320 [ 74.474852][ T5139] __inet_hash_connect+0x95e/0x1ba0 [ 74.480117][ T5139] ? __inet_lookup_listener+0xbf0/0xbf0 [ 74.485788][ T5139] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 74.492153][ T5139] dccp_v4_connect+0xb82/0x1730 [ 74.497062][ T5139] __inet_stream_connect+0x69e/0xed0 [ 74.502367][ T5139] ? inet_listen+0x640/0x640 [ 74.507148][ T5139] ? mark_held_locks+0x9f/0xe0 [ 74.511933][ T5139] ? __local_bh_enable_ip+0xa4/0x130 [ 74.517252][ T5139] inet_stream_connect+0x57/0xa0 [ 74.522200][ T5139] ? __inet_stream_connect+0xed0/0xed0 [ 74.527682][ T5139] __sys_connect_file+0x153/0x1a0 [ 74.532743][ T5139] io_connect+0x3cc/0x720 [ 74.537698][ T5139] ? io_connect_prep+0x250/0x250 [ 74.542710][ T5139] ? receive_fd+0x110/0x110 [ 74.547230][ T5139] ? rcu_read_lock_sched_held+0x3e/0x70 [ 74.552778][ T5139] ? io_connect_prep+0x250/0x250 [ 74.557742][ T5139] io_issue_sqe+0x695/0x1250 [ 74.562369][ T5139] io_submit_sqes+0x96c/0x1e90 [ 74.567162][ T5139] __do_sys_io_uring_enter+0x103d/0x24e0 [ 74.572807][ T5139] ? io_submit_sqes+0x1e90/0x1e90 [ 74.577857][ T5139] ? ptrace_notify+0xfe/0x140 [ 74.582571][ T5139] ? lock_downgrade+0x6e0/0x6e0 [ 74.587456][ T5139] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.592678][ T5139] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.597908][ T5139] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.603120][ T5139] ? ptrace_notify+0xfe/0x140 [ 74.607953][ T5139] do_syscall_64+0x39/0xb0 [ 74.612439][ T5139] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.618386][ T5139] RIP: 0033:0x7f607b0de549 [ 74.622804][ T5139] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.642611][ T5139] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 74.651057][ T5139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5139] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5139] close(3) = 0 [pid 5139] close(4) = 0 [pid 5139] close(5) = 0 [pid 5139] close(6) = 0 [pid 5139] close(7) = 0 [pid 5139] close(8) = -1 EBADF (Bad file descriptor) [pid 5139] close(9) = -1 EBADF (Bad file descriptor) [pid 5139] close(10) = -1 EBADF (Bad file descriptor) [pid 5139] close(11) = -1 EBADF (Bad file descriptor) [pid 5139] close(12) = -1 EBADF (Bad file descriptor) [pid 5139] close(13) = -1 EBADF (Bad file descriptor) [pid 5139] close(14) = -1 EBADF (Bad file descriptor) [pid 5139] close(15) = -1 EBADF (Bad file descriptor) [pid 5139] close(16) = -1 EBADF (Bad file descriptor) [pid 5139] close(17) = -1 EBADF (Bad file descriptor) [pid 5139] close(18) = -1 EBADF (Bad file descriptor) [pid 5139] close(19) = -1 EBADF (Bad file descriptor) [pid 5139] close(20) = -1 EBADF (Bad file descriptor) [pid 5139] close(21) = -1 EBADF (Bad file descriptor) [pid 5139] close(22) = -1 EBADF (Bad file descriptor) [pid 5139] close(23) = -1 EBADF (Bad file descriptor) [pid 5139] close(24) = -1 EBADF (Bad file descriptor) [pid 5139] close(25) = -1 EBADF (Bad file descriptor) [pid 5139] close(26) = -1 EBADF (Bad file descriptor) [pid 5139] close(27) = -1 EBADF (Bad file descriptor) [pid 5139] close(28) = -1 EBADF (Bad file descriptor) [pid 5139] close(29) = -1 EBADF (Bad file descriptor) [pid 5139] exit_group(0) = ? [pid 5139] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 55 ./strace-static-x86_64: Process 5140 attached [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5140] setpgid(0, 0) = 0 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5140] write(3, "1000", 4) = 4 [pid 5140] close(3) = 0 [pid 5140] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5140] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5140] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5140] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5140] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5140] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5140] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5140] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5140] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5140] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5140] write(7, "5", 1) = 1 [ 74.659042][ T5139] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 74.667170][ T5139] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 74.675164][ T5139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 74.683154][ T5139] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 74.691184][ T5139] [ 74.726345][ T5140] FAULT_INJECTION: forcing a failure. [ 74.726345][ T5140] name failslab, interval 1, probability 0, space 0, times 0 [ 74.739057][ T5140] CPU: 0 PID: 5140 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 74.748950][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 74.759024][ T5140] Call Trace: [ 74.762306][ T5140] [ 74.765256][ T5140] dump_stack_lvl+0xd1/0x138 [ 74.769857][ T5140] should_fail_ex.cold+0x5/0xa [ 74.774638][ T5140] ? __inet_hash_connect+0x95e/0x1ba0 [ 74.780042][ T5140] should_failslab+0x9/0x20 [ 74.784559][ T5140] kmem_cache_alloc+0x5a/0x320 [ 74.789345][ T5140] __inet_hash_connect+0x95e/0x1ba0 [ 74.794583][ T5140] ? __inet_lookup_listener+0xbf0/0xbf0 [ 74.800229][ T5140] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 74.806596][ T5140] dccp_v4_connect+0xb82/0x1730 [ 74.812648][ T5140] __inet_stream_connect+0x69e/0xed0 [ 74.817981][ T5140] ? inet_listen+0x640/0x640 [ 74.822599][ T5140] ? mark_held_locks+0x9f/0xe0 [ 74.827397][ T5140] ? __local_bh_enable_ip+0xa4/0x130 [ 74.832775][ T5140] inet_stream_connect+0x57/0xa0 [ 74.837875][ T5140] ? __inet_stream_connect+0xed0/0xed0 [ 74.843355][ T5140] __sys_connect_file+0x153/0x1a0 [ 74.848386][ T5140] io_connect+0x3cc/0x720 [ 74.852732][ T5140] ? io_connect_prep+0x250/0x250 [ 74.857699][ T5140] ? receive_fd+0x110/0x110 [ 74.862245][ T5140] ? rcu_read_lock_sched_held+0x3e/0x70 [ 74.867789][ T5140] ? io_connect_prep+0x250/0x250 [ 74.872824][ T5140] io_issue_sqe+0x695/0x1250 [ 74.877712][ T5140] io_submit_sqes+0x96c/0x1e90 [ 74.882507][ T5140] __do_sys_io_uring_enter+0x103d/0x24e0 [ 74.888160][ T5140] ? io_submit_sqes+0x1e90/0x1e90 [ 74.893224][ T5140] ? ptrace_notify+0xfe/0x140 [ 74.897928][ T5140] ? lock_downgrade+0x6e0/0x6e0 [ 74.902785][ T5140] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.907995][ T5140] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.913208][ T5140] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.918434][ T5140] ? ptrace_notify+0xfe/0x140 [ 74.923124][ T5140] do_syscall_64+0x39/0xb0 [ 74.927593][ T5140] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.933531][ T5140] RIP: 0033:0x7f607b0de549 [ 74.937959][ T5140] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.957667][ T5140] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 74.966123][ T5140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5140] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5140] close(3) = 0 [pid 5140] close(4) = 0 [pid 5140] close(5) = 0 [pid 5140] close(6) = 0 [pid 5140] close(7) = 0 [pid 5140] close(8) = -1 EBADF (Bad file descriptor) [pid 5140] close(9) = -1 EBADF (Bad file descriptor) [pid 5140] close(10) = -1 EBADF (Bad file descriptor) [pid 5140] close(11) = -1 EBADF (Bad file descriptor) [pid 5140] close(12) = -1 EBADF (Bad file descriptor) [pid 5140] close(13) = -1 EBADF (Bad file descriptor) [pid 5140] close(14) = -1 EBADF (Bad file descriptor) [pid 5140] close(15) = -1 EBADF (Bad file descriptor) [pid 5140] close(16) = -1 EBADF (Bad file descriptor) [pid 5140] close(17) = -1 EBADF (Bad file descriptor) [pid 5140] close(18) = -1 EBADF (Bad file descriptor) [pid 5140] close(19) = -1 EBADF (Bad file descriptor) [pid 5140] close(20) = -1 EBADF (Bad file descriptor) [pid 5140] close(21) = -1 EBADF (Bad file descriptor) [pid 5140] close(22) = -1 EBADF (Bad file descriptor) [pid 5140] close(23) = -1 EBADF (Bad file descriptor) [pid 5140] close(24) = -1 EBADF (Bad file descriptor) [pid 5140] close(25) = -1 EBADF (Bad file descriptor) [pid 5140] close(26) = -1 EBADF (Bad file descriptor) [pid 5140] close(27) = -1 EBADF (Bad file descriptor) [pid 5140] close(28) = -1 EBADF (Bad file descriptor) [pid 5140] close(29) = -1 EBADF (Bad file descriptor) [pid 5140] exit_group(0) = ? [pid 5140] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 56 ./strace-static-x86_64: Process 5141 attached [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5141] setpgid(0, 0) = 0 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5141] write(3, "1000", 4) = 4 [pid 5141] close(3) = 0 [pid 5141] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5141] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5141] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5141] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5141] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5141] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5141] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5141] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5141] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5141] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5141] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5141] write(7, "5", 1) = 1 [ 74.974123][ T5140] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 74.982110][ T5140] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 74.990142][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 74.998201][ T5140] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 75.006210][ T5140] [ 75.043917][ T5141] FAULT_INJECTION: forcing a failure. [ 75.043917][ T5141] name failslab, interval 1, probability 0, space 0, times 0 [ 75.056677][ T5141] CPU: 0 PID: 5141 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 75.067378][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 75.077526][ T5141] Call Trace: [ 75.080803][ T5141] [ 75.083737][ T5141] dump_stack_lvl+0xd1/0x138 [ 75.088337][ T5141] should_fail_ex.cold+0x5/0xa [ 75.093112][ T5141] ? io_issue_sqe+0x695/0x1250 [ 75.097917][ T5141] should_failslab+0x9/0x20 [ 75.102425][ T5141] __kmem_cache_alloc_node+0x5b/0x330 [ 75.107815][ T5141] ? ref_tracker_alloc+0x158/0x560 [ 75.112975][ T5141] kmalloc_trace+0x26/0x60 [ 75.117422][ T5141] ref_tracker_alloc+0x158/0x560 [ 75.122391][ T5141] ? __lock_acquire+0xbc3/0x56d0 [ 75.127348][ T5141] ? ref_tracker_free+0x6b0/0x6b0 [ 75.132431][ T5141] dst_init+0xe4/0x520 [ 75.136529][ T5141] dst_alloc+0x16f/0x1f0 [ 75.140811][ T5141] rt_dst_alloc+0x55/0x430 [ 75.145338][ T5141] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 75.151357][ T5141] ip_route_output_key_hash+0x18f/0x340 [ 75.156932][ T5141] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 75.163220][ T5141] dccp_v4_connect+0x7e1/0x1730 [ 75.168121][ T5141] __inet_stream_connect+0x69e/0xed0 [ 75.173445][ T5141] ? inet_listen+0x640/0x640 [ 75.178069][ T5141] ? mark_held_locks+0x9f/0xe0 [ 75.182857][ T5141] ? __local_bh_enable_ip+0xa4/0x130 [ 75.188355][ T5141] inet_stream_connect+0x57/0xa0 [ 75.193325][ T5141] ? __inet_stream_connect+0xed0/0xed0 [ 75.198816][ T5141] __sys_connect_file+0x153/0x1a0 [ 75.203868][ T5141] io_connect+0x3cc/0x720 [ 75.208229][ T5141] ? io_connect_prep+0x250/0x250 [ 75.213210][ T5141] ? receive_fd+0x110/0x110 [ 75.217781][ T5141] ? rcu_read_lock_sched_held+0x3e/0x70 [ 75.223349][ T5141] ? io_connect_prep+0x250/0x250 [ 75.228319][ T5141] io_issue_sqe+0x695/0x1250 [ 75.232950][ T5141] io_submit_sqes+0x96c/0x1e90 [ 75.237756][ T5141] __do_sys_io_uring_enter+0x103d/0x24e0 [ 75.243434][ T5141] ? io_submit_sqes+0x1e90/0x1e90 [ 75.248572][ T5141] ? ptrace_notify+0xfe/0x140 [ 75.253357][ T5141] ? lock_downgrade+0x6e0/0x6e0 [ 75.258237][ T5141] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.263551][ T5141] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.268771][ T5141] ? _raw_spin_unlock_irq+0x2e/0x50 [ 75.273993][ T5141] ? ptrace_notify+0xfe/0x140 [ 75.278702][ T5141] do_syscall_64+0x39/0xb0 [ 75.283193][ T5141] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.289114][ T5141] RIP: 0033:0x7f607b0de549 [ 75.293545][ T5141] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 75.313344][ T5141] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 75.321781][ T5141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 75.329777][ T5141] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5141] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5141] close(3) = 0 [pid 5141] close(4) = 0 [pid 5141] close(5) = 0 [pid 5141] close(6) = 0 [pid 5141] close(7) = 0 [pid 5141] close(8) = -1 EBADF (Bad file descriptor) [pid 5141] close(9) = -1 EBADF (Bad file descriptor) [pid 5141] close(10) = -1 EBADF (Bad file descriptor) [pid 5141] close(11) = -1 EBADF (Bad file descriptor) [pid 5141] close(12) = -1 EBADF (Bad file descriptor) [pid 5141] close(13) = -1 EBADF (Bad file descriptor) [pid 5141] close(14) = -1 EBADF (Bad file descriptor) [pid 5141] close(15) = -1 EBADF (Bad file descriptor) [pid 5141] close(16) = -1 EBADF (Bad file descriptor) [pid 5141] close(17) = -1 EBADF (Bad file descriptor) [pid 5141] close(18) = -1 EBADF (Bad file descriptor) [pid 5141] close(19) = -1 EBADF (Bad file descriptor) [pid 5141] close(20) = -1 EBADF (Bad file descriptor) [pid 5141] close(21) = -1 EBADF (Bad file descriptor) [pid 5141] close(22) = -1 EBADF (Bad file descriptor) [pid 5141] close(23) = -1 EBADF (Bad file descriptor) [pid 5141] close(24) = -1 EBADF (Bad file descriptor) [pid 5141] close(25) = -1 EBADF (Bad file descriptor) [pid 5141] close(26) = -1 EBADF (Bad file descriptor) [pid 5141] close(27) = -1 EBADF (Bad file descriptor) [pid 5141] close(28) = -1 EBADF (Bad file descriptor) [pid 5141] close(29) = -1 EBADF (Bad file descriptor) [pid 5141] exit_group(0) = ? [pid 5141] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 57 ./strace-static-x86_64: Process 5142 attached [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0) = 0 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5142] write(3, "1000", 4) = 4 [pid 5142] close(3) = 0 [pid 5142] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5142] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5142] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5142] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5142] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5142] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5142] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 75.337763][ T5141] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 75.345753][ T5141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 75.353739][ T5141] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 75.361747][ T5141] [pid 5142] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5142] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5142] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5142] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5142] write(7, "5", 1) = 1 [ 75.411437][ T5142] FAULT_INJECTION: forcing a failure. [ 75.411437][ T5142] name failslab, interval 1, probability 0, space 0, times 0 [ 75.424505][ T5142] CPU: 0 PID: 5142 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 75.434447][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 75.444521][ T5142] Call Trace: [ 75.447817][ T5142] [ 75.451025][ T5142] dump_stack_lvl+0xd1/0x138 [ 75.455632][ T5142] should_fail_ex.cold+0x5/0xa [ 75.460488][ T5142] ? io_issue_sqe+0x695/0x1250 [ 75.465303][ T5142] should_failslab+0x9/0x20 [ 75.469904][ T5142] __kmem_cache_alloc_node+0x5b/0x330 [ 75.475303][ T5142] ? ref_tracker_alloc+0x158/0x560 [ 75.480452][ T5142] kmalloc_trace+0x26/0x60 [ 75.484920][ T5142] ref_tracker_alloc+0x158/0x560 [ 75.489896][ T5142] ? __lock_acquire+0xbc3/0x56d0 [ 75.494846][ T5142] ? ref_tracker_free+0x6b0/0x6b0 [ 75.499924][ T5142] dst_init+0xe4/0x520 [ 75.504003][ T5142] dst_alloc+0x16f/0x1f0 [ 75.508286][ T5142] rt_dst_alloc+0x55/0x430 [ 75.512709][ T5142] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 75.518703][ T5142] ip_route_output_key_hash+0x18f/0x340 [ 75.524260][ T5142] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 75.530558][ T5142] dccp_v4_connect+0x7e1/0x1730 [ 75.535455][ T5142] __inet_stream_connect+0x69e/0xed0 [ 75.540758][ T5142] ? inet_listen+0x640/0x640 [ 75.545357][ T5142] ? mark_held_locks+0x9f/0xe0 [ 75.550140][ T5142] ? __local_bh_enable_ip+0xa4/0x130 [ 75.555464][ T5142] inet_stream_connect+0x57/0xa0 [ 75.560423][ T5142] ? __inet_stream_connect+0xed0/0xed0 [ 75.565944][ T5142] __sys_connect_file+0x153/0x1a0 [ 75.571025][ T5142] io_connect+0x3cc/0x720 [ 75.575395][ T5142] ? io_connect_prep+0x250/0x250 [ 75.580354][ T5142] ? receive_fd+0x110/0x110 [ 75.584913][ T5142] ? rcu_read_lock_sched_held+0x3e/0x70 [ 75.590480][ T5142] ? io_connect_prep+0x250/0x250 [ 75.595466][ T5142] io_issue_sqe+0x695/0x1250 [ 75.600066][ T5142] io_submit_sqes+0x96c/0x1e90 [ 75.604874][ T5142] __do_sys_io_uring_enter+0x103d/0x24e0 [ 75.610705][ T5142] ? io_submit_sqes+0x1e90/0x1e90 [ 75.615737][ T5142] ? ptrace_notify+0xfe/0x140 [ 75.620427][ T5142] ? lock_downgrade+0x6e0/0x6e0 [ 75.625308][ T5142] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.630536][ T5142] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.635770][ T5142] ? _raw_spin_unlock_irq+0x2e/0x50 [ 75.640978][ T5142] ? ptrace_notify+0xfe/0x140 [ 75.645671][ T5142] do_syscall_64+0x39/0xb0 [ 75.650114][ T5142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.656045][ T5142] RIP: 0033:0x7f607b0de549 [ 75.660503][ T5142] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 75.680679][ T5142] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 75.689134][ T5142] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 75.698007][ T5142] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5142] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5142] close(3) = 0 [pid 5142] close(4) = 0 [pid 5142] close(5) = 0 [pid 5142] close(6) = 0 [pid 5142] close(7) = 0 [pid 5142] close(8) = -1 EBADF (Bad file descriptor) [pid 5142] close(9) = -1 EBADF (Bad file descriptor) [pid 5142] close(10) = -1 EBADF (Bad file descriptor) [pid 5142] close(11) = -1 EBADF (Bad file descriptor) [pid 5142] close(12) = -1 EBADF (Bad file descriptor) [pid 5142] close(13) = -1 EBADF (Bad file descriptor) [pid 5142] close(14) = -1 EBADF (Bad file descriptor) [pid 5142] close(15) = -1 EBADF (Bad file descriptor) [pid 5142] close(16) = -1 EBADF (Bad file descriptor) [pid 5142] close(17) = -1 EBADF (Bad file descriptor) [pid 5142] close(18) = -1 EBADF (Bad file descriptor) [pid 5142] close(19) = -1 EBADF (Bad file descriptor) [pid 5142] close(20) = -1 EBADF (Bad file descriptor) [pid 5142] close(21) = -1 EBADF (Bad file descriptor) [pid 5142] close(22) = -1 EBADF (Bad file descriptor) [pid 5142] close(23) = -1 EBADF (Bad file descriptor) [pid 5142] close(24) = -1 EBADF (Bad file descriptor) [pid 5142] close(25) = -1 EBADF (Bad file descriptor) [pid 5142] close(26) = -1 EBADF (Bad file descriptor) [pid 5142] close(27) = -1 EBADF (Bad file descriptor) [pid 5142] close(28) = -1 EBADF (Bad file descriptor) [pid 5142] close(29) = -1 EBADF (Bad file descriptor) [pid 5142] exit_group(0) = ? [pid 5142] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5143 attached [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5143] setpgid(0, 0) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... clone resumed>, child_tidptr=0x555555eff5d0) = 58 [pid 5143] <... openat resumed>) = 3 [pid 5143] write(3, "1000", 4) = 4 [pid 5143] close(3) = 0 [pid 5143] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5143] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5143] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [ 75.705988][ T5142] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 75.713990][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 75.721980][ T5142] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 75.729998][ T5142] [pid 5143] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5143] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5143] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5143] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5143] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5143] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5143] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5143] write(7, "5", 1) = 1 [ 75.783767][ T5143] FAULT_INJECTION: forcing a failure. [ 75.783767][ T5143] name failslab, interval 1, probability 0, space 0, times 0 [ 75.796866][ T5143] CPU: 1 PID: 5143 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 75.806809][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 75.816992][ T5143] Call Trace: [ 75.820281][ T5143] [ 75.823240][ T5143] dump_stack_lvl+0xd1/0x138 [ 75.827870][ T5143] should_fail_ex.cold+0x5/0xa [ 75.832634][ T5143] ? io_issue_sqe+0x695/0x1250 [ 75.837683][ T5143] should_failslab+0x9/0x20 [ 75.842221][ T5143] __kmem_cache_alloc_node+0x5b/0x330 [ 75.847771][ T5143] ? ref_tracker_alloc+0x158/0x560 [ 75.852904][ T5143] kmalloc_trace+0x26/0x60 [ 75.857331][ T5143] ref_tracker_alloc+0x158/0x560 [ 75.862293][ T5143] ? __lock_acquire+0xbc3/0x56d0 [ 75.867231][ T5143] ? ref_tracker_free+0x6b0/0x6b0 [ 75.872288][ T5143] dst_init+0xe4/0x520 [ 75.876389][ T5143] dst_alloc+0x16f/0x1f0 [ 75.880668][ T5143] rt_dst_alloc+0x55/0x430 [ 75.885120][ T5143] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 75.891133][ T5143] ip_route_output_key_hash+0x18f/0x340 [ 75.896731][ T5143] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 75.902992][ T5143] dccp_v4_connect+0x7e1/0x1730 [ 75.907860][ T5143] __inet_stream_connect+0x69e/0xed0 [ 75.913180][ T5143] ? inet_listen+0x640/0x640 [ 75.917807][ T5143] ? mark_held_locks+0x9f/0xe0 [ 75.922580][ T5143] ? __local_bh_enable_ip+0xa4/0x130 [ 75.927888][ T5143] inet_stream_connect+0x57/0xa0 [ 75.932854][ T5143] ? __inet_stream_connect+0xed0/0xed0 [ 75.938324][ T5143] __sys_connect_file+0x153/0x1a0 [ 75.943367][ T5143] io_connect+0x3cc/0x720 [ 75.947758][ T5143] ? io_connect_prep+0x250/0x250 [ 75.952739][ T5143] ? receive_fd+0x110/0x110 [ 75.957266][ T5143] ? rcu_read_lock_sched_held+0x3e/0x70 [ 75.962817][ T5143] ? io_connect_prep+0x250/0x250 [ 75.967769][ T5143] io_issue_sqe+0x695/0x1250 [ 75.972365][ T5143] io_submit_sqes+0x96c/0x1e90 [ 75.977154][ T5143] __do_sys_io_uring_enter+0x103d/0x24e0 [ 75.982800][ T5143] ? io_submit_sqes+0x1e90/0x1e90 [ 75.987845][ T5143] ? ptrace_notify+0xfe/0x140 [ 75.992534][ T5143] ? lock_downgrade+0x6e0/0x6e0 [ 75.997414][ T5143] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.002654][ T5143] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.007874][ T5143] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.013096][ T5143] ? ptrace_notify+0xfe/0x140 [ 76.017798][ T5143] do_syscall_64+0x39/0xb0 [ 76.022251][ T5143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.028148][ T5143] RIP: 0033:0x7f607b0de549 [ 76.032561][ T5143] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.052258][ T5143] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 76.060686][ T5143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 76.068677][ T5143] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 76.076651][ T5143] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5143] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5143] close(3) = 0 [pid 5143] close(4) = 0 [pid 5143] close(5) = 0 [pid 5143] close(6) = 0 [pid 5143] close(7) = 0 [pid 5143] close(8) = -1 EBADF (Bad file descriptor) [pid 5143] close(9) = -1 EBADF (Bad file descriptor) [pid 5143] close(10) = -1 EBADF (Bad file descriptor) [pid 5143] close(11) = -1 EBADF (Bad file descriptor) [pid 5143] close(12) = -1 EBADF (Bad file descriptor) [pid 5143] close(13) = -1 EBADF (Bad file descriptor) [pid 5143] close(14) = -1 EBADF (Bad file descriptor) [pid 5143] close(15) = -1 EBADF (Bad file descriptor) [pid 5143] close(16) = -1 EBADF (Bad file descriptor) [pid 5143] close(17) = -1 EBADF (Bad file descriptor) [pid 5143] close(18) = -1 EBADF (Bad file descriptor) [pid 5143] close(19) = -1 EBADF (Bad file descriptor) [pid 5143] close(20) = -1 EBADF (Bad file descriptor) [pid 5143] close(21) = -1 EBADF (Bad file descriptor) [pid 5143] close(22) = -1 EBADF (Bad file descriptor) [pid 5143] close(23) = -1 EBADF (Bad file descriptor) [pid 5143] close(24) = -1 EBADF (Bad file descriptor) [pid 5143] close(25) = -1 EBADF (Bad file descriptor) [pid 5143] close(26) = -1 EBADF (Bad file descriptor) [pid 5143] close(27) = -1 EBADF (Bad file descriptor) [pid 5143] close(28) = -1 EBADF (Bad file descriptor) [pid 5143] close(29) = -1 EBADF (Bad file descriptor) [pid 5143] exit_group(0) = ? [pid 5143] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 59 ./strace-static-x86_64: Process 5144 attached [pid 5144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5144] setpgid(0, 0) = 0 [pid 5144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5144] write(3, "1000", 4) = 4 [pid 5144] close(3) = 0 [pid 5144] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5144] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5144] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 76.084633][ T5143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 76.092627][ T5143] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 76.100645][ T5143] [pid 5144] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5144] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5144] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5144] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5144] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5144] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5144] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5144] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5144] write(7, "5", 1) = 1 [ 76.159279][ T5144] FAULT_INJECTION: forcing a failure. [ 76.159279][ T5144] name failslab, interval 1, probability 0, space 0, times 0 [ 76.172006][ T5144] CPU: 1 PID: 5144 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 76.181924][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 76.191997][ T5144] Call Trace: [ 76.195289][ T5144] [ 76.198226][ T5144] dump_stack_lvl+0xd1/0x138 [ 76.202914][ T5144] should_fail_ex.cold+0x5/0xa [ 76.207696][ T5144] ? __inet_hash_connect+0x95e/0x1ba0 [ 76.213104][ T5144] should_failslab+0x9/0x20 [ 76.217633][ T5144] kmem_cache_alloc+0x5a/0x320 [ 76.222431][ T5144] __inet_hash_connect+0x95e/0x1ba0 [ 76.227653][ T5144] ? __inet_lookup_listener+0xbf0/0xbf0 [ 76.233253][ T5144] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 76.239623][ T5144] dccp_v4_connect+0xb82/0x1730 [ 76.244493][ T5144] __inet_stream_connect+0x69e/0xed0 [ 76.249796][ T5144] ? inet_listen+0x640/0x640 [ 76.254404][ T5144] ? mark_held_locks+0x9f/0xe0 [ 76.259188][ T5144] ? __local_bh_enable_ip+0xa4/0x130 [ 76.264508][ T5144] inet_stream_connect+0x57/0xa0 [ 76.269461][ T5144] ? __inet_stream_connect+0xed0/0xed0 [ 76.274957][ T5144] __sys_connect_file+0x153/0x1a0 [ 76.280011][ T5144] io_connect+0x3cc/0x720 [ 76.284380][ T5144] ? io_connect_prep+0x250/0x250 [ 76.289361][ T5144] ? receive_fd+0x110/0x110 [ 76.293912][ T5144] ? rcu_read_lock_sched_held+0x3e/0x70 [ 76.299467][ T5144] ? io_connect_prep+0x250/0x250 [ 76.304417][ T5144] io_issue_sqe+0x695/0x1250 [ 76.309032][ T5144] io_submit_sqes+0x96c/0x1e90 [ 76.313938][ T5144] __do_sys_io_uring_enter+0x103d/0x24e0 [ 76.319589][ T5144] ? io_submit_sqes+0x1e90/0x1e90 [ 76.324631][ T5144] ? ptrace_notify+0xfe/0x140 [ 76.329322][ T5144] ? lock_downgrade+0x6e0/0x6e0 [ 76.334209][ T5144] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.339432][ T5144] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.344637][ T5144] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.349850][ T5144] ? ptrace_notify+0xfe/0x140 [ 76.354540][ T5144] do_syscall_64+0x39/0xb0 [ 76.358996][ T5144] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.364942][ T5144] RIP: 0033:0x7f607b0de549 [ 76.369383][ T5144] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.388999][ T5144] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 76.397428][ T5144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5144] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5144] close(3) = 0 [pid 5144] close(4) = 0 [pid 5144] close(5) = 0 [pid 5144] close(6) = 0 [pid 5144] close(7) = 0 [pid 5144] close(8) = -1 EBADF (Bad file descriptor) [pid 5144] close(9) = -1 EBADF (Bad file descriptor) [pid 5144] close(10) = -1 EBADF (Bad file descriptor) [pid 5144] close(11) = -1 EBADF (Bad file descriptor) [pid 5144] close(12) = -1 EBADF (Bad file descriptor) [pid 5144] close(13) = -1 EBADF (Bad file descriptor) [pid 5144] close(14) = -1 EBADF (Bad file descriptor) [pid 5144] close(15) = -1 EBADF (Bad file descriptor) [pid 5144] close(16) = -1 EBADF (Bad file descriptor) [pid 5144] close(17) = -1 EBADF (Bad file descriptor) [pid 5144] close(18) = -1 EBADF (Bad file descriptor) [pid 5144] close(19) = -1 EBADF (Bad file descriptor) [pid 5144] close(20) = -1 EBADF (Bad file descriptor) [pid 5144] close(21) = -1 EBADF (Bad file descriptor) [pid 5144] close(22) = -1 EBADF (Bad file descriptor) [pid 5144] close(23) = -1 EBADF (Bad file descriptor) [pid 5144] close(24) = -1 EBADF (Bad file descriptor) [ 76.402822][ T7] cfg80211: failed to load regulatory.db [ 76.405391][ T5144] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 76.419039][ T5144] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 76.427049][ T5144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 76.435059][ T5144] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 76.443197][ T5144] [pid 5144] close(25) = -1 EBADF (Bad file descriptor) [pid 5144] close(26) = -1 EBADF (Bad file descriptor) [pid 5144] close(27) = -1 EBADF (Bad file descriptor) [pid 5144] close(28) = -1 EBADF (Bad file descriptor) [pid 5144] close(29) = -1 EBADF (Bad file descriptor) [pid 5144] exit_group(0) = ? [pid 5144] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 60 ./strace-static-x86_64: Process 5146 attached [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5146] setpgid(0, 0) = 0 [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5146] write(3, "1000", 4) = 4 [pid 5146] close(3) = 0 [pid 5146] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5146] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5146] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5146] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5146] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5146] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5146] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5146] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5146] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5146] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5146] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5146] write(7, "5", 1) = 1 [ 76.532730][ T5146] FAULT_INJECTION: forcing a failure. [ 76.532730][ T5146] name failslab, interval 1, probability 0, space 0, times 0 [ 76.546425][ T5146] CPU: 1 PID: 5146 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 76.556454][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 76.566527][ T5146] Call Trace: [ 76.569816][ T5146] [ 76.572761][ T5146] dump_stack_lvl+0xd1/0x138 [ 76.577389][ T5146] should_fail_ex.cold+0x5/0xa [ 76.582170][ T5146] ? io_issue_sqe+0x695/0x1250 [ 76.586982][ T5146] should_failslab+0x9/0x20 [ 76.591512][ T5146] __kmem_cache_alloc_node+0x5b/0x330 [ 76.596908][ T5146] ? ref_tracker_alloc+0x158/0x560 [ 76.602053][ T5146] kmalloc_trace+0x26/0x60 [ 76.606497][ T5146] ref_tracker_alloc+0x158/0x560 [ 76.611637][ T5146] ? __lock_acquire+0xbc3/0x56d0 [ 76.616598][ T5146] ? ref_tracker_free+0x6b0/0x6b0 [ 76.621688][ T5146] dst_init+0xe4/0x520 [ 76.625785][ T5146] dst_alloc+0x16f/0x1f0 [ 76.630061][ T5146] rt_dst_alloc+0x55/0x430 [ 76.634676][ T5146] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 76.640696][ T5146] ip_route_output_key_hash+0x18f/0x340 [ 76.646381][ T5146] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 76.652696][ T5146] dccp_v4_connect+0x7e1/0x1730 [ 76.657607][ T5146] __inet_stream_connect+0x69e/0xed0 [ 76.662944][ T5146] ? inet_listen+0x640/0x640 [ 76.667579][ T5146] ? mark_held_locks+0x9f/0xe0 [ 76.672376][ T5146] ? __local_bh_enable_ip+0xa4/0x130 [ 76.677692][ T5146] inet_stream_connect+0x57/0xa0 [ 76.682665][ T5146] ? __inet_stream_connect+0xed0/0xed0 [ 76.688160][ T5146] __sys_connect_file+0x153/0x1a0 [ 76.693220][ T5146] io_connect+0x3cc/0x720 [ 76.697585][ T5146] ? io_connect_prep+0x250/0x250 [ 76.702551][ T5146] ? receive_fd+0x110/0x110 [ 76.707096][ T5146] ? rcu_read_lock_sched_held+0x3e/0x70 [ 76.712690][ T5146] ? io_connect_prep+0x250/0x250 [ 76.717689][ T5146] io_issue_sqe+0x695/0x1250 [ 76.722324][ T5146] io_submit_sqes+0x96c/0x1e90 [ 76.727133][ T5146] __do_sys_io_uring_enter+0x103d/0x24e0 [ 76.732800][ T5146] ? io_submit_sqes+0x1e90/0x1e90 [ 76.737858][ T5146] ? ptrace_notify+0xfe/0x140 [ 76.742567][ T5146] ? lock_downgrade+0x6e0/0x6e0 [ 76.747457][ T5146] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.752680][ T5146] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.757929][ T5146] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.763148][ T5146] ? ptrace_notify+0xfe/0x140 [ 76.767858][ T5146] do_syscall_64+0x39/0xb0 [ 76.772310][ T5146] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.778229][ T5146] RIP: 0033:0x7f607b0de549 [ 76.782663][ T5146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 76.802292][ T5146] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 76.810816][ T5146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 76.818921][ T5146] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5146] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5146] close(3) = 0 [pid 5146] close(4) = 0 [pid 5146] close(5) = 0 [pid 5146] close(6) = 0 [pid 5146] close(7) = 0 [pid 5146] close(8) = -1 EBADF (Bad file descriptor) [pid 5146] close(9) = -1 EBADF (Bad file descriptor) [pid 5146] close(10) = -1 EBADF (Bad file descriptor) [pid 5146] close(11) = -1 EBADF (Bad file descriptor) [pid 5146] close(12) = -1 EBADF (Bad file descriptor) [pid 5146] close(13) = -1 EBADF (Bad file descriptor) [pid 5146] close(14) = -1 EBADF (Bad file descriptor) [pid 5146] close(15) = -1 EBADF (Bad file descriptor) [pid 5146] close(16) = -1 EBADF (Bad file descriptor) [pid 5146] close(17) = -1 EBADF (Bad file descriptor) [pid 5146] close(18) = -1 EBADF (Bad file descriptor) [pid 5146] close(19) = -1 EBADF (Bad file descriptor) [pid 5146] close(20) = -1 EBADF (Bad file descriptor) [pid 5146] close(21) = -1 EBADF (Bad file descriptor) [pid 5146] close(22) = -1 EBADF (Bad file descriptor) [ 76.826915][ T5146] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 76.834912][ T5146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 76.842987][ T5146] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 76.850998][ T5146] [pid 5146] close(23) = -1 EBADF (Bad file descriptor) [pid 5146] close(24) = -1 EBADF (Bad file descriptor) [pid 5146] close(25) = -1 EBADF (Bad file descriptor) [pid 5146] close(26) = -1 EBADF (Bad file descriptor) [pid 5146] close(27) = -1 EBADF (Bad file descriptor) [pid 5146] close(28) = -1 EBADF (Bad file descriptor) [pid 5146] close(29) = -1 EBADF (Bad file descriptor) [pid 5146] exit_group(0) = ? [pid 5146] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 61 ./strace-static-x86_64: Process 5147 attached [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5147] write(3, "1000", 4) = 4 [pid 5147] close(3) = 0 [pid 5147] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5147] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5147] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5147] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5147] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5147] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5147] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5147] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5147] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5147] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5147] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5147] write(7, "5", 1) = 1 [ 76.947546][ T5147] FAULT_INJECTION: forcing a failure. [ 76.947546][ T5147] name failslab, interval 1, probability 0, space 0, times 0 [ 76.960279][ T5147] CPU: 1 PID: 5147 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 76.970210][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 76.980290][ T5147] Call Trace: [ 76.983584][ T5147] [ 76.986533][ T5147] dump_stack_lvl+0xd1/0x138 [ 76.991165][ T5147] should_fail_ex.cold+0x5/0xa [ 76.995962][ T5147] ? __inet_hash_connect+0x95e/0x1ba0 [ 77.001371][ T5147] should_failslab+0x9/0x20 [ 77.005923][ T5147] kmem_cache_alloc+0x5a/0x320 [ 77.010728][ T5147] __inet_hash_connect+0x95e/0x1ba0 [ 77.015969][ T5147] ? __inet_lookup_listener+0xbf0/0xbf0 [ 77.021561][ T5147] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 77.027951][ T5147] dccp_v4_connect+0xb82/0x1730 [ 77.032956][ T5147] __inet_stream_connect+0x69e/0xed0 [ 77.038305][ T5147] ? inet_listen+0x640/0x640 [ 77.043029][ T5147] ? mark_held_locks+0x9f/0xe0 [ 77.047827][ T5147] ? __local_bh_enable_ip+0xa4/0x130 [ 77.053159][ T5147] inet_stream_connect+0x57/0xa0 [ 77.058142][ T5147] ? __inet_stream_connect+0xed0/0xed0 [ 77.063650][ T5147] __sys_connect_file+0x153/0x1a0 [ 77.068711][ T5147] io_connect+0x3cc/0x720 [ 77.073088][ T5147] ? io_connect_prep+0x250/0x250 [ 77.078068][ T5147] ? receive_fd+0x110/0x110 [ 77.082711][ T5147] ? rcu_read_lock_sched_held+0x3e/0x70 [ 77.088291][ T5147] ? io_connect_prep+0x250/0x250 [ 77.093275][ T5147] io_issue_sqe+0x695/0x1250 [ 77.097931][ T5147] io_submit_sqes+0x96c/0x1e90 [ 77.102762][ T5147] __do_sys_io_uring_enter+0x103d/0x24e0 [ 77.108455][ T5147] ? io_submit_sqes+0x1e90/0x1e90 [ 77.113527][ T5147] ? ptrace_notify+0xfe/0x140 [ 77.118238][ T5147] ? lock_downgrade+0x6e0/0x6e0 [ 77.123132][ T5147] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.128376][ T5147] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.133606][ T5147] ? _raw_spin_unlock_irq+0x2e/0x50 [ 77.138846][ T5147] ? ptrace_notify+0xfe/0x140 [ 77.143571][ T5147] do_syscall_64+0x39/0xb0 [ 77.148033][ T5147] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.153996][ T5147] RIP: 0033:0x7f607b0de549 [ 77.158441][ T5147] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 77.178082][ T5147] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 77.186529][ T5147] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5147] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5147] close(3) = 0 [pid 5147] close(4) = 0 [pid 5147] close(5) = 0 [pid 5147] close(6) = 0 [pid 5147] close(7) = 0 [pid 5147] close(8) = -1 EBADF (Bad file descriptor) [pid 5147] close(9) = -1 EBADF (Bad file descriptor) [pid 5147] close(10) = -1 EBADF (Bad file descriptor) [pid 5147] close(11) = -1 EBADF (Bad file descriptor) [pid 5147] close(12) = -1 EBADF (Bad file descriptor) [pid 5147] close(13) = -1 EBADF (Bad file descriptor) [pid 5147] close(14) = -1 EBADF (Bad file descriptor) [pid 5147] close(15) = -1 EBADF (Bad file descriptor) [pid 5147] close(16) = -1 EBADF (Bad file descriptor) [pid 5147] close(17) = -1 EBADF (Bad file descriptor) [pid 5147] close(18) = -1 EBADF (Bad file descriptor) [pid 5147] close(19) = -1 EBADF (Bad file descriptor) [pid 5147] close(20) = -1 EBADF (Bad file descriptor) [pid 5147] close(21) = -1 EBADF (Bad file descriptor) [pid 5147] close(22) = -1 EBADF (Bad file descriptor) [pid 5147] close(23) = -1 EBADF (Bad file descriptor) [pid 5147] close(24) = -1 EBADF (Bad file descriptor) [pid 5147] close(25) = -1 EBADF (Bad file descriptor) [pid 5147] close(26) = -1 EBADF (Bad file descriptor) [pid 5147] close(27) = -1 EBADF (Bad file descriptor) [pid 5147] close(28) = -1 EBADF (Bad file descriptor) [pid 5147] close(29) = -1 EBADF (Bad file descriptor) [ 77.194515][ T5147] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 77.202508][ T5147] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 77.210490][ T5147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 77.218476][ T5147] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 77.226569][ T5147] [pid 5147] exit_group(0) = ? [pid 5147] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 62 ./strace-static-x86_64: Process 5148 attached [pid 5148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5148] setpgid(0, 0) = 0 [pid 5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5148] write(3, "1000", 4) = 4 [pid 5148] close(3) = 0 [pid 5148] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5148] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5148] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5148] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5148] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5148] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5148] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5148] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5148] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5148] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5148] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5148] write(7, "5", 1) = 1 [ 77.310801][ T5148] FAULT_INJECTION: forcing a failure. [ 77.310801][ T5148] name failslab, interval 1, probability 0, space 0, times 0 [ 77.340380][ T5148] CPU: 1 PID: 5148 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 77.350348][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 77.360457][ T5148] Call Trace: [ 77.363758][ T5148] [ 77.366706][ T5148] dump_stack_lvl+0xd1/0x138 [ 77.371346][ T5148] should_fail_ex.cold+0x5/0xa [ 77.376127][ T5148] ? io_issue_sqe+0x695/0x1250 [ 77.380896][ T5148] should_failslab+0x9/0x20 [ 77.385403][ T5148] __kmem_cache_alloc_node+0x5b/0x330 [ 77.390779][ T5148] ? ref_tracker_alloc+0x158/0x560 [ 77.395898][ T5148] kmalloc_trace+0x26/0x60 [ 77.400329][ T5148] ref_tracker_alloc+0x158/0x560 [ 77.405287][ T5148] ? __lock_acquire+0xbc3/0x56d0 [ 77.410222][ T5148] ? ref_tracker_free+0x6b0/0x6b0 [ 77.415263][ T5148] dst_init+0xe4/0x520 [ 77.419334][ T5148] dst_alloc+0x16f/0x1f0 [ 77.423584][ T5148] rt_dst_alloc+0x55/0x430 [ 77.428005][ T5148] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 77.434010][ T5148] ip_route_output_key_hash+0x18f/0x340 [ 77.439651][ T5148] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 77.445927][ T5148] dccp_v4_connect+0x7e1/0x1730 [ 77.450801][ T5148] __inet_stream_connect+0x69e/0xed0 [ 77.456098][ T5148] ? inet_listen+0x640/0x640 [ 77.460711][ T5148] ? mark_held_locks+0x9f/0xe0 [ 77.465559][ T5148] ? __local_bh_enable_ip+0xa4/0x130 [ 77.470855][ T5148] inet_stream_connect+0x57/0xa0 [ 77.475812][ T5148] ? __inet_stream_connect+0xed0/0xed0 [ 77.481276][ T5148] __sys_connect_file+0x153/0x1a0 [ 77.486323][ T5148] io_connect+0x3cc/0x720 [ 77.490688][ T5148] ? io_connect_prep+0x250/0x250 [ 77.495627][ T5148] ? receive_fd+0x110/0x110 [ 77.500139][ T5148] ? rcu_read_lock_sched_held+0x3e/0x70 [ 77.505681][ T5148] ? io_connect_prep+0x250/0x250 [ 77.510621][ T5148] io_issue_sqe+0x695/0x1250 [ 77.515215][ T5148] io_submit_sqes+0x96c/0x1e90 [ 77.519990][ T5148] __do_sys_io_uring_enter+0x103d/0x24e0 [ 77.525635][ T5148] ? io_submit_sqes+0x1e90/0x1e90 [ 77.530682][ T5148] ? ptrace_notify+0xfe/0x140 [ 77.535357][ T5148] ? lock_downgrade+0x6e0/0x6e0 [ 77.540212][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.545407][ T5148] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.550695][ T5148] ? _raw_spin_unlock_irq+0x2e/0x50 [ 77.555889][ T5148] ? ptrace_notify+0xfe/0x140 [ 77.560566][ T5148] do_syscall_64+0x39/0xb0 [ 77.565010][ T5148] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.571182][ T5148] RIP: 0033:0x7f607b0de549 [ 77.575614][ T5148] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 77.595219][ T5148] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 77.603894][ T5148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5148] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5148] close(3) = 0 [pid 5148] close(4) = 0 [pid 5148] close(5) = 0 [pid 5148] close(6) = 0 [pid 5148] close(7) = 0 [pid 5148] close(8) = -1 EBADF (Bad file descriptor) [pid 5148] close(9) = -1 EBADF (Bad file descriptor) [pid 5148] close(10) = -1 EBADF (Bad file descriptor) [pid 5148] close(11) = -1 EBADF (Bad file descriptor) [pid 5148] close(12) = -1 EBADF (Bad file descriptor) [pid 5148] close(13) = -1 EBADF (Bad file descriptor) [pid 5148] close(14) = -1 EBADF (Bad file descriptor) [pid 5148] close(15) = -1 EBADF (Bad file descriptor) [pid 5148] close(16) = -1 EBADF (Bad file descriptor) [pid 5148] close(17) = -1 EBADF (Bad file descriptor) [pid 5148] close(18) = -1 EBADF (Bad file descriptor) [pid 5148] close(19) = -1 EBADF (Bad file descriptor) [pid 5148] close(20) = -1 EBADF (Bad file descriptor) [pid 5148] close(21) = -1 EBADF (Bad file descriptor) [pid 5148] close(22) = -1 EBADF (Bad file descriptor) [pid 5148] close(23) = -1 EBADF (Bad file descriptor) [pid 5148] close(24) = -1 EBADF (Bad file descriptor) [pid 5148] close(25) = -1 EBADF (Bad file descriptor) [pid 5148] close(26) = -1 EBADF (Bad file descriptor) [pid 5148] close(27) = -1 EBADF (Bad file descriptor) [pid 5148] close(28) = -1 EBADF (Bad file descriptor) [pid 5148] close(29) = -1 EBADF (Bad file descriptor) [pid 5148] exit_group(0) = ? [pid 5148] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 63 ./strace-static-x86_64: Process 5149 attached [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4) = 4 [pid 5149] close(3) = 0 [pid 5149] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5149] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5149] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5149] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5149] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5149] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5149] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5149] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5149] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 77.611947][ T5148] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 77.620283][ T5148] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 77.628253][ T5148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 77.636219][ T5148] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 77.644197][ T5148] [pid 5149] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5149] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5149] write(7, "5", 1) = 1 [ 77.683547][ T5149] FAULT_INJECTION: forcing a failure. [ 77.683547][ T5149] name failslab, interval 1, probability 0, space 0, times 0 [ 77.696569][ T5149] CPU: 0 PID: 5149 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 77.706692][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 77.716779][ T5149] Call Trace: [ 77.720070][ T5149] [ 77.723001][ T5149] dump_stack_lvl+0xd1/0x138 [ 77.727606][ T5149] should_fail_ex.cold+0x5/0xa [ 77.732397][ T5149] ? io_issue_sqe+0x695/0x1250 [ 77.737206][ T5149] should_failslab+0x9/0x20 [ 77.741735][ T5149] __kmem_cache_alloc_node+0x5b/0x330 [ 77.747106][ T5149] ? ref_tracker_alloc+0x158/0x560 [ 77.752236][ T5149] kmalloc_trace+0x26/0x60 [ 77.756855][ T5149] ref_tracker_alloc+0x158/0x560 [ 77.761811][ T5149] ? __lock_acquire+0xbc3/0x56d0 [ 77.766773][ T5149] ? ref_tracker_free+0x6b0/0x6b0 [ 77.771845][ T5149] dst_init+0xe4/0x520 [ 77.775944][ T5149] dst_alloc+0x16f/0x1f0 [ 77.780192][ T5149] rt_dst_alloc+0x55/0x430 [ 77.784622][ T5149] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 77.790678][ T5149] ip_route_output_key_hash+0x18f/0x340 [ 77.796285][ T5149] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 77.802587][ T5149] dccp_v4_connect+0x7e1/0x1730 [ 77.807471][ T5149] __inet_stream_connect+0x69e/0xed0 [ 77.812804][ T5149] ? inet_listen+0x640/0x640 [ 77.817692][ T5149] ? mark_held_locks+0x9f/0xe0 [ 77.822485][ T5149] ? __local_bh_enable_ip+0xa4/0x130 [ 77.827796][ T5149] inet_stream_connect+0x57/0xa0 [ 77.832775][ T5149] ? __inet_stream_connect+0xed0/0xed0 [ 77.838250][ T5149] __sys_connect_file+0x153/0x1a0 [ 77.843301][ T5149] io_connect+0x3cc/0x720 [ 77.847689][ T5149] ? io_connect_prep+0x250/0x250 [ 77.852680][ T5149] ? receive_fd+0x110/0x110 [ 77.857213][ T5149] ? rcu_read_lock_sched_held+0x3e/0x70 [ 77.862781][ T5149] ? io_connect_prep+0x250/0x250 [ 77.872271][ T5149] io_issue_sqe+0x695/0x1250 [ 77.876904][ T5149] io_submit_sqes+0x96c/0x1e90 [ 77.881686][ T5149] __do_sys_io_uring_enter+0x103d/0x24e0 [ 77.887329][ T5149] ? io_submit_sqes+0x1e90/0x1e90 [ 77.892363][ T5149] ? ptrace_notify+0xfe/0x140 [ 77.897040][ T5149] ? lock_downgrade+0x6e0/0x6e0 [ 77.901950][ T5149] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.907187][ T5149] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.912384][ T5149] ? _raw_spin_unlock_irq+0x2e/0x50 [ 77.917598][ T5149] ? ptrace_notify+0xfe/0x140 [ 77.922301][ T5149] do_syscall_64+0x39/0xb0 [ 77.926724][ T5149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.932619][ T5149] RIP: 0033:0x7f607b0de549 [ 77.937029][ T5149] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 77.956986][ T5149] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 77.965405][ T5149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 77.973388][ T5149] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5149] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5149] close(3) = 0 [pid 5149] close(4) = 0 [pid 5149] close(5) = 0 [pid 5149] close(6) = 0 [pid 5149] close(7) = 0 [pid 5149] close(8) = -1 EBADF (Bad file descriptor) [pid 5149] close(9) = -1 EBADF (Bad file descriptor) [pid 5149] close(10) = -1 EBADF (Bad file descriptor) [pid 5149] close(11) = -1 EBADF (Bad file descriptor) [pid 5149] close(12) = -1 EBADF (Bad file descriptor) [pid 5149] close(13) = -1 EBADF (Bad file descriptor) [pid 5149] close(14) = -1 EBADF (Bad file descriptor) [pid 5149] close(15) = -1 EBADF (Bad file descriptor) [pid 5149] close(16) = -1 EBADF (Bad file descriptor) [pid 5149] close(17) = -1 EBADF (Bad file descriptor) [pid 5149] close(18) = -1 EBADF (Bad file descriptor) [pid 5149] close(19) = -1 EBADF (Bad file descriptor) [pid 5149] close(20) = -1 EBADF (Bad file descriptor) [pid 5149] close(21) = -1 EBADF (Bad file descriptor) [pid 5149] close(22) = -1 EBADF (Bad file descriptor) [pid 5149] close(23) = -1 EBADF (Bad file descriptor) [pid 5149] close(24) = -1 EBADF (Bad file descriptor) [pid 5149] close(25) = -1 EBADF (Bad file descriptor) [pid 5149] close(26) = -1 EBADF (Bad file descriptor) [pid 5149] close(27) = -1 EBADF (Bad file descriptor) [pid 5149] close(28) = -1 EBADF (Bad file descriptor) [pid 5149] close(29) = -1 EBADF (Bad file descriptor) [pid 5149] exit_group(0) = ? [pid 5149] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 64 ./strace-static-x86_64: Process 5150 attached [pid 5150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5150] setpgid(0, 0) = 0 [pid 5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5150] write(3, "1000", 4) = 4 [pid 5150] close(3) = 0 [pid 5150] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5150] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5150] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5150] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5150] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5150] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5150] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5150] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 77.981379][ T5149] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 77.989363][ T5149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 77.997425][ T5149] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 78.005529][ T5149] [pid 5150] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5150] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5150] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5150] write(7, "5", 1) = 1 [ 78.048525][ T5150] FAULT_INJECTION: forcing a failure. [ 78.048525][ T5150] name failslab, interval 1, probability 0, space 0, times 0 [ 78.061227][ T5150] CPU: 0 PID: 5150 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 78.071126][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 78.081200][ T5150] Call Trace: [ 78.084474][ T5150] [ 78.087401][ T5150] dump_stack_lvl+0xd1/0x138 [ 78.092002][ T5150] should_fail_ex.cold+0x5/0xa [ 78.096765][ T5150] ? __inet_hash_connect+0x95e/0x1ba0 [ 78.102154][ T5150] should_failslab+0x9/0x20 [ 78.106661][ T5150] kmem_cache_alloc+0x5a/0x320 [ 78.111430][ T5150] __inet_hash_connect+0x95e/0x1ba0 [ 78.116631][ T5150] ? __inet_lookup_listener+0xbf0/0xbf0 [ 78.122195][ T5150] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 78.128567][ T5150] dccp_v4_connect+0xb82/0x1730 [ 78.133464][ T5150] __inet_stream_connect+0x69e/0xed0 [ 78.138789][ T5150] ? inet_listen+0x640/0x640 [ 78.143421][ T5150] ? mark_held_locks+0x9f/0xe0 [ 78.148240][ T5150] ? __local_bh_enable_ip+0xa4/0x130 [ 78.153551][ T5150] inet_stream_connect+0x57/0xa0 [ 78.158519][ T5150] ? __inet_stream_connect+0xed0/0xed0 [ 78.164005][ T5150] __sys_connect_file+0x153/0x1a0 [ 78.169051][ T5150] io_connect+0x3cc/0x720 [ 78.173414][ T5150] ? io_connect_prep+0x250/0x250 [ 78.178378][ T5150] ? receive_fd+0x110/0x110 [ 78.182918][ T5150] ? rcu_read_lock_sched_held+0x3e/0x70 [ 78.188482][ T5150] ? io_connect_prep+0x250/0x250 [ 78.193449][ T5150] io_issue_sqe+0x695/0x1250 [ 78.198076][ T5150] io_submit_sqes+0x96c/0x1e90 [ 78.202889][ T5150] __do_sys_io_uring_enter+0x103d/0x24e0 [ 78.208647][ T5150] ? io_submit_sqes+0x1e90/0x1e90 [ 78.213696][ T5150] ? ptrace_notify+0xfe/0x140 [ 78.218396][ T5150] ? lock_downgrade+0x6e0/0x6e0 [ 78.223272][ T5150] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.230493][ T5150] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.235710][ T5150] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.240928][ T5150] ? ptrace_notify+0xfe/0x140 [ 78.245628][ T5150] do_syscall_64+0x39/0xb0 [ 78.250072][ T5150] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.255998][ T5150] RIP: 0033:0x7f607b0de549 [ 78.260438][ T5150] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.280084][ T5150] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 78.288524][ T5150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5150] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5150] close(3) = 0 [pid 5150] close(4) = 0 [pid 5150] close(5) = 0 [pid 5150] close(6) = 0 [pid 5150] close(7) = 0 [pid 5150] close(8) = -1 EBADF (Bad file descriptor) [pid 5150] close(9) = -1 EBADF (Bad file descriptor) [pid 5150] close(10) = -1 EBADF (Bad file descriptor) [pid 5150] close(11) = -1 EBADF (Bad file descriptor) [pid 5150] close(12) = -1 EBADF (Bad file descriptor) [pid 5150] close(13) = -1 EBADF (Bad file descriptor) [pid 5150] close(14) = -1 EBADF (Bad file descriptor) [pid 5150] close(15) = -1 EBADF (Bad file descriptor) [pid 5150] close(16) = -1 EBADF (Bad file descriptor) [pid 5150] close(17) = -1 EBADF (Bad file descriptor) [pid 5150] close(18) = -1 EBADF (Bad file descriptor) [pid 5150] close(19) = -1 EBADF (Bad file descriptor) [pid 5150] close(20) = -1 EBADF (Bad file descriptor) [pid 5150] close(21) = -1 EBADF (Bad file descriptor) [pid 5150] close(22) = -1 EBADF (Bad file descriptor) [pid 5150] close(23) = -1 EBADF (Bad file descriptor) [pid 5150] close(24) = -1 EBADF (Bad file descriptor) [pid 5150] close(25) = -1 EBADF (Bad file descriptor) [pid 5150] close(26) = -1 EBADF (Bad file descriptor) [pid 5150] close(27) = -1 EBADF (Bad file descriptor) [pid 5150] close(28) = -1 EBADF (Bad file descriptor) [pid 5150] close(29) = -1 EBADF (Bad file descriptor) [pid 5150] exit_group(0) = ? [pid 5150] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 65 ./strace-static-x86_64: Process 5151 attached [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5151] setpgid(0, 0) = 0 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5151] write(3, "1000", 4) = 4 [pid 5151] close(3) = 0 [pid 5151] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5151] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5151] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5151] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5151] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5151] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5151] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5151] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5151] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5151] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5151] write(7, "5", 1) = 1 [ 78.296514][ T5150] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 78.304495][ T5150] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 78.312480][ T5150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 78.320460][ T5150] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 78.328485][ T5150] [ 78.365152][ T5151] FAULT_INJECTION: forcing a failure. [ 78.365152][ T5151] name failslab, interval 1, probability 0, space 0, times 0 [ 78.378505][ T5151] CPU: 1 PID: 5151 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 78.388538][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 78.398599][ T5151] Call Trace: [ 78.401912][ T5151] [ 78.404867][ T5151] dump_stack_lvl+0xd1/0x138 [ 78.409496][ T5151] should_fail_ex.cold+0x5/0xa [ 78.414270][ T5151] ? io_issue_sqe+0x695/0x1250 [ 78.419402][ T5151] should_failslab+0x9/0x20 [ 78.424008][ T5151] __kmem_cache_alloc_node+0x5b/0x330 [ 78.429418][ T5151] ? ref_tracker_alloc+0x158/0x560 [ 78.434598][ T5151] kmalloc_trace+0x26/0x60 [ 78.439070][ T5151] ref_tracker_alloc+0x158/0x560 [ 78.444063][ T5151] ? __lock_acquire+0xbc3/0x56d0 [ 78.449041][ T5151] ? ref_tracker_free+0x6b0/0x6b0 [ 78.454128][ T5151] dst_init+0xe4/0x520 [ 78.458246][ T5151] dst_alloc+0x16f/0x1f0 [ 78.462534][ T5151] rt_dst_alloc+0x55/0x430 [ 78.467001][ T5151] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 78.473030][ T5151] ip_route_output_key_hash+0x18f/0x340 [ 78.478622][ T5151] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 78.484914][ T5151] dccp_v4_connect+0x7e1/0x1730 [ 78.489813][ T5151] __inet_stream_connect+0x69e/0xed0 [ 78.495139][ T5151] ? inet_listen+0x640/0x640 [ 78.499763][ T5151] ? mark_held_locks+0x9f/0xe0 [ 78.504552][ T5151] ? __local_bh_enable_ip+0xa4/0x130 [ 78.509863][ T5151] inet_stream_connect+0x57/0xa0 [ 78.514835][ T5151] ? __inet_stream_connect+0xed0/0xed0 [ 78.520328][ T5151] __sys_connect_file+0x153/0x1a0 [ 78.525381][ T5151] io_connect+0x3cc/0x720 [ 78.529746][ T5151] ? io_connect_prep+0x250/0x250 [ 78.534741][ T5151] ? receive_fd+0x110/0x110 [ 78.539282][ T5151] ? rcu_read_lock_sched_held+0x3e/0x70 [ 78.545023][ T5151] ? io_connect_prep+0x250/0x250 [ 78.549993][ T5151] io_issue_sqe+0x695/0x1250 [ 78.554612][ T5151] io_submit_sqes+0x96c/0x1e90 [ 78.559426][ T5151] __do_sys_io_uring_enter+0x103d/0x24e0 [ 78.565094][ T5151] ? io_submit_sqes+0x1e90/0x1e90 [ 78.570146][ T5151] ? ptrace_notify+0xfe/0x140 [ 78.574956][ T5151] ? lock_downgrade+0x6e0/0x6e0 [ 78.579883][ T5151] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.585133][ T5151] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.590353][ T5151] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.595574][ T5151] ? ptrace_notify+0xfe/0x140 [ 78.600279][ T5151] do_syscall_64+0x39/0xb0 [ 78.604727][ T5151] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.610647][ T5151] RIP: 0033:0x7f607b0de549 [ 78.615078][ T5151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.634828][ T5151] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 78.643307][ T5151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 78.651294][ T5151] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5151] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5151] close(3) = 0 [pid 5151] close(4) = 0 [pid 5151] close(5) = 0 [pid 5151] close(6) = 0 [pid 5151] close(7) = 0 [pid 5151] close(8) = -1 EBADF (Bad file descriptor) [pid 5151] close(9) = -1 EBADF (Bad file descriptor) [pid 5151] close(10) = -1 EBADF (Bad file descriptor) [pid 5151] close(11) = -1 EBADF (Bad file descriptor) [pid 5151] close(12) = -1 EBADF (Bad file descriptor) [pid 5151] close(13) = -1 EBADF (Bad file descriptor) [pid 5151] close(14) = -1 EBADF (Bad file descriptor) [pid 5151] close(15) = -1 EBADF (Bad file descriptor) [pid 5151] close(16) = -1 EBADF (Bad file descriptor) [pid 5151] close(17) = -1 EBADF (Bad file descriptor) [pid 5151] close(18) = -1 EBADF (Bad file descriptor) [pid 5151] close(19) = -1 EBADF (Bad file descriptor) [pid 5151] close(20) = -1 EBADF (Bad file descriptor) [pid 5151] close(21) = -1 EBADF (Bad file descriptor) [pid 5151] close(22) = -1 EBADF (Bad file descriptor) [pid 5151] close(23) = -1 EBADF (Bad file descriptor) [pid 5151] close(24) = -1 EBADF (Bad file descriptor) [pid 5151] close(25) = -1 EBADF (Bad file descriptor) [pid 5151] close(26) = -1 EBADF (Bad file descriptor) [pid 5151] close(27) = -1 EBADF (Bad file descriptor) [pid 5151] close(28) = -1 EBADF (Bad file descriptor) [pid 5151] close(29) = -1 EBADF (Bad file descriptor) [pid 5151] exit_group(0) = ? [pid 5151] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 66 ./strace-static-x86_64: Process 5152 attached [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5152] setpgid(0, 0) = 0 [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5152] write(3, "1000", 4) = 4 [pid 5152] close(3) = 0 [pid 5152] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5152] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5152] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5152] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5152] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5152] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5152] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5152] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5152] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5152] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5152] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5152] write(7, "5", 1) = 1 [ 78.659304][ T5151] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 78.667296][ T5151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 78.675281][ T5151] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 78.683289][ T5151] [ 78.722619][ T5152] FAULT_INJECTION: forcing a failure. [ 78.722619][ T5152] name failslab, interval 1, probability 0, space 0, times 0 [ 78.735356][ T5152] CPU: 0 PID: 5152 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 78.745268][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 78.755438][ T5152] Call Trace: [ 78.758729][ T5152] [ 78.761671][ T5152] dump_stack_lvl+0xd1/0x138 [ 78.766272][ T5152] should_fail_ex.cold+0x5/0xa [ 78.771036][ T5152] ? __inet_hash_connect+0x95e/0x1ba0 [ 78.776504][ T5152] should_failslab+0x9/0x20 [ 78.781019][ T5152] kmem_cache_alloc+0x5a/0x320 [ 78.785820][ T5152] __inet_hash_connect+0x95e/0x1ba0 [ 78.791051][ T5152] ? __inet_lookup_listener+0xbf0/0xbf0 [ 78.796609][ T5152] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 78.802953][ T5152] dccp_v4_connect+0xb82/0x1730 [ 78.807905][ T5152] __inet_stream_connect+0x69e/0xed0 [ 78.813199][ T5152] ? inet_listen+0x640/0x640 [ 78.817794][ T5152] ? mark_held_locks+0x9f/0xe0 [ 78.822586][ T5152] ? __local_bh_enable_ip+0xa4/0x130 [ 78.827898][ T5152] inet_stream_connect+0x57/0xa0 [ 78.832839][ T5152] ? __inet_stream_connect+0xed0/0xed0 [ 78.838316][ T5152] __sys_connect_file+0x153/0x1a0 [ 78.843382][ T5152] io_connect+0x3cc/0x720 [ 78.847748][ T5152] ? io_connect_prep+0x250/0x250 [ 78.852712][ T5152] ? receive_fd+0x110/0x110 [ 78.857260][ T5152] ? rcu_read_lock_sched_held+0x3e/0x70 [ 78.862913][ T5152] ? io_connect_prep+0x250/0x250 [ 78.868056][ T5152] io_issue_sqe+0x695/0x1250 [ 78.872677][ T5152] io_submit_sqes+0x96c/0x1e90 [ 78.877598][ T5152] __do_sys_io_uring_enter+0x103d/0x24e0 [ 78.883291][ T5152] ? io_submit_sqes+0x1e90/0x1e90 [ 78.888362][ T5152] ? ptrace_notify+0xfe/0x140 [ 78.893063][ T5152] ? lock_downgrade+0x6e0/0x6e0 [ 78.897949][ T5152] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.903177][ T5152] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.908400][ T5152] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.913623][ T5152] ? ptrace_notify+0xfe/0x140 [ 78.918332][ T5152] do_syscall_64+0x39/0xb0 [ 78.922775][ T5152] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.928777][ T5152] RIP: 0033:0x7f607b0de549 [ 78.933211][ T5152] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.952842][ T5152] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 78.961274][ T5152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5152] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5152] close(3) = 0 [pid 5152] close(4) = 0 [pid 5152] close(5) = 0 [pid 5152] close(6) = 0 [pid 5152] close(7) = 0 [pid 5152] close(8) = -1 EBADF (Bad file descriptor) [pid 5152] close(9) = -1 EBADF (Bad file descriptor) [pid 5152] close(10) = -1 EBADF (Bad file descriptor) [pid 5152] close(11) = -1 EBADF (Bad file descriptor) [pid 5152] close(12) = -1 EBADF (Bad file descriptor) [pid 5152] close(13) = -1 EBADF (Bad file descriptor) [pid 5152] close(14) = -1 EBADF (Bad file descriptor) [pid 5152] close(15) = -1 EBADF (Bad file descriptor) [pid 5152] close(16) = -1 EBADF (Bad file descriptor) [pid 5152] close(17) = -1 EBADF (Bad file descriptor) [pid 5152] close(18) = -1 EBADF (Bad file descriptor) [pid 5152] close(19) = -1 EBADF (Bad file descriptor) [pid 5152] close(20) = -1 EBADF (Bad file descriptor) [pid 5152] close(21) = -1 EBADF (Bad file descriptor) [pid 5152] close(22) = -1 EBADF (Bad file descriptor) [pid 5152] close(23) = -1 EBADF (Bad file descriptor) [pid 5152] close(24) = -1 EBADF (Bad file descriptor) [pid 5152] close(25) = -1 EBADF (Bad file descriptor) [pid 5152] close(26) = -1 EBADF (Bad file descriptor) [pid 5152] close(27) = -1 EBADF (Bad file descriptor) [pid 5152] close(28) = -1 EBADF (Bad file descriptor) [pid 5152] close(29) = -1 EBADF (Bad file descriptor) [pid 5152] exit_group(0) = ? [pid 5152] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5153 attached , child_tidptr=0x555555eff5d0) = 67 [pid 5153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5153] setpgid(0, 0) = 0 [pid 5153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5153] write(3, "1000", 4) = 4 [pid 5153] close(3) = 0 [pid 5153] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5153] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5153] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5153] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5153] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5153] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5153] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5153] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5153] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5153] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5153] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5153] write(7, "5", 1) = 1 [ 78.969270][ T5152] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 78.977448][ T5152] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 78.985433][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 78.993417][ T5152] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 79.001421][ T5152] [ 79.037358][ T5153] FAULT_INJECTION: forcing a failure. [ 79.037358][ T5153] name failslab, interval 1, probability 0, space 0, times 0 [ 79.057736][ T5153] CPU: 0 PID: 5153 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 79.069801][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 79.079962][ T5153] Call Trace: [ 79.083250][ T5153] [ 79.086176][ T5153] dump_stack_lvl+0xd1/0x138 [ 79.090857][ T5153] should_fail_ex.cold+0x5/0xa [ 79.095612][ T5153] ? io_issue_sqe+0x695/0x1250 [ 79.100392][ T5153] should_failslab+0x9/0x20 [ 79.104926][ T5153] __kmem_cache_alloc_node+0x5b/0x330 [ 79.110302][ T5153] ? ref_tracker_alloc+0x158/0x560 [ 79.115463][ T5153] kmalloc_trace+0x26/0x60 [ 79.119929][ T5153] ref_tracker_alloc+0x158/0x560 [ 79.124901][ T5153] ? __lock_acquire+0xbc3/0x56d0 [ 79.129840][ T5153] ? ref_tracker_free+0x6b0/0x6b0 [ 79.134910][ T5153] dst_init+0xe4/0x520 [ 79.139027][ T5153] dst_alloc+0x16f/0x1f0 [ 79.143311][ T5153] rt_dst_alloc+0x55/0x430 [ 79.147738][ T5153] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 79.153922][ T5153] ip_route_output_key_hash+0x18f/0x340 [ 79.159490][ T5153] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 79.165752][ T5153] dccp_v4_connect+0x7e1/0x1730 [ 79.170654][ T5153] __inet_stream_connect+0x69e/0xed0 [ 79.175988][ T5153] ? inet_listen+0x640/0x640 [ 79.180633][ T5153] ? mark_held_locks+0x9f/0xe0 [ 79.185423][ T5153] ? __local_bh_enable_ip+0xa4/0x130 [ 79.190713][ T5153] inet_stream_connect+0x57/0xa0 [ 79.195657][ T5153] ? __inet_stream_connect+0xed0/0xed0 [ 79.201178][ T5153] __sys_connect_file+0x153/0x1a0 [ 79.206341][ T5153] io_connect+0x3cc/0x720 [ 79.211671][ T5153] ? io_connect_prep+0x250/0x250 [ 79.216655][ T5153] ? receive_fd+0x110/0x110 [ 79.221194][ T5153] ? rcu_read_lock_sched_held+0x3e/0x70 [ 79.226748][ T5153] ? io_connect_prep+0x250/0x250 [ 79.231698][ T5153] io_issue_sqe+0x695/0x1250 [ 79.236320][ T5153] io_submit_sqes+0x96c/0x1e90 [ 79.241213][ T5153] __do_sys_io_uring_enter+0x103d/0x24e0 [ 79.246856][ T5153] ? io_submit_sqes+0x1e90/0x1e90 [ 79.251910][ T5153] ? ptrace_notify+0xfe/0x140 [ 79.256611][ T5153] ? lock_downgrade+0x6e0/0x6e0 [ 79.261480][ T5153] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.266706][ T5153] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.271914][ T5153] ? _raw_spin_unlock_irq+0x2e/0x50 [ 79.277145][ T5153] ? ptrace_notify+0xfe/0x140 [ 79.281838][ T5153] do_syscall_64+0x39/0xb0 [ 79.286276][ T5153] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.292183][ T5153] RIP: 0033:0x7f607b0de549 [ 79.296603][ T5153] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.316232][ T5153] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 79.324681][ T5153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5153] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5153] close(3) = 0 [pid 5153] close(4) = 0 [pid 5153] close(5) = 0 [pid 5153] close(6) = 0 [pid 5153] close(7) = 0 [pid 5153] close(8) = -1 EBADF (Bad file descriptor) [pid 5153] close(9) = -1 EBADF (Bad file descriptor) [pid 5153] close(10) = -1 EBADF (Bad file descriptor) [pid 5153] close(11) = -1 EBADF (Bad file descriptor) [pid 5153] close(12) = -1 EBADF (Bad file descriptor) [pid 5153] close(13) = -1 EBADF (Bad file descriptor) [pid 5153] close(14) = -1 EBADF (Bad file descriptor) [pid 5153] close(15) = -1 EBADF (Bad file descriptor) [pid 5153] close(16) = -1 EBADF (Bad file descriptor) [pid 5153] close(17) = -1 EBADF (Bad file descriptor) [pid 5153] close(18) = -1 EBADF (Bad file descriptor) [pid 5153] close(19) = -1 EBADF (Bad file descriptor) [pid 5153] close(20) = -1 EBADF (Bad file descriptor) [pid 5153] close(21) = -1 EBADF (Bad file descriptor) [pid 5153] close(22) = -1 EBADF (Bad file descriptor) [pid 5153] close(23) = -1 EBADF (Bad file descriptor) [pid 5153] close(24) = -1 EBADF (Bad file descriptor) [pid 5153] close(25) = -1 EBADF (Bad file descriptor) [pid 5153] close(26) = -1 EBADF (Bad file descriptor) [pid 5153] close(27) = -1 EBADF (Bad file descriptor) [pid 5153] close(28) = -1 EBADF (Bad file descriptor) [pid 5153] close(29) = -1 EBADF (Bad file descriptor) [pid 5153] exit_group(0) = ? [pid 5153] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 68 ./strace-static-x86_64: Process 5154 attached [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5154] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5154] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5154] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5154] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5154] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5154] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5154] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5154] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5154] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5154] write(7, "5", 1) = 1 [ 79.332662][ T5153] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 79.340642][ T5153] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 79.348721][ T5153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 79.356693][ T5153] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 79.364714][ T5153] [ 79.403111][ T5154] FAULT_INJECTION: forcing a failure. [ 79.403111][ T5154] name failslab, interval 1, probability 0, space 0, times 0 [ 79.415908][ T5154] CPU: 0 PID: 5154 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 79.425812][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 79.435886][ T5154] Call Trace: [ 79.439167][ T5154] [ 79.442100][ T5154] dump_stack_lvl+0xd1/0x138 [ 79.446760][ T5154] should_fail_ex.cold+0x5/0xa [ 79.451549][ T5154] ? io_issue_sqe+0x695/0x1250 [ 79.456324][ T5154] should_failslab+0x9/0x20 [ 79.460847][ T5154] __kmem_cache_alloc_node+0x5b/0x330 [ 79.466258][ T5154] ? ref_tracker_alloc+0x158/0x560 [ 79.471420][ T5154] kmalloc_trace+0x26/0x60 [ 79.475916][ T5154] ref_tracker_alloc+0x158/0x560 [ 79.480886][ T5154] ? __lock_acquire+0xbc3/0x56d0 [ 79.485886][ T5154] ? ref_tracker_free+0x6b0/0x6b0 [ 79.490985][ T5154] dst_init+0xe4/0x520 [ 79.495090][ T5154] dst_alloc+0x16f/0x1f0 [ 79.499412][ T5154] rt_dst_alloc+0x55/0x430 [ 79.503854][ T5154] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 79.509875][ T5154] ip_route_output_key_hash+0x18f/0x340 [ 79.515547][ T5154] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 79.521844][ T5154] dccp_v4_connect+0x7e1/0x1730 [ 79.526742][ T5154] __inet_stream_connect+0x69e/0xed0 [ 79.532064][ T5154] ? inet_listen+0x640/0x640 [ 79.537383][ T5154] ? mark_held_locks+0x9f/0xe0 [ 79.542170][ T5154] ? __local_bh_enable_ip+0xa4/0x130 [ 79.547573][ T5154] inet_stream_connect+0x57/0xa0 [ 79.552543][ T5154] ? __inet_stream_connect+0xed0/0xed0 [ 79.558043][ T5154] __sys_connect_file+0x153/0x1a0 [ 79.563094][ T5154] io_connect+0x3cc/0x720 [ 79.567465][ T5154] ? io_connect_prep+0x250/0x250 [ 79.572492][ T5154] ? receive_fd+0x110/0x110 [ 79.577056][ T5154] ? rcu_read_lock_sched_held+0x3e/0x70 [ 79.582633][ T5154] ? io_connect_prep+0x250/0x250 [ 79.587888][ T5154] io_issue_sqe+0x695/0x1250 [ 79.592531][ T5154] io_submit_sqes+0x96c/0x1e90 [ 79.597369][ T5154] __do_sys_io_uring_enter+0x103d/0x24e0 [ 79.603064][ T5154] ? io_submit_sqes+0x1e90/0x1e90 [ 79.608127][ T5154] ? ptrace_notify+0xfe/0x140 [ 79.612826][ T5154] ? lock_downgrade+0x6e0/0x6e0 [ 79.617705][ T5154] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.622930][ T5154] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.628145][ T5154] ? _raw_spin_unlock_irq+0x2e/0x50 [ 79.633366][ T5154] ? ptrace_notify+0xfe/0x140 [ 79.638069][ T5154] do_syscall_64+0x39/0xb0 [ 79.642519][ T5154] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.648445][ T5154] RIP: 0033:0x7f607b0de549 [ 79.652886][ T5154] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.672709][ T5154] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 79.681146][ T5154] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 79.689158][ T5154] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5154] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5154] close(3) = 0 [pid 5154] close(4) = 0 [pid 5154] close(5) = 0 [pid 5154] close(6) = 0 [pid 5154] close(7) = 0 [pid 5154] close(8) = -1 EBADF (Bad file descriptor) [pid 5154] close(9) = -1 EBADF (Bad file descriptor) [pid 5154] close(10) = -1 EBADF (Bad file descriptor) [pid 5154] close(11) = -1 EBADF (Bad file descriptor) [pid 5154] close(12) = -1 EBADF (Bad file descriptor) [pid 5154] close(13) = -1 EBADF (Bad file descriptor) [pid 5154] close(14) = -1 EBADF (Bad file descriptor) [pid 5154] close(15) = -1 EBADF (Bad file descriptor) [pid 5154] close(16) = -1 EBADF (Bad file descriptor) [pid 5154] close(17) = -1 EBADF (Bad file descriptor) [pid 5154] close(18) = -1 EBADF (Bad file descriptor) [pid 5154] close(19) = -1 EBADF (Bad file descriptor) [pid 5154] close(20) = -1 EBADF (Bad file descriptor) [pid 5154] close(21) = -1 EBADF (Bad file descriptor) [pid 5154] close(22) = -1 EBADF (Bad file descriptor) [pid 5154] close(23) = -1 EBADF (Bad file descriptor) [pid 5154] close(24) = -1 EBADF (Bad file descriptor) [pid 5154] close(25) = -1 EBADF (Bad file descriptor) [pid 5154] close(26) = -1 EBADF (Bad file descriptor) [pid 5154] close(27) = -1 EBADF (Bad file descriptor) [pid 5154] close(28) = -1 EBADF (Bad file descriptor) [pid 5154] close(29) = -1 EBADF (Bad file descriptor) [pid 5154] exit_group(0) = ? [pid 5154] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 69 ./strace-static-x86_64: Process 5155 attached [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5155] setpgid(0, 0) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5155] write(3, "1000", 4) = 4 [pid 5155] close(3) = 0 [pid 5155] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5155] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5155] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5155] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5155] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5155] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5155] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 79.697153][ T5154] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 79.705166][ T5154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 79.713166][ T5154] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 79.721218][ T5154] [pid 5155] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5155] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5155] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5155] write(7, "5", 1) = 1 [ 79.768874][ T5155] FAULT_INJECTION: forcing a failure. [ 79.768874][ T5155] name failslab, interval 1, probability 0, space 0, times 0 [ 79.781562][ T5155] CPU: 1 PID: 5155 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 79.791469][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 79.802199][ T5155] Call Trace: [ 79.805484][ T5155] [ 79.808414][ T5155] dump_stack_lvl+0xd1/0x138 [ 79.813024][ T5155] should_fail_ex.cold+0x5/0xa [ 79.817808][ T5155] ? __inet_hash_connect+0x95e/0x1ba0 [ 79.823217][ T5155] should_failslab+0x9/0x20 [ 79.827730][ T5155] kmem_cache_alloc+0x5a/0x320 [ 79.832514][ T5155] __inet_hash_connect+0x95e/0x1ba0 [ 79.837727][ T5155] ? __inet_lookup_listener+0xbf0/0xbf0 [ 79.843287][ T5155] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 79.849719][ T5155] dccp_v4_connect+0xb82/0x1730 [ 79.854624][ T5155] __inet_stream_connect+0x69e/0xed0 [ 79.859943][ T5155] ? inet_listen+0x640/0x640 [ 79.864577][ T5155] ? mark_held_locks+0x9f/0xe0 [ 79.869348][ T5155] ? __local_bh_enable_ip+0xa4/0x130 [ 79.874654][ T5155] inet_stream_connect+0x57/0xa0 [ 79.879613][ T5155] ? __inet_stream_connect+0xed0/0xed0 [ 79.885086][ T5155] __sys_connect_file+0x153/0x1a0 [ 79.890142][ T5155] io_connect+0x3cc/0x720 [ 79.894526][ T5155] ? io_connect_prep+0x250/0x250 [ 79.899555][ T5155] ? receive_fd+0x110/0x110 [ 79.904076][ T5155] ? rcu_read_lock_sched_held+0x3e/0x70 [ 79.909625][ T5155] ? io_connect_prep+0x250/0x250 [ 79.914578][ T5155] io_issue_sqe+0x695/0x1250 [ 79.919195][ T5155] io_submit_sqes+0x96c/0x1e90 [ 79.924001][ T5155] __do_sys_io_uring_enter+0x103d/0x24e0 [ 79.929646][ T5155] ? io_submit_sqes+0x1e90/0x1e90 [ 79.934697][ T5155] ? ptrace_notify+0xfe/0x140 [ 79.939400][ T5155] ? lock_downgrade+0x6e0/0x6e0 [ 79.944287][ T5155] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.949531][ T5155] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.954735][ T5155] ? _raw_spin_unlock_irq+0x2e/0x50 [ 79.959952][ T5155] ? ptrace_notify+0xfe/0x140 [ 79.964671][ T5155] do_syscall_64+0x39/0xb0 [ 79.969096][ T5155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.974994][ T5155] RIP: 0033:0x7f607b0de549 [ 79.979408][ T5155] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.999136][ T5155] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 80.007559][ T5155] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5155] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5155] close(3) = 0 [pid 5155] close(4) = 0 [pid 5155] close(5) = 0 [pid 5155] close(6) = 0 [pid 5155] close(7) = 0 [pid 5155] close(8) = -1 EBADF (Bad file descriptor) [pid 5155] close(9) = -1 EBADF (Bad file descriptor) [pid 5155] close(10) = -1 EBADF (Bad file descriptor) [pid 5155] close(11) = -1 EBADF (Bad file descriptor) [pid 5155] close(12) = -1 EBADF (Bad file descriptor) [pid 5155] close(13) = -1 EBADF (Bad file descriptor) [pid 5155] close(14) = -1 EBADF (Bad file descriptor) [pid 5155] close(15) = -1 EBADF (Bad file descriptor) [pid 5155] close(16) = -1 EBADF (Bad file descriptor) [pid 5155] close(17) = -1 EBADF (Bad file descriptor) [pid 5155] close(18) = -1 EBADF (Bad file descriptor) [pid 5155] close(19) = -1 EBADF (Bad file descriptor) [pid 5155] close(20) = -1 EBADF (Bad file descriptor) [pid 5155] close(21) = -1 EBADF (Bad file descriptor) [pid 5155] close(22) = -1 EBADF (Bad file descriptor) [pid 5155] close(23) = -1 EBADF (Bad file descriptor) [pid 5155] close(24) = -1 EBADF (Bad file descriptor) [pid 5155] close(25) = -1 EBADF (Bad file descriptor) [pid 5155] close(26) = -1 EBADF (Bad file descriptor) [pid 5155] close(27) = -1 EBADF (Bad file descriptor) [pid 5155] close(28) = -1 EBADF (Bad file descriptor) [pid 5155] close(29) = -1 EBADF (Bad file descriptor) [pid 5155] exit_group(0) = ? [pid 5155] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5156 attached , child_tidptr=0x555555eff5d0) = 70 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5156] setpgid(0, 0) = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5156] write(3, "1000", 4) = 4 [pid 5156] close(3) = 0 [pid 5156] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5156] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5156] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5156] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5156] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5156] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5156] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5156] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5156] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5156] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5156] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5156] write(7, "5", 1) = 1 [ 80.015533][ T5155] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 80.023510][ T5155] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 80.031488][ T5155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 80.039470][ T5155] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 80.047495][ T5155] [ 80.085557][ T5156] FAULT_INJECTION: forcing a failure. [ 80.085557][ T5156] name failslab, interval 1, probability 0, space 0, times 0 [ 80.098256][ T5156] CPU: 0 PID: 5156 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 80.108150][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 80.118244][ T5156] Call Trace: [ 80.121522][ T5156] [ 80.124469][ T5156] dump_stack_lvl+0xd1/0x138 [ 80.129096][ T5156] should_fail_ex.cold+0x5/0xa [ 80.133894][ T5156] ? __inet_hash_connect+0x95e/0x1ba0 [ 80.139291][ T5156] should_failslab+0x9/0x20 [ 80.143840][ T5156] kmem_cache_alloc+0x5a/0x320 [ 80.148616][ T5156] __inet_hash_connect+0x95e/0x1ba0 [ 80.153824][ T5156] ? __inet_lookup_listener+0xbf0/0xbf0 [ 80.159401][ T5156] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 80.165855][ T5156] dccp_v4_connect+0xb82/0x1730 [ 80.170744][ T5156] __inet_stream_connect+0x69e/0xed0 [ 80.176076][ T5156] ? inet_listen+0x640/0x640 [ 80.180708][ T5156] ? mark_held_locks+0x9f/0xe0 [ 80.185501][ T5156] ? __local_bh_enable_ip+0xa4/0x130 [ 80.190793][ T5156] inet_stream_connect+0x57/0xa0 [ 80.195739][ T5156] ? __inet_stream_connect+0xed0/0xed0 [ 80.201216][ T5156] __sys_connect_file+0x153/0x1a0 [ 80.206280][ T5156] io_connect+0x3cc/0x720 [ 80.210641][ T5156] ? io_connect_prep+0x250/0x250 [ 80.215716][ T5156] ? receive_fd+0x110/0x110 [ 80.220269][ T5156] ? rcu_read_lock_sched_held+0x3e/0x70 [ 80.225841][ T5156] ? io_connect_prep+0x250/0x250 [ 80.230814][ T5156] io_issue_sqe+0x695/0x1250 [ 80.235437][ T5156] io_submit_sqes+0x96c/0x1e90 [ 80.240244][ T5156] __do_sys_io_uring_enter+0x103d/0x24e0 [ 80.246034][ T5156] ? io_submit_sqes+0x1e90/0x1e90 [ 80.251115][ T5156] ? ptrace_notify+0xfe/0x140 [ 80.255821][ T5156] ? lock_downgrade+0x6e0/0x6e0 [ 80.260709][ T5156] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.265957][ T5156] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.271183][ T5156] ? _raw_spin_unlock_irq+0x2e/0x50 [ 80.276409][ T5156] ? ptrace_notify+0xfe/0x140 [ 80.281117][ T5156] do_syscall_64+0x39/0xb0 [ 80.285563][ T5156] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.291477][ T5156] RIP: 0033:0x7f607b0de549 [ 80.295904][ T5156] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.315547][ T5156] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 80.323983][ T5156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5156] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5156] close(3) = 0 [pid 5156] close(4) = 0 [pid 5156] close(5) = 0 [pid 5156] close(6) = 0 [pid 5156] close(7) = 0 [pid 5156] close(8) = -1 EBADF (Bad file descriptor) [pid 5156] close(9) = -1 EBADF (Bad file descriptor) [pid 5156] close(10) = -1 EBADF (Bad file descriptor) [pid 5156] close(11) = -1 EBADF (Bad file descriptor) [pid 5156] close(12) = -1 EBADF (Bad file descriptor) [pid 5156] close(13) = -1 EBADF (Bad file descriptor) [pid 5156] close(14) = -1 EBADF (Bad file descriptor) [pid 5156] close(15) = -1 EBADF (Bad file descriptor) [pid 5156] close(16) = -1 EBADF (Bad file descriptor) [pid 5156] close(17) = -1 EBADF (Bad file descriptor) [pid 5156] close(18) = -1 EBADF (Bad file descriptor) [pid 5156] close(19) = -1 EBADF (Bad file descriptor) [pid 5156] close(20) = -1 EBADF (Bad file descriptor) [pid 5156] close(21) = -1 EBADF (Bad file descriptor) [pid 5156] close(22) = -1 EBADF (Bad file descriptor) [pid 5156] close(23) = -1 EBADF (Bad file descriptor) [pid 5156] close(24) = -1 EBADF (Bad file descriptor) [pid 5156] close(25) = -1 EBADF (Bad file descriptor) [pid 5156] close(26) = -1 EBADF (Bad file descriptor) [pid 5156] close(27) = -1 EBADF (Bad file descriptor) [pid 5156] close(28) = -1 EBADF (Bad file descriptor) [pid 5156] close(29) = -1 EBADF (Bad file descriptor) [pid 5156] exit_group(0) = ? [pid 5156] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5157 attached , child_tidptr=0x555555eff5d0) = 71 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5157] setpgid(0, 0) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5157] write(3, "1000", 4) = 4 [pid 5157] close(3) = 0 [pid 5157] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5157] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5157] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5157] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5157] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5157] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5157] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5157] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5157] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5157] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5157] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5157] write(7, "5", 1) = 1 [ 80.331970][ T5156] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 80.339956][ T5156] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 80.347942][ T5156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 80.357056][ T5156] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 80.365082][ T5156] [ 80.410795][ T5157] FAULT_INJECTION: forcing a failure. [ 80.410795][ T5157] name failslab, interval 1, probability 0, space 0, times 0 [ 80.424660][ T5157] CPU: 0 PID: 5157 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 80.434692][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 80.444785][ T5157] Call Trace: [ 80.448075][ T5157] [ 80.451003][ T5157] dump_stack_lvl+0xd1/0x138 [ 80.455664][ T5157] should_fail_ex.cold+0x5/0xa [ 80.460439][ T5157] ? io_issue_sqe+0x695/0x1250 [ 80.465251][ T5157] should_failslab+0x9/0x20 [ 80.469777][ T5157] __kmem_cache_alloc_node+0x5b/0x330 [ 80.475150][ T5157] ? ref_tracker_alloc+0x158/0x560 [ 80.480288][ T5157] kmalloc_trace+0x26/0x60 [ 80.484756][ T5157] ref_tracker_alloc+0x158/0x560 [ 80.489729][ T5157] ? __lock_acquire+0xbc3/0x56d0 [ 80.494776][ T5157] ? ref_tracker_free+0x6b0/0x6b0 [ 80.499856][ T5157] dst_init+0xe4/0x520 [ 80.503932][ T5157] dst_alloc+0x16f/0x1f0 [ 80.508271][ T5157] rt_dst_alloc+0x55/0x430 [ 80.512692][ T5157] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 80.518688][ T5157] ip_route_output_key_hash+0x18f/0x340 [ 80.524239][ T5157] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 80.530546][ T5157] dccp_v4_connect+0x7e1/0x1730 [ 80.536402][ T5157] __inet_stream_connect+0x69e/0xed0 [ 80.541721][ T5157] ? inet_listen+0x640/0x640 [ 80.546358][ T5157] ? mark_held_locks+0x9f/0xe0 [ 80.551129][ T5157] ? __local_bh_enable_ip+0xa4/0x130 [ 80.556416][ T5157] inet_stream_connect+0x57/0xa0 [ 80.561368][ T5157] ? __inet_stream_connect+0xed0/0xed0 [ 80.566835][ T5157] __sys_connect_file+0x153/0x1a0 [ 80.571878][ T5157] io_connect+0x3cc/0x720 [ 80.576254][ T5157] ? io_connect_prep+0x250/0x250 [ 80.581199][ T5157] ? receive_fd+0x110/0x110 [ 80.585715][ T5157] ? rcu_read_lock_sched_held+0x3e/0x70 [ 80.591262][ T5157] ? io_connect_prep+0x250/0x250 [ 80.596226][ T5157] io_issue_sqe+0x695/0x1250 [ 80.600847][ T5157] io_submit_sqes+0x96c/0x1e90 [ 80.605712][ T5157] __do_sys_io_uring_enter+0x103d/0x24e0 [ 80.611355][ T5157] ? io_submit_sqes+0x1e90/0x1e90 [ 80.616387][ T5157] ? ptrace_notify+0xfe/0x140 [ 80.621080][ T5157] ? lock_downgrade+0x6e0/0x6e0 [ 80.625953][ T5157] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.631171][ T5157] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.636419][ T5157] ? _raw_spin_unlock_irq+0x2e/0x50 [ 80.641663][ T5157] ? ptrace_notify+0xfe/0x140 [ 80.646373][ T5157] do_syscall_64+0x39/0xb0 [ 80.650842][ T5157] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.656737][ T5157] RIP: 0033:0x7f607b0de549 [ 80.661151][ T5157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 80.680868][ T5157] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 80.689352][ T5157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 80.697361][ T5157] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5157] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5157] close(3) = 0 [pid 5157] close(4) = 0 [pid 5157] close(5) = 0 [pid 5157] close(6) = 0 [pid 5157] close(7) = 0 [pid 5157] close(8) = -1 EBADF (Bad file descriptor) [pid 5157] close(9) = -1 EBADF (Bad file descriptor) [pid 5157] close(10) = -1 EBADF (Bad file descriptor) [pid 5157] close(11) = -1 EBADF (Bad file descriptor) [pid 5157] close(12) = -1 EBADF (Bad file descriptor) [pid 5157] close(13) = -1 EBADF (Bad file descriptor) [pid 5157] close(14) = -1 EBADF (Bad file descriptor) [pid 5157] close(15) = -1 EBADF (Bad file descriptor) [pid 5157] close(16) = -1 EBADF (Bad file descriptor) [pid 5157] close(17) = -1 EBADF (Bad file descriptor) [pid 5157] close(18) = -1 EBADF (Bad file descriptor) [pid 5157] close(19) = -1 EBADF (Bad file descriptor) [pid 5157] close(20) = -1 EBADF (Bad file descriptor) [pid 5157] close(21) = -1 EBADF (Bad file descriptor) [pid 5157] close(22) = -1 EBADF (Bad file descriptor) [pid 5157] close(23) = -1 EBADF (Bad file descriptor) [pid 5157] close(24) = -1 EBADF (Bad file descriptor) [pid 5157] close(25) = -1 EBADF (Bad file descriptor) [pid 5157] close(26) = -1 EBADF (Bad file descriptor) [pid 5157] close(27) = -1 EBADF (Bad file descriptor) [pid 5157] close(28) = -1 EBADF (Bad file descriptor) [pid 5157] close(29) = -1 EBADF (Bad file descriptor) [pid 5157] exit_group(0) = ? [pid 5157] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5158 attached , child_tidptr=0x555555eff5d0) = 72 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] setpgid(0, 0) = 0 [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5158] write(3, "1000", 4) = 4 [pid 5158] close(3) = 0 [pid 5158] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5158] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5158] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5158] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5158] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5158] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5158] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5158] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5158] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5158] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5158] write(7, "5", 1) = 1 [ 80.705347][ T5157] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 80.713462][ T5157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 80.721449][ T5157] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 80.729452][ T5157] [ 80.765280][ T5158] FAULT_INJECTION: forcing a failure. [ 80.765280][ T5158] name failslab, interval 1, probability 0, space 0, times 0 [ 80.778879][ T5158] CPU: 1 PID: 5158 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 80.788806][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 80.798947][ T5158] Call Trace: [ 80.802240][ T5158] [ 80.805206][ T5158] dump_stack_lvl+0xd1/0x138 [ 80.809830][ T5158] should_fail_ex.cold+0x5/0xa [ 80.814599][ T5158] ? io_issue_sqe+0x695/0x1250 [ 80.819390][ T5158] should_failslab+0x9/0x20 [ 80.823949][ T5158] __kmem_cache_alloc_node+0x5b/0x330 [ 80.829348][ T5158] ? ref_tracker_alloc+0x158/0x560 [ 80.834495][ T5158] kmalloc_trace+0x26/0x60 [ 80.838918][ T5158] ref_tracker_alloc+0x158/0x560 [ 80.843870][ T5158] ? __lock_acquire+0xbc3/0x56d0 [ 80.848808][ T5158] ? ref_tracker_free+0x6b0/0x6b0 [ 80.853851][ T5158] dst_init+0xe4/0x520 [ 80.857927][ T5158] dst_alloc+0x16f/0x1f0 [ 80.862175][ T5158] rt_dst_alloc+0x55/0x430 [ 80.866598][ T5158] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 80.872619][ T5158] ip_route_output_key_hash+0x18f/0x340 [ 80.878216][ T5158] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 80.884508][ T5158] dccp_v4_connect+0x7e1/0x1730 [ 80.889379][ T5158] __inet_stream_connect+0x69e/0xed0 [ 80.894680][ T5158] ? inet_listen+0x640/0x640 [ 80.899283][ T5158] ? mark_held_locks+0x9f/0xe0 [ 80.904080][ T5158] ? __local_bh_enable_ip+0xa4/0x130 [ 80.909413][ T5158] inet_stream_connect+0x57/0xa0 [ 80.914372][ T5158] ? __inet_stream_connect+0xed0/0xed0 [ 80.919860][ T5158] __sys_connect_file+0x153/0x1a0 [ 80.924916][ T5158] io_connect+0x3cc/0x720 [ 80.929256][ T5158] ? io_connect_prep+0x250/0x250 [ 80.934212][ T5158] ? receive_fd+0x110/0x110 [ 80.938732][ T5158] ? rcu_read_lock_sched_held+0x3e/0x70 [ 80.944281][ T5158] ? io_connect_prep+0x250/0x250 [ 80.949226][ T5158] io_issue_sqe+0x695/0x1250 [ 80.953829][ T5158] io_submit_sqes+0x96c/0x1e90 [ 80.958646][ T5158] __do_sys_io_uring_enter+0x103d/0x24e0 [ 80.964342][ T5158] ? io_submit_sqes+0x1e90/0x1e90 [ 80.969402][ T5158] ? ptrace_notify+0xfe/0x140 [ 80.974098][ T5158] ? lock_downgrade+0x6e0/0x6e0 [ 80.978979][ T5158] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.984199][ T5158] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.989423][ T5158] ? _raw_spin_unlock_irq+0x2e/0x50 [ 80.994624][ T5158] ? ptrace_notify+0xfe/0x140 [ 80.999307][ T5158] do_syscall_64+0x39/0xb0 [ 81.003731][ T5158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.009636][ T5158] RIP: 0033:0x7f607b0de549 [ 81.014082][ T5158] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 81.033732][ T5158] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 81.042181][ T5158] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 81.050156][ T5158] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 81.058392][ T5158] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5158] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5158] close(3) = 0 [pid 5158] close(4) = 0 [pid 5158] close(5) = 0 [pid 5158] close(6) = 0 [pid 5158] close(7) = 0 [pid 5158] close(8) = -1 EBADF (Bad file descriptor) [pid 5158] close(9) = -1 EBADF (Bad file descriptor) [pid 5158] close(10) = -1 EBADF (Bad file descriptor) [pid 5158] close(11) = -1 EBADF (Bad file descriptor) [pid 5158] close(12) = -1 EBADF (Bad file descriptor) [pid 5158] close(13) = -1 EBADF (Bad file descriptor) [pid 5158] close(14) = -1 EBADF (Bad file descriptor) [pid 5158] close(15) = -1 EBADF (Bad file descriptor) [pid 5158] close(16) = -1 EBADF (Bad file descriptor) [pid 5158] close(17) = -1 EBADF (Bad file descriptor) [pid 5158] close(18) = -1 EBADF (Bad file descriptor) [pid 5158] close(19) = -1 EBADF (Bad file descriptor) [pid 5158] close(20) = -1 EBADF (Bad file descriptor) [pid 5158] close(21) = -1 EBADF (Bad file descriptor) [pid 5158] close(22) = -1 EBADF (Bad file descriptor) [pid 5158] close(23) = -1 EBADF (Bad file descriptor) [pid 5158] close(24) = -1 EBADF (Bad file descriptor) [pid 5158] close(25) = -1 EBADF (Bad file descriptor) [pid 5158] close(26) = -1 EBADF (Bad file descriptor) [pid 5158] close(27) = -1 EBADF (Bad file descriptor) [pid 5158] close(28) = -1 EBADF (Bad file descriptor) [pid 5158] close(29) = -1 EBADF (Bad file descriptor) [pid 5158] exit_group(0) = ? [pid 5158] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 73 ./strace-static-x86_64: Process 5159 attached [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5159] setpgid(0, 0) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] write(3, "1000", 4) = 4 [pid 5159] close(3) = 0 [pid 5159] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5159] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5159] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5159] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5159] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5159] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5159] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5159] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5159] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5159] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5159] write(7, "5", 1) = 1 [ 81.066372][ T5158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 81.074358][ T5158] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 81.082915][ T5158] [ 81.125709][ T5159] FAULT_INJECTION: forcing a failure. [ 81.125709][ T5159] name failslab, interval 1, probability 0, space 0, times 0 [ 81.139212][ T5159] CPU: 0 PID: 5159 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 81.149204][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 81.159259][ T5159] Call Trace: [ 81.162537][ T5159] [ 81.165465][ T5159] dump_stack_lvl+0xd1/0x138 [ 81.170075][ T5159] should_fail_ex.cold+0x5/0xa [ 81.174832][ T5159] ? io_issue_sqe+0x695/0x1250 [ 81.179598][ T5159] should_failslab+0x9/0x20 [ 81.184100][ T5159] __kmem_cache_alloc_node+0x5b/0x330 [ 81.189564][ T5159] ? ref_tracker_alloc+0x158/0x560 [ 81.194693][ T5159] kmalloc_trace+0x26/0x60 [ 81.199201][ T5159] ref_tracker_alloc+0x158/0x560 [ 81.204137][ T5159] ? __lock_acquire+0xbc3/0x56d0 [ 81.209069][ T5159] ? ref_tracker_free+0x6b0/0x6b0 [ 81.214129][ T5159] dst_init+0xe4/0x520 [ 81.218198][ T5159] dst_alloc+0x16f/0x1f0 [ 81.222443][ T5159] rt_dst_alloc+0x55/0x430 [ 81.226857][ T5159] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 81.232848][ T5159] ip_route_output_key_hash+0x18f/0x340 [ 81.238410][ T5159] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 81.244669][ T5159] dccp_v4_connect+0x7e1/0x1730 [ 81.249536][ T5159] __inet_stream_connect+0x69e/0xed0 [ 81.254829][ T5159] ? inet_listen+0x640/0x640 [ 81.259423][ T5159] ? mark_held_locks+0x9f/0xe0 [ 81.264183][ T5159] ? __local_bh_enable_ip+0xa4/0x130 [ 81.269464][ T5159] inet_stream_connect+0x57/0xa0 [ 81.274407][ T5159] ? __inet_stream_connect+0xed0/0xed0 [ 81.279867][ T5159] __sys_connect_file+0x153/0x1a0 [ 81.284887][ T5159] io_connect+0x3cc/0x720 [ 81.289218][ T5159] ? io_connect_prep+0x250/0x250 [ 81.294245][ T5159] ? receive_fd+0x110/0x110 [ 81.298758][ T5159] ? rcu_read_lock_sched_held+0x3e/0x70 [ 81.304458][ T5159] ? io_connect_prep+0x250/0x250 [ 81.309501][ T5159] io_issue_sqe+0x695/0x1250 [ 81.314091][ T5159] io_submit_sqes+0x96c/0x1e90 [ 81.318883][ T5159] __do_sys_io_uring_enter+0x103d/0x24e0 [ 81.324520][ T5159] ? io_submit_sqes+0x1e90/0x1e90 [ 81.329541][ T5159] ? ptrace_notify+0xfe/0x140 [ 81.334232][ T5159] ? lock_downgrade+0x6e0/0x6e0 [ 81.339084][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.344286][ T5159] ? lockdep_hardirqs_on+0x7d/0x100 [ 81.349493][ T5159] ? _raw_spin_unlock_irq+0x2e/0x50 [ 81.354688][ T5159] ? ptrace_notify+0xfe/0x140 [ 81.359367][ T5159] do_syscall_64+0x39/0xb0 [ 81.363870][ T5159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.369846][ T5159] RIP: 0033:0x7f607b0de549 [ 81.374263][ T5159] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 81.394005][ T5159] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 81.402429][ T5159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 81.410404][ T5159] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5159] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5159] close(3) = 0 [pid 5159] close(4) = 0 [pid 5159] close(5) = 0 [pid 5159] close(6) = 0 [pid 5159] close(7) = 0 [pid 5159] close(8) = -1 EBADF (Bad file descriptor) [pid 5159] close(9) = -1 EBADF (Bad file descriptor) [pid 5159] close(10) = -1 EBADF (Bad file descriptor) [pid 5159] close(11) = -1 EBADF (Bad file descriptor) [pid 5159] close(12) = -1 EBADF (Bad file descriptor) [pid 5159] close(13) = -1 EBADF (Bad file descriptor) [pid 5159] close(14) = -1 EBADF (Bad file descriptor) [pid 5159] close(15) = -1 EBADF (Bad file descriptor) [pid 5159] close(16) = -1 EBADF (Bad file descriptor) [pid 5159] close(17) = -1 EBADF (Bad file descriptor) [pid 5159] close(18) = -1 EBADF (Bad file descriptor) [pid 5159] close(19) = -1 EBADF (Bad file descriptor) [pid 5159] close(20) = -1 EBADF (Bad file descriptor) [pid 5159] close(21) = -1 EBADF (Bad file descriptor) [pid 5159] close(22) = -1 EBADF (Bad file descriptor) [pid 5159] close(23) = -1 EBADF (Bad file descriptor) [pid 5159] close(24) = -1 EBADF (Bad file descriptor) [pid 5159] close(25) = -1 EBADF (Bad file descriptor) [pid 5159] close(26) = -1 EBADF (Bad file descriptor) [pid 5159] close(27) = -1 EBADF (Bad file descriptor) [pid 5159] close(28) = -1 EBADF (Bad file descriptor) [pid 5159] close(29) = -1 EBADF (Bad file descriptor) [pid 5159] exit_group(0) = ? [pid 5159] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5160 attached , child_tidptr=0x555555eff5d0) = 74 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5160] setpgid(0, 0) = 0 [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 81.418369][ T5159] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 81.427997][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 81.436147][ T5159] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 81.444129][ T5159] [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5160] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5160] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5160] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5160] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5160] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5160] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5160] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5160] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5160] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5160] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5160] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5160] write(7, "5", 1) = 1 [ 81.503474][ T5160] FAULT_INJECTION: forcing a failure. [ 81.503474][ T5160] name failslab, interval 1, probability 0, space 0, times 0 [ 81.516150][ T5160] CPU: 0 PID: 5160 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 81.526050][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 81.536103][ T5160] Call Trace: [ 81.539411][ T5160] [ 81.542340][ T5160] dump_stack_lvl+0xd1/0x138 [ 81.546933][ T5160] should_fail_ex.cold+0x5/0xa [ 81.551697][ T5160] ? __inet_hash_connect+0x95e/0x1ba0 [ 81.557184][ T5160] should_failslab+0x9/0x20 [ 81.561698][ T5160] kmem_cache_alloc+0x5a/0x320 [ 81.566472][ T5160] __inet_hash_connect+0x95e/0x1ba0 [ 81.571693][ T5160] ? __inet_lookup_listener+0xbf0/0xbf0 [ 81.577287][ T5160] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 81.583674][ T5160] dccp_v4_connect+0xb82/0x1730 [ 81.588582][ T5160] __inet_stream_connect+0x69e/0xed0 [ 81.594180][ T5160] ? inet_listen+0x640/0x640 [ 81.600022][ T5160] ? mark_held_locks+0x9f/0xe0 [ 81.604814][ T5160] ? __local_bh_enable_ip+0xa4/0x130 [ 81.610130][ T5160] inet_stream_connect+0x57/0xa0 [ 81.615103][ T5160] ? __inet_stream_connect+0xed0/0xed0 [ 81.620597][ T5160] __sys_connect_file+0x153/0x1a0 [ 81.625650][ T5160] io_connect+0x3cc/0x720 [ 81.630015][ T5160] ? io_connect_prep+0x250/0x250 [ 81.634981][ T5160] ? receive_fd+0x110/0x110 [ 81.639523][ T5160] ? rcu_read_lock_sched_held+0x3e/0x70 [ 81.645120][ T5160] ? io_connect_prep+0x250/0x250 [ 81.650098][ T5160] io_issue_sqe+0x695/0x1250 [ 81.654719][ T5160] io_submit_sqes+0x96c/0x1e90 [ 81.659534][ T5160] __do_sys_io_uring_enter+0x103d/0x24e0 [ 81.665210][ T5160] ? io_submit_sqes+0x1e90/0x1e90 [ 81.670272][ T5160] ? ptrace_notify+0xfe/0x140 [ 81.674974][ T5160] ? lock_downgrade+0x6e0/0x6e0 [ 81.679852][ T5160] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.685080][ T5160] ? lockdep_hardirqs_on+0x7d/0x100 [ 81.690297][ T5160] ? _raw_spin_unlock_irq+0x2e/0x50 [ 81.695524][ T5160] ? ptrace_notify+0xfe/0x140 [ 81.700241][ T5160] do_syscall_64+0x39/0xb0 [ 81.704997][ T5160] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.710967][ T5160] RIP: 0033:0x7f607b0de549 [ 81.715400][ T5160] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 81.735031][ T5160] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 81.743554][ T5160] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5160] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5160] close(3) = 0 [pid 5160] close(4) = 0 [pid 5160] close(5) = 0 [pid 5160] close(6) = 0 [pid 5160] close(7) = 0 [pid 5160] close(8) = -1 EBADF (Bad file descriptor) [pid 5160] close(9) = -1 EBADF (Bad file descriptor) [pid 5160] close(10) = -1 EBADF (Bad file descriptor) [pid 5160] close(11) = -1 EBADF (Bad file descriptor) [pid 5160] close(12) = -1 EBADF (Bad file descriptor) [pid 5160] close(13) = -1 EBADF (Bad file descriptor) [pid 5160] close(14) = -1 EBADF (Bad file descriptor) [pid 5160] close(15) = -1 EBADF (Bad file descriptor) [pid 5160] close(16) = -1 EBADF (Bad file descriptor) [pid 5160] close(17) = -1 EBADF (Bad file descriptor) [pid 5160] close(18) = -1 EBADF (Bad file descriptor) [pid 5160] close(19) = -1 EBADF (Bad file descriptor) [pid 5160] close(20) = -1 EBADF (Bad file descriptor) [pid 5160] close(21) = -1 EBADF (Bad file descriptor) [pid 5160] close(22) = -1 EBADF (Bad file descriptor) [pid 5160] close(23) = -1 EBADF (Bad file descriptor) [pid 5160] close(24) = -1 EBADF (Bad file descriptor) [pid 5160] close(25) = -1 EBADF (Bad file descriptor) [pid 5160] close(26) = -1 EBADF (Bad file descriptor) [pid 5160] close(27) = -1 EBADF (Bad file descriptor) [pid 5160] close(28) = -1 EBADF (Bad file descriptor) [pid 5160] close(29) = -1 EBADF (Bad file descriptor) [pid 5160] exit_group(0) = ? [pid 5160] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 75 ./strace-static-x86_64: Process 5161 attached [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5161] setpgid(0, 0) = 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5161] write(3, "1000", 4) = 4 [pid 5161] close(3) = 0 [pid 5161] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5161] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5161] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5161] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5161] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5161] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5161] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5161] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5161] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5161] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5161] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5161] write(7, "5", 1) = 1 [ 81.751543][ T5160] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 81.759529][ T5160] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 81.767517][ T5160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 81.775643][ T5160] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 81.783653][ T5160] [ 81.828722][ T5161] FAULT_INJECTION: forcing a failure. [ 81.828722][ T5161] name failslab, interval 1, probability 0, space 0, times 0 [ 81.841897][ T5161] CPU: 1 PID: 5161 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 81.851838][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 81.861926][ T5161] Call Trace: [ 81.865216][ T5161] [ 81.868149][ T5161] dump_stack_lvl+0xd1/0x138 [ 81.872752][ T5161] should_fail_ex.cold+0x5/0xa [ 81.877533][ T5161] ? io_issue_sqe+0x695/0x1250 [ 81.882335][ T5161] should_failslab+0x9/0x20 [ 81.886956][ T5161] __kmem_cache_alloc_node+0x5b/0x330 [ 81.892346][ T5161] ? ref_tracker_alloc+0x158/0x560 [ 81.897509][ T5161] kmalloc_trace+0x26/0x60 [ 81.901958][ T5161] ref_tracker_alloc+0x158/0x560 [ 81.906930][ T5161] ? __lock_acquire+0xbc3/0x56d0 [ 81.911885][ T5161] ? ref_tracker_free+0x6b0/0x6b0 [ 81.916962][ T5161] dst_init+0xe4/0x520 [ 81.921063][ T5161] dst_alloc+0x16f/0x1f0 [ 81.925337][ T5161] rt_dst_alloc+0x55/0x430 [ 81.929782][ T5161] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 81.935805][ T5161] ip_route_output_key_hash+0x18f/0x340 [ 81.941552][ T5161] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 81.947842][ T5161] dccp_v4_connect+0x7e1/0x1730 [ 81.952744][ T5161] __inet_stream_connect+0x69e/0xed0 [ 81.958069][ T5161] ? inet_listen+0x640/0x640 [ 81.962692][ T5161] ? mark_held_locks+0x9f/0xe0 [ 81.967483][ T5161] ? __local_bh_enable_ip+0xa4/0x130 [ 81.972795][ T5161] inet_stream_connect+0x57/0xa0 [ 81.977766][ T5161] ? __inet_stream_connect+0xed0/0xed0 [ 81.983260][ T5161] __sys_connect_file+0x153/0x1a0 [ 81.988310][ T5161] io_connect+0x3cc/0x720 [ 81.992673][ T5161] ? io_connect_prep+0x250/0x250 [ 81.997642][ T5161] ? receive_fd+0x110/0x110 [ 82.002185][ T5161] ? rcu_read_lock_sched_held+0x3e/0x70 [ 82.007753][ T5161] ? io_connect_prep+0x250/0x250 [ 82.012726][ T5161] io_issue_sqe+0x695/0x1250 [ 82.017348][ T5161] io_submit_sqes+0x96c/0x1e90 [ 82.022167][ T5161] __do_sys_io_uring_enter+0x103d/0x24e0 [ 82.027836][ T5161] ? io_submit_sqes+0x1e90/0x1e90 [ 82.032891][ T5161] ? ptrace_notify+0xfe/0x140 [ 82.037596][ T5161] ? lock_downgrade+0x6e0/0x6e0 [ 82.042479][ T5161] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.047706][ T5161] ? lockdep_hardirqs_on+0x7d/0x100 [ 82.052928][ T5161] ? _raw_spin_unlock_irq+0x2e/0x50 [ 82.058153][ T5161] ? ptrace_notify+0xfe/0x140 [ 82.062860][ T5161] do_syscall_64+0x39/0xb0 [ 82.067310][ T5161] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.073228][ T5161] RIP: 0033:0x7f607b0de549 [ 82.077656][ T5161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 82.097309][ T5161] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 82.105756][ T5161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 82.113744][ T5161] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 82.121729][ T5161] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5161] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5161] close(3) = 0 [pid 5161] close(4) = 0 [pid 5161] close(5) = 0 [pid 5161] close(6) = 0 [pid 5161] close(7) = 0 [pid 5161] close(8) = -1 EBADF (Bad file descriptor) [pid 5161] close(9) = -1 EBADF (Bad file descriptor) [pid 5161] close(10) = -1 EBADF (Bad file descriptor) [pid 5161] close(11) = -1 EBADF (Bad file descriptor) [pid 5161] close(12) = -1 EBADF (Bad file descriptor) [pid 5161] close(13) = -1 EBADF (Bad file descriptor) [pid 5161] close(14) = -1 EBADF (Bad file descriptor) [pid 5161] close(15) = -1 EBADF (Bad file descriptor) [pid 5161] close(16) = -1 EBADF (Bad file descriptor) [pid 5161] close(17) = -1 EBADF (Bad file descriptor) [pid 5161] close(18) = -1 EBADF (Bad file descriptor) [pid 5161] close(19) = -1 EBADF (Bad file descriptor) [pid 5161] close(20) = -1 EBADF (Bad file descriptor) [pid 5161] close(21) = -1 EBADF (Bad file descriptor) [pid 5161] close(22) = -1 EBADF (Bad file descriptor) [pid 5161] close(23) = -1 EBADF (Bad file descriptor) [pid 5161] close(24) = -1 EBADF (Bad file descriptor) [pid 5161] close(25) = -1 EBADF (Bad file descriptor) [pid 5161] close(26) = -1 EBADF (Bad file descriptor) [pid 5161] close(27) = -1 EBADF (Bad file descriptor) [pid 5161] close(28) = -1 EBADF (Bad file descriptor) [pid 5161] close(29) = -1 EBADF (Bad file descriptor) [pid 5161] exit_group(0) = ? [pid 5161] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 76 ./strace-static-x86_64: Process 5162 attached [pid 5162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5162] setpgid(0, 0) = 0 [pid 5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5162] write(3, "1000", 4) = 4 [pid 5162] close(3) = 0 [pid 5162] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5162] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5162] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5162] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5162] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5162] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5162] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5162] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5162] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5162] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5162] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5162] write(7, "5", 1) = 1 [ 82.129712][ T5161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 82.137701][ T5161] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 82.145712][ T5161] [ 82.185262][ T5162] FAULT_INJECTION: forcing a failure. [ 82.185262][ T5162] name failslab, interval 1, probability 0, space 0, times 0 [ 82.198412][ T5162] CPU: 0 PID: 5162 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 82.208346][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 82.218403][ T5162] Call Trace: [ 82.221700][ T5162] [ 82.224654][ T5162] dump_stack_lvl+0xd1/0x138 [ 82.229282][ T5162] should_fail_ex.cold+0x5/0xa [ 82.234506][ T5162] should_failslab+0x9/0x20 [ 82.239043][ T5162] __kmem_cache_alloc_node+0x5b/0x330 [ 82.244430][ T5162] ? ref_tracker_alloc+0x158/0x560 [ 82.249583][ T5162] kmalloc_trace+0x26/0x60 [ 82.254014][ T5162] ref_tracker_alloc+0x158/0x560 [ 82.258978][ T5162] ? ref_tracker_free+0x6b0/0x6b0 [ 82.264033][ T5162] ? lockdep_hardirqs_on+0x7d/0x100 [ 82.269235][ T5162] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 82.274875][ T5162] ? preempt_schedule_notrace_thunk+0x1a/0x20 [ 82.280955][ T5162] ? preempt_schedule_notrace+0x73/0xe0 [ 82.286513][ T5162] ? preempt_schedule_notrace_thunk+0x1a/0x20 [ 82.292599][ T5162] dst_init+0xe4/0x520 [ 82.296676][ T5162] dst_alloc+0x16f/0x1f0 [ 82.300954][ T5162] rt_dst_alloc+0x55/0x430 [ 82.305404][ T5162] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 82.311429][ T5162] ip_route_output_key_hash+0x18f/0x340 [ 82.317006][ T5162] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 82.323294][ T5162] dccp_v4_connect+0x7e1/0x1730 [ 82.328194][ T5162] __inet_stream_connect+0x69e/0xed0 [ 82.333525][ T5162] ? inet_listen+0x640/0x640 [ 82.338154][ T5162] ? mark_held_locks+0x9f/0xe0 [ 82.342959][ T5162] ? __local_bh_enable_ip+0xa4/0x130 [ 82.348273][ T5162] inet_stream_connect+0x57/0xa0 [ 82.353253][ T5162] ? __inet_stream_connect+0xed0/0xed0 [ 82.358745][ T5162] __sys_connect_file+0x153/0x1a0 [ 82.363800][ T5162] io_connect+0x3cc/0x720 [ 82.368166][ T5162] ? io_connect_prep+0x250/0x250 [ 82.373134][ T5162] ? receive_fd+0x110/0x110 [ 82.377686][ T5162] ? rcu_read_lock_sched_held+0x3e/0x70 [ 82.383255][ T5162] ? io_connect_prep+0x250/0x250 [ 82.388225][ T5162] io_issue_sqe+0x695/0x1250 [ 82.392856][ T5162] io_submit_sqes+0x96c/0x1e90 [ 82.397672][ T5162] __do_sys_io_uring_enter+0x103d/0x24e0 [ 82.403347][ T5162] ? io_submit_sqes+0x1e90/0x1e90 [ 82.408416][ T5162] ? ptrace_notify+0xfe/0x140 [ 82.413224][ T5162] ? lock_downgrade+0x6e0/0x6e0 [ 82.418126][ T5162] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.423390][ T5162] ? lockdep_hardirqs_on+0x7d/0x100 [ 82.428612][ T5162] ? _raw_spin_unlock_irq+0x2e/0x50 [ 82.433833][ T5162] ? ptrace_notify+0xfe/0x140 [ 82.438560][ T5162] do_syscall_64+0x39/0xb0 [ 82.443006][ T5162] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.448924][ T5162] RIP: 0033:0x7f607b0de549 [ 82.453357][ T5162] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 82.472983][ T5162] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [pid 5162] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5162] close(3) = 0 [pid 5162] close(4) = 0 [pid 5162] close(5) = 0 [pid 5162] close(6) = 0 [pid 5162] close(7) = 0 [pid 5162] close(8) = -1 EBADF (Bad file descriptor) [pid 5162] close(9) = -1 EBADF (Bad file descriptor) [pid 5162] close(10) = -1 EBADF (Bad file descriptor) [pid 5162] close(11) = -1 EBADF (Bad file descriptor) [pid 5162] close(12) = -1 EBADF (Bad file descriptor) [pid 5162] close(13) = -1 EBADF (Bad file descriptor) [pid 5162] close(14) = -1 EBADF (Bad file descriptor) [pid 5162] close(15) = -1 EBADF (Bad file descriptor) [pid 5162] close(16) = -1 EBADF (Bad file descriptor) [pid 5162] close(17) = -1 EBADF (Bad file descriptor) [pid 5162] close(18) = -1 EBADF (Bad file descriptor) [pid 5162] close(19) = -1 EBADF (Bad file descriptor) [pid 5162] close(20) = -1 EBADF (Bad file descriptor) [pid 5162] close(21) = -1 EBADF (Bad file descriptor) [pid 5162] close(22) = -1 EBADF (Bad file descriptor) [pid 5162] close(23) = -1 EBADF (Bad file descriptor) [pid 5162] close(24) = -1 EBADF (Bad file descriptor) [pid 5162] close(25) = -1 EBADF (Bad file descriptor) [pid 5162] close(26) = -1 EBADF (Bad file descriptor) [pid 5162] close(27) = -1 EBADF (Bad file descriptor) [pid 5162] close(28) = -1 EBADF (Bad file descriptor) [pid 5162] close(29) = -1 EBADF (Bad file descriptor) [pid 5162] exit_group(0) = ? [pid 5162] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 77 ./strace-static-x86_64: Process 5163 attached [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5163] setpgid(0, 0) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5163] write(3, "1000", 4) = 4 [pid 5163] close(3) = 0 [pid 5163] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5163] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5163] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5163] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5163] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 82.481497][ T5162] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 82.489516][ T5162] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 82.497543][ T5162] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 82.505537][ T5162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 82.513544][ T5162] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 82.521570][ T5162] [pid 5163] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5163] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5163] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5163] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5163] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5163] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5163] write(7, "5", 1) = 1 [ 82.574893][ T5163] FAULT_INJECTION: forcing a failure. [ 82.574893][ T5163] name failslab, interval 1, probability 0, space 0, times 0 [ 82.587578][ T5163] CPU: 1 PID: 5163 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 82.597517][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 82.607590][ T5163] Call Trace: [ 82.611069][ T5163] [ 82.614004][ T5163] dump_stack_lvl+0xd1/0x138 [ 82.618628][ T5163] should_fail_ex.cold+0x5/0xa [ 82.623400][ T5163] ? __inet_hash_connect+0x95e/0x1ba0 [ 82.628777][ T5163] should_failslab+0x9/0x20 [ 82.633298][ T5163] kmem_cache_alloc+0x5a/0x320 [ 82.638271][ T5163] __inet_hash_connect+0x95e/0x1ba0 [ 82.643522][ T5163] ? __inet_lookup_listener+0xbf0/0xbf0 [ 82.649105][ T5163] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 82.655468][ T5163] dccp_v4_connect+0xb82/0x1730 [ 82.660360][ T5163] __inet_stream_connect+0x69e/0xed0 [ 82.665672][ T5163] ? inet_listen+0x640/0x640 [ 82.670317][ T5163] ? mark_held_locks+0x9f/0xe0 [ 82.675124][ T5163] ? __local_bh_enable_ip+0xa4/0x130 [ 82.680428][ T5163] inet_stream_connect+0x57/0xa0 [ 82.685376][ T5163] ? __inet_stream_connect+0xed0/0xed0 [ 82.690857][ T5163] __sys_connect_file+0x153/0x1a0 [ 82.695888][ T5163] io_connect+0x3cc/0x720 [ 82.700233][ T5163] ? io_connect_prep+0x250/0x250 [ 82.705175][ T5163] ? receive_fd+0x110/0x110 [ 82.709718][ T5163] ? rcu_read_lock_sched_held+0x3e/0x70 [ 82.715301][ T5163] ? io_connect_prep+0x250/0x250 [ 82.720280][ T5163] io_issue_sqe+0x695/0x1250 [ 82.724887][ T5163] io_submit_sqes+0x96c/0x1e90 [ 82.729695][ T5163] __do_sys_io_uring_enter+0x103d/0x24e0 [ 82.735393][ T5163] ? io_submit_sqes+0x1e90/0x1e90 [ 82.740474][ T5163] ? ptrace_notify+0xfe/0x140 [ 82.745235][ T5163] ? lock_downgrade+0x6e0/0x6e0 [ 82.750105][ T5163] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.755318][ T5163] ? lockdep_hardirqs_on+0x7d/0x100 [ 82.760534][ T5163] ? _raw_spin_unlock_irq+0x2e/0x50 [ 82.765762][ T5163] ? ptrace_notify+0xfe/0x140 [ 82.770457][ T5163] do_syscall_64+0x39/0xb0 [ 82.774933][ T5163] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.780876][ T5163] RIP: 0033:0x7f607b0de549 [ 82.785345][ T5163] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 82.805003][ T5163] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 82.813550][ T5163] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5163] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5163] close(3) = 0 [pid 5163] close(4) = 0 [pid 5163] close(5) = 0 [pid 5163] close(6) = 0 [pid 5163] close(7) = 0 [pid 5163] close(8) = -1 EBADF (Bad file descriptor) [pid 5163] close(9) = -1 EBADF (Bad file descriptor) [pid 5163] close(10) = -1 EBADF (Bad file descriptor) [pid 5163] close(11) = -1 EBADF (Bad file descriptor) [pid 5163] close(12) = -1 EBADF (Bad file descriptor) [pid 5163] close(13) = -1 EBADF (Bad file descriptor) [pid 5163] close(14) = -1 EBADF (Bad file descriptor) [pid 5163] close(15) = -1 EBADF (Bad file descriptor) [pid 5163] close(16) = -1 EBADF (Bad file descriptor) [pid 5163] close(17) = -1 EBADF (Bad file descriptor) [pid 5163] close(18) = -1 EBADF (Bad file descriptor) [pid 5163] close(19) = -1 EBADF (Bad file descriptor) [pid 5163] close(20) = -1 EBADF (Bad file descriptor) [pid 5163] close(21) = -1 EBADF (Bad file descriptor) [pid 5163] close(22) = -1 EBADF (Bad file descriptor) [pid 5163] close(23) = -1 EBADF (Bad file descriptor) [pid 5163] close(24) = -1 EBADF (Bad file descriptor) [pid 5163] close(25) = -1 EBADF (Bad file descriptor) [pid 5163] close(26) = -1 EBADF (Bad file descriptor) [pid 5163] close(27) = -1 EBADF (Bad file descriptor) [pid 5163] close(28) = -1 EBADF (Bad file descriptor) [pid 5163] close(29) = -1 EBADF (Bad file descriptor) [pid 5163] exit_group(0) = ? [pid 5163] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 78 ./strace-static-x86_64: Process 5165 attached [pid 5165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5165] setpgid(0, 0) = 0 [pid 5165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5165] write(3, "1000", 4) = 4 [pid 5165] close(3) = 0 [pid 5165] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 82.821545][ T5163] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 82.829518][ T5163] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 82.837494][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 82.845516][ T5163] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 82.853592][ T5163] [pid 5165] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5165] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5165] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5165] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5165] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5165] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5165] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5165] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5165] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5165] write(7, "5", 1) = 1 [ 82.918039][ T5165] FAULT_INJECTION: forcing a failure. [ 82.918039][ T5165] name failslab, interval 1, probability 0, space 0, times 0 [ 82.931810][ T5165] CPU: 0 PID: 5165 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 82.941717][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 82.951776][ T5165] Call Trace: [ 82.955052][ T5165] [ 82.957978][ T5165] dump_stack_lvl+0xd1/0x138 [ 82.962582][ T5165] should_fail_ex.cold+0x5/0xa [ 82.967350][ T5165] ? io_issue_sqe+0x695/0x1250 [ 82.972138][ T5165] should_failslab+0x9/0x20 [ 82.976683][ T5165] __kmem_cache_alloc_node+0x5b/0x330 [ 82.982074][ T5165] ? ref_tracker_alloc+0x158/0x560 [ 82.987232][ T5165] kmalloc_trace+0x26/0x60 [ 82.991668][ T5165] ref_tracker_alloc+0x158/0x560 [ 82.996625][ T5165] ? __lock_acquire+0xbc3/0x56d0 [ 83.001573][ T5165] ? ref_tracker_free+0x6b0/0x6b0 [ 83.006620][ T5165] dst_init+0xe4/0x520 [ 83.010708][ T5165] dst_alloc+0x16f/0x1f0 [ 83.014993][ T5165] rt_dst_alloc+0x55/0x430 [ 83.019440][ T5165] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 83.025433][ T5165] ip_route_output_key_hash+0x18f/0x340 [ 83.030984][ T5165] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 83.037246][ T5165] dccp_v4_connect+0x7e1/0x1730 [ 83.042144][ T5165] __inet_stream_connect+0x69e/0xed0 [ 83.047470][ T5165] ? inet_listen+0x640/0x640 [ 83.052116][ T5165] ? mark_held_locks+0x9f/0xe0 [ 83.056908][ T5165] ? __local_bh_enable_ip+0xa4/0x130 [ 83.062207][ T5165] inet_stream_connect+0x57/0xa0 [ 83.067151][ T5165] ? __inet_stream_connect+0xed0/0xed0 [ 83.072617][ T5165] __sys_connect_file+0x153/0x1a0 [ 83.077750][ T5165] io_connect+0x3cc/0x720 [ 83.082123][ T5165] ? io_connect_prep+0x250/0x250 [ 83.087070][ T5165] ? receive_fd+0x110/0x110 [ 83.091591][ T5165] ? rcu_read_lock_sched_held+0x3e/0x70 [ 83.097179][ T5165] ? io_connect_prep+0x250/0x250 [ 83.102160][ T5165] io_issue_sqe+0x695/0x1250 [ 83.106793][ T5165] io_submit_sqes+0x96c/0x1e90 [ 83.111576][ T5165] __do_sys_io_uring_enter+0x103d/0x24e0 [ 83.117234][ T5165] ? io_submit_sqes+0x1e90/0x1e90 [ 83.122272][ T5165] ? ptrace_notify+0xfe/0x140 [ 83.126950][ T5165] ? lock_downgrade+0x6e0/0x6e0 [ 83.131823][ T5165] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.137062][ T5165] ? lockdep_hardirqs_on+0x7d/0x100 [ 83.142264][ T5165] ? _raw_spin_unlock_irq+0x2e/0x50 [ 83.147467][ T5165] ? ptrace_notify+0xfe/0x140 [ 83.152181][ T5165] do_syscall_64+0x39/0xb0 [ 83.156609][ T5165] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.162505][ T5165] RIP: 0033:0x7f607b0de549 [ 83.166949][ T5165] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 83.186569][ T5165] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 83.195002][ T5165] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 83.203030][ T5165] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 83.210999][ T5165] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5165] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5165] close(3) = 0 [pid 5165] close(4) = 0 [pid 5165] close(5) = 0 [pid 5165] close(6) = 0 [pid 5165] close(7) = 0 [pid 5165] close(8) = -1 EBADF (Bad file descriptor) [pid 5165] close(9) = -1 EBADF (Bad file descriptor) [pid 5165] close(10) = -1 EBADF (Bad file descriptor) [pid 5165] close(11) = -1 EBADF (Bad file descriptor) [pid 5165] close(12) = -1 EBADF (Bad file descriptor) [pid 5165] close(13) = -1 EBADF (Bad file descriptor) [pid 5165] close(14) = -1 EBADF (Bad file descriptor) [pid 5165] close(15) = -1 EBADF (Bad file descriptor) [pid 5165] close(16) = -1 EBADF (Bad file descriptor) [pid 5165] close(17) = -1 EBADF (Bad file descriptor) [pid 5165] close(18) = -1 EBADF (Bad file descriptor) [pid 5165] close(19) = -1 EBADF (Bad file descriptor) [pid 5165] close(20) = -1 EBADF (Bad file descriptor) [pid 5165] close(21) = -1 EBADF (Bad file descriptor) [pid 5165] close(22) = -1 EBADF (Bad file descriptor) [pid 5165] close(23) = -1 EBADF (Bad file descriptor) [pid 5165] close(24) = -1 EBADF (Bad file descriptor) [pid 5165] close(25) = -1 EBADF (Bad file descriptor) [pid 5165] close(26) = -1 EBADF (Bad file descriptor) [pid 5165] close(27) = -1 EBADF (Bad file descriptor) [pid 5165] close(28) = -1 EBADF (Bad file descriptor) [pid 5165] close(29) = -1 EBADF (Bad file descriptor) [pid 5165] exit_group(0) = ? [pid 5165] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 79 ./strace-static-x86_64: Process 5166 attached [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5166] setpgid(0, 0) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5166] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5166] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5166] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5166] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5166] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5166] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5166] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5166] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5166] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5166] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5166] write(7, "5", 1) = 1 [ 83.218980][ T5165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 83.226970][ T5165] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 83.234952][ T5165] [ 83.277494][ T5166] FAULT_INJECTION: forcing a failure. [ 83.277494][ T5166] name failslab, interval 1, probability 0, space 0, times 0 [ 83.291682][ T5166] CPU: 0 PID: 5166 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 83.301688][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 83.311740][ T5166] Call Trace: [ 83.315012][ T5166] [ 83.317936][ T5166] dump_stack_lvl+0xd1/0x138 [ 83.322529][ T5166] should_fail_ex.cold+0x5/0xa [ 83.327287][ T5166] ? io_issue_sqe+0x695/0x1250 [ 83.332052][ T5166] should_failslab+0x9/0x20 [ 83.336554][ T5166] __kmem_cache_alloc_node+0x5b/0x330 [ 83.341919][ T5166] ? ref_tracker_alloc+0x158/0x560 [ 83.347034][ T5166] kmalloc_trace+0x26/0x60 [ 83.351463][ T5166] ref_tracker_alloc+0x158/0x560 [ 83.356428][ T5166] ? __lock_acquire+0xbc3/0x56d0 [ 83.361386][ T5166] ? ref_tracker_free+0x6b0/0x6b0 [ 83.366467][ T5166] dst_init+0xe4/0x520 [ 83.370562][ T5166] dst_alloc+0x16f/0x1f0 [ 83.374831][ T5166] rt_dst_alloc+0x55/0x430 [ 83.379276][ T5166] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 83.385294][ T5166] ip_route_output_key_hash+0x18f/0x340 [ 83.390878][ T5166] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 83.397255][ T5166] dccp_v4_connect+0x7e1/0x1730 [ 83.402163][ T5166] __inet_stream_connect+0x69e/0xed0 [ 83.407506][ T5166] ? inet_listen+0x640/0x640 [ 83.412135][ T5166] ? mark_held_locks+0x9f/0xe0 [ 83.416930][ T5166] ? __local_bh_enable_ip+0xa4/0x130 [ 83.422245][ T5166] inet_stream_connect+0x57/0xa0 [ 83.427217][ T5166] ? __inet_stream_connect+0xed0/0xed0 [ 83.432709][ T5166] __sys_connect_file+0x153/0x1a0 [ 83.437789][ T5166] io_connect+0x3cc/0x720 [ 83.442164][ T5166] ? io_connect_prep+0x250/0x250 [ 83.447139][ T5166] ? receive_fd+0x110/0x110 [ 83.451688][ T5166] ? rcu_read_lock_sched_held+0x3e/0x70 [ 83.457255][ T5166] ? io_connect_prep+0x250/0x250 [ 83.462227][ T5166] io_issue_sqe+0x695/0x1250 [ 83.466849][ T5166] io_submit_sqes+0x96c/0x1e90 [ 83.471659][ T5166] __do_sys_io_uring_enter+0x103d/0x24e0 [ 83.477331][ T5166] ? io_submit_sqes+0x1e90/0x1e90 [ 83.482387][ T5166] ? ptrace_notify+0xfe/0x140 [ 83.487086][ T5166] ? lock_downgrade+0x6e0/0x6e0 [ 83.491965][ T5166] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.497195][ T5166] ? lockdep_hardirqs_on+0x7d/0x100 [ 83.502415][ T5166] ? _raw_spin_unlock_irq+0x2e/0x50 [ 83.507640][ T5166] ? ptrace_notify+0xfe/0x140 [ 83.512343][ T5166] do_syscall_64+0x39/0xb0 [ 83.516878][ T5166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.522796][ T5166] RIP: 0033:0x7f607b0de549 [ 83.527243][ T5166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 83.546877][ T5166] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 83.555314][ T5166] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 83.563311][ T5166] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5166] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5166] close(3) = 0 [pid 5166] close(4) = 0 [pid 5166] close(5) = 0 [pid 5166] close(6) = 0 [pid 5166] close(7) = 0 [pid 5166] close(8) = -1 EBADF (Bad file descriptor) [pid 5166] close(9) = -1 EBADF (Bad file descriptor) [pid 5166] close(10) = -1 EBADF (Bad file descriptor) [pid 5166] close(11) = -1 EBADF (Bad file descriptor) [pid 5166] close(12) = -1 EBADF (Bad file descriptor) [pid 5166] close(13) = -1 EBADF (Bad file descriptor) [pid 5166] close(14) = -1 EBADF (Bad file descriptor) [pid 5166] close(15) = -1 EBADF (Bad file descriptor) [pid 5166] close(16) = -1 EBADF (Bad file descriptor) [pid 5166] close(17) = -1 EBADF (Bad file descriptor) [pid 5166] close(18) = -1 EBADF (Bad file descriptor) [pid 5166] close(19) = -1 EBADF (Bad file descriptor) [pid 5166] close(20) = -1 EBADF (Bad file descriptor) [pid 5166] close(21) = -1 EBADF (Bad file descriptor) [pid 5166] close(22) = -1 EBADF (Bad file descriptor) [pid 5166] close(23) = -1 EBADF (Bad file descriptor) [pid 5166] close(24) = -1 EBADF (Bad file descriptor) [pid 5166] close(25) = -1 EBADF (Bad file descriptor) [pid 5166] close(26) = -1 EBADF (Bad file descriptor) [pid 5166] close(27) = -1 EBADF (Bad file descriptor) [pid 5166] close(28) = -1 EBADF (Bad file descriptor) [pid 5166] close(29) = -1 EBADF (Bad file descriptor) [pid 5166] exit_group(0) = ? [pid 5166] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5167 attached , child_tidptr=0x555555eff5d0) = 80 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [ 83.571293][ T5166] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 83.579285][ T5166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 83.587266][ T5166] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 83.595271][ T5166] [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5167] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5167] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5167] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5167] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5167] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5167] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5167] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5167] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5167] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5167] write(7, "5", 1) = 1 [ 83.656188][ T5167] FAULT_INJECTION: forcing a failure. [ 83.656188][ T5167] name failslab, interval 1, probability 0, space 0, times 0 [ 83.669057][ T5167] CPU: 0 PID: 5167 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 83.678991][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 83.689068][ T5167] Call Trace: [ 83.692371][ T5167] [ 83.695316][ T5167] dump_stack_lvl+0xd1/0x138 [ 83.699915][ T5167] should_fail_ex.cold+0x5/0xa [ 83.704678][ T5167] ? io_issue_sqe+0x695/0x1250 [ 83.709466][ T5167] should_failslab+0x9/0x20 [ 83.713993][ T5167] __kmem_cache_alloc_node+0x5b/0x330 [ 83.719381][ T5167] ? ref_tracker_alloc+0x158/0x560 [ 83.724542][ T5167] kmalloc_trace+0x26/0x60 [ 83.728997][ T5167] ref_tracker_alloc+0x158/0x560 [ 83.733960][ T5167] ? __lock_acquire+0xbc3/0x56d0 [ 83.738918][ T5167] ? ref_tracker_free+0x6b0/0x6b0 [ 83.743999][ T5167] dst_init+0xe4/0x520 [ 83.748098][ T5167] dst_alloc+0x16f/0x1f0 [ 83.752368][ T5167] rt_dst_alloc+0x55/0x430 [ 83.756812][ T5167] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 83.762832][ T5167] ip_route_output_key_hash+0x18f/0x340 [ 83.768407][ T5167] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 83.774698][ T5167] dccp_v4_connect+0x7e1/0x1730 [ 83.779607][ T5167] __inet_stream_connect+0x69e/0xed0 [ 83.784933][ T5167] ? inet_listen+0x640/0x640 [ 83.789562][ T5167] ? mark_held_locks+0x9f/0xe0 [ 83.794357][ T5167] ? __local_bh_enable_ip+0xa4/0x130 [ 83.799670][ T5167] inet_stream_connect+0x57/0xa0 [ 83.804640][ T5167] ? __inet_stream_connect+0xed0/0xed0 [ 83.810133][ T5167] __sys_connect_file+0x153/0x1a0 [ 83.815186][ T5167] io_connect+0x3cc/0x720 [ 83.819549][ T5167] ? io_connect_prep+0x250/0x250 [ 83.824521][ T5167] ? receive_fd+0x110/0x110 [ 83.829065][ T5167] ? rcu_read_lock_sched_held+0x3e/0x70 [ 83.834633][ T5167] ? io_connect_prep+0x250/0x250 [ 83.839607][ T5167] io_issue_sqe+0x695/0x1250 [ 83.844238][ T5167] io_submit_sqes+0x96c/0x1e90 [ 83.849285][ T5167] __do_sys_io_uring_enter+0x103d/0x24e0 [ 83.854998][ T5167] ? io_submit_sqes+0x1e90/0x1e90 [ 83.860090][ T5167] ? ptrace_notify+0xfe/0x140 [ 83.864803][ T5167] ? lock_downgrade+0x6e0/0x6e0 [ 83.869705][ T5167] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.874939][ T5167] ? lockdep_hardirqs_on+0x7d/0x100 [ 83.880158][ T5167] ? _raw_spin_unlock_irq+0x2e/0x50 [ 83.885380][ T5167] ? ptrace_notify+0xfe/0x140 [ 83.890083][ T5167] do_syscall_64+0x39/0xb0 [ 83.894531][ T5167] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.900445][ T5167] RIP: 0033:0x7f607b0de549 [ 83.905401][ T5167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 83.925029][ T5167] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 83.933487][ T5167] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 83.941482][ T5167] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 83.949470][ T5167] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5167] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5167] close(3) = 0 [pid 5167] close(4) = 0 [pid 5167] close(5) = 0 [pid 5167] close(6) = 0 [pid 5167] close(7) = 0 [pid 5167] close(8) = -1 EBADF (Bad file descriptor) [pid 5167] close(9) = -1 EBADF (Bad file descriptor) [pid 5167] close(10) = -1 EBADF (Bad file descriptor) [pid 5167] close(11) = -1 EBADF (Bad file descriptor) [pid 5167] close(12) = -1 EBADF (Bad file descriptor) [pid 5167] close(13) = -1 EBADF (Bad file descriptor) [pid 5167] close(14) = -1 EBADF (Bad file descriptor) [pid 5167] close(15) = -1 EBADF (Bad file descriptor) [pid 5167] close(16) = -1 EBADF (Bad file descriptor) [pid 5167] close(17) = -1 EBADF (Bad file descriptor) [pid 5167] close(18) = -1 EBADF (Bad file descriptor) [pid 5167] close(19) = -1 EBADF (Bad file descriptor) [pid 5167] close(20) = -1 EBADF (Bad file descriptor) [pid 5167] close(21) = -1 EBADF (Bad file descriptor) [pid 5167] close(22) = -1 EBADF (Bad file descriptor) [pid 5167] close(23) = -1 EBADF (Bad file descriptor) [pid 5167] close(24) = -1 EBADF (Bad file descriptor) [pid 5167] close(25) = -1 EBADF (Bad file descriptor) [pid 5167] close(26) = -1 EBADF (Bad file descriptor) [pid 5167] close(27) = -1 EBADF (Bad file descriptor) [pid 5167] close(28) = -1 EBADF (Bad file descriptor) [pid 5167] close(29) = -1 EBADF (Bad file descriptor) [pid 5167] exit_group(0) = ? [pid 5167] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 81 ./strace-static-x86_64: Process 5168 attached [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5168] setpgid(0, 0) = 0 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5168] write(3, "1000", 4) = 4 [pid 5168] close(3) = 0 [pid 5168] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5168] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5168] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5168] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5168] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5168] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5168] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5168] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5168] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5168] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5168] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5168] write(7, "5", 1) = 1 [ 83.957487][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 83.965474][ T5167] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 83.973484][ T5167] [ 84.014756][ T5168] FAULT_INJECTION: forcing a failure. [ 84.014756][ T5168] name failslab, interval 1, probability 0, space 0, times 0 [ 84.027507][ T5168] CPU: 1 PID: 5168 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 84.037403][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 84.047462][ T5168] Call Trace: [ 84.050757][ T5168] [ 84.053713][ T5168] dump_stack_lvl+0xd1/0x138 [ 84.058332][ T5168] should_fail_ex.cold+0x5/0xa [ 84.063098][ T5168] ? __inet_hash_connect+0x95e/0x1ba0 [ 84.068486][ T5168] should_failslab+0x9/0x20 [ 84.073011][ T5168] kmem_cache_alloc+0x5a/0x320 [ 84.077805][ T5168] __inet_hash_connect+0x95e/0x1ba0 [ 84.083042][ T5168] ? __inet_lookup_listener+0xbf0/0xbf0 [ 84.088610][ T5168] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 84.094979][ T5168] dccp_v4_connect+0xb82/0x1730 [ 84.099890][ T5168] __inet_stream_connect+0x69e/0xed0 [ 84.105219][ T5168] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.110443][ T5168] ? inet_listen+0x640/0x640 [ 84.115073][ T5168] ? inet_stream_connect+0x43/0xa0 [ 84.120246][ T5168] ? __local_bh_enable_ip+0xac/0x130 [ 84.125579][ T5168] inet_stream_connect+0x57/0xa0 [ 84.130552][ T5168] ? __inet_stream_connect+0xed0/0xed0 [ 84.136053][ T5168] __sys_connect_file+0x153/0x1a0 [ 84.141108][ T5168] io_connect+0x3cc/0x720 [ 84.145478][ T5168] ? io_connect_prep+0x250/0x250 [ 84.150447][ T5168] ? receive_fd+0x110/0x110 [ 84.155020][ T5168] ? rcu_read_lock_sched_held+0x3e/0x70 [ 84.160601][ T5168] ? io_connect_prep+0x250/0x250 [ 84.165580][ T5168] io_issue_sqe+0x695/0x1250 [ 84.170216][ T5168] io_submit_sqes+0x96c/0x1e90 [ 84.175026][ T5168] __do_sys_io_uring_enter+0x103d/0x24e0 [ 84.180745][ T5168] ? io_submit_sqes+0x1e90/0x1e90 [ 84.185812][ T5168] ? ptrace_notify+0xfe/0x140 [ 84.190508][ T5168] ? lock_downgrade+0x6e0/0x6e0 [ 84.195389][ T5168] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.200616][ T5168] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.205841][ T5168] ? _raw_spin_unlock_irq+0x2e/0x50 [ 84.211068][ T5168] ? ptrace_notify+0xfe/0x140 [ 84.215781][ T5168] do_syscall_64+0x39/0xb0 [ 84.220230][ T5168] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.226145][ T5168] RIP: 0033:0x7f607b0de549 [ 84.230749][ T5168] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 84.250468][ T5168] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [pid 5168] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5168] close(3) = 0 [pid 5168] close(4) = 0 [pid 5168] close(5) = 0 [pid 5168] close(6) = 0 [pid 5168] close(7) = 0 [pid 5168] close(8) = -1 EBADF (Bad file descriptor) [pid 5168] close(9) = -1 EBADF (Bad file descriptor) [pid 5168] close(10) = -1 EBADF (Bad file descriptor) [pid 5168] close(11) = -1 EBADF (Bad file descriptor) [pid 5168] close(12) = -1 EBADF (Bad file descriptor) [pid 5168] close(13) = -1 EBADF (Bad file descriptor) [pid 5168] close(14) = -1 EBADF (Bad file descriptor) [pid 5168] close(15) = -1 EBADF (Bad file descriptor) [pid 5168] close(16) = -1 EBADF (Bad file descriptor) [pid 5168] close(17) = -1 EBADF (Bad file descriptor) [pid 5168] close(18) = -1 EBADF (Bad file descriptor) [pid 5168] close(19) = -1 EBADF (Bad file descriptor) [pid 5168] close(20) = -1 EBADF (Bad file descriptor) [pid 5168] close(21) = -1 EBADF (Bad file descriptor) [pid 5168] close(22) = -1 EBADF (Bad file descriptor) [pid 5168] close(23) = -1 EBADF (Bad file descriptor) [pid 5168] close(24) = -1 EBADF (Bad file descriptor) [pid 5168] close(25) = -1 EBADF (Bad file descriptor) [pid 5168] close(26) = -1 EBADF (Bad file descriptor) [pid 5168] close(27) = -1 EBADF (Bad file descriptor) [pid 5168] close(28) = -1 EBADF (Bad file descriptor) [pid 5168] close(29) = -1 EBADF (Bad file descriptor) [pid 5168] exit_group(0) = ? [pid 5168] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5169 attached [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555555eff5d0) = 82 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5169] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5169] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5169] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5169] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5169] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5169] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5169] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5169] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5169] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5169] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5169] write(7, "5", 1) = 1 [ 84.258907][ T5168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 84.266893][ T5168] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 84.274880][ T5168] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 84.282882][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 84.290864][ T5168] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 84.299048][ T5168] [ 84.345026][ T5169] FAULT_INJECTION: forcing a failure. [ 84.345026][ T5169] name failslab, interval 1, probability 0, space 0, times 0 [ 84.358455][ T5169] CPU: 0 PID: 5169 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 84.368399][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 84.378482][ T5169] Call Trace: [ 84.381790][ T5169] [ 84.384749][ T5169] dump_stack_lvl+0xd1/0x138 [ 84.389375][ T5169] should_fail_ex.cold+0x5/0xa [ 84.394144][ T5169] ? io_issue_sqe+0x695/0x1250 [ 84.398955][ T5169] should_failslab+0x9/0x20 [ 84.403514][ T5169] __kmem_cache_alloc_node+0x5b/0x330 [ 84.408932][ T5169] ? ref_tracker_alloc+0x158/0x560 [ 84.414093][ T5169] kmalloc_trace+0x26/0x60 [ 84.418537][ T5169] ref_tracker_alloc+0x158/0x560 [ 84.423495][ T5169] ? ref_tracker_free+0x6b0/0x6b0 [ 84.428528][ T5169] ? dst_alloc+0x14a/0x1f0 [ 84.432963][ T5169] dst_init+0xe4/0x520 [ 84.437041][ T5169] dst_alloc+0x16f/0x1f0 [ 84.441290][ T5169] rt_dst_alloc+0x55/0x430 [ 84.445718][ T5169] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 84.451716][ T5169] ip_route_output_key_hash+0x18f/0x340 [ 84.457272][ T5169] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 84.463548][ T5169] dccp_v4_connect+0x7e1/0x1730 [ 84.468454][ T5169] __inet_stream_connect+0x69e/0xed0 [ 84.473788][ T5169] ? inet_listen+0x640/0x640 [ 84.478431][ T5169] ? mark_held_locks+0x9f/0xe0 [ 84.483208][ T5169] ? __local_bh_enable_ip+0xa4/0x130 [ 84.488500][ T5169] inet_stream_connect+0x57/0xa0 [ 84.493444][ T5169] ? __inet_stream_connect+0xed0/0xed0 [ 84.499352][ T5169] __sys_connect_file+0x153/0x1a0 [ 84.504411][ T5169] io_connect+0x3cc/0x720 [ 84.508752][ T5169] ? io_connect_prep+0x250/0x250 [ 84.513711][ T5169] ? receive_fd+0x110/0x110 [ 84.518259][ T5169] ? rcu_read_lock_sched_held+0x3e/0x70 [ 84.523821][ T5169] ? io_connect_prep+0x250/0x250 [ 84.528805][ T5169] io_issue_sqe+0x695/0x1250 [ 84.533407][ T5169] io_submit_sqes+0x96c/0x1e90 [ 84.538213][ T5169] __do_sys_io_uring_enter+0x103d/0x24e0 [ 84.543886][ T5169] ? io_submit_sqes+0x1e90/0x1e90 [ 84.548959][ T5169] ? ptrace_notify+0xfe/0x140 [ 84.553652][ T5169] ? lock_downgrade+0x6e0/0x6e0 [ 84.558538][ T5169] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.563751][ T5169] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.568954][ T5169] ? _raw_spin_unlock_irq+0x2e/0x50 [ 84.574158][ T5169] ? ptrace_notify+0xfe/0x140 [ 84.578839][ T5169] do_syscall_64+0x39/0xb0 [ 84.583277][ T5169] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.589217][ T5169] RIP: 0033:0x7f607b0de549 [ 84.593672][ T5169] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 84.613326][ T5169] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 84.621782][ T5169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 84.629777][ T5169] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 84.637760][ T5169] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5169] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5169] close(3) = 0 [pid 5169] close(4) = 0 [pid 5169] close(5) = 0 [pid 5169] close(6) = 0 [pid 5169] close(7) = 0 [pid 5169] close(8) = -1 EBADF (Bad file descriptor) [pid 5169] close(9) = -1 EBADF (Bad file descriptor) [pid 5169] close(10) = -1 EBADF (Bad file descriptor) [pid 5169] close(11) = -1 EBADF (Bad file descriptor) [pid 5169] close(12) = -1 EBADF (Bad file descriptor) [pid 5169] close(13) = -1 EBADF (Bad file descriptor) [pid 5169] close(14) = -1 EBADF (Bad file descriptor) [pid 5169] close(15) = -1 EBADF (Bad file descriptor) [pid 5169] close(16) = -1 EBADF (Bad file descriptor) [pid 5169] close(17) = -1 EBADF (Bad file descriptor) [pid 5169] close(18) = -1 EBADF (Bad file descriptor) [pid 5169] close(19) = -1 EBADF (Bad file descriptor) [pid 5169] close(20) = -1 EBADF (Bad file descriptor) [pid 5169] close(21) = -1 EBADF (Bad file descriptor) [pid 5169] close(22) = -1 EBADF (Bad file descriptor) [pid 5169] close(23) = -1 EBADF (Bad file descriptor) [pid 5169] close(24) = -1 EBADF (Bad file descriptor) [pid 5169] close(25) = -1 EBADF (Bad file descriptor) [pid 5169] close(26) = -1 EBADF (Bad file descriptor) [pid 5169] close(27) = -1 EBADF (Bad file descriptor) [pid 5169] close(28) = -1 EBADF (Bad file descriptor) [pid 5169] close(29) = -1 EBADF (Bad file descriptor) [pid 5169] exit_group(0) = ? [pid 5169] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 83 ./strace-static-x86_64: Process 5170 attached [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5170] setpgid(0, 0) = 0 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5170] write(3, "1000", 4) = 4 [pid 5170] close(3) = 0 [pid 5170] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 84.645764][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 84.653763][ T5169] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 84.661782][ T5169] [pid 5170] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5170] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5170] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5170] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5170] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5170] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5170] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5170] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5170] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5170] write(7, "5", 1) = 1 [ 84.719154][ T5170] FAULT_INJECTION: forcing a failure. [ 84.719154][ T5170] name failslab, interval 1, probability 0, space 0, times 0 [ 84.732553][ T5170] CPU: 0 PID: 5170 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 84.742504][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 84.752555][ T5170] Call Trace: [ 84.755844][ T5170] [ 84.758769][ T5170] dump_stack_lvl+0xd1/0x138 [ 84.763390][ T5170] should_fail_ex.cold+0x5/0xa [ 84.768166][ T5170] ? io_issue_sqe+0x695/0x1250 [ 84.772940][ T5170] should_failslab+0x9/0x20 [ 84.777450][ T5170] __kmem_cache_alloc_node+0x5b/0x330 [ 84.782818][ T5170] ? ref_tracker_alloc+0x158/0x560 [ 84.787957][ T5170] kmalloc_trace+0x26/0x60 [ 84.792408][ T5170] ref_tracker_alloc+0x158/0x560 [ 84.797402][ T5170] ? __lock_acquire+0xbc3/0x56d0 [ 84.802806][ T5170] ? ref_tracker_free+0x6b0/0x6b0 [ 84.807890][ T5170] dst_init+0xe4/0x520 [ 84.811991][ T5170] dst_alloc+0x16f/0x1f0 [ 84.816345][ T5170] rt_dst_alloc+0x55/0x430 [ 84.820786][ T5170] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 84.826807][ T5170] ip_route_output_key_hash+0x18f/0x340 [ 84.832491][ T5170] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 84.838869][ T5170] dccp_v4_connect+0x7e1/0x1730 [ 84.843771][ T5170] __inet_stream_connect+0x69e/0xed0 [ 84.849123][ T5170] ? inet_listen+0x640/0x640 [ 84.853774][ T5170] ? mark_held_locks+0x9f/0xe0 [ 84.858589][ T5170] ? __local_bh_enable_ip+0xa4/0x130 [ 84.864127][ T5170] inet_stream_connect+0x57/0xa0 [ 84.869134][ T5170] ? __inet_stream_connect+0xed0/0xed0 [ 84.874624][ T5170] __sys_connect_file+0x153/0x1a0 [ 84.879670][ T5170] io_connect+0x3cc/0x720 [ 84.884030][ T5170] ? io_connect_prep+0x250/0x250 [ 84.889001][ T5170] ? receive_fd+0x110/0x110 [ 84.893633][ T5170] ? rcu_read_lock_sched_held+0x3e/0x70 [ 84.899222][ T5170] ? io_connect_prep+0x250/0x250 [ 84.904807][ T5170] io_issue_sqe+0x695/0x1250 [ 84.909430][ T5170] io_submit_sqes+0x96c/0x1e90 [ 84.914327][ T5170] __do_sys_io_uring_enter+0x103d/0x24e0 [ 84.919993][ T5170] ? io_submit_sqes+0x1e90/0x1e90 [ 84.925059][ T5170] ? ptrace_notify+0xfe/0x140 [ 84.929780][ T5170] ? lock_downgrade+0x6e0/0x6e0 [ 84.934657][ T5170] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.939966][ T5170] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.945196][ T5170] ? _raw_spin_unlock_irq+0x2e/0x50 [ 84.950418][ T5170] ? ptrace_notify+0xfe/0x140 [ 84.955210][ T5170] do_syscall_64+0x39/0xb0 [ 84.959657][ T5170] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.965571][ T5170] RIP: 0033:0x7f607b0de549 [ 84.969997][ T5170] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 84.989625][ T5170] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 84.998061][ T5170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 85.006054][ T5170] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5170] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5170] close(3) = 0 [pid 5170] close(4) = 0 [pid 5170] close(5) = 0 [pid 5170] close(6) = 0 [pid 5170] close(7) = 0 [pid 5170] close(8) = -1 EBADF (Bad file descriptor) [pid 5170] close(9) = -1 EBADF (Bad file descriptor) [pid 5170] close(10) = -1 EBADF (Bad file descriptor) [pid 5170] close(11) = -1 EBADF (Bad file descriptor) [pid 5170] close(12) = -1 EBADF (Bad file descriptor) [pid 5170] close(13) = -1 EBADF (Bad file descriptor) [pid 5170] close(14) = -1 EBADF (Bad file descriptor) [pid 5170] close(15) = -1 EBADF (Bad file descriptor) [pid 5170] close(16) = -1 EBADF (Bad file descriptor) [pid 5170] close(17) = -1 EBADF (Bad file descriptor) [pid 5170] close(18) = -1 EBADF (Bad file descriptor) [pid 5170] close(19) = -1 EBADF (Bad file descriptor) [pid 5170] close(20) = -1 EBADF (Bad file descriptor) [pid 5170] close(21) = -1 EBADF (Bad file descriptor) [pid 5170] close(22) = -1 EBADF (Bad file descriptor) [pid 5170] close(23) = -1 EBADF (Bad file descriptor) [pid 5170] close(24) = -1 EBADF (Bad file descriptor) [pid 5170] close(25) = -1 EBADF (Bad file descriptor) [pid 5170] close(26) = -1 EBADF (Bad file descriptor) [pid 5170] close(27) = -1 EBADF (Bad file descriptor) [pid 5170] close(28) = -1 EBADF (Bad file descriptor) [pid 5170] close(29) = -1 EBADF (Bad file descriptor) [pid 5170] exit_group(0) = ? [pid 5170] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5171 attached , child_tidptr=0x555555eff5d0) = 84 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5171] setpgid(0, 0) = 0 [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5171] write(3, "1000", 4) = 4 [pid 5171] close(3) = 0 [pid 5171] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5171] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5171] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [ 85.014038][ T5170] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 85.022029][ T5170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 85.030017][ T5170] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 85.038200][ T5170] [pid 5171] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5171] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5171] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5171] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5171] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5171] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5171] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5171] write(7, "5", 1) = 1 [ 85.087624][ T5171] FAULT_INJECTION: forcing a failure. [ 85.087624][ T5171] name failslab, interval 1, probability 0, space 0, times 0 [ 85.101381][ T5171] CPU: 1 PID: 5171 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 85.111316][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 85.121393][ T5171] Call Trace: [ 85.124698][ T5171] [ 85.127670][ T5171] dump_stack_lvl+0xd1/0x138 [ 85.132313][ T5171] should_fail_ex.cold+0x5/0xa [ 85.137089][ T5171] ? io_issue_sqe+0x695/0x1250 [ 85.141884][ T5171] should_failslab+0x9/0x20 [ 85.146424][ T5171] __kmem_cache_alloc_node+0x5b/0x330 [ 85.151804][ T5171] ? ref_tracker_alloc+0x158/0x560 [ 85.156955][ T5171] kmalloc_trace+0x26/0x60 [ 85.161427][ T5171] ref_tracker_alloc+0x158/0x560 [ 85.166408][ T5171] ? __lock_acquire+0xbc3/0x56d0 [ 85.171352][ T5171] ? ref_tracker_free+0x6b0/0x6b0 [ 85.176427][ T5171] dst_init+0xe4/0x520 [ 85.180546][ T5171] dst_alloc+0x16f/0x1f0 [ 85.184835][ T5171] rt_dst_alloc+0x55/0x430 [ 85.189287][ T5171] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 85.195284][ T5171] ip_route_output_key_hash+0x18f/0x340 [ 85.200855][ T5171] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 85.207152][ T5171] dccp_v4_connect+0x7e1/0x1730 [ 85.212051][ T5171] __inet_stream_connect+0x69e/0xed0 [ 85.217497][ T5171] ? inet_listen+0x640/0x640 [ 85.222305][ T5171] ? mark_held_locks+0x9f/0xe0 [ 85.227077][ T5171] ? __local_bh_enable_ip+0xa4/0x130 [ 85.232376][ T5171] inet_stream_connect+0x57/0xa0 [ 85.237332][ T5171] ? __inet_stream_connect+0xed0/0xed0 [ 85.242810][ T5171] __sys_connect_file+0x153/0x1a0 [ 85.247867][ T5171] io_connect+0x3cc/0x720 [ 85.252257][ T5171] ? io_connect_prep+0x250/0x250 [ 85.257203][ T5171] ? receive_fd+0x110/0x110 [ 85.261745][ T5171] ? rcu_read_lock_sched_held+0x3e/0x70 [ 85.267345][ T5171] ? io_connect_prep+0x250/0x250 [ 85.272318][ T5171] io_issue_sqe+0x695/0x1250 [ 85.276921][ T5171] io_submit_sqes+0x96c/0x1e90 [ 85.281737][ T5171] __do_sys_io_uring_enter+0x103d/0x24e0 [ 85.287494][ T5171] ? io_submit_sqes+0x1e90/0x1e90 [ 85.292559][ T5171] ? ptrace_notify+0xfe/0x140 [ 85.297239][ T5171] ? lock_downgrade+0x6e0/0x6e0 [ 85.302107][ T5171] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.307345][ T5171] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.312575][ T5171] ? _raw_spin_unlock_irq+0x2e/0x50 [ 85.318128][ T5171] ? ptrace_notify+0xfe/0x140 [ 85.322813][ T5171] do_syscall_64+0x39/0xb0 [ 85.327240][ T5171] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.333240][ T5171] RIP: 0033:0x7f607b0de549 [ 85.337686][ T5171] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 85.357514][ T5171] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 85.366065][ T5171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 85.374565][ T5171] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5171] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5171] close(3) = 0 [pid 5171] close(4) = 0 [pid 5171] close(5) = 0 [pid 5171] close(6) = 0 [pid 5171] close(7) = 0 [pid 5171] close(8) = -1 EBADF (Bad file descriptor) [pid 5171] close(9) = -1 EBADF (Bad file descriptor) [pid 5171] close(10) = -1 EBADF (Bad file descriptor) [pid 5171] close(11) = -1 EBADF (Bad file descriptor) [pid 5171] close(12) = -1 EBADF (Bad file descriptor) [pid 5171] close(13) = -1 EBADF (Bad file descriptor) [pid 5171] close(14) = -1 EBADF (Bad file descriptor) [pid 5171] close(15) = -1 EBADF (Bad file descriptor) [pid 5171] close(16) = -1 EBADF (Bad file descriptor) [pid 5171] close(17) = -1 EBADF (Bad file descriptor) [pid 5171] close(18) = -1 EBADF (Bad file descriptor) [pid 5171] close(19) = -1 EBADF (Bad file descriptor) [pid 5171] close(20) = -1 EBADF (Bad file descriptor) [pid 5171] close(21) = -1 EBADF (Bad file descriptor) [pid 5171] close(22) = -1 EBADF (Bad file descriptor) [pid 5171] close(23) = -1 EBADF (Bad file descriptor) [pid 5171] close(24) = -1 EBADF (Bad file descriptor) [pid 5171] close(25) = -1 EBADF (Bad file descriptor) [pid 5171] close(26) = -1 EBADF (Bad file descriptor) [pid 5171] close(27) = -1 EBADF (Bad file descriptor) [pid 5171] close(28) = -1 EBADF (Bad file descriptor) [pid 5171] close(29) = -1 EBADF (Bad file descriptor) [pid 5171] exit_group(0) = ? [pid 5171] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 85 ./strace-static-x86_64: Process 5172 attached [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5172] setpgid(0, 0) = 0 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5172] write(3, "1000", 4) = 4 [pid 5172] close(3) = 0 [pid 5172] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5172] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5172] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5172] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5172] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5172] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5172] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5172] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5172] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5172] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5172] write(7, "5", 1) = 1 [ 85.382542][ T5171] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 85.390532][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 85.398529][ T5171] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 85.406522][ T5171] [ 85.446829][ T5172] FAULT_INJECTION: forcing a failure. [ 85.446829][ T5172] name failslab, interval 1, probability 0, space 0, times 0 [ 85.460101][ T5172] CPU: 0 PID: 5172 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 85.470008][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 85.480150][ T5172] Call Trace: [ 85.483423][ T5172] [ 85.486348][ T5172] dump_stack_lvl+0xd1/0x138 [ 85.490950][ T5172] should_fail_ex.cold+0x5/0xa [ 85.495717][ T5172] ? io_issue_sqe+0x695/0x1250 [ 85.500485][ T5172] should_failslab+0x9/0x20 [ 85.504989][ T5172] __kmem_cache_alloc_node+0x5b/0x330 [ 85.510365][ T5172] ? ref_tracker_alloc+0x158/0x560 [ 85.515504][ T5172] kmalloc_trace+0x26/0x60 [ 85.519930][ T5172] ref_tracker_alloc+0x158/0x560 [ 85.524960][ T5172] ? __lock_acquire+0xbc3/0x56d0 [ 85.529932][ T5172] ? ref_tracker_free+0x6b0/0x6b0 [ 85.535033][ T5172] dst_init+0xe4/0x520 [ 85.539105][ T5172] dst_alloc+0x16f/0x1f0 [ 85.543391][ T5172] rt_dst_alloc+0x55/0x430 [ 85.548009][ T5172] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 85.554006][ T5172] ip_route_output_key_hash+0x18f/0x340 [ 85.559559][ T5172] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 85.565857][ T5172] dccp_v4_connect+0x7e1/0x1730 [ 85.570725][ T5172] __inet_stream_connect+0x69e/0xed0 [ 85.576018][ T5172] ? inet_listen+0x640/0x640 [ 85.580814][ T5172] ? mark_held_locks+0x9f/0xe0 [ 85.585597][ T5172] ? __local_bh_enable_ip+0xa4/0x130 [ 85.590897][ T5172] inet_stream_connect+0x57/0xa0 [ 85.595851][ T5172] ? __inet_stream_connect+0xed0/0xed0 [ 85.601318][ T5172] __sys_connect_file+0x153/0x1a0 [ 85.606389][ T5172] io_connect+0x3cc/0x720 [ 85.610764][ T5172] ? io_connect_prep+0x250/0x250 [ 85.615749][ T5172] ? receive_fd+0x110/0x110 [ 85.620267][ T5172] ? rcu_read_lock_sched_held+0x3e/0x70 [ 85.625851][ T5172] ? io_connect_prep+0x250/0x250 [ 85.630794][ T5172] io_issue_sqe+0x695/0x1250 [ 85.635389][ T5172] io_submit_sqes+0x96c/0x1e90 [ 85.640162][ T5172] __do_sys_io_uring_enter+0x103d/0x24e0 [ 85.645797][ T5172] ? io_submit_sqes+0x1e90/0x1e90 [ 85.650836][ T5172] ? ptrace_notify+0xfe/0x140 [ 85.655509][ T5172] ? lock_downgrade+0x6e0/0x6e0 [ 85.660403][ T5172] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.665624][ T5172] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.670818][ T5172] ? _raw_spin_unlock_irq+0x2e/0x50 [ 85.676016][ T5172] ? ptrace_notify+0xfe/0x140 [ 85.680691][ T5172] do_syscall_64+0x39/0xb0 [ 85.685106][ T5172] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.690996][ T5172] RIP: 0033:0x7f607b0de549 [ 85.695412][ T5172] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 85.715453][ T5172] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 85.723863][ T5172] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 85.731827][ T5172] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 85.739806][ T5172] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5172] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5172] close(3) = 0 [pid 5172] close(4) = 0 [pid 5172] close(5) = 0 [pid 5172] close(6) = 0 [pid 5172] close(7) = 0 [pid 5172] close(8) = -1 EBADF (Bad file descriptor) [pid 5172] close(9) = -1 EBADF (Bad file descriptor) [pid 5172] close(10) = -1 EBADF (Bad file descriptor) [pid 5172] close(11) = -1 EBADF (Bad file descriptor) [pid 5172] close(12) = -1 EBADF (Bad file descriptor) [pid 5172] close(13) = -1 EBADF (Bad file descriptor) [pid 5172] close(14) = -1 EBADF (Bad file descriptor) [pid 5172] close(15) = -1 EBADF (Bad file descriptor) [pid 5172] close(16) = -1 EBADF (Bad file descriptor) [pid 5172] close(17) = -1 EBADF (Bad file descriptor) [pid 5172] close(18) = -1 EBADF (Bad file descriptor) [pid 5172] close(19) = -1 EBADF (Bad file descriptor) [pid 5172] close(20) = -1 EBADF (Bad file descriptor) [pid 5172] close(21) = -1 EBADF (Bad file descriptor) [pid 5172] close(22) = -1 EBADF (Bad file descriptor) [pid 5172] close(23) = -1 EBADF (Bad file descriptor) [pid 5172] close(24) = -1 EBADF (Bad file descriptor) [pid 5172] close(25) = -1 EBADF (Bad file descriptor) [pid 5172] close(26) = -1 EBADF (Bad file descriptor) [pid 5172] close(27) = -1 EBADF (Bad file descriptor) [pid 5172] close(28) = -1 EBADF (Bad file descriptor) [pid 5172] close(29) = -1 EBADF (Bad file descriptor) [pid 5172] exit_group(0) = ? [pid 5172] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5173 attached , child_tidptr=0x555555eff5d0) = 86 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5173] setpgid(0, 0) = 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5173] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5173] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5173] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5173] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5173] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5173] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 85.748221][ T5172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 85.756184][ T5172] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 85.764249][ T5172] [pid 5173] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5173] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5173] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5173] write(7, "5", 1) = 1 [ 85.812071][ T5173] FAULT_INJECTION: forcing a failure. [ 85.812071][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 85.824773][ T5173] CPU: 0 PID: 5173 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 85.834690][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 85.844782][ T5173] Call Trace: [ 85.848073][ T5173] [ 85.851020][ T5173] dump_stack_lvl+0xd1/0x138 [ 85.855622][ T5173] should_fail_ex.cold+0x5/0xa [ 85.860404][ T5173] ? __inet_hash_connect+0x95e/0x1ba0 [ 85.865809][ T5173] should_failslab+0x9/0x20 [ 85.870326][ T5173] kmem_cache_alloc+0x5a/0x320 [ 85.875122][ T5173] __inet_hash_connect+0x95e/0x1ba0 [ 85.880343][ T5173] ? __inet_lookup_listener+0xbf0/0xbf0 [ 85.885935][ T5173] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 85.892305][ T5173] dccp_v4_connect+0xb82/0x1730 [ 85.897204][ T5173] __inet_stream_connect+0x69e/0xed0 [ 85.902528][ T5173] ? inet_listen+0x640/0x640 [ 85.907150][ T5173] ? mark_held_locks+0x9f/0xe0 [ 85.911937][ T5173] ? __local_bh_enable_ip+0xa4/0x130 [ 85.917255][ T5173] inet_stream_connect+0x57/0xa0 [ 85.922260][ T5173] ? __inet_stream_connect+0xed0/0xed0 [ 85.927752][ T5173] __sys_connect_file+0x153/0x1a0 [ 85.932800][ T5173] io_connect+0x3cc/0x720 [ 85.937180][ T5173] ? io_connect_prep+0x250/0x250 [ 85.942141][ T5173] ? receive_fd+0x110/0x110 [ 85.946687][ T5173] ? rcu_read_lock_sched_held+0x3e/0x70 [ 85.952255][ T5173] ? io_connect_prep+0x250/0x250 [ 85.957226][ T5173] io_issue_sqe+0x695/0x1250 [ 85.961847][ T5173] io_submit_sqes+0x96c/0x1e90 [ 85.966657][ T5173] __do_sys_io_uring_enter+0x103d/0x24e0 [ 85.972329][ T5173] ? io_submit_sqes+0x1e90/0x1e90 [ 85.977383][ T5173] ? ptrace_notify+0xfe/0x140 [ 85.982082][ T5173] ? lock_downgrade+0x6e0/0x6e0 [ 85.986977][ T5173] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.992207][ T5173] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.997428][ T5173] ? _raw_spin_unlock_irq+0x2e/0x50 [ 86.002652][ T5173] ? ptrace_notify+0xfe/0x140 [ 86.007359][ T5173] do_syscall_64+0x39/0xb0 [ 86.011812][ T5173] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.017735][ T5173] RIP: 0033:0x7f607b0de549 [ 86.022166][ T5173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 86.041795][ T5173] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 86.050228][ T5173] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5173] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5173] close(3) = 0 [pid 5173] close(4) = 0 [pid 5173] close(5) = 0 [pid 5173] close(6) = 0 [pid 5173] close(7) = 0 [pid 5173] close(8) = -1 EBADF (Bad file descriptor) [pid 5173] close(9) = -1 EBADF (Bad file descriptor) [pid 5173] close(10) = -1 EBADF (Bad file descriptor) [pid 5173] close(11) = -1 EBADF (Bad file descriptor) [pid 5173] close(12) = -1 EBADF (Bad file descriptor) [pid 5173] close(13) = -1 EBADF (Bad file descriptor) [pid 5173] close(14) = -1 EBADF (Bad file descriptor) [pid 5173] close(15) = -1 EBADF (Bad file descriptor) [pid 5173] close(16) = -1 EBADF (Bad file descriptor) [pid 5173] close(17) = -1 EBADF (Bad file descriptor) [pid 5173] close(18) = -1 EBADF (Bad file descriptor) [pid 5173] close(19) = -1 EBADF (Bad file descriptor) [pid 5173] close(20) = -1 EBADF (Bad file descriptor) [pid 5173] close(21) = -1 EBADF (Bad file descriptor) [pid 5173] close(22) = -1 EBADF (Bad file descriptor) [pid 5173] close(23) = -1 EBADF (Bad file descriptor) [pid 5173] close(24) = -1 EBADF (Bad file descriptor) [pid 5173] close(25) = -1 EBADF (Bad file descriptor) [pid 5173] close(26) = -1 EBADF (Bad file descriptor) [pid 5173] close(27) = -1 EBADF (Bad file descriptor) [pid 5173] close(28) = -1 EBADF (Bad file descriptor) [pid 5173] close(29) = -1 EBADF (Bad file descriptor) [pid 5173] exit_group(0) = ? [pid 5173] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 87 ./strace-static-x86_64: Process 5175 attached [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] write(3, "1000", 4) = 4 [pid 5175] close(3) = 0 [pid 5175] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5175] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5175] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5175] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5175] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5175] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5175] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5175] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5175] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5175] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5175] write(7, "5", 1) = 1 [ 86.058537][ T5173] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 86.066524][ T5173] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 86.074511][ T5173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 86.082493][ T5173] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 86.090502][ T5173] [ 86.142668][ T5175] FAULT_INJECTION: forcing a failure. [ 86.142668][ T5175] name failslab, interval 1, probability 0, space 0, times 0 [ 86.155321][ T5175] CPU: 1 PID: 5175 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 86.165213][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 86.175269][ T5175] Call Trace: [ 86.178546][ T5175] [ 86.181477][ T5175] dump_stack_lvl+0xd1/0x138 [ 86.186093][ T5175] should_fail_ex.cold+0x5/0xa [ 86.190926][ T5175] ? __inet_hash_connect+0x95e/0x1ba0 [ 86.196321][ T5175] should_failslab+0x9/0x20 [ 86.200869][ T5175] kmem_cache_alloc+0x5a/0x320 [ 86.205670][ T5175] __inet_hash_connect+0x95e/0x1ba0 [ 86.210899][ T5175] ? __inet_lookup_listener+0xbf0/0xbf0 [ 86.216612][ T5175] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 86.222992][ T5175] dccp_v4_connect+0xb82/0x1730 [ 86.227893][ T5175] __inet_stream_connect+0x69e/0xed0 [ 86.233224][ T5175] ? inet_listen+0x640/0x640 [ 86.237847][ T5175] ? mark_held_locks+0x9f/0xe0 [ 86.242632][ T5175] ? __local_bh_enable_ip+0xa4/0x130 [ 86.247951][ T5175] inet_stream_connect+0x57/0xa0 [ 86.252917][ T5175] ? __inet_stream_connect+0xed0/0xed0 [ 86.258412][ T5175] __sys_connect_file+0x153/0x1a0 [ 86.263463][ T5175] io_connect+0x3cc/0x720 [ 86.267826][ T5175] ? io_connect_prep+0x250/0x250 [ 86.272791][ T5175] ? receive_fd+0x110/0x110 [ 86.277338][ T5175] ? rcu_read_lock_sched_held+0x3e/0x70 [ 86.282903][ T5175] ? io_connect_prep+0x250/0x250 [ 86.287876][ T5175] io_issue_sqe+0x695/0x1250 [ 86.292500][ T5175] io_submit_sqes+0x96c/0x1e90 [ 86.297317][ T5175] __do_sys_io_uring_enter+0x103d/0x24e0 [ 86.303006][ T5175] ? io_submit_sqes+0x1e90/0x1e90 [ 86.308060][ T5175] ? ptrace_notify+0xfe/0x140 [ 86.312754][ T5175] ? lock_downgrade+0x6e0/0x6e0 [ 86.317665][ T5175] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.322902][ T5175] ? lockdep_hardirqs_on+0x7d/0x100 [ 86.328128][ T5175] ? _raw_spin_unlock_irq+0x2e/0x50 [ 86.333351][ T5175] ? ptrace_notify+0xfe/0x140 [ 86.338058][ T5175] do_syscall_64+0x39/0xb0 [ 86.342503][ T5175] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.348444][ T5175] RIP: 0033:0x7f607b0de549 [ 86.352890][ T5175] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 86.372520][ T5175] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 86.380955][ T5175] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5175] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5175] close(3) = 0 [pid 5175] close(4) = 0 [pid 5175] close(5) = 0 [pid 5175] close(6) = 0 [pid 5175] close(7) = 0 [pid 5175] close(8) = -1 EBADF (Bad file descriptor) [pid 5175] close(9) = -1 EBADF (Bad file descriptor) [pid 5175] close(10) = -1 EBADF (Bad file descriptor) [pid 5175] close(11) = -1 EBADF (Bad file descriptor) [pid 5175] close(12) = -1 EBADF (Bad file descriptor) [pid 5175] close(13) = -1 EBADF (Bad file descriptor) [pid 5175] close(14) = -1 EBADF (Bad file descriptor) [pid 5175] close(15) = -1 EBADF (Bad file descriptor) [pid 5175] close(16) = -1 EBADF (Bad file descriptor) [pid 5175] close(17) = -1 EBADF (Bad file descriptor) [pid 5175] close(18) = -1 EBADF (Bad file descriptor) [pid 5175] close(19) = -1 EBADF (Bad file descriptor) [pid 5175] close(20) = -1 EBADF (Bad file descriptor) [pid 5175] close(21) = -1 EBADF (Bad file descriptor) [pid 5175] close(22) = -1 EBADF (Bad file descriptor) [pid 5175] close(23) = -1 EBADF (Bad file descriptor) [pid 5175] close(24) = -1 EBADF (Bad file descriptor) [pid 5175] close(25) = -1 EBADF (Bad file descriptor) [pid 5175] close(26) = -1 EBADF (Bad file descriptor) [pid 5175] close(27) = -1 EBADF (Bad file descriptor) [pid 5175] close(28) = -1 EBADF (Bad file descriptor) [pid 5175] close(29) = -1 EBADF (Bad file descriptor) [pid 5175] exit_group(0) = ? [pid 5175] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 88 ./strace-static-x86_64: Process 5176 attached [pid 5176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5176] setpgid(0, 0) = 0 [pid 5176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5176] write(3, "1000", 4) = 4 [pid 5176] close(3) = 0 [pid 5176] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5176] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5176] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5176] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5176] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5176] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5176] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5176] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5176] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5176] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5176] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5176] write(7, "5", 1) = 1 [ 86.388941][ T5175] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 86.396925][ T5175] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 86.404911][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 86.412892][ T5175] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 86.420901][ T5175] [ 86.474428][ T5176] FAULT_INJECTION: forcing a failure. [ 86.474428][ T5176] name failslab, interval 1, probability 0, space 0, times 0 [ 86.487125][ T5176] CPU: 0 PID: 5176 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 86.497195][ T5176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 86.507600][ T5176] Call Trace: [ 86.510889][ T5176] [ 86.513860][ T5176] dump_stack_lvl+0xd1/0x138 [ 86.518488][ T5176] should_fail_ex.cold+0x5/0xa [ 86.523253][ T5176] ? __inet_hash_connect+0x95e/0x1ba0 [ 86.528627][ T5176] should_failslab+0x9/0x20 [ 86.533136][ T5176] kmem_cache_alloc+0x5a/0x320 [ 86.537927][ T5176] __inet_hash_connect+0x95e/0x1ba0 [ 86.543171][ T5176] ? __inet_lookup_listener+0xbf0/0xbf0 [ 86.548790][ T5176] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 86.555158][ T5176] dccp_v4_connect+0xb82/0x1730 [ 86.560058][ T5176] __inet_stream_connect+0x69e/0xed0 [ 86.565382][ T5176] ? inet_listen+0x640/0x640 [ 86.570007][ T5176] ? mark_held_locks+0x9f/0xe0 [ 86.575226][ T5176] ? __local_bh_enable_ip+0xa4/0x130 [ 86.580538][ T5176] inet_stream_connect+0x57/0xa0 [ 86.585504][ T5176] ? __inet_stream_connect+0xed0/0xed0 [ 86.591013][ T5176] __sys_connect_file+0x153/0x1a0 [ 86.596062][ T5176] io_connect+0x3cc/0x720 [ 86.600429][ T5176] ? io_connect_prep+0x250/0x250 [ 86.605395][ T5176] ? receive_fd+0x110/0x110 [ 86.609934][ T5176] ? rcu_read_lock_sched_held+0x3e/0x70 [ 86.615503][ T5176] ? io_connect_prep+0x250/0x250 [ 86.620482][ T5176] io_issue_sqe+0x695/0x1250 [ 86.625108][ T5176] io_submit_sqes+0x96c/0x1e90 [ 86.629925][ T5176] __do_sys_io_uring_enter+0x103d/0x24e0 [ 86.635619][ T5176] ? io_submit_sqes+0x1e90/0x1e90 [ 86.640693][ T5176] ? ptrace_notify+0xfe/0x140 [ 86.645400][ T5176] ? lock_downgrade+0x6e0/0x6e0 [ 86.650280][ T5176] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.655517][ T5176] ? lockdep_hardirqs_on+0x7d/0x100 [ 86.660736][ T5176] ? _raw_spin_unlock_irq+0x2e/0x50 [ 86.665958][ T5176] ? ptrace_notify+0xfe/0x140 [ 86.670657][ T5176] do_syscall_64+0x39/0xb0 [ 86.675106][ T5176] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.681020][ T5176] RIP: 0033:0x7f607b0de549 [ 86.685458][ T5176] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 86.705522][ T5176] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 86.714163][ T5176] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5176] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5176] close(3) = 0 [pid 5176] close(4) = 0 [pid 5176] close(5) = 0 [pid 5176] close(6) = 0 [pid 5176] close(7) = 0 [pid 5176] close(8) = -1 EBADF (Bad file descriptor) [pid 5176] close(9) = -1 EBADF (Bad file descriptor) [pid 5176] close(10) = -1 EBADF (Bad file descriptor) [pid 5176] close(11) = -1 EBADF (Bad file descriptor) [pid 5176] close(12) = -1 EBADF (Bad file descriptor) [pid 5176] close(13) = -1 EBADF (Bad file descriptor) [pid 5176] close(14) = -1 EBADF (Bad file descriptor) [pid 5176] close(15) = -1 EBADF (Bad file descriptor) [pid 5176] close(16) = -1 EBADF (Bad file descriptor) [pid 5176] close(17) = -1 EBADF (Bad file descriptor) [pid 5176] close(18) = -1 EBADF (Bad file descriptor) [pid 5176] close(19) = -1 EBADF (Bad file descriptor) [pid 5176] close(20) = -1 EBADF (Bad file descriptor) [pid 5176] close(21) = -1 EBADF (Bad file descriptor) [pid 5176] close(22) = -1 EBADF (Bad file descriptor) [pid 5176] close(23) = -1 EBADF (Bad file descriptor) [pid 5176] close(24) = -1 EBADF (Bad file descriptor) [pid 5176] close(25) = -1 EBADF (Bad file descriptor) [pid 5176] close(26) = -1 EBADF (Bad file descriptor) [pid 5176] close(27) = -1 EBADF (Bad file descriptor) [pid 5176] close(28) = -1 EBADF (Bad file descriptor) [pid 5176] close(29) = -1 EBADF (Bad file descriptor) [pid 5176] exit_group(0) = ? [pid 5176] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5177 attached , child_tidptr=0x555555eff5d0) = 89 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5177] setpgid(0, 0) = 0 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5177] write(3, "1000", 4) = 4 [pid 5177] close(3) = 0 [pid 5177] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 86.722150][ T5176] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 86.730134][ T5176] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 86.738119][ T5176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 86.746626][ T5176] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 86.754634][ T5176] [pid 5177] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5177] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5177] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5177] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5177] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5177] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5177] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5177] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5177] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5177] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5177] write(7, "5", 1) = 1 [ 86.824229][ T5177] FAULT_INJECTION: forcing a failure. [ 86.824229][ T5177] name failslab, interval 1, probability 0, space 0, times 0 [ 86.837161][ T5177] CPU: 0 PID: 5177 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 86.847093][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 86.857161][ T5177] Call Trace: [ 86.860444][ T5177] [ 86.863382][ T5177] dump_stack_lvl+0xd1/0x138 [ 86.868001][ T5177] should_fail_ex.cold+0x5/0xa [ 86.872793][ T5177] ? io_issue_sqe+0x695/0x1250 [ 86.877577][ T5177] should_failslab+0x9/0x20 [ 86.882113][ T5177] __kmem_cache_alloc_node+0x5b/0x330 [ 86.887491][ T5177] ? ref_tracker_alloc+0x158/0x560 [ 86.892643][ T5177] kmalloc_trace+0x26/0x60 [ 86.897096][ T5177] ref_tracker_alloc+0x158/0x560 [ 86.902068][ T5177] ? __lock_acquire+0xbc3/0x56d0 [ 86.907030][ T5177] ? ref_tracker_free+0x6b0/0x6b0 [ 86.912109][ T5177] dst_init+0xe4/0x520 [ 86.916208][ T5177] dst_alloc+0x16f/0x1f0 [ 86.920480][ T5177] rt_dst_alloc+0x55/0x430 [ 86.924924][ T5177] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 86.930947][ T5177] ip_route_output_key_hash+0x18f/0x340 [ 86.936532][ T5177] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 86.942833][ T5177] dccp_v4_connect+0x7e1/0x1730 [ 86.947772][ T5177] __inet_stream_connect+0x69e/0xed0 [ 86.953103][ T5177] ? inet_listen+0x640/0x640 [ 86.957744][ T5177] ? mark_held_locks+0x9f/0xe0 [ 86.962532][ T5177] ? __local_bh_enable_ip+0xa4/0x130 [ 86.967852][ T5177] inet_stream_connect+0x57/0xa0 [ 86.972829][ T5177] ? __inet_stream_connect+0xed0/0xed0 [ 86.978326][ T5177] __sys_connect_file+0x153/0x1a0 [ 86.983384][ T5177] io_connect+0x3cc/0x720 [ 86.987757][ T5177] ? io_connect_prep+0x250/0x250 [ 86.992729][ T5177] ? receive_fd+0x110/0x110 [ 86.997273][ T5177] ? rcu_read_lock_sched_held+0x3e/0x70 [ 87.003364][ T5177] ? io_connect_prep+0x250/0x250 [ 87.008336][ T5177] io_issue_sqe+0x695/0x1250 [ 87.012963][ T5177] io_submit_sqes+0x96c/0x1e90 [ 87.017784][ T5177] __do_sys_io_uring_enter+0x103d/0x24e0 [ 87.023459][ T5177] ? io_submit_sqes+0x1e90/0x1e90 [ 87.028517][ T5177] ? ptrace_notify+0xfe/0x140 [ 87.033214][ T5177] ? lock_downgrade+0x6e0/0x6e0 [ 87.038095][ T5177] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.043321][ T5177] ? lockdep_hardirqs_on+0x7d/0x100 [ 87.048541][ T5177] ? _raw_spin_unlock_irq+0x2e/0x50 [ 87.053850][ T5177] ? ptrace_notify+0xfe/0x140 [ 87.058605][ T5177] do_syscall_64+0x39/0xb0 [ 87.063051][ T5177] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.068966][ T5177] RIP: 0033:0x7f607b0de549 [ 87.073396][ T5177] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 87.093040][ T5177] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 87.101483][ T5177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 87.109471][ T5177] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 87.117453][ T5177] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5177] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5177] close(3) = 0 [pid 5177] close(4) = 0 [pid 5177] close(5) = 0 [pid 5177] close(6) = 0 [pid 5177] close(7) = 0 [pid 5177] close(8) = -1 EBADF (Bad file descriptor) [pid 5177] close(9) = -1 EBADF (Bad file descriptor) [pid 5177] close(10) = -1 EBADF (Bad file descriptor) [pid 5177] close(11) = -1 EBADF (Bad file descriptor) [pid 5177] close(12) = -1 EBADF (Bad file descriptor) [pid 5177] close(13) = -1 EBADF (Bad file descriptor) [pid 5177] close(14) = -1 EBADF (Bad file descriptor) [pid 5177] close(15) = -1 EBADF (Bad file descriptor) [pid 5177] close(16) = -1 EBADF (Bad file descriptor) [pid 5177] close(17) = -1 EBADF (Bad file descriptor) [pid 5177] close(18) = -1 EBADF (Bad file descriptor) [pid 5177] close(19) = -1 EBADF (Bad file descriptor) [pid 5177] close(20) = -1 EBADF (Bad file descriptor) [pid 5177] close(21) = -1 EBADF (Bad file descriptor) [pid 5177] close(22) = -1 EBADF (Bad file descriptor) [pid 5177] close(23) = -1 EBADF (Bad file descriptor) [pid 5177] close(24) = -1 EBADF (Bad file descriptor) [pid 5177] close(25) = -1 EBADF (Bad file descriptor) [pid 5177] close(26) = -1 EBADF (Bad file descriptor) [pid 5177] close(27) = -1 EBADF (Bad file descriptor) [pid 5177] close(28) = -1 EBADF (Bad file descriptor) [pid 5177] close(29) = -1 EBADF (Bad file descriptor) [pid 5177] exit_group(0) = ? [pid 5177] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 90 ./strace-static-x86_64: Process 5178 attached [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 87.125439][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 87.133431][ T5177] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 87.141439][ T5177] [pid 5178] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5178] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5178] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5178] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5178] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5178] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5178] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5178] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5178] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5178] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5178] write(7, "5", 1) = 1 [ 87.199821][ T5178] FAULT_INJECTION: forcing a failure. [ 87.199821][ T5178] name failslab, interval 1, probability 0, space 0, times 0 [ 87.212611][ T5178] CPU: 0 PID: 5178 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 87.222528][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 87.232585][ T5178] Call Trace: [ 87.235860][ T5178] [ 87.238791][ T5178] dump_stack_lvl+0xd1/0x138 [ 87.243387][ T5178] should_fail_ex.cold+0x5/0xa [ 87.248157][ T5178] ? io_issue_sqe+0x695/0x1250 [ 87.252954][ T5178] should_failslab+0x9/0x20 [ 87.257462][ T5178] __kmem_cache_alloc_node+0x5b/0x330 [ 87.262851][ T5178] ? ref_tracker_alloc+0x158/0x560 [ 87.268002][ T5178] kmalloc_trace+0x26/0x60 [ 87.272448][ T5178] ref_tracker_alloc+0x158/0x560 [ 87.277433][ T5178] ? __lock_acquire+0xbc3/0x56d0 [ 87.282403][ T5178] ? ref_tracker_free+0x6b0/0x6b0 [ 87.287515][ T5178] dst_init+0xe4/0x520 [ 87.291622][ T5178] dst_alloc+0x16f/0x1f0 [ 87.295897][ T5178] rt_dst_alloc+0x55/0x430 [ 87.300345][ T5178] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 87.306367][ T5178] ip_route_output_key_hash+0x18f/0x340 [ 87.311942][ T5178] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 87.318230][ T5178] dccp_v4_connect+0x7e1/0x1730 [ 87.323218][ T5178] __inet_stream_connect+0x69e/0xed0 [ 87.328543][ T5178] ? inet_listen+0x640/0x640 [ 87.333166][ T5178] ? mark_held_locks+0x9f/0xe0 [ 87.337955][ T5178] ? __local_bh_enable_ip+0xa4/0x130 [ 87.343291][ T5178] inet_stream_connect+0x57/0xa0 [ 87.348261][ T5178] ? __inet_stream_connect+0xed0/0xed0 [ 87.353760][ T5178] __sys_connect_file+0x153/0x1a0 [ 87.358811][ T5178] io_connect+0x3cc/0x720 [ 87.364064][ T5178] ? io_connect_prep+0x250/0x250 [ 87.369031][ T5178] ? receive_fd+0x110/0x110 [ 87.373583][ T5178] ? rcu_read_lock_sched_held+0x3e/0x70 [ 87.379149][ T5178] ? io_connect_prep+0x250/0x250 [ 87.384119][ T5178] io_issue_sqe+0x695/0x1250 [ 87.388740][ T5178] io_submit_sqes+0x96c/0x1e90 [ 87.393556][ T5178] __do_sys_io_uring_enter+0x103d/0x24e0 [ 87.399228][ T5178] ? io_submit_sqes+0x1e90/0x1e90 [ 87.404284][ T5178] ? ptrace_notify+0xfe/0x140 [ 87.408981][ T5178] ? lock_downgrade+0x6e0/0x6e0 [ 87.413859][ T5178] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.419087][ T5178] ? lockdep_hardirqs_on+0x7d/0x100 [ 87.424320][ T5178] ? _raw_spin_unlock_irq+0x2e/0x50 [ 87.429540][ T5178] ? ptrace_notify+0xfe/0x140 [ 87.434243][ T5178] do_syscall_64+0x39/0xb0 [ 87.438692][ T5178] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.444613][ T5178] RIP: 0033:0x7f607b0de549 [ 87.449043][ T5178] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 87.468690][ T5178] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 87.477133][ T5178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 87.485122][ T5178] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 87.493106][ T5178] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5178] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5178] close(3) = 0 [pid 5178] close(4) = 0 [pid 5178] close(5) = 0 [pid 5178] close(6) = 0 [pid 5178] close(7) = 0 [pid 5178] close(8) = -1 EBADF (Bad file descriptor) [pid 5178] close(9) = -1 EBADF (Bad file descriptor) [pid 5178] close(10) = -1 EBADF (Bad file descriptor) [pid 5178] close(11) = -1 EBADF (Bad file descriptor) [pid 5178] close(12) = -1 EBADF (Bad file descriptor) [pid 5178] close(13) = -1 EBADF (Bad file descriptor) [pid 5178] close(14) = -1 EBADF (Bad file descriptor) [pid 5178] close(15) = -1 EBADF (Bad file descriptor) [pid 5178] close(16) = -1 EBADF (Bad file descriptor) [pid 5178] close(17) = -1 EBADF (Bad file descriptor) [pid 5178] close(18) = -1 EBADF (Bad file descriptor) [pid 5178] close(19) = -1 EBADF (Bad file descriptor) [pid 5178] close(20) = -1 EBADF (Bad file descriptor) [pid 5178] close(21) = -1 EBADF (Bad file descriptor) [pid 5178] close(22) = -1 EBADF (Bad file descriptor) [pid 5178] close(23) = -1 EBADF (Bad file descriptor) [pid 5178] close(24) = -1 EBADF (Bad file descriptor) [pid 5178] close(25) = -1 EBADF (Bad file descriptor) [pid 5178] close(26) = -1 EBADF (Bad file descriptor) [pid 5178] close(27) = -1 EBADF (Bad file descriptor) [pid 5178] close(28) = -1 EBADF (Bad file descriptor) [pid 5178] close(29) = -1 EBADF (Bad file descriptor) [pid 5178] exit_group(0) = ? [pid 5178] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 91 ./strace-static-x86_64: Process 5179 attached [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5179] setpgid(0, 0) = 0 [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5179] write(3, "1000", 4) = 4 [pid 5179] close(3) = 0 [pid 5179] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5179] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5179] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5179] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5179] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5179] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5179] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5179] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5179] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5179] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5179] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5179] write(7, "5", 1) = 1 [ 87.501088][ T5178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 87.509071][ T5178] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 87.517080][ T5178] [ 87.555042][ T5179] FAULT_INJECTION: forcing a failure. [ 87.555042][ T5179] name failslab, interval 1, probability 0, space 0, times 0 [ 87.567826][ T5179] CPU: 0 PID: 5179 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 87.577725][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 87.587782][ T5179] Call Trace: [ 87.591085][ T5179] [ 87.594029][ T5179] dump_stack_lvl+0xd1/0x138 [ 87.598645][ T5179] should_fail_ex.cold+0x5/0xa [ 87.603425][ T5179] ? __inet_hash_connect+0x95e/0x1ba0 [ 87.608832][ T5179] should_failslab+0x9/0x20 [ 87.613398][ T5179] kmem_cache_alloc+0x5a/0x320 [ 87.618280][ T5179] __inet_hash_connect+0x95e/0x1ba0 [ 87.623532][ T5179] ? __inet_lookup_listener+0xbf0/0xbf0 [ 87.629141][ T5179] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 87.635527][ T5179] dccp_v4_connect+0xb82/0x1730 [ 87.640423][ T5179] __inet_stream_connect+0x69e/0xed0 [ 87.645746][ T5179] ? inet_listen+0x640/0x640 [ 87.650385][ T5179] ? mark_held_locks+0x9f/0xe0 [ 87.655157][ T5179] ? __local_bh_enable_ip+0xa4/0x130 [ 87.660465][ T5179] inet_stream_connect+0x57/0xa0 [ 87.665446][ T5179] ? __inet_stream_connect+0xed0/0xed0 [ 87.670916][ T5179] __sys_connect_file+0x153/0x1a0 [ 87.675946][ T5179] io_connect+0x3cc/0x720 [ 87.680287][ T5179] ? io_connect_prep+0x250/0x250 [ 87.685268][ T5179] ? receive_fd+0x110/0x110 [ 87.689794][ T5179] ? rcu_read_lock_sched_held+0x3e/0x70 [ 87.695346][ T5179] ? io_connect_prep+0x250/0x250 [ 87.700313][ T5179] io_issue_sqe+0x695/0x1250 [ 87.704948][ T5179] io_submit_sqes+0x96c/0x1e90 [ 87.709756][ T5179] __do_sys_io_uring_enter+0x103d/0x24e0 [ 87.715396][ T5179] ? io_submit_sqes+0x1e90/0x1e90 [ 87.720438][ T5179] ? ptrace_notify+0xfe/0x140 [ 87.725141][ T5179] ? lock_downgrade+0x6e0/0x6e0 [ 87.730018][ T5179] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.735221][ T5179] ? lockdep_hardirqs_on+0x7d/0x100 [ 87.740437][ T5179] ? _raw_spin_unlock_irq+0x2e/0x50 [ 87.745683][ T5179] ? ptrace_notify+0xfe/0x140 [ 87.750385][ T5179] do_syscall_64+0x39/0xb0 [ 87.754859][ T5179] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.761049][ T5179] RIP: 0033:0x7f607b0de549 [ 87.765464][ T5179] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 87.785081][ T5179] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 87.793503][ T5179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5179] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5179] close(3) = 0 [pid 5179] close(4) = 0 [pid 5179] close(5) = 0 [pid 5179] close(6) = 0 [pid 5179] close(7) = 0 [pid 5179] close(8) = -1 EBADF (Bad file descriptor) [pid 5179] close(9) = -1 EBADF (Bad file descriptor) [pid 5179] close(10) = -1 EBADF (Bad file descriptor) [pid 5179] close(11) = -1 EBADF (Bad file descriptor) [pid 5179] close(12) = -1 EBADF (Bad file descriptor) [pid 5179] close(13) = -1 EBADF (Bad file descriptor) [pid 5179] close(14) = -1 EBADF (Bad file descriptor) [pid 5179] close(15) = -1 EBADF (Bad file descriptor) [pid 5179] close(16) = -1 EBADF (Bad file descriptor) [pid 5179] close(17) = -1 EBADF (Bad file descriptor) [pid 5179] close(18) = -1 EBADF (Bad file descriptor) [pid 5179] close(19) = -1 EBADF (Bad file descriptor) [pid 5179] close(20) = -1 EBADF (Bad file descriptor) [pid 5179] close(21) = -1 EBADF (Bad file descriptor) [pid 5179] close(22) = -1 EBADF (Bad file descriptor) [pid 5179] close(23) = -1 EBADF (Bad file descriptor) [pid 5179] close(24) = -1 EBADF (Bad file descriptor) [pid 5179] close(25) = -1 EBADF (Bad file descriptor) [pid 5179] close(26) = -1 EBADF (Bad file descriptor) [pid 5179] close(27) = -1 EBADF (Bad file descriptor) [pid 5179] close(28) = -1 EBADF (Bad file descriptor) [pid 5179] close(29) = -1 EBADF (Bad file descriptor) [pid 5179] exit_group(0) = ? [pid 5179] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 92 ./strace-static-x86_64: Process 5180 attached [pid 5180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5180] setpgid(0, 0) = 0 [pid 5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5180] write(3, "1000", 4) = 4 [pid 5180] close(3) = 0 [pid 5180] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5180] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5180] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5180] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5180] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5180] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5180] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5180] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5180] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5180] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5180] write(7, "5", 1) = 1 [ 87.801475][ T5179] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 87.809454][ T5179] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 87.817438][ T5179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 87.825435][ T5179] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 87.833442][ T5179] [ 87.878981][ T5180] FAULT_INJECTION: forcing a failure. [ 87.878981][ T5180] name failslab, interval 1, probability 0, space 0, times 0 [ 87.891828][ T5180] CPU: 0 PID: 5180 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 87.902611][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 87.912707][ T5180] Call Trace: [ 87.916001][ T5180] [ 87.918932][ T5180] dump_stack_lvl+0xd1/0x138 [ 87.923548][ T5180] should_fail_ex.cold+0x5/0xa [ 87.928334][ T5180] ? io_issue_sqe+0x695/0x1250 [ 87.933419][ T5180] should_failslab+0x9/0x20 [ 87.937943][ T5180] __kmem_cache_alloc_node+0x5b/0x330 [ 87.943341][ T5180] ? ref_tracker_alloc+0x158/0x560 [ 87.948572][ T5180] kmalloc_trace+0x26/0x60 [ 87.953023][ T5180] ref_tracker_alloc+0x158/0x560 [ 87.957997][ T5180] ? __lock_acquire+0xbc3/0x56d0 [ 87.962959][ T5180] ? ref_tracker_free+0x6b0/0x6b0 [ 87.968037][ T5180] dst_init+0xe4/0x520 [ 87.972137][ T5180] dst_alloc+0x16f/0x1f0 [ 87.976406][ T5180] rt_dst_alloc+0x55/0x430 [ 87.980849][ T5180] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 87.986870][ T5180] ip_route_output_key_hash+0x18f/0x340 [ 87.992443][ T5180] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 87.998743][ T5180] dccp_v4_connect+0x7e1/0x1730 [ 88.003643][ T5180] __inet_stream_connect+0x69e/0xed0 [ 88.008988][ T5180] ? inet_listen+0x640/0x640 [ 88.013612][ T5180] ? mark_held_locks+0x9f/0xe0 [ 88.018406][ T5180] ? __local_bh_enable_ip+0xa4/0x130 [ 88.023722][ T5180] inet_stream_connect+0x57/0xa0 [ 88.028692][ T5180] ? __inet_stream_connect+0xed0/0xed0 [ 88.034274][ T5180] __sys_connect_file+0x153/0x1a0 [ 88.039324][ T5180] io_connect+0x3cc/0x720 [ 88.043777][ T5180] ? io_connect_prep+0x250/0x250 [ 88.048760][ T5180] ? receive_fd+0x110/0x110 [ 88.053303][ T5180] ? rcu_read_lock_sched_held+0x3e/0x70 [ 88.058934][ T5180] ? io_connect_prep+0x250/0x250 [ 88.063928][ T5180] io_issue_sqe+0x695/0x1250 [ 88.068565][ T5180] io_submit_sqes+0x96c/0x1e90 [ 88.073463][ T5180] __do_sys_io_uring_enter+0x103d/0x24e0 [ 88.079131][ T5180] ? io_submit_sqes+0x1e90/0x1e90 [ 88.084189][ T5180] ? ptrace_notify+0xfe/0x140 [ 88.088972][ T5180] ? lock_downgrade+0x6e0/0x6e0 [ 88.093854][ T5180] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.099080][ T5180] ? lockdep_hardirqs_on+0x7d/0x100 [ 88.104298][ T5180] ? _raw_spin_unlock_irq+0x2e/0x50 [ 88.109605][ T5180] ? ptrace_notify+0xfe/0x140 [ 88.114312][ T5180] do_syscall_64+0x39/0xb0 [ 88.118758][ T5180] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 88.124674][ T5180] RIP: 0033:0x7f607b0de549 [ 88.129113][ T5180] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 88.148738][ T5180] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 88.157174][ T5180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 88.165156][ T5180] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5180] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5180] close(3) = 0 [pid 5180] close(4) = 0 [pid 5180] close(5) = 0 [pid 5180] close(6) = 0 [pid 5180] close(7) = 0 [pid 5180] close(8) = -1 EBADF (Bad file descriptor) [pid 5180] close(9) = -1 EBADF (Bad file descriptor) [pid 5180] close(10) = -1 EBADF (Bad file descriptor) [pid 5180] close(11) = -1 EBADF (Bad file descriptor) [pid 5180] close(12) = -1 EBADF (Bad file descriptor) [pid 5180] close(13) = -1 EBADF (Bad file descriptor) [pid 5180] close(14) = -1 EBADF (Bad file descriptor) [pid 5180] close(15) = -1 EBADF (Bad file descriptor) [pid 5180] close(16) = -1 EBADF (Bad file descriptor) [pid 5180] close(17) = -1 EBADF (Bad file descriptor) [pid 5180] close(18) = -1 EBADF (Bad file descriptor) [pid 5180] close(19) = -1 EBADF (Bad file descriptor) [pid 5180] close(20) = -1 EBADF (Bad file descriptor) [pid 5180] close(21) = -1 EBADF (Bad file descriptor) [pid 5180] close(22) = -1 EBADF (Bad file descriptor) [pid 5180] close(23) = -1 EBADF (Bad file descriptor) [pid 5180] close(24) = -1 EBADF (Bad file descriptor) [pid 5180] close(25) = -1 EBADF (Bad file descriptor) [pid 5180] close(26) = -1 EBADF (Bad file descriptor) [pid 5180] close(27) = -1 EBADF (Bad file descriptor) [pid 5180] close(28) = -1 EBADF (Bad file descriptor) [pid 5180] close(29) = -1 EBADF (Bad file descriptor) [pid 5180] exit_group(0) = ? [pid 5180] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 93 ./strace-static-x86_64: Process 5181 attached [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5181] write(3, "1000", 4) = 4 [pid 5181] close(3) = 0 [pid 5181] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 88.173140][ T5180] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 88.181121][ T5180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 88.189104][ T5180] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 88.197133][ T5180] [pid 5181] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5181] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5181] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5181] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5181] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5181] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5181] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5181] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5181] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5181] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5181] write(7, "5", 1) = 1 [ 88.259391][ T5181] FAULT_INJECTION: forcing a failure. [ 88.259391][ T5181] name failslab, interval 1, probability 0, space 0, times 0 [ 88.272511][ T5181] CPU: 1 PID: 5181 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 88.282447][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 88.292517][ T5181] Call Trace: [ 88.295996][ T5181] [ 88.298940][ T5181] dump_stack_lvl+0xd1/0x138 [ 88.303554][ T5181] should_fail_ex.cold+0x5/0xa [ 88.308522][ T5181] ? io_issue_sqe+0x695/0x1250 [ 88.313334][ T5181] should_failslab+0x9/0x20 [ 88.317850][ T5181] __kmem_cache_alloc_node+0x5b/0x330 [ 88.323227][ T5181] ? ref_tracker_alloc+0x158/0x560 [ 88.328371][ T5181] kmalloc_trace+0x26/0x60 [ 88.333001][ T5181] ref_tracker_alloc+0x158/0x560 [ 88.337984][ T5181] ? __lock_acquire+0xbc3/0x56d0 [ 88.342956][ T5181] ? ref_tracker_free+0x6b0/0x6b0 [ 88.348033][ T5181] dst_init+0xe4/0x520 [ 88.352150][ T5181] dst_alloc+0x16f/0x1f0 [ 88.356440][ T5181] rt_dst_alloc+0x55/0x430 [ 88.360888][ T5181] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 88.366883][ T5181] ip_route_output_key_hash+0x18f/0x340 [ 88.372439][ T5181] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 88.378788][ T5181] dccp_v4_connect+0x7e1/0x1730 [ 88.383686][ T5181] __inet_stream_connect+0x69e/0xed0 [ 88.389003][ T5181] ? inet_listen+0x640/0x640 [ 88.393634][ T5181] ? mark_held_locks+0x9f/0xe0 [ 88.398403][ T5181] ? __local_bh_enable_ip+0xa4/0x130 [ 88.403793][ T5181] inet_stream_connect+0x57/0xa0 [ 88.408748][ T5181] ? __inet_stream_connect+0xed0/0xed0 [ 88.414222][ T5181] __sys_connect_file+0x153/0x1a0 [ 88.419273][ T5181] io_connect+0x3cc/0x720 [ 88.423650][ T5181] ? io_connect_prep+0x250/0x250 [ 88.428612][ T5181] ? receive_fd+0x110/0x110 [ 88.433170][ T5181] ? rcu_read_lock_sched_held+0x3e/0x70 [ 88.438789][ T5181] ? io_connect_prep+0x250/0x250 [ 88.443760][ T5181] io_issue_sqe+0x695/0x1250 [ 88.448363][ T5181] io_submit_sqes+0x96c/0x1e90 [ 88.453184][ T5181] __do_sys_io_uring_enter+0x103d/0x24e0 [ 88.458864][ T5181] ? io_submit_sqes+0x1e90/0x1e90 [ 88.463910][ T5181] ? ptrace_notify+0xfe/0x140 [ 88.468589][ T5181] ? lock_downgrade+0x6e0/0x6e0 [ 88.473485][ T5181] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.478718][ T5181] ? lockdep_hardirqs_on+0x7d/0x100 [ 88.483924][ T5181] ? _raw_spin_unlock_irq+0x2e/0x50 [ 88.490404][ T5181] ? ptrace_notify+0xfe/0x140 [ 88.495109][ T5181] do_syscall_64+0x39/0xb0 [ 88.499534][ T5181] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 88.505432][ T5181] RIP: 0033:0x7f607b0de549 [ 88.509847][ T5181] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 88.529546][ T5181] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 88.537976][ T5181] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 88.545976][ T5181] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5181] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5181] close(3) = 0 [pid 5181] close(4) = 0 [pid 5181] close(5) = 0 [pid 5181] close(6) = 0 [pid 5181] close(7) = 0 [pid 5181] close(8) = -1 EBADF (Bad file descriptor) [pid 5181] close(9) = -1 EBADF (Bad file descriptor) [pid 5181] close(10) = -1 EBADF (Bad file descriptor) [pid 5181] close(11) = -1 EBADF (Bad file descriptor) [pid 5181] close(12) = -1 EBADF (Bad file descriptor) [pid 5181] close(13) = -1 EBADF (Bad file descriptor) [pid 5181] close(14) = -1 EBADF (Bad file descriptor) [pid 5181] close(15) = -1 EBADF (Bad file descriptor) [pid 5181] close(16) = -1 EBADF (Bad file descriptor) [pid 5181] close(17) = -1 EBADF (Bad file descriptor) [pid 5181] close(18) = -1 EBADF (Bad file descriptor) [pid 5181] close(19) = -1 EBADF (Bad file descriptor) [pid 5181] close(20) = -1 EBADF (Bad file descriptor) [pid 5181] close(21) = -1 EBADF (Bad file descriptor) [pid 5181] close(22) = -1 EBADF (Bad file descriptor) [pid 5181] close(23) = -1 EBADF (Bad file descriptor) [pid 5181] close(24) = -1 EBADF (Bad file descriptor) [pid 5181] close(25) = -1 EBADF (Bad file descriptor) [pid 5181] close(26) = -1 EBADF (Bad file descriptor) [pid 5181] close(27) = -1 EBADF (Bad file descriptor) [pid 5181] close(28) = -1 EBADF (Bad file descriptor) [pid 5181] close(29) = -1 EBADF (Bad file descriptor) [pid 5181] exit_group(0) = ? [pid 5181] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=93, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 94 ./strace-static-x86_64: Process 5182 attached [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5182] setpgid(0, 0) = 0 [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5182] write(3, "1000", 4) = 4 [pid 5182] close(3) = 0 [pid 5182] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5182] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5182] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5182] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5182] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5182] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5182] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5182] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5182] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5182] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5182] write(7, "5", 1) = 1 [ 88.553953][ T5181] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 88.561929][ T5181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 88.570004][ T5181] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 88.578039][ T5181] [ 88.616376][ T5182] FAULT_INJECTION: forcing a failure. [ 88.616376][ T5182] name failslab, interval 1, probability 0, space 0, times 0 [ 88.630569][ T5182] CPU: 1 PID: 5182 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 88.640522][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 88.650608][ T5182] Call Trace: [ 88.653899][ T5182] [ 88.656826][ T5182] dump_stack_lvl+0xd1/0x138 [ 88.661424][ T5182] should_fail_ex.cold+0x5/0xa [ 88.666191][ T5182] should_failslab+0x9/0x20 [ 88.670706][ T5182] __kmem_cache_alloc_node+0x5b/0x330 [ 88.676099][ T5182] ? ref_tracker_alloc+0x158/0x560 [ 88.681217][ T5182] kmalloc_trace+0x26/0x60 [ 88.685637][ T5182] ref_tracker_alloc+0x158/0x560 [ 88.690587][ T5182] ? ref_tracker_free+0x6b0/0x6b0 [ 88.695662][ T5182] ? preempt_schedule_notrace_thunk+0x1a/0x20 [ 88.701765][ T5182] ? preempt_schedule_notrace+0x73/0xe0 [ 88.707346][ T5182] ? preempt_schedule_notrace_thunk+0x1a/0x20 [ 88.713451][ T5182] dst_init+0xe4/0x520 [ 88.717562][ T5182] dst_alloc+0x16f/0x1f0 [ 88.721834][ T5182] rt_dst_alloc+0x55/0x430 [ 88.726290][ T5182] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 88.732307][ T5182] ip_route_output_key_hash+0x18f/0x340 [ 88.737895][ T5182] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 88.744183][ T5182] dccp_v4_connect+0x7e1/0x1730 [ 88.749080][ T5182] __inet_stream_connect+0x69e/0xed0 [ 88.754406][ T5182] ? inet_listen+0x640/0x640 [ 88.759029][ T5182] ? mark_held_locks+0x9f/0xe0 [ 88.763817][ T5182] ? __local_bh_enable_ip+0xa4/0x130 [ 88.769130][ T5182] inet_stream_connect+0x57/0xa0 [ 88.774096][ T5182] ? __inet_stream_connect+0xed0/0xed0 [ 88.779583][ T5182] __sys_connect_file+0x153/0x1a0 [ 88.784660][ T5182] io_connect+0x3cc/0x720 [ 88.789022][ T5182] ? io_connect_prep+0x250/0x250 [ 88.793990][ T5182] ? receive_fd+0x110/0x110 [ 88.798534][ T5182] ? rcu_read_lock_sched_held+0x3e/0x70 [ 88.804102][ T5182] ? io_connect_prep+0x250/0x250 [ 88.809074][ T5182] io_issue_sqe+0x695/0x1250 [ 88.813697][ T5182] io_submit_sqes+0x96c/0x1e90 [ 88.818508][ T5182] __do_sys_io_uring_enter+0x103d/0x24e0 [ 88.824175][ T5182] ? io_submit_sqes+0x1e90/0x1e90 [ 88.829326][ T5182] ? ptrace_notify+0xfe/0x140 [ 88.834021][ T5182] ? lock_downgrade+0x6e0/0x6e0 [ 88.838903][ T5182] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.844125][ T5182] ? lockdep_hardirqs_on+0x7d/0x100 [ 88.849344][ T5182] ? _raw_spin_unlock_irq+0x2e/0x50 [ 88.854569][ T5182] ? ptrace_notify+0xfe/0x140 [ 88.859280][ T5182] do_syscall_64+0x39/0xb0 [ 88.863902][ T5182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 88.869822][ T5182] RIP: 0033:0x7f607b0de549 [ 88.874274][ T5182] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 88.893929][ T5182] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 88.902372][ T5182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5182] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5182] close(3) = 0 [pid 5182] close(4) = 0 [pid 5182] close(5) = 0 [pid 5182] close(6) = 0 [pid 5182] close(7) = 0 [pid 5182] close(8) = -1 EBADF (Bad file descriptor) [pid 5182] close(9) = -1 EBADF (Bad file descriptor) [pid 5182] close(10) = -1 EBADF (Bad file descriptor) [pid 5182] close(11) = -1 EBADF (Bad file descriptor) [pid 5182] close(12) = -1 EBADF (Bad file descriptor) [pid 5182] close(13) = -1 EBADF (Bad file descriptor) [pid 5182] close(14) = -1 EBADF (Bad file descriptor) [pid 5182] close(15) = -1 EBADF (Bad file descriptor) [pid 5182] close(16) = -1 EBADF (Bad file descriptor) [pid 5182] close(17) = -1 EBADF (Bad file descriptor) [pid 5182] close(18) = -1 EBADF (Bad file descriptor) [pid 5182] close(19) = -1 EBADF (Bad file descriptor) [pid 5182] close(20) = -1 EBADF (Bad file descriptor) [pid 5182] close(21) = -1 EBADF (Bad file descriptor) [pid 5182] close(22) = -1 EBADF (Bad file descriptor) [pid 5182] close(23) = -1 EBADF (Bad file descriptor) [pid 5182] close(24) = -1 EBADF (Bad file descriptor) [pid 5182] close(25) = -1 EBADF (Bad file descriptor) [pid 5182] close(26) = -1 EBADF (Bad file descriptor) [pid 5182] close(27) = -1 EBADF (Bad file descriptor) [pid 5182] close(28) = -1 EBADF (Bad file descriptor) [pid 5182] close(29) = -1 EBADF (Bad file descriptor) [pid 5182] exit_group(0) = ? [pid 5182] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 95 ./strace-static-x86_64: Process 5183 attached [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5183] setpgid(0, 0) = 0 [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5183] write(3, "1000", 4) = 4 [pid 5183] close(3) = 0 [pid 5183] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5183] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5183] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5183] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5183] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5183] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5183] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5183] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5183] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5183] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5183] write(7, "5", 1) = 1 [ 88.910363][ T5182] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 88.918350][ T5182] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 88.926337][ T5182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 88.934323][ T5182] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 88.942335][ T5182] [ 88.996162][ T5183] FAULT_INJECTION: forcing a failure. [ 88.996162][ T5183] name failslab, interval 1, probability 0, space 0, times 0 [ 89.008885][ T5183] CPU: 0 PID: 5183 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 89.018784][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 89.028843][ T5183] Call Trace: [ 89.032135][ T5183] [ 89.035075][ T5183] dump_stack_lvl+0xd1/0x138 [ 89.039679][ T5183] should_fail_ex.cold+0x5/0xa [ 89.044443][ T5183] ? __inet_hash_connect+0x95e/0x1ba0 [ 89.049820][ T5183] should_failslab+0x9/0x20 [ 89.054344][ T5183] kmem_cache_alloc+0x5a/0x320 [ 89.059134][ T5183] __inet_hash_connect+0x95e/0x1ba0 [ 89.064368][ T5183] ? __inet_lookup_listener+0xbf0/0xbf0 [ 89.069921][ T5183] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 89.076335][ T5183] dccp_v4_connect+0xb82/0x1730 [ 89.081242][ T5183] __inet_stream_connect+0x69e/0xed0 [ 89.086540][ T5183] ? inet_listen+0x640/0x640 [ 89.091225][ T5183] ? mark_held_locks+0x9f/0xe0 [ 89.096025][ T5183] ? __local_bh_enable_ip+0xa4/0x130 [ 89.101344][ T5183] inet_stream_connect+0x57/0xa0 [ 89.106328][ T5183] ? __inet_stream_connect+0xed0/0xed0 [ 89.111848][ T5183] __sys_connect_file+0x153/0x1a0 [ 89.116900][ T5183] io_connect+0x3cc/0x720 [ 89.121250][ T5183] ? io_connect_prep+0x250/0x250 [ 89.126731][ T5183] ? receive_fd+0x110/0x110 [ 89.131263][ T5183] ? rcu_read_lock_sched_held+0x3e/0x70 [ 89.136812][ T5183] ? io_connect_prep+0x250/0x250 [ 89.141773][ T5183] io_issue_sqe+0x695/0x1250 [ 89.146408][ T5183] io_submit_sqes+0x96c/0x1e90 [ 89.151190][ T5183] __do_sys_io_uring_enter+0x103d/0x24e0 [ 89.156832][ T5183] ? io_submit_sqes+0x1e90/0x1e90 [ 89.161881][ T5183] ? ptrace_notify+0xfe/0x140 [ 89.166585][ T5183] ? lock_downgrade+0x6e0/0x6e0 [ 89.171442][ T5183] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.176647][ T5183] ? lockdep_hardirqs_on+0x7d/0x100 [ 89.181863][ T5183] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.187096][ T5183] ? ptrace_notify+0xfe/0x140 [ 89.191806][ T5183] do_syscall_64+0x39/0xb0 [ 89.196269][ T5183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 89.202189][ T5183] RIP: 0033:0x7f607b0de549 [ 89.206632][ T5183] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 89.226258][ T5183] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 89.234802][ T5183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5183] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5183] close(3) = 0 [pid 5183] close(4) = 0 [pid 5183] close(5) = 0 [pid 5183] close(6) = 0 [pid 5183] close(7) = 0 [pid 5183] close(8) = -1 EBADF (Bad file descriptor) [pid 5183] close(9) = -1 EBADF (Bad file descriptor) [pid 5183] close(10) = -1 EBADF (Bad file descriptor) [pid 5183] close(11) = -1 EBADF (Bad file descriptor) [pid 5183] close(12) = -1 EBADF (Bad file descriptor) [pid 5183] close(13) = -1 EBADF (Bad file descriptor) [pid 5183] close(14) = -1 EBADF (Bad file descriptor) [pid 5183] close(15) = -1 EBADF (Bad file descriptor) [pid 5183] close(16) = -1 EBADF (Bad file descriptor) [pid 5183] close(17) = -1 EBADF (Bad file descriptor) [pid 5183] close(18) = -1 EBADF (Bad file descriptor) [pid 5183] close(19) = -1 EBADF (Bad file descriptor) [pid 5183] close(20) = -1 EBADF (Bad file descriptor) [pid 5183] close(21) = -1 EBADF (Bad file descriptor) [pid 5183] close(22) = -1 EBADF (Bad file descriptor) [pid 5183] close(23) = -1 EBADF (Bad file descriptor) [pid 5183] close(24) = -1 EBADF (Bad file descriptor) [pid 5183] close(25) = -1 EBADF (Bad file descriptor) [pid 5183] close(26) = -1 EBADF (Bad file descriptor) [pid 5183] close(27) = -1 EBADF (Bad file descriptor) [pid 5183] close(28) = -1 EBADF (Bad file descriptor) [pid 5183] close(29) = -1 EBADF (Bad file descriptor) [pid 5183] exit_group(0) = ? [pid 5183] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5185 attached , child_tidptr=0x555555eff5d0) = 96 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5185] setpgid(0, 0) = 0 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5185] write(3, "1000", 4) = 4 [pid 5185] close(3) = 0 [pid 5185] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5185] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5185] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5185] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5185] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5185] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5185] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 89.242804][ T5183] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 89.252003][ T5183] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 89.259994][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 89.267963][ T5183] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 89.275948][ T5183] [pid 5185] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5185] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5185] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5185] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5185] write(7, "5", 1) = 1 [ 89.332543][ T5185] FAULT_INJECTION: forcing a failure. [ 89.332543][ T5185] name failslab, interval 1, probability 0, space 0, times 0 [ 89.346124][ T5185] CPU: 0 PID: 5185 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 89.356053][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 89.366155][ T5185] Call Trace: [ 89.369455][ T5185] [ 89.372386][ T5185] dump_stack_lvl+0xd1/0x138 [ 89.376983][ T5185] should_fail_ex.cold+0x5/0xa [ 89.381760][ T5185] ? io_issue_sqe+0x695/0x1250 [ 89.386561][ T5185] should_failslab+0x9/0x20 [ 89.391079][ T5185] __kmem_cache_alloc_node+0x5b/0x330 [ 89.396457][ T5185] ? ref_tracker_alloc+0x158/0x560 [ 89.401615][ T5185] kmalloc_trace+0x26/0x60 [ 89.406081][ T5185] ref_tracker_alloc+0x158/0x560 [ 89.411044][ T5185] ? __lock_acquire+0xbc3/0x56d0 [ 89.416003][ T5185] ? ref_tracker_free+0x6b0/0x6b0 [ 89.421086][ T5185] dst_init+0xe4/0x520 [ 89.425193][ T5185] dst_alloc+0x16f/0x1f0 [ 89.429463][ T5185] rt_dst_alloc+0x55/0x430 [ 89.433907][ T5185] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 89.439926][ T5185] ip_route_output_key_hash+0x18f/0x340 [ 89.445500][ T5185] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 89.451788][ T5185] dccp_v4_connect+0x7e1/0x1730 [ 89.456693][ T5185] __inet_stream_connect+0x69e/0xed0 [ 89.462014][ T5185] ? inet_listen+0x640/0x640 [ 89.466639][ T5185] ? mark_held_locks+0x9f/0xe0 [ 89.471423][ T5185] ? __local_bh_enable_ip+0xa4/0x130 [ 89.476732][ T5185] inet_stream_connect+0x57/0xa0 [ 89.481700][ T5185] ? __inet_stream_connect+0xed0/0xed0 [ 89.487204][ T5185] __sys_connect_file+0x153/0x1a0 [ 89.492289][ T5185] io_connect+0x3cc/0x720 [ 89.496664][ T5185] ? io_connect_prep+0x250/0x250 [ 89.501629][ T5185] ? receive_fd+0x110/0x110 [ 89.506169][ T5185] ? rcu_read_lock_sched_held+0x3e/0x70 [ 89.511735][ T5185] ? io_connect_prep+0x250/0x250 [ 89.516708][ T5185] io_issue_sqe+0x695/0x1250 [ 89.521332][ T5185] io_submit_sqes+0x96c/0x1e90 [ 89.526143][ T5185] __do_sys_io_uring_enter+0x103d/0x24e0 [ 89.531813][ T5185] ? io_submit_sqes+0x1e90/0x1e90 [ 89.536867][ T5185] ? ptrace_notify+0xfe/0x140 [ 89.541562][ T5185] ? lock_downgrade+0x6e0/0x6e0 [ 89.546450][ T5185] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.551733][ T5185] ? lockdep_hardirqs_on+0x7d/0x100 [ 89.556956][ T5185] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.562184][ T5185] ? ptrace_notify+0xfe/0x140 [ 89.566890][ T5185] do_syscall_64+0x39/0xb0 [ 89.571339][ T5185] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 89.577379][ T5185] RIP: 0033:0x7f607b0de549 [ 89.581830][ T5185] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 89.601468][ T5185] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 89.609912][ T5185] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 89.617899][ T5185] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 89.625881][ T5185] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5185] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5185] close(3) = 0 [pid 5185] close(4) = 0 [pid 5185] close(5) = 0 [pid 5185] close(6) = 0 [pid 5185] close(7) = 0 [pid 5185] close(8) = -1 EBADF (Bad file descriptor) [pid 5185] close(9) = -1 EBADF (Bad file descriptor) [pid 5185] close(10) = -1 EBADF (Bad file descriptor) [pid 5185] close(11) = -1 EBADF (Bad file descriptor) [pid 5185] close(12) = -1 EBADF (Bad file descriptor) [pid 5185] close(13) = -1 EBADF (Bad file descriptor) [pid 5185] close(14) = -1 EBADF (Bad file descriptor) [pid 5185] close(15) = -1 EBADF (Bad file descriptor) [pid 5185] close(16) = -1 EBADF (Bad file descriptor) [pid 5185] close(17) = -1 EBADF (Bad file descriptor) [pid 5185] close(18) = -1 EBADF (Bad file descriptor) [pid 5185] close(19) = -1 EBADF (Bad file descriptor) [pid 5185] close(20) = -1 EBADF (Bad file descriptor) [pid 5185] close(21) = -1 EBADF (Bad file descriptor) [pid 5185] close(22) = -1 EBADF (Bad file descriptor) [pid 5185] close(23) = -1 EBADF (Bad file descriptor) [pid 5185] close(24) = -1 EBADF (Bad file descriptor) [pid 5185] close(25) = -1 EBADF (Bad file descriptor) [pid 5185] close(26) = -1 EBADF (Bad file descriptor) [pid 5185] close(27) = -1 EBADF (Bad file descriptor) [pid 5185] close(28) = -1 EBADF (Bad file descriptor) [pid 5185] close(29) = -1 EBADF (Bad file descriptor) [pid 5185] exit_group(0) = ? [pid 5185] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=96, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 97 ./strace-static-x86_64: Process 5186 attached [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5186] write(3, "1000", 4) = 4 [pid 5186] close(3) = 0 [pid 5186] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5186] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5186] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5186] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5186] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5186] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5186] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5186] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5186] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5186] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5186] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5186] write(7, "5", 1) = 1 [pid 5186] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [ 89.633868][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 89.641960][ T5185] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 89.649989][ T5185] [pid 5186] close(3) = 0 [pid 5186] close(4) = 0 [pid 5186] close(5) = 0 [pid 5186] close(6) = 0 [pid 5186] close(7) = 0 [pid 5186] close(8) = -1 EBADF (Bad file descriptor) [pid 5186] close(9) = -1 EBADF (Bad file descriptor) [pid 5186] close(10) = -1 EBADF (Bad file descriptor) [pid 5186] close(11) = -1 EBADF (Bad file descriptor) [pid 5186] close(12) = -1 EBADF (Bad file descriptor) [pid 5186] close(13) = -1 EBADF (Bad file descriptor) [pid 5186] close(14) = -1 EBADF (Bad file descriptor) [pid 5186] close(15) = -1 EBADF (Bad file descriptor) [pid 5186] close(16) = -1 EBADF (Bad file descriptor) [pid 5186] close(17) = -1 EBADF (Bad file descriptor) [pid 5186] close(18) = -1 EBADF (Bad file descriptor) [pid 5186] close(19) = -1 EBADF (Bad file descriptor) [pid 5186] close(20) = -1 EBADF (Bad file descriptor) [pid 5186] close(21) = -1 EBADF (Bad file descriptor) [pid 5186] close(22) = -1 EBADF (Bad file descriptor) [pid 5186] close(23) = -1 EBADF (Bad file descriptor) [pid 5186] close(24) = -1 EBADF (Bad file descriptor) [pid 5186] close(25) = -1 EBADF (Bad file descriptor) [pid 5186] close(26) = -1 EBADF (Bad file descriptor) [pid 5186] close(27) = -1 EBADF (Bad file descriptor) [pid 5186] close(28) = -1 EBADF (Bad file descriptor) [pid 5186] close(29) = -1 EBADF (Bad file descriptor) [pid 5186] exit_group(0) = ? [pid 5186] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=97, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5187 attached , child_tidptr=0x555555eff5d0) = 98 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5187] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5187] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5187] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5187] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5187] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5187] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5187] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5187] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5187] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5187] write(7, "5", 1) = 1 [ 89.735635][ T5187] FAULT_INJECTION: forcing a failure. [ 89.735635][ T5187] name failslab, interval 1, probability 0, space 0, times 0 [ 89.748414][ T5187] CPU: 0 PID: 5187 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 89.758333][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 89.768384][ T5187] Call Trace: [ 89.771673][ T5187] [ 89.774598][ T5187] dump_stack_lvl+0xd1/0x138 [ 89.779191][ T5187] should_fail_ex.cold+0x5/0xa [ 89.783951][ T5187] ? io_issue_sqe+0x695/0x1250 [ 89.788716][ T5187] should_failslab+0x9/0x20 [ 89.793237][ T5187] __kmem_cache_alloc_node+0x5b/0x330 [ 89.798630][ T5187] ? ref_tracker_alloc+0x158/0x560 [ 89.803777][ T5187] kmalloc_trace+0x26/0x60 [ 89.808258][ T5187] ref_tracker_alloc+0x158/0x560 [ 89.813684][ T5187] ? __lock_acquire+0xbc3/0x56d0 [ 89.818655][ T5187] ? ref_tracker_free+0x6b0/0x6b0 [ 89.823741][ T5187] dst_init+0xe4/0x520 [ 89.827846][ T5187] dst_alloc+0x16f/0x1f0 [ 89.832215][ T5187] rt_dst_alloc+0x55/0x430 [ 89.836655][ T5187] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 89.842675][ T5187] ip_route_output_key_hash+0x18f/0x340 [ 89.848251][ T5187] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 89.854541][ T5187] dccp_v4_connect+0x7e1/0x1730 [ 89.859451][ T5187] __inet_stream_connect+0x69e/0xed0 [ 89.864779][ T5187] ? inet_listen+0x640/0x640 [ 89.869398][ T5187] ? mark_held_locks+0x9f/0xe0 [ 89.874182][ T5187] ? __local_bh_enable_ip+0xa4/0x130 [ 89.879497][ T5187] inet_stream_connect+0x57/0xa0 [ 89.884471][ T5187] ? __inet_stream_connect+0xed0/0xed0 [ 89.889964][ T5187] __sys_connect_file+0x153/0x1a0 [ 89.895017][ T5187] io_connect+0x3cc/0x720 [ 89.899385][ T5187] ? io_connect_prep+0x250/0x250 [ 89.904357][ T5187] ? receive_fd+0x110/0x110 [ 89.908902][ T5187] ? rcu_read_lock_sched_held+0x3e/0x70 [ 89.914471][ T5187] ? io_connect_prep+0x250/0x250 [ 89.919450][ T5187] io_issue_sqe+0x695/0x1250 [ 89.924078][ T5187] io_submit_sqes+0x96c/0x1e90 [ 89.928889][ T5187] __do_sys_io_uring_enter+0x103d/0x24e0 [ 89.934579][ T5187] ? io_submit_sqes+0x1e90/0x1e90 [ 89.939640][ T5187] ? ptrace_notify+0xfe/0x140 [ 89.944340][ T5187] ? lock_downgrade+0x6e0/0x6e0 [ 89.949216][ T5187] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.954436][ T5187] ? lockdep_hardirqs_on+0x7d/0x100 [ 89.959664][ T5187] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.964887][ T5187] ? ptrace_notify+0xfe/0x140 [ 89.969589][ T5187] do_syscall_64+0x39/0xb0 [ 89.974037][ T5187] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 89.980039][ T5187] RIP: 0033:0x7f607b0de549 [ 89.984480][ T5187] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 90.004113][ T5187] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 90.012546][ T5187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 90.020596][ T5187] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 90.028671][ T5187] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5187] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5187] close(3) = 0 [pid 5187] close(4) = 0 [pid 5187] close(5) = 0 [pid 5187] close(6) = 0 [pid 5187] close(7) = 0 [pid 5187] close(8) = -1 EBADF (Bad file descriptor) [pid 5187] close(9) = -1 EBADF (Bad file descriptor) [pid 5187] close(10) = -1 EBADF (Bad file descriptor) [pid 5187] close(11) = -1 EBADF (Bad file descriptor) [pid 5187] close(12) = -1 EBADF (Bad file descriptor) [pid 5187] close(13) = -1 EBADF (Bad file descriptor) [pid 5187] close(14) = -1 EBADF (Bad file descriptor) [pid 5187] close(15) = -1 EBADF (Bad file descriptor) [pid 5187] close(16) = -1 EBADF (Bad file descriptor) [pid 5187] close(17) = -1 EBADF (Bad file descriptor) [pid 5187] close(18) = -1 EBADF (Bad file descriptor) [pid 5187] close(19) = -1 EBADF (Bad file descriptor) [pid 5187] close(20) = -1 EBADF (Bad file descriptor) [pid 5187] close(21) = -1 EBADF (Bad file descriptor) [pid 5187] close(22) = -1 EBADF (Bad file descriptor) [pid 5187] close(23) = -1 EBADF (Bad file descriptor) [pid 5187] close(24) = -1 EBADF (Bad file descriptor) [pid 5187] close(25) = -1 EBADF (Bad file descriptor) [pid 5187] close(26) = -1 EBADF (Bad file descriptor) [pid 5187] close(27) = -1 EBADF (Bad file descriptor) [pid 5187] close(28) = -1 EBADF (Bad file descriptor) [pid 5187] close(29) = -1 EBADF (Bad file descriptor) [pid 5187] exit_group(0) = ? [pid 5187] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 99 ./strace-static-x86_64: Process 5188 attached [pid 5188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5188] setpgid(0, 0) = 0 [pid 5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5188] write(3, "1000", 4) = 4 [pid 5188] close(3) = 0 [pid 5188] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5188] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5188] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5188] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5188] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5188] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 90.036663][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 90.044648][ T5187] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 90.052660][ T5187] [pid 5188] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5188] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5188] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5188] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5188] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5188] write(7, "5", 1) = 1 [ 90.106177][ T5188] FAULT_INJECTION: forcing a failure. [ 90.106177][ T5188] name failslab, interval 1, probability 0, space 0, times 0 [ 90.118878][ T5188] CPU: 1 PID: 5188 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 90.128771][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 90.138945][ T5188] Call Trace: [ 90.142245][ T5188] [ 90.145181][ T5188] dump_stack_lvl+0xd1/0x138 [ 90.149865][ T5188] should_fail_ex.cold+0x5/0xa [ 90.154824][ T5188] ? __inet_hash_connect+0x95e/0x1ba0 [ 90.160230][ T5188] should_failslab+0x9/0x20 [ 90.164776][ T5188] kmem_cache_alloc+0x5a/0x320 [ 90.169551][ T5188] __inet_hash_connect+0x95e/0x1ba0 [ 90.174764][ T5188] ? __inet_lookup_listener+0xbf0/0xbf0 [ 90.180346][ T5188] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 90.186719][ T5188] dccp_v4_connect+0xb82/0x1730 [ 90.191595][ T5188] __inet_stream_connect+0x69e/0xed0 [ 90.197435][ T5188] ? inet_listen+0x640/0x640 [ 90.202078][ T5188] ? mark_held_locks+0x9f/0xe0 [ 90.206872][ T5188] ? __local_bh_enable_ip+0xa4/0x130 [ 90.212173][ T5188] inet_stream_connect+0x57/0xa0 [ 90.217125][ T5188] ? __inet_stream_connect+0xed0/0xed0 [ 90.222596][ T5188] __sys_connect_file+0x153/0x1a0 [ 90.227643][ T5188] io_connect+0x3cc/0x720 [ 90.232033][ T5188] ? io_connect_prep+0x250/0x250 [ 90.237121][ T5188] ? receive_fd+0x110/0x110 [ 90.241683][ T5188] ? rcu_read_lock_sched_held+0x3e/0x70 [ 90.247285][ T5188] ? io_connect_prep+0x250/0x250 [ 90.254420][ T5188] io_issue_sqe+0x695/0x1250 [ 90.259041][ T5188] io_submit_sqes+0x96c/0x1e90 [ 90.263849][ T5188] __do_sys_io_uring_enter+0x103d/0x24e0 [ 90.269531][ T5188] ? io_submit_sqes+0x1e90/0x1e90 [ 90.274669][ T5188] ? ptrace_notify+0xfe/0x140 [ 90.279357][ T5188] ? lock_downgrade+0x6e0/0x6e0 [ 90.284232][ T5188] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.289487][ T5188] ? lockdep_hardirqs_on+0x7d/0x100 [ 90.294725][ T5188] ? _raw_spin_unlock_irq+0x2e/0x50 [ 90.299932][ T5188] ? ptrace_notify+0xfe/0x140 [ 90.304642][ T5188] do_syscall_64+0x39/0xb0 [ 90.309111][ T5188] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 90.315043][ T5188] RIP: 0033:0x7f607b0de549 [ 90.319545][ T5188] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 90.339171][ T5188] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 90.347625][ T5188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5188] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5188] close(3) = 0 [pid 5188] close(4) = 0 [pid 5188] close(5) = 0 [pid 5188] close(6) = 0 [pid 5188] close(7) = 0 [pid 5188] close(8) = -1 EBADF (Bad file descriptor) [pid 5188] close(9) = -1 EBADF (Bad file descriptor) [pid 5188] close(10) = -1 EBADF (Bad file descriptor) [pid 5188] close(11) = -1 EBADF (Bad file descriptor) [pid 5188] close(12) = -1 EBADF (Bad file descriptor) [pid 5188] close(13) = -1 EBADF (Bad file descriptor) [pid 5188] close(14) = -1 EBADF (Bad file descriptor) [pid 5188] close(15) = -1 EBADF (Bad file descriptor) [pid 5188] close(16) = -1 EBADF (Bad file descriptor) [pid 5188] close(17) = -1 EBADF (Bad file descriptor) [pid 5188] close(18) = -1 EBADF (Bad file descriptor) [pid 5188] close(19) = -1 EBADF (Bad file descriptor) [pid 5188] close(20) = -1 EBADF (Bad file descriptor) [pid 5188] close(21) = -1 EBADF (Bad file descriptor) [pid 5188] close(22) = -1 EBADF (Bad file descriptor) [pid 5188] close(23) = -1 EBADF (Bad file descriptor) [pid 5188] close(24) = -1 EBADF (Bad file descriptor) [pid 5188] close(25) = -1 EBADF (Bad file descriptor) [pid 5188] close(26) = -1 EBADF (Bad file descriptor) [pid 5188] close(27) = -1 EBADF (Bad file descriptor) [pid 5188] close(28) = -1 EBADF (Bad file descriptor) [pid 5188] close(29) = -1 EBADF (Bad file descriptor) [pid 5188] exit_group(0) = ? [pid 5188] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=99, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 100 ./strace-static-x86_64: Process 5189 attached [pid 5189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5189] setpgid(0, 0) = 0 [pid 5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5189] write(3, "1000", 4) = 4 [pid 5189] close(3) = 0 [pid 5189] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5189] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5189] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5189] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5189] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5189] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5189] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5189] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5189] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5189] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5189] write(7, "5", 1) = 1 [ 90.355617][ T5188] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 90.363591][ T5188] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 90.371562][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 90.379555][ T5188] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 90.387546][ T5188] [ 90.428220][ T5189] FAULT_INJECTION: forcing a failure. [ 90.428220][ T5189] name failslab, interval 1, probability 0, space 0, times 0 [ 90.440928][ T5189] CPU: 0 PID: 5189 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 90.450827][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 90.460915][ T5189] Call Trace: [ 90.464206][ T5189] [ 90.467130][ T5189] dump_stack_lvl+0xd1/0x138 [ 90.471729][ T5189] should_fail_ex.cold+0x5/0xa [ 90.476506][ T5189] ? __inet_hash_connect+0x95e/0x1ba0 [ 90.481906][ T5189] should_failslab+0x9/0x20 [ 90.486423][ T5189] kmem_cache_alloc+0x5a/0x320 [ 90.491195][ T5189] __inet_hash_connect+0x95e/0x1ba0 [ 90.496486][ T5189] ? __inet_lookup_listener+0xbf0/0xbf0 [ 90.502069][ T5189] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 90.508456][ T5189] dccp_v4_connect+0xb82/0x1730 [ 90.513331][ T5189] __inet_stream_connect+0x69e/0xed0 [ 90.518638][ T5189] ? inet_listen+0x640/0x640 [ 90.523243][ T5189] ? mark_held_locks+0x9f/0xe0 [ 90.528127][ T5189] ? __local_bh_enable_ip+0xa4/0x130 [ 90.533465][ T5189] inet_stream_connect+0x57/0xa0 [ 90.538453][ T5189] ? __inet_stream_connect+0xed0/0xed0 [ 90.543944][ T5189] __sys_connect_file+0x153/0x1a0 [ 90.549002][ T5189] io_connect+0x3cc/0x720 [ 90.553356][ T5189] ? io_connect_prep+0x250/0x250 [ 90.558339][ T5189] ? receive_fd+0x110/0x110 [ 90.562876][ T5189] ? rcu_read_lock_sched_held+0x3e/0x70 [ 90.568428][ T5189] ? io_connect_prep+0x250/0x250 [ 90.573379][ T5189] io_issue_sqe+0x695/0x1250 [ 90.578002][ T5189] io_submit_sqes+0x96c/0x1e90 [ 90.582819][ T5189] __do_sys_io_uring_enter+0x103d/0x24e0 [ 90.588464][ T5189] ? io_submit_sqes+0x1e90/0x1e90 [ 90.593511][ T5189] ? ptrace_notify+0xfe/0x140 [ 90.598212][ T5189] ? lock_downgrade+0x6e0/0x6e0 [ 90.603080][ T5189] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.608313][ T5189] ? lockdep_hardirqs_on+0x7d/0x100 [ 90.613555][ T5189] ? _raw_spin_unlock_irq+0x2e/0x50 [ 90.618857][ T5189] ? ptrace_notify+0xfe/0x140 [ 90.623542][ T5189] do_syscall_64+0x39/0xb0 [ 90.627968][ T5189] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 90.633864][ T5189] RIP: 0033:0x7f607b0de549 [ 90.638378][ T5189] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 90.658017][ T5189] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 90.666555][ T5189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5189] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5189] close(3) = 0 [pid 5189] close(4) = 0 [pid 5189] close(5) = 0 [pid 5189] close(6) = 0 [pid 5189] close(7) = 0 [pid 5189] close(8) = -1 EBADF (Bad file descriptor) [pid 5189] close(9) = -1 EBADF (Bad file descriptor) [pid 5189] close(10) = -1 EBADF (Bad file descriptor) [pid 5189] close(11) = -1 EBADF (Bad file descriptor) [pid 5189] close(12) = -1 EBADF (Bad file descriptor) [pid 5189] close(13) = -1 EBADF (Bad file descriptor) [pid 5189] close(14) = -1 EBADF (Bad file descriptor) [pid 5189] close(15) = -1 EBADF (Bad file descriptor) [pid 5189] close(16) = -1 EBADF (Bad file descriptor) [pid 5189] close(17) = -1 EBADF (Bad file descriptor) [pid 5189] close(18) = -1 EBADF (Bad file descriptor) [pid 5189] close(19) = -1 EBADF (Bad file descriptor) [pid 5189] close(20) = -1 EBADF (Bad file descriptor) [pid 5189] close(21) = -1 EBADF (Bad file descriptor) [pid 5189] close(22) = -1 EBADF (Bad file descriptor) [pid 5189] close(23) = -1 EBADF (Bad file descriptor) [pid 5189] close(24) = -1 EBADF (Bad file descriptor) [pid 5189] close(25) = -1 EBADF (Bad file descriptor) [pid 5189] close(26) = -1 EBADF (Bad file descriptor) [pid 5189] close(27) = -1 EBADF (Bad file descriptor) [pid 5189] close(28) = -1 EBADF (Bad file descriptor) [pid 5189] close(29) = -1 EBADF (Bad file descriptor) [pid 5189] exit_group(0) = ? [pid 5189] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 101 ./strace-static-x86_64: Process 5190 attached [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5190] setpgid(0, 0) = 0 [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5190] write(3, "1000", 4) = 4 [pid 5190] close(3) = 0 [pid 5190] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5190] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5190] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5190] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5190] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5190] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5190] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5190] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5190] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5190] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5190] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5190] write(7, "5", 1) = 1 [ 90.674560][ T5189] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 90.682536][ T5189] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 90.690521][ T5189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 90.698516][ T5189] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 90.706544][ T5189] [ 90.744762][ T5190] FAULT_INJECTION: forcing a failure. [ 90.744762][ T5190] name failslab, interval 1, probability 0, space 0, times 0 [ 90.757501][ T5190] CPU: 0 PID: 5190 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 90.767400][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 90.777478][ T5190] Call Trace: [ 90.780792][ T5190] [ 90.783861][ T5190] dump_stack_lvl+0xd1/0x138 [ 90.788467][ T5190] should_fail_ex.cold+0x5/0xa [ 90.793234][ T5190] ? io_issue_sqe+0x695/0x1250 [ 90.798007][ T5190] should_failslab+0x9/0x20 [ 90.802520][ T5190] __kmem_cache_alloc_node+0x5b/0x330 [ 90.807979][ T5190] ? ref_tracker_alloc+0x158/0x560 [ 90.813181][ T5190] kmalloc_trace+0x26/0x60 [ 90.817707][ T5190] ref_tracker_alloc+0x158/0x560 [ 90.822694][ T5190] ? __lock_acquire+0xbc3/0x56d0 [ 90.827652][ T5190] ? ref_tracker_free+0x6b0/0x6b0 [ 90.832731][ T5190] dst_init+0xe4/0x520 [ 90.836847][ T5190] dst_alloc+0x16f/0x1f0 [ 90.841140][ T5190] rt_dst_alloc+0x55/0x430 [ 90.845603][ T5190] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 90.851625][ T5190] ip_route_output_key_hash+0x18f/0x340 [ 90.857191][ T5190] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 90.863468][ T5190] dccp_v4_connect+0x7e1/0x1730 [ 90.868397][ T5190] __inet_stream_connect+0x69e/0xed0 [ 90.873760][ T5190] ? inet_listen+0x640/0x640 [ 90.878400][ T5190] ? mark_held_locks+0x9f/0xe0 [ 90.883193][ T5190] ? __local_bh_enable_ip+0xa4/0x130 [ 90.888516][ T5190] inet_stream_connect+0x57/0xa0 [ 90.893574][ T5190] ? __inet_stream_connect+0xed0/0xed0 [ 90.899067][ T5190] __sys_connect_file+0x153/0x1a0 [ 90.904121][ T5190] io_connect+0x3cc/0x720 [ 90.908486][ T5190] ? io_connect_prep+0x250/0x250 [ 90.913452][ T5190] ? receive_fd+0x110/0x110 [ 90.917992][ T5190] ? rcu_read_lock_sched_held+0x3e/0x70 [ 90.923563][ T5190] ? io_connect_prep+0x250/0x250 [ 90.928533][ T5190] io_issue_sqe+0x695/0x1250 [ 90.933155][ T5190] io_submit_sqes+0x96c/0x1e90 [ 90.937987][ T5190] __do_sys_io_uring_enter+0x103d/0x24e0 [ 90.943681][ T5190] ? io_submit_sqes+0x1e90/0x1e90 [ 90.948743][ T5190] ? ptrace_notify+0xfe/0x140 [ 90.953440][ T5190] ? lock_downgrade+0x6e0/0x6e0 [ 90.958319][ T5190] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.963547][ T5190] ? lockdep_hardirqs_on+0x7d/0x100 [ 90.968765][ T5190] ? _raw_spin_unlock_irq+0x2e/0x50 [ 90.973986][ T5190] ? ptrace_notify+0xfe/0x140 [ 90.978689][ T5190] do_syscall_64+0x39/0xb0 [ 90.983134][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 90.989050][ T5190] RIP: 0033:0x7f607b0de549 [ 90.993479][ T5190] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 91.013106][ T5190] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 91.021540][ T5190] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 91.029536][ T5190] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 91.037528][ T5190] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5190] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5190] close(3) = 0 [pid 5190] close(4) = 0 [pid 5190] close(5) = 0 [pid 5190] close(6) = 0 [pid 5190] close(7) = 0 [pid 5190] close(8) = -1 EBADF (Bad file descriptor) [pid 5190] close(9) = -1 EBADF (Bad file descriptor) [pid 5190] close(10) = -1 EBADF (Bad file descriptor) [pid 5190] close(11) = -1 EBADF (Bad file descriptor) [pid 5190] close(12) = -1 EBADF (Bad file descriptor) [pid 5190] close(13) = -1 EBADF (Bad file descriptor) [pid 5190] close(14) = -1 EBADF (Bad file descriptor) [pid 5190] close(15) = -1 EBADF (Bad file descriptor) [pid 5190] close(16) = -1 EBADF (Bad file descriptor) [pid 5190] close(17) = -1 EBADF (Bad file descriptor) [pid 5190] close(18) = -1 EBADF (Bad file descriptor) [pid 5190] close(19) = -1 EBADF (Bad file descriptor) [pid 5190] close(20) = -1 EBADF (Bad file descriptor) [pid 5190] close(21) = -1 EBADF (Bad file descriptor) [pid 5190] close(22) = -1 EBADF (Bad file descriptor) [pid 5190] close(23) = -1 EBADF (Bad file descriptor) [pid 5190] close(24) = -1 EBADF (Bad file descriptor) [pid 5190] close(25) = -1 EBADF (Bad file descriptor) [pid 5190] close(26) = -1 EBADF (Bad file descriptor) [pid 5190] close(27) = -1 EBADF (Bad file descriptor) [pid 5190] close(28) = -1 EBADF (Bad file descriptor) [pid 5190] close(29) = -1 EBADF (Bad file descriptor) [pid 5190] exit_group(0) = ? [pid 5190] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=101, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 102 ./strace-static-x86_64: Process 5191 attached [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5191] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5191] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5191] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5191] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5191] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5191] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5191] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5191] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 91.045509][ T5190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 91.053514][ T5190] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 91.061522][ T5190] [pid 5191] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5191] write(7, "5", 1) = 1 [ 91.108444][ T5191] FAULT_INJECTION: forcing a failure. [ 91.108444][ T5191] name failslab, interval 1, probability 0, space 0, times 0 [ 91.126207][ T5191] CPU: 1 PID: 5191 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 91.136144][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 91.146211][ T5191] Call Trace: [ 91.149498][ T5191] [ 91.152445][ T5191] dump_stack_lvl+0xd1/0x138 [ 91.157041][ T5191] should_fail_ex.cold+0x5/0xa [ 91.161827][ T5191] ? io_issue_sqe+0x695/0x1250 [ 91.166621][ T5191] should_failslab+0x9/0x20 [ 91.171172][ T5191] __kmem_cache_alloc_node+0x5b/0x330 [ 91.176571][ T5191] ? ref_tracker_alloc+0x158/0x560 [ 91.181709][ T5191] kmalloc_trace+0x26/0x60 [ 91.186161][ T5191] ref_tracker_alloc+0x158/0x560 [ 91.191126][ T5191] ? __lock_acquire+0xbc3/0x56d0 [ 91.196078][ T5191] ? ref_tracker_free+0x6b0/0x6b0 [ 91.201155][ T5191] dst_init+0xe4/0x520 [ 91.205249][ T5191] dst_alloc+0x16f/0x1f0 [ 91.209513][ T5191] rt_dst_alloc+0x55/0x430 [ 91.213954][ T5191] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 91.219970][ T5191] ip_route_output_key_hash+0x18f/0x340 [ 91.225541][ T5191] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 91.231830][ T5191] dccp_v4_connect+0x7e1/0x1730 [ 91.236728][ T5191] __inet_stream_connect+0x69e/0xed0 [ 91.242052][ T5191] ? inet_listen+0x640/0x640 [ 91.246717][ T5191] ? mark_held_locks+0x9f/0xe0 [ 91.251518][ T5191] ? __local_bh_enable_ip+0xa4/0x130 [ 91.256847][ T5191] inet_stream_connect+0x57/0xa0 [ 91.261814][ T5191] ? __inet_stream_connect+0xed0/0xed0 [ 91.267319][ T5191] __sys_connect_file+0x153/0x1a0 [ 91.272373][ T5191] io_connect+0x3cc/0x720 [ 91.276824][ T5191] ? io_connect_prep+0x250/0x250 [ 91.281800][ T5191] ? receive_fd+0x110/0x110 [ 91.286355][ T5191] ? rcu_read_lock_sched_held+0x3e/0x70 [ 91.291928][ T5191] ? io_connect_prep+0x250/0x250 [ 91.296899][ T5191] io_issue_sqe+0x695/0x1250 [ 91.301520][ T5191] io_submit_sqes+0x96c/0x1e90 [ 91.306356][ T5191] __do_sys_io_uring_enter+0x103d/0x24e0 [ 91.312042][ T5191] ? io_submit_sqes+0x1e90/0x1e90 [ 91.317094][ T5191] ? ptrace_notify+0xfe/0x140 [ 91.321791][ T5191] ? lock_downgrade+0x6e0/0x6e0 [ 91.326667][ T5191] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.331892][ T5191] ? lockdep_hardirqs_on+0x7d/0x100 [ 91.337109][ T5191] ? _raw_spin_unlock_irq+0x2e/0x50 [ 91.342334][ T5191] ? ptrace_notify+0xfe/0x140 [ 91.347036][ T5191] do_syscall_64+0x39/0xb0 [ 91.351483][ T5191] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 91.357401][ T5191] RIP: 0033:0x7f607b0de549 [ 91.361865][ T5191] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 91.381527][ T5191] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 91.389963][ T5191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 91.397946][ T5191] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5191] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5191] close(3) = 0 [pid 5191] close(4) = 0 [pid 5191] close(5) = 0 [pid 5191] close(6) = 0 [pid 5191] close(7) = 0 [pid 5191] close(8) = -1 EBADF (Bad file descriptor) [pid 5191] close(9) = -1 EBADF (Bad file descriptor) [pid 5191] close(10) = -1 EBADF (Bad file descriptor) [pid 5191] close(11) = -1 EBADF (Bad file descriptor) [pid 5191] close(12) = -1 EBADF (Bad file descriptor) [pid 5191] close(13) = -1 EBADF (Bad file descriptor) [pid 5191] close(14) = -1 EBADF (Bad file descriptor) [pid 5191] close(15) = -1 EBADF (Bad file descriptor) [pid 5191] close(16) = -1 EBADF (Bad file descriptor) [pid 5191] close(17) = -1 EBADF (Bad file descriptor) [pid 5191] close(18) = -1 EBADF (Bad file descriptor) [pid 5191] close(19) = -1 EBADF (Bad file descriptor) [pid 5191] close(20) = -1 EBADF (Bad file descriptor) [pid 5191] close(21) = -1 EBADF (Bad file descriptor) [pid 5191] close(22) = -1 EBADF (Bad file descriptor) [pid 5191] close(23) = -1 EBADF (Bad file descriptor) [pid 5191] close(24) = -1 EBADF (Bad file descriptor) [pid 5191] close(25) = -1 EBADF (Bad file descriptor) [pid 5191] close(26) = -1 EBADF (Bad file descriptor) [pid 5191] close(27) = -1 EBADF (Bad file descriptor) [pid 5191] close(28) = -1 EBADF (Bad file descriptor) [pid 5191] close(29) = -1 EBADF (Bad file descriptor) [pid 5191] exit_group(0) = ? [pid 5191] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=102, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 103 ./strace-static-x86_64: Process 5192 attached [pid 5192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5192] setpgid(0, 0) = 0 [pid 5192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5192] write(3, "1000", 4) = 4 [pid 5192] close(3) = 0 [pid 5192] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5192] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5192] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5192] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5192] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5192] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5192] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5192] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5192] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5192] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5192] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5192] write(7, "5", 1) = 1 [ 91.405926][ T5191] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 91.413911][ T5191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 91.421896][ T5191] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 91.429902][ T5191] [ 91.467579][ T5192] FAULT_INJECTION: forcing a failure. [ 91.467579][ T5192] name failslab, interval 1, probability 0, space 0, times 0 [ 91.481470][ T5192] CPU: 0 PID: 5192 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 91.491396][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 91.501464][ T5192] Call Trace: [ 91.504754][ T5192] [ 91.507687][ T5192] dump_stack_lvl+0xd1/0x138 [ 91.512291][ T5192] should_fail_ex.cold+0x5/0xa [ 91.517055][ T5192] ? io_issue_sqe+0x695/0x1250 [ 91.521839][ T5192] should_failslab+0x9/0x20 [ 91.526400][ T5192] __kmem_cache_alloc_node+0x5b/0x330 [ 91.531810][ T5192] ? ref_tracker_alloc+0x158/0x560 [ 91.537017][ T5192] kmalloc_trace+0x26/0x60 [ 91.541442][ T5192] ref_tracker_alloc+0x158/0x560 [ 91.546385][ T5192] ? __lock_acquire+0xbc3/0x56d0 [ 91.551338][ T5192] ? ref_tracker_free+0x6b0/0x6b0 [ 91.556413][ T5192] dst_init+0xe4/0x520 [ 91.560491][ T5192] dst_alloc+0x16f/0x1f0 [ 91.564748][ T5192] rt_dst_alloc+0x55/0x430 [ 91.569175][ T5192] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 91.575172][ T5192] ip_route_output_key_hash+0x18f/0x340 [ 91.580744][ T5192] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 91.587047][ T5192] dccp_v4_connect+0x7e1/0x1730 [ 91.591922][ T5192] __inet_stream_connect+0x69e/0xed0 [ 91.597265][ T5192] ? inet_listen+0x640/0x640 [ 91.601888][ T5192] ? mark_held_locks+0x9f/0xe0 [ 91.607087][ T5192] ? __local_bh_enable_ip+0xa4/0x130 [ 91.612448][ T5192] inet_stream_connect+0x57/0xa0 [ 91.617455][ T5192] ? __inet_stream_connect+0xed0/0xed0 [ 91.622956][ T5192] __sys_connect_file+0x153/0x1a0 [ 91.628013][ T5192] io_connect+0x3cc/0x720 [ 91.632367][ T5192] ? io_connect_prep+0x250/0x250 [ 91.637317][ T5192] ? receive_fd+0x110/0x110 [ 91.641837][ T5192] ? rcu_read_lock_sched_held+0x3e/0x70 [ 91.647400][ T5192] ? io_connect_prep+0x250/0x250 [ 91.652364][ T5192] io_issue_sqe+0x695/0x1250 [ 91.656982][ T5192] io_submit_sqes+0x96c/0x1e90 [ 91.661850][ T5192] __do_sys_io_uring_enter+0x103d/0x24e0 [ 91.667495][ T5192] ? io_submit_sqes+0x1e90/0x1e90 [ 91.672616][ T5192] ? ptrace_notify+0xfe/0x140 [ 91.677312][ T5192] ? lock_downgrade+0x6e0/0x6e0 [ 91.682188][ T5192] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.687428][ T5192] ? lockdep_hardirqs_on+0x7d/0x100 [ 91.692637][ T5192] ? _raw_spin_unlock_irq+0x2e/0x50 [ 91.697853][ T5192] ? ptrace_notify+0xfe/0x140 [ 91.702561][ T5192] do_syscall_64+0x39/0xb0 [ 91.706997][ T5192] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 91.713169][ T5192] RIP: 0033:0x7f607b0de549 [ 91.717599][ T5192] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 91.737217][ T5192] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 91.745657][ T5192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 91.753625][ T5192] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5192] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5192] close(3) = 0 [pid 5192] close(4) = 0 [pid 5192] close(5) = 0 [pid 5192] close(6) = 0 [pid 5192] close(7) = 0 [pid 5192] close(8) = -1 EBADF (Bad file descriptor) [pid 5192] close(9) = -1 EBADF (Bad file descriptor) [pid 5192] close(10) = -1 EBADF (Bad file descriptor) [pid 5192] close(11) = -1 EBADF (Bad file descriptor) [pid 5192] close(12) = -1 EBADF (Bad file descriptor) [pid 5192] close(13) = -1 EBADF (Bad file descriptor) [pid 5192] close(14) = -1 EBADF (Bad file descriptor) [pid 5192] close(15) = -1 EBADF (Bad file descriptor) [pid 5192] close(16) = -1 EBADF (Bad file descriptor) [pid 5192] close(17) = -1 EBADF (Bad file descriptor) [pid 5192] close(18) = -1 EBADF (Bad file descriptor) [pid 5192] close(19) = -1 EBADF (Bad file descriptor) [pid 5192] close(20) = -1 EBADF (Bad file descriptor) [pid 5192] close(21) = -1 EBADF (Bad file descriptor) [pid 5192] close(22) = -1 EBADF (Bad file descriptor) [pid 5192] close(23) = -1 EBADF (Bad file descriptor) [pid 5192] close(24) = -1 EBADF (Bad file descriptor) [pid 5192] close(25) = -1 EBADF (Bad file descriptor) [pid 5192] close(26) = -1 EBADF (Bad file descriptor) [pid 5192] close(27) = -1 EBADF (Bad file descriptor) [pid 5192] close(28) = -1 EBADF (Bad file descriptor) [pid 5192] close(29) = -1 EBADF (Bad file descriptor) [pid 5192] exit_group(0) = ? [pid 5192] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=103, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5193 attached , child_tidptr=0x555555eff5d0) = 104 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5193] write(3, "1000", 4) = 4 [pid 5193] close(3) = 0 [ 91.761599][ T5192] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 91.769583][ T5192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 91.777571][ T5192] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 91.785562][ T5192] [pid 5193] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5193] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5193] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5193] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5193] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5193] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5193] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5193] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5193] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5193] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5193] write(7, "5", 1) = 1 [ 91.846546][ T5193] FAULT_INJECTION: forcing a failure. [ 91.846546][ T5193] name failslab, interval 1, probability 0, space 0, times 0 [ 91.860033][ T5193] CPU: 0 PID: 5193 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 91.869951][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 91.880015][ T5193] Call Trace: [ 91.883305][ T5193] [ 91.886252][ T5193] dump_stack_lvl+0xd1/0x138 [ 91.890887][ T5193] should_fail_ex.cold+0x5/0xa [ 91.895652][ T5193] ? __inet_hash_connect+0x95e/0x1ba0 [ 91.901039][ T5193] should_failslab+0x9/0x20 [ 91.905555][ T5193] kmem_cache_alloc+0x5a/0x320 [ 91.910339][ T5193] __inet_hash_connect+0x95e/0x1ba0 [ 91.915576][ T5193] ? __inet_lookup_listener+0xbf0/0xbf0 [ 91.921135][ T5193] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 91.927477][ T5193] dccp_v4_connect+0xb82/0x1730 [ 91.932372][ T5193] __inet_stream_connect+0x69e/0xed0 [ 91.937775][ T5193] ? inet_listen+0x640/0x640 [ 91.942407][ T5193] ? mark_held_locks+0x9f/0xe0 [ 91.947171][ T5193] ? __local_bh_enable_ip+0xa4/0x130 [ 91.952465][ T5193] inet_stream_connect+0x57/0xa0 [ 91.957423][ T5193] ? __inet_stream_connect+0xed0/0xed0 [ 91.962922][ T5193] __sys_connect_file+0x153/0x1a0 [ 91.967966][ T5193] io_connect+0x3cc/0x720 [ 91.972308][ T5193] ? io_connect_prep+0x250/0x250 [ 91.977251][ T5193] ? receive_fd+0x110/0x110 [ 91.981783][ T5193] ? rcu_read_lock_sched_held+0x3e/0x70 [ 91.987351][ T5193] ? io_connect_prep+0x250/0x250 [ 91.992296][ T5193] io_issue_sqe+0x695/0x1250 [ 91.996892][ T5193] io_submit_sqes+0x96c/0x1e90 [ 92.001677][ T5193] __do_sys_io_uring_enter+0x103d/0x24e0 [ 92.007358][ T5193] ? io_submit_sqes+0x1e90/0x1e90 [ 92.012418][ T5193] ? ptrace_notify+0xfe/0x140 [ 92.017097][ T5193] ? lock_downgrade+0x6e0/0x6e0 [ 92.021991][ T5193] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.027221][ T5193] ? lockdep_hardirqs_on+0x7d/0x100 [ 92.032419][ T5193] ? _raw_spin_unlock_irq+0x2e/0x50 [ 92.037716][ T5193] ? ptrace_notify+0xfe/0x140 [ 92.042450][ T5193] do_syscall_64+0x39/0xb0 [ 92.046877][ T5193] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 92.052771][ T5193] RIP: 0033:0x7f607b0de549 [ 92.057183][ T5193] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 92.076811][ T5193] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 92.085229][ T5193] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5193] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5193] close(3) = 0 [pid 5193] close(4) = 0 [pid 5193] close(5) = 0 [pid 5193] close(6) = 0 [pid 5193] close(7) = 0 [pid 5193] close(8) = -1 EBADF (Bad file descriptor) [pid 5193] close(9) = -1 EBADF (Bad file descriptor) [pid 5193] close(10) = -1 EBADF (Bad file descriptor) [pid 5193] close(11) = -1 EBADF (Bad file descriptor) [pid 5193] close(12) = -1 EBADF (Bad file descriptor) [pid 5193] close(13) = -1 EBADF (Bad file descriptor) [pid 5193] close(14) = -1 EBADF (Bad file descriptor) [pid 5193] close(15) = -1 EBADF (Bad file descriptor) [pid 5193] close(16) = -1 EBADF (Bad file descriptor) [pid 5193] close(17) = -1 EBADF (Bad file descriptor) [pid 5193] close(18) = -1 EBADF (Bad file descriptor) [pid 5193] close(19) = -1 EBADF (Bad file descriptor) [pid 5193] close(20) = -1 EBADF (Bad file descriptor) [pid 5193] close(21) = -1 EBADF (Bad file descriptor) [pid 5193] close(22) = -1 EBADF (Bad file descriptor) [pid 5193] close(23) = -1 EBADF (Bad file descriptor) [pid 5193] close(24) = -1 EBADF (Bad file descriptor) [pid 5193] close(25) = -1 EBADF (Bad file descriptor) [pid 5193] close(26) = -1 EBADF (Bad file descriptor) [pid 5193] close(27) = -1 EBADF (Bad file descriptor) [pid 5193] close(28) = -1 EBADF (Bad file descriptor) [pid 5193] close(29) = -1 EBADF (Bad file descriptor) [pid 5193] exit_group(0) = ? [pid 5193] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5194 attached , child_tidptr=0x555555eff5d0) = 105 [pid 5194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5194] setpgid(0, 0) = 0 [pid 5194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5194] write(3, "1000", 4) = 4 [pid 5194] close(3) = 0 [pid 5194] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5194] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5194] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5194] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5194] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5194] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5194] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5194] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5194] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5194] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5194] write(7, "5", 1) = 1 [ 92.093309][ T5193] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 92.101300][ T5193] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 92.109274][ T5193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 92.117248][ T5193] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 92.125242][ T5193] [ 92.175684][ T5194] FAULT_INJECTION: forcing a failure. [ 92.175684][ T5194] name failslab, interval 1, probability 0, space 0, times 0 [ 92.188510][ T5194] CPU: 0 PID: 5194 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 92.198413][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 92.208477][ T5194] Call Trace: [ 92.211762][ T5194] [ 92.214691][ T5194] dump_stack_lvl+0xd1/0x138 [ 92.219287][ T5194] should_fail_ex.cold+0x5/0xa [ 92.224046][ T5194] ? io_issue_sqe+0x695/0x1250 [ 92.228814][ T5194] should_failslab+0x9/0x20 [ 92.233363][ T5194] __kmem_cache_alloc_node+0x5b/0x330 [ 92.238918][ T5194] ? ref_tracker_alloc+0x158/0x560 [ 92.244044][ T5194] kmalloc_trace+0x26/0x60 [ 92.248470][ T5194] ref_tracker_alloc+0x158/0x560 [ 92.253506][ T5194] ? __lock_acquire+0xbc3/0x56d0 [ 92.258440][ T5194] ? ref_tracker_free+0x6b0/0x6b0 [ 92.263483][ T5194] dst_init+0xe4/0x520 [ 92.267552][ T5194] dst_alloc+0x16f/0x1f0 [ 92.271795][ T5194] rt_dst_alloc+0x55/0x430 [ 92.276212][ T5194] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 92.282201][ T5194] ip_route_output_key_hash+0x18f/0x340 [ 92.287748][ T5194] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 92.294005][ T5194] dccp_v4_connect+0x7e1/0x1730 [ 92.298872][ T5194] __inet_stream_connect+0x69e/0xed0 [ 92.304162][ T5194] ? inet_listen+0x640/0x640 [ 92.308753][ T5194] ? mark_held_locks+0x9f/0xe0 [ 92.313694][ T5194] ? __local_bh_enable_ip+0xa4/0x130 [ 92.318983][ T5194] inet_stream_connect+0x57/0xa0 [ 92.323922][ T5194] ? __inet_stream_connect+0xed0/0xed0 [ 92.329390][ T5194] __sys_connect_file+0x153/0x1a0 [ 92.334415][ T5194] io_connect+0x3cc/0x720 [ 92.338748][ T5194] ? io_connect_prep+0x250/0x250 [ 92.343695][ T5194] ? receive_fd+0x110/0x110 [ 92.348222][ T5194] ? rcu_read_lock_sched_held+0x3e/0x70 [ 92.353764][ T5194] ? io_connect_prep+0x250/0x250 [ 92.358710][ T5194] io_issue_sqe+0x695/0x1250 [ 92.363331][ T5194] io_submit_sqes+0x96c/0x1e90 [ 92.368134][ T5194] __do_sys_io_uring_enter+0x103d/0x24e0 [ 92.373804][ T5194] ? io_submit_sqes+0x1e90/0x1e90 [ 92.378856][ T5194] ? ptrace_notify+0xfe/0x140 [ 92.383557][ T5194] ? lock_downgrade+0x6e0/0x6e0 [ 92.388416][ T5194] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.393621][ T5194] ? lockdep_hardirqs_on+0x7d/0x100 [ 92.399166][ T5194] ? _raw_spin_unlock_irq+0x2e/0x50 [ 92.404364][ T5194] ? ptrace_notify+0xfe/0x140 [ 92.409043][ T5194] do_syscall_64+0x39/0xb0 [ 92.413462][ T5194] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 92.419351][ T5194] RIP: 0033:0x7f607b0de549 [ 92.423759][ T5194] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 92.443363][ T5194] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 92.451777][ T5194] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 92.459743][ T5194] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 92.467707][ T5194] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5194] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5194] close(3) = 0 [pid 5194] close(4) = 0 [pid 5194] close(5) = 0 [pid 5194] close(6) = 0 [pid 5194] close(7) = 0 [pid 5194] close(8) = -1 EBADF (Bad file descriptor) [pid 5194] close(9) = -1 EBADF (Bad file descriptor) [pid 5194] close(10) = -1 EBADF (Bad file descriptor) [pid 5194] close(11) = -1 EBADF (Bad file descriptor) [pid 5194] close(12) = -1 EBADF (Bad file descriptor) [pid 5194] close(13) = -1 EBADF (Bad file descriptor) [pid 5194] close(14) = -1 EBADF (Bad file descriptor) [pid 5194] close(15) = -1 EBADF (Bad file descriptor) [pid 5194] close(16) = -1 EBADF (Bad file descriptor) [pid 5194] close(17) = -1 EBADF (Bad file descriptor) [pid 5194] close(18) = -1 EBADF (Bad file descriptor) [pid 5194] close(19) = -1 EBADF (Bad file descriptor) [pid 5194] close(20) = -1 EBADF (Bad file descriptor) [pid 5194] close(21) = -1 EBADF (Bad file descriptor) [pid 5194] close(22) = -1 EBADF (Bad file descriptor) [pid 5194] close(23) = -1 EBADF (Bad file descriptor) [pid 5194] close(24) = -1 EBADF (Bad file descriptor) [pid 5194] close(25) = -1 EBADF (Bad file descriptor) [pid 5194] close(26) = -1 EBADF (Bad file descriptor) [pid 5194] close(27) = -1 EBADF (Bad file descriptor) [pid 5194] close(28) = -1 EBADF (Bad file descriptor) [pid 5194] close(29) = -1 EBADF (Bad file descriptor) [pid 5194] exit_group(0) = ? [pid 5194] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=105, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 106 ./strace-static-x86_64: Process 5196 attached [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5196] setpgid(0, 0) = 0 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5196] write(3, "1000", 4) = 4 [pid 5196] close(3) = 0 [pid 5196] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5196] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5196] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5196] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5196] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5196] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 92.475672][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 92.483809][ T5194] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 92.491821][ T5194] [pid 5196] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5196] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5196] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5196] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5196] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5196] write(7, "5", 1) = 1 [ 92.545445][ T5196] FAULT_INJECTION: forcing a failure. [ 92.545445][ T5196] name failslab, interval 1, probability 0, space 0, times 0 [ 92.558763][ T5196] CPU: 0 PID: 5196 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 92.568671][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 92.578722][ T5196] Call Trace: [ 92.581994][ T5196] [ 92.584922][ T5196] dump_stack_lvl+0xd1/0x138 [ 92.589536][ T5196] should_fail_ex.cold+0x5/0xa [ 92.594309][ T5196] ? io_issue_sqe+0x695/0x1250 [ 92.599080][ T5196] should_failslab+0x9/0x20 [ 92.603586][ T5196] __kmem_cache_alloc_node+0x5b/0x330 [ 92.608954][ T5196] ? ref_tracker_alloc+0x158/0x560 [ 92.614088][ T5196] kmalloc_trace+0x26/0x60 [ 92.618544][ T5196] ref_tracker_alloc+0x158/0x560 [ 92.623506][ T5196] ? __lock_acquire+0xbc3/0x56d0 [ 92.628463][ T5196] ? ref_tracker_free+0x6b0/0x6b0 [ 92.633538][ T5196] dst_init+0xe4/0x520 [ 92.637633][ T5196] dst_alloc+0x16f/0x1f0 [ 92.641902][ T5196] rt_dst_alloc+0x55/0x430 [ 92.646344][ T5196] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 92.652415][ T5196] ip_route_output_key_hash+0x18f/0x340 [ 92.658003][ T5196] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 92.664298][ T5196] dccp_v4_connect+0x7e1/0x1730 [ 92.669199][ T5196] __inet_stream_connect+0x69e/0xed0 [ 92.674524][ T5196] ? inet_listen+0x640/0x640 [ 92.679147][ T5196] ? mark_held_locks+0x9f/0xe0 [ 92.683935][ T5196] ? __local_bh_enable_ip+0xa4/0x130 [ 92.689245][ T5196] inet_stream_connect+0x57/0xa0 [ 92.694213][ T5196] ? __inet_stream_connect+0xed0/0xed0 [ 92.699700][ T5196] __sys_connect_file+0x153/0x1a0 [ 92.704746][ T5196] io_connect+0x3cc/0x720 [ 92.709107][ T5196] ? io_connect_prep+0x250/0x250 [ 92.714073][ T5196] ? receive_fd+0x110/0x110 [ 92.718622][ T5196] ? rcu_read_lock_sched_held+0x3e/0x70 [ 92.724191][ T5196] ? io_connect_prep+0x250/0x250 [ 92.729248][ T5196] io_issue_sqe+0x695/0x1250 [ 92.733869][ T5196] io_submit_sqes+0x96c/0x1e90 [ 92.738682][ T5196] __do_sys_io_uring_enter+0x103d/0x24e0 [ 92.744347][ T5196] ? io_submit_sqes+0x1e90/0x1e90 [ 92.749399][ T5196] ? ptrace_notify+0xfe/0x140 [ 92.754093][ T5196] ? lock_downgrade+0x6e0/0x6e0 [ 92.758977][ T5196] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.764201][ T5196] ? lockdep_hardirqs_on+0x7d/0x100 [ 92.769593][ T5196] ? _raw_spin_unlock_irq+0x2e/0x50 [ 92.774819][ T5196] ? ptrace_notify+0xfe/0x140 [ 92.779523][ T5196] do_syscall_64+0x39/0xb0 [ 92.783969][ T5196] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 92.789887][ T5196] RIP: 0033:0x7f607b0de549 [ 92.794318][ T5196] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 92.814029][ T5196] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 92.822463][ T5196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 92.830448][ T5196] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 92.838433][ T5196] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5196] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5196] close(3) = 0 [pid 5196] close(4) = 0 [pid 5196] close(5) = 0 [pid 5196] close(6) = 0 [pid 5196] close(7) = 0 [pid 5196] close(8) = -1 EBADF (Bad file descriptor) [pid 5196] close(9) = -1 EBADF (Bad file descriptor) [pid 5196] close(10) = -1 EBADF (Bad file descriptor) [pid 5196] close(11) = -1 EBADF (Bad file descriptor) [pid 5196] close(12) = -1 EBADF (Bad file descriptor) [pid 5196] close(13) = -1 EBADF (Bad file descriptor) [pid 5196] close(14) = -1 EBADF (Bad file descriptor) [pid 5196] close(15) = -1 EBADF (Bad file descriptor) [pid 5196] close(16) = -1 EBADF (Bad file descriptor) [pid 5196] close(17) = -1 EBADF (Bad file descriptor) [pid 5196] close(18) = -1 EBADF (Bad file descriptor) [pid 5196] close(19) = -1 EBADF (Bad file descriptor) [pid 5196] close(20) = -1 EBADF (Bad file descriptor) [pid 5196] close(21) = -1 EBADF (Bad file descriptor) [pid 5196] close(22) = -1 EBADF (Bad file descriptor) [pid 5196] close(23) = -1 EBADF (Bad file descriptor) [pid 5196] close(24) = -1 EBADF (Bad file descriptor) [pid 5196] close(25) = -1 EBADF (Bad file descriptor) [pid 5196] close(26) = -1 EBADF (Bad file descriptor) [pid 5196] close(27) = -1 EBADF (Bad file descriptor) [pid 5196] close(28) = -1 EBADF (Bad file descriptor) [pid 5196] close(29) = -1 EBADF (Bad file descriptor) [pid 5196] exit_group(0) = ? [pid 5196] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=106, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5197 attached , child_tidptr=0x555555eff5d0) = 107 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5197] setpgid(0, 0) = 0 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5197] write(3, "1000", 4) = 4 [pid 5197] close(3) = 0 [pid 5197] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5197] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5197] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5197] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5197] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5197] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5197] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5197] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5197] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5197] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5197] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5197] write(7, "5", 1) = 1 [ 92.846419][ T5196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 92.855031][ T5196] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 92.863045][ T5196] [ 92.900090][ T5197] FAULT_INJECTION: forcing a failure. [ 92.900090][ T5197] name failslab, interval 1, probability 0, space 0, times 0 [ 92.912833][ T5197] CPU: 0 PID: 5197 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 92.922727][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 92.932794][ T5197] Call Trace: [ 92.936087][ T5197] [ 92.939015][ T5197] dump_stack_lvl+0xd1/0x138 [ 92.943615][ T5197] should_fail_ex.cold+0x5/0xa [ 92.948396][ T5197] ? __inet_hash_connect+0x95e/0x1ba0 [ 92.953802][ T5197] should_failslab+0x9/0x20 [ 92.958313][ T5197] kmem_cache_alloc+0x5a/0x320 [ 92.963111][ T5197] __inet_hash_connect+0x95e/0x1ba0 [ 92.968342][ T5197] ? __inet_lookup_listener+0xbf0/0xbf0 [ 92.973942][ T5197] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 92.980333][ T5197] dccp_v4_connect+0xb82/0x1730 [ 92.985264][ T5197] __inet_stream_connect+0x69e/0xed0 [ 92.990609][ T5197] ? inet_listen+0x640/0x640 [ 92.995242][ T5197] ? mark_held_locks+0x9f/0xe0 [ 93.000029][ T5197] ? __local_bh_enable_ip+0xa4/0x130 [ 93.005341][ T5197] inet_stream_connect+0x57/0xa0 [ 93.010310][ T5197] ? __inet_stream_connect+0xed0/0xed0 [ 93.015807][ T5197] __sys_connect_file+0x153/0x1a0 [ 93.020858][ T5197] io_connect+0x3cc/0x720 [ 93.025221][ T5197] ? io_connect_prep+0x250/0x250 [ 93.030273][ T5197] ? receive_fd+0x110/0x110 [ 93.034813][ T5197] ? rcu_read_lock_sched_held+0x3e/0x70 [ 93.040375][ T5197] ? io_connect_prep+0x250/0x250 [ 93.045344][ T5197] io_issue_sqe+0x695/0x1250 [ 93.049964][ T5197] io_submit_sqes+0x96c/0x1e90 [ 93.054774][ T5197] __do_sys_io_uring_enter+0x103d/0x24e0 [ 93.060529][ T5197] ? io_submit_sqes+0x1e90/0x1e90 [ 93.065581][ T5197] ? ptrace_notify+0xfe/0x140 [ 93.070275][ T5197] ? lock_downgrade+0x6e0/0x6e0 [ 93.075153][ T5197] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.080389][ T5197] ? lockdep_hardirqs_on+0x7d/0x100 [ 93.085607][ T5197] ? _raw_spin_unlock_irq+0x2e/0x50 [ 93.090831][ T5197] ? ptrace_notify+0xfe/0x140 [ 93.095531][ T5197] do_syscall_64+0x39/0xb0 [ 93.099974][ T5197] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 93.105890][ T5197] RIP: 0033:0x7f607b0de549 [ 93.110319][ T5197] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 93.129947][ T5197] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 93.138383][ T5197] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5197] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5197] close(3) = 0 [pid 5197] close(4) = 0 [pid 5197] close(5) = 0 [pid 5197] close(6) = 0 [pid 5197] close(7) = 0 [pid 5197] close(8) = -1 EBADF (Bad file descriptor) [pid 5197] close(9) = -1 EBADF (Bad file descriptor) [pid 5197] close(10) = -1 EBADF (Bad file descriptor) [pid 5197] close(11) = -1 EBADF (Bad file descriptor) [pid 5197] close(12) = -1 EBADF (Bad file descriptor) [pid 5197] close(13) = -1 EBADF (Bad file descriptor) [pid 5197] close(14) = -1 EBADF (Bad file descriptor) [pid 5197] close(15) = -1 EBADF (Bad file descriptor) [pid 5197] close(16) = -1 EBADF (Bad file descriptor) [pid 5197] close(17) = -1 EBADF (Bad file descriptor) [pid 5197] close(18) = -1 EBADF (Bad file descriptor) [pid 5197] close(19) = -1 EBADF (Bad file descriptor) [pid 5197] close(20) = -1 EBADF (Bad file descriptor) [pid 5197] close(21) = -1 EBADF (Bad file descriptor) [pid 5197] close(22) = -1 EBADF (Bad file descriptor) [pid 5197] close(23) = -1 EBADF (Bad file descriptor) [pid 5197] close(24) = -1 EBADF (Bad file descriptor) [pid 5197] close(25) = -1 EBADF (Bad file descriptor) [pid 5197] close(26) = -1 EBADF (Bad file descriptor) [pid 5197] close(27) = -1 EBADF (Bad file descriptor) [pid 5197] close(28) = -1 EBADF (Bad file descriptor) [pid 5197] close(29) = -1 EBADF (Bad file descriptor) [pid 5197] exit_group(0) = ? [pid 5197] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=107, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5198 attached , child_tidptr=0x555555eff5d0) = 108 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5198] setpgid(0, 0) = 0 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5198] write(3, "1000", 4) = 4 [pid 5198] close(3) = 0 [pid 5198] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5198] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5198] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5198] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5198] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5198] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5198] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5198] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5198] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5198] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5198] write(7, "5", 1) = 1 [ 93.146369][ T5197] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 93.154356][ T5197] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 93.162340][ T5197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 93.170325][ T5197] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 93.178336][ T5197] [ 93.220613][ T5198] FAULT_INJECTION: forcing a failure. [ 93.220613][ T5198] name failslab, interval 1, probability 0, space 0, times 0 [ 93.233809][ T5198] CPU: 0 PID: 5198 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 93.243715][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 93.253771][ T5198] Call Trace: [ 93.257049][ T5198] [ 93.259992][ T5198] dump_stack_lvl+0xd1/0x138 [ 93.264614][ T5198] should_fail_ex.cold+0x5/0xa [ 93.269421][ T5198] ? io_issue_sqe+0x695/0x1250 [ 93.274222][ T5198] should_failslab+0x9/0x20 [ 93.278732][ T5198] __kmem_cache_alloc_node+0x5b/0x330 [ 93.284108][ T5198] ? ref_tracker_alloc+0x158/0x560 [ 93.289233][ T5198] kmalloc_trace+0x26/0x60 [ 93.293707][ T5198] ref_tracker_alloc+0x158/0x560 [ 93.298680][ T5198] ? __lock_acquire+0xbc3/0x56d0 [ 93.303631][ T5198] ? ref_tracker_free+0x6b0/0x6b0 [ 93.308703][ T5198] dst_init+0xe4/0x520 [ 93.312777][ T5198] dst_alloc+0x16f/0x1f0 [ 93.317023][ T5198] rt_dst_alloc+0x55/0x430 [ 93.321457][ T5198] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 93.327447][ T5198] ip_route_output_key_hash+0x18f/0x340 [ 93.332999][ T5198] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 93.339291][ T5198] dccp_v4_connect+0x7e1/0x1730 [ 93.344195][ T5198] __inet_stream_connect+0x69e/0xed0 [ 93.349494][ T5198] ? inet_listen+0x640/0x640 [ 93.354101][ T5198] ? mark_held_locks+0x9f/0xe0 [ 93.358881][ T5198] ? __local_bh_enable_ip+0xa4/0x130 [ 93.364194][ T5198] inet_stream_connect+0x57/0xa0 [ 93.369150][ T5198] ? __inet_stream_connect+0xed0/0xed0 [ 93.374630][ T5198] __sys_connect_file+0x153/0x1a0 [ 93.379689][ T5198] io_connect+0x3cc/0x720 [ 93.384026][ T5198] ? io_connect_prep+0x250/0x250 [ 93.388982][ T5198] ? receive_fd+0x110/0x110 [ 93.393545][ T5198] ? rcu_read_lock_sched_held+0x3e/0x70 [ 93.399131][ T5198] ? io_connect_prep+0x250/0x250 [ 93.404112][ T5198] io_issue_sqe+0x695/0x1250 [ 93.408713][ T5198] io_submit_sqes+0x96c/0x1e90 [ 93.413532][ T5198] __do_sys_io_uring_enter+0x103d/0x24e0 [ 93.419243][ T5198] ? io_submit_sqes+0x1e90/0x1e90 [ 93.424314][ T5198] ? ptrace_notify+0xfe/0x140 [ 93.429002][ T5198] ? lock_downgrade+0x6e0/0x6e0 [ 93.433880][ T5198] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.439111][ T5198] ? lockdep_hardirqs_on+0x7d/0x100 [ 93.444318][ T5198] ? _raw_spin_unlock_irq+0x2e/0x50 [ 93.449525][ T5198] ? ptrace_notify+0xfe/0x140 [ 93.454210][ T5198] do_syscall_64+0x39/0xb0 [ 93.458638][ T5198] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 93.464537][ T5198] RIP: 0033:0x7f607b0de549 [ 93.468980][ T5198] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 93.488622][ T5198] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 93.497132][ T5198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 93.505108][ T5198] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 93.513091][ T5198] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5198] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5198] close(3) = 0 [pid 5198] close(4) = 0 [pid 5198] close(5) = 0 [pid 5198] close(6) = 0 [pid 5198] close(7) = 0 [pid 5198] close(8) = -1 EBADF (Bad file descriptor) [pid 5198] close(9) = -1 EBADF (Bad file descriptor) [pid 5198] close(10) = -1 EBADF (Bad file descriptor) [pid 5198] close(11) = -1 EBADF (Bad file descriptor) [pid 5198] close(12) = -1 EBADF (Bad file descriptor) [pid 5198] close(13) = -1 EBADF (Bad file descriptor) [pid 5198] close(14) = -1 EBADF (Bad file descriptor) [pid 5198] close(15) = -1 EBADF (Bad file descriptor) [pid 5198] close(16) = -1 EBADF (Bad file descriptor) [pid 5198] close(17) = -1 EBADF (Bad file descriptor) [pid 5198] close(18) = -1 EBADF (Bad file descriptor) [pid 5198] close(19) = -1 EBADF (Bad file descriptor) [pid 5198] close(20) = -1 EBADF (Bad file descriptor) [pid 5198] close(21) = -1 EBADF (Bad file descriptor) [pid 5198] close(22) = -1 EBADF (Bad file descriptor) [pid 5198] close(23) = -1 EBADF (Bad file descriptor) [pid 5198] close(24) = -1 EBADF (Bad file descriptor) [pid 5198] close(25) = -1 EBADF (Bad file descriptor) [pid 5198] close(26) = -1 EBADF (Bad file descriptor) [pid 5198] close(27) = -1 EBADF (Bad file descriptor) [pid 5198] close(28) = -1 EBADF (Bad file descriptor) [pid 5198] close(29) = -1 EBADF (Bad file descriptor) [pid 5198] exit_group(0) = ? [pid 5198] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=108, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 109 ./strace-static-x86_64: Process 5199 attached [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5199] write(3, "1000", 4) = 4 [pid 5199] close(3) = 0 [pid 5199] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5199] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5199] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5199] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5199] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5199] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5199] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5199] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5199] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5199] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5199] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5199] write(7, "5", 1) = 1 [ 93.521060][ T5198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 93.529038][ T5198] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 93.537061][ T5198] [ 93.583241][ T5199] FAULT_INJECTION: forcing a failure. [ 93.583241][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 93.596567][ T5199] CPU: 0 PID: 5199 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 93.606512][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 93.616661][ T5199] Call Trace: [ 93.619941][ T5199] [ 93.622871][ T5199] dump_stack_lvl+0xd1/0x138 [ 93.627488][ T5199] should_fail_ex.cold+0x5/0xa [ 93.632295][ T5199] ? io_issue_sqe+0x695/0x1250 [ 93.637081][ T5199] should_failslab+0x9/0x20 [ 93.641587][ T5199] __kmem_cache_alloc_node+0x5b/0x330 [ 93.646965][ T5199] ? ref_tracker_alloc+0x158/0x560 [ 93.652108][ T5199] kmalloc_trace+0x26/0x60 [ 93.656564][ T5199] ref_tracker_alloc+0x158/0x560 [ 93.661511][ T5199] ? __lock_acquire+0xbc3/0x56d0 [ 93.666466][ T5199] ? ref_tracker_free+0x6b0/0x6b0 [ 93.671514][ T5199] dst_init+0xe4/0x520 [ 93.675590][ T5199] dst_alloc+0x16f/0x1f0 [ 93.679867][ T5199] rt_dst_alloc+0x55/0x430 [ 93.684291][ T5199] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 93.690304][ T5199] ip_route_output_key_hash+0x18f/0x340 [ 93.695893][ T5199] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 93.702206][ T5199] dccp_v4_connect+0x7e1/0x1730 [ 93.707109][ T5199] __inet_stream_connect+0x69e/0xed0 [ 93.712412][ T5199] ? inet_listen+0x640/0x640 [ 93.717012][ T5199] ? mark_held_locks+0x9f/0xe0 [ 93.721816][ T5199] ? __local_bh_enable_ip+0xa4/0x130 [ 93.727131][ T5199] inet_stream_connect+0x57/0xa0 [ 93.732090][ T5199] ? __inet_stream_connect+0xed0/0xed0 [ 93.737580][ T5199] __sys_connect_file+0x153/0x1a0 [ 93.742634][ T5199] io_connect+0x3cc/0x720 [ 93.746970][ T5199] ? io_connect_prep+0x250/0x250 [ 93.751926][ T5199] ? receive_fd+0x110/0x110 [ 93.756465][ T5199] ? rcu_read_lock_sched_held+0x3e/0x70 [ 93.762012][ T5199] ? io_connect_prep+0x250/0x250 [ 93.766957][ T5199] io_issue_sqe+0x695/0x1250 [ 93.771573][ T5199] io_submit_sqes+0x96c/0x1e90 [ 93.776381][ T5199] __do_sys_io_uring_enter+0x103d/0x24e0 [ 93.782022][ T5199] ? io_submit_sqes+0x1e90/0x1e90 [ 93.787053][ T5199] ? ptrace_notify+0xfe/0x140 [ 93.791744][ T5199] ? lock_downgrade+0x6e0/0x6e0 [ 93.796623][ T5199] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.801839][ T5199] ? lockdep_hardirqs_on+0x7d/0x100 [ 93.807048][ T5199] ? _raw_spin_unlock_irq+0x2e/0x50 [ 93.812249][ T5199] ? ptrace_notify+0xfe/0x140 [ 93.816927][ T5199] do_syscall_64+0x39/0xb0 [ 93.821359][ T5199] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 93.827291][ T5199] RIP: 0033:0x7f607b0de549 [ 93.831725][ T5199] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 93.851349][ T5199] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 93.859795][ T5199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 93.867776][ T5199] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 93.875844][ T5199] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5199] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5199] close(3) = 0 [pid 5199] close(4) = 0 [pid 5199] close(5) = 0 [pid 5199] close(6) = 0 [pid 5199] close(7) = 0 [pid 5199] close(8) = -1 EBADF (Bad file descriptor) [pid 5199] close(9) = -1 EBADF (Bad file descriptor) [pid 5199] close(10) = -1 EBADF (Bad file descriptor) [pid 5199] close(11) = -1 EBADF (Bad file descriptor) [pid 5199] close(12) = -1 EBADF (Bad file descriptor) [pid 5199] close(13) = -1 EBADF (Bad file descriptor) [pid 5199] close(14) = -1 EBADF (Bad file descriptor) [pid 5199] close(15) = -1 EBADF (Bad file descriptor) [pid 5199] close(16) = -1 EBADF (Bad file descriptor) [pid 5199] close(17) = -1 EBADF (Bad file descriptor) [pid 5199] close(18) = -1 EBADF (Bad file descriptor) [pid 5199] close(19) = -1 EBADF (Bad file descriptor) [pid 5199] close(20) = -1 EBADF (Bad file descriptor) [pid 5199] close(21) = -1 EBADF (Bad file descriptor) [pid 5199] close(22) = -1 EBADF (Bad file descriptor) [pid 5199] close(23) = -1 EBADF (Bad file descriptor) [pid 5199] close(24) = -1 EBADF (Bad file descriptor) [pid 5199] close(25) = -1 EBADF (Bad file descriptor) [pid 5199] close(26) = -1 EBADF (Bad file descriptor) [pid 5199] close(27) = -1 EBADF (Bad file descriptor) [pid 5199] close(28) = -1 EBADF (Bad file descriptor) [pid 5199] close(29) = -1 EBADF (Bad file descriptor) [pid 5199] exit_group(0) = ? [pid 5199] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=109, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 110 ./strace-static-x86_64: Process 5200 attached [pid 5200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5200] setpgid(0, 0) = 0 [pid 5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5200] write(3, "1000", 4) = 4 [pid 5200] close(3) = 0 [pid 5200] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 93.883818][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 93.891803][ T5199] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 93.899810][ T5199] [pid 5200] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5200] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5200] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5200] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5200] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5200] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5200] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5200] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5200] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5200] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5200] write(7, "5", 1) = 1 [ 93.957951][ T5200] FAULT_INJECTION: forcing a failure. [ 93.957951][ T5200] name failslab, interval 1, probability 0, space 0, times 0 [ 93.971518][ T5200] CPU: 0 PID: 5200 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 93.981423][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 93.991468][ T5200] Call Trace: [ 93.994738][ T5200] [ 93.997669][ T5200] dump_stack_lvl+0xd1/0x138 [ 94.002262][ T5200] should_fail_ex.cold+0x5/0xa [ 94.007018][ T5200] ? io_issue_sqe+0x695/0x1250 [ 94.011781][ T5200] should_failslab+0x9/0x20 [ 94.016282][ T5200] __kmem_cache_alloc_node+0x5b/0x330 [ 94.021677][ T5200] ? ref_tracker_alloc+0x158/0x560 [ 94.026844][ T5200] kmalloc_trace+0x26/0x60 [ 94.031303][ T5200] ref_tracker_alloc+0x158/0x560 [ 94.036274][ T5200] ? __lock_acquire+0xbc3/0x56d0 [ 94.041236][ T5200] ? ref_tracker_free+0x6b0/0x6b0 [ 94.046368][ T5200] dst_init+0xe4/0x520 [ 94.050464][ T5200] dst_alloc+0x16f/0x1f0 [ 94.054732][ T5200] rt_dst_alloc+0x55/0x430 [ 94.059175][ T5200] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 94.065194][ T5200] ip_route_output_key_hash+0x18f/0x340 [ 94.070772][ T5200] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 94.077064][ T5200] dccp_v4_connect+0x7e1/0x1730 [ 94.081965][ T5200] __inet_stream_connect+0x69e/0xed0 [ 94.087295][ T5200] ? inet_listen+0x640/0x640 [ 94.091922][ T5200] ? mark_held_locks+0x9f/0xe0 [ 94.096724][ T5200] ? __local_bh_enable_ip+0xa4/0x130 [ 94.102036][ T5200] inet_stream_connect+0x57/0xa0 [ 94.107004][ T5200] ? __inet_stream_connect+0xed0/0xed0 [ 94.112493][ T5200] __sys_connect_file+0x153/0x1a0 [ 94.117540][ T5200] io_connect+0x3cc/0x720 [ 94.121903][ T5200] ? io_connect_prep+0x250/0x250 [ 94.126869][ T5200] ? receive_fd+0x110/0x110 [ 94.131409][ T5200] ? rcu_read_lock_sched_held+0x3e/0x70 [ 94.137001][ T5200] ? io_connect_prep+0x250/0x250 [ 94.141970][ T5200] io_issue_sqe+0x695/0x1250 [ 94.146592][ T5200] io_submit_sqes+0x96c/0x1e90 [ 94.151403][ T5200] __do_sys_io_uring_enter+0x103d/0x24e0 [ 94.157081][ T5200] ? io_submit_sqes+0x1e90/0x1e90 [ 94.162139][ T5200] ? ptrace_notify+0xfe/0x140 [ 94.166836][ T5200] ? lock_downgrade+0x6e0/0x6e0 [ 94.171800][ T5200] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.177054][ T5200] ? lockdep_hardirqs_on+0x7d/0x100 [ 94.182275][ T5200] ? _raw_spin_unlock_irq+0x2e/0x50 [ 94.187498][ T5200] ? ptrace_notify+0xfe/0x140 [ 94.192203][ T5200] do_syscall_64+0x39/0xb0 [ 94.196655][ T5200] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 94.202568][ T5200] RIP: 0033:0x7f607b0de549 [ 94.206996][ T5200] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 94.226622][ T5200] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 94.235061][ T5200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 94.243141][ T5200] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 94.251129][ T5200] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5200] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5200] close(3) = 0 [pid 5200] close(4) = 0 [pid 5200] close(5) = 0 [pid 5200] close(6) = 0 [pid 5200] close(7) = 0 [pid 5200] close(8) = -1 EBADF (Bad file descriptor) [pid 5200] close(9) = -1 EBADF (Bad file descriptor) [pid 5200] close(10) = -1 EBADF (Bad file descriptor) [pid 5200] close(11) = -1 EBADF (Bad file descriptor) [pid 5200] close(12) = -1 EBADF (Bad file descriptor) [pid 5200] close(13) = -1 EBADF (Bad file descriptor) [pid 5200] close(14) = -1 EBADF (Bad file descriptor) [pid 5200] close(15) = -1 EBADF (Bad file descriptor) [pid 5200] close(16) = -1 EBADF (Bad file descriptor) [pid 5200] close(17) = -1 EBADF (Bad file descriptor) [pid 5200] close(18) = -1 EBADF (Bad file descriptor) [pid 5200] close(19) = -1 EBADF (Bad file descriptor) [pid 5200] close(20) = -1 EBADF (Bad file descriptor) [pid 5200] close(21) = -1 EBADF (Bad file descriptor) [pid 5200] close(22) = -1 EBADF (Bad file descriptor) [pid 5200] close(23) = -1 EBADF (Bad file descriptor) [pid 5200] close(24) = -1 EBADF (Bad file descriptor) [pid 5200] close(25) = -1 EBADF (Bad file descriptor) [pid 5200] close(26) = -1 EBADF (Bad file descriptor) [pid 5200] close(27) = -1 EBADF (Bad file descriptor) [pid 5200] close(28) = -1 EBADF (Bad file descriptor) [pid 5200] close(29) = -1 EBADF (Bad file descriptor) [pid 5200] exit_group(0) = ? [pid 5200] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 111 ./strace-static-x86_64: Process 5201 attached [pid 5201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5201] setpgid(0, 0) = 0 [pid 5201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5201] write(3, "1000", 4) = 4 [pid 5201] close(3) = 0 [pid 5201] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5201] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5201] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5201] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5201] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5201] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5201] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5201] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5201] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5201] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5201] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5201] write(7, "5", 1) = 1 [ 94.259121][ T5200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 94.267104][ T5200] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 94.275110][ T5200] [ 94.318123][ T5201] FAULT_INJECTION: forcing a failure. [ 94.318123][ T5201] name failslab, interval 1, probability 0, space 0, times 0 [ 94.330844][ T5201] CPU: 0 PID: 5201 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 94.340776][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 94.350959][ T5201] Call Trace: [ 94.354252][ T5201] [ 94.357182][ T5201] dump_stack_lvl+0xd1/0x138 [ 94.361781][ T5201] should_fail_ex.cold+0x5/0xa [ 94.366549][ T5201] ? __inet_hash_connect+0x95e/0x1ba0 [ 94.371921][ T5201] should_failslab+0x9/0x20 [ 94.376431][ T5201] kmem_cache_alloc+0x5a/0x320 [ 94.381198][ T5201] __inet_hash_connect+0x95e/0x1ba0 [ 94.386421][ T5201] ? __inet_lookup_listener+0xbf0/0xbf0 [ 94.392011][ T5201] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 94.398386][ T5201] dccp_v4_connect+0xb82/0x1730 [ 94.403287][ T5201] __inet_stream_connect+0x69e/0xed0 [ 94.408612][ T5201] ? inet_listen+0x640/0x640 [ 94.413237][ T5201] ? mark_held_locks+0x9f/0xe0 [ 94.418028][ T5201] ? __local_bh_enable_ip+0xa4/0x130 [ 94.423337][ T5201] inet_stream_connect+0x57/0xa0 [ 94.428303][ T5201] ? __inet_stream_connect+0xed0/0xed0 [ 94.433877][ T5201] __sys_connect_file+0x153/0x1a0 [ 94.438926][ T5201] io_connect+0x3cc/0x720 [ 94.443287][ T5201] ? io_connect_prep+0x250/0x250 [ 94.448275][ T5201] ? rcu_read_lock_sched_held+0x3e/0x70 [ 94.453846][ T5201] ? io_connect_prep+0x250/0x250 [ 94.458817][ T5201] io_issue_sqe+0x695/0x1250 [ 94.463440][ T5201] io_submit_sqes+0x96c/0x1e90 [ 94.468249][ T5201] __do_sys_io_uring_enter+0x103d/0x24e0 [ 94.474116][ T5201] ? io_submit_sqes+0x1e90/0x1e90 [ 94.479170][ T5201] ? ptrace_notify+0xfe/0x140 [ 94.483999][ T5201] ? lock_downgrade+0x6e0/0x6e0 [ 94.488888][ T5201] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.494116][ T5201] ? lockdep_hardirqs_on+0x7d/0x100 [ 94.499337][ T5201] ? _raw_spin_unlock_irq+0x2e/0x50 [ 94.504557][ T5201] ? ptrace_notify+0xfe/0x140 [ 94.509255][ T5201] do_syscall_64+0x39/0xb0 [ 94.513698][ T5201] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 94.519609][ T5201] RIP: 0033:0x7f607b0de549 [ 94.524039][ T5201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 94.543664][ T5201] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 94.552097][ T5201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 94.560080][ T5201] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5201] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5201] close(3) = 0 [pid 5201] close(4) = 0 [pid 5201] close(5) = 0 [pid 5201] close(6) = 0 [pid 5201] close(7) = 0 [pid 5201] close(8) = -1 EBADF (Bad file descriptor) [pid 5201] close(9) = -1 EBADF (Bad file descriptor) [pid 5201] close(10) = -1 EBADF (Bad file descriptor) [pid 5201] close(11) = -1 EBADF (Bad file descriptor) [pid 5201] close(12) = -1 EBADF (Bad file descriptor) [pid 5201] close(13) = -1 EBADF (Bad file descriptor) [pid 5201] close(14) = -1 EBADF (Bad file descriptor) [pid 5201] close(15) = -1 EBADF (Bad file descriptor) [pid 5201] close(16) = -1 EBADF (Bad file descriptor) [pid 5201] close(17) = -1 EBADF (Bad file descriptor) [pid 5201] close(18) = -1 EBADF (Bad file descriptor) [pid 5201] close(19) = -1 EBADF (Bad file descriptor) [pid 5201] close(20) = -1 EBADF (Bad file descriptor) [pid 5201] close(21) = -1 EBADF (Bad file descriptor) [pid 5201] close(22) = -1 EBADF (Bad file descriptor) [pid 5201] close(23) = -1 EBADF (Bad file descriptor) [pid 5201] close(24) = -1 EBADF (Bad file descriptor) [pid 5201] close(25) = -1 EBADF (Bad file descriptor) [pid 5201] close(26) = -1 EBADF (Bad file descriptor) [pid 5201] close(27) = -1 EBADF (Bad file descriptor) [pid 5201] close(28) = -1 EBADF (Bad file descriptor) [pid 5201] close(29) = -1 EBADF (Bad file descriptor) [pid 5201] exit_group(0) = ? [pid 5201] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=111, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 112 ./strace-static-x86_64: Process 5202 attached [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5202] setpgid(0, 0) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5202] write(3, "1000", 4) = 4 [pid 5202] close(3) = 0 [pid 5202] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5202] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5202] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5202] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5202] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5202] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5202] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5202] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5202] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5202] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5202] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5202] write(7, "5", 1) = 1 [ 94.568062][ T5201] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 94.576042][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 94.584024][ T5201] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 94.592045][ T5201] [ 94.635120][ T5202] FAULT_INJECTION: forcing a failure. [ 94.635120][ T5202] name failslab, interval 1, probability 0, space 0, times 0 [ 94.647812][ T5202] CPU: 1 PID: 5202 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 94.657721][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 94.667808][ T5202] Call Trace: [ 94.671110][ T5202] [ 94.674053][ T5202] dump_stack_lvl+0xd1/0x138 [ 94.678653][ T5202] should_fail_ex.cold+0x5/0xa [ 94.683437][ T5202] ? __inet_hash_connect+0x95e/0x1ba0 [ 94.688842][ T5202] should_failslab+0x9/0x20 [ 94.693373][ T5202] kmem_cache_alloc+0x5a/0x320 [ 94.698178][ T5202] __inet_hash_connect+0x95e/0x1ba0 [ 94.703404][ T5202] ? __inet_lookup_listener+0xbf0/0xbf0 [ 94.708991][ T5202] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 94.715364][ T5202] dccp_v4_connect+0xb82/0x1730 [ 94.720271][ T5202] __inet_stream_connect+0x69e/0xed0 [ 94.725598][ T5202] ? inet_listen+0x640/0x640 [ 94.730226][ T5202] ? mark_held_locks+0x9f/0xe0 [ 94.735013][ T5202] ? __local_bh_enable_ip+0xa4/0x130 [ 94.740330][ T5202] inet_stream_connect+0x57/0xa0 [ 94.745301][ T5202] ? __inet_stream_connect+0xed0/0xed0 [ 94.750790][ T5202] __sys_connect_file+0x153/0x1a0 [ 94.755839][ T5202] io_connect+0x3cc/0x720 [ 94.760200][ T5202] ? io_connect_prep+0x250/0x250 [ 94.765163][ T5202] ? receive_fd+0x110/0x110 [ 94.769704][ T5202] ? rcu_read_lock_sched_held+0x3e/0x70 [ 94.775269][ T5202] ? io_connect_prep+0x250/0x250 [ 94.780239][ T5202] io_issue_sqe+0x695/0x1250 [ 94.784859][ T5202] io_submit_sqes+0x96c/0x1e90 [ 94.789665][ T5202] __do_sys_io_uring_enter+0x103d/0x24e0 [ 94.795335][ T5202] ? io_submit_sqes+0x1e90/0x1e90 [ 94.800392][ T5202] ? ptrace_notify+0xfe/0x140 [ 94.805090][ T5202] ? lock_downgrade+0x6e0/0x6e0 [ 94.809969][ T5202] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.815199][ T5202] ? lockdep_hardirqs_on+0x7d/0x100 [ 94.820416][ T5202] ? _raw_spin_unlock_irq+0x2e/0x50 [ 94.825648][ T5202] ? ptrace_notify+0xfe/0x140 [ 94.830351][ T5202] do_syscall_64+0x39/0xb0 [ 94.834797][ T5202] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 94.840709][ T5202] RIP: 0033:0x7f607b0de549 [ 94.845139][ T5202] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 94.864764][ T5202] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 94.873197][ T5202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5202] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5202] close(3) = 0 [pid 5202] close(4) = 0 [pid 5202] close(5) = 0 [pid 5202] close(6) = 0 [pid 5202] close(7) = 0 [pid 5202] close(8) = -1 EBADF (Bad file descriptor) [pid 5202] close(9) = -1 EBADF (Bad file descriptor) [pid 5202] close(10) = -1 EBADF (Bad file descriptor) [pid 5202] close(11) = -1 EBADF (Bad file descriptor) [pid 5202] close(12) = -1 EBADF (Bad file descriptor) [pid 5202] close(13) = -1 EBADF (Bad file descriptor) [pid 5202] close(14) = -1 EBADF (Bad file descriptor) [pid 5202] close(15) = -1 EBADF (Bad file descriptor) [pid 5202] close(16) = -1 EBADF (Bad file descriptor) [pid 5202] close(17) = -1 EBADF (Bad file descriptor) [pid 5202] close(18) = -1 EBADF (Bad file descriptor) [pid 5202] close(19) = -1 EBADF (Bad file descriptor) [pid 5202] close(20) = -1 EBADF (Bad file descriptor) [pid 5202] close(21) = -1 EBADF (Bad file descriptor) [pid 5202] close(22) = -1 EBADF (Bad file descriptor) [pid 5202] close(23) = -1 EBADF (Bad file descriptor) [pid 5202] close(24) = -1 EBADF (Bad file descriptor) [pid 5202] close(25) = -1 EBADF (Bad file descriptor) [pid 5202] close(26) = -1 EBADF (Bad file descriptor) [pid 5202] close(27) = -1 EBADF (Bad file descriptor) [pid 5202] close(28) = -1 EBADF (Bad file descriptor) [pid 5202] close(29) = -1 EBADF (Bad file descriptor) [pid 5202] exit_group(0) = ? [pid 5202] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=112, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5203 attached , child_tidptr=0x555555eff5d0) = 113 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5203] setpgid(0, 0) = 0 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5203] close(3) = 0 [pid 5203] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5203] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5203] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5203] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5203] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5203] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5203] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5203] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5203] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5203] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5203] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 94.881182][ T5202] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 94.889172][ T5202] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 94.897157][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 94.905140][ T5202] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 94.913144][ T5202] [pid 5203] write(7, "5", 1) = 1 [ 94.950831][ T5203] FAULT_INJECTION: forcing a failure. [ 94.950831][ T5203] name failslab, interval 1, probability 0, space 0, times 0 [ 94.964403][ T5203] CPU: 1 PID: 5203 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 94.974357][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 94.984418][ T5203] Call Trace: [ 94.987698][ T5203] [ 94.990638][ T5203] dump_stack_lvl+0xd1/0x138 [ 94.995266][ T5203] should_fail_ex.cold+0x5/0xa [ 95.000030][ T5203] ? io_issue_sqe+0x695/0x1250 [ 95.004827][ T5203] should_failslab+0x9/0x20 [ 95.009375][ T5203] __kmem_cache_alloc_node+0x5b/0x330 [ 95.014765][ T5203] ? ref_tracker_alloc+0x158/0x560 [ 95.019903][ T5203] kmalloc_trace+0x26/0x60 [ 95.024335][ T5203] ref_tracker_alloc+0x158/0x560 [ 95.029318][ T5203] ? __lock_acquire+0xbc3/0x56d0 [ 95.034260][ T5203] ? ref_tracker_free+0x6b0/0x6b0 [ 95.039309][ T5203] dst_init+0xe4/0x520 [ 95.043404][ T5203] dst_alloc+0x16f/0x1f0 [ 95.047700][ T5203] rt_dst_alloc+0x55/0x430 [ 95.052150][ T5203] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 95.058148][ T5203] ip_route_output_key_hash+0x18f/0x340 [ 95.063701][ T5203] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 95.070049][ T5203] dccp_v4_connect+0x7e1/0x1730 [ 95.074921][ T5203] __inet_stream_connect+0x69e/0xed0 [ 95.080248][ T5203] ? inet_listen+0x640/0x640 [ 95.084877][ T5203] ? mark_held_locks+0x9f/0xe0 [ 95.089643][ T5203] ? __local_bh_enable_ip+0xa4/0x130 [ 95.095025][ T5203] inet_stream_connect+0x57/0xa0 [ 95.099995][ T5203] ? __inet_stream_connect+0xed0/0xed0 [ 95.105495][ T5203] __sys_connect_file+0x153/0x1a0 [ 95.110540][ T5203] io_connect+0x3cc/0x720 [ 95.114926][ T5203] ? io_connect_prep+0x250/0x250 [ 95.119873][ T5203] ? receive_fd+0x110/0x110 [ 95.124392][ T5203] ? rcu_read_lock_sched_held+0x3e/0x70 [ 95.129955][ T5203] ? io_connect_prep+0x250/0x250 [ 95.134905][ T5203] io_issue_sqe+0x695/0x1250 [ 95.139531][ T5203] io_submit_sqes+0x96c/0x1e90 [ 95.144375][ T5203] __do_sys_io_uring_enter+0x103d/0x24e0 [ 95.150052][ T5203] ? io_submit_sqes+0x1e90/0x1e90 [ 95.155115][ T5203] ? ptrace_notify+0xfe/0x140 [ 95.159794][ T5203] ? lock_downgrade+0x6e0/0x6e0 [ 95.164678][ T5203] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.169922][ T5203] ? lockdep_hardirqs_on+0x7d/0x100 [ 95.175139][ T5203] ? _raw_spin_unlock_irq+0x2e/0x50 [ 95.180353][ T5203] ? ptrace_notify+0xfe/0x140 [ 95.185127][ T5203] do_syscall_64+0x39/0xb0 [ 95.189606][ T5203] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 95.195512][ T5203] RIP: 0033:0x7f607b0de549 [ 95.199929][ T5203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 95.219540][ T5203] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 95.227957][ T5203] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 95.235949][ T5203] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 95.243961][ T5203] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5203] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5203] close(3) = 0 [pid 5203] close(4) = 0 [pid 5203] close(5) = 0 [pid 5203] close(6) = 0 [pid 5203] close(7) = 0 [pid 5203] close(8) = -1 EBADF (Bad file descriptor) [pid 5203] close(9) = -1 EBADF (Bad file descriptor) [pid 5203] close(10) = -1 EBADF (Bad file descriptor) [pid 5203] close(11) = -1 EBADF (Bad file descriptor) [pid 5203] close(12) = -1 EBADF (Bad file descriptor) [pid 5203] close(13) = -1 EBADF (Bad file descriptor) [pid 5203] close(14) = -1 EBADF (Bad file descriptor) [pid 5203] close(15) = -1 EBADF (Bad file descriptor) [pid 5203] close(16) = -1 EBADF (Bad file descriptor) [pid 5203] close(17) = -1 EBADF (Bad file descriptor) [pid 5203] close(18) = -1 EBADF (Bad file descriptor) [pid 5203] close(19) = -1 EBADF (Bad file descriptor) [pid 5203] close(20) = -1 EBADF (Bad file descriptor) [pid 5203] close(21) = -1 EBADF (Bad file descriptor) [pid 5203] close(22) = -1 EBADF (Bad file descriptor) [pid 5203] close(23) = -1 EBADF (Bad file descriptor) [pid 5203] close(24) = -1 EBADF (Bad file descriptor) [pid 5203] close(25) = -1 EBADF (Bad file descriptor) [pid 5203] close(26) = -1 EBADF (Bad file descriptor) [pid 5203] close(27) = -1 EBADF (Bad file descriptor) [pid 5203] close(28) = -1 EBADF (Bad file descriptor) [pid 5203] close(29) = -1 EBADF (Bad file descriptor) [pid 5203] exit_group(0) = ? [pid 5203] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=113, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 114 ./strace-static-x86_64: Process 5204 attached [pid 5204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5204] setpgid(0, 0) = 0 [pid 5204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5204] write(3, "1000", 4) = 4 [pid 5204] close(3) = 0 [pid 5204] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5204] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5204] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5204] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5204] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5204] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5204] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5204] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5204] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5204] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5204] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5204] write(7, "5", 1) = 1 [ 95.251969][ T5203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 95.259962][ T5203] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 95.267951][ T5203] [ 95.309646][ T5204] FAULT_INJECTION: forcing a failure. [ 95.309646][ T5204] name failslab, interval 1, probability 0, space 0, times 0 [ 95.322587][ T5204] CPU: 0 PID: 5204 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 95.332514][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 95.342572][ T5204] Call Trace: [ 95.345842][ T5204] [ 95.348769][ T5204] dump_stack_lvl+0xd1/0x138 [ 95.353361][ T5204] should_fail_ex.cold+0x5/0xa [ 95.358120][ T5204] ? io_issue_sqe+0x695/0x1250 [ 95.362887][ T5204] should_failslab+0x9/0x20 [ 95.367388][ T5204] __kmem_cache_alloc_node+0x5b/0x330 [ 95.372754][ T5204] ? ref_tracker_alloc+0x158/0x560 [ 95.377868][ T5204] kmalloc_trace+0x26/0x60 [ 95.382304][ T5204] ref_tracker_alloc+0x158/0x560 [ 95.387282][ T5204] ? __lock_acquire+0xbc3/0x56d0 [ 95.392240][ T5204] ? ref_tracker_free+0x6b0/0x6b0 [ 95.397319][ T5204] dst_init+0xe4/0x520 [ 95.401585][ T5204] dst_alloc+0x16f/0x1f0 [ 95.405877][ T5204] rt_dst_alloc+0x55/0x430 [ 95.410348][ T5204] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 95.416375][ T5204] ip_route_output_key_hash+0x18f/0x340 [ 95.421948][ T5204] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 95.428234][ T5204] dccp_v4_connect+0x7e1/0x1730 [ 95.433134][ T5204] __inet_stream_connect+0x69e/0xed0 [ 95.438467][ T5204] ? inet_listen+0x640/0x640 [ 95.443084][ T5204] ? mark_held_locks+0x9f/0xe0 [ 95.447885][ T5204] ? __local_bh_enable_ip+0xa4/0x130 [ 95.453200][ T5204] inet_stream_connect+0x57/0xa0 [ 95.458181][ T5204] ? __inet_stream_connect+0xed0/0xed0 [ 95.463650][ T5204] __sys_connect_file+0x153/0x1a0 [ 95.468684][ T5204] io_connect+0x3cc/0x720 [ 95.473067][ T5204] ? io_connect_prep+0x250/0x250 [ 95.478041][ T5204] ? receive_fd+0x110/0x110 [ 95.482562][ T5204] ? rcu_read_lock_sched_held+0x3e/0x70 [ 95.488110][ T5204] ? io_connect_prep+0x250/0x250 [ 95.493075][ T5204] io_issue_sqe+0x695/0x1250 [ 95.497711][ T5204] io_submit_sqes+0x96c/0x1e90 [ 95.502528][ T5204] __do_sys_io_uring_enter+0x103d/0x24e0 [ 95.508172][ T5204] ? io_submit_sqes+0x1e90/0x1e90 [ 95.513220][ T5204] ? ptrace_notify+0xfe/0x140 [ 95.517920][ T5204] ? lock_downgrade+0x6e0/0x6e0 [ 95.522773][ T5204] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.527973][ T5204] ? lockdep_hardirqs_on+0x7d/0x100 [ 95.533189][ T5204] ? _raw_spin_unlock_irq+0x2e/0x50 [ 95.538430][ T5204] ? ptrace_notify+0xfe/0x140 [ 95.543136][ T5204] do_syscall_64+0x39/0xb0 [ 95.547560][ T5204] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 95.553457][ T5204] RIP: 0033:0x7f607b0de549 [ 95.557870][ T5204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 95.577482][ T5204] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 95.585928][ T5204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 95.593908][ T5204] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 95.601893][ T5204] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5204] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5204] close(3) = 0 [pid 5204] close(4) = 0 [pid 5204] close(5) = 0 [pid 5204] close(6) = 0 [pid 5204] close(7) = 0 [pid 5204] close(8) = -1 EBADF (Bad file descriptor) [pid 5204] close(9) = -1 EBADF (Bad file descriptor) [pid 5204] close(10) = -1 EBADF (Bad file descriptor) [pid 5204] close(11) = -1 EBADF (Bad file descriptor) [ 95.609878][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 95.617865][ T5204] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 95.625874][ T5204] [pid 5204] close(12) = -1 EBADF (Bad file descriptor) [pid 5204] close(13) = -1 EBADF (Bad file descriptor) [pid 5204] close(14) = -1 EBADF (Bad file descriptor) [pid 5204] close(15) = -1 EBADF (Bad file descriptor) [pid 5204] close(16) = -1 EBADF (Bad file descriptor) [pid 5204] close(17) = -1 EBADF (Bad file descriptor) [pid 5204] close(18) = -1 EBADF (Bad file descriptor) [pid 5204] close(19) = -1 EBADF (Bad file descriptor) [pid 5204] close(20) = -1 EBADF (Bad file descriptor) [pid 5204] close(21) = -1 EBADF (Bad file descriptor) [pid 5204] close(22) = -1 EBADF (Bad file descriptor) [pid 5204] close(23) = -1 EBADF (Bad file descriptor) [pid 5204] close(24) = -1 EBADF (Bad file descriptor) [pid 5204] close(25) = -1 EBADF (Bad file descriptor) [pid 5204] close(26) = -1 EBADF (Bad file descriptor) [pid 5204] close(27) = -1 EBADF (Bad file descriptor) [pid 5204] close(28) = -1 EBADF (Bad file descriptor) [pid 5204] close(29) = -1 EBADF (Bad file descriptor) [pid 5204] exit_group(0) = ? [pid 5204] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=114, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 115 ./strace-static-x86_64: Process 5206 attached [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5206] setpgid(0, 0) = 0 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5206] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5206] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5206] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5206] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5206] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5206] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5206] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5206] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5206] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5206] write(7, "5", 1) = 1 [pid 5206] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5206] close(3) = 0 [pid 5206] close(4) = 0 [pid 5206] close(5) = 0 [pid 5206] close(6) = 0 [pid 5206] close(7) = 0 [pid 5206] close(8) = -1 EBADF (Bad file descriptor) [pid 5206] close(9) = -1 EBADF (Bad file descriptor) [pid 5206] close(10) = -1 EBADF (Bad file descriptor) [pid 5206] close(11) = -1 EBADF (Bad file descriptor) [pid 5206] close(12) = -1 EBADF (Bad file descriptor) [pid 5206] close(13) = -1 EBADF (Bad file descriptor) [pid 5206] close(14) = -1 EBADF (Bad file descriptor) [pid 5206] close(15) = -1 EBADF (Bad file descriptor) [pid 5206] close(16) = -1 EBADF (Bad file descriptor) [pid 5206] close(17) = -1 EBADF (Bad file descriptor) [pid 5206] close(18) = -1 EBADF (Bad file descriptor) [pid 5206] close(19) = -1 EBADF (Bad file descriptor) [pid 5206] close(20) = -1 EBADF (Bad file descriptor) [pid 5206] close(21) = -1 EBADF (Bad file descriptor) [pid 5206] close(22) = -1 EBADF (Bad file descriptor) [pid 5206] close(23) = -1 EBADF (Bad file descriptor) [pid 5206] close(24) = -1 EBADF (Bad file descriptor) [pid 5206] close(25) = -1 EBADF (Bad file descriptor) [pid 5206] close(26) = -1 EBADF (Bad file descriptor) [pid 5206] close(27) = -1 EBADF (Bad file descriptor) [pid 5206] close(28) = -1 EBADF (Bad file descriptor) [pid 5206] close(29) = -1 EBADF (Bad file descriptor) [pid 5206] exit_group(0) = ? [pid 5206] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=115, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 116 ./strace-static-x86_64: Process 5207 attached [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5207] setpgid(0, 0) = 0 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5207] write(3, "1000", 4) = 4 [pid 5207] close(3) = 0 [pid 5207] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5207] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5207] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5207] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5207] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5207] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5207] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5207] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5207] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5207] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5207] write(7, "5", 1) = 1 [ 95.752289][ T5207] FAULT_INJECTION: forcing a failure. [ 95.752289][ T5207] name failslab, interval 1, probability 0, space 0, times 0 [ 95.765152][ T5207] CPU: 0 PID: 5207 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 95.775081][ T5207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 95.785153][ T5207] Call Trace: [ 95.788426][ T5207] [ 95.791353][ T5207] dump_stack_lvl+0xd1/0x138 [ 95.795949][ T5207] should_fail_ex.cold+0x5/0xa [ 95.800710][ T5207] ? io_issue_sqe+0x695/0x1250 [ 95.805503][ T5207] should_failslab+0x9/0x20 [ 95.810019][ T5207] __kmem_cache_alloc_node+0x5b/0x330 [ 95.815396][ T5207] ? ref_tracker_alloc+0x158/0x560 [ 95.820514][ T5207] kmalloc_trace+0x26/0x60 [ 95.824934][ T5207] ref_tracker_alloc+0x158/0x560 [ 95.829875][ T5207] ? __lock_acquire+0xbc3/0x56d0 [ 95.834806][ T5207] ? ref_tracker_free+0x6b0/0x6b0 [ 95.839842][ T5207] dst_init+0xe4/0x520 [ 95.843916][ T5207] dst_alloc+0x16f/0x1f0 [ 95.848177][ T5207] rt_dst_alloc+0x55/0x430 [ 95.852771][ T5207] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 95.858790][ T5207] ip_route_output_key_hash+0x18f/0x340 [ 95.864338][ T5207] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 95.870593][ T5207] dccp_v4_connect+0x7e1/0x1730 [ 95.875456][ T5207] __inet_stream_connect+0x69e/0xed0 [ 95.880746][ T5207] ? inet_listen+0x640/0x640 [ 95.885335][ T5207] ? mark_held_locks+0x9f/0xe0 [ 95.890097][ T5207] ? __local_bh_enable_ip+0xa4/0x130 [ 95.895382][ T5207] inet_stream_connect+0x57/0xa0 [ 95.900333][ T5207] ? __inet_stream_connect+0xed0/0xed0 [ 95.905834][ T5207] __sys_connect_file+0x153/0x1a0 [ 95.910873][ T5207] io_connect+0x3cc/0x720 [ 95.915241][ T5207] ? io_connect_prep+0x250/0x250 [ 95.920181][ T5207] ? receive_fd+0x110/0x110 [ 95.924691][ T5207] ? rcu_read_lock_sched_held+0x3e/0x70 [ 95.930262][ T5207] ? io_connect_prep+0x250/0x250 [ 95.935210][ T5207] io_issue_sqe+0x695/0x1250 [ 95.939803][ T5207] io_submit_sqes+0x96c/0x1e90 [ 95.944586][ T5207] __do_sys_io_uring_enter+0x103d/0x24e0 [ 95.950224][ T5207] ? io_submit_sqes+0x1e90/0x1e90 [ 95.955294][ T5207] ? ptrace_notify+0xfe/0x140 [ 95.959980][ T5207] ? lock_downgrade+0x6e0/0x6e0 [ 95.964841][ T5207] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.970049][ T5207] ? lockdep_hardirqs_on+0x7d/0x100 [ 95.975246][ T5207] ? _raw_spin_unlock_irq+0x2e/0x50 [ 95.980442][ T5207] ? ptrace_notify+0xfe/0x140 [ 95.985118][ T5207] do_syscall_64+0x39/0xb0 [ 95.989538][ T5207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 95.995428][ T5207] RIP: 0033:0x7f607b0de549 [ 95.999838][ T5207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 96.019450][ T5207] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 96.027862][ T5207] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 96.035830][ T5207] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 96.043824][ T5207] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5207] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5207] close(3) = 0 [pid 5207] close(4) = 0 [pid 5207] close(5) = 0 [pid 5207] close(6) = 0 [pid 5207] close(7) = 0 [pid 5207] close(8) = -1 EBADF (Bad file descriptor) [pid 5207] close(9) = -1 EBADF (Bad file descriptor) [pid 5207] close(10) = -1 EBADF (Bad file descriptor) [pid 5207] close(11) = -1 EBADF (Bad file descriptor) [pid 5207] close(12) = -1 EBADF (Bad file descriptor) [pid 5207] close(13) = -1 EBADF (Bad file descriptor) [pid 5207] close(14) = -1 EBADF (Bad file descriptor) [pid 5207] close(15) = -1 EBADF (Bad file descriptor) [pid 5207] close(16) = -1 EBADF (Bad file descriptor) [pid 5207] close(17) = -1 EBADF (Bad file descriptor) [pid 5207] close(18) = -1 EBADF (Bad file descriptor) [pid 5207] close(19) = -1 EBADF (Bad file descriptor) [pid 5207] close(20) = -1 EBADF (Bad file descriptor) [pid 5207] close(21) = -1 EBADF (Bad file descriptor) [pid 5207] close(22) = -1 EBADF (Bad file descriptor) [pid 5207] close(23) = -1 EBADF (Bad file descriptor) [pid 5207] close(24) = -1 EBADF (Bad file descriptor) [pid 5207] close(25) = -1 EBADF (Bad file descriptor) [pid 5207] close(26) = -1 EBADF (Bad file descriptor) [pid 5207] close(27) = -1 EBADF (Bad file descriptor) [pid 5207] close(28) = -1 EBADF (Bad file descriptor) [pid 5207] close(29) = -1 EBADF (Bad file descriptor) [pid 5207] exit_group(0) = ? [pid 5207] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 96.051791][ T5207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 96.059756][ T5207] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 96.067768][ T5207] [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 117 ./strace-static-x86_64: Process 5208 attached [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5208] setpgid(0, 0) = 0 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] write(3, "1000", 4) = 4 [pid 5208] close(3) = 0 [pid 5208] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5208] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5208] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5208] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5208] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5208] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5208] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5208] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5208] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5208] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5208] write(7, "5", 1) = 1 [ 96.133753][ T5208] FAULT_INJECTION: forcing a failure. [ 96.133753][ T5208] name failslab, interval 1, probability 0, space 0, times 0 [ 96.146457][ T5208] CPU: 0 PID: 5208 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 96.156366][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 96.166472][ T5208] Call Trace: [ 96.169758][ T5208] [ 96.172712][ T5208] dump_stack_lvl+0xd1/0x138 [ 96.177312][ T5208] should_fail_ex.cold+0x5/0xa [ 96.182096][ T5208] ? __inet_hash_connect+0x95e/0x1ba0 [ 96.187487][ T5208] should_failslab+0x9/0x20 [ 96.192039][ T5208] kmem_cache_alloc+0x5a/0x320 [ 96.196829][ T5208] __inet_hash_connect+0x95e/0x1ba0 [ 96.202058][ T5208] ? __inet_lookup_listener+0xbf0/0xbf0 [ 96.207640][ T5208] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 96.214011][ T5208] dccp_v4_connect+0xb82/0x1730 [ 96.218911][ T5208] __inet_stream_connect+0x69e/0xed0 [ 96.224237][ T5208] ? inet_listen+0x640/0x640 [ 96.228861][ T5208] ? mark_held_locks+0x9f/0xe0 [ 96.233646][ T5208] ? __local_bh_enable_ip+0xa4/0x130 [ 96.238958][ T5208] inet_stream_connect+0x57/0xa0 [ 96.243932][ T5208] ? __inet_stream_connect+0xed0/0xed0 [ 96.249427][ T5208] __sys_connect_file+0x153/0x1a0 [ 96.254477][ T5208] io_connect+0x3cc/0x720 [ 96.258838][ T5208] ? io_connect_prep+0x250/0x250 [ 96.263806][ T5208] ? receive_fd+0x110/0x110 [ 96.268375][ T5208] ? rcu_read_lock_sched_held+0x3e/0x70 [ 96.273959][ T5208] ? io_connect_prep+0x250/0x250 [ 96.278941][ T5208] io_issue_sqe+0x695/0x1250 [ 96.283570][ T5208] io_submit_sqes+0x96c/0x1e90 [ 96.288378][ T5208] __do_sys_io_uring_enter+0x103d/0x24e0 [ 96.294049][ T5208] ? io_submit_sqes+0x1e90/0x1e90 [ 96.299101][ T5208] ? ptrace_notify+0xfe/0x140 [ 96.303796][ T5208] ? lock_downgrade+0x6e0/0x6e0 [ 96.308673][ T5208] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.313896][ T5208] ? lockdep_hardirqs_on+0x7d/0x100 [ 96.319116][ T5208] ? _raw_spin_unlock_irq+0x2e/0x50 [ 96.324335][ T5208] ? ptrace_notify+0xfe/0x140 [ 96.329036][ T5208] do_syscall_64+0x39/0xb0 [ 96.333481][ T5208] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.339393][ T5208] RIP: 0033:0x7f607b0de549 [ 96.343821][ T5208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 96.363457][ T5208] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 96.371916][ T5208] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5208] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5208] close(3) = 0 [pid 5208] close(4) = 0 [pid 5208] close(5) = 0 [pid 5208] close(6) = 0 [pid 5208] close(7) = 0 [pid 5208] close(8) = -1 EBADF (Bad file descriptor) [pid 5208] close(9) = -1 EBADF (Bad file descriptor) [pid 5208] close(10) = -1 EBADF (Bad file descriptor) [pid 5208] close(11) = -1 EBADF (Bad file descriptor) [pid 5208] close(12) = -1 EBADF (Bad file descriptor) [pid 5208] close(13) = -1 EBADF (Bad file descriptor) [pid 5208] close(14) = -1 EBADF (Bad file descriptor) [pid 5208] close(15) = -1 EBADF (Bad file descriptor) [pid 5208] close(16) = -1 EBADF (Bad file descriptor) [pid 5208] close(17) = -1 EBADF (Bad file descriptor) [pid 5208] close(18) = -1 EBADF (Bad file descriptor) [pid 5208] close(19) = -1 EBADF (Bad file descriptor) [pid 5208] close(20) = -1 EBADF (Bad file descriptor) [pid 5208] close(21) = -1 EBADF (Bad file descriptor) [pid 5208] close(22) = -1 EBADF (Bad file descriptor) [pid 5208] close(23) = -1 EBADF (Bad file descriptor) [pid 5208] close(24) = -1 EBADF (Bad file descriptor) [pid 5208] close(25) = -1 EBADF (Bad file descriptor) [pid 5208] close(26) = -1 EBADF (Bad file descriptor) [pid 5208] close(27) = -1 EBADF (Bad file descriptor) [pid 5208] close(28) = -1 EBADF (Bad file descriptor) [pid 5208] close(29) = -1 EBADF (Bad file descriptor) [pid 5208] exit_group(0) = ? [pid 5208] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=117, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 118 ./strace-static-x86_64: Process 5209 attached [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5209] setpgid(0, 0) = 0 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5209] write(3, "1000", 4) = 4 [pid 5209] close(3) = 0 [pid 5209] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5209] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5209] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5209] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5209] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5209] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5209] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5209] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5209] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5209] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5209] write(7, "5", 1) = 1 [ 96.379925][ T5208] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 96.387915][ T5208] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 96.395905][ T5208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 96.403896][ T5208] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 96.412004][ T5208] [ 96.446633][ T5209] FAULT_INJECTION: forcing a failure. [ 96.446633][ T5209] name failslab, interval 1, probability 0, space 0, times 0 [ 96.459628][ T5209] CPU: 0 PID: 5209 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 96.469553][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 96.479624][ T5209] Call Trace: [ 96.482913][ T5209] [ 96.485849][ T5209] dump_stack_lvl+0xd1/0x138 [ 96.490461][ T5209] should_fail_ex.cold+0x5/0xa [ 96.495235][ T5209] ? io_issue_sqe+0x695/0x1250 [ 96.500034][ T5209] should_failslab+0x9/0x20 [ 96.504547][ T5209] __kmem_cache_alloc_node+0x5b/0x330 [ 96.509931][ T5209] ? ref_tracker_alloc+0x158/0x560 [ 96.515074][ T5209] kmalloc_trace+0x26/0x60 [ 96.519522][ T5209] ref_tracker_alloc+0x158/0x560 [ 96.524467][ T5209] ? __lock_acquire+0xbc3/0x56d0 [ 96.529405][ T5209] ? ref_tracker_free+0x6b0/0x6b0 [ 96.534448][ T5209] dst_init+0xe4/0x520 [ 96.538524][ T5209] dst_alloc+0x16f/0x1f0 [ 96.542774][ T5209] rt_dst_alloc+0x55/0x430 [ 96.547220][ T5209] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 96.553234][ T5209] ip_route_output_key_hash+0x18f/0x340 [ 96.558824][ T5209] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 96.565112][ T5209] dccp_v4_connect+0x7e1/0x1730 [ 96.569983][ T5209] __inet_stream_connect+0x69e/0xed0 [ 96.575280][ T5209] ? inet_listen+0x640/0x640 [ 96.579881][ T5209] ? mark_held_locks+0x9f/0xe0 [ 96.584666][ T5209] ? __local_bh_enable_ip+0xa4/0x130 [ 96.589982][ T5209] inet_stream_connect+0x57/0xa0 [ 96.594940][ T5209] ? __inet_stream_connect+0xed0/0xed0 [ 96.600419][ T5209] __sys_connect_file+0x153/0x1a0 [ 96.605472][ T5209] io_connect+0x3cc/0x720 [ 96.609811][ T5209] ? io_connect_prep+0x250/0x250 [ 96.614769][ T5209] ? receive_fd+0x110/0x110 [ 96.619370][ T5209] ? rcu_read_lock_sched_held+0x3e/0x70 [ 96.624964][ T5209] ? io_connect_prep+0x250/0x250 [ 96.629944][ T5209] io_issue_sqe+0x695/0x1250 [ 96.634543][ T5209] io_submit_sqes+0x96c/0x1e90 [ 96.639347][ T5209] __do_sys_io_uring_enter+0x103d/0x24e0 [ 96.645000][ T5209] ? io_submit_sqes+0x1e90/0x1e90 [ 96.650067][ T5209] ? ptrace_notify+0xfe/0x140 [ 96.654768][ T5209] ? lock_downgrade+0x6e0/0x6e0 [ 96.659655][ T5209] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.664870][ T5209] ? lockdep_hardirqs_on+0x7d/0x100 [ 96.670099][ T5209] ? _raw_spin_unlock_irq+0x2e/0x50 [ 96.675319][ T5209] ? ptrace_notify+0xfe/0x140 [ 96.680028][ T5209] do_syscall_64+0x39/0xb0 [ 96.684453][ T5209] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.690356][ T5209] RIP: 0033:0x7f607b0de549 [ 96.694778][ T5209] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 96.714388][ T5209] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 96.722805][ T5209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 96.730778][ T5209] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 96.738750][ T5209] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5209] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5209] close(3) = 0 [pid 5209] close(4) = 0 [pid 5209] close(5) = 0 [pid 5209] close(6) = 0 [pid 5209] close(7) = 0 [pid 5209] close(8) = -1 EBADF (Bad file descriptor) [pid 5209] close(9) = -1 EBADF (Bad file descriptor) [pid 5209] close(10) = -1 EBADF (Bad file descriptor) [pid 5209] close(11) = -1 EBADF (Bad file descriptor) [pid 5209] close(12) = -1 EBADF (Bad file descriptor) [pid 5209] close(13) = -1 EBADF (Bad file descriptor) [pid 5209] close(14) = -1 EBADF (Bad file descriptor) [pid 5209] close(15) = -1 EBADF (Bad file descriptor) [pid 5209] close(16) = -1 EBADF (Bad file descriptor) [pid 5209] close(17) = -1 EBADF (Bad file descriptor) [pid 5209] close(18) = -1 EBADF (Bad file descriptor) [pid 5209] close(19) = -1 EBADF (Bad file descriptor) [pid 5209] close(20) = -1 EBADF (Bad file descriptor) [pid 5209] close(21) = -1 EBADF (Bad file descriptor) [pid 5209] close(22) = -1 EBADF (Bad file descriptor) [pid 5209] close(23) = -1 EBADF (Bad file descriptor) [pid 5209] close(24) = -1 EBADF (Bad file descriptor) [pid 5209] close(25) = -1 EBADF (Bad file descriptor) [pid 5209] close(26) = -1 EBADF (Bad file descriptor) [pid 5209] close(27) = -1 EBADF (Bad file descriptor) [pid 5209] close(28) = -1 EBADF (Bad file descriptor) [pid 5209] close(29) = -1 EBADF (Bad file descriptor) [pid 5209] exit_group(0) = ? [pid 5209] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=118, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5210 attached , child_tidptr=0x555555eff5d0) = 119 [pid 5210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5210] setpgid(0, 0) = 0 [pid 5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5210] write(3, "1000", 4) = 4 [pid 5210] close(3) = 0 [pid 5210] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5210] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5210] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5210] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5210] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5210] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5210] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5210] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5210] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5210] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5210] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5210] write(7, "5", 1) = 1 [ 96.746742][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 96.754748][ T5209] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 96.762777][ T5209] [ 96.808265][ T5210] FAULT_INJECTION: forcing a failure. [ 96.808265][ T5210] name failslab, interval 1, probability 0, space 0, times 0 [ 96.821001][ T5210] CPU: 1 PID: 5210 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 96.830934][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 96.841037][ T5210] Call Trace: [ 96.844333][ T5210] [ 96.847261][ T5210] dump_stack_lvl+0xd1/0x138 [ 96.851865][ T5210] should_fail_ex.cold+0x5/0xa [ 96.856644][ T5210] ? __inet_hash_connect+0x95e/0x1ba0 [ 96.862078][ T5210] should_failslab+0x9/0x20 [ 96.866630][ T5210] kmem_cache_alloc+0x5a/0x320 [ 96.871440][ T5210] __inet_hash_connect+0x95e/0x1ba0 [ 96.876673][ T5210] ? __inet_lookup_listener+0xbf0/0xbf0 [ 96.882244][ T5210] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 96.888594][ T5210] dccp_v4_connect+0xb82/0x1730 [ 96.893460][ T5210] __inet_stream_connect+0x69e/0xed0 [ 96.898760][ T5210] ? inet_listen+0x640/0x640 [ 96.903361][ T5210] ? mark_held_locks+0x9f/0xe0 [ 96.908144][ T5210] ? __local_bh_enable_ip+0xa4/0x130 [ 96.913462][ T5210] inet_stream_connect+0x57/0xa0 [ 96.918419][ T5210] ? __inet_stream_connect+0xed0/0xed0 [ 96.924351][ T5210] __sys_connect_file+0x153/0x1a0 [ 96.929401][ T5210] io_connect+0x3cc/0x720 [ 96.933757][ T5210] ? io_connect_prep+0x250/0x250 [ 96.938758][ T5210] ? receive_fd+0x110/0x110 [ 96.943390][ T5210] ? rcu_read_lock_sched_held+0x3e/0x70 [ 96.948966][ T5210] ? io_connect_prep+0x250/0x250 [ 96.953946][ T5210] io_issue_sqe+0x695/0x1250 [ 96.958547][ T5210] io_submit_sqes+0x96c/0x1e90 [ 96.963360][ T5210] __do_sys_io_uring_enter+0x103d/0x24e0 [ 96.969062][ T5210] ? io_submit_sqes+0x1e90/0x1e90 [ 96.974124][ T5210] ? ptrace_notify+0xfe/0x140 [ 96.978805][ T5210] ? lock_downgrade+0x6e0/0x6e0 [ 96.983668][ T5210] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.988873][ T5210] ? lockdep_hardirqs_on+0x7d/0x100 [ 96.994092][ T5210] ? _raw_spin_unlock_irq+0x2e/0x50 [ 96.999321][ T5210] ? ptrace_notify+0xfe/0x140 [ 97.004017][ T5210] do_syscall_64+0x39/0xb0 [ 97.008483][ T5210] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 97.014406][ T5210] RIP: 0033:0x7f607b0de549 [ 97.018819][ T5210] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 97.038445][ T5210] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 97.046899][ T5210] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5210] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5210] close(3) = 0 [pid 5210] close(4) = 0 [pid 5210] close(5) = 0 [pid 5210] close(6) = 0 [pid 5210] close(7) = 0 [pid 5210] close(8) = -1 EBADF (Bad file descriptor) [pid 5210] close(9) = -1 EBADF (Bad file descriptor) [pid 5210] close(10) = -1 EBADF (Bad file descriptor) [pid 5210] close(11) = -1 EBADF (Bad file descriptor) [pid 5210] close(12) = -1 EBADF (Bad file descriptor) [pid 5210] close(13) = -1 EBADF (Bad file descriptor) [pid 5210] close(14) = -1 EBADF (Bad file descriptor) [pid 5210] close(15) = -1 EBADF (Bad file descriptor) [pid 5210] close(16) = -1 EBADF (Bad file descriptor) [pid 5210] close(17) = -1 EBADF (Bad file descriptor) [pid 5210] close(18) = -1 EBADF (Bad file descriptor) [pid 5210] close(19) = -1 EBADF (Bad file descriptor) [pid 5210] close(20) = -1 EBADF (Bad file descriptor) [pid 5210] close(21) = -1 EBADF (Bad file descriptor) [pid 5210] close(22) = -1 EBADF (Bad file descriptor) [pid 5210] close(23) = -1 EBADF (Bad file descriptor) [pid 5210] close(24) = -1 EBADF (Bad file descriptor) [pid 5210] close(25) = -1 EBADF (Bad file descriptor) [pid 5210] close(26) = -1 EBADF (Bad file descriptor) [pid 5210] close(27) = -1 EBADF (Bad file descriptor) [pid 5210] close(28) = -1 EBADF (Bad file descriptor) [pid 5210] close(29) = -1 EBADF (Bad file descriptor) [pid 5210] exit_group(0) = ? [pid 5210] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=119, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 120 ./strace-static-x86_64: Process 5211 attached [pid 5211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5211] setpgid(0, 0) = 0 [pid 5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5211] write(3, "1000", 4) = 4 [pid 5211] close(3) = 0 [pid 5211] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5211] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5211] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5211] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5211] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5211] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5211] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5211] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5211] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5211] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5211] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5211] write(7, "5", 1) = 1 [ 97.054890][ T5210] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 97.062866][ T5210] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 97.070871][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 97.078871][ T5210] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 97.086894][ T5210] [ 97.134488][ T5211] FAULT_INJECTION: forcing a failure. [ 97.134488][ T5211] name failslab, interval 1, probability 0, space 0, times 0 [ 97.147976][ T5211] CPU: 0 PID: 5211 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 97.157922][ T5211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 97.168013][ T5211] Call Trace: [ 97.171312][ T5211] [ 97.174241][ T5211] dump_stack_lvl+0xd1/0x138 [ 97.178840][ T5211] should_fail_ex.cold+0x5/0xa [ 97.183604][ T5211] ? io_issue_sqe+0x695/0x1250 [ 97.188393][ T5211] should_failslab+0x9/0x20 [ 97.192952][ T5211] __kmem_cache_alloc_node+0x5b/0x330 [ 97.198351][ T5211] ? ref_tracker_alloc+0x158/0x560 [ 97.203475][ T5211] kmalloc_trace+0x26/0x60 [ 97.207987][ T5211] ref_tracker_alloc+0x158/0x560 [ 97.212937][ T5211] ? __lock_acquire+0xbc3/0x56d0 [ 97.217893][ T5211] ? ref_tracker_free+0x6b0/0x6b0 [ 97.222965][ T5211] dst_init+0xe4/0x520 [ 97.227041][ T5211] dst_alloc+0x16f/0x1f0 [ 97.231295][ T5211] rt_dst_alloc+0x55/0x430 [ 97.235817][ T5211] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 97.241825][ T5211] ip_route_output_key_hash+0x18f/0x340 [ 97.247396][ T5211] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 97.253697][ T5211] dccp_v4_connect+0x7e1/0x1730 [ 97.258600][ T5211] __inet_stream_connect+0x69e/0xed0 [ 97.264091][ T5211] ? inet_listen+0x640/0x640 [ 97.268704][ T5211] ? mark_held_locks+0x9f/0xe0 [ 97.273478][ T5211] ? __local_bh_enable_ip+0xa4/0x130 [ 97.279209][ T5211] inet_stream_connect+0x57/0xa0 [ 97.284274][ T5211] ? __inet_stream_connect+0xed0/0xed0 [ 97.289773][ T5211] __sys_connect_file+0x153/0x1a0 [ 97.294930][ T5211] io_connect+0x3cc/0x720 [ 97.299310][ T5211] ? io_connect_prep+0x250/0x250 [ 97.304261][ T5211] ? receive_fd+0x110/0x110 [ 97.308782][ T5211] ? rcu_read_lock_sched_held+0x3e/0x70 [ 97.314333][ T5211] ? io_connect_prep+0x250/0x250 [ 97.319294][ T5211] io_issue_sqe+0x695/0x1250 [ 97.323925][ T5211] io_submit_sqes+0x96c/0x1e90 [ 97.328711][ T5211] __do_sys_io_uring_enter+0x103d/0x24e0 [ 97.334355][ T5211] ? io_submit_sqes+0x1e90/0x1e90 [ 97.339390][ T5211] ? ptrace_notify+0xfe/0x140 [ 97.344088][ T5211] ? lock_downgrade+0x6e0/0x6e0 [ 97.348969][ T5211] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.354205][ T5211] ? lockdep_hardirqs_on+0x7d/0x100 [ 97.359410][ T5211] ? _raw_spin_unlock_irq+0x2e/0x50 [ 97.364622][ T5211] ? ptrace_notify+0xfe/0x140 [ 97.369327][ T5211] do_syscall_64+0x39/0xb0 [ 97.373754][ T5211] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 97.379651][ T5211] RIP: 0033:0x7f607b0de549 [ 97.384062][ T5211] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 97.403676][ T5211] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 97.412090][ T5211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 97.420064][ T5211] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 97.428035][ T5211] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5211] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5211] close(3) = 0 [pid 5211] close(4) = 0 [pid 5211] close(5) = 0 [pid 5211] close(6) = 0 [pid 5211] close(7) = 0 [pid 5211] close(8) = -1 EBADF (Bad file descriptor) [pid 5211] close(9) = -1 EBADF (Bad file descriptor) [pid 5211] close(10) = -1 EBADF (Bad file descriptor) [pid 5211] close(11) = -1 EBADF (Bad file descriptor) [pid 5211] close(12) = -1 EBADF (Bad file descriptor) [pid 5211] close(13) = -1 EBADF (Bad file descriptor) [pid 5211] close(14) = -1 EBADF (Bad file descriptor) [pid 5211] close(15) = -1 EBADF (Bad file descriptor) [pid 5211] close(16) = -1 EBADF (Bad file descriptor) [pid 5211] close(17) = -1 EBADF (Bad file descriptor) [pid 5211] close(18) = -1 EBADF (Bad file descriptor) [pid 5211] close(19) = -1 EBADF (Bad file descriptor) [pid 5211] close(20) = -1 EBADF (Bad file descriptor) [pid 5211] close(21) = -1 EBADF (Bad file descriptor) [pid 5211] close(22) = -1 EBADF (Bad file descriptor) [pid 5211] close(23) = -1 EBADF (Bad file descriptor) [pid 5211] close(24) = -1 EBADF (Bad file descriptor) [pid 5211] close(25) = -1 EBADF (Bad file descriptor) [pid 5211] close(26) = -1 EBADF (Bad file descriptor) [pid 5211] close(27) = -1 EBADF (Bad file descriptor) [pid 5211] close(28) = -1 EBADF (Bad file descriptor) [pid 5211] close(29) = -1 EBADF (Bad file descriptor) [pid 5211] exit_group(0) = ? [pid 5211] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=120, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 121 ./strace-static-x86_64: Process 5212 attached [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5212] setpgid(0, 0) = 0 [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5212] write(3, "1000", 4) = 4 [pid 5212] close(3) = 0 [pid 5212] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5212] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5212] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5212] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5212] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5212] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5212] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5212] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5212] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5212] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5212] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5212] write(7, "5", 1) = 1 [ 97.436021][ T5211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 97.444009][ T5211] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 97.452025][ T5211] [ 97.492866][ T5212] FAULT_INJECTION: forcing a failure. [ 97.492866][ T5212] name failslab, interval 1, probability 0, space 0, times 0 [ 97.505848][ T5212] CPU: 0 PID: 5212 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 97.515775][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 97.525829][ T5212] Call Trace: [ 97.529109][ T5212] [ 97.532045][ T5212] dump_stack_lvl+0xd1/0x138 [ 97.536655][ T5212] should_fail_ex.cold+0x5/0xa [ 97.541414][ T5212] ? io_issue_sqe+0x695/0x1250 [ 97.546177][ T5212] should_failslab+0x9/0x20 [ 97.550693][ T5212] __kmem_cache_alloc_node+0x5b/0x330 [ 97.556088][ T5212] ? ref_tracker_alloc+0x158/0x560 [ 97.561207][ T5212] kmalloc_trace+0x26/0x60 [ 97.565623][ T5212] ref_tracker_alloc+0x158/0x560 [ 97.570558][ T5212] ? __lock_acquire+0xbc3/0x56d0 [ 97.575577][ T5212] ? ref_tracker_free+0x6b0/0x6b0 [ 97.580612][ T5212] dst_init+0xe4/0x520 [ 97.584680][ T5212] dst_alloc+0x16f/0x1f0 [ 97.588921][ T5212] rt_dst_alloc+0x55/0x430 [ 97.593338][ T5212] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 97.599328][ T5212] ip_route_output_key_hash+0x18f/0x340 [ 97.604912][ T5212] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 97.611186][ T5212] dccp_v4_connect+0x7e1/0x1730 [ 97.616064][ T5212] __inet_stream_connect+0x69e/0xed0 [ 97.621362][ T5212] ? inet_listen+0x640/0x640 [ 97.626048][ T5212] ? mark_held_locks+0x9f/0xe0 [ 97.630833][ T5212] ? __local_bh_enable_ip+0xa4/0x130 [ 97.636118][ T5212] inet_stream_connect+0x57/0xa0 [ 97.641057][ T5212] ? __inet_stream_connect+0xed0/0xed0 [ 97.646520][ T5212] __sys_connect_file+0x153/0x1a0 [ 97.651557][ T5212] io_connect+0x3cc/0x720 [ 97.655923][ T5212] ? io_connect_prep+0x250/0x250 [ 97.660860][ T5212] ? receive_fd+0x110/0x110 [ 97.665373][ T5212] ? rcu_read_lock_sched_held+0x3e/0x70 [ 97.670924][ T5212] ? io_connect_prep+0x250/0x250 [ 97.675873][ T5212] io_issue_sqe+0x695/0x1250 [ 97.680464][ T5212] io_submit_sqes+0x96c/0x1e90 [ 97.685241][ T5212] __do_sys_io_uring_enter+0x103d/0x24e0 [ 97.690879][ T5212] ? io_submit_sqes+0x1e90/0x1e90 [ 97.695908][ T5212] ? ptrace_notify+0xfe/0x140 [ 97.700593][ T5212] ? lock_downgrade+0x6e0/0x6e0 [ 97.705467][ T5212] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.710667][ T5212] ? lockdep_hardirqs_on+0x7d/0x100 [ 97.715860][ T5212] ? _raw_spin_unlock_irq+0x2e/0x50 [ 97.721057][ T5212] ? ptrace_notify+0xfe/0x140 [ 97.725826][ T5212] do_syscall_64+0x39/0xb0 [ 97.730245][ T5212] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 97.736140][ T5212] RIP: 0033:0x7f607b0de549 [ 97.740558][ T5212] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 97.760169][ T5212] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 97.768584][ T5212] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 97.776551][ T5212] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 97.784515][ T5212] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5212] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5212] close(3) = 0 [pid 5212] close(4) = 0 [pid 5212] close(5) = 0 [pid 5212] close(6) = 0 [pid 5212] close(7) = 0 [pid 5212] close(8) = -1 EBADF (Bad file descriptor) [pid 5212] close(9) = -1 EBADF (Bad file descriptor) [pid 5212] close(10) = -1 EBADF (Bad file descriptor) [pid 5212] close(11) = -1 EBADF (Bad file descriptor) [pid 5212] close(12) = -1 EBADF (Bad file descriptor) [pid 5212] close(13) = -1 EBADF (Bad file descriptor) [pid 5212] close(14) = -1 EBADF (Bad file descriptor) [pid 5212] close(15) = -1 EBADF (Bad file descriptor) [pid 5212] close(16) = -1 EBADF (Bad file descriptor) [pid 5212] close(17) = -1 EBADF (Bad file descriptor) [pid 5212] close(18) = -1 EBADF (Bad file descriptor) [pid 5212] close(19) = -1 EBADF (Bad file descriptor) [pid 5212] close(20) = -1 EBADF (Bad file descriptor) [pid 5212] close(21) = -1 EBADF (Bad file descriptor) [pid 5212] close(22) = -1 EBADF (Bad file descriptor) [pid 5212] close(23) = -1 EBADF (Bad file descriptor) [pid 5212] close(24) = -1 EBADF (Bad file descriptor) [pid 5212] close(25) = -1 EBADF (Bad file descriptor) [pid 5212] close(26) = -1 EBADF (Bad file descriptor) [pid 5212] close(27) = -1 EBADF (Bad file descriptor) [pid 5212] close(28) = -1 EBADF (Bad file descriptor) [pid 5212] close(29) = -1 EBADF (Bad file descriptor) [pid 5212] exit_group(0) = ? [pid 5212] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=121, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5213 attached , child_tidptr=0x555555eff5d0) = 122 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5213] setpgid(0, 0) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3) = 0 [pid 5213] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5213] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5213] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5213] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5213] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5213] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5213] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5213] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5213] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5213] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5213] write(7, "5", 1) = 1 [ 97.792481][ T5212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 97.800457][ T5212] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 97.808458][ T5212] [ 97.848104][ T5213] FAULT_INJECTION: forcing a failure. [ 97.848104][ T5213] name failslab, interval 1, probability 0, space 0, times 0 [ 97.861293][ T5213] CPU: 0 PID: 5213 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 97.871234][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 97.881316][ T5213] Call Trace: [ 97.884595][ T5213] [ 97.887527][ T5213] dump_stack_lvl+0xd1/0x138 [ 97.892171][ T5213] should_fail_ex.cold+0x5/0xa [ 97.896974][ T5213] ? io_issue_sqe+0x695/0x1250 [ 97.901747][ T5213] should_failslab+0x9/0x20 [ 97.906261][ T5213] __kmem_cache_alloc_node+0x5b/0x330 [ 97.911638][ T5213] ? ref_tracker_alloc+0x158/0x560 [ 97.916796][ T5213] kmalloc_trace+0x26/0x60 [ 97.921272][ T5213] ref_tracker_alloc+0x158/0x560 [ 97.926252][ T5213] ? __lock_acquire+0xbc3/0x56d0 [ 97.931214][ T5213] ? ref_tracker_free+0x6b0/0x6b0 [ 97.936293][ T5213] dst_init+0xe4/0x520 [ 97.940390][ T5213] dst_alloc+0x16f/0x1f0 [ 97.944666][ T5213] rt_dst_alloc+0x55/0x430 [ 97.949112][ T5213] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 97.955135][ T5213] ip_route_output_key_hash+0x18f/0x340 [ 97.960722][ T5213] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 97.967013][ T5213] dccp_v4_connect+0x7e1/0x1730 [ 97.971912][ T5213] __inet_stream_connect+0x69e/0xed0 [ 97.977240][ T5213] ? inet_listen+0x640/0x640 [ 97.981880][ T5213] ? mark_held_locks+0x9f/0xe0 [ 97.986669][ T5213] ? __local_bh_enable_ip+0xa4/0x130 [ 97.991980][ T5213] inet_stream_connect+0x57/0xa0 [ 97.996950][ T5213] ? __inet_stream_connect+0xed0/0xed0 [ 98.002446][ T5213] __sys_connect_file+0x153/0x1a0 [ 98.007499][ T5213] io_connect+0x3cc/0x720 [ 98.011863][ T5213] ? io_connect_prep+0x250/0x250 [ 98.016835][ T5213] ? receive_fd+0x110/0x110 [ 98.021378][ T5213] ? rcu_read_lock_sched_held+0x3e/0x70 [ 98.026945][ T5213] ? io_connect_prep+0x250/0x250 [ 98.031913][ T5213] io_issue_sqe+0x695/0x1250 [ 98.036537][ T5213] io_submit_sqes+0x96c/0x1e90 [ 98.041370][ T5213] __do_sys_io_uring_enter+0x103d/0x24e0 [ 98.047045][ T5213] ? io_submit_sqes+0x1e90/0x1e90 [ 98.052099][ T5213] ? ptrace_notify+0xfe/0x140 [ 98.056821][ T5213] ? lock_downgrade+0x6e0/0x6e0 [ 98.061722][ T5213] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.066951][ T5213] ? lockdep_hardirqs_on+0x7d/0x100 [ 98.072171][ T5213] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.077391][ T5213] ? ptrace_notify+0xfe/0x140 [ 98.082096][ T5213] do_syscall_64+0x39/0xb0 [ 98.086548][ T5213] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 98.092466][ T5213] RIP: 0033:0x7f607b0de549 [ 98.096898][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 98.116528][ T5213] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 98.124980][ T5213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 98.132968][ T5213] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 98.140952][ T5213] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5213] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5213] close(3) = 0 [pid 5213] close(4) = 0 [pid 5213] close(5) = 0 [pid 5213] close(6) = 0 [pid 5213] close(7) = 0 [pid 5213] close(8) = -1 EBADF (Bad file descriptor) [pid 5213] close(9) = -1 EBADF (Bad file descriptor) [pid 5213] close(10) = -1 EBADF (Bad file descriptor) [pid 5213] close(11) = -1 EBADF (Bad file descriptor) [pid 5213] close(12) = -1 EBADF (Bad file descriptor) [pid 5213] close(13) = -1 EBADF (Bad file descriptor) [pid 5213] close(14) = -1 EBADF (Bad file descriptor) [pid 5213] close(15) = -1 EBADF (Bad file descriptor) [pid 5213] close(16) = -1 EBADF (Bad file descriptor) [pid 5213] close(17) = -1 EBADF (Bad file descriptor) [pid 5213] close(18) = -1 EBADF (Bad file descriptor) [pid 5213] close(19) = -1 EBADF (Bad file descriptor) [pid 5213] close(20) = -1 EBADF (Bad file descriptor) [pid 5213] close(21) = -1 EBADF (Bad file descriptor) [pid 5213] close(22) = -1 EBADF (Bad file descriptor) [pid 5213] close(23) = -1 EBADF (Bad file descriptor) [pid 5213] close(24) = -1 EBADF (Bad file descriptor) [pid 5213] close(25) = -1 EBADF (Bad file descriptor) [pid 5213] close(26) = -1 EBADF (Bad file descriptor) [pid 5213] close(27) = -1 EBADF (Bad file descriptor) [pid 5213] close(28) = -1 EBADF (Bad file descriptor) [pid 5213] close(29) = -1 EBADF (Bad file descriptor) [pid 5213] exit_group(0) = ? [pid 5213] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=122, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5214 attached , child_tidptr=0x555555eff5d0) = 123 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5214] setpgid(0, 0) = 0 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5214] write(3, "1000", 4) = 4 [pid 5214] close(3) = 0 [pid 5214] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5214] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5214] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5214] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5214] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5214] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5214] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 98.148938][ T5213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 98.156923][ T5213] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 98.164930][ T5213] [pid 5214] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5214] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5214] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5214] write(7, "5", 1) = 1 [ 98.215109][ T5214] FAULT_INJECTION: forcing a failure. [ 98.215109][ T5214] name failslab, interval 1, probability 0, space 0, times 0 [ 98.227832][ T5214] CPU: 0 PID: 5214 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 98.237897][ T5214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 98.247946][ T5214] Call Trace: [ 98.251217][ T5214] [ 98.254143][ T5214] dump_stack_lvl+0xd1/0x138 [ 98.258751][ T5214] should_fail_ex.cold+0x5/0xa [ 98.263509][ T5214] ? __inet_hash_connect+0x95e/0x1ba0 [ 98.268886][ T5214] should_failslab+0x9/0x20 [ 98.273389][ T5214] kmem_cache_alloc+0x5a/0x320 [ 98.278152][ T5214] __inet_hash_connect+0x95e/0x1ba0 [ 98.283373][ T5214] ? __inet_lookup_listener+0xbf0/0xbf0 [ 98.288957][ T5214] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 98.295301][ T5214] dccp_v4_connect+0xb82/0x1730 [ 98.300235][ T5214] __inet_stream_connect+0x69e/0xed0 [ 98.305536][ T5214] ? inet_listen+0x640/0x640 [ 98.310141][ T5214] ? mark_held_locks+0x9f/0xe0 [ 98.314927][ T5214] ? __local_bh_enable_ip+0xa4/0x130 [ 98.320263][ T5214] inet_stream_connect+0x57/0xa0 [ 98.325246][ T5214] ? __inet_stream_connect+0xed0/0xed0 [ 98.330765][ T5214] __sys_connect_file+0x153/0x1a0 [ 98.335820][ T5214] io_connect+0x3cc/0x720 [ 98.340159][ T5214] ? io_connect_prep+0x250/0x250 [ 98.345108][ T5214] ? receive_fd+0x110/0x110 [ 98.349635][ T5214] ? rcu_read_lock_sched_held+0x3e/0x70 [ 98.355190][ T5214] ? io_connect_prep+0x250/0x250 [ 98.360413][ T5214] io_issue_sqe+0x695/0x1250 [ 98.365040][ T5214] io_submit_sqes+0x96c/0x1e90 [ 98.369917][ T5214] __do_sys_io_uring_enter+0x103d/0x24e0 [ 98.375564][ T5214] ? io_submit_sqes+0x1e90/0x1e90 [ 98.380616][ T5214] ? ptrace_notify+0xfe/0x140 [ 98.385354][ T5214] ? lock_downgrade+0x6e0/0x6e0 [ 98.390216][ T5214] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.395433][ T5214] ? lockdep_hardirqs_on+0x7d/0x100 [ 98.401677][ T5214] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.406881][ T5214] ? ptrace_notify+0xfe/0x140 [ 98.411565][ T5214] do_syscall_64+0x39/0xb0 [ 98.416000][ T5214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 98.421942][ T5214] RIP: 0033:0x7f607b0de549 [ 98.426548][ T5214] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 98.446170][ T5214] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 98.454628][ T5214] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5214] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5214] close(3) = 0 [pid 5214] close(4) = 0 [pid 5214] close(5) = 0 [pid 5214] close(6) = 0 [pid 5214] close(7) = 0 [pid 5214] close(8) = -1 EBADF (Bad file descriptor) [pid 5214] close(9) = -1 EBADF (Bad file descriptor) [pid 5214] close(10) = -1 EBADF (Bad file descriptor) [pid 5214] close(11) = -1 EBADF (Bad file descriptor) [pid 5214] close(12) = -1 EBADF (Bad file descriptor) [pid 5214] close(13) = -1 EBADF (Bad file descriptor) [pid 5214] close(14) = -1 EBADF (Bad file descriptor) [pid 5214] close(15) = -1 EBADF (Bad file descriptor) [pid 5214] close(16) = -1 EBADF (Bad file descriptor) [pid 5214] close(17) = -1 EBADF (Bad file descriptor) [pid 5214] close(18) = -1 EBADF (Bad file descriptor) [pid 5214] close(19) = -1 EBADF (Bad file descriptor) [pid 5214] close(20) = -1 EBADF (Bad file descriptor) [pid 5214] close(21) = -1 EBADF (Bad file descriptor) [pid 5214] close(22) = -1 EBADF (Bad file descriptor) [pid 5214] close(23) = -1 EBADF (Bad file descriptor) [pid 5214] close(24) = -1 EBADF (Bad file descriptor) [pid 5214] close(25) = -1 EBADF (Bad file descriptor) [pid 5214] close(26) = -1 EBADF (Bad file descriptor) [pid 5214] close(27) = -1 EBADF (Bad file descriptor) [pid 5214] close(28) = -1 EBADF (Bad file descriptor) [pid 5214] close(29) = -1 EBADF (Bad file descriptor) [pid 5214] exit_group(0) = ? [pid 5214] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=123, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5215 attached , child_tidptr=0x555555eff5d0) = 124 [pid 5215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5215] setpgid(0, 0) = 0 [pid 5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5215] write(3, "1000", 4) = 4 [pid 5215] close(3) = 0 [pid 5215] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5215] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5215] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5215] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5215] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5215] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5215] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5215] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 98.462618][ T5214] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 98.470590][ T5214] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 98.478674][ T5214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 98.486663][ T5214] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 98.494670][ T5214] [pid 5215] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5215] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5215] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5215] write(7, "5", 1) = 1 [ 98.553789][ T5215] FAULT_INJECTION: forcing a failure. [ 98.553789][ T5215] name failslab, interval 1, probability 0, space 0, times 0 [ 98.566628][ T5215] CPU: 0 PID: 5215 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 98.576594][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 98.586688][ T5215] Call Trace: [ 98.589979][ T5215] [ 98.592913][ T5215] dump_stack_lvl+0xd1/0x138 [ 98.597514][ T5215] should_fail_ex.cold+0x5/0xa [ 98.602303][ T5215] ? io_issue_sqe+0x695/0x1250 [ 98.607114][ T5215] should_failslab+0x9/0x20 [ 98.611626][ T5215] __kmem_cache_alloc_node+0x5b/0x330 [ 98.617000][ T5215] ? ref_tracker_alloc+0x158/0x560 [ 98.622146][ T5215] kmalloc_trace+0x26/0x60 [ 98.626687][ T5215] ref_tracker_alloc+0x158/0x560 [ 98.631651][ T5215] ? __lock_acquire+0xbc3/0x56d0 [ 98.636608][ T5215] ? ref_tracker_free+0x6b0/0x6b0 [ 98.641685][ T5215] dst_init+0xe4/0x520 [ 98.645781][ T5215] dst_alloc+0x16f/0x1f0 [ 98.650048][ T5215] rt_dst_alloc+0x55/0x430 [ 98.654499][ T5215] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 98.660526][ T5215] ip_route_output_key_hash+0x18f/0x340 [ 98.666103][ T5215] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 98.672390][ T5215] dccp_v4_connect+0x7e1/0x1730 [ 98.677295][ T5215] __inet_stream_connect+0x69e/0xed0 [ 98.682631][ T5215] ? inet_listen+0x640/0x640 [ 98.687257][ T5215] ? mark_held_locks+0x9f/0xe0 [ 98.692045][ T5215] ? __local_bh_enable_ip+0xa4/0x130 [ 98.697359][ T5215] inet_stream_connect+0x57/0xa0 [ 98.702330][ T5215] ? __inet_stream_connect+0xed0/0xed0 [ 98.707822][ T5215] __sys_connect_file+0x153/0x1a0 [ 98.712869][ T5215] io_connect+0x3cc/0x720 [ 98.717233][ T5215] ? io_connect_prep+0x250/0x250 [ 98.722205][ T5215] ? receive_fd+0x110/0x110 [ 98.726752][ T5215] ? rcu_read_lock_sched_held+0x3e/0x70 [ 98.732318][ T5215] ? io_connect_prep+0x250/0x250 [ 98.737289][ T5215] io_issue_sqe+0x695/0x1250 [ 98.741909][ T5215] io_submit_sqes+0x96c/0x1e90 [ 98.746723][ T5215] __do_sys_io_uring_enter+0x103d/0x24e0 [ 98.752389][ T5215] ? io_submit_sqes+0x1e90/0x1e90 [ 98.757445][ T5215] ? ptrace_notify+0xfe/0x140 [ 98.762155][ T5215] ? lock_downgrade+0x6e0/0x6e0 [ 98.767035][ T5215] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.772264][ T5215] ? lockdep_hardirqs_on+0x7d/0x100 [ 98.777482][ T5215] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.782731][ T5215] ? ptrace_notify+0xfe/0x140 [ 98.787607][ T5215] do_syscall_64+0x39/0xb0 [ 98.792051][ T5215] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 98.797971][ T5215] RIP: 0033:0x7f607b0de549 [ 98.802399][ T5215] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 98.822033][ T5215] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 98.830473][ T5215] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 98.838464][ T5215] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 98.846447][ T5215] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5215] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5215] close(3) = 0 [pid 5215] close(4) = 0 [pid 5215] close(5) = 0 [pid 5215] close(6) = 0 [pid 5215] close(7) = 0 [pid 5215] close(8) = -1 EBADF (Bad file descriptor) [pid 5215] close(9) = -1 EBADF (Bad file descriptor) [pid 5215] close(10) = -1 EBADF (Bad file descriptor) [pid 5215] close(11) = -1 EBADF (Bad file descriptor) [pid 5215] close(12) = -1 EBADF (Bad file descriptor) [pid 5215] close(13) = -1 EBADF (Bad file descriptor) [pid 5215] close(14) = -1 EBADF (Bad file descriptor) [pid 5215] close(15) = -1 EBADF (Bad file descriptor) [pid 5215] close(16) = -1 EBADF (Bad file descriptor) [pid 5215] close(17) = -1 EBADF (Bad file descriptor) [pid 5215] close(18) = -1 EBADF (Bad file descriptor) [pid 5215] close(19) = -1 EBADF (Bad file descriptor) [pid 5215] close(20) = -1 EBADF (Bad file descriptor) [pid 5215] close(21) = -1 EBADF (Bad file descriptor) [pid 5215] close(22) = -1 EBADF (Bad file descriptor) [pid 5215] close(23) = -1 EBADF (Bad file descriptor) [pid 5215] close(24) = -1 EBADF (Bad file descriptor) [pid 5215] close(25) = -1 EBADF (Bad file descriptor) [pid 5215] close(26) = -1 EBADF (Bad file descriptor) [pid 5215] close(27) = -1 EBADF (Bad file descriptor) [pid 5215] close(28) = -1 EBADF (Bad file descriptor) [pid 5215] close(29) = -1 EBADF (Bad file descriptor) [pid 5215] exit_group(0) = ? [pid 5215] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=124, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 125 ./strace-static-x86_64: Process 5218 attached [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4) = 4 [ 98.854439][ T5215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 98.862431][ T5215] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 98.870443][ T5215] [pid 5218] close(3) = 0 [pid 5218] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5218] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5218] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5218] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5218] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5218] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5218] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5218] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5218] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5218] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5218] write(7, "5", 1) = 1 [ 98.932980][ T5218] FAULT_INJECTION: forcing a failure. [ 98.932980][ T5218] name failslab, interval 1, probability 0, space 0, times 0 [ 98.945692][ T5218] CPU: 0 PID: 5218 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 98.955643][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 98.965698][ T5218] Call Trace: [ 98.969017][ T5218] [ 98.971945][ T5218] dump_stack_lvl+0xd1/0x138 [ 98.976544][ T5218] should_fail_ex.cold+0x5/0xa [ 98.981331][ T5218] ? __inet_hash_connect+0x95e/0x1ba0 [ 98.986729][ T5218] should_failslab+0x9/0x20 [ 98.991234][ T5218] kmem_cache_alloc+0x5a/0x320 [ 98.996026][ T5218] __inet_hash_connect+0x95e/0x1ba0 [ 99.001276][ T5218] ? __inet_lookup_listener+0xbf0/0xbf0 [ 99.006858][ T5218] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 99.013220][ T5218] dccp_v4_connect+0xb82/0x1730 [ 99.018116][ T5218] __inet_stream_connect+0x69e/0xed0 [ 99.023414][ T5218] ? inet_listen+0x640/0x640 [ 99.028014][ T5218] ? mark_held_locks+0x9f/0xe0 [ 99.032793][ T5218] ? __local_bh_enable_ip+0xa4/0x130 [ 99.038106][ T5218] inet_stream_connect+0x57/0xa0 [ 99.043068][ T5218] ? __inet_stream_connect+0xed0/0xed0 [ 99.048563][ T5218] __sys_connect_file+0x153/0x1a0 [ 99.053734][ T5218] io_connect+0x3cc/0x720 [ 99.058085][ T5218] ? io_connect_prep+0x250/0x250 [ 99.063030][ T5218] ? receive_fd+0x110/0x110 [ 99.067569][ T5218] ? rcu_read_lock_sched_held+0x3e/0x70 [ 99.073154][ T5218] ? io_connect_prep+0x250/0x250 [ 99.078132][ T5218] io_issue_sqe+0x695/0x1250 [ 99.082731][ T5218] io_submit_sqes+0x96c/0x1e90 [ 99.087537][ T5218] __do_sys_io_uring_enter+0x103d/0x24e0 [ 99.093228][ T5218] ? io_submit_sqes+0x1e90/0x1e90 [ 99.098289][ T5218] ? ptrace_notify+0xfe/0x140 [ 99.102985][ T5218] ? lock_downgrade+0x6e0/0x6e0 [ 99.107912][ T5218] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.113135][ T5218] ? lockdep_hardirqs_on+0x7d/0x100 [ 99.118358][ T5218] ? _raw_spin_unlock_irq+0x2e/0x50 [ 99.123558][ T5218] ? ptrace_notify+0xfe/0x140 [ 99.128236][ T5218] do_syscall_64+0x39/0xb0 [ 99.132659][ T5218] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 99.138562][ T5218] RIP: 0033:0x7f607b0de549 [ 99.143006][ T5218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 99.162646][ T5218] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 99.171067][ T5218] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5218] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5218] close(3) = 0 [pid 5218] close(4) = 0 [pid 5218] close(5) = 0 [pid 5218] close(6) = 0 [pid 5218] close(7) = 0 [pid 5218] close(8) = -1 EBADF (Bad file descriptor) [pid 5218] close(9) = -1 EBADF (Bad file descriptor) [pid 5218] close(10) = -1 EBADF (Bad file descriptor) [pid 5218] close(11) = -1 EBADF (Bad file descriptor) [pid 5218] close(12) = -1 EBADF (Bad file descriptor) [pid 5218] close(13) = -1 EBADF (Bad file descriptor) [pid 5218] close(14) = -1 EBADF (Bad file descriptor) [pid 5218] close(15) = -1 EBADF (Bad file descriptor) [pid 5218] close(16) = -1 EBADF (Bad file descriptor) [pid 5218] close(17) = -1 EBADF (Bad file descriptor) [pid 5218] close(18) = -1 EBADF (Bad file descriptor) [pid 5218] close(19) = -1 EBADF (Bad file descriptor) [pid 5218] close(20) = -1 EBADF (Bad file descriptor) [pid 5218] close(21) = -1 EBADF (Bad file descriptor) [pid 5218] close(22) = -1 EBADF (Bad file descriptor) [pid 5218] close(23) = -1 EBADF (Bad file descriptor) [pid 5218] close(24) = -1 EBADF (Bad file descriptor) [pid 5218] close(25) = -1 EBADF (Bad file descriptor) [pid 5218] close(26) = -1 EBADF (Bad file descriptor) [pid 5218] close(27) = -1 EBADF (Bad file descriptor) [pid 5218] close(28) = -1 EBADF (Bad file descriptor) [pid 5218] close(29) = -1 EBADF (Bad file descriptor) [pid 5218] exit_group(0) = ? [pid 5218] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5219 attached , child_tidptr=0x555555eff5d0) = 126 [pid 5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5219] setpgid(0, 0) = 0 [pid 5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5219] write(3, "1000", 4) = 4 [pid 5219] close(3) = 0 [pid 5219] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5219] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5219] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5219] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5219] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5219] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5219] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5219] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5219] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5219] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5219] write(7, "5", 1) = 1 [ 99.179057][ T5218] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 99.187061][ T5218] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 99.195038][ T5218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 99.203027][ T5218] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 99.211045][ T5218] [ 99.255431][ T5219] FAULT_INJECTION: forcing a failure. [ 99.255431][ T5219] name failslab, interval 1, probability 0, space 0, times 0 [ 99.271154][ T5219] CPU: 0 PID: 5219 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 99.281104][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 99.291157][ T5219] Call Trace: [ 99.294441][ T5219] [ 99.297392][ T5219] dump_stack_lvl+0xd1/0x138 [ 99.302017][ T5219] should_fail_ex.cold+0x5/0xa [ 99.306798][ T5219] ? io_issue_sqe+0x695/0x1250 [ 99.311585][ T5219] should_failslab+0x9/0x20 [ 99.316207][ T5219] __kmem_cache_alloc_node+0x5b/0x330 [ 99.321606][ T5219] ? ref_tracker_alloc+0x158/0x560 [ 99.326759][ T5219] kmalloc_trace+0x26/0x60 [ 99.331208][ T5219] ref_tracker_alloc+0x158/0x560 [ 99.336172][ T5219] ? __lock_acquire+0xbc3/0x56d0 [ 99.341127][ T5219] ? ref_tracker_free+0x6b0/0x6b0 [ 99.346202][ T5219] dst_init+0xe4/0x520 [ 99.350295][ T5219] dst_alloc+0x16f/0x1f0 [ 99.354565][ T5219] rt_dst_alloc+0x55/0x430 [ 99.359008][ T5219] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 99.365038][ T5219] ip_route_output_key_hash+0x18f/0x340 [ 99.370613][ T5219] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 99.376902][ T5219] dccp_v4_connect+0x7e1/0x1730 [ 99.381801][ T5219] __inet_stream_connect+0x69e/0xed0 [ 99.387128][ T5219] ? inet_listen+0x640/0x640 [ 99.391750][ T5219] ? mark_held_locks+0x9f/0xe0 [ 99.396537][ T5219] ? __local_bh_enable_ip+0xa4/0x130 [ 99.401849][ T5219] inet_stream_connect+0x57/0xa0 [ 99.406825][ T5219] ? __inet_stream_connect+0xed0/0xed0 [ 99.412315][ T5219] __sys_connect_file+0x153/0x1a0 [ 99.417360][ T5219] io_connect+0x3cc/0x720 [ 99.421727][ T5219] ? io_connect_prep+0x250/0x250 [ 99.426695][ T5219] ? receive_fd+0x110/0x110 [ 99.431235][ T5219] ? rcu_read_lock_sched_held+0x3e/0x70 [ 99.436823][ T5219] ? io_connect_prep+0x250/0x250 [ 99.441981][ T5219] io_issue_sqe+0x695/0x1250 [ 99.446619][ T5219] io_submit_sqes+0x96c/0x1e90 [ 99.451431][ T5219] __do_sys_io_uring_enter+0x103d/0x24e0 [ 99.457104][ T5219] ? io_submit_sqes+0x1e90/0x1e90 [ 99.462158][ T5219] ? ptrace_notify+0xfe/0x140 [ 99.466854][ T5219] ? lock_downgrade+0x6e0/0x6e0 [ 99.471732][ T5219] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.476960][ T5219] ? lockdep_hardirqs_on+0x7d/0x100 [ 99.482181][ T5219] ? _raw_spin_unlock_irq+0x2e/0x50 [ 99.487402][ T5219] ? ptrace_notify+0xfe/0x140 [ 99.492104][ T5219] do_syscall_64+0x39/0xb0 [ 99.496591][ T5219] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 99.502531][ T5219] RIP: 0033:0x7f607b0de549 [ 99.507069][ T5219] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 99.526705][ T5219] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 99.535142][ T5219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 99.543129][ T5219] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5219] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5219] close(3) = 0 [pid 5219] close(4) = 0 [pid 5219] close(5) = 0 [pid 5219] close(6) = 0 [pid 5219] close(7) = 0 [pid 5219] close(8) = -1 EBADF (Bad file descriptor) [pid 5219] close(9) = -1 EBADF (Bad file descriptor) [pid 5219] close(10) = -1 EBADF (Bad file descriptor) [pid 5219] close(11) = -1 EBADF (Bad file descriptor) [pid 5219] close(12) = -1 EBADF (Bad file descriptor) [pid 5219] close(13) = -1 EBADF (Bad file descriptor) [pid 5219] close(14) = -1 EBADF (Bad file descriptor) [pid 5219] close(15) = -1 EBADF (Bad file descriptor) [pid 5219] close(16) = -1 EBADF (Bad file descriptor) [pid 5219] close(17) = -1 EBADF (Bad file descriptor) [pid 5219] close(18) = -1 EBADF (Bad file descriptor) [pid 5219] close(19) = -1 EBADF (Bad file descriptor) [pid 5219] close(20) = -1 EBADF (Bad file descriptor) [pid 5219] close(21) = -1 EBADF (Bad file descriptor) [pid 5219] close(22) = -1 EBADF (Bad file descriptor) [pid 5219] close(23) = -1 EBADF (Bad file descriptor) [pid 5219] close(24) = -1 EBADF (Bad file descriptor) [pid 5219] close(25) = -1 EBADF (Bad file descriptor) [pid 5219] close(26) = -1 EBADF (Bad file descriptor) [pid 5219] close(27) = -1 EBADF (Bad file descriptor) [pid 5219] close(28) = -1 EBADF (Bad file descriptor) [pid 5219] close(29) = -1 EBADF (Bad file descriptor) [pid 5219] exit_group(0) = ? [pid 5219] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=126, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 127 ./strace-static-x86_64: Process 5223 attached [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5223] setpgid(0, 0) = 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5223] write(3, "1000", 4) = 4 [pid 5223] close(3) = 0 [pid 5223] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5223] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 99.551111][ T5219] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 99.559614][ T5219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 99.567688][ T5219] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 99.575697][ T5219] [pid 5223] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5223] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5223] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5223] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5223] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5223] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5223] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5223] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5223] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5223] write(7, "5", 1) = 1 [ 99.626749][ T5223] FAULT_INJECTION: forcing a failure. [ 99.626749][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 99.639462][ T5223] CPU: 0 PID: 5223 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 99.649370][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 99.659450][ T5223] Call Trace: [ 99.662741][ T5223] [ 99.665699][ T5223] dump_stack_lvl+0xd1/0x138 [ 99.670338][ T5223] should_fail_ex.cold+0x5/0xa [ 99.675130][ T5223] ? __inet_hash_connect+0x95e/0x1ba0 [ 99.680520][ T5223] should_failslab+0x9/0x20 [ 99.685074][ T5223] kmem_cache_alloc+0x5a/0x320 [ 99.689870][ T5223] __inet_hash_connect+0x95e/0x1ba0 [ 99.695105][ T5223] ? __inet_lookup_listener+0xbf0/0xbf0 [ 99.700710][ T5223] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 99.707080][ T5223] dccp_v4_connect+0xb82/0x1730 [ 99.711976][ T5223] __inet_stream_connect+0x69e/0xed0 [ 99.717309][ T5223] ? inet_listen+0x640/0x640 [ 99.721922][ T5223] ? mark_held_locks+0x9f/0xe0 [ 99.726713][ T5223] ? __local_bh_enable_ip+0xa4/0x130 [ 99.732022][ T5223] inet_stream_connect+0x57/0xa0 [ 99.736998][ T5223] ? __inet_stream_connect+0xed0/0xed0 [ 99.742475][ T5223] __sys_connect_file+0x153/0x1a0 [ 99.747524][ T5223] io_connect+0x3cc/0x720 [ 99.751914][ T5223] ? io_connect_prep+0x250/0x250 [ 99.756883][ T5223] ? receive_fd+0x110/0x110 [ 99.761399][ T5223] ? rcu_read_lock_sched_held+0x3e/0x70 [ 99.766973][ T5223] ? io_connect_prep+0x250/0x250 [ 99.771932][ T5223] io_issue_sqe+0x695/0x1250 [ 99.776555][ T5223] io_submit_sqes+0x96c/0x1e90 [ 99.781344][ T5223] __do_sys_io_uring_enter+0x103d/0x24e0 [ 99.786987][ T5223] ? io_submit_sqes+0x1e90/0x1e90 [ 99.792035][ T5223] ? ptrace_notify+0xfe/0x140 [ 99.796739][ T5223] ? lock_downgrade+0x6e0/0x6e0 [ 99.801601][ T5223] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.806812][ T5223] ? lockdep_hardirqs_on+0x7d/0x100 [ 99.812035][ T5223] ? _raw_spin_unlock_irq+0x2e/0x50 [ 99.817302][ T5223] ? ptrace_notify+0xfe/0x140 [ 99.822002][ T5223] do_syscall_64+0x39/0xb0 [ 99.826474][ T5223] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 99.832398][ T5223] RIP: 0033:0x7f607b0de549 [ 99.836813][ T5223] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 99.856440][ T5223] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 99.864873][ T5223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5223] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5223] close(3) = 0 [pid 5223] close(4) = 0 [pid 5223] close(5) = 0 [pid 5223] close(6) = 0 [pid 5223] close(7) = 0 [pid 5223] close(8) = -1 EBADF (Bad file descriptor) [pid 5223] close(9) = -1 EBADF (Bad file descriptor) [pid 5223] close(10) = -1 EBADF (Bad file descriptor) [pid 5223] close(11) = -1 EBADF (Bad file descriptor) [pid 5223] close(12) = -1 EBADF (Bad file descriptor) [pid 5223] close(13) = -1 EBADF (Bad file descriptor) [pid 5223] close(14) = -1 EBADF (Bad file descriptor) [pid 5223] close(15) = -1 EBADF (Bad file descriptor) [pid 5223] close(16) = -1 EBADF (Bad file descriptor) [pid 5223] close(17) = -1 EBADF (Bad file descriptor) [pid 5223] close(18) = -1 EBADF (Bad file descriptor) [pid 5223] close(19) = -1 EBADF (Bad file descriptor) [pid 5223] close(20) = -1 EBADF (Bad file descriptor) [pid 5223] close(21) = -1 EBADF (Bad file descriptor) [pid 5223] close(22) = -1 EBADF (Bad file descriptor) [pid 5223] close(23) = -1 EBADF (Bad file descriptor) [pid 5223] close(24) = -1 EBADF (Bad file descriptor) [pid 5223] close(25) = -1 EBADF (Bad file descriptor) [pid 5223] close(26) = -1 EBADF (Bad file descriptor) [pid 5223] close(27) = -1 EBADF (Bad file descriptor) [pid 5223] close(28) = -1 EBADF (Bad file descriptor) [pid 5223] close(29) = -1 EBADF (Bad file descriptor) [pid 5223] exit_group(0) = ? [pid 5223] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=127, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 128 ./strace-static-x86_64: Process 5224 attached [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5224] setpgid(0, 0) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5224] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5224] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5224] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5224] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5224] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5224] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5224] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5224] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5224] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5224] write(7, "5", 1) = 1 [ 99.872867][ T5223] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 99.880838][ T5223] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 99.888820][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 99.896816][ T5223] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 99.904841][ T5223] [ 99.945126][ T5224] FAULT_INJECTION: forcing a failure. [ 99.945126][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 99.957945][ T5224] CPU: 0 PID: 5224 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 99.967865][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 99.978103][ T5224] Call Trace: [ 99.981407][ T5224] [ 99.984374][ T5224] dump_stack_lvl+0xd1/0x138 [ 99.989118][ T5224] should_fail_ex.cold+0x5/0xa [ 99.993910][ T5224] ? io_issue_sqe+0x695/0x1250 [ 99.998696][ T5224] should_failslab+0x9/0x20 [ 100.003217][ T5224] __kmem_cache_alloc_node+0x5b/0x330 [ 100.008652][ T5224] ? ref_tracker_alloc+0x158/0x560 [ 100.013826][ T5224] kmalloc_trace+0x26/0x60 [ 100.018282][ T5224] ref_tracker_alloc+0x158/0x560 [ 100.023248][ T5224] ? __lock_acquire+0xbc3/0x56d0 [ 100.028205][ T5224] ? ref_tracker_free+0x6b0/0x6b0 [ 100.033457][ T5224] dst_init+0xe4/0x520 [ 100.037553][ T5224] dst_alloc+0x16f/0x1f0 [ 100.041921][ T5224] rt_dst_alloc+0x55/0x430 [ 100.046363][ T5224] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 100.052386][ T5224] ip_route_output_key_hash+0x18f/0x340 [ 100.057971][ T5224] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 100.064262][ T5224] dccp_v4_connect+0x7e1/0x1730 [ 100.069162][ T5224] __inet_stream_connect+0x69e/0xed0 [ 100.074485][ T5224] ? inet_listen+0x640/0x640 [ 100.079107][ T5224] ? mark_held_locks+0x9f/0xe0 [ 100.083893][ T5224] ? __local_bh_enable_ip+0xa4/0x130 [ 100.089203][ T5224] inet_stream_connect+0x57/0xa0 [ 100.094173][ T5224] ? __inet_stream_connect+0xed0/0xed0 [ 100.099662][ T5224] __sys_connect_file+0x153/0x1a0 [ 100.104709][ T5224] io_connect+0x3cc/0x720 [ 100.109071][ T5224] ? io_connect_prep+0x250/0x250 [ 100.114036][ T5224] ? receive_fd+0x110/0x110 [ 100.118575][ T5224] ? rcu_read_lock_sched_held+0x3e/0x70 [ 100.124140][ T5224] ? io_connect_prep+0x250/0x250 [ 100.129108][ T5224] io_issue_sqe+0x695/0x1250 [ 100.133728][ T5224] io_submit_sqes+0x96c/0x1e90 [ 100.138538][ T5224] __do_sys_io_uring_enter+0x103d/0x24e0 [ 100.144207][ T5224] ? io_submit_sqes+0x1e90/0x1e90 [ 100.149261][ T5224] ? ptrace_notify+0xfe/0x140 [ 100.153958][ T5224] ? lock_downgrade+0x6e0/0x6e0 [ 100.158838][ T5224] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.164061][ T5224] ? lockdep_hardirqs_on+0x7d/0x100 [ 100.169278][ T5224] ? _raw_spin_unlock_irq+0x2e/0x50 [ 100.174500][ T5224] ? ptrace_notify+0xfe/0x140 [ 100.179203][ T5224] do_syscall_64+0x39/0xb0 [ 100.183647][ T5224] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 100.189562][ T5224] RIP: 0033:0x7f607b0de549 [ 100.193994][ T5224] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 100.213623][ T5224] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 100.222061][ T5224] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 100.230050][ T5224] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 100.238036][ T5224] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5224] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5224] close(3) = 0 [pid 5224] close(4) = 0 [pid 5224] close(5) = 0 [pid 5224] close(6) = 0 [pid 5224] close(7) = 0 [pid 5224] close(8) = -1 EBADF (Bad file descriptor) [pid 5224] close(9) = -1 EBADF (Bad file descriptor) [pid 5224] close(10) = -1 EBADF (Bad file descriptor) [pid 5224] close(11) = -1 EBADF (Bad file descriptor) [pid 5224] close(12) = -1 EBADF (Bad file descriptor) [pid 5224] close(13) = -1 EBADF (Bad file descriptor) [pid 5224] close(14) = -1 EBADF (Bad file descriptor) [pid 5224] close(15) = -1 EBADF (Bad file descriptor) [pid 5224] close(16) = -1 EBADF (Bad file descriptor) [pid 5224] close(17) = -1 EBADF (Bad file descriptor) [pid 5224] close(18) = -1 EBADF (Bad file descriptor) [pid 5224] close(19) = -1 EBADF (Bad file descriptor) [pid 5224] close(20) = -1 EBADF (Bad file descriptor) [pid 5224] close(21) = -1 EBADF (Bad file descriptor) [pid 5224] close(22) = -1 EBADF (Bad file descriptor) [pid 5224] close(23) = -1 EBADF (Bad file descriptor) [pid 5224] close(24) = -1 EBADF (Bad file descriptor) [pid 5224] close(25) = -1 EBADF (Bad file descriptor) [pid 5224] close(26) = -1 EBADF (Bad file descriptor) [pid 5224] close(27) = -1 EBADF (Bad file descriptor) [pid 5224] close(28) = -1 EBADF (Bad file descriptor) [pid 5224] close(29) = -1 EBADF (Bad file descriptor) [pid 5224] exit_group(0) = ? [pid 5224] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=128, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 129 ./strace-static-x86_64: Process 5227 attached [pid 5227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5227] setpgid(0, 0) = 0 [pid 5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5227] write(3, "1000", 4) = 4 [pid 5227] close(3) = 0 [pid 5227] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5227] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5227] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5227] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 100.246030][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 100.254015][ T5224] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 100.262026][ T5224] [pid 5227] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5227] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5227] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5227] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5227] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5227] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5227] write(7, "5", 1) = 1 [ 100.317937][ T5227] FAULT_INJECTION: forcing a failure. [ 100.317937][ T5227] name failslab, interval 1, probability 0, space 0, times 0 [ 100.330624][ T5227] CPU: 0 PID: 5227 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 100.340521][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 100.350610][ T5227] Call Trace: [ 100.353903][ T5227] [ 100.356834][ T5227] dump_stack_lvl+0xd1/0x138 [ 100.361432][ T5227] should_fail_ex.cold+0x5/0xa [ 100.366211][ T5227] ? __inet_hash_connect+0x95e/0x1ba0 [ 100.371661][ T5227] should_failslab+0x9/0x20 [ 100.376206][ T5227] kmem_cache_alloc+0x5a/0x320 [ 100.381001][ T5227] __inet_hash_connect+0x95e/0x1ba0 [ 100.386230][ T5227] ? __inet_lookup_listener+0xbf0/0xbf0 [ 100.391826][ T5227] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 100.398206][ T5227] dccp_v4_connect+0xb82/0x1730 [ 100.403104][ T5227] __inet_stream_connect+0x69e/0xed0 [ 100.408429][ T5227] ? inet_listen+0x640/0x640 [ 100.413052][ T5227] ? mark_held_locks+0x9f/0xe0 [ 100.417840][ T5227] ? __local_bh_enable_ip+0xa4/0x130 [ 100.423159][ T5227] inet_stream_connect+0x57/0xa0 [ 100.428126][ T5227] ? __inet_stream_connect+0xed0/0xed0 [ 100.433615][ T5227] __sys_connect_file+0x153/0x1a0 [ 100.438660][ T5227] io_connect+0x3cc/0x720 [ 100.443020][ T5227] ? io_connect_prep+0x250/0x250 [ 100.447984][ T5227] ? receive_fd+0x110/0x110 [ 100.452525][ T5227] ? rcu_read_lock_sched_held+0x3e/0x70 [ 100.458106][ T5227] ? io_connect_prep+0x250/0x250 [ 100.463095][ T5227] io_issue_sqe+0x695/0x1250 [ 100.467739][ T5227] io_submit_sqes+0x96c/0x1e90 [ 100.472557][ T5227] __do_sys_io_uring_enter+0x103d/0x24e0 [ 100.478235][ T5227] ? io_submit_sqes+0x1e90/0x1e90 [ 100.483291][ T5227] ? ptrace_notify+0xfe/0x140 [ 100.487989][ T5227] ? lock_downgrade+0x6e0/0x6e0 [ 100.492877][ T5227] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.498115][ T5227] ? lockdep_hardirqs_on+0x7d/0x100 [ 100.503595][ T5227] ? _raw_spin_unlock_irq+0x2e/0x50 [ 100.508822][ T5227] ? ptrace_notify+0xfe/0x140 [ 100.513530][ T5227] do_syscall_64+0x39/0xb0 [ 100.517976][ T5227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 100.523898][ T5227] RIP: 0033:0x7f607b0de549 [ 100.528330][ T5227] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 100.547960][ T5227] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 100.556395][ T5227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5227] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5227] close(3) = 0 [pid 5227] close(4) = 0 [pid 5227] close(5) = 0 [pid 5227] close(6) = 0 [pid 5227] close(7) = 0 [pid 5227] close(8) = -1 EBADF (Bad file descriptor) [pid 5227] close(9) = -1 EBADF (Bad file descriptor) [pid 5227] close(10) = -1 EBADF (Bad file descriptor) [pid 5227] close(11) = -1 EBADF (Bad file descriptor) [pid 5227] close(12) = -1 EBADF (Bad file descriptor) [pid 5227] close(13) = -1 EBADF (Bad file descriptor) [pid 5227] close(14) = -1 EBADF (Bad file descriptor) [pid 5227] close(15) = -1 EBADF (Bad file descriptor) [pid 5227] close(16) = -1 EBADF (Bad file descriptor) [pid 5227] close(17) = -1 EBADF (Bad file descriptor) [pid 5227] close(18) = -1 EBADF (Bad file descriptor) [pid 5227] close(19) = -1 EBADF (Bad file descriptor) [pid 5227] close(20) = -1 EBADF (Bad file descriptor) [pid 5227] close(21) = -1 EBADF (Bad file descriptor) [pid 5227] close(22) = -1 EBADF (Bad file descriptor) [pid 5227] close(23) = -1 EBADF (Bad file descriptor) [pid 5227] close(24) = -1 EBADF (Bad file descriptor) [pid 5227] close(25) = -1 EBADF (Bad file descriptor) [pid 5227] close(26) = -1 EBADF (Bad file descriptor) [pid 5227] close(27) = -1 EBADF (Bad file descriptor) [pid 5227] close(28) = -1 EBADF (Bad file descriptor) [pid 5227] close(29) = -1 EBADF (Bad file descriptor) [pid 5227] exit_group(0) = ? [pid 5227] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=129, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 130 ./strace-static-x86_64: Process 5228 attached [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5228] setpgid(0, 0) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5228] write(3, "1000", 4) = 4 [pid 5228] close(3) = 0 [pid 5228] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5228] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5228] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5228] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 100.564381][ T5227] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 100.572363][ T5227] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 100.580350][ T5227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 100.588357][ T5227] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 100.596388][ T5227] [pid 5228] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5228] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5228] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5228] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5228] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5228] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5228] write(7, "5", 1) = 1 [ 100.650028][ T5228] FAULT_INJECTION: forcing a failure. [ 100.650028][ T5228] name failslab, interval 1, probability 0, space 0, times 0 [ 100.662723][ T5228] CPU: 1 PID: 5228 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 100.672681][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 100.682743][ T5228] Call Trace: [ 100.686020][ T5228] [ 100.688948][ T5228] dump_stack_lvl+0xd1/0x138 [ 100.693561][ T5228] should_fail_ex.cold+0x5/0xa [ 100.698350][ T5228] ? __inet_hash_connect+0x95e/0x1ba0 [ 100.703746][ T5228] should_failslab+0x9/0x20 [ 100.708260][ T5228] kmem_cache_alloc+0x5a/0x320 [ 100.713047][ T5228] __inet_hash_connect+0x95e/0x1ba0 [ 100.718279][ T5228] ? __inet_lookup_listener+0xbf0/0xbf0 [ 100.723857][ T5228] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 100.730227][ T5228] dccp_v4_connect+0xb82/0x1730 [ 100.735127][ T5228] __inet_stream_connect+0x69e/0xed0 [ 100.740456][ T5228] ? inet_listen+0x640/0x640 [ 100.745088][ T5228] ? mark_held_locks+0x9f/0xe0 [ 100.749876][ T5228] ? __local_bh_enable_ip+0xa4/0x130 [ 100.755186][ T5228] inet_stream_connect+0x57/0xa0 [ 100.760166][ T5228] ? __inet_stream_connect+0xed0/0xed0 [ 100.765657][ T5228] __sys_connect_file+0x153/0x1a0 [ 100.770703][ T5228] io_connect+0x3cc/0x720 [ 100.775065][ T5228] ? io_connect_prep+0x250/0x250 [ 100.780035][ T5228] ? receive_fd+0x110/0x110 [ 100.784577][ T5228] ? rcu_read_lock_sched_held+0x3e/0x70 [ 100.790143][ T5228] ? io_connect_prep+0x250/0x250 [ 100.795110][ T5228] io_issue_sqe+0x695/0x1250 [ 100.799732][ T5228] io_submit_sqes+0x96c/0x1e90 [ 100.804539][ T5228] __do_sys_io_uring_enter+0x103d/0x24e0 [ 100.810206][ T5228] ? io_submit_sqes+0x1e90/0x1e90 [ 100.815260][ T5228] ? ptrace_notify+0xfe/0x140 [ 100.819957][ T5228] ? lock_downgrade+0x6e0/0x6e0 [ 100.824835][ T5228] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.830059][ T5228] ? lockdep_hardirqs_on+0x7d/0x100 [ 100.835279][ T5228] ? _raw_spin_unlock_irq+0x2e/0x50 [ 100.840516][ T5228] ? ptrace_notify+0xfe/0x140 [ 100.845221][ T5228] do_syscall_64+0x39/0xb0 [ 100.849666][ T5228] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 100.855581][ T5228] RIP: 0033:0x7f607b0de549 [ 100.860013][ T5228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 100.879644][ T5228] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 100.888079][ T5228] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5228] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5228] close(3) = 0 [pid 5228] close(4) = 0 [pid 5228] close(5) = 0 [pid 5228] close(6) = 0 [pid 5228] close(7) = 0 [pid 5228] close(8) = -1 EBADF (Bad file descriptor) [pid 5228] close(9) = -1 EBADF (Bad file descriptor) [pid 5228] close(10) = -1 EBADF (Bad file descriptor) [pid 5228] close(11) = -1 EBADF (Bad file descriptor) [pid 5228] close(12) = -1 EBADF (Bad file descriptor) [pid 5228] close(13) = -1 EBADF (Bad file descriptor) [pid 5228] close(14) = -1 EBADF (Bad file descriptor) [pid 5228] close(15) = -1 EBADF (Bad file descriptor) [pid 5228] close(16) = -1 EBADF (Bad file descriptor) [pid 5228] close(17) = -1 EBADF (Bad file descriptor) [pid 5228] close(18) = -1 EBADF (Bad file descriptor) [pid 5228] close(19) = -1 EBADF (Bad file descriptor) [pid 5228] close(20) = -1 EBADF (Bad file descriptor) [pid 5228] close(21) = -1 EBADF (Bad file descriptor) [pid 5228] close(22) = -1 EBADF (Bad file descriptor) [pid 5228] close(23) = -1 EBADF (Bad file descriptor) [pid 5228] close(24) = -1 EBADF (Bad file descriptor) [pid 5228] close(25) = -1 EBADF (Bad file descriptor) [pid 5228] close(26) = -1 EBADF (Bad file descriptor) [pid 5228] close(27) = -1 EBADF (Bad file descriptor) [pid 5228] close(28) = -1 EBADF (Bad file descriptor) [pid 5228] close(29) = -1 EBADF (Bad file descriptor) [pid 5228] exit_group(0) = ? [pid 5228] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=130, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 131 ./strace-static-x86_64: Process 5229 attached [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5229] setpgid(0, 0) = 0 [pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5229] write(3, "1000", 4) = 4 [pid 5229] close(3) = 0 [pid 5229] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5229] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5229] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5229] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5229] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 100.896066][ T5228] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 100.904061][ T5228] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 100.912049][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 100.920122][ T5228] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 100.928137][ T5228] [pid 5229] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5229] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5229] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5229] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5229] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5229] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5229] write(7, "5", 1) = 1 [ 100.966315][ T5229] FAULT_INJECTION: forcing a failure. [ 100.966315][ T5229] name failslab, interval 1, probability 0, space 0, times 0 [ 100.979620][ T5229] CPU: 1 PID: 5229 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 100.989614][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 100.999673][ T5229] Call Trace: [ 101.002948][ T5229] [ 101.005873][ T5229] dump_stack_lvl+0xd1/0x138 [ 101.010478][ T5229] should_fail_ex.cold+0x5/0xa [ 101.015258][ T5229] ? io_issue_sqe+0x695/0x1250 [ 101.020023][ T5229] should_failslab+0x9/0x20 [ 101.024527][ T5229] __kmem_cache_alloc_node+0x5b/0x330 [ 101.029893][ T5229] ? ref_tracker_alloc+0x158/0x560 [ 101.035009][ T5229] kmalloc_trace+0x26/0x60 [ 101.039428][ T5229] ref_tracker_alloc+0x158/0x560 [ 101.044370][ T5229] ? __lock_acquire+0xbc3/0x56d0 [ 101.049311][ T5229] ? ref_tracker_free+0x6b0/0x6b0 [ 101.054351][ T5229] dst_init+0xe4/0x520 [ 101.058427][ T5229] dst_alloc+0x16f/0x1f0 [ 101.062682][ T5229] rt_dst_alloc+0x55/0x430 [ 101.067097][ T5229] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 101.073082][ T5229] ip_route_output_key_hash+0x18f/0x340 [ 101.078626][ T5229] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 101.084878][ T5229] dccp_v4_connect+0x7e1/0x1730 [ 101.089762][ T5229] __inet_stream_connect+0x69e/0xed0 [ 101.095074][ T5229] ? inet_listen+0x640/0x640 [ 101.099681][ T5229] ? mark_held_locks+0x9f/0xe0 [ 101.104451][ T5229] ? __local_bh_enable_ip+0xa4/0x130 [ 101.109737][ T5229] inet_stream_connect+0x57/0xa0 [ 101.114691][ T5229] ? __inet_stream_connect+0xed0/0xed0 [ 101.120155][ T5229] __sys_connect_file+0x153/0x1a0 [ 101.125180][ T5229] io_connect+0x3cc/0x720 [ 101.129524][ T5229] ? io_connect_prep+0x250/0x250 [ 101.134463][ T5229] ? receive_fd+0x110/0x110 [ 101.138978][ T5229] ? rcu_read_lock_sched_held+0x3e/0x70 [ 101.144524][ T5229] ? io_connect_prep+0x250/0x250 [ 101.149464][ T5229] io_issue_sqe+0x695/0x1250 [ 101.154064][ T5229] io_submit_sqes+0x96c/0x1e90 [ 101.158849][ T5229] __do_sys_io_uring_enter+0x103d/0x24e0 [ 101.164490][ T5229] ? io_submit_sqes+0x1e90/0x1e90 [ 101.169516][ T5229] ? ptrace_notify+0xfe/0x140 [ 101.174192][ T5229] ? lock_downgrade+0x6e0/0x6e0 [ 101.179055][ T5229] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.184341][ T5229] ? lockdep_hardirqs_on+0x7d/0x100 [ 101.189535][ T5229] ? _raw_spin_unlock_irq+0x2e/0x50 [ 101.194733][ T5229] ? ptrace_notify+0xfe/0x140 [ 101.199424][ T5229] do_syscall_64+0x39/0xb0 [ 101.203847][ T5229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 101.209737][ T5229] RIP: 0033:0x7f607b0de549 [ 101.214153][ T5229] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 101.233932][ T5229] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 101.242427][ T5229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 101.250494][ T5229] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 101.258567][ T5229] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5229] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5229] close(3) = 0 [pid 5229] close(4) = 0 [pid 5229] close(5) = 0 [pid 5229] close(6) = 0 [pid 5229] close(7) = 0 [pid 5229] close(8) = -1 EBADF (Bad file descriptor) [pid 5229] close(9) = -1 EBADF (Bad file descriptor) [pid 5229] close(10) = -1 EBADF (Bad file descriptor) [pid 5229] close(11) = -1 EBADF (Bad file descriptor) [pid 5229] close(12) = -1 EBADF (Bad file descriptor) [pid 5229] close(13) = -1 EBADF (Bad file descriptor) [pid 5229] close(14) = -1 EBADF (Bad file descriptor) [pid 5229] close(15) = -1 EBADF (Bad file descriptor) [pid 5229] close(16) = -1 EBADF (Bad file descriptor) [pid 5229] close(17) = -1 EBADF (Bad file descriptor) [pid 5229] close(18) = -1 EBADF (Bad file descriptor) [pid 5229] close(19) = -1 EBADF (Bad file descriptor) [pid 5229] close(20) = -1 EBADF (Bad file descriptor) [pid 5229] close(21) = -1 EBADF (Bad file descriptor) [pid 5229] close(22) = -1 EBADF (Bad file descriptor) [pid 5229] close(23) = -1 EBADF (Bad file descriptor) [pid 5229] close(24) = -1 EBADF (Bad file descriptor) [pid 5229] close(25) = -1 EBADF (Bad file descriptor) [pid 5229] close(26) = -1 EBADF (Bad file descriptor) [pid 5229] close(27) = -1 EBADF (Bad file descriptor) [pid 5229] close(28) = -1 EBADF (Bad file descriptor) [pid 5229] close(29) = -1 EBADF (Bad file descriptor) [pid 5229] exit_group(0) = ? [pid 5229] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=131, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 132 ./strace-static-x86_64: Process 5230 attached [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5230] setpgid(0, 0) = 0 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5230] write(3, "1000", 4) = 4 [pid 5230] close(3) = 0 [pid 5230] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5230] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5230] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5230] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5230] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5230] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5230] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5230] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 101.266541][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 101.274511][ T5229] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 101.282501][ T5229] [pid 5230] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5230] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5230] write(7, "5", 1) = 1 [ 101.331847][ T5230] FAULT_INJECTION: forcing a failure. [ 101.331847][ T5230] name failslab, interval 1, probability 0, space 0, times 0 [ 101.344521][ T5230] CPU: 1 PID: 5230 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 101.354423][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 101.364564][ T5230] Call Trace: [ 101.367855][ T5230] [ 101.370819][ T5230] dump_stack_lvl+0xd1/0x138 [ 101.375457][ T5230] should_fail_ex.cold+0x5/0xa [ 101.380245][ T5230] ? __inet_hash_connect+0x95e/0x1ba0 [ 101.385635][ T5230] should_failslab+0x9/0x20 [ 101.390178][ T5230] kmem_cache_alloc+0x5a/0x320 [ 101.394956][ T5230] __inet_hash_connect+0x95e/0x1ba0 [ 101.400185][ T5230] ? __inet_lookup_listener+0xbf0/0xbf0 [ 101.405760][ T5230] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 101.412136][ T5230] dccp_v4_connect+0xb82/0x1730 [ 101.417051][ T5230] __inet_stream_connect+0x69e/0xed0 [ 101.422395][ T5230] ? inet_listen+0x640/0x640 [ 101.427033][ T5230] ? mark_held_locks+0x9f/0xe0 [ 101.431881][ T5230] ? __local_bh_enable_ip+0xa4/0x130 [ 101.437224][ T5230] inet_stream_connect+0x57/0xa0 [ 101.442208][ T5230] ? __inet_stream_connect+0xed0/0xed0 [ 101.447703][ T5230] __sys_connect_file+0x153/0x1a0 [ 101.452749][ T5230] io_connect+0x3cc/0x720 [ 101.457131][ T5230] ? io_connect_prep+0x250/0x250 [ 101.462115][ T5230] ? receive_fd+0x110/0x110 [ 101.466667][ T5230] ? rcu_read_lock_sched_held+0x3e/0x70 [ 101.472234][ T5230] ? io_connect_prep+0x250/0x250 [ 101.477208][ T5230] io_issue_sqe+0x695/0x1250 [ 101.481844][ T5230] io_submit_sqes+0x96c/0x1e90 [ 101.486653][ T5230] __do_sys_io_uring_enter+0x103d/0x24e0 [ 101.492493][ T5230] ? io_submit_sqes+0x1e90/0x1e90 [ 101.497544][ T5230] ? ptrace_notify+0xfe/0x140 [ 101.502237][ T5230] ? lock_downgrade+0x6e0/0x6e0 [ 101.508247][ T5230] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.513468][ T5230] ? lockdep_hardirqs_on+0x7d/0x100 [ 101.518773][ T5230] ? _raw_spin_unlock_irq+0x2e/0x50 [ 101.524008][ T5230] ? ptrace_notify+0xfe/0x140 [ 101.528708][ T5230] do_syscall_64+0x39/0xb0 [ 101.533153][ T5230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 101.539064][ T5230] RIP: 0033:0x7f607b0de549 [ 101.543502][ T5230] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 101.563131][ T5230] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 101.571564][ T5230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5230] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5230] close(3) = 0 [pid 5230] close(4) = 0 [pid 5230] close(5) = 0 [pid 5230] close(6) = 0 [pid 5230] close(7) = 0 [pid 5230] close(8) = -1 EBADF (Bad file descriptor) [pid 5230] close(9) = -1 EBADF (Bad file descriptor) [pid 5230] close(10) = -1 EBADF (Bad file descriptor) [pid 5230] close(11) = -1 EBADF (Bad file descriptor) [pid 5230] close(12) = -1 EBADF (Bad file descriptor) [pid 5230] close(13) = -1 EBADF (Bad file descriptor) [pid 5230] close(14) = -1 EBADF (Bad file descriptor) [pid 5230] close(15) = -1 EBADF (Bad file descriptor) [pid 5230] close(16) = -1 EBADF (Bad file descriptor) [pid 5230] close(17) = -1 EBADF (Bad file descriptor) [pid 5230] close(18) = -1 EBADF (Bad file descriptor) [pid 5230] close(19) = -1 EBADF (Bad file descriptor) [pid 5230] close(20) = -1 EBADF (Bad file descriptor) [pid 5230] close(21) = -1 EBADF (Bad file descriptor) [pid 5230] close(22) = -1 EBADF (Bad file descriptor) [pid 5230] close(23) = -1 EBADF (Bad file descriptor) [pid 5230] close(24) = -1 EBADF (Bad file descriptor) [pid 5230] close(25) = -1 EBADF (Bad file descriptor) [pid 5230] close(26) = -1 EBADF (Bad file descriptor) [pid 5230] close(27) = -1 EBADF (Bad file descriptor) [pid 5230] close(28) = -1 EBADF (Bad file descriptor) [pid 5230] close(29) = -1 EBADF (Bad file descriptor) [pid 5230] exit_group(0) = ? [pid 5230] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=132, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 133 ./strace-static-x86_64: Process 5231 attached [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5231] setpgid(0, 0) = 0 [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5231] write(3, "1000", 4) = 4 [pid 5231] close(3) = 0 [pid 5231] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5231] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5231] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5231] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5231] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5231] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5231] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5231] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5231] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5231] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5231] write(7, "5", 1) = 1 [ 101.579550][ T5230] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 101.587534][ T5230] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 101.595517][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 101.603501][ T5230] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 101.611541][ T5230] [ 101.653032][ T5231] FAULT_INJECTION: forcing a failure. [ 101.653032][ T5231] name failslab, interval 1, probability 0, space 0, times 0 [ 101.666266][ T5231] CPU: 0 PID: 5231 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 101.676176][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 101.686246][ T5231] Call Trace: [ 101.689517][ T5231] [ 101.692440][ T5231] dump_stack_lvl+0xd1/0x138 [ 101.697034][ T5231] should_fail_ex.cold+0x5/0xa [ 101.701807][ T5231] ? io_issue_sqe+0x695/0x1250 [ 101.706572][ T5231] should_failslab+0x9/0x20 [ 101.711160][ T5231] __kmem_cache_alloc_node+0x5b/0x330 [ 101.716528][ T5231] ? ref_tracker_alloc+0x158/0x560 [ 101.721757][ T5231] kmalloc_trace+0x26/0x60 [ 101.726202][ T5231] ref_tracker_alloc+0x158/0x560 [ 101.731140][ T5231] ? __lock_acquire+0xbc3/0x56d0 [ 101.736072][ T5231] ? ref_tracker_free+0x6b0/0x6b0 [ 101.741196][ T5231] dst_init+0xe4/0x520 [ 101.745265][ T5231] dst_alloc+0x16f/0x1f0 [ 101.749508][ T5231] rt_dst_alloc+0x55/0x430 [ 101.753933][ T5231] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 101.759921][ T5231] ip_route_output_key_hash+0x18f/0x340 [ 101.765467][ T5231] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 101.771742][ T5231] dccp_v4_connect+0x7e1/0x1730 [ 101.776643][ T5231] __inet_stream_connect+0x69e/0xed0 [ 101.782001][ T5231] ? inet_listen+0x640/0x640 [ 101.786626][ T5231] ? mark_held_locks+0x9f/0xe0 [ 101.791427][ T5231] ? __local_bh_enable_ip+0xa4/0x130 [ 101.796752][ T5231] inet_stream_connect+0x57/0xa0 [ 101.801720][ T5231] ? __inet_stream_connect+0xed0/0xed0 [ 101.807206][ T5231] __sys_connect_file+0x153/0x1a0 [ 101.812341][ T5231] io_connect+0x3cc/0x720 [ 101.816705][ T5231] ? io_connect_prep+0x250/0x250 [ 101.821670][ T5231] ? receive_fd+0x110/0x110 [ 101.826270][ T5231] ? rcu_read_lock_sched_held+0x3e/0x70 [ 101.831843][ T5231] ? io_connect_prep+0x250/0x250 [ 101.836824][ T5231] io_issue_sqe+0x695/0x1250 [ 101.841448][ T5231] io_submit_sqes+0x96c/0x1e90 [ 101.846256][ T5231] __do_sys_io_uring_enter+0x103d/0x24e0 [ 101.851928][ T5231] ? io_submit_sqes+0x1e90/0x1e90 [ 101.857068][ T5231] ? ptrace_notify+0xfe/0x140 [ 101.862020][ T5231] ? lock_downgrade+0x6e0/0x6e0 [ 101.866897][ T5231] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.872121][ T5231] ? lockdep_hardirqs_on+0x7d/0x100 [ 101.877338][ T5231] ? _raw_spin_unlock_irq+0x2e/0x50 [ 101.882556][ T5231] ? ptrace_notify+0xfe/0x140 [ 101.887263][ T5231] do_syscall_64+0x39/0xb0 [ 101.891729][ T5231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 101.897643][ T5231] RIP: 0033:0x7f607b0de549 [ 101.902073][ T5231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 101.921700][ T5231] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 101.930146][ T5231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 101.938132][ T5231] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 101.946200][ T5231] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5231] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5231] close(3) = 0 [pid 5231] close(4) = 0 [pid 5231] close(5) = 0 [pid 5231] close(6) = 0 [pid 5231] close(7) = 0 [pid 5231] close(8) = -1 EBADF (Bad file descriptor) [pid 5231] close(9) = -1 EBADF (Bad file descriptor) [pid 5231] close(10) = -1 EBADF (Bad file descriptor) [pid 5231] close(11) = -1 EBADF (Bad file descriptor) [pid 5231] close(12) = -1 EBADF (Bad file descriptor) [pid 5231] close(13) = -1 EBADF (Bad file descriptor) [pid 5231] close(14) = -1 EBADF (Bad file descriptor) [pid 5231] close(15) = -1 EBADF (Bad file descriptor) [pid 5231] close(16) = -1 EBADF (Bad file descriptor) [pid 5231] close(17) = -1 EBADF (Bad file descriptor) [pid 5231] close(18) = -1 EBADF (Bad file descriptor) [pid 5231] close(19) = -1 EBADF (Bad file descriptor) [pid 5231] close(20) = -1 EBADF (Bad file descriptor) [pid 5231] close(21) = -1 EBADF (Bad file descriptor) [pid 5231] close(22) = -1 EBADF (Bad file descriptor) [pid 5231] close(23) = -1 EBADF (Bad file descriptor) [pid 5231] close(24) = -1 EBADF (Bad file descriptor) [pid 5231] close(25) = -1 EBADF (Bad file descriptor) [pid 5231] close(26) = -1 EBADF (Bad file descriptor) [pid 5231] close(27) = -1 EBADF (Bad file descriptor) [pid 5231] close(28) = -1 EBADF (Bad file descriptor) [pid 5231] close(29) = -1 EBADF (Bad file descriptor) [pid 5231] exit_group(0) = ? [pid 5231] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=133, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5232 attached , child_tidptr=0x555555eff5d0) = 134 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5232] setpgid(0, 0) = 0 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] write(3, "1000", 4) = 4 [pid 5232] close(3) = 0 [pid 5232] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5232] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5232] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5232] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 101.954182][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 101.962165][ T5231] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 101.970179][ T5231] [pid 5232] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5232] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5232] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5232] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5232] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5232] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5232] write(7, "5", 1) = 1 [ 102.017652][ T5232] FAULT_INJECTION: forcing a failure. [ 102.017652][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 102.030446][ T5232] CPU: 0 PID: 5232 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 102.040341][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 102.050423][ T5232] Call Trace: [ 102.053727][ T5232] [ 102.056659][ T5232] dump_stack_lvl+0xd1/0x138 [ 102.061262][ T5232] should_fail_ex.cold+0x5/0xa [ 102.066045][ T5232] ? __inet_hash_connect+0x95e/0x1ba0 [ 102.071445][ T5232] should_failslab+0x9/0x20 [ 102.075963][ T5232] kmem_cache_alloc+0x5a/0x320 [ 102.080756][ T5232] __inet_hash_connect+0x95e/0x1ba0 [ 102.085962][ T5232] ? __inet_lookup_listener+0xbf0/0xbf0 [ 102.091574][ T5232] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 102.097971][ T5232] dccp_v4_connect+0xb82/0x1730 [ 102.102878][ T5232] __inet_stream_connect+0x69e/0xed0 [ 102.108205][ T5232] ? inet_listen+0x640/0x640 [ 102.112829][ T5232] ? mark_held_locks+0x9f/0xe0 [ 102.117614][ T5232] ? __local_bh_enable_ip+0xa4/0x130 [ 102.122924][ T5232] inet_stream_connect+0x57/0xa0 [ 102.127893][ T5232] ? __inet_stream_connect+0xed0/0xed0 [ 102.133379][ T5232] __sys_connect_file+0x153/0x1a0 [ 102.138427][ T5232] io_connect+0x3cc/0x720 [ 102.142799][ T5232] ? io_connect_prep+0x250/0x250 [ 102.147764][ T5232] ? receive_fd+0x110/0x110 [ 102.152329][ T5232] ? rcu_read_lock_sched_held+0x3e/0x70 [ 102.157896][ T5232] ? io_connect_prep+0x250/0x250 [ 102.162953][ T5232] io_issue_sqe+0x695/0x1250 [ 102.167573][ T5232] io_submit_sqes+0x96c/0x1e90 [ 102.172396][ T5232] __do_sys_io_uring_enter+0x103d/0x24e0 [ 102.178063][ T5232] ? io_submit_sqes+0x1e90/0x1e90 [ 102.183113][ T5232] ? ptrace_notify+0xfe/0x140 [ 102.187813][ T5232] ? lock_downgrade+0x6e0/0x6e0 [ 102.192692][ T5232] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.197923][ T5232] ? lockdep_hardirqs_on+0x7d/0x100 [ 102.203149][ T5232] ? _raw_spin_unlock_irq+0x2e/0x50 [ 102.208463][ T5232] ? ptrace_notify+0xfe/0x140 [ 102.213162][ T5232] do_syscall_64+0x39/0xb0 [ 102.217609][ T5232] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 102.223522][ T5232] RIP: 0033:0x7f607b0de549 [ 102.227951][ T5232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 102.247582][ T5232] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 102.256098][ T5232] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5232] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5232] close(3) = 0 [pid 5232] close(4) = 0 [pid 5232] close(5) = 0 [pid 5232] close(6) = 0 [pid 5232] close(7) = 0 [pid 5232] close(8) = -1 EBADF (Bad file descriptor) [pid 5232] close(9) = -1 EBADF (Bad file descriptor) [pid 5232] close(10) = -1 EBADF (Bad file descriptor) [pid 5232] close(11) = -1 EBADF (Bad file descriptor) [pid 5232] close(12) = -1 EBADF (Bad file descriptor) [pid 5232] close(13) = -1 EBADF (Bad file descriptor) [pid 5232] close(14) = -1 EBADF (Bad file descriptor) [pid 5232] close(15) = -1 EBADF (Bad file descriptor) [pid 5232] close(16) = -1 EBADF (Bad file descriptor) [pid 5232] close(17) = -1 EBADF (Bad file descriptor) [pid 5232] close(18) = -1 EBADF (Bad file descriptor) [pid 5232] close(19) = -1 EBADF (Bad file descriptor) [pid 5232] close(20) = -1 EBADF (Bad file descriptor) [pid 5232] close(21) = -1 EBADF (Bad file descriptor) [pid 5232] close(22) = -1 EBADF (Bad file descriptor) [pid 5232] close(23) = -1 EBADF (Bad file descriptor) [pid 5232] close(24) = -1 EBADF (Bad file descriptor) [pid 5232] close(25) = -1 EBADF (Bad file descriptor) [pid 5232] close(26) = -1 EBADF (Bad file descriptor) [pid 5232] close(27) = -1 EBADF (Bad file descriptor) [pid 5232] close(28) = -1 EBADF (Bad file descriptor) [pid 5232] close(29) = -1 EBADF (Bad file descriptor) [pid 5232] exit_group(0) = ? [pid 5232] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=134, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 135 ./strace-static-x86_64: Process 5234 attached [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5234] setpgid(0, 0) = 0 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3) = 0 [pid 5234] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5234] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5234] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5234] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5234] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5234] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 102.264095][ T5232] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 102.272074][ T5232] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 102.280056][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 102.288040][ T5232] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 102.296045][ T5232] [pid 5234] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5234] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5234] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5234] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5234] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5234] write(7, "5", 1) = 1 [ 102.357366][ T5234] FAULT_INJECTION: forcing a failure. [ 102.357366][ T5234] name failslab, interval 1, probability 0, space 0, times 0 [ 102.371109][ T5234] CPU: 0 PID: 5234 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 102.381054][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 102.391130][ T5234] Call Trace: [ 102.394408][ T5234] [ 102.397340][ T5234] dump_stack_lvl+0xd1/0x138 [ 102.401956][ T5234] should_fail_ex.cold+0x5/0xa [ 102.406744][ T5234] ? io_issue_sqe+0x695/0x1250 [ 102.411519][ T5234] should_failslab+0x9/0x20 [ 102.416177][ T5234] __kmem_cache_alloc_node+0x5b/0x330 [ 102.421581][ T5234] ? ref_tracker_alloc+0x158/0x560 [ 102.426703][ T5234] kmalloc_trace+0x26/0x60 [ 102.431139][ T5234] ref_tracker_alloc+0x158/0x560 [ 102.436154][ T5234] ? __lock_acquire+0xbc3/0x56d0 [ 102.441229][ T5234] ? ref_tracker_free+0x6b0/0x6b0 [ 102.446423][ T5234] dst_init+0xe4/0x520 [ 102.451576][ T5234] dst_alloc+0x16f/0x1f0 [ 102.455831][ T5234] rt_dst_alloc+0x55/0x430 [ 102.460251][ T5234] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 102.466250][ T5234] ip_route_output_key_hash+0x18f/0x340 [ 102.471807][ T5234] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 102.478087][ T5234] dccp_v4_connect+0x7e1/0x1730 [ 102.482966][ T5234] __inet_stream_connect+0x69e/0xed0 [ 102.488268][ T5234] ? inet_listen+0x640/0x640 [ 102.492869][ T5234] ? mark_held_locks+0x9f/0xe0 [ 102.497650][ T5234] ? __local_bh_enable_ip+0xa4/0x130 [ 102.502965][ T5234] inet_stream_connect+0x57/0xa0 [ 102.507906][ T5234] ? __inet_stream_connect+0xed0/0xed0 [ 102.513386][ T5234] __sys_connect_file+0x153/0x1a0 [ 102.518442][ T5234] io_connect+0x3cc/0x720 [ 102.522783][ T5234] ? io_connect_prep+0x250/0x250 [ 102.527739][ T5234] ? receive_fd+0x110/0x110 [ 102.532276][ T5234] ? rcu_read_lock_sched_held+0x3e/0x70 [ 102.537841][ T5234] ? io_connect_prep+0x250/0x250 [ 102.542812][ T5234] io_issue_sqe+0x695/0x1250 [ 102.547410][ T5234] io_submit_sqes+0x96c/0x1e90 [ 102.552292][ T5234] __do_sys_io_uring_enter+0x103d/0x24e0 [ 102.557932][ T5234] ? io_submit_sqes+0x1e90/0x1e90 [ 102.562960][ T5234] ? ptrace_notify+0xfe/0x140 [ 102.567649][ T5234] ? lock_downgrade+0x6e0/0x6e0 [ 102.572538][ T5234] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.577767][ T5234] ? lockdep_hardirqs_on+0x7d/0x100 [ 102.583002][ T5234] ? _raw_spin_unlock_irq+0x2e/0x50 [ 102.588208][ T5234] ? ptrace_notify+0xfe/0x140 [ 102.592903][ T5234] do_syscall_64+0x39/0xb0 [ 102.597325][ T5234] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 102.603242][ T5234] RIP: 0033:0x7f607b0de549 [ 102.607688][ T5234] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 102.627343][ T5234] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 102.635834][ T5234] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 102.643824][ T5234] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5234] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5234] close(3) = 0 [pid 5234] close(4) = 0 [pid 5234] close(5) = 0 [pid 5234] close(6) = 0 [pid 5234] close(7) = 0 [pid 5234] close(8) = -1 EBADF (Bad file descriptor) [pid 5234] close(9) = -1 EBADF (Bad file descriptor) [pid 5234] close(10) = -1 EBADF (Bad file descriptor) [pid 5234] close(11) = -1 EBADF (Bad file descriptor) [pid 5234] close(12) = -1 EBADF (Bad file descriptor) [pid 5234] close(13) = -1 EBADF (Bad file descriptor) [pid 5234] close(14) = -1 EBADF (Bad file descriptor) [pid 5234] close(15) = -1 EBADF (Bad file descriptor) [pid 5234] close(16) = -1 EBADF (Bad file descriptor) [pid 5234] close(17) = -1 EBADF (Bad file descriptor) [pid 5234] close(18) = -1 EBADF (Bad file descriptor) [pid 5234] close(19) = -1 EBADF (Bad file descriptor) [pid 5234] close(20) = -1 EBADF (Bad file descriptor) [pid 5234] close(21) = -1 EBADF (Bad file descriptor) [pid 5234] close(22) = -1 EBADF (Bad file descriptor) [pid 5234] close(23) = -1 EBADF (Bad file descriptor) [pid 5234] close(24) = -1 EBADF (Bad file descriptor) [pid 5234] close(25) = -1 EBADF (Bad file descriptor) [pid 5234] close(26) = -1 EBADF (Bad file descriptor) [pid 5234] close(27) = -1 EBADF (Bad file descriptor) [pid 5234] close(28) = -1 EBADF (Bad file descriptor) [pid 5234] close(29) = -1 EBADF (Bad file descriptor) [pid 5234] exit_group(0) = ? [pid 5234] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=135, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 136 ./strace-static-x86_64: Process 5235 attached [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5235] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5235] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5235] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5235] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5235] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5235] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5235] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5235] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5235] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5235] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5235] write(7, "5", 1) = 1 [ 102.651807][ T5234] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 102.659795][ T5234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 102.667765][ T5234] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 102.675770][ T5234] [ 102.714155][ T5235] FAULT_INJECTION: forcing a failure. [ 102.714155][ T5235] name failslab, interval 1, probability 0, space 0, times 0 [ 102.726921][ T5235] CPU: 0 PID: 5235 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 102.736829][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 102.746916][ T5235] Call Trace: [ 102.750204][ T5235] [ 102.753157][ T5235] dump_stack_lvl+0xd1/0x138 [ 102.757757][ T5235] should_fail_ex.cold+0x5/0xa [ 102.762520][ T5235] ? io_issue_sqe+0x695/0x1250 [ 102.767290][ T5235] should_failslab+0x9/0x20 [ 102.771812][ T5235] __kmem_cache_alloc_node+0x5b/0x330 [ 102.777209][ T5235] ? ref_tracker_alloc+0x158/0x560 [ 102.782352][ T5235] kmalloc_trace+0x26/0x60 [ 102.786802][ T5235] ref_tracker_alloc+0x158/0x560 [ 102.791773][ T5235] ? __lock_acquire+0xbc3/0x56d0 [ 102.796818][ T5235] ? ref_tracker_free+0x6b0/0x6b0 [ 102.801905][ T5235] dst_init+0xe4/0x520 [ 102.806001][ T5235] dst_alloc+0x16f/0x1f0 [ 102.810268][ T5235] rt_dst_alloc+0x55/0x430 [ 102.814719][ T5235] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 102.820739][ T5235] ip_route_output_key_hash+0x18f/0x340 [ 102.826321][ T5235] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 102.832611][ T5235] dccp_v4_connect+0x7e1/0x1730 [ 102.837519][ T5235] __inet_stream_connect+0x69e/0xed0 [ 102.842846][ T5235] ? inet_listen+0x640/0x640 [ 102.847469][ T5235] ? mark_held_locks+0x9f/0xe0 [ 102.852251][ T5235] ? __local_bh_enable_ip+0xa4/0x130 [ 102.857563][ T5235] inet_stream_connect+0x57/0xa0 [ 102.862536][ T5235] ? __inet_stream_connect+0xed0/0xed0 [ 102.868036][ T5235] __sys_connect_file+0x153/0x1a0 [ 102.873086][ T5235] io_connect+0x3cc/0x720 [ 102.877449][ T5235] ? io_connect_prep+0x250/0x250 [ 102.882422][ T5235] ? receive_fd+0x110/0x110 [ 102.886962][ T5235] ? rcu_read_lock_sched_held+0x3e/0x70 [ 102.892523][ T5235] ? io_connect_prep+0x250/0x250 [ 102.897493][ T5235] io_issue_sqe+0x695/0x1250 [ 102.902114][ T5235] io_submit_sqes+0x96c/0x1e90 [ 102.906952][ T5235] __do_sys_io_uring_enter+0x103d/0x24e0 [ 102.912638][ T5235] ? io_submit_sqes+0x1e90/0x1e90 [ 102.917696][ T5235] ? ptrace_notify+0xfe/0x140 [ 102.922391][ T5235] ? lock_downgrade+0x6e0/0x6e0 [ 102.927269][ T5235] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.932494][ T5235] ? lockdep_hardirqs_on+0x7d/0x100 [ 102.937716][ T5235] ? _raw_spin_unlock_irq+0x2e/0x50 [ 102.942933][ T5235] ? ptrace_notify+0xfe/0x140 [ 102.947635][ T5235] do_syscall_64+0x39/0xb0 [ 102.952087][ T5235] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 102.958091][ T5235] RIP: 0033:0x7f607b0de549 [ 102.962530][ T5235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 102.982161][ T5235] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 102.990593][ T5235] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 102.999013][ T5235] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 103.006994][ T5235] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5235] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5235] close(3) = 0 [pid 5235] close(4) = 0 [pid 5235] close(5) = 0 [pid 5235] close(6) = 0 [pid 5235] close(7) = 0 [pid 5235] close(8) = -1 EBADF (Bad file descriptor) [pid 5235] close(9) = -1 EBADF (Bad file descriptor) [pid 5235] close(10) = -1 EBADF (Bad file descriptor) [pid 5235] close(11) = -1 EBADF (Bad file descriptor) [pid 5235] close(12) = -1 EBADF (Bad file descriptor) [pid 5235] close(13) = -1 EBADF (Bad file descriptor) [pid 5235] close(14) = -1 EBADF (Bad file descriptor) [pid 5235] close(15) = -1 EBADF (Bad file descriptor) [pid 5235] close(16) = -1 EBADF (Bad file descriptor) [pid 5235] close(17) = -1 EBADF (Bad file descriptor) [pid 5235] close(18) = -1 EBADF (Bad file descriptor) [pid 5235] close(19) = -1 EBADF (Bad file descriptor) [pid 5235] close(20) = -1 EBADF (Bad file descriptor) [pid 5235] close(21) = -1 EBADF (Bad file descriptor) [pid 5235] close(22) = -1 EBADF (Bad file descriptor) [pid 5235] close(23) = -1 EBADF (Bad file descriptor) [pid 5235] close(24) = -1 EBADF (Bad file descriptor) [pid 5235] close(25) = -1 EBADF (Bad file descriptor) [pid 5235] close(26) = -1 EBADF (Bad file descriptor) [pid 5235] close(27) = -1 EBADF (Bad file descriptor) [pid 5235] close(28) = -1 EBADF (Bad file descriptor) [pid 5235] close(29) = -1 EBADF (Bad file descriptor) [pid 5235] exit_group(0) = ? [pid 5235] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=136, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5236 attached , child_tidptr=0x555555eff5d0) = 137 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5236] setpgid(0, 0) = 0 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1000", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5236] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5236] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5236] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5236] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5236] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5236] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 103.014976][ T5235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 103.022959][ T5235] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 103.030965][ T5235] [pid 5236] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5236] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5236] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5236] write(7, "5", 1) = 1 [ 103.080546][ T5236] FAULT_INJECTION: forcing a failure. [ 103.080546][ T5236] name failslab, interval 1, probability 0, space 0, times 0 [ 103.093259][ T5236] CPU: 0 PID: 5236 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 103.103187][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 103.113273][ T5236] Call Trace: [ 103.116564][ T5236] [ 103.119493][ T5236] dump_stack_lvl+0xd1/0x138 [ 103.124098][ T5236] should_fail_ex.cold+0x5/0xa [ 103.128881][ T5236] ? __inet_hash_connect+0x95e/0x1ba0 [ 103.134292][ T5236] should_failslab+0x9/0x20 [ 103.138817][ T5236] kmem_cache_alloc+0x5a/0x320 [ 103.143615][ T5236] __inet_hash_connect+0x95e/0x1ba0 [ 103.148838][ T5236] ? __inet_lookup_listener+0xbf0/0xbf0 [ 103.154421][ T5236] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 103.160793][ T5236] dccp_v4_connect+0xb82/0x1730 [ 103.165693][ T5236] __inet_stream_connect+0x69e/0xed0 [ 103.170996][ T5236] ? inet_listen+0x640/0x640 [ 103.175597][ T5236] ? mark_held_locks+0x9f/0xe0 [ 103.180384][ T5236] ? __local_bh_enable_ip+0xa4/0x130 [ 103.185795][ T5236] inet_stream_connect+0x57/0xa0 [ 103.190834][ T5236] ? __inet_stream_connect+0xed0/0xed0 [ 103.196317][ T5236] __sys_connect_file+0x153/0x1a0 [ 103.201470][ T5236] io_connect+0x3cc/0x720 [ 103.205817][ T5236] ? io_connect_prep+0x250/0x250 [ 103.210780][ T5236] ? receive_fd+0x110/0x110 [ 103.215319][ T5236] ? rcu_read_lock_sched_held+0x3e/0x70 [ 103.220956][ T5236] ? io_connect_prep+0x250/0x250 [ 103.225910][ T5236] io_issue_sqe+0x695/0x1250 [ 103.230523][ T5236] io_submit_sqes+0x96c/0x1e90 [ 103.235328][ T5236] __do_sys_io_uring_enter+0x103d/0x24e0 [ 103.240991][ T5236] ? io_submit_sqes+0x1e90/0x1e90 [ 103.246043][ T5236] ? ptrace_notify+0xfe/0x140 [ 103.250762][ T5236] ? lock_downgrade+0x6e0/0x6e0 [ 103.255656][ T5236] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.260884][ T5236] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.266122][ T5236] ? _raw_spin_unlock_irq+0x2e/0x50 [ 103.271328][ T5236] ? ptrace_notify+0xfe/0x140 [ 103.276134][ T5236] do_syscall_64+0x39/0xb0 [ 103.280558][ T5236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 103.286485][ T5236] RIP: 0033:0x7f607b0de549 [ 103.290931][ T5236] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 103.310570][ T5236] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 103.319030][ T5236] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5236] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5236] close(3) = 0 [pid 5236] close(4) = 0 [pid 5236] close(5) = 0 [pid 5236] close(6) = 0 [pid 5236] close(7) = 0 [pid 5236] close(8) = -1 EBADF (Bad file descriptor) [pid 5236] close(9) = -1 EBADF (Bad file descriptor) [pid 5236] close(10) = -1 EBADF (Bad file descriptor) [pid 5236] close(11) = -1 EBADF (Bad file descriptor) [pid 5236] close(12) = -1 EBADF (Bad file descriptor) [pid 5236] close(13) = -1 EBADF (Bad file descriptor) [pid 5236] close(14) = -1 EBADF (Bad file descriptor) [pid 5236] close(15) = -1 EBADF (Bad file descriptor) [pid 5236] close(16) = -1 EBADF (Bad file descriptor) [pid 5236] close(17) = -1 EBADF (Bad file descriptor) [pid 5236] close(18) = -1 EBADF (Bad file descriptor) [pid 5236] close(19) = -1 EBADF (Bad file descriptor) [pid 5236] close(20) = -1 EBADF (Bad file descriptor) [pid 5236] close(21) = -1 EBADF (Bad file descriptor) [pid 5236] close(22) = -1 EBADF (Bad file descriptor) [pid 5236] close(23) = -1 EBADF (Bad file descriptor) [pid 5236] close(24) = -1 EBADF (Bad file descriptor) [pid 5236] close(25) = -1 EBADF (Bad file descriptor) [pid 5236] close(26) = -1 EBADF (Bad file descriptor) [pid 5236] close(27) = -1 EBADF (Bad file descriptor) [pid 5236] close(28) = -1 EBADF (Bad file descriptor) [pid 5236] close(29) = -1 EBADF (Bad file descriptor) [pid 5236] exit_group(0) = ? [pid 5236] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=137, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 138 ./strace-static-x86_64: Process 5237 attached [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5237] setpgid(0, 0) = 0 [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5237] write(3, "1000", 4) = 4 [pid 5237] close(3) = 0 [pid 5237] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5237] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5237] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5237] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5237] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5237] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5237] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5237] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5237] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5237] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5237] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5237] write(7, "5", 1) = 1 [ 103.327034][ T5236] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 103.335025][ T5236] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 103.343021][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 103.350996][ T5236] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 103.358984][ T5236] [ 103.399721][ T5237] FAULT_INJECTION: forcing a failure. [ 103.399721][ T5237] name failslab, interval 1, probability 0, space 0, times 0 [ 103.412666][ T5237] CPU: 0 PID: 5237 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 103.423205][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 103.433264][ T5237] Call Trace: [ 103.436564][ T5237] [ 103.439522][ T5237] dump_stack_lvl+0xd1/0x138 [ 103.444137][ T5237] should_fail_ex.cold+0x5/0xa [ 103.448899][ T5237] ? io_issue_sqe+0x695/0x1250 [ 103.453679][ T5237] should_failslab+0x9/0x20 [ 103.458300][ T5237] __kmem_cache_alloc_node+0x5b/0x330 [ 103.463799][ T5237] ? ref_tracker_alloc+0x158/0x560 [ 103.468942][ T5237] kmalloc_trace+0x26/0x60 [ 103.473395][ T5237] ref_tracker_alloc+0x158/0x560 [ 103.478383][ T5237] ? __lock_acquire+0xbc3/0x56d0 [ 103.483342][ T5237] ? ref_tracker_free+0x6b0/0x6b0 [ 103.488424][ T5237] dst_init+0xe4/0x520 [ 103.492506][ T5237] dst_alloc+0x16f/0x1f0 [ 103.496759][ T5237] rt_dst_alloc+0x55/0x430 [ 103.501273][ T5237] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 103.507271][ T5237] ip_route_output_key_hash+0x18f/0x340 [ 103.512826][ T5237] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 103.519114][ T5237] dccp_v4_connect+0x7e1/0x1730 [ 103.524018][ T5237] __inet_stream_connect+0x69e/0xed0 [ 103.529322][ T5237] ? inet_listen+0x640/0x640 [ 103.533922][ T5237] ? mark_held_locks+0x9f/0xe0 [ 103.538693][ T5237] ? __local_bh_enable_ip+0xa4/0x130 [ 103.543986][ T5237] inet_stream_connect+0x57/0xa0 [ 103.549038][ T5237] ? __inet_stream_connect+0xed0/0xed0 [ 103.554538][ T5237] __sys_connect_file+0x153/0x1a0 [ 103.559596][ T5237] io_connect+0x3cc/0x720 [ 103.563943][ T5237] ? io_connect_prep+0x250/0x250 [ 103.568900][ T5237] ? receive_fd+0x110/0x110 [ 103.573470][ T5237] ? rcu_read_lock_sched_held+0x3e/0x70 [ 103.579058][ T5237] ? io_connect_prep+0x250/0x250 [ 103.584039][ T5237] io_issue_sqe+0x695/0x1250 [ 103.588727][ T5237] io_submit_sqes+0x96c/0x1e90 [ 103.593550][ T5237] __do_sys_io_uring_enter+0x103d/0x24e0 [ 103.599262][ T5237] ? io_submit_sqes+0x1e90/0x1e90 [ 103.604319][ T5237] ? ptrace_notify+0xfe/0x140 [ 103.609011][ T5237] ? lock_downgrade+0x6e0/0x6e0 [ 103.613926][ T5237] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.619146][ T5237] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.624371][ T5237] ? _raw_spin_unlock_irq+0x2e/0x50 [ 103.629581][ T5237] ? ptrace_notify+0xfe/0x140 [ 103.634265][ T5237] do_syscall_64+0x39/0xb0 [ 103.638690][ T5237] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 103.644606][ T5237] RIP: 0033:0x7f607b0de549 [ 103.649062][ T5237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 103.669162][ T5237] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 103.677628][ T5237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 103.685622][ T5237] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5237] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5237] close(3) = 0 [pid 5237] close(4) = 0 [pid 5237] close(5) = 0 [pid 5237] close(6) = 0 [pid 5237] close(7) = 0 [pid 5237] close(8) = -1 EBADF (Bad file descriptor) [pid 5237] close(9) = -1 EBADF (Bad file descriptor) [pid 5237] close(10) = -1 EBADF (Bad file descriptor) [pid 5237] close(11) = -1 EBADF (Bad file descriptor) [pid 5237] close(12) = -1 EBADF (Bad file descriptor) [pid 5237] close(13) = -1 EBADF (Bad file descriptor) [pid 5237] close(14) = -1 EBADF (Bad file descriptor) [pid 5237] close(15) = -1 EBADF (Bad file descriptor) [pid 5237] close(16) = -1 EBADF (Bad file descriptor) [pid 5237] close(17) = -1 EBADF (Bad file descriptor) [pid 5237] close(18) = -1 EBADF (Bad file descriptor) [pid 5237] close(19) = -1 EBADF (Bad file descriptor) [pid 5237] close(20) = -1 EBADF (Bad file descriptor) [pid 5237] close(21) = -1 EBADF (Bad file descriptor) [pid 5237] close(22) = -1 EBADF (Bad file descriptor) [pid 5237] close(23) = -1 EBADF (Bad file descriptor) [pid 5237] close(24) = -1 EBADF (Bad file descriptor) [pid 5237] close(25) = -1 EBADF (Bad file descriptor) [pid 5237] close(26) = -1 EBADF (Bad file descriptor) [pid 5237] close(27) = -1 EBADF (Bad file descriptor) [pid 5237] close(28) = -1 EBADF (Bad file descriptor) [pid 5237] close(29) = -1 EBADF (Bad file descriptor) [pid 5237] exit_group(0) = ? [pid 5237] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=138, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 139 ./strace-static-x86_64: Process 5238 attached [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5238] setpgid(0, 0) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5238] write(3, "1000", 4) = 4 [pid 5238] close(3) = 0 [pid 5238] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5238] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5238] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5238] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5238] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5238] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5238] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5238] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5238] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5238] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5238] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5238] write(7, "5", 1) = 1 [ 103.693593][ T5237] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 103.701571][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 103.709539][ T5237] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 103.717550][ T5237] [ 103.754823][ T5238] FAULT_INJECTION: forcing a failure. [ 103.754823][ T5238] name failslab, interval 1, probability 0, space 0, times 0 [ 103.767915][ T5238] CPU: 0 PID: 5238 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 103.777820][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 103.787984][ T5238] Call Trace: [ 103.791288][ T5238] [ 103.794243][ T5238] dump_stack_lvl+0xd1/0x138 [ 103.798870][ T5238] should_fail_ex.cold+0x5/0xa [ 103.803632][ T5238] ? io_issue_sqe+0x695/0x1250 [ 103.808399][ T5238] should_failslab+0x9/0x20 [ 103.812913][ T5238] __kmem_cache_alloc_node+0x5b/0x330 [ 103.819415][ T5238] ? ref_tracker_alloc+0x158/0x560 [ 103.824540][ T5238] kmalloc_trace+0x26/0x60 [ 103.828968][ T5238] ref_tracker_alloc+0x158/0x560 [ 103.834259][ T5238] ? __lock_acquire+0xbc3/0x56d0 [ 103.839201][ T5238] ? ref_tracker_free+0x6b0/0x6b0 [ 103.844271][ T5238] dst_init+0xe4/0x520 [ 103.848374][ T5238] dst_alloc+0x16f/0x1f0 [ 103.852669][ T5238] rt_dst_alloc+0x55/0x430 [ 103.857228][ T5238] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 103.863228][ T5238] ip_route_output_key_hash+0x18f/0x340 [ 103.868787][ T5238] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 103.875072][ T5238] dccp_v4_connect+0x7e1/0x1730 [ 103.879980][ T5238] __inet_stream_connect+0x69e/0xed0 [ 103.885308][ T5238] ? inet_listen+0x640/0x640 [ 103.889944][ T5238] ? mark_held_locks+0x9f/0xe0 [ 103.894730][ T5238] ? __local_bh_enable_ip+0xa4/0x130 [ 103.900045][ T5238] inet_stream_connect+0x57/0xa0 [ 103.905279][ T5238] ? __inet_stream_connect+0xed0/0xed0 [ 103.910770][ T5238] __sys_connect_file+0x153/0x1a0 [ 103.915822][ T5238] io_connect+0x3cc/0x720 [ 103.920185][ T5238] ? io_connect_prep+0x250/0x250 [ 103.925154][ T5238] ? receive_fd+0x110/0x110 [ 103.929694][ T5238] ? rcu_read_lock_sched_held+0x3e/0x70 [ 103.935345][ T5238] ? io_connect_prep+0x250/0x250 [ 103.940314][ T5238] io_issue_sqe+0x695/0x1250 [ 103.944968][ T5238] io_submit_sqes+0x96c/0x1e90 [ 103.949786][ T5238] __do_sys_io_uring_enter+0x103d/0x24e0 [ 103.955476][ T5238] ? io_submit_sqes+0x1e90/0x1e90 [ 103.960527][ T5238] ? ptrace_notify+0xfe/0x140 [ 103.965222][ T5238] ? lock_downgrade+0x6e0/0x6e0 [ 103.970106][ T5238] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.975417][ T5238] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.980633][ T5238] ? _raw_spin_unlock_irq+0x2e/0x50 [ 103.985857][ T5238] ? ptrace_notify+0xfe/0x140 [ 103.990566][ T5238] do_syscall_64+0x39/0xb0 [ 103.995028][ T5238] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 104.000940][ T5238] RIP: 0033:0x7f607b0de549 [ 104.005369][ T5238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 104.025080][ T5238] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 104.033518][ T5238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 104.041511][ T5238] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5238] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5238] close(3) = 0 [pid 5238] close(4) = 0 [pid 5238] close(5) = 0 [pid 5238] close(6) = 0 [pid 5238] close(7) = 0 [pid 5238] close(8) = -1 EBADF (Bad file descriptor) [pid 5238] close(9) = -1 EBADF (Bad file descriptor) [pid 5238] close(10) = -1 EBADF (Bad file descriptor) [pid 5238] close(11) = -1 EBADF (Bad file descriptor) [pid 5238] close(12) = -1 EBADF (Bad file descriptor) [pid 5238] close(13) = -1 EBADF (Bad file descriptor) [pid 5238] close(14) = -1 EBADF (Bad file descriptor) [pid 5238] close(15) = -1 EBADF (Bad file descriptor) [pid 5238] close(16) = -1 EBADF (Bad file descriptor) [pid 5238] close(17) = -1 EBADF (Bad file descriptor) [pid 5238] close(18) = -1 EBADF (Bad file descriptor) [pid 5238] close(19) = -1 EBADF (Bad file descriptor) [pid 5238] close(20) = -1 EBADF (Bad file descriptor) [pid 5238] close(21) = -1 EBADF (Bad file descriptor) [pid 5238] close(22) = -1 EBADF (Bad file descriptor) [pid 5238] close(23) = -1 EBADF (Bad file descriptor) [pid 5238] close(24) = -1 EBADF (Bad file descriptor) [pid 5238] close(25) = -1 EBADF (Bad file descriptor) [pid 5238] close(26) = -1 EBADF (Bad file descriptor) [pid 5238] close(27) = -1 EBADF (Bad file descriptor) [pid 5238] close(28) = -1 EBADF (Bad file descriptor) [pid 5238] close(29) = -1 EBADF (Bad file descriptor) [pid 5238] exit_group(0) = ? [pid 5238] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=139, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 140 ./strace-static-x86_64: Process 5239 attached [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [pid 5239] close(3) = 0 [pid 5239] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5239] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 104.049494][ T5238] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 104.057480][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 104.065461][ T5238] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 104.073463][ T5238] [pid 5239] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5239] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5239] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5239] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5239] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5239] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5239] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5239] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5239] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5239] write(7, "5", 1) = 1 [ 104.127691][ T5239] FAULT_INJECTION: forcing a failure. [ 104.127691][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 104.140409][ T5239] CPU: 0 PID: 5239 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 104.150337][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 104.160407][ T5239] Call Trace: [ 104.163691][ T5239] [ 104.166647][ T5239] dump_stack_lvl+0xd1/0x138 [ 104.171286][ T5239] should_fail_ex.cold+0x5/0xa [ 104.176079][ T5239] ? __inet_hash_connect+0x95e/0x1ba0 [ 104.181472][ T5239] should_failslab+0x9/0x20 [ 104.186009][ T5239] kmem_cache_alloc+0x5a/0x320 [ 104.190778][ T5239] __inet_hash_connect+0x95e/0x1ba0 [ 104.195990][ T5239] ? __inet_lookup_listener+0xbf0/0xbf0 [ 104.201564][ T5239] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 104.207919][ T5239] dccp_v4_connect+0xb82/0x1730 [ 104.213085][ T5239] __inet_stream_connect+0x69e/0xed0 [ 104.218405][ T5239] ? inet_listen+0x640/0x640 [ 104.223050][ T5239] ? mark_held_locks+0x9f/0xe0 [ 104.227826][ T5239] ? __local_bh_enable_ip+0xa4/0x130 [ 104.233124][ T5239] inet_stream_connect+0x57/0xa0 [ 104.238081][ T5239] ? __inet_stream_connect+0xed0/0xed0 [ 104.243575][ T5239] __sys_connect_file+0x153/0x1a0 [ 104.248780][ T5239] io_connect+0x3cc/0x720 [ 104.253127][ T5239] ? io_connect_prep+0x250/0x250 [ 104.258079][ T5239] ? receive_fd+0x110/0x110 [ 104.262611][ T5239] ? rcu_read_lock_sched_held+0x3e/0x70 [ 104.268188][ T5239] ? io_connect_prep+0x250/0x250 [ 104.273139][ T5239] io_issue_sqe+0x695/0x1250 [ 104.277771][ T5239] io_submit_sqes+0x96c/0x1e90 [ 104.282581][ T5239] __do_sys_io_uring_enter+0x103d/0x24e0 [ 104.288275][ T5239] ? io_submit_sqes+0x1e90/0x1e90 [ 104.293423][ T5239] ? ptrace_notify+0xfe/0x140 [ 104.298108][ T5239] ? lock_downgrade+0x6e0/0x6e0 [ 104.302970][ T5239] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.308185][ T5239] ? lockdep_hardirqs_on+0x7d/0x100 [ 104.313452][ T5239] ? _raw_spin_unlock_irq+0x2e/0x50 [ 104.318779][ T5239] ? ptrace_notify+0xfe/0x140 [ 104.323478][ T5239] do_syscall_64+0x39/0xb0 [ 104.327901][ T5239] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 104.333810][ T5239] RIP: 0033:0x7f607b0de549 [ 104.338257][ T5239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 104.357954][ T5239] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 104.366385][ T5239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5239] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5239] close(3) = 0 [pid 5239] close(4) = 0 [pid 5239] close(5) = 0 [pid 5239] close(6) = 0 [pid 5239] close(7) = 0 [pid 5239] close(8) = -1 EBADF (Bad file descriptor) [pid 5239] close(9) = -1 EBADF (Bad file descriptor) [pid 5239] close(10) = -1 EBADF (Bad file descriptor) [pid 5239] close(11) = -1 EBADF (Bad file descriptor) [pid 5239] close(12) = -1 EBADF (Bad file descriptor) [pid 5239] close(13) = -1 EBADF (Bad file descriptor) [pid 5239] close(14) = -1 EBADF (Bad file descriptor) [pid 5239] close(15) = -1 EBADF (Bad file descriptor) [pid 5239] close(16) = -1 EBADF (Bad file descriptor) [pid 5239] close(17) = -1 EBADF (Bad file descriptor) [pid 5239] close(18) = -1 EBADF (Bad file descriptor) [pid 5239] close(19) = -1 EBADF (Bad file descriptor) [pid 5239] close(20) = -1 EBADF (Bad file descriptor) [pid 5239] close(21) = -1 EBADF (Bad file descriptor) [pid 5239] close(22) = -1 EBADF (Bad file descriptor) [pid 5239] close(23) = -1 EBADF (Bad file descriptor) [pid 5239] close(24) = -1 EBADF (Bad file descriptor) [pid 5239] close(25) = -1 EBADF (Bad file descriptor) [pid 5239] close(26) = -1 EBADF (Bad file descriptor) [pid 5239] close(27) = -1 EBADF (Bad file descriptor) [pid 5239] close(28) = -1 EBADF (Bad file descriptor) [pid 5239] close(29) = -1 EBADF (Bad file descriptor) [pid 5239] exit_group(0) = ? [pid 5239] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=140, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 141 ./strace-static-x86_64: Process 5240 attached [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5240] setpgid(0, 0) = 0 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5240] write(3, "1000", 4) = 4 [pid 5240] close(3) = 0 [pid 5240] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5240] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5240] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5240] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5240] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5240] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5240] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5240] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5240] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5240] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5240] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5240] write(7, "5", 1) = 1 [ 104.374542][ T5239] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 104.382618][ T5239] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 104.390624][ T5239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 104.398693][ T5239] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 104.406702][ T5239] [ 104.445564][ T5240] FAULT_INJECTION: forcing a failure. [ 104.445564][ T5240] name failslab, interval 1, probability 0, space 0, times 0 [ 104.459400][ T5240] CPU: 0 PID: 5240 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 104.469355][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 104.479436][ T5240] Call Trace: [ 104.482836][ T5240] [ 104.485771][ T5240] dump_stack_lvl+0xd1/0x138 [ 104.490377][ T5240] should_fail_ex.cold+0x5/0xa [ 104.495141][ T5240] ? io_issue_sqe+0x695/0x1250 [ 104.499917][ T5240] should_failslab+0x9/0x20 [ 104.504429][ T5240] __kmem_cache_alloc_node+0x5b/0x330 [ 104.509816][ T5240] ? ref_tracker_alloc+0x158/0x560 [ 104.514957][ T5240] kmalloc_trace+0x26/0x60 [ 104.519384][ T5240] ref_tracker_alloc+0x158/0x560 [ 104.524341][ T5240] ? __lock_acquire+0xbc3/0x56d0 [ 104.529281][ T5240] ? ref_tracker_free+0x6b0/0x6b0 [ 104.534338][ T5240] dst_init+0xe4/0x520 [ 104.538437][ T5240] dst_alloc+0x16f/0x1f0 [ 104.542704][ T5240] rt_dst_alloc+0x55/0x430 [ 104.547143][ T5240] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 104.553136][ T5240] ip_route_output_key_hash+0x18f/0x340 [ 104.558692][ T5240] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 104.564952][ T5240] dccp_v4_connect+0x7e1/0x1730 [ 104.569823][ T5240] __inet_stream_connect+0x69e/0xed0 [ 104.575146][ T5240] ? inet_listen+0x640/0x640 [ 104.579776][ T5240] ? mark_held_locks+0x9f/0xe0 [ 104.584545][ T5240] ? __local_bh_enable_ip+0xa4/0x130 [ 104.589925][ T5240] inet_stream_connect+0x57/0xa0 [ 104.594877][ T5240] ? __inet_stream_connect+0xed0/0xed0 [ 104.600376][ T5240] __sys_connect_file+0x153/0x1a0 [ 104.605406][ T5240] io_connect+0x3cc/0x720 [ 104.609747][ T5240] ? io_connect_prep+0x250/0x250 [ 104.614694][ T5240] ? receive_fd+0x110/0x110 [ 104.619239][ T5240] ? rcu_read_lock_sched_held+0x3e/0x70 [ 104.624885][ T5240] ? io_connect_prep+0x250/0x250 [ 104.629835][ T5240] io_issue_sqe+0x695/0x1250 [ 104.634434][ T5240] io_submit_sqes+0x96c/0x1e90 [ 104.639301][ T5240] __do_sys_io_uring_enter+0x103d/0x24e0 [ 104.644958][ T5240] ? io_submit_sqes+0x1e90/0x1e90 [ 104.649992][ T5240] ? ptrace_notify+0xfe/0x140 [ 104.654676][ T5240] ? lock_downgrade+0x6e0/0x6e0 [ 104.659553][ T5240] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.664801][ T5240] ? lockdep_hardirqs_on+0x7d/0x100 [ 104.670011][ T5240] ? _raw_spin_unlock_irq+0x2e/0x50 [ 104.675242][ T5240] ? ptrace_notify+0xfe/0x140 [ 104.679948][ T5240] do_syscall_64+0x39/0xb0 [ 104.684373][ T5240] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 104.690268][ T5240] RIP: 0033:0x7f607b0de549 [ 104.694685][ T5240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 104.714297][ T5240] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 104.722713][ T5240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 104.730696][ T5240] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 104.738691][ T5240] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5240] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5240] close(3) = 0 [pid 5240] close(4) = 0 [pid 5240] close(5) = 0 [pid 5240] close(6) = 0 [pid 5240] close(7) = 0 [pid 5240] close(8) = -1 EBADF (Bad file descriptor) [pid 5240] close(9) = -1 EBADF (Bad file descriptor) [pid 5240] close(10) = -1 EBADF (Bad file descriptor) [pid 5240] close(11) = -1 EBADF (Bad file descriptor) [pid 5240] close(12) = -1 EBADF (Bad file descriptor) [pid 5240] close(13) = -1 EBADF (Bad file descriptor) [pid 5240] close(14) = -1 EBADF (Bad file descriptor) [pid 5240] close(15) = -1 EBADF (Bad file descriptor) [pid 5240] close(16) = -1 EBADF (Bad file descriptor) [pid 5240] close(17) = -1 EBADF (Bad file descriptor) [pid 5240] close(18) = -1 EBADF (Bad file descriptor) [pid 5240] close(19) = -1 EBADF (Bad file descriptor) [pid 5240] close(20) = -1 EBADF (Bad file descriptor) [pid 5240] close(21) = -1 EBADF (Bad file descriptor) [pid 5240] close(22) = -1 EBADF (Bad file descriptor) [pid 5240] close(23) = -1 EBADF (Bad file descriptor) [pid 5240] close(24) = -1 EBADF (Bad file descriptor) [pid 5240] close(25) = -1 EBADF (Bad file descriptor) [pid 5240] close(26) = -1 EBADF (Bad file descriptor) [pid 5240] close(27) = -1 EBADF (Bad file descriptor) [pid 5240] close(28) = -1 EBADF (Bad file descriptor) [pid 5240] close(29) = -1 EBADF (Bad file descriptor) [pid 5240] exit_group(0) = ? [pid 5240] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=141, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5241 attached , child_tidptr=0x555555eff5d0) = 142 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5241] setpgid(0, 0) = 0 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5241] write(3, "1000", 4) = 4 [pid 5241] close(3) = 0 [pid 5241] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5241] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 104.746748][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 104.754731][ T5240] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 104.762736][ T5240] [pid 5241] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5241] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5241] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5241] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5241] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5241] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5241] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5241] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5241] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5241] write(7, "5", 1) = 1 [ 104.820597][ T5241] FAULT_INJECTION: forcing a failure. [ 104.820597][ T5241] name failslab, interval 1, probability 0, space 0, times 0 [ 104.833296][ T5241] CPU: 0 PID: 5241 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 104.843970][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 104.854029][ T5241] Call Trace: [ 104.857308][ T5241] [ 104.860237][ T5241] dump_stack_lvl+0xd1/0x138 [ 104.864846][ T5241] should_fail_ex.cold+0x5/0xa [ 104.869635][ T5241] ? __inet_hash_connect+0x95e/0x1ba0 [ 104.875444][ T5241] should_failslab+0x9/0x20 [ 104.879953][ T5241] kmem_cache_alloc+0x5a/0x320 [ 104.884741][ T5241] __inet_hash_connect+0x95e/0x1ba0 [ 104.890772][ T5241] ? __inet_lookup_listener+0xbf0/0xbf0 [ 104.896358][ T5241] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 104.902724][ T5241] dccp_v4_connect+0xb82/0x1730 [ 104.907623][ T5241] __inet_stream_connect+0x69e/0xed0 [ 104.912951][ T5241] ? inet_listen+0x640/0x640 [ 104.917578][ T5241] ? mark_held_locks+0x9f/0xe0 [ 104.922365][ T5241] ? __local_bh_enable_ip+0xa4/0x130 [ 104.927674][ T5241] inet_stream_connect+0x57/0xa0 [ 104.932642][ T5241] ? __inet_stream_connect+0xed0/0xed0 [ 104.938130][ T5241] __sys_connect_file+0x153/0x1a0 [ 104.943173][ T5241] io_connect+0x3cc/0x720 [ 104.947541][ T5241] ? io_connect_prep+0x250/0x250 [ 104.952593][ T5241] ? receive_fd+0x110/0x110 [ 104.957138][ T5241] ? rcu_read_lock_sched_held+0x3e/0x70 [ 104.962703][ T5241] ? io_connect_prep+0x250/0x250 [ 104.967674][ T5241] io_issue_sqe+0x695/0x1250 [ 104.972292][ T5241] io_submit_sqes+0x96c/0x1e90 [ 104.977097][ T5241] __do_sys_io_uring_enter+0x103d/0x24e0 [ 104.982762][ T5241] ? io_submit_sqes+0x1e90/0x1e90 [ 104.987814][ T5241] ? ptrace_notify+0xfe/0x140 [ 104.992510][ T5241] ? lock_downgrade+0x6e0/0x6e0 [ 104.997388][ T5241] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.002612][ T5241] ? lockdep_hardirqs_on+0x7d/0x100 [ 105.007827][ T5241] ? _raw_spin_unlock_irq+0x2e/0x50 [ 105.013046][ T5241] ? ptrace_notify+0xfe/0x140 [ 105.017747][ T5241] do_syscall_64+0x39/0xb0 [ 105.022192][ T5241] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 105.028106][ T5241] RIP: 0033:0x7f607b0de549 [ 105.032533][ T5241] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 105.052356][ T5241] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 105.060875][ T5241] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5241] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5241] close(3) = 0 [pid 5241] close(4) = 0 [pid 5241] close(5) = 0 [pid 5241] close(6) = 0 [pid 5241] close(7) = 0 [pid 5241] close(8) = -1 EBADF (Bad file descriptor) [pid 5241] close(9) = -1 EBADF (Bad file descriptor) [pid 5241] close(10) = -1 EBADF (Bad file descriptor) [pid 5241] close(11) = -1 EBADF (Bad file descriptor) [pid 5241] close(12) = -1 EBADF (Bad file descriptor) [pid 5241] close(13) = -1 EBADF (Bad file descriptor) [pid 5241] close(14) = -1 EBADF (Bad file descriptor) [pid 5241] close(15) = -1 EBADF (Bad file descriptor) [pid 5241] close(16) = -1 EBADF (Bad file descriptor) [pid 5241] close(17) = -1 EBADF (Bad file descriptor) [pid 5241] close(18) = -1 EBADF (Bad file descriptor) [pid 5241] close(19) = -1 EBADF (Bad file descriptor) [pid 5241] close(20) = -1 EBADF (Bad file descriptor) [pid 5241] close(21) = -1 EBADF (Bad file descriptor) [pid 5241] close(22) = -1 EBADF (Bad file descriptor) [pid 5241] close(23) = -1 EBADF (Bad file descriptor) [pid 5241] close(24) = -1 EBADF (Bad file descriptor) [pid 5241] close(25) = -1 EBADF (Bad file descriptor) [pid 5241] close(26) = -1 EBADF (Bad file descriptor) [pid 5241] close(27) = -1 EBADF (Bad file descriptor) [pid 5241] close(28) = -1 EBADF (Bad file descriptor) [pid 5241] close(29) = -1 EBADF (Bad file descriptor) [pid 5241] exit_group(0) = ? [pid 5241] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=142, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 143 ./strace-static-x86_64: Process 5242 attached [pid 5242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5242] setpgid(0, 0) = 0 [pid 5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5242] write(3, "1000", 4) = 4 [pid 5242] close(3) = 0 [pid 5242] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5242] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5242] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5242] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5242] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5242] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5242] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 105.068861][ T5241] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 105.076934][ T5241] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 105.084925][ T5241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 105.093002][ T5241] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 105.101008][ T5241] [pid 5242] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5242] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5242] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5242] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5242] write(7, "5", 1) = 1 [ 105.157647][ T5242] FAULT_INJECTION: forcing a failure. [ 105.157647][ T5242] name failslab, interval 1, probability 0, space 0, times 0 [ 105.170484][ T5242] CPU: 0 PID: 5242 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 105.180418][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 105.190674][ T5242] Call Trace: [ 105.193957][ T5242] [ 105.196888][ T5242] dump_stack_lvl+0xd1/0x138 [ 105.201493][ T5242] should_fail_ex.cold+0x5/0xa [ 105.206689][ T5242] ? io_issue_sqe+0x695/0x1250 [ 105.211456][ T5242] should_failslab+0x9/0x20 [ 105.215978][ T5242] __kmem_cache_alloc_node+0x5b/0x330 [ 105.221373][ T5242] ? ref_tracker_alloc+0x158/0x560 [ 105.226492][ T5242] kmalloc_trace+0x26/0x60 [ 105.230936][ T5242] ref_tracker_alloc+0x158/0x560 [ 105.235917][ T5242] ? __lock_acquire+0xbc3/0x56d0 [ 105.240873][ T5242] ? ref_tracker_free+0x6b0/0x6b0 [ 105.245956][ T5242] dst_init+0xe4/0x520 [ 105.250050][ T5242] dst_alloc+0x16f/0x1f0 [ 105.255534][ T5242] rt_dst_alloc+0x55/0x430 [ 105.259981][ T5242] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 105.265999][ T5242] ip_route_output_key_hash+0x18f/0x340 [ 105.271573][ T5242] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 105.277861][ T5242] dccp_v4_connect+0x7e1/0x1730 [ 105.282771][ T5242] __inet_stream_connect+0x69e/0xed0 [ 105.288096][ T5242] ? inet_listen+0x640/0x640 [ 105.292721][ T5242] ? mark_held_locks+0x9f/0xe0 [ 105.297507][ T5242] ? __local_bh_enable_ip+0xa4/0x130 [ 105.302817][ T5242] inet_stream_connect+0x57/0xa0 [ 105.307784][ T5242] ? __inet_stream_connect+0xed0/0xed0 [ 105.313272][ T5242] __sys_connect_file+0x153/0x1a0 [ 105.318321][ T5242] io_connect+0x3cc/0x720 [ 105.322682][ T5242] ? io_connect_prep+0x250/0x250 [ 105.327646][ T5242] ? receive_fd+0x110/0x110 [ 105.332192][ T5242] ? rcu_read_lock_sched_held+0x3e/0x70 [ 105.337758][ T5242] ? io_connect_prep+0x250/0x250 [ 105.342735][ T5242] io_issue_sqe+0x695/0x1250 [ 105.347354][ T5242] io_submit_sqes+0x96c/0x1e90 [ 105.352161][ T5242] __do_sys_io_uring_enter+0x103d/0x24e0 [ 105.357826][ T5242] ? io_submit_sqes+0x1e90/0x1e90 [ 105.362886][ T5242] ? ptrace_notify+0xfe/0x140 [ 105.367583][ T5242] ? lock_downgrade+0x6e0/0x6e0 [ 105.372463][ T5242] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.377691][ T5242] ? lockdep_hardirqs_on+0x7d/0x100 [ 105.382913][ T5242] ? _raw_spin_unlock_irq+0x2e/0x50 [ 105.388136][ T5242] ? ptrace_notify+0xfe/0x140 [ 105.392842][ T5242] do_syscall_64+0x39/0xb0 [ 105.397297][ T5242] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 105.403210][ T5242] RIP: 0033:0x7f607b0de549 [ 105.407644][ T5242] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 105.427273][ T5242] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 105.435738][ T5242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 105.443723][ T5242] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5242] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5242] close(3) = 0 [pid 5242] close(4) = 0 [pid 5242] close(5) = 0 [pid 5242] close(6) = 0 [pid 5242] close(7) = 0 [pid 5242] close(8) = -1 EBADF (Bad file descriptor) [pid 5242] close(9) = -1 EBADF (Bad file descriptor) [pid 5242] close(10) = -1 EBADF (Bad file descriptor) [pid 5242] close(11) = -1 EBADF (Bad file descriptor) [pid 5242] close(12) = -1 EBADF (Bad file descriptor) [pid 5242] close(13) = -1 EBADF (Bad file descriptor) [pid 5242] close(14) = -1 EBADF (Bad file descriptor) [pid 5242] close(15) = -1 EBADF (Bad file descriptor) [pid 5242] close(16) = -1 EBADF (Bad file descriptor) [pid 5242] close(17) = -1 EBADF (Bad file descriptor) [pid 5242] close(18) = -1 EBADF (Bad file descriptor) [pid 5242] close(19) = -1 EBADF (Bad file descriptor) [pid 5242] close(20) = -1 EBADF (Bad file descriptor) [pid 5242] close(21) = -1 EBADF (Bad file descriptor) [pid 5242] close(22) = -1 EBADF (Bad file descriptor) [pid 5242] close(23) = -1 EBADF (Bad file descriptor) [pid 5242] close(24) = -1 EBADF (Bad file descriptor) [pid 5242] close(25) = -1 EBADF (Bad file descriptor) [pid 5242] close(26) = -1 EBADF (Bad file descriptor) [pid 5242] close(27) = -1 EBADF (Bad file descriptor) [pid 5242] close(28) = -1 EBADF (Bad file descriptor) [pid 5242] close(29) = -1 EBADF (Bad file descriptor) [pid 5242] exit_group(0) = ? [pid 5242] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=143, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 105.451809][ T5242] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 105.459807][ T5242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 105.467801][ T5242] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 105.475824][ T5242] [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 144 ./strace-static-x86_64: Process 5243 attached [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] setpgid(0, 0) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5243] write(3, "1000", 4) = 4 [pid 5243] close(3) = 0 [pid 5243] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5243] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5243] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5243] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5243] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5243] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5243] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5243] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5243] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5243] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5243] write(7, "5", 1) = 1 [ 105.549900][ T5243] FAULT_INJECTION: forcing a failure. [ 105.549900][ T5243] name failslab, interval 1, probability 0, space 0, times 0 [ 105.562592][ T5243] CPU: 0 PID: 5243 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 105.572504][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 105.582565][ T5243] Call Trace: [ 105.585850][ T5243] [ 105.588875][ T5243] dump_stack_lvl+0xd1/0x138 [ 105.593495][ T5243] should_fail_ex.cold+0x5/0xa [ 105.598295][ T5243] ? __inet_hash_connect+0x95e/0x1ba0 [ 105.603683][ T5243] should_failslab+0x9/0x20 [ 105.608198][ T5243] kmem_cache_alloc+0x5a/0x320 [ 105.612965][ T5243] __inet_hash_connect+0x95e/0x1ba0 [ 105.618180][ T5243] ? __inet_lookup_listener+0xbf0/0xbf0 [ 105.623822][ T5243] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 105.630256][ T5243] dccp_v4_connect+0xb82/0x1730 [ 105.635131][ T5243] __inet_stream_connect+0x69e/0xed0 [ 105.641084][ T5243] ? inet_listen+0x640/0x640 [ 105.645706][ T5243] ? mark_held_locks+0x9f/0xe0 [ 105.650475][ T5243] ? __local_bh_enable_ip+0xa4/0x130 [ 105.655768][ T5243] inet_stream_connect+0x57/0xa0 [ 105.660756][ T5243] ? __inet_stream_connect+0xed0/0xed0 [ 105.666294][ T5243] __sys_connect_file+0x153/0x1a0 [ 105.671323][ T5243] io_connect+0x3cc/0x720 [ 105.675663][ T5243] ? io_connect_prep+0x250/0x250 [ 105.680603][ T5243] ? receive_fd+0x110/0x110 [ 105.685145][ T5243] ? rcu_read_lock_sched_held+0x3e/0x70 [ 105.690726][ T5243] ? io_connect_prep+0x250/0x250 [ 105.695700][ T5243] io_issue_sqe+0x695/0x1250 [ 105.700310][ T5243] io_submit_sqes+0x96c/0x1e90 [ 105.705139][ T5243] __do_sys_io_uring_enter+0x103d/0x24e0 [ 105.710812][ T5243] ? io_submit_sqes+0x1e90/0x1e90 [ 105.715858][ T5243] ? ptrace_notify+0xfe/0x140 [ 105.720546][ T5243] ? lock_downgrade+0x6e0/0x6e0 [ 105.725425][ T5243] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.730643][ T5243] ? lockdep_hardirqs_on+0x7d/0x100 [ 105.735956][ T5243] ? _raw_spin_unlock_irq+0x2e/0x50 [ 105.741248][ T5243] ? ptrace_notify+0xfe/0x140 [ 105.745927][ T5243] do_syscall_64+0x39/0xb0 [ 105.750380][ T5243] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 105.756311][ T5243] RIP: 0033:0x7f607b0de549 [ 105.760730][ T5243] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 105.780351][ T5243] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 105.790787][ T5243] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5243] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5243] close(3) = 0 [pid 5243] close(4) = 0 [pid 5243] close(5) = 0 [pid 5243] close(6) = 0 [pid 5243] close(7) = 0 [pid 5243] close(8) = -1 EBADF (Bad file descriptor) [pid 5243] close(9) = -1 EBADF (Bad file descriptor) [pid 5243] close(10) = -1 EBADF (Bad file descriptor) [pid 5243] close(11) = -1 EBADF (Bad file descriptor) [pid 5243] close(12) = -1 EBADF (Bad file descriptor) [pid 5243] close(13) = -1 EBADF (Bad file descriptor) [pid 5243] close(14) = -1 EBADF (Bad file descriptor) [pid 5243] close(15) = -1 EBADF (Bad file descriptor) [pid 5243] close(16) = -1 EBADF (Bad file descriptor) [pid 5243] close(17) = -1 EBADF (Bad file descriptor) [pid 5243] close(18) = -1 EBADF (Bad file descriptor) [pid 5243] close(19) = -1 EBADF (Bad file descriptor) [pid 5243] close(20) = -1 EBADF (Bad file descriptor) [pid 5243] close(21) = -1 EBADF (Bad file descriptor) [pid 5243] close(22) = -1 EBADF (Bad file descriptor) [pid 5243] close(23) = -1 EBADF (Bad file descriptor) [pid 5243] close(24) = -1 EBADF (Bad file descriptor) [pid 5243] close(25) = -1 EBADF (Bad file descriptor) [pid 5243] close(26) = -1 EBADF (Bad file descriptor) [pid 5243] close(27) = -1 EBADF (Bad file descriptor) [pid 5243] close(28) = -1 EBADF (Bad file descriptor) [pid 5243] close(29) = -1 EBADF (Bad file descriptor) [pid 5243] exit_group(0) = ? [pid 5243] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=144, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 145 ./strace-static-x86_64: Process 5245 attached [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5245] setpgid(0, 0) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5245] write(3, "1000", 4) = 4 [pid 5245] close(3) = 0 [pid 5245] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5245] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5245] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5245] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5245] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5245] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5245] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5245] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5245] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5245] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5245] write(7, "5", 1) = 1 [ 105.798775][ T5243] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 105.806764][ T5243] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 105.814748][ T5243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 105.822740][ T5243] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 105.830726][ T5243] [ 105.874902][ T5245] FAULT_INJECTION: forcing a failure. [ 105.874902][ T5245] name failslab, interval 1, probability 0, space 0, times 0 [ 105.888051][ T5245] CPU: 0 PID: 5245 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 105.897978][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 105.908065][ T5245] Call Trace: [ 105.911343][ T5245] [ 105.914272][ T5245] dump_stack_lvl+0xd1/0x138 [ 105.918903][ T5245] should_fail_ex.cold+0x5/0xa [ 105.923696][ T5245] ? io_issue_sqe+0x695/0x1250 [ 105.928466][ T5245] should_failslab+0x9/0x20 [ 105.932998][ T5245] __kmem_cache_alloc_node+0x5b/0x330 [ 105.938398][ T5245] ? ref_tracker_alloc+0x158/0x560 [ 105.943533][ T5245] kmalloc_trace+0x26/0x60 [ 105.947981][ T5245] ref_tracker_alloc+0x158/0x560 [ 105.952946][ T5245] ? __lock_acquire+0xbc3/0x56d0 [ 105.957904][ T5245] ? ref_tracker_free+0x6b0/0x6b0 [ 105.962990][ T5245] dst_init+0xe4/0x520 [ 105.967172][ T5245] dst_alloc+0x16f/0x1f0 [ 105.971529][ T5245] rt_dst_alloc+0x55/0x430 [ 105.975976][ T5245] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 105.981994][ T5245] ip_route_output_key_hash+0x18f/0x340 [ 105.987572][ T5245] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 105.993866][ T5245] dccp_v4_connect+0x7e1/0x1730 [ 105.998769][ T5245] __inet_stream_connect+0x69e/0xed0 [ 106.004098][ T5245] ? inet_listen+0x640/0x640 [ 106.008720][ T5245] ? mark_held_locks+0x9f/0xe0 [ 106.013507][ T5245] ? __local_bh_enable_ip+0xa4/0x130 [ 106.018821][ T5245] inet_stream_connect+0x57/0xa0 [ 106.023875][ T5245] ? __inet_stream_connect+0xed0/0xed0 [ 106.029371][ T5245] __sys_connect_file+0x153/0x1a0 [ 106.034419][ T5245] io_connect+0x3cc/0x720 [ 106.038782][ T5245] ? io_connect_prep+0x250/0x250 [ 106.043746][ T5245] ? receive_fd+0x110/0x110 [ 106.048287][ T5245] ? rcu_read_lock_sched_held+0x3e/0x70 [ 106.054028][ T5245] ? io_connect_prep+0x250/0x250 [ 106.058997][ T5245] io_issue_sqe+0x695/0x1250 [ 106.063638][ T5245] io_submit_sqes+0x96c/0x1e90 [ 106.068479][ T5245] __do_sys_io_uring_enter+0x103d/0x24e0 [ 106.074161][ T5245] ? io_submit_sqes+0x1e90/0x1e90 [ 106.079219][ T5245] ? ptrace_notify+0xfe/0x140 [ 106.083916][ T5245] ? lock_downgrade+0x6e0/0x6e0 [ 106.088973][ T5245] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.094199][ T5245] ? lockdep_hardirqs_on+0x7d/0x100 [ 106.099419][ T5245] ? _raw_spin_unlock_irq+0x2e/0x50 [ 106.104644][ T5245] ? ptrace_notify+0xfe/0x140 [ 106.109363][ T5245] do_syscall_64+0x39/0xb0 [ 106.113808][ T5245] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 106.119725][ T5245] RIP: 0033:0x7f607b0de549 [ 106.124156][ T5245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 106.143787][ T5245] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 106.154241][ T5245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 106.162240][ T5245] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5245] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5245] close(3) = 0 [pid 5245] close(4) = 0 [pid 5245] close(5) = 0 [pid 5245] close(6) = 0 [pid 5245] close(7) = 0 [pid 5245] close(8) = -1 EBADF (Bad file descriptor) [pid 5245] close(9) = -1 EBADF (Bad file descriptor) [pid 5245] close(10) = -1 EBADF (Bad file descriptor) [pid 5245] close(11) = -1 EBADF (Bad file descriptor) [pid 5245] close(12) = -1 EBADF (Bad file descriptor) [pid 5245] close(13) = -1 EBADF (Bad file descriptor) [pid 5245] close(14) = -1 EBADF (Bad file descriptor) [pid 5245] close(15) = -1 EBADF (Bad file descriptor) [pid 5245] close(16) = -1 EBADF (Bad file descriptor) [pid 5245] close(17) = -1 EBADF (Bad file descriptor) [pid 5245] close(18) = -1 EBADF (Bad file descriptor) [pid 5245] close(19) = -1 EBADF (Bad file descriptor) [pid 5245] close(20) = -1 EBADF (Bad file descriptor) [pid 5245] close(21) = -1 EBADF (Bad file descriptor) [pid 5245] close(22) = -1 EBADF (Bad file descriptor) [pid 5245] close(23) = -1 EBADF (Bad file descriptor) [pid 5245] close(24) = -1 EBADF (Bad file descriptor) [pid 5245] close(25) = -1 EBADF (Bad file descriptor) [pid 5245] close(26) = -1 EBADF (Bad file descriptor) [pid 5245] close(27) = -1 EBADF (Bad file descriptor) [pid 5245] close(28) = -1 EBADF (Bad file descriptor) [pid 5245] close(29) = -1 EBADF (Bad file descriptor) [pid 5245] exit_group(0) = ? [pid 5245] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=145, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5246 attached , child_tidptr=0x555555eff5d0) = 146 [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5246] setpgid(0, 0) = 0 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5246] write(3, "1000", 4) = 4 [pid 5246] close(3) = 0 [pid 5246] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 106.170233][ T5245] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 106.178218][ T5245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 106.186290][ T5245] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 106.194297][ T5245] [pid 5246] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5246] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5246] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5246] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5246] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5246] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5246] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5246] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5246] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5246] write(7, "5", 1) = 1 [ 106.251994][ T5246] FAULT_INJECTION: forcing a failure. [ 106.251994][ T5246] name failslab, interval 1, probability 0, space 0, times 0 [ 106.265149][ T5246] CPU: 0 PID: 5246 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 106.275075][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 106.285223][ T5246] Call Trace: [ 106.288509][ T5246] [ 106.291446][ T5246] dump_stack_lvl+0xd1/0x138 [ 106.296069][ T5246] should_fail_ex.cold+0x5/0xa [ 106.300865][ T5246] ? io_issue_sqe+0x695/0x1250 [ 106.305647][ T5246] should_failslab+0x9/0x20 [ 106.310353][ T5246] __kmem_cache_alloc_node+0x5b/0x330 [ 106.315764][ T5246] ? ref_tracker_alloc+0x158/0x560 [ 106.320915][ T5246] kmalloc_trace+0x26/0x60 [ 106.325391][ T5246] ref_tracker_alloc+0x158/0x560 [ 106.330354][ T5246] ? __lock_acquire+0xbc3/0x56d0 [ 106.335300][ T5246] ? ref_tracker_free+0x6b0/0x6b0 [ 106.340374][ T5246] dst_init+0xe4/0x520 [ 106.344485][ T5246] dst_alloc+0x16f/0x1f0 [ 106.348737][ T5246] rt_dst_alloc+0x55/0x430 [ 106.353181][ T5246] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 106.359225][ T5246] ip_route_output_key_hash+0x18f/0x340 [ 106.364797][ T5246] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 106.371115][ T5246] dccp_v4_connect+0x7e1/0x1730 [ 106.376041][ T5246] __inet_stream_connect+0x69e/0xed0 [ 106.381378][ T5246] ? inet_listen+0x640/0x640 [ 106.386000][ T5246] ? mark_held_locks+0x9f/0xe0 [ 106.390794][ T5246] ? __local_bh_enable_ip+0xa4/0x130 [ 106.396105][ T5246] inet_stream_connect+0x57/0xa0 [ 106.401085][ T5246] ? __inet_stream_connect+0xed0/0xed0 [ 106.406551][ T5246] __sys_connect_file+0x153/0x1a0 [ 106.411581][ T5246] io_connect+0x3cc/0x720 [ 106.415920][ T5246] ? io_connect_prep+0x250/0x250 [ 106.421658][ T5246] ? receive_fd+0x110/0x110 [ 106.426232][ T5246] ? rcu_read_lock_sched_held+0x3e/0x70 [ 106.431821][ T5246] ? io_connect_prep+0x250/0x250 [ 106.436820][ T5246] io_issue_sqe+0x695/0x1250 [ 106.441428][ T5246] io_submit_sqes+0x96c/0x1e90 [ 106.446237][ T5246] __do_sys_io_uring_enter+0x103d/0x24e0 [ 106.451937][ T5246] ? io_submit_sqes+0x1e90/0x1e90 [ 106.456999][ T5246] ? ptrace_notify+0xfe/0x140 [ 106.461674][ T5246] ? lock_downgrade+0x6e0/0x6e0 [ 106.466550][ T5246] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.471883][ T5246] ? lockdep_hardirqs_on+0x7d/0x100 [ 106.477129][ T5246] ? _raw_spin_unlock_irq+0x2e/0x50 [ 106.482351][ T5246] ? ptrace_notify+0xfe/0x140 [ 106.487048][ T5246] do_syscall_64+0x39/0xb0 [ 106.491563][ T5246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 106.497460][ T5246] RIP: 0033:0x7f607b0de549 [ 106.501892][ T5246] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 106.521811][ T5246] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 106.530265][ T5246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 106.538255][ T5246] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5246] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5246] close(3) = 0 [pid 5246] close(4) = 0 [pid 5246] close(5) = 0 [pid 5246] close(6) = 0 [pid 5246] close(7) = 0 [pid 5246] close(8) = -1 EBADF (Bad file descriptor) [pid 5246] close(9) = -1 EBADF (Bad file descriptor) [pid 5246] close(10) = -1 EBADF (Bad file descriptor) [pid 5246] close(11) = -1 EBADF (Bad file descriptor) [pid 5246] close(12) = -1 EBADF (Bad file descriptor) [pid 5246] close(13) = -1 EBADF (Bad file descriptor) [pid 5246] close(14) = -1 EBADF (Bad file descriptor) [pid 5246] close(15) = -1 EBADF (Bad file descriptor) [pid 5246] close(16) = -1 EBADF (Bad file descriptor) [pid 5246] close(17) = -1 EBADF (Bad file descriptor) [pid 5246] close(18) = -1 EBADF (Bad file descriptor) [pid 5246] close(19) = -1 EBADF (Bad file descriptor) [pid 5246] close(20) = -1 EBADF (Bad file descriptor) [pid 5246] close(21) = -1 EBADF (Bad file descriptor) [pid 5246] close(22) = -1 EBADF (Bad file descriptor) [pid 5246] close(23) = -1 EBADF (Bad file descriptor) [pid 5246] close(24) = -1 EBADF (Bad file descriptor) [pid 5246] close(25) = -1 EBADF (Bad file descriptor) [pid 5246] close(26) = -1 EBADF (Bad file descriptor) [pid 5246] close(27) = -1 EBADF (Bad file descriptor) [pid 5246] close(28) = -1 EBADF (Bad file descriptor) [pid 5246] close(29) = -1 EBADF (Bad file descriptor) [pid 5246] exit_group(0) = ? [pid 5246] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=146, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 147 ./strace-static-x86_64: Process 5247 attached [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] setpgid(0, 0) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] write(3, "1000", 4) = 4 [pid 5247] close(3) = 0 [pid 5247] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5247] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5247] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5247] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5247] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5247] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5247] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5247] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5247] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5247] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5247] write(7, "5", 1) = 1 [ 106.546242][ T5246] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 106.554236][ T5246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 106.562220][ T5246] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 106.570237][ T5246] [ 106.606284][ T5247] FAULT_INJECTION: forcing a failure. [ 106.606284][ T5247] name failslab, interval 1, probability 0, space 0, times 0 [ 106.619090][ T5247] CPU: 0 PID: 5247 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 106.629079][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 106.639315][ T5247] Call Trace: [ 106.642598][ T5247] [ 106.645531][ T5247] dump_stack_lvl+0xd1/0x138 [ 106.650224][ T5247] should_fail_ex.cold+0x5/0xa [ 106.655014][ T5247] ? __inet_hash_connect+0x95e/0x1ba0 [ 106.660439][ T5247] should_failslab+0x9/0x20 [ 106.664962][ T5247] kmem_cache_alloc+0x5a/0x320 [ 106.669776][ T5247] __inet_hash_connect+0x95e/0x1ba0 [ 106.675024][ T5247] ? __inet_lookup_listener+0xbf0/0xbf0 [ 106.680591][ T5247] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 106.687474][ T5247] dccp_v4_connect+0xb82/0x1730 [ 106.692392][ T5247] __inet_stream_connect+0x69e/0xed0 [ 106.697728][ T5247] ? inet_listen+0x640/0x640 [ 106.702329][ T5247] ? mark_held_locks+0x9f/0xe0 [ 106.707100][ T5247] ? __local_bh_enable_ip+0xa4/0x130 [ 106.712412][ T5247] inet_stream_connect+0x57/0xa0 [ 106.717570][ T5247] ? __inet_stream_connect+0xed0/0xed0 [ 106.723045][ T5247] __sys_connect_file+0x153/0x1a0 [ 106.728098][ T5247] io_connect+0x3cc/0x720 [ 106.732461][ T5247] ? io_connect_prep+0x250/0x250 [ 106.737427][ T5247] ? receive_fd+0x110/0x110 [ 106.741964][ T5247] ? rcu_read_lock_sched_held+0x3e/0x70 [ 106.747530][ T5247] ? io_connect_prep+0x250/0x250 [ 106.752503][ T5247] io_issue_sqe+0x695/0x1250 [ 106.757122][ T5247] io_submit_sqes+0x96c/0x1e90 [ 106.761930][ T5247] __do_sys_io_uring_enter+0x103d/0x24e0 [ 106.767596][ T5247] ? io_submit_sqes+0x1e90/0x1e90 [ 106.772651][ T5247] ? ptrace_notify+0xfe/0x140 [ 106.777370][ T5247] ? lock_downgrade+0x6e0/0x6e0 [ 106.782244][ T5247] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.787473][ T5247] ? lockdep_hardirqs_on+0x7d/0x100 [ 106.792694][ T5247] ? _raw_spin_unlock_irq+0x2e/0x50 [ 106.797918][ T5247] ? ptrace_notify+0xfe/0x140 [ 106.802619][ T5247] do_syscall_64+0x39/0xb0 [ 106.807067][ T5247] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 106.813000][ T5247] RIP: 0033:0x7f607b0de549 [ 106.817441][ T5247] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 106.837092][ T5247] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 106.845537][ T5247] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5247] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5247] close(3) = 0 [pid 5247] close(4) = 0 [pid 5247] close(5) = 0 [pid 5247] close(6) = 0 [pid 5247] close(7) = 0 [pid 5247] close(8) = -1 EBADF (Bad file descriptor) [pid 5247] close(9) = -1 EBADF (Bad file descriptor) [pid 5247] close(10) = -1 EBADF (Bad file descriptor) [pid 5247] close(11) = -1 EBADF (Bad file descriptor) [pid 5247] close(12) = -1 EBADF (Bad file descriptor) [pid 5247] close(13) = -1 EBADF (Bad file descriptor) [pid 5247] close(14) = -1 EBADF (Bad file descriptor) [pid 5247] close(15) = -1 EBADF (Bad file descriptor) [pid 5247] close(16) = -1 EBADF (Bad file descriptor) [pid 5247] close(17) = -1 EBADF (Bad file descriptor) [pid 5247] close(18) = -1 EBADF (Bad file descriptor) [pid 5247] close(19) = -1 EBADF (Bad file descriptor) [pid 5247] close(20) = -1 EBADF (Bad file descriptor) [pid 5247] close(21) = -1 EBADF (Bad file descriptor) [pid 5247] close(22) = -1 EBADF (Bad file descriptor) [pid 5247] close(23) = -1 EBADF (Bad file descriptor) [pid 5247] close(24) = -1 EBADF (Bad file descriptor) [pid 5247] close(25) = -1 EBADF (Bad file descriptor) [pid 5247] close(26) = -1 EBADF (Bad file descriptor) [pid 5247] close(27) = -1 EBADF (Bad file descriptor) [pid 5247] close(28) = -1 EBADF (Bad file descriptor) [pid 5247] close(29) = -1 EBADF (Bad file descriptor) [pid 5247] exit_group(0) = ? [pid 5247] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=147, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 148 ./strace-static-x86_64: Process 5248 attached [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5248] setpgid(0, 0) = 0 [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5248] write(3, "1000", 4) = 4 [pid 5248] close(3) = 0 [pid 5248] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5248] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5248] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5248] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5248] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5248] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5248] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5248] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5248] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5248] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5248] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5248] write(7, "5", 1) = 1 [ 106.853525][ T5247] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 106.861508][ T5247] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 106.869496][ T5247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 106.877483][ T5247] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 106.885507][ T5247] [ 106.922674][ T5248] FAULT_INJECTION: forcing a failure. [ 106.922674][ T5248] name failslab, interval 1, probability 0, space 0, times 0 [ 106.935834][ T5248] CPU: 1 PID: 5248 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 106.945783][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 106.955863][ T5248] Call Trace: [ 106.959152][ T5248] [ 106.962112][ T5248] dump_stack_lvl+0xd1/0x138 [ 106.966758][ T5248] should_fail_ex.cold+0x5/0xa [ 106.971554][ T5248] ? io_issue_sqe+0x695/0x1250 [ 106.976370][ T5248] should_failslab+0x9/0x20 [ 106.980929][ T5248] __kmem_cache_alloc_node+0x5b/0x330 [ 106.986362][ T5248] ? ref_tracker_alloc+0x158/0x560 [ 106.991506][ T5248] kmalloc_trace+0x26/0x60 [ 106.995959][ T5248] ref_tracker_alloc+0x158/0x560 [ 107.000921][ T5248] ? __lock_acquire+0xbc3/0x56d0 [ 107.005890][ T5248] ? ref_tracker_free+0x6b0/0x6b0 [ 107.010970][ T5248] dst_init+0xe4/0x520 [ 107.015078][ T5248] dst_alloc+0x16f/0x1f0 [ 107.019347][ T5248] rt_dst_alloc+0x55/0x430 [ 107.023788][ T5248] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 107.029811][ T5248] ip_route_output_key_hash+0x18f/0x340 [ 107.035387][ T5248] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 107.041678][ T5248] dccp_v4_connect+0x7e1/0x1730 [ 107.046581][ T5248] __inet_stream_connect+0x69e/0xed0 [ 107.051993][ T5248] ? inet_listen+0x640/0x640 [ 107.056616][ T5248] ? mark_held_locks+0x9f/0xe0 [ 107.061402][ T5248] ? __local_bh_enable_ip+0xa4/0x130 [ 107.066722][ T5248] inet_stream_connect+0x57/0xa0 [ 107.071693][ T5248] ? __inet_stream_connect+0xed0/0xed0 [ 107.077190][ T5248] __sys_connect_file+0x153/0x1a0 [ 107.082240][ T5248] io_connect+0x3cc/0x720 [ 107.086601][ T5248] ? io_connect_prep+0x250/0x250 [ 107.091563][ T5248] ? receive_fd+0x110/0x110 [ 107.096101][ T5248] ? rcu_read_lock_sched_held+0x3e/0x70 [ 107.101665][ T5248] ? io_connect_prep+0x250/0x250 [ 107.106640][ T5248] io_issue_sqe+0x695/0x1250 [ 107.111266][ T5248] io_submit_sqes+0x96c/0x1e90 [ 107.116076][ T5248] __do_sys_io_uring_enter+0x103d/0x24e0 [ 107.121754][ T5248] ? io_submit_sqes+0x1e90/0x1e90 [ 107.126823][ T5248] ? ptrace_notify+0xfe/0x140 [ 107.131604][ T5248] ? lock_downgrade+0x6e0/0x6e0 [ 107.136480][ T5248] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.141722][ T5248] ? lockdep_hardirqs_on+0x7d/0x100 [ 107.147040][ T5248] ? _raw_spin_unlock_irq+0x2e/0x50 [ 107.152261][ T5248] ? ptrace_notify+0xfe/0x140 [ 107.156968][ T5248] do_syscall_64+0x39/0xb0 [ 107.161423][ T5248] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 107.167338][ T5248] RIP: 0033:0x7f607b0de549 [ 107.171768][ T5248] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 107.191392][ T5248] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 107.199831][ T5248] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 107.207817][ T5248] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 107.215806][ T5248] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5248] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5248] close(3) = 0 [pid 5248] close(4) = 0 [pid 5248] close(5) = 0 [pid 5248] close(6) = 0 [pid 5248] close(7) = 0 [pid 5248] close(8) = -1 EBADF (Bad file descriptor) [pid 5248] close(9) = -1 EBADF (Bad file descriptor) [pid 5248] close(10) = -1 EBADF (Bad file descriptor) [pid 5248] close(11) = -1 EBADF (Bad file descriptor) [pid 5248] close(12) = -1 EBADF (Bad file descriptor) [pid 5248] close(13) = -1 EBADF (Bad file descriptor) [pid 5248] close(14) = -1 EBADF (Bad file descriptor) [pid 5248] close(15) = -1 EBADF (Bad file descriptor) [pid 5248] close(16) = -1 EBADF (Bad file descriptor) [pid 5248] close(17) = -1 EBADF (Bad file descriptor) [pid 5248] close(18) = -1 EBADF (Bad file descriptor) [pid 5248] close(19) = -1 EBADF (Bad file descriptor) [pid 5248] close(20) = -1 EBADF (Bad file descriptor) [pid 5248] close(21) = -1 EBADF (Bad file descriptor) [pid 5248] close(22) = -1 EBADF (Bad file descriptor) [pid 5248] close(23) = -1 EBADF (Bad file descriptor) [pid 5248] close(24) = -1 EBADF (Bad file descriptor) [pid 5248] close(25) = -1 EBADF (Bad file descriptor) [pid 5248] close(26) = -1 EBADF (Bad file descriptor) [pid 5248] close(27) = -1 EBADF (Bad file descriptor) [pid 5248] close(28) = -1 EBADF (Bad file descriptor) [pid 5248] close(29) = -1 EBADF (Bad file descriptor) [pid 5248] exit_group(0) = ? [pid 5248] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=148, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 149 ./strace-static-x86_64: Process 5249 attached [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5249] setpgid(0, 0) = 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5249] write(3, "1000", 4) = 4 [pid 5249] close(3) = 0 [pid 5249] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5249] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5249] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5249] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5249] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5249] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5249] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5249] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5249] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5249] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5249] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5249] write(7, "5", 1) = 1 [ 107.223792][ T5248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 107.231774][ T5248] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 107.239878][ T5248] [ 107.275816][ T5249] FAULT_INJECTION: forcing a failure. [ 107.275816][ T5249] name failslab, interval 1, probability 0, space 0, times 0 [ 107.288527][ T5249] CPU: 0 PID: 5249 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 107.298424][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 107.308473][ T5249] Call Trace: [ 107.311744][ T5249] [ 107.314667][ T5249] dump_stack_lvl+0xd1/0x138 [ 107.319261][ T5249] should_fail_ex.cold+0x5/0xa [ 107.324024][ T5249] ? __inet_hash_connect+0x95e/0x1ba0 [ 107.329393][ T5249] should_failslab+0x9/0x20 [ 107.333897][ T5249] kmem_cache_alloc+0x5a/0x320 [ 107.338667][ T5249] __inet_hash_connect+0x95e/0x1ba0 [ 107.343906][ T5249] ? __inet_lookup_listener+0xbf0/0xbf0 [ 107.349499][ T5249] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 107.355849][ T5249] dccp_v4_connect+0xb82/0x1730 [ 107.360721][ T5249] __inet_stream_connect+0x69e/0xed0 [ 107.366026][ T5249] ? inet_listen+0x640/0x640 [ 107.370630][ T5249] ? mark_held_locks+0x9f/0xe0 [ 107.375411][ T5249] ? __local_bh_enable_ip+0xa4/0x130 [ 107.380725][ T5249] inet_stream_connect+0x57/0xa0 [ 107.385699][ T5249] ? __inet_stream_connect+0xed0/0xed0 [ 107.391187][ T5249] __sys_connect_file+0x153/0x1a0 [ 107.396250][ T5249] io_connect+0x3cc/0x720 [ 107.400619][ T5249] ? io_connect_prep+0x250/0x250 [ 107.405586][ T5249] ? receive_fd+0x110/0x110 [ 107.410131][ T5249] ? rcu_read_lock_sched_held+0x3e/0x70 [ 107.415698][ T5249] ? io_connect_prep+0x250/0x250 [ 107.420753][ T5249] io_issue_sqe+0x695/0x1250 [ 107.425460][ T5249] io_submit_sqes+0x96c/0x1e90 [ 107.430270][ T5249] __do_sys_io_uring_enter+0x103d/0x24e0 [ 107.435942][ T5249] ? io_submit_sqes+0x1e90/0x1e90 [ 107.440993][ T5249] ? ptrace_notify+0xfe/0x140 [ 107.445688][ T5249] ? lock_downgrade+0x6e0/0x6e0 [ 107.450563][ T5249] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.455792][ T5249] ? lockdep_hardirqs_on+0x7d/0x100 [ 107.461007][ T5249] ? _raw_spin_unlock_irq+0x2e/0x50 [ 107.466226][ T5249] ? ptrace_notify+0xfe/0x140 [ 107.470926][ T5249] do_syscall_64+0x39/0xb0 [ 107.475369][ T5249] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 107.481291][ T5249] RIP: 0033:0x7f607b0de549 [ 107.485723][ T5249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 107.505361][ T5249] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 107.513791][ T5249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5249] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5249] close(3) = 0 [pid 5249] close(4) = 0 [pid 5249] close(5) = 0 [pid 5249] close(6) = 0 [pid 5249] close(7) = 0 [pid 5249] close(8) = -1 EBADF (Bad file descriptor) [pid 5249] close(9) = -1 EBADF (Bad file descriptor) [pid 5249] close(10) = -1 EBADF (Bad file descriptor) [pid 5249] close(11) = -1 EBADF (Bad file descriptor) [pid 5249] close(12) = -1 EBADF (Bad file descriptor) [pid 5249] close(13) = -1 EBADF (Bad file descriptor) [pid 5249] close(14) = -1 EBADF (Bad file descriptor) [pid 5249] close(15) = -1 EBADF (Bad file descriptor) [pid 5249] close(16) = -1 EBADF (Bad file descriptor) [pid 5249] close(17) = -1 EBADF (Bad file descriptor) [pid 5249] close(18) = -1 EBADF (Bad file descriptor) [pid 5249] close(19) = -1 EBADF (Bad file descriptor) [pid 5249] close(20) = -1 EBADF (Bad file descriptor) [pid 5249] close(21) = -1 EBADF (Bad file descriptor) [pid 5249] close(22) = -1 EBADF (Bad file descriptor) [pid 5249] close(23) = -1 EBADF (Bad file descriptor) [pid 5249] close(24) = -1 EBADF (Bad file descriptor) [pid 5249] close(25) = -1 EBADF (Bad file descriptor) [pid 5249] close(26) = -1 EBADF (Bad file descriptor) [pid 5249] close(27) = -1 EBADF (Bad file descriptor) [pid 5249] close(28) = -1 EBADF (Bad file descriptor) [pid 5249] close(29) = -1 EBADF (Bad file descriptor) [pid 5249] exit_group(0) = ? [pid 5249] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=149, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5250 attached , child_tidptr=0x555555eff5d0) = 150 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5250] write(3, "1000", 4) = 4 [pid 5250] close(3) = 0 [pid 5250] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5250] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5250] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5250] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5250] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5250] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5250] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5250] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5250] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5250] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5250] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5250] write(7, "5", 1) = 1 [ 107.521774][ T5249] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 107.529756][ T5249] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 107.537746][ T5249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 107.545732][ T5249] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 107.553745][ T5249] [ 107.593730][ T5250] FAULT_INJECTION: forcing a failure. [ 107.593730][ T5250] name failslab, interval 1, probability 0, space 0, times 0 [ 107.606393][ T5250] CPU: 1 PID: 5250 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 107.616382][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 107.626448][ T5250] Call Trace: [ 107.629938][ T5250] [ 107.632871][ T5250] dump_stack_lvl+0xd1/0x138 [ 107.637472][ T5250] should_fail_ex.cold+0x5/0xa [ 107.642260][ T5250] ? __inet_hash_connect+0x95e/0x1ba0 [ 107.647678][ T5250] should_failslab+0x9/0x20 [ 107.652312][ T5250] kmem_cache_alloc+0x5a/0x320 [ 107.657087][ T5250] __inet_hash_connect+0x95e/0x1ba0 [ 107.662297][ T5250] ? __inet_lookup_listener+0xbf0/0xbf0 [ 107.667856][ T5250] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 107.674311][ T5250] dccp_v4_connect+0xb82/0x1730 [ 107.679201][ T5250] __inet_stream_connect+0x69e/0xed0 [ 107.684551][ T5250] ? inet_listen+0x640/0x640 [ 107.689168][ T5250] ? mark_held_locks+0x9f/0xe0 [ 107.693957][ T5250] ? __local_bh_enable_ip+0xa4/0x130 [ 107.699274][ T5250] inet_stream_connect+0x57/0xa0 [ 107.704236][ T5250] ? __inet_stream_connect+0xed0/0xed0 [ 107.709729][ T5250] __sys_connect_file+0x153/0x1a0 [ 107.714789][ T5250] io_connect+0x3cc/0x720 [ 107.719137][ T5250] ? io_connect_prep+0x250/0x250 [ 107.724098][ T5250] ? receive_fd+0x110/0x110 [ 107.728661][ T5250] ? rcu_read_lock_sched_held+0x3e/0x70 [ 107.734211][ T5250] ? io_connect_prep+0x250/0x250 [ 107.739246][ T5250] io_issue_sqe+0x695/0x1250 [ 107.743877][ T5250] io_submit_sqes+0x96c/0x1e90 [ 107.748725][ T5250] __do_sys_io_uring_enter+0x103d/0x24e0 [ 107.754474][ T5250] ? io_submit_sqes+0x1e90/0x1e90 [ 107.759519][ T5250] ? ptrace_notify+0xfe/0x140 [ 107.764225][ T5250] ? lock_downgrade+0x6e0/0x6e0 [ 107.769100][ T5250] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.774327][ T5250] ? lockdep_hardirqs_on+0x7d/0x100 [ 107.779558][ T5250] ? _raw_spin_unlock_irq+0x2e/0x50 [ 107.784761][ T5250] ? ptrace_notify+0xfe/0x140 [ 107.789446][ T5250] do_syscall_64+0x39/0xb0 [ 107.793872][ T5250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 107.799856][ T5250] RIP: 0033:0x7f607b0de549 [ 107.804297][ T5250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 107.823918][ T5250] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 107.832339][ T5250] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5250] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5250] close(3) = 0 [pid 5250] close(4) = 0 [pid 5250] close(5) = 0 [pid 5250] close(6) = 0 [pid 5250] close(7) = 0 [pid 5250] close(8) = -1 EBADF (Bad file descriptor) [pid 5250] close(9) = -1 EBADF (Bad file descriptor) [pid 5250] close(10) = -1 EBADF (Bad file descriptor) [pid 5250] close(11) = -1 EBADF (Bad file descriptor) [pid 5250] close(12) = -1 EBADF (Bad file descriptor) [pid 5250] close(13) = -1 EBADF (Bad file descriptor) [pid 5250] close(14) = -1 EBADF (Bad file descriptor) [pid 5250] close(15) = -1 EBADF (Bad file descriptor) [pid 5250] close(16) = -1 EBADF (Bad file descriptor) [pid 5250] close(17) = -1 EBADF (Bad file descriptor) [pid 5250] close(18) = -1 EBADF (Bad file descriptor) [pid 5250] close(19) = -1 EBADF (Bad file descriptor) [pid 5250] close(20) = -1 EBADF (Bad file descriptor) [pid 5250] close(21) = -1 EBADF (Bad file descriptor) [pid 5250] close(22) = -1 EBADF (Bad file descriptor) [pid 5250] close(23) = -1 EBADF (Bad file descriptor) [pid 5250] close(24) = -1 EBADF (Bad file descriptor) [pid 5250] close(25) = -1 EBADF (Bad file descriptor) [pid 5250] close(26) = -1 EBADF (Bad file descriptor) [pid 5250] close(27) = -1 EBADF (Bad file descriptor) [pid 5250] close(28) = -1 EBADF (Bad file descriptor) [pid 5250] close(29) = -1 EBADF (Bad file descriptor) [pid 5250] exit_group(0) = ? [pid 5250] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=150, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5251 attached , child_tidptr=0x555555eff5d0) = 151 [pid 5251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5251] setpgid(0, 0) = 0 [pid 5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5251] write(3, "1000", 4) = 4 [pid 5251] close(3) = 0 [pid 5251] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5251] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5251] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5251] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5251] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5251] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5251] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5251] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5251] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5251] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5251] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5251] write(7, "5", 1) = 1 [ 107.840327][ T5250] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 107.848320][ T5250] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 107.856304][ T5250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 107.864299][ T5250] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 107.872298][ T5250] [ 107.910143][ T5251] FAULT_INJECTION: forcing a failure. [ 107.910143][ T5251] name failslab, interval 1, probability 0, space 0, times 0 [ 107.922883][ T5251] CPU: 0 PID: 5251 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 107.932814][ T5251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 107.942902][ T5251] Call Trace: [ 107.946191][ T5251] [ 107.949196][ T5251] dump_stack_lvl+0xd1/0x138 [ 107.953882][ T5251] should_fail_ex.cold+0x5/0xa [ 107.958653][ T5251] ? __inet_hash_connect+0x95e/0x1ba0 [ 107.964039][ T5251] should_failslab+0x9/0x20 [ 107.968574][ T5251] kmem_cache_alloc+0x5a/0x320 [ 107.973341][ T5251] __inet_hash_connect+0x95e/0x1ba0 [ 107.978546][ T5251] ? __inet_lookup_listener+0xbf0/0xbf0 [ 107.984118][ T5251] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 107.990495][ T5251] dccp_v4_connect+0xb82/0x1730 [ 107.995393][ T5251] __inet_stream_connect+0x69e/0xed0 [ 108.000724][ T5251] ? inet_listen+0x640/0x640 [ 108.005353][ T5251] ? mark_held_locks+0x9f/0xe0 [ 108.010139][ T5251] ? __local_bh_enable_ip+0xa4/0x130 [ 108.015453][ T5251] inet_stream_connect+0x57/0xa0 [ 108.020422][ T5251] ? __inet_stream_connect+0xed0/0xed0 [ 108.025914][ T5251] __sys_connect_file+0x153/0x1a0 [ 108.030960][ T5251] io_connect+0x3cc/0x720 [ 108.035322][ T5251] ? io_connect_prep+0x250/0x250 [ 108.040287][ T5251] ? receive_fd+0x110/0x110 [ 108.044831][ T5251] ? rcu_read_lock_sched_held+0x3e/0x70 [ 108.050394][ T5251] ? io_connect_prep+0x250/0x250 [ 108.055367][ T5251] io_issue_sqe+0x695/0x1250 [ 108.059986][ T5251] io_submit_sqes+0x96c/0x1e90 [ 108.064799][ T5251] __do_sys_io_uring_enter+0x103d/0x24e0 [ 108.070569][ T5251] ? io_submit_sqes+0x1e90/0x1e90 [ 108.075637][ T5251] ? ptrace_notify+0xfe/0x140 [ 108.080338][ T5251] ? lock_downgrade+0x6e0/0x6e0 [ 108.085227][ T5251] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.090461][ T5251] ? lockdep_hardirqs_on+0x7d/0x100 [ 108.095678][ T5251] ? _raw_spin_unlock_irq+0x2e/0x50 [ 108.100895][ T5251] ? ptrace_notify+0xfe/0x140 [ 108.105618][ T5251] do_syscall_64+0x39/0xb0 [ 108.110064][ T5251] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 108.115976][ T5251] RIP: 0033:0x7f607b0de549 [ 108.120412][ T5251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 108.140039][ T5251] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 108.148486][ T5251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5251] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5251] close(3) = 0 [pid 5251] close(4) = 0 [pid 5251] close(5) = 0 [pid 5251] close(6) = 0 [pid 5251] close(7) = 0 [pid 5251] close(8) = -1 EBADF (Bad file descriptor) [pid 5251] close(9) = -1 EBADF (Bad file descriptor) [pid 5251] close(10) = -1 EBADF (Bad file descriptor) [pid 5251] close(11) = -1 EBADF (Bad file descriptor) [pid 5251] close(12) = -1 EBADF (Bad file descriptor) [pid 5251] close(13) = -1 EBADF (Bad file descriptor) [pid 5251] close(14) = -1 EBADF (Bad file descriptor) [pid 5251] close(15) = -1 EBADF (Bad file descriptor) [pid 5251] close(16) = -1 EBADF (Bad file descriptor) [pid 5251] close(17) = -1 EBADF (Bad file descriptor) [pid 5251] close(18) = -1 EBADF (Bad file descriptor) [pid 5251] close(19) = -1 EBADF (Bad file descriptor) [pid 5251] close(20) = -1 EBADF (Bad file descriptor) [pid 5251] close(21) = -1 EBADF (Bad file descriptor) [pid 5251] close(22) = -1 EBADF (Bad file descriptor) [pid 5251] close(23) = -1 EBADF (Bad file descriptor) [pid 5251] close(24) = -1 EBADF (Bad file descriptor) [pid 5251] close(25) = -1 EBADF (Bad file descriptor) [pid 5251] close(26) = -1 EBADF (Bad file descriptor) [pid 5251] close(27) = -1 EBADF (Bad file descriptor) [pid 5251] close(28) = -1 EBADF (Bad file descriptor) [pid 5251] close(29) = -1 EBADF (Bad file descriptor) [pid 5251] exit_group(0) = ? [pid 5251] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=151, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5252 attached , child_tidptr=0x555555eff5d0) = 152 [pid 5252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5252] setpgid(0, 0) = 0 [pid 5252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5252] write(3, "1000", 4) = 4 [pid 5252] close(3) = 0 [pid 5252] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5252] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5252] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5252] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5252] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5252] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5252] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5252] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5252] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5252] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5252] write(7, "5", 1) = 1 [ 108.156470][ T5251] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 108.164452][ T5251] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 108.172521][ T5251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 108.180504][ T5251] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 108.188520][ T5251] [ 108.238708][ T5252] FAULT_INJECTION: forcing a failure. [ 108.238708][ T5252] name failslab, interval 1, probability 0, space 0, times 0 [ 108.251744][ T5252] CPU: 0 PID: 5252 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 108.261685][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 108.271781][ T5252] Call Trace: [ 108.275073][ T5252] [ 108.278000][ T5252] dump_stack_lvl+0xd1/0x138 [ 108.282651][ T5252] should_fail_ex.cold+0x5/0xa [ 108.287426][ T5252] ? io_issue_sqe+0x695/0x1250 [ 108.292222][ T5252] should_failslab+0x9/0x20 [ 108.296737][ T5252] __kmem_cache_alloc_node+0x5b/0x330 [ 108.302107][ T5252] ? ref_tracker_alloc+0x158/0x560 [ 108.307230][ T5252] kmalloc_trace+0x26/0x60 [ 108.311674][ T5252] ref_tracker_alloc+0x158/0x560 [ 108.316647][ T5252] ? __lock_acquire+0xbc3/0x56d0 [ 108.321680][ T5252] ? ref_tracker_free+0x6b0/0x6b0 [ 108.326760][ T5252] dst_init+0xe4/0x520 [ 108.330832][ T5252] dst_alloc+0x16f/0x1f0 [ 108.335079][ T5252] rt_dst_alloc+0x55/0x430 [ 108.339498][ T5252] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 108.345693][ T5252] ip_route_output_key_hash+0x18f/0x340 [ 108.351282][ T5252] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 108.357545][ T5252] dccp_v4_connect+0x7e1/0x1730 [ 108.362440][ T5252] __inet_stream_connect+0x69e/0xed0 [ 108.367770][ T5252] ? inet_listen+0x640/0x640 [ 108.372366][ T5252] ? mark_held_locks+0x9f/0xe0 [ 108.377151][ T5252] ? __local_bh_enable_ip+0xa4/0x130 [ 108.382468][ T5252] inet_stream_connect+0x57/0xa0 [ 108.387422][ T5252] ? __inet_stream_connect+0xed0/0xed0 [ 108.392912][ T5252] __sys_connect_file+0x153/0x1a0 [ 108.397980][ T5252] io_connect+0x3cc/0x720 [ 108.402338][ T5252] ? io_connect_prep+0x250/0x250 [ 108.407306][ T5252] ? receive_fd+0x110/0x110 [ 108.411873][ T5252] ? rcu_read_lock_sched_held+0x3e/0x70 [ 108.417461][ T5252] ? io_connect_prep+0x250/0x250 [ 108.422439][ T5252] io_issue_sqe+0x695/0x1250 [ 108.427036][ T5252] io_submit_sqes+0x96c/0x1e90 [ 108.431843][ T5252] __do_sys_io_uring_enter+0x103d/0x24e0 [ 108.437531][ T5252] ? io_submit_sqes+0x1e90/0x1e90 [ 108.442593][ T5252] ? ptrace_notify+0xfe/0x140 [ 108.447303][ T5252] ? lock_downgrade+0x6e0/0x6e0 [ 108.452292][ T5252] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.457509][ T5252] ? lockdep_hardirqs_on+0x7d/0x100 [ 108.462738][ T5252] ? _raw_spin_unlock_irq+0x2e/0x50 [ 108.467939][ T5252] ? ptrace_notify+0xfe/0x140 [ 108.472626][ T5252] do_syscall_64+0x39/0xb0 [ 108.477049][ T5252] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 108.482960][ T5252] RIP: 0033:0x7f607b0de549 [ 108.487404][ T5252] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 108.507139][ T5252] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 108.515588][ T5252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 108.523566][ T5252] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 108.531549][ T5252] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5252] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5252] close(3) = 0 [pid 5252] close(4) = 0 [pid 5252] close(5) = 0 [pid 5252] close(6) = 0 [pid 5252] close(7) = 0 [pid 5252] close(8) = -1 EBADF (Bad file descriptor) [pid 5252] close(9) = -1 EBADF (Bad file descriptor) [pid 5252] close(10) = -1 EBADF (Bad file descriptor) [pid 5252] close(11) = -1 EBADF (Bad file descriptor) [pid 5252] close(12) = -1 EBADF (Bad file descriptor) [pid 5252] close(13) = -1 EBADF (Bad file descriptor) [pid 5252] close(14) = -1 EBADF (Bad file descriptor) [pid 5252] close(15) = -1 EBADF (Bad file descriptor) [pid 5252] close(16) = -1 EBADF (Bad file descriptor) [pid 5252] close(17) = -1 EBADF (Bad file descriptor) [pid 5252] close(18) = -1 EBADF (Bad file descriptor) [pid 5252] close(19) = -1 EBADF (Bad file descriptor) [pid 5252] close(20) = -1 EBADF (Bad file descriptor) [pid 5252] close(21) = -1 EBADF (Bad file descriptor) [pid 5252] close(22) = -1 EBADF (Bad file descriptor) [pid 5252] close(23) = -1 EBADF (Bad file descriptor) [pid 5252] close(24) = -1 EBADF (Bad file descriptor) [pid 5252] close(25) = -1 EBADF (Bad file descriptor) [pid 5252] close(26) = -1 EBADF (Bad file descriptor) [pid 5252] close(27) = -1 EBADF (Bad file descriptor) [pid 5252] close(28) = -1 EBADF (Bad file descriptor) [pid 5252] close(29) = -1 EBADF (Bad file descriptor) [pid 5252] exit_group(0) = ? [pid 5252] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=152, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5253 attached , child_tidptr=0x555555eff5d0) = 153 [pid 5253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5253] setpgid(0, 0) = 0 [pid 5253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5253] write(3, "1000", 4) = 4 [pid 5253] close(3) = 0 [ 108.539561][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 108.547545][ T5252] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 108.555568][ T5252] [pid 5253] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5253] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5253] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5253] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5253] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5253] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5253] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5253] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5253] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5253] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5253] write(7, "5", 1) = 1 [ 108.615294][ T5253] FAULT_INJECTION: forcing a failure. [ 108.615294][ T5253] name failslab, interval 1, probability 0, space 0, times 0 [ 108.628153][ T5253] CPU: 0 PID: 5253 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 108.638103][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 108.648171][ T5253] Call Trace: [ 108.651469][ T5253] [ 108.654406][ T5253] dump_stack_lvl+0xd1/0x138 [ 108.659003][ T5253] should_fail_ex.cold+0x5/0xa [ 108.663764][ T5253] ? io_issue_sqe+0x695/0x1250 [ 108.668534][ T5253] should_failslab+0x9/0x20 [ 108.673050][ T5253] __kmem_cache_alloc_node+0x5b/0x330 [ 108.678444][ T5253] ? ref_tracker_alloc+0x158/0x560 [ 108.683586][ T5253] kmalloc_trace+0x26/0x60 [ 108.688029][ T5253] ref_tracker_alloc+0x158/0x560 [ 108.692993][ T5253] ? __lock_acquire+0xbc3/0x56d0 [ 108.697952][ T5253] ? ref_tracker_free+0x6b0/0x6b0 [ 108.703027][ T5253] dst_init+0xe4/0x520 [ 108.707131][ T5253] dst_alloc+0x16f/0x1f0 [ 108.711410][ T5253] rt_dst_alloc+0x55/0x430 [ 108.715858][ T5253] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 108.721876][ T5253] ip_route_output_key_hash+0x18f/0x340 [ 108.727454][ T5253] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 108.733829][ T5253] dccp_v4_connect+0x7e1/0x1730 [ 108.738726][ T5253] __inet_stream_connect+0x69e/0xed0 [ 108.744055][ T5253] ? inet_listen+0x640/0x640 [ 108.748678][ T5253] ? mark_held_locks+0x9f/0xe0 [ 108.753465][ T5253] ? __local_bh_enable_ip+0xa4/0x130 [ 108.758787][ T5253] inet_stream_connect+0x57/0xa0 [ 108.763757][ T5253] ? __inet_stream_connect+0xed0/0xed0 [ 108.769246][ T5253] __sys_connect_file+0x153/0x1a0 [ 108.774304][ T5253] io_connect+0x3cc/0x720 [ 108.778670][ T5253] ? io_connect_prep+0x250/0x250 [ 108.783633][ T5253] ? receive_fd+0x110/0x110 [ 108.788177][ T5253] ? rcu_read_lock_sched_held+0x3e/0x70 [ 108.793746][ T5253] ? io_connect_prep+0x250/0x250 [ 108.798723][ T5253] io_issue_sqe+0x695/0x1250 [ 108.804649][ T5253] io_submit_sqes+0x96c/0x1e90 [ 108.809460][ T5253] __do_sys_io_uring_enter+0x103d/0x24e0 [ 108.815132][ T5253] ? io_submit_sqes+0x1e90/0x1e90 [ 108.820182][ T5253] ? ptrace_notify+0xfe/0x140 [ 108.824882][ T5253] ? lock_downgrade+0x6e0/0x6e0 [ 108.829764][ T5253] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.834986][ T5253] ? lockdep_hardirqs_on+0x7d/0x100 [ 108.840204][ T5253] ? _raw_spin_unlock_irq+0x2e/0x50 [ 108.845425][ T5253] ? ptrace_notify+0xfe/0x140 [ 108.850129][ T5253] do_syscall_64+0x39/0xb0 [ 108.854573][ T5253] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 108.860489][ T5253] RIP: 0033:0x7f607b0de549 [ 108.864926][ T5253] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 108.884550][ T5253] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 108.892982][ T5253] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 108.900964][ T5253] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 108.908947][ T5253] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5253] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5253] close(3) = 0 [pid 5253] close(4) = 0 [pid 5253] close(5) = 0 [pid 5253] close(6) = 0 [pid 5253] close(7) = 0 [pid 5253] close(8) = -1 EBADF (Bad file descriptor) [pid 5253] close(9) = -1 EBADF (Bad file descriptor) [pid 5253] close(10) = -1 EBADF (Bad file descriptor) [pid 5253] close(11) = -1 EBADF (Bad file descriptor) [pid 5253] close(12) = -1 EBADF (Bad file descriptor) [pid 5253] close(13) = -1 EBADF (Bad file descriptor) [pid 5253] close(14) = -1 EBADF (Bad file descriptor) [pid 5253] close(15) = -1 EBADF (Bad file descriptor) [pid 5253] close(16) = -1 EBADF (Bad file descriptor) [pid 5253] close(17) = -1 EBADF (Bad file descriptor) [pid 5253] close(18) = -1 EBADF (Bad file descriptor) [pid 5253] close(19) = -1 EBADF (Bad file descriptor) [pid 5253] close(20) = -1 EBADF (Bad file descriptor) [pid 5253] close(21) = -1 EBADF (Bad file descriptor) [pid 5253] close(22) = -1 EBADF (Bad file descriptor) [pid 5253] close(23) = -1 EBADF (Bad file descriptor) [pid 5253] close(24) = -1 EBADF (Bad file descriptor) [pid 5253] close(25) = -1 EBADF (Bad file descriptor) [pid 5253] close(26) = -1 EBADF (Bad file descriptor) [pid 5253] close(27) = -1 EBADF (Bad file descriptor) [pid 5253] close(28) = -1 EBADF (Bad file descriptor) [pid 5253] close(29) = -1 EBADF (Bad file descriptor) [pid 5253] exit_group(0) = ? [pid 5253] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=153, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 154 ./strace-static-x86_64: Process 5254 attached [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5254] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5254] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [ 108.916932][ T5253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 108.924917][ T5253] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 108.932925][ T5253] [pid 5254] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5254] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5254] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5254] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5254] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5254] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5254] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5254] write(7, "5", 1) = 1 [ 108.985141][ T5254] FAULT_INJECTION: forcing a failure. [ 108.985141][ T5254] name failslab, interval 1, probability 0, space 0, times 0 [ 108.998169][ T5254] CPU: 0 PID: 5254 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 109.008069][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 109.018124][ T5254] Call Trace: [ 109.021416][ T5254] [ 109.024341][ T5254] dump_stack_lvl+0xd1/0x138 [ 109.028953][ T5254] should_fail_ex.cold+0x5/0xa [ 109.033742][ T5254] ? io_issue_sqe+0x695/0x1250 [ 109.038511][ T5254] should_failslab+0x9/0x20 [ 109.043039][ T5254] __kmem_cache_alloc_node+0x5b/0x330 [ 109.048438][ T5254] ? ref_tracker_alloc+0x158/0x560 [ 109.053573][ T5254] kmalloc_trace+0x26/0x60 [ 109.058025][ T5254] ref_tracker_alloc+0x158/0x560 [ 109.062996][ T5254] ? __lock_acquire+0xbc3/0x56d0 [ 109.067951][ T5254] ? ref_tracker_free+0x6b0/0x6b0 [ 109.073033][ T5254] dst_init+0xe4/0x520 [ 109.077129][ T5254] dst_alloc+0x16f/0x1f0 [ 109.081395][ T5254] rt_dst_alloc+0x55/0x430 [ 109.085840][ T5254] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 109.091866][ T5254] ip_route_output_key_hash+0x18f/0x340 [ 109.097445][ T5254] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 109.103737][ T5254] dccp_v4_connect+0x7e1/0x1730 [ 109.108638][ T5254] __inet_stream_connect+0x69e/0xed0 [ 109.113970][ T5254] ? inet_listen+0x640/0x640 [ 109.118609][ T5254] ? mark_held_locks+0x9f/0xe0 [ 109.123395][ T5254] ? __local_bh_enable_ip+0xa4/0x130 [ 109.128712][ T5254] inet_stream_connect+0x57/0xa0 [ 109.133681][ T5254] ? __inet_stream_connect+0xed0/0xed0 [ 109.139173][ T5254] __sys_connect_file+0x153/0x1a0 [ 109.144221][ T5254] io_connect+0x3cc/0x720 [ 109.148584][ T5254] ? io_connect_prep+0x250/0x250 [ 109.153549][ T5254] ? receive_fd+0x110/0x110 [ 109.158091][ T5254] ? rcu_read_lock_sched_held+0x3e/0x70 [ 109.163925][ T5254] ? io_connect_prep+0x250/0x250 [ 109.168901][ T5254] io_issue_sqe+0x695/0x1250 [ 109.173524][ T5254] io_submit_sqes+0x96c/0x1e90 [ 109.178333][ T5254] __do_sys_io_uring_enter+0x103d/0x24e0 [ 109.184004][ T5254] ? io_submit_sqes+0x1e90/0x1e90 [ 109.189060][ T5254] ? ptrace_notify+0xfe/0x140 [ 109.193756][ T5254] ? lock_downgrade+0x6e0/0x6e0 [ 109.198638][ T5254] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.203865][ T5254] ? lockdep_hardirqs_on+0x7d/0x100 [ 109.209087][ T5254] ? _raw_spin_unlock_irq+0x2e/0x50 [ 109.214311][ T5254] ? ptrace_notify+0xfe/0x140 [ 109.219105][ T5254] do_syscall_64+0x39/0xb0 [ 109.223551][ T5254] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 109.229467][ T5254] RIP: 0033:0x7f607b0de549 [ 109.233895][ T5254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 109.253523][ T5254] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 109.261960][ T5254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 109.269944][ T5254] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 109.277930][ T5254] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5254] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5254] close(3) = 0 [pid 5254] close(4) = 0 [pid 5254] close(5) = 0 [pid 5254] close(6) = 0 [pid 5254] close(7) = 0 [pid 5254] close(8) = -1 EBADF (Bad file descriptor) [pid 5254] close(9) = -1 EBADF (Bad file descriptor) [pid 5254] close(10) = -1 EBADF (Bad file descriptor) [pid 5254] close(11) = -1 EBADF (Bad file descriptor) [pid 5254] close(12) = -1 EBADF (Bad file descriptor) [pid 5254] close(13) = -1 EBADF (Bad file descriptor) [pid 5254] close(14) = -1 EBADF (Bad file descriptor) [pid 5254] close(15) = -1 EBADF (Bad file descriptor) [pid 5254] close(16) = -1 EBADF (Bad file descriptor) [pid 5254] close(17) = -1 EBADF (Bad file descriptor) [pid 5254] close(18) = -1 EBADF (Bad file descriptor) [pid 5254] close(19) = -1 EBADF (Bad file descriptor) [pid 5254] close(20) = -1 EBADF (Bad file descriptor) [pid 5254] close(21) = -1 EBADF (Bad file descriptor) [pid 5254] close(22) = -1 EBADF (Bad file descriptor) [pid 5254] close(23) = -1 EBADF (Bad file descriptor) [pid 5254] close(24) = -1 EBADF (Bad file descriptor) [pid 5254] close(25) = -1 EBADF (Bad file descriptor) [pid 5254] close(26) = -1 EBADF (Bad file descriptor) [pid 5254] close(27) = -1 EBADF (Bad file descriptor) [pid 5254] close(28) = -1 EBADF (Bad file descriptor) [pid 5254] close(29) = -1 EBADF (Bad file descriptor) [pid 5254] exit_group(0) = ? [pid 5254] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=154, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5256 attached , child_tidptr=0x555555eff5d0) = 155 [pid 5256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] setpgid(0, 0) = 0 [pid 5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5256] write(3, "1000", 4) = 4 [pid 5256] close(3) = 0 [pid 5256] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5256] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5256] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5256] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5256] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5256] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5256] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5256] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5256] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5256] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5256] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5256] write(7, "5", 1) = 1 [ 109.285921][ T5254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 109.293907][ T5254] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 109.301913][ T5254] [ 109.338384][ T5256] FAULT_INJECTION: forcing a failure. [ 109.338384][ T5256] name failslab, interval 1, probability 0, space 0, times 0 [ 109.351086][ T5256] CPU: 0 PID: 5256 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 109.360988][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 109.371065][ T5256] Call Trace: [ 109.374345][ T5256] [ 109.377274][ T5256] dump_stack_lvl+0xd1/0x138 [ 109.381874][ T5256] should_fail_ex.cold+0x5/0xa [ 109.386691][ T5256] ? __inet_hash_connect+0x95e/0x1ba0 [ 109.392121][ T5256] should_failslab+0x9/0x20 [ 109.396670][ T5256] kmem_cache_alloc+0x5a/0x320 [ 109.401440][ T5256] __inet_hash_connect+0x95e/0x1ba0 [ 109.406650][ T5256] ? __inet_lookup_listener+0xbf0/0xbf0 [ 109.412305][ T5256] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 109.418648][ T5256] dccp_v4_connect+0xb82/0x1730 [ 109.423545][ T5256] __inet_stream_connect+0x69e/0xed0 [ 109.429320][ T5256] ? inet_listen+0x640/0x640 [ 109.433920][ T5256] ? mark_held_locks+0x9f/0xe0 [ 109.438696][ T5256] ? __local_bh_enable_ip+0xa4/0x130 [ 109.443986][ T5256] inet_stream_connect+0x57/0xa0 [ 109.448944][ T5256] ? __inet_stream_connect+0xed0/0xed0 [ 109.454447][ T5256] __sys_connect_file+0x153/0x1a0 [ 109.459487][ T5256] io_connect+0x3cc/0x720 [ 109.463848][ T5256] ? io_connect_prep+0x250/0x250 [ 109.468826][ T5256] ? receive_fd+0x110/0x110 [ 109.473366][ T5256] ? rcu_read_lock_sched_held+0x3e/0x70 [ 109.478931][ T5256] ? io_connect_prep+0x250/0x250 [ 109.483924][ T5256] io_issue_sqe+0x695/0x1250 [ 109.488560][ T5256] io_submit_sqes+0x96c/0x1e90 [ 109.493382][ T5256] __do_sys_io_uring_enter+0x103d/0x24e0 [ 109.499062][ T5256] ? io_submit_sqes+0x1e90/0x1e90 [ 109.504121][ T5256] ? ptrace_notify+0xfe/0x140 [ 109.508901][ T5256] ? lock_downgrade+0x6e0/0x6e0 [ 109.513780][ T5256] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.519006][ T5256] ? lockdep_hardirqs_on+0x7d/0x100 [ 109.524231][ T5256] ? _raw_spin_unlock_irq+0x2e/0x50 [ 109.529452][ T5256] ? ptrace_notify+0xfe/0x140 [ 109.534151][ T5256] do_syscall_64+0x39/0xb0 [ 109.538602][ T5256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 109.544537][ T5256] RIP: 0033:0x7f607b0de549 [ 109.548993][ T5256] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 109.568634][ T5256] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 109.577067][ T5256] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5256] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5256] close(3) = 0 [pid 5256] close(4) = 0 [pid 5256] close(5) = 0 [pid 5256] close(6) = 0 [pid 5256] close(7) = 0 [pid 5256] close(8) = -1 EBADF (Bad file descriptor) [pid 5256] close(9) = -1 EBADF (Bad file descriptor) [pid 5256] close(10) = -1 EBADF (Bad file descriptor) [pid 5256] close(11) = -1 EBADF (Bad file descriptor) [pid 5256] close(12) = -1 EBADF (Bad file descriptor) [pid 5256] close(13) = -1 EBADF (Bad file descriptor) [pid 5256] close(14) = -1 EBADF (Bad file descriptor) [pid 5256] close(15) = -1 EBADF (Bad file descriptor) [pid 5256] close(16) = -1 EBADF (Bad file descriptor) [pid 5256] close(17) = -1 EBADF (Bad file descriptor) [pid 5256] close(18) = -1 EBADF (Bad file descriptor) [pid 5256] close(19) = -1 EBADF (Bad file descriptor) [pid 5256] close(20) = -1 EBADF (Bad file descriptor) [pid 5256] close(21) = -1 EBADF (Bad file descriptor) [pid 5256] close(22) = -1 EBADF (Bad file descriptor) [pid 5256] close(23) = -1 EBADF (Bad file descriptor) [pid 5256] close(24) = -1 EBADF (Bad file descriptor) [pid 5256] close(25) = -1 EBADF (Bad file descriptor) [pid 5256] close(26) = -1 EBADF (Bad file descriptor) [pid 5256] close(27) = -1 EBADF (Bad file descriptor) [pid 5256] close(28) = -1 EBADF (Bad file descriptor) [pid 5256] close(29) = -1 EBADF (Bad file descriptor) [pid 5256] exit_group(0) = ? [pid 5256] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=155, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 156 ./strace-static-x86_64: Process 5257 attached [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5257] setpgid(0, 0) = 0 [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5257] write(3, "1000", 4) = 4 [pid 5257] close(3) = 0 [pid 5257] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5257] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5257] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5257] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5257] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5257] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5257] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5257] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5257] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5257] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5257] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5257] write(7, "5", 1) = 1 [ 109.585051][ T5256] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 109.593046][ T5256] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 109.601033][ T5256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 109.609046][ T5256] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 109.617082][ T5256] [ 109.658790][ T5257] FAULT_INJECTION: forcing a failure. [ 109.658790][ T5257] name failslab, interval 1, probability 0, space 0, times 0 [ 109.671966][ T5257] CPU: 0 PID: 5257 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 109.681911][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 109.691999][ T5257] Call Trace: [ 109.695299][ T5257] [ 109.698225][ T5257] dump_stack_lvl+0xd1/0x138 [ 109.702827][ T5257] should_fail_ex.cold+0x5/0xa [ 109.707607][ T5257] ? io_issue_sqe+0x695/0x1250 [ 109.712407][ T5257] should_failslab+0x9/0x20 [ 109.716924][ T5257] __kmem_cache_alloc_node+0x5b/0x330 [ 109.722298][ T5257] ? ref_tracker_alloc+0x158/0x560 [ 109.727435][ T5257] kmalloc_trace+0x26/0x60 [ 109.731898][ T5257] ref_tracker_alloc+0x158/0x560 [ 109.736869][ T5257] ? __lock_acquire+0xbc3/0x56d0 [ 109.741826][ T5257] ? ref_tracker_free+0x6b0/0x6b0 [ 109.746905][ T5257] dst_init+0xe4/0x520 [ 109.750984][ T5257] dst_alloc+0x16f/0x1f0 [ 109.755226][ T5257] rt_dst_alloc+0x55/0x430 [ 109.759653][ T5257] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 109.765644][ T5257] ip_route_output_key_hash+0x18f/0x340 [ 109.771466][ T5257] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 109.777754][ T5257] dccp_v4_connect+0x7e1/0x1730 [ 109.782650][ T5257] __inet_stream_connect+0x69e/0xed0 [ 109.787947][ T5257] ? inet_listen+0x640/0x640 [ 109.792543][ T5257] ? mark_held_locks+0x9f/0xe0 [ 109.797323][ T5257] ? __local_bh_enable_ip+0xa4/0x130 [ 109.802642][ T5257] inet_stream_connect+0x57/0xa0 [ 109.807592][ T5257] ? __inet_stream_connect+0xed0/0xed0 [ 109.813071][ T5257] __sys_connect_file+0x153/0x1a0 [ 109.818135][ T5257] io_connect+0x3cc/0x720 [ 109.822474][ T5257] ? io_connect_prep+0x250/0x250 [ 109.827432][ T5257] ? receive_fd+0x110/0x110 [ 109.832002][ T5257] ? rcu_read_lock_sched_held+0x3e/0x70 [ 109.837590][ T5257] ? io_connect_prep+0x250/0x250 [ 109.842566][ T5257] io_issue_sqe+0x695/0x1250 [ 109.847163][ T5257] io_submit_sqes+0x96c/0x1e90 [ 109.851968][ T5257] __do_sys_io_uring_enter+0x103d/0x24e0 [ 109.857658][ T5257] ? io_submit_sqes+0x1e90/0x1e90 [ 109.862724][ T5257] ? ptrace_notify+0xfe/0x140 [ 109.867413][ T5257] ? lock_downgrade+0x6e0/0x6e0 [ 109.872292][ T5257] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.877519][ T5257] ? lockdep_hardirqs_on+0x7d/0x100 [ 109.882721][ T5257] ? _raw_spin_unlock_irq+0x2e/0x50 [ 109.887930][ T5257] ? ptrace_notify+0xfe/0x140 [ 109.892614][ T5257] do_syscall_64+0x39/0xb0 [ 109.897036][ T5257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 109.902933][ T5257] RIP: 0033:0x7f607b0de549 [ 109.907344][ T5257] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 109.926974][ T5257] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 109.935395][ T5257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 109.943370][ T5257] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 109.951343][ T5257] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5257] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5257] close(3) = 0 [pid 5257] close(4) = 0 [pid 5257] close(5) = 0 [pid 5257] close(6) = 0 [pid 5257] close(7) = 0 [pid 5257] close(8) = -1 EBADF (Bad file descriptor) [pid 5257] close(9) = -1 EBADF (Bad file descriptor) [pid 5257] close(10) = -1 EBADF (Bad file descriptor) [pid 5257] close(11) = -1 EBADF (Bad file descriptor) [pid 5257] close(12) = -1 EBADF (Bad file descriptor) [pid 5257] close(13) = -1 EBADF (Bad file descriptor) [pid 5257] close(14) = -1 EBADF (Bad file descriptor) [pid 5257] close(15) = -1 EBADF (Bad file descriptor) [pid 5257] close(16) = -1 EBADF (Bad file descriptor) [pid 5257] close(17) = -1 EBADF (Bad file descriptor) [pid 5257] close(18) = -1 EBADF (Bad file descriptor) [pid 5257] close(19) = -1 EBADF (Bad file descriptor) [pid 5257] close(20) = -1 EBADF (Bad file descriptor) [pid 5257] close(21) = -1 EBADF (Bad file descriptor) [pid 5257] close(22) = -1 EBADF (Bad file descriptor) [pid 5257] close(23) = -1 EBADF (Bad file descriptor) [pid 5257] close(24) = -1 EBADF (Bad file descriptor) [pid 5257] close(25) = -1 EBADF (Bad file descriptor) [pid 5257] close(26) = -1 EBADF (Bad file descriptor) [pid 5257] close(27) = -1 EBADF (Bad file descriptor) [pid 5257] close(28) = -1 EBADF (Bad file descriptor) [pid 5257] close(29) = -1 EBADF (Bad file descriptor) [pid 5257] exit_group(0) = ? [pid 5257] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=156, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 157 ./strace-static-x86_64: Process 5258 attached [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5258] setpgid(0, 0) = 0 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5258] write(3, "1000", 4) = 4 [ 109.959316][ T5257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 109.967310][ T5257] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 109.975317][ T5257] [pid 5258] close(3) = 0 [pid 5258] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5258] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5258] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5258] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5258] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5258] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5258] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5258] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5258] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5258] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5258] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5258] write(7, "5", 1) = 1 [ 110.048843][ T5258] FAULT_INJECTION: forcing a failure. [ 110.048843][ T5258] name failslab, interval 1, probability 0, space 0, times 0 [ 110.061636][ T5258] CPU: 0 PID: 5258 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 110.071543][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 110.081634][ T5258] Call Trace: [ 110.084927][ T5258] [ 110.087855][ T5258] dump_stack_lvl+0xd1/0x138 [ 110.092454][ T5258] should_fail_ex.cold+0x5/0xa [ 110.097218][ T5258] ? io_issue_sqe+0x695/0x1250 [ 110.102007][ T5258] should_failslab+0x9/0x20 [ 110.106552][ T5258] __kmem_cache_alloc_node+0x5b/0x330 [ 110.111938][ T5258] ? ref_tracker_alloc+0x158/0x560 [ 110.117286][ T5258] kmalloc_trace+0x26/0x60 [ 110.121746][ T5258] ref_tracker_alloc+0x158/0x560 [ 110.126737][ T5258] ? __lock_acquire+0xbc3/0x56d0 [ 110.131703][ T5258] ? ref_tracker_free+0x6b0/0x6b0 [ 110.136784][ T5258] dst_init+0xe4/0x520 [ 110.140885][ T5258] dst_alloc+0x16f/0x1f0 [ 110.145156][ T5258] rt_dst_alloc+0x55/0x430 [ 110.149602][ T5258] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 110.155620][ T5258] ip_route_output_key_hash+0x18f/0x340 [ 110.161193][ T5258] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 110.167485][ T5258] dccp_v4_connect+0x7e1/0x1730 [ 110.172389][ T5258] __inet_stream_connect+0x69e/0xed0 [ 110.177717][ T5258] ? inet_listen+0x640/0x640 [ 110.182343][ T5258] ? mark_held_locks+0x9f/0xe0 [ 110.187130][ T5258] ? __local_bh_enable_ip+0xa4/0x130 [ 110.192443][ T5258] inet_stream_connect+0x57/0xa0 [ 110.197415][ T5258] ? __inet_stream_connect+0xed0/0xed0 [ 110.202913][ T5258] __sys_connect_file+0x153/0x1a0 [ 110.207961][ T5258] io_connect+0x3cc/0x720 [ 110.212331][ T5258] ? io_connect_prep+0x250/0x250 [ 110.217298][ T5258] ? receive_fd+0x110/0x110 [ 110.221841][ T5258] ? rcu_read_lock_sched_held+0x3e/0x70 [ 110.227408][ T5258] ? io_connect_prep+0x250/0x250 [ 110.232379][ T5258] io_issue_sqe+0x695/0x1250 [ 110.237000][ T5258] io_submit_sqes+0x96c/0x1e90 [ 110.241809][ T5258] __do_sys_io_uring_enter+0x103d/0x24e0 [ 110.247482][ T5258] ? io_submit_sqes+0x1e90/0x1e90 [ 110.252542][ T5258] ? ptrace_notify+0xfe/0x140 [ 110.257239][ T5258] ? lock_downgrade+0x6e0/0x6e0 [ 110.262117][ T5258] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.267341][ T5258] ? lockdep_hardirqs_on+0x7d/0x100 [ 110.272557][ T5258] ? _raw_spin_unlock_irq+0x2e/0x50 [ 110.277780][ T5258] ? ptrace_notify+0xfe/0x140 [ 110.282485][ T5258] do_syscall_64+0x39/0xb0 [ 110.286934][ T5258] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 110.292852][ T5258] RIP: 0033:0x7f607b0de549 [ 110.297286][ T5258] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 110.316913][ T5258] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 110.325350][ T5258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 110.333427][ T5258] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 110.341416][ T5258] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5258] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5258] close(3) = 0 [pid 5258] close(4) = 0 [pid 5258] close(5) = 0 [pid 5258] close(6) = 0 [pid 5258] close(7) = 0 [pid 5258] close(8) = -1 EBADF (Bad file descriptor) [pid 5258] close(9) = -1 EBADF (Bad file descriptor) [pid 5258] close(10) = -1 EBADF (Bad file descriptor) [pid 5258] close(11) = -1 EBADF (Bad file descriptor) [pid 5258] close(12) = -1 EBADF (Bad file descriptor) [pid 5258] close(13) = -1 EBADF (Bad file descriptor) [pid 5258] close(14) = -1 EBADF (Bad file descriptor) [pid 5258] close(15) = -1 EBADF (Bad file descriptor) [pid 5258] close(16) = -1 EBADF (Bad file descriptor) [pid 5258] close(17) = -1 EBADF (Bad file descriptor) [pid 5258] close(18) = -1 EBADF (Bad file descriptor) [pid 5258] close(19) = -1 EBADF (Bad file descriptor) [pid 5258] close(20) = -1 EBADF (Bad file descriptor) [pid 5258] close(21) = -1 EBADF (Bad file descriptor) [pid 5258] close(22) = -1 EBADF (Bad file descriptor) [pid 5258] close(23) = -1 EBADF (Bad file descriptor) [pid 5258] close(24) = -1 EBADF (Bad file descriptor) [pid 5258] close(25) = -1 EBADF (Bad file descriptor) [pid 5258] close(26) = -1 EBADF (Bad file descriptor) [pid 5258] close(27) = -1 EBADF (Bad file descriptor) [pid 5258] close(28) = -1 EBADF (Bad file descriptor) [pid 5258] close(29) = -1 EBADF (Bad file descriptor) [pid 5258] exit_group(0) = ? [pid 5258] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=157, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 158 ./strace-static-x86_64: Process 5259 attached [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5259] setpgid(0, 0) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5259] close(3) = 0 [pid 5259] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5259] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5259] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 110.349409][ T5258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 110.357399][ T5258] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 110.365412][ T5258] [pid 5259] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5259] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5259] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5259] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5259] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5259] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5259] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5259] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5259] write(7, "5", 1) = 1 [ 110.418925][ T5259] FAULT_INJECTION: forcing a failure. [ 110.418925][ T5259] name failslab, interval 1, probability 0, space 0, times 0 [ 110.431644][ T5259] CPU: 0 PID: 5259 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 110.441586][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 110.451670][ T5259] Call Trace: [ 110.454949][ T5259] [ 110.457879][ T5259] dump_stack_lvl+0xd1/0x138 [ 110.462482][ T5259] should_fail_ex.cold+0x5/0xa [ 110.467280][ T5259] ? __inet_hash_connect+0x95e/0x1ba0 [ 110.472689][ T5259] should_failslab+0x9/0x20 [ 110.477210][ T5259] kmem_cache_alloc+0x5a/0x320 [ 110.482016][ T5259] __inet_hash_connect+0x95e/0x1ba0 [ 110.487224][ T5259] ? __inet_lookup_listener+0xbf0/0xbf0 [ 110.492782][ T5259] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 110.499145][ T5259] dccp_v4_connect+0xb82/0x1730 [ 110.504046][ T5259] __inet_stream_connect+0x69e/0xed0 [ 110.509343][ T5259] ? inet_listen+0x640/0x640 [ 110.513945][ T5259] ? mark_held_locks+0x9f/0xe0 [ 110.518714][ T5259] ? __local_bh_enable_ip+0xa4/0x130 [ 110.524028][ T5259] inet_stream_connect+0x57/0xa0 [ 110.528984][ T5259] ? __inet_stream_connect+0xed0/0xed0 [ 110.534495][ T5259] __sys_connect_file+0x153/0x1a0 [ 110.539555][ T5259] io_connect+0x3cc/0x720 [ 110.543897][ T5259] ? io_connect_prep+0x250/0x250 [ 110.548848][ T5259] ? receive_fd+0x110/0x110 [ 110.553387][ T5259] ? rcu_read_lock_sched_held+0x3e/0x70 [ 110.558967][ T5259] ? io_connect_prep+0x250/0x250 [ 110.563953][ T5259] io_issue_sqe+0x695/0x1250 [ 110.568557][ T5259] io_submit_sqes+0x96c/0x1e90 [ 110.573375][ T5259] __do_sys_io_uring_enter+0x103d/0x24e0 [ 110.579069][ T5259] ? io_submit_sqes+0x1e90/0x1e90 [ 110.584128][ T5259] ? ptrace_notify+0xfe/0x140 [ 110.588808][ T5259] ? lock_downgrade+0x6e0/0x6e0 [ 110.593698][ T5259] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.598906][ T5259] ? lockdep_hardirqs_on+0x7d/0x100 [ 110.604110][ T5259] ? _raw_spin_unlock_irq+0x2e/0x50 [ 110.609314][ T5259] ? ptrace_notify+0xfe/0x140 [ 110.613996][ T5259] do_syscall_64+0x39/0xb0 [ 110.618420][ T5259] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 110.624318][ T5259] RIP: 0033:0x7f607b0de549 [ 110.628736][ T5259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 110.648465][ T5259] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 110.656903][ T5259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5259] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5259] close(3) = 0 [pid 5259] close(4) = 0 [pid 5259] close(5) = 0 [pid 5259] close(6) = 0 [pid 5259] close(7) = 0 [pid 5259] close(8) = -1 EBADF (Bad file descriptor) [pid 5259] close(9) = -1 EBADF (Bad file descriptor) [pid 5259] close(10) = -1 EBADF (Bad file descriptor) [pid 5259] close(11) = -1 EBADF (Bad file descriptor) [pid 5259] close(12) = -1 EBADF (Bad file descriptor) [pid 5259] close(13) = -1 EBADF (Bad file descriptor) [pid 5259] close(14) = -1 EBADF (Bad file descriptor) [pid 5259] close(15) = -1 EBADF (Bad file descriptor) [pid 5259] close(16) = -1 EBADF (Bad file descriptor) [pid 5259] close(17) = -1 EBADF (Bad file descriptor) [pid 5259] close(18) = -1 EBADF (Bad file descriptor) [pid 5259] close(19) = -1 EBADF (Bad file descriptor) [pid 5259] close(20) = -1 EBADF (Bad file descriptor) [pid 5259] close(21) = -1 EBADF (Bad file descriptor) [pid 5259] close(22) = -1 EBADF (Bad file descriptor) [pid 5259] close(23) = -1 EBADF (Bad file descriptor) [pid 5259] close(24) = -1 EBADF (Bad file descriptor) [pid 5259] close(25) = -1 EBADF (Bad file descriptor) [pid 5259] close(26) = -1 EBADF (Bad file descriptor) [pid 5259] close(27) = -1 EBADF (Bad file descriptor) [pid 5259] close(28) = -1 EBADF (Bad file descriptor) [pid 5259] close(29) = -1 EBADF (Bad file descriptor) [pid 5259] exit_group(0) = ? [pid 5259] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=158, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5260 attached , child_tidptr=0x555555eff5d0) = 159 [pid 5260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5260] setpgid(0, 0) = 0 [pid 5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5260] write(3, "1000", 4) = 4 [pid 5260] close(3) = 0 [pid 5260] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5260] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5260] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5260] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5260] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5260] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5260] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5260] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 110.664876][ T5259] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 110.672858][ T5259] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 110.680850][ T5259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 110.688820][ T5259] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 110.696809][ T5259] [pid 5260] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5260] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5260] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5260] write(7, "5", 1) = 1 [ 110.756287][ T5260] FAULT_INJECTION: forcing a failure. [ 110.756287][ T5260] name failslab, interval 1, probability 0, space 0, times 0 [ 110.769517][ T5260] CPU: 0 PID: 5260 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 110.779455][ T5260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 110.789526][ T5260] Call Trace: [ 110.792822][ T5260] [ 110.795782][ T5260] dump_stack_lvl+0xd1/0x138 [ 110.800408][ T5260] should_fail_ex.cold+0x5/0xa [ 110.805170][ T5260] ? io_issue_sqe+0x695/0x1250 [ 110.809956][ T5260] should_failslab+0x9/0x20 [ 110.814489][ T5260] __kmem_cache_alloc_node+0x5b/0x330 [ 110.819876][ T5260] ? ref_tracker_alloc+0x158/0x560 [ 110.825041][ T5260] kmalloc_trace+0x26/0x60 [ 110.829493][ T5260] ref_tracker_alloc+0x158/0x560 [ 110.834460][ T5260] ? __lock_acquire+0xbc3/0x56d0 [ 110.839423][ T5260] ? ref_tracker_free+0x6b0/0x6b0 [ 110.844500][ T5260] dst_init+0xe4/0x520 [ 110.848602][ T5260] dst_alloc+0x16f/0x1f0 [ 110.852870][ T5260] rt_dst_alloc+0x55/0x430 [ 110.857315][ T5260] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 110.863336][ T5260] ip_route_output_key_hash+0x18f/0x340 [ 110.868910][ T5260] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 110.875202][ T5260] dccp_v4_connect+0x7e1/0x1730 [ 110.880119][ T5260] __inet_stream_connect+0x69e/0xed0 [ 110.885443][ T5260] ? inet_listen+0x640/0x640 [ 110.890064][ T5260] ? mark_held_locks+0x9f/0xe0 [ 110.894849][ T5260] ? __local_bh_enable_ip+0xa4/0x130 [ 110.900163][ T5260] inet_stream_connect+0x57/0xa0 [ 110.905129][ T5260] ? __inet_stream_connect+0xed0/0xed0 [ 110.910618][ T5260] __sys_connect_file+0x153/0x1a0 [ 110.915665][ T5260] io_connect+0x3cc/0x720 [ 110.920026][ T5260] ? io_connect_prep+0x250/0x250 [ 110.925009][ T5260] ? receive_fd+0x110/0x110 [ 110.929549][ T5260] ? rcu_read_lock_sched_held+0x3e/0x70 [ 110.935113][ T5260] ? io_connect_prep+0x250/0x250 [ 110.940084][ T5260] io_issue_sqe+0x695/0x1250 [ 110.944705][ T5260] io_submit_sqes+0x96c/0x1e90 [ 110.949513][ T5260] __do_sys_io_uring_enter+0x103d/0x24e0 [ 110.955181][ T5260] ? io_submit_sqes+0x1e90/0x1e90 [ 110.960252][ T5260] ? ptrace_notify+0xfe/0x140 [ 110.964959][ T5260] ? lock_downgrade+0x6e0/0x6e0 [ 110.969838][ T5260] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.975062][ T5260] ? lockdep_hardirqs_on+0x7d/0x100 [ 110.980284][ T5260] ? _raw_spin_unlock_irq+0x2e/0x50 [ 110.985508][ T5260] ? ptrace_notify+0xfe/0x140 [ 110.990213][ T5260] do_syscall_64+0x39/0xb0 [ 110.994664][ T5260] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 111.000578][ T5260] RIP: 0033:0x7f607b0de549 [ 111.005006][ T5260] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 111.024636][ T5260] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 111.033068][ T5260] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 111.041059][ T5260] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 111.049136][ T5260] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5260] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5260] close(3) = 0 [pid 5260] close(4) = 0 [pid 5260] close(5) = 0 [pid 5260] close(6) = 0 [pid 5260] close(7) = 0 [pid 5260] close(8) = -1 EBADF (Bad file descriptor) [pid 5260] close(9) = -1 EBADF (Bad file descriptor) [pid 5260] close(10) = -1 EBADF (Bad file descriptor) [pid 5260] close(11) = -1 EBADF (Bad file descriptor) [pid 5260] close(12) = -1 EBADF (Bad file descriptor) [pid 5260] close(13) = -1 EBADF (Bad file descriptor) [pid 5260] close(14) = -1 EBADF (Bad file descriptor) [pid 5260] close(15) = -1 EBADF (Bad file descriptor) [pid 5260] close(16) = -1 EBADF (Bad file descriptor) [pid 5260] close(17) = -1 EBADF (Bad file descriptor) [pid 5260] close(18) = -1 EBADF (Bad file descriptor) [pid 5260] close(19) = -1 EBADF (Bad file descriptor) [pid 5260] close(20) = -1 EBADF (Bad file descriptor) [pid 5260] close(21) = -1 EBADF (Bad file descriptor) [pid 5260] close(22) = -1 EBADF (Bad file descriptor) [pid 5260] close(23) = -1 EBADF (Bad file descriptor) [pid 5260] close(24) = -1 EBADF (Bad file descriptor) [pid 5260] close(25) = -1 EBADF (Bad file descriptor) [pid 5260] close(26) = -1 EBADF (Bad file descriptor) [pid 5260] close(27) = -1 EBADF (Bad file descriptor) [pid 5260] close(28) = -1 EBADF (Bad file descriptor) [pid 5260] close(29) = -1 EBADF (Bad file descriptor) [pid 5260] exit_group(0) = ? [pid 5260] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=159, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 160 ./strace-static-x86_64: Process 5261 attached [pid 5261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5261] setpgid(0, 0) = 0 [pid 5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5261] write(3, "1000", 4) = 4 [pid 5261] close(3) = 0 [pid 5261] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5261] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5261] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5261] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5261] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5261] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5261] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5261] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5261] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5261] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5261] write(7, "5", 1) = 1 [ 111.057206][ T5260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 111.065188][ T5260] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 111.073198][ T5260] [ 111.112983][ T5261] FAULT_INJECTION: forcing a failure. [ 111.112983][ T5261] name failslab, interval 1, probability 0, space 0, times 0 [ 111.126501][ T5261] CPU: 1 PID: 5261 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 111.136441][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 111.146517][ T5261] Call Trace: [ 111.149803][ T5261] [ 111.152737][ T5261] dump_stack_lvl+0xd1/0x138 [ 111.157346][ T5261] should_fail_ex.cold+0x5/0xa [ 111.162126][ T5261] ? io_issue_sqe+0x695/0x1250 [ 111.166922][ T5261] should_failslab+0x9/0x20 [ 111.171433][ T5261] __kmem_cache_alloc_node+0x5b/0x330 [ 111.176819][ T5261] ? ref_tracker_alloc+0x158/0x560 [ 111.181968][ T5261] kmalloc_trace+0x26/0x60 [ 111.186437][ T5261] ref_tracker_alloc+0x158/0x560 [ 111.191424][ T5261] ? __lock_acquire+0xbc3/0x56d0 [ 111.196390][ T5261] ? ref_tracker_free+0x6b0/0x6b0 [ 111.201484][ T5261] dst_init+0xe4/0x520 [ 111.205601][ T5261] dst_alloc+0x16f/0x1f0 [ 111.209865][ T5261] rt_dst_alloc+0x55/0x430 [ 111.214297][ T5261] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 111.220339][ T5261] ip_route_output_key_hash+0x18f/0x340 [ 111.225923][ T5261] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 111.232198][ T5261] dccp_v4_connect+0x7e1/0x1730 [ 111.237072][ T5261] __inet_stream_connect+0x69e/0xed0 [ 111.242466][ T5261] ? inet_listen+0x640/0x640 [ 111.247074][ T5261] ? mark_held_locks+0x9f/0xe0 [ 111.251860][ T5261] ? __local_bh_enable_ip+0xa4/0x130 [ 111.257375][ T5261] inet_stream_connect+0x57/0xa0 [ 111.262355][ T5261] ? __inet_stream_connect+0xed0/0xed0 [ 111.267911][ T5261] __sys_connect_file+0x153/0x1a0 [ 111.272965][ T5261] io_connect+0x3cc/0x720 [ 111.277353][ T5261] ? io_connect_prep+0x250/0x250 [ 111.282335][ T5261] ? receive_fd+0x110/0x110 [ 111.286852][ T5261] ? rcu_read_lock_sched_held+0x3e/0x70 [ 111.292402][ T5261] ? io_connect_prep+0x250/0x250 [ 111.297366][ T5261] io_issue_sqe+0x695/0x1250 [ 111.302007][ T5261] io_submit_sqes+0x96c/0x1e90 [ 111.306843][ T5261] __do_sys_io_uring_enter+0x103d/0x24e0 [ 111.312630][ T5261] ? io_submit_sqes+0x1e90/0x1e90 [ 111.317700][ T5261] ? ptrace_notify+0xfe/0x140 [ 111.322389][ T5261] ? lock_downgrade+0x6e0/0x6e0 [ 111.327249][ T5261] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.332459][ T5261] ? lockdep_hardirqs_on+0x7d/0x100 [ 111.337673][ T5261] ? _raw_spin_unlock_irq+0x2e/0x50 [ 111.342900][ T5261] ? ptrace_notify+0xfe/0x140 [ 111.347603][ T5261] do_syscall_64+0x39/0xb0 [ 111.352057][ T5261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 111.357954][ T5261] RIP: 0033:0x7f607b0de549 [ 111.362372][ T5261] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 111.382001][ T5261] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 111.390443][ T5261] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 111.398439][ T5261] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 111.406438][ T5261] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5261] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5261] close(3) = 0 [pid 5261] close(4) = 0 [pid 5261] close(5) = 0 [pid 5261] close(6) = 0 [pid 5261] close(7) = 0 [pid 5261] close(8) = -1 EBADF (Bad file descriptor) [pid 5261] close(9) = -1 EBADF (Bad file descriptor) [pid 5261] close(10) = -1 EBADF (Bad file descriptor) [pid 5261] close(11) = -1 EBADF (Bad file descriptor) [pid 5261] close(12) = -1 EBADF (Bad file descriptor) [pid 5261] close(13) = -1 EBADF (Bad file descriptor) [pid 5261] close(14) = -1 EBADF (Bad file descriptor) [pid 5261] close(15) = -1 EBADF (Bad file descriptor) [pid 5261] close(16) = -1 EBADF (Bad file descriptor) [pid 5261] close(17) = -1 EBADF (Bad file descriptor) [pid 5261] close(18) = -1 EBADF (Bad file descriptor) [pid 5261] close(19) = -1 EBADF (Bad file descriptor) [pid 5261] close(20) = -1 EBADF (Bad file descriptor) [pid 5261] close(21) = -1 EBADF (Bad file descriptor) [pid 5261] close(22) = -1 EBADF (Bad file descriptor) [pid 5261] close(23) = -1 EBADF (Bad file descriptor) [pid 5261] close(24) = -1 EBADF (Bad file descriptor) [pid 5261] close(25) = -1 EBADF (Bad file descriptor) [pid 5261] close(26) = -1 EBADF (Bad file descriptor) [pid 5261] close(27) = -1 EBADF (Bad file descriptor) [pid 5261] close(28) = -1 EBADF (Bad file descriptor) [pid 5261] close(29) = -1 EBADF (Bad file descriptor) [pid 5261] exit_group(0) = ? [pid 5261] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=160, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 161 ./strace-static-x86_64: Process 5262 attached [pid 5262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5262] setpgid(0, 0) = 0 [pid 5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5262] write(3, "1000", 4) = 4 [pid 5262] close(3) = 0 [pid 5262] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5262] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5262] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5262] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5262] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5262] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5262] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5262] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5262] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5262] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5262] write(7, "5", 1) = 1 [ 111.414472][ T5261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 111.422447][ T5261] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 111.430462][ T5261] [ 111.470240][ T5262] FAULT_INJECTION: forcing a failure. [ 111.470240][ T5262] name failslab, interval 1, probability 0, space 0, times 0 [ 111.483213][ T5262] CPU: 0 PID: 5262 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 111.493134][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 111.503223][ T5262] Call Trace: [ 111.506516][ T5262] [ 111.509489][ T5262] dump_stack_lvl+0xd1/0x138 [ 111.515355][ T5262] should_fail_ex.cold+0x5/0xa [ 111.520168][ T5262] ? io_issue_sqe+0x695/0x1250 [ 111.524940][ T5262] should_failslab+0x9/0x20 [ 111.529450][ T5262] __kmem_cache_alloc_node+0x5b/0x330 [ 111.534824][ T5262] ? ref_tracker_alloc+0x158/0x560 [ 111.539944][ T5262] kmalloc_trace+0x26/0x60 [ 111.544376][ T5262] ref_tracker_alloc+0x158/0x560 [ 111.549335][ T5262] ? __lock_acquire+0xbc3/0x56d0 [ 111.554336][ T5262] ? ref_tracker_free+0x6b0/0x6b0 [ 111.559431][ T5262] dst_init+0xe4/0x520 [ 111.563534][ T5262] dst_alloc+0x16f/0x1f0 [ 111.567783][ T5262] rt_dst_alloc+0x55/0x430 [ 111.572202][ T5262] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 111.578205][ T5262] ip_route_output_key_hash+0x18f/0x340 [ 111.583780][ T5262] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 111.590138][ T5262] dccp_v4_connect+0x7e1/0x1730 [ 111.595085][ T5262] __inet_stream_connect+0x69e/0xed0 [ 111.600430][ T5262] ? inet_listen+0x640/0x640 [ 111.605039][ T5262] ? mark_held_locks+0x9f/0xe0 [ 111.609842][ T5262] ? __local_bh_enable_ip+0xa4/0x130 [ 111.615160][ T5262] inet_stream_connect+0x57/0xa0 [ 111.620145][ T5262] ? __inet_stream_connect+0xed0/0xed0 [ 111.625648][ T5262] __sys_connect_file+0x153/0x1a0 [ 111.630678][ T5262] io_connect+0x3cc/0x720 [ 111.635015][ T5262] ? io_connect_prep+0x250/0x250 [ 111.639958][ T5262] ? receive_fd+0x110/0x110 [ 111.644478][ T5262] ? rcu_read_lock_sched_held+0x3e/0x70 [ 111.650075][ T5262] ? io_connect_prep+0x250/0x250 [ 111.655033][ T5262] io_issue_sqe+0x695/0x1250 [ 111.659634][ T5262] io_submit_sqes+0x96c/0x1e90 [ 111.664430][ T5262] __do_sys_io_uring_enter+0x103d/0x24e0 [ 111.670204][ T5262] ? io_submit_sqes+0x1e90/0x1e90 [ 111.675275][ T5262] ? ptrace_notify+0xfe/0x140 [ 111.679951][ T5262] ? lock_downgrade+0x6e0/0x6e0 [ 111.684807][ T5262] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.690010][ T5262] ? lockdep_hardirqs_on+0x7d/0x100 [ 111.695227][ T5262] ? _raw_spin_unlock_irq+0x2e/0x50 [ 111.700440][ T5262] ? ptrace_notify+0xfe/0x140 [ 111.705122][ T5262] do_syscall_64+0x39/0xb0 [ 111.709569][ T5262] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 111.715494][ T5262] RIP: 0033:0x7f607b0de549 [ 111.719949][ T5262] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 111.739848][ T5262] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 111.748275][ T5262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 111.756260][ T5262] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5262] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5262] close(3) = 0 [pid 5262] close(4) = 0 [pid 5262] close(5) = 0 [pid 5262] close(6) = 0 [pid 5262] close(7) = 0 [pid 5262] close(8) = -1 EBADF (Bad file descriptor) [pid 5262] close(9) = -1 EBADF (Bad file descriptor) [pid 5262] close(10) = -1 EBADF (Bad file descriptor) [pid 5262] close(11) = -1 EBADF (Bad file descriptor) [pid 5262] close(12) = -1 EBADF (Bad file descriptor) [pid 5262] close(13) = -1 EBADF (Bad file descriptor) [pid 5262] close(14) = -1 EBADF (Bad file descriptor) [pid 5262] close(15) = -1 EBADF (Bad file descriptor) [pid 5262] close(16) = -1 EBADF (Bad file descriptor) [pid 5262] close(17) = -1 EBADF (Bad file descriptor) [pid 5262] close(18) = -1 EBADF (Bad file descriptor) [pid 5262] close(19) = -1 EBADF (Bad file descriptor) [pid 5262] close(20) = -1 EBADF (Bad file descriptor) [pid 5262] close(21) = -1 EBADF (Bad file descriptor) [pid 5262] close(22) = -1 EBADF (Bad file descriptor) [pid 5262] close(23) = -1 EBADF (Bad file descriptor) [pid 5262] close(24) = -1 EBADF (Bad file descriptor) [pid 5262] close(25) = -1 EBADF (Bad file descriptor) [pid 5262] close(26) = -1 EBADF (Bad file descriptor) [pid 5262] close(27) = -1 EBADF (Bad file descriptor) [pid 5262] close(28) = -1 EBADF (Bad file descriptor) [pid 5262] close(29) = -1 EBADF (Bad file descriptor) [pid 5262] exit_group(0) = ? [pid 5262] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=161, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 162 ./strace-static-x86_64: Process 5263 attached [pid 5263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5263] setpgid(0, 0) = 0 [pid 5263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5263] write(3, "1000", 4) = 4 [pid 5263] close(3) = 0 [pid 5263] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5263] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5263] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5263] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5263] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5263] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5263] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5263] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5263] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5263] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5263] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5263] write(7, "5", 1) = 1 [ 111.764257][ T5262] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 111.772251][ T5262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 111.780235][ T5262] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 111.788238][ T5262] [ 111.828501][ T5263] FAULT_INJECTION: forcing a failure. [ 111.828501][ T5263] name failslab, interval 1, probability 0, space 0, times 0 [ 111.842869][ T5263] CPU: 0 PID: 5263 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 111.852801][ T5263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 111.862880][ T5263] Call Trace: [ 111.866177][ T5263] [ 111.869140][ T5263] dump_stack_lvl+0xd1/0x138 [ 111.873783][ T5263] should_fail_ex.cold+0x5/0xa [ 111.878561][ T5263] ? io_issue_sqe+0x695/0x1250 [ 111.883336][ T5263] should_failslab+0x9/0x20 [ 111.887850][ T5263] __kmem_cache_alloc_node+0x5b/0x330 [ 111.893225][ T5263] ? ref_tracker_alloc+0x158/0x560 [ 111.898369][ T5263] kmalloc_trace+0x26/0x60 [ 111.902842][ T5263] ref_tracker_alloc+0x158/0x560 [ 111.907817][ T5263] ? ref_tracker_free+0x6b0/0x6b0 [ 111.912878][ T5263] ? dst_alloc+0x14a/0x1f0 [ 111.917328][ T5263] dst_init+0xe4/0x520 [ 111.921415][ T5263] dst_alloc+0x16f/0x1f0 [ 111.925668][ T5263] rt_dst_alloc+0x55/0x430 [ 111.930093][ T5263] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 111.936089][ T5263] ip_route_output_key_hash+0x18f/0x340 [ 111.941651][ T5263] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 111.947914][ T5263] dccp_v4_connect+0x7e1/0x1730 [ 111.952785][ T5263] __inet_stream_connect+0x69e/0xed0 [ 111.958103][ T5263] ? inet_listen+0x640/0x640 [ 111.962736][ T5263] ? mark_held_locks+0x9f/0xe0 [ 111.967504][ T5263] ? __local_bh_enable_ip+0xa4/0x130 [ 111.972797][ T5263] inet_stream_connect+0x57/0xa0 [ 111.977743][ T5263] ? __inet_stream_connect+0xed0/0xed0 [ 111.983211][ T5263] __sys_connect_file+0x153/0x1a0 [ 111.988292][ T5263] io_connect+0x3cc/0x720 [ 111.992638][ T5263] ? io_connect_prep+0x250/0x250 [ 111.997589][ T5263] ? receive_fd+0x110/0x110 [ 112.002131][ T5263] ? rcu_read_lock_sched_held+0x3e/0x70 [ 112.007725][ T5263] ? io_connect_prep+0x250/0x250 [ 112.012705][ T5263] io_issue_sqe+0x695/0x1250 [ 112.017309][ T5263] io_submit_sqes+0x96c/0x1e90 [ 112.022119][ T5263] __do_sys_io_uring_enter+0x103d/0x24e0 [ 112.027818][ T5263] ? io_submit_sqes+0x1e90/0x1e90 [ 112.032874][ T5263] ? ptrace_notify+0xfe/0x140 [ 112.037554][ T5263] ? lock_downgrade+0x6e0/0x6e0 [ 112.042433][ T5263] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.047653][ T5263] ? lockdep_hardirqs_on+0x7d/0x100 [ 112.052878][ T5263] ? _raw_spin_unlock_irq+0x2e/0x50 [ 112.058080][ T5263] ? ptrace_notify+0xfe/0x140 [ 112.062859][ T5263] do_syscall_64+0x39/0xb0 [ 112.067278][ T5263] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.073194][ T5263] RIP: 0033:0x7f607b0de549 [ 112.077648][ T5263] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 112.097302][ T5263] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 112.105750][ T5263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 112.113732][ T5263] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 112.121721][ T5263] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5263] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5263] close(3) = 0 [pid 5263] close(4) = 0 [pid 5263] close(5) = 0 [pid 5263] close(6) = 0 [pid 5263] close(7) = 0 [pid 5263] close(8) = -1 EBADF (Bad file descriptor) [pid 5263] close(9) = -1 EBADF (Bad file descriptor) [pid 5263] close(10) = -1 EBADF (Bad file descriptor) [pid 5263] close(11) = -1 EBADF (Bad file descriptor) [pid 5263] close(12) = -1 EBADF (Bad file descriptor) [pid 5263] close(13) = -1 EBADF (Bad file descriptor) [pid 5263] close(14) = -1 EBADF (Bad file descriptor) [pid 5263] close(15) = -1 EBADF (Bad file descriptor) [pid 5263] close(16) = -1 EBADF (Bad file descriptor) [pid 5263] close(17) = -1 EBADF (Bad file descriptor) [pid 5263] close(18) = -1 EBADF (Bad file descriptor) [pid 5263] close(19) = -1 EBADF (Bad file descriptor) [pid 5263] close(20) = -1 EBADF (Bad file descriptor) [pid 5263] close(21) = -1 EBADF (Bad file descriptor) [pid 5263] close(22) = -1 EBADF (Bad file descriptor) [pid 5263] close(23) = -1 EBADF (Bad file descriptor) [pid 5263] close(24) = -1 EBADF (Bad file descriptor) [pid 5263] close(25) = -1 EBADF (Bad file descriptor) [pid 5263] close(26) = -1 EBADF (Bad file descriptor) [pid 5263] close(27) = -1 EBADF (Bad file descriptor) [pid 5263] close(28) = -1 EBADF (Bad file descriptor) [pid 5263] close(29) = -1 EBADF (Bad file descriptor) [pid 5263] exit_group(0) = ? [pid 5263] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=162, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 163 ./strace-static-x86_64: Process 5264 attached [pid 5264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5264] setpgid(0, 0) = 0 [pid 5264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5264] write(3, "1000", 4) = 4 [pid 5264] close(3) = 0 [pid 5264] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5264] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5264] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 112.129707][ T5263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 112.137695][ T5263] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 112.145704][ T5263] [pid 5264] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5264] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5264] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5264] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5264] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5264] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5264] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5264] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5264] write(7, "5", 1) = 1 [ 112.199449][ T5264] FAULT_INJECTION: forcing a failure. [ 112.199449][ T5264] name failslab, interval 1, probability 0, space 0, times 0 [ 112.212159][ T5264] CPU: 1 PID: 5264 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 112.222066][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 112.232158][ T5264] Call Trace: [ 112.235449][ T5264] [ 112.238392][ T5264] dump_stack_lvl+0xd1/0x138 [ 112.243000][ T5264] should_fail_ex.cold+0x5/0xa [ 112.247773][ T5264] ? __inet_hash_connect+0x95e/0x1ba0 [ 112.253157][ T5264] should_failslab+0x9/0x20 [ 112.257677][ T5264] kmem_cache_alloc+0x5a/0x320 [ 112.262450][ T5264] __inet_hash_connect+0x95e/0x1ba0 [ 112.267662][ T5264] ? __inet_lookup_listener+0xbf0/0xbf0 [ 112.273359][ T5264] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 112.279704][ T5264] dccp_v4_connect+0xb82/0x1730 [ 112.284587][ T5264] __inet_stream_connect+0x69e/0xed0 [ 112.289926][ T5264] ? inet_listen+0x640/0x640 [ 112.294527][ T5264] ? mark_held_locks+0x9f/0xe0 [ 112.299313][ T5264] ? __local_bh_enable_ip+0xa4/0x130 [ 112.304634][ T5264] inet_stream_connect+0x57/0xa0 [ 112.309600][ T5264] ? __inet_stream_connect+0xed0/0xed0 [ 112.315127][ T5264] __sys_connect_file+0x153/0x1a0 [ 112.320169][ T5264] io_connect+0x3cc/0x720 [ 112.324576][ T5264] ? io_connect_prep+0x250/0x250 [ 112.329564][ T5264] ? receive_fd+0x110/0x110 [ 112.334081][ T5264] ? rcu_read_lock_sched_held+0x3e/0x70 [ 112.339631][ T5264] ? io_connect_prep+0x250/0x250 [ 112.344604][ T5264] io_issue_sqe+0x695/0x1250 [ 112.349237][ T5264] io_submit_sqes+0x96c/0x1e90 [ 112.355067][ T5264] __do_sys_io_uring_enter+0x103d/0x24e0 [ 112.360766][ T5264] ? io_submit_sqes+0x1e90/0x1e90 [ 112.365830][ T5264] ? ptrace_notify+0xfe/0x140 [ 112.370525][ T5264] ? lock_downgrade+0x6e0/0x6e0 [ 112.375426][ T5264] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.380652][ T5264] ? lockdep_hardirqs_on+0x7d/0x100 [ 112.385879][ T5264] ? _raw_spin_unlock_irq+0x2e/0x50 [ 112.391101][ T5264] ? ptrace_notify+0xfe/0x140 [ 112.395808][ T5264] do_syscall_64+0x39/0xb0 [ 112.400252][ T5264] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.406187][ T5264] RIP: 0033:0x7f607b0de549 [ 112.410648][ T5264] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 112.430390][ T5264] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 112.438847][ T5264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5264] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5264] close(3) = 0 [pid 5264] close(4) = 0 [pid 5264] close(5) = 0 [pid 5264] close(6) = 0 [pid 5264] close(7) = 0 [pid 5264] close(8) = -1 EBADF (Bad file descriptor) [pid 5264] close(9) = -1 EBADF (Bad file descriptor) [pid 5264] close(10) = -1 EBADF (Bad file descriptor) [pid 5264] close(11) = -1 EBADF (Bad file descriptor) [pid 5264] close(12) = -1 EBADF (Bad file descriptor) [pid 5264] close(13) = -1 EBADF (Bad file descriptor) [pid 5264] close(14) = -1 EBADF (Bad file descriptor) [pid 5264] close(15) = -1 EBADF (Bad file descriptor) [pid 5264] close(16) = -1 EBADF (Bad file descriptor) [pid 5264] close(17) = -1 EBADF (Bad file descriptor) [pid 5264] close(18) = -1 EBADF (Bad file descriptor) [pid 5264] close(19) = -1 EBADF (Bad file descriptor) [pid 5264] close(20) = -1 EBADF (Bad file descriptor) [pid 5264] close(21) = -1 EBADF (Bad file descriptor) [pid 5264] close(22) = -1 EBADF (Bad file descriptor) [pid 5264] close(23) = -1 EBADF (Bad file descriptor) [pid 5264] close(24) = -1 EBADF (Bad file descriptor) [pid 5264] close(25) = -1 EBADF (Bad file descriptor) [pid 5264] close(26) = -1 EBADF (Bad file descriptor) [pid 5264] close(27) = -1 EBADF (Bad file descriptor) [pid 5264] close(28) = -1 EBADF (Bad file descriptor) [pid 5264] close(29) = -1 EBADF (Bad file descriptor) [pid 5264] exit_group(0) = ? [pid 5264] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=163, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 164 ./strace-static-x86_64: Process 5265 attached [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5265] setpgid(0, 0) = 0 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5265] write(3, "1000", 4) = 4 [pid 5265] close(3) = 0 [pid 5265] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5265] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5265] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5265] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5265] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5265] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 112.446844][ T5264] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 112.454826][ T5264] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 112.462806][ T5264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 112.470793][ T5264] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 112.478802][ T5264] [pid 5265] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5265] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5265] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5265] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5265] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5265] write(7, "5", 1) = 1 [ 112.527883][ T5265] FAULT_INJECTION: forcing a failure. [ 112.527883][ T5265] name failslab, interval 1, probability 0, space 0, times 0 [ 112.540688][ T5265] CPU: 0 PID: 5265 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 112.550624][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 112.560697][ T5265] Call Trace: [ 112.563973][ T5265] [ 112.566898][ T5265] dump_stack_lvl+0xd1/0x138 [ 112.571497][ T5265] should_fail_ex.cold+0x5/0xa [ 112.576271][ T5265] ? io_issue_sqe+0x695/0x1250 [ 112.581054][ T5265] should_failslab+0x9/0x20 [ 112.585566][ T5265] __kmem_cache_alloc_node+0x5b/0x330 [ 112.590942][ T5265] ? ref_tracker_alloc+0x158/0x560 [ 112.596084][ T5265] kmalloc_trace+0x26/0x60 [ 112.600553][ T5265] ref_tracker_alloc+0x158/0x560 [ 112.605530][ T5265] ? __lock_acquire+0xbc3/0x56d0 [ 112.610489][ T5265] ? ref_tracker_free+0x6b0/0x6b0 [ 112.615705][ T5265] dst_init+0xe4/0x520 [ 112.619795][ T5265] dst_alloc+0x16f/0x1f0 [ 112.624057][ T5265] rt_dst_alloc+0x55/0x430 [ 112.628486][ T5265] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 112.634501][ T5265] ip_route_output_key_hash+0x18f/0x340 [ 112.640056][ T5265] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 112.646343][ T5265] dccp_v4_connect+0x7e1/0x1730 [ 112.651272][ T5265] __inet_stream_connect+0x69e/0xed0 [ 112.656609][ T5265] ? inet_listen+0x640/0x640 [ 112.661210][ T5265] ? mark_held_locks+0x9f/0xe0 [ 112.665978][ T5265] ? __local_bh_enable_ip+0xa4/0x130 [ 112.671269][ T5265] inet_stream_connect+0x57/0xa0 [ 112.676236][ T5265] ? __inet_stream_connect+0xed0/0xed0 [ 112.681751][ T5265] __sys_connect_file+0x153/0x1a0 [ 112.686804][ T5265] io_connect+0x3cc/0x720 [ 112.691143][ T5265] ? io_connect_prep+0x250/0x250 [ 112.696132][ T5265] ? receive_fd+0x110/0x110 [ 112.700719][ T5265] ? rcu_read_lock_sched_held+0x3e/0x70 [ 112.706398][ T5265] ? io_connect_prep+0x250/0x250 [ 112.711363][ T5265] io_issue_sqe+0x695/0x1250 [ 112.715965][ T5265] io_submit_sqes+0x96c/0x1e90 [ 112.720768][ T5265] __do_sys_io_uring_enter+0x103d/0x24e0 [ 112.726414][ T5265] ? io_submit_sqes+0x1e90/0x1e90 [ 112.731447][ T5265] ? ptrace_notify+0xfe/0x140 [ 112.736182][ T5265] ? lock_downgrade+0x6e0/0x6e0 [ 112.741067][ T5265] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.746283][ T5265] ? lockdep_hardirqs_on+0x7d/0x100 [ 112.751511][ T5265] ? _raw_spin_unlock_irq+0x2e/0x50 [ 112.756754][ T5265] ? ptrace_notify+0xfe/0x140 [ 112.761441][ T5265] do_syscall_64+0x39/0xb0 [ 112.765888][ T5265] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.771825][ T5265] RIP: 0033:0x7f607b0de549 [ 112.776258][ T5265] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 112.795961][ T5265] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 112.804384][ T5265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 112.812370][ T5265] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 112.820376][ T5265] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5265] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5265] close(3) = 0 [pid 5265] close(4) = 0 [pid 5265] close(5) = 0 [pid 5265] close(6) = 0 [pid 5265] close(7) = 0 [pid 5265] close(8) = -1 EBADF (Bad file descriptor) [pid 5265] close(9) = -1 EBADF (Bad file descriptor) [pid 5265] close(10) = -1 EBADF (Bad file descriptor) [pid 5265] close(11) = -1 EBADF (Bad file descriptor) [pid 5265] close(12) = -1 EBADF (Bad file descriptor) [pid 5265] close(13) = -1 EBADF (Bad file descriptor) [pid 5265] close(14) = -1 EBADF (Bad file descriptor) [pid 5265] close(15) = -1 EBADF (Bad file descriptor) [pid 5265] close(16) = -1 EBADF (Bad file descriptor) [pid 5265] close(17) = -1 EBADF (Bad file descriptor) [pid 5265] close(18) = -1 EBADF (Bad file descriptor) [pid 5265] close(19) = -1 EBADF (Bad file descriptor) [pid 5265] close(20) = -1 EBADF (Bad file descriptor) [pid 5265] close(21) = -1 EBADF (Bad file descriptor) [pid 5265] close(22) = -1 EBADF (Bad file descriptor) [pid 5265] close(23) = -1 EBADF (Bad file descriptor) [pid 5265] close(24) = -1 EBADF (Bad file descriptor) [pid 5265] close(25) = -1 EBADF (Bad file descriptor) [pid 5265] close(26) = -1 EBADF (Bad file descriptor) [pid 5265] close(27) = -1 EBADF (Bad file descriptor) [pid 5265] close(28) = -1 EBADF (Bad file descriptor) [pid 5265] close(29) = -1 EBADF (Bad file descriptor) [pid 5265] exit_group(0) = ? [pid 5265] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=164, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5266 attached , child_tidptr=0x555555eff5d0) = 165 [pid 5266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 112.828365][ T5265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 112.836356][ T5265] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 112.844349][ T5265] [pid 5266] setpgid(0, 0) = 0 [pid 5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5266] write(3, "1000", 4) = 4 [pid 5266] close(3) = 0 [pid 5266] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5266] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5266] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5266] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5266] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5266] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5266] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5266] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5266] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5266] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5266] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5266] write(7, "5", 1) = 1 [ 112.898900][ T5266] FAULT_INJECTION: forcing a failure. [ 112.898900][ T5266] name failslab, interval 1, probability 0, space 0, times 0 [ 112.912908][ T5266] CPU: 0 PID: 5266 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 112.922926][ T5266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 112.932992][ T5266] Call Trace: [ 112.936272][ T5266] [ 112.939204][ T5266] dump_stack_lvl+0xd1/0x138 [ 112.943810][ T5266] should_fail_ex.cold+0x5/0xa [ 112.948589][ T5266] ? io_issue_sqe+0x695/0x1250 [ 112.953392][ T5266] should_failslab+0x9/0x20 [ 112.957900][ T5266] __kmem_cache_alloc_node+0x5b/0x330 [ 112.963284][ T5266] ? ref_tracker_alloc+0x158/0x560 [ 112.968431][ T5266] kmalloc_trace+0x26/0x60 [ 112.972858][ T5266] ref_tracker_alloc+0x158/0x560 [ 112.977804][ T5266] ? __lock_acquire+0xbc3/0x56d0 [ 112.982747][ T5266] ? ref_tracker_free+0x6b0/0x6b0 [ 112.987792][ T5266] dst_init+0xe4/0x520 [ 112.991865][ T5266] dst_alloc+0x16f/0x1f0 [ 112.996114][ T5266] rt_dst_alloc+0x55/0x430 [ 113.000536][ T5266] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 113.006553][ T5266] ip_route_output_key_hash+0x18f/0x340 [ 113.012156][ T5266] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 113.018446][ T5266] dccp_v4_connect+0x7e1/0x1730 [ 113.023318][ T5266] __inet_stream_connect+0x69e/0xed0 [ 113.028620][ T5266] ? inet_listen+0x640/0x640 [ 113.033224][ T5266] ? mark_held_locks+0x9f/0xe0 [ 113.038006][ T5266] ? __local_bh_enable_ip+0xa4/0x130 [ 113.043321][ T5266] inet_stream_connect+0x57/0xa0 [ 113.048292][ T5266] ? __inet_stream_connect+0xed0/0xed0 [ 113.053758][ T5266] __sys_connect_file+0x153/0x1a0 [ 113.058784][ T5266] io_connect+0x3cc/0x720 [ 113.063124][ T5266] ? io_connect_prep+0x250/0x250 [ 113.068090][ T5266] ? receive_fd+0x110/0x110 [ 113.072605][ T5266] ? rcu_read_lock_sched_held+0x3e/0x70 [ 113.078157][ T5266] ? io_connect_prep+0x250/0x250 [ 113.083115][ T5266] io_issue_sqe+0x695/0x1250 [ 113.087744][ T5266] io_submit_sqes+0x96c/0x1e90 [ 113.092553][ T5266] __do_sys_io_uring_enter+0x103d/0x24e0 [ 113.098229][ T5266] ? io_submit_sqes+0x1e90/0x1e90 [ 113.103284][ T5266] ? ptrace_notify+0xfe/0x140 [ 113.107983][ T5266] ? lock_downgrade+0x6e0/0x6e0 [ 113.112864][ T5266] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.118095][ T5266] ? lockdep_hardirqs_on+0x7d/0x100 [ 113.123319][ T5266] ? _raw_spin_unlock_irq+0x2e/0x50 [ 113.128547][ T5266] ? ptrace_notify+0xfe/0x140 [ 113.133270][ T5266] do_syscall_64+0x39/0xb0 [ 113.137805][ T5266] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.143806][ T5266] RIP: 0033:0x7f607b0de549 [ 113.148236][ T5266] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 113.167864][ T5266] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 113.176300][ T5266] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 113.184292][ T5266] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 113.192281][ T5266] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5266] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5266] close(3) = 0 [pid 5266] close(4) = 0 [pid 5266] close(5) = 0 [pid 5266] close(6) = 0 [pid 5266] close(7) = 0 [pid 5266] close(8) = -1 EBADF (Bad file descriptor) [pid 5266] close(9) = -1 EBADF (Bad file descriptor) [pid 5266] close(10) = -1 EBADF (Bad file descriptor) [pid 5266] close(11) = -1 EBADF (Bad file descriptor) [pid 5266] close(12) = -1 EBADF (Bad file descriptor) [pid 5266] close(13) = -1 EBADF (Bad file descriptor) [pid 5266] close(14) = -1 EBADF (Bad file descriptor) [pid 5266] close(15) = -1 EBADF (Bad file descriptor) [pid 5266] close(16) = -1 EBADF (Bad file descriptor) [pid 5266] close(17) = -1 EBADF (Bad file descriptor) [pid 5266] close(18) = -1 EBADF (Bad file descriptor) [pid 5266] close(19) = -1 EBADF (Bad file descriptor) [pid 5266] close(20) = -1 EBADF (Bad file descriptor) [pid 5266] close(21) = -1 EBADF (Bad file descriptor) [pid 5266] close(22) = -1 EBADF (Bad file descriptor) [pid 5266] close(23) = -1 EBADF (Bad file descriptor) [pid 5266] close(24) = -1 EBADF (Bad file descriptor) [pid 5266] close(25) = -1 EBADF (Bad file descriptor) [pid 5266] close(26) = -1 EBADF (Bad file descriptor) [pid 5266] close(27) = -1 EBADF (Bad file descriptor) [pid 5266] close(28) = -1 EBADF (Bad file descriptor) [pid 5266] close(29) = -1 EBADF (Bad file descriptor) [pid 5266] exit_group(0) = ? [pid 5266] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=165, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 166 ./strace-static-x86_64: Process 5267 attached [pid 5267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5267] setpgid(0, 0) = 0 [pid 5267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5267] write(3, "1000", 4) = 4 [pid 5267] close(3) = 0 [pid 5267] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5267] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5267] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 113.200266][ T5266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 113.208255][ T5266] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 113.216262][ T5266] [pid 5267] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5267] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5267] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5267] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5267] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5267] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5267] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5267] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5267] write(7, "5", 1) = 1 [ 113.271180][ T5267] FAULT_INJECTION: forcing a failure. [ 113.271180][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 113.283961][ T5267] CPU: 0 PID: 5267 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 113.293870][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 113.303960][ T5267] Call Trace: [ 113.307254][ T5267] [ 113.310278][ T5267] dump_stack_lvl+0xd1/0x138 [ 113.314899][ T5267] should_fail_ex.cold+0x5/0xa [ 113.319677][ T5267] ? __inet_hash_connect+0x95e/0x1ba0 [ 113.325057][ T5267] should_failslab+0x9/0x20 [ 113.329570][ T5267] kmem_cache_alloc+0x5a/0x320 [ 113.334376][ T5267] __inet_hash_connect+0x95e/0x1ba0 [ 113.339587][ T5267] ? __inet_lookup_listener+0xbf0/0xbf0 [ 113.345163][ T5267] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 113.351536][ T5267] dccp_v4_connect+0xb82/0x1730 [ 113.356443][ T5267] __inet_stream_connect+0x69e/0xed0 [ 113.361769][ T5267] ? inet_listen+0x640/0x640 [ 113.366395][ T5267] ? mark_held_locks+0x9f/0xe0 [ 113.371182][ T5267] ? __local_bh_enable_ip+0xa4/0x130 [ 113.376495][ T5267] inet_stream_connect+0x57/0xa0 [ 113.381466][ T5267] ? __inet_stream_connect+0xed0/0xed0 [ 113.386958][ T5267] __sys_connect_file+0x153/0x1a0 [ 113.392007][ T5267] io_connect+0x3cc/0x720 [ 113.396371][ T5267] ? io_connect_prep+0x250/0x250 [ 113.401337][ T5267] ? receive_fd+0x110/0x110 [ 113.405880][ T5267] ? rcu_read_lock_sched_held+0x3e/0x70 [ 113.411450][ T5267] ? io_connect_prep+0x250/0x250 [ 113.416420][ T5267] io_issue_sqe+0x695/0x1250 [ 113.421057][ T5267] io_submit_sqes+0x96c/0x1e90 [ 113.425869][ T5267] __do_sys_io_uring_enter+0x103d/0x24e0 [ 113.431632][ T5267] ? io_submit_sqes+0x1e90/0x1e90 [ 113.436687][ T5267] ? ptrace_notify+0xfe/0x140 [ 113.441384][ T5267] ? lock_downgrade+0x6e0/0x6e0 [ 113.446264][ T5267] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.451489][ T5267] ? lockdep_hardirqs_on+0x7d/0x100 [ 113.456707][ T5267] ? _raw_spin_unlock_irq+0x2e/0x50 [ 113.461930][ T5267] ? ptrace_notify+0xfe/0x140 [ 113.466635][ T5267] do_syscall_64+0x39/0xb0 [ 113.471083][ T5267] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.476999][ T5267] RIP: 0033:0x7f607b0de549 [ 113.481429][ T5267] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 113.501065][ T5267] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 113.509500][ T5267] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5267] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5267] close(3) = 0 [pid 5267] close(4) = 0 [pid 5267] close(5) = 0 [pid 5267] close(6) = 0 [pid 5267] close(7) = 0 [pid 5267] close(8) = -1 EBADF (Bad file descriptor) [pid 5267] close(9) = -1 EBADF (Bad file descriptor) [pid 5267] close(10) = -1 EBADF (Bad file descriptor) [pid 5267] close(11) = -1 EBADF (Bad file descriptor) [pid 5267] close(12) = -1 EBADF (Bad file descriptor) [pid 5267] close(13) = -1 EBADF (Bad file descriptor) [pid 5267] close(14) = -1 EBADF (Bad file descriptor) [pid 5267] close(15) = -1 EBADF (Bad file descriptor) [pid 5267] close(16) = -1 EBADF (Bad file descriptor) [pid 5267] close(17) = -1 EBADF (Bad file descriptor) [pid 5267] close(18) = -1 EBADF (Bad file descriptor) [pid 5267] close(19) = -1 EBADF (Bad file descriptor) [pid 5267] close(20) = -1 EBADF (Bad file descriptor) [pid 5267] close(21) = -1 EBADF (Bad file descriptor) [pid 5267] close(22) = -1 EBADF (Bad file descriptor) [pid 5267] close(23) = -1 EBADF (Bad file descriptor) [pid 5267] close(24) = -1 EBADF (Bad file descriptor) [pid 5267] close(25) = -1 EBADF (Bad file descriptor) [pid 5267] close(26) = -1 EBADF (Bad file descriptor) [pid 5267] close(27) = -1 EBADF (Bad file descriptor) [pid 5267] close(28) = -1 EBADF (Bad file descriptor) [pid 5267] close(29) = -1 EBADF (Bad file descriptor) [pid 5267] exit_group(0) = ? [pid 5267] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=166, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 167 ./strace-static-x86_64: Process 5268 attached [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5268] setpgid(0, 0) = 0 [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5268] write(3, "1000", 4) = 4 [pid 5268] close(3) = 0 [pid 5268] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5268] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5268] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5268] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5268] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5268] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5268] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5268] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5268] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5268] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5268] write(7, "5", 1) = 1 [ 113.517489][ T5267] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 113.525476][ T5267] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 113.533462][ T5267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 113.541449][ T5267] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 113.549457][ T5267] [ 113.587121][ T5268] FAULT_INJECTION: forcing a failure. [ 113.587121][ T5268] name failslab, interval 1, probability 0, space 0, times 0 [ 113.599921][ T5268] CPU: 0 PID: 5268 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 113.609845][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 113.619898][ T5268] Call Trace: [ 113.623181][ T5268] [ 113.626137][ T5268] dump_stack_lvl+0xd1/0x138 [ 113.630783][ T5268] should_fail_ex.cold+0x5/0xa [ 113.635573][ T5268] ? io_issue_sqe+0x695/0x1250 [ 113.640356][ T5268] should_failslab+0x9/0x20 [ 113.644868][ T5268] __kmem_cache_alloc_node+0x5b/0x330 [ 113.650240][ T5268] ? ref_tracker_alloc+0x158/0x560 [ 113.656166][ T5268] kmalloc_trace+0x26/0x60 [ 113.660636][ T5268] ref_tracker_alloc+0x158/0x560 [ 113.665611][ T5268] ? __lock_acquire+0xbc3/0x56d0 [ 113.670550][ T5268] ? ref_tracker_free+0x6b0/0x6b0 [ 113.675650][ T5268] dst_init+0xe4/0x520 [ 113.679747][ T5268] dst_alloc+0x16f/0x1f0 [ 113.684039][ T5268] rt_dst_alloc+0x55/0x430 [ 113.688503][ T5268] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 113.694545][ T5268] ip_route_output_key_hash+0x18f/0x340 [ 113.700147][ T5268] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 113.706476][ T5268] dccp_v4_connect+0x7e1/0x1730 [ 113.711391][ T5268] __inet_stream_connect+0x69e/0xed0 [ 113.716715][ T5268] ? inet_listen+0x640/0x640 [ 113.721374][ T5268] ? mark_held_locks+0x9f/0xe0 [ 113.726186][ T5268] ? __local_bh_enable_ip+0xa4/0x130 [ 113.731487][ T5268] inet_stream_connect+0x57/0xa0 [ 113.736454][ T5268] ? __inet_stream_connect+0xed0/0xed0 [ 113.741963][ T5268] __sys_connect_file+0x153/0x1a0 [ 113.747019][ T5268] io_connect+0x3cc/0x720 [ 113.751383][ T5268] ? io_connect_prep+0x250/0x250 [ 113.756382][ T5268] ? receive_fd+0x110/0x110 [ 113.760964][ T5268] ? rcu_read_lock_sched_held+0x3e/0x70 [ 113.766537][ T5268] ? io_connect_prep+0x250/0x250 [ 113.771515][ T5268] io_issue_sqe+0x695/0x1250 [ 113.776115][ T5268] io_submit_sqes+0x96c/0x1e90 [ 113.780961][ T5268] __do_sys_io_uring_enter+0x103d/0x24e0 [ 113.786654][ T5268] ? io_submit_sqes+0x1e90/0x1e90 [ 113.791715][ T5268] ? ptrace_notify+0xfe/0x140 [ 113.796396][ T5268] ? lock_downgrade+0x6e0/0x6e0 [ 113.801291][ T5268] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.806541][ T5268] ? lockdep_hardirqs_on+0x7d/0x100 [ 113.811760][ T5268] ? _raw_spin_unlock_irq+0x2e/0x50 [ 113.816996][ T5268] ? ptrace_notify+0xfe/0x140 [ 113.821698][ T5268] do_syscall_64+0x39/0xb0 [ 113.826168][ T5268] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.832098][ T5268] RIP: 0033:0x7f607b0de549 [ 113.836513][ T5268] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 113.856145][ T5268] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 113.864609][ T5268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 113.872618][ T5268] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 113.880597][ T5268] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5268] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5268] close(3) = 0 [pid 5268] close(4) = 0 [pid 5268] close(5) = 0 [pid 5268] close(6) = 0 [pid 5268] close(7) = 0 [pid 5268] close(8) = -1 EBADF (Bad file descriptor) [pid 5268] close(9) = -1 EBADF (Bad file descriptor) [pid 5268] close(10) = -1 EBADF (Bad file descriptor) [pid 5268] close(11) = -1 EBADF (Bad file descriptor) [pid 5268] close(12) = -1 EBADF (Bad file descriptor) [pid 5268] close(13) = -1 EBADF (Bad file descriptor) [pid 5268] close(14) = -1 EBADF (Bad file descriptor) [pid 5268] close(15) = -1 EBADF (Bad file descriptor) [pid 5268] close(16) = -1 EBADF (Bad file descriptor) [pid 5268] close(17) = -1 EBADF (Bad file descriptor) [pid 5268] close(18) = -1 EBADF (Bad file descriptor) [pid 5268] close(19) = -1 EBADF (Bad file descriptor) [pid 5268] close(20) = -1 EBADF (Bad file descriptor) [pid 5268] close(21) = -1 EBADF (Bad file descriptor) [pid 5268] close(22) = -1 EBADF (Bad file descriptor) [pid 5268] close(23) = -1 EBADF (Bad file descriptor) [pid 5268] close(24) = -1 EBADF (Bad file descriptor) [pid 5268] close(25) = -1 EBADF (Bad file descriptor) [pid 5268] close(26) = -1 EBADF (Bad file descriptor) [pid 5268] close(27) = -1 EBADF (Bad file descriptor) [pid 5268] close(28) = -1 EBADF (Bad file descriptor) [pid 5268] close(29) = -1 EBADF (Bad file descriptor) [pid 5268] exit_group(0) = ? [pid 5268] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=167, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 168 ./strace-static-x86_64: Process 5269 attached [pid 5269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5269] setpgid(0, 0) = 0 [pid 5269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5269] write(3, "1000", 4) = 4 [pid 5269] close(3) = 0 [pid 5269] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5269] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5269] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5269] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5269] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5269] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5269] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5269] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5269] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5269] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5269] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5269] write(7, "5", 1) = 1 [ 113.888568][ T5268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 113.896540][ T5268] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 113.904554][ T5268] [ 113.943736][ T5269] FAULT_INJECTION: forcing a failure. [ 113.943736][ T5269] name failslab, interval 1, probability 0, space 0, times 0 [ 113.956876][ T5269] CPU: 0 PID: 5269 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 113.966833][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 113.976888][ T5269] Call Trace: [ 113.980180][ T5269] [ 113.983137][ T5269] dump_stack_lvl+0xd1/0x138 [ 113.987764][ T5269] should_fail_ex.cold+0x5/0xa [ 113.992534][ T5269] ? io_issue_sqe+0x695/0x1250 [ 113.997323][ T5269] should_failslab+0x9/0x20 [ 114.001876][ T5269] __kmem_cache_alloc_node+0x5b/0x330 [ 114.007282][ T5269] ? ref_tracker_alloc+0x158/0x560 [ 114.012429][ T5269] kmalloc_trace+0x26/0x60 [ 114.016888][ T5269] ref_tracker_alloc+0x158/0x560 [ 114.021853][ T5269] ? __lock_acquire+0xbc3/0x56d0 [ 114.026811][ T5269] ? ref_tracker_free+0x6b0/0x6b0 [ 114.031886][ T5269] dst_init+0xe4/0x520 [ 114.035983][ T5269] dst_alloc+0x16f/0x1f0 [ 114.040250][ T5269] rt_dst_alloc+0x55/0x430 [ 114.044692][ T5269] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 114.050713][ T5269] ip_route_output_key_hash+0x18f/0x340 [ 114.056284][ T5269] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 114.062581][ T5269] dccp_v4_connect+0x7e1/0x1730 [ 114.067483][ T5269] __inet_stream_connect+0x69e/0xed0 [ 114.072809][ T5269] ? inet_listen+0x640/0x640 [ 114.077438][ T5269] ? mark_held_locks+0x9f/0xe0 [ 114.082223][ T5269] ? __local_bh_enable_ip+0xa4/0x130 [ 114.087536][ T5269] inet_stream_connect+0x57/0xa0 [ 114.092512][ T5269] ? __inet_stream_connect+0xed0/0xed0 [ 114.098008][ T5269] __sys_connect_file+0x153/0x1a0 [ 114.103067][ T5269] io_connect+0x3cc/0x720 [ 114.107434][ T5269] ? io_connect_prep+0x250/0x250 [ 114.112575][ T5269] ? receive_fd+0x110/0x110 [ 114.117147][ T5269] ? rcu_read_lock_sched_held+0x3e/0x70 [ 114.122739][ T5269] ? io_connect_prep+0x250/0x250 [ 114.127727][ T5269] io_issue_sqe+0x695/0x1250 [ 114.132353][ T5269] io_submit_sqes+0x96c/0x1e90 [ 114.137164][ T5269] __do_sys_io_uring_enter+0x103d/0x24e0 [ 114.142830][ T5269] ? io_submit_sqes+0x1e90/0x1e90 [ 114.147886][ T5269] ? ptrace_notify+0xfe/0x140 [ 114.152609][ T5269] ? lock_downgrade+0x6e0/0x6e0 [ 114.157505][ T5269] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.162824][ T5269] ? lockdep_hardirqs_on+0x7d/0x100 [ 114.168046][ T5269] ? _raw_spin_unlock_irq+0x2e/0x50 [ 114.173267][ T5269] ? ptrace_notify+0xfe/0x140 [ 114.177969][ T5269] do_syscall_64+0x39/0xb0 [ 114.182416][ T5269] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.188336][ T5269] RIP: 0033:0x7f607b0de549 [ 114.192767][ T5269] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 114.212394][ T5269] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 114.220826][ T5269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 114.228813][ T5269] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 114.236798][ T5269] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5269] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5269] close(3) = 0 [pid 5269] close(4) = 0 [pid 5269] close(5) = 0 [pid 5269] close(6) = 0 [pid 5269] close(7) = 0 [pid 5269] close(8) = -1 EBADF (Bad file descriptor) [pid 5269] close(9) = -1 EBADF (Bad file descriptor) [pid 5269] close(10) = -1 EBADF (Bad file descriptor) [pid 5269] close(11) = -1 EBADF (Bad file descriptor) [pid 5269] close(12) = -1 EBADF (Bad file descriptor) [pid 5269] close(13) = -1 EBADF (Bad file descriptor) [pid 5269] close(14) = -1 EBADF (Bad file descriptor) [pid 5269] close(15) = -1 EBADF (Bad file descriptor) [pid 5269] close(16) = -1 EBADF (Bad file descriptor) [pid 5269] close(17) = -1 EBADF (Bad file descriptor) [pid 5269] close(18) = -1 EBADF (Bad file descriptor) [pid 5269] close(19) = -1 EBADF (Bad file descriptor) [pid 5269] close(20) = -1 EBADF (Bad file descriptor) [pid 5269] close(21) = -1 EBADF (Bad file descriptor) [pid 5269] close(22) = -1 EBADF (Bad file descriptor) [pid 5269] close(23) = -1 EBADF (Bad file descriptor) [pid 5269] close(24) = -1 EBADF (Bad file descriptor) [pid 5269] close(25) = -1 EBADF (Bad file descriptor) [pid 5269] close(26) = -1 EBADF (Bad file descriptor) [pid 5269] close(27) = -1 EBADF (Bad file descriptor) [pid 5269] close(28) = -1 EBADF (Bad file descriptor) [pid 5269] close(29) = -1 EBADF (Bad file descriptor) [pid 5269] exit_group(0) = ? [pid 5269] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=168, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5270 attached , child_tidptr=0x555555eff5d0) = 169 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5270] setpgid(0, 0) = 0 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5270] write(3, "1000", 4) = 4 [pid 5270] close(3) = 0 [pid 5270] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5270] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5270] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5270] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5270] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 114.244783][ T5269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 114.252768][ T5269] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 114.260790][ T5269] [pid 5270] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5270] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5270] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5270] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5270] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5270] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5270] write(7, "5", 1) = 1 [ 114.313059][ T5270] FAULT_INJECTION: forcing a failure. [ 114.313059][ T5270] name failslab, interval 1, probability 0, space 0, times 0 [ 114.325864][ T5270] CPU: 0 PID: 5270 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 114.335795][ T5270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 114.345853][ T5270] Call Trace: [ 114.349145][ T5270] [ 114.352079][ T5270] dump_stack_lvl+0xd1/0x138 [ 114.356679][ T5270] should_fail_ex.cold+0x5/0xa [ 114.361445][ T5270] ? io_issue_sqe+0x695/0x1250 [ 114.366236][ T5270] should_failslab+0x9/0x20 [ 114.370789][ T5270] __kmem_cache_alloc_node+0x5b/0x330 [ 114.376188][ T5270] ? ref_tracker_alloc+0x158/0x560 [ 114.381310][ T5270] kmalloc_trace+0x26/0x60 [ 114.385737][ T5270] ref_tracker_alloc+0x158/0x560 [ 114.390705][ T5270] ? __lock_acquire+0xbc3/0x56d0 [ 114.395647][ T5270] ? ref_tracker_free+0x6b0/0x6b0 [ 114.400695][ T5270] dst_init+0xe4/0x520 [ 114.404772][ T5270] dst_alloc+0x16f/0x1f0 [ 114.409025][ T5270] rt_dst_alloc+0x55/0x430 [ 114.413502][ T5270] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 114.419532][ T5270] ip_route_output_key_hash+0x18f/0x340 [ 114.425118][ T5270] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 114.431405][ T5270] dccp_v4_connect+0x7e1/0x1730 [ 114.436283][ T5270] __inet_stream_connect+0x69e/0xed0 [ 114.441589][ T5270] ? inet_listen+0x640/0x640 [ 114.446195][ T5270] ? mark_held_locks+0x9f/0xe0 [ 114.450977][ T5270] ? __local_bh_enable_ip+0xa4/0x130 [ 114.456294][ T5270] inet_stream_connect+0x57/0xa0 [ 114.461258][ T5270] ? __inet_stream_connect+0xed0/0xed0 [ 114.466733][ T5270] __sys_connect_file+0x153/0x1a0 [ 114.471775][ T5270] io_connect+0x3cc/0x720 [ 114.476821][ T5270] ? io_connect_prep+0x250/0x250 [ 114.481782][ T5270] ? rcu_read_lock_sched_held+0x3e/0x70 [ 114.487342][ T5270] ? io_connect_prep+0x250/0x250 [ 114.492316][ T5270] io_issue_sqe+0x695/0x1250 [ 114.496951][ T5270] io_submit_sqes+0x96c/0x1e90 [ 114.501738][ T5270] __do_sys_io_uring_enter+0x103d/0x24e0 [ 114.507380][ T5270] ? io_submit_sqes+0x1e90/0x1e90 [ 114.512413][ T5270] ? ptrace_notify+0xfe/0x140 [ 114.517091][ T5270] ? lock_downgrade+0x6e0/0x6e0 [ 114.521976][ T5270] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.527206][ T5270] ? lockdep_hardirqs_on+0x7d/0x100 [ 114.532405][ T5270] ? _raw_spin_unlock_irq+0x2e/0x50 [ 114.537619][ T5270] ? ptrace_notify+0xfe/0x140 [ 114.542324][ T5270] do_syscall_64+0x39/0xb0 [ 114.546744][ T5270] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.552637][ T5270] RIP: 0033:0x7f607b0de549 [ 114.557048][ T5270] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 114.576837][ T5270] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 114.585260][ T5270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 114.593257][ T5270] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 114.601796][ T5270] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5270] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5270] close(3) = 0 [pid 5270] close(4) = 0 [pid 5270] close(5) = 0 [pid 5270] close(6) = 0 [pid 5270] close(7) = 0 [pid 5270] close(8) = -1 EBADF (Bad file descriptor) [pid 5270] close(9) = -1 EBADF (Bad file descriptor) [pid 5270] close(10) = -1 EBADF (Bad file descriptor) [pid 5270] close(11) = -1 EBADF (Bad file descriptor) [pid 5270] close(12) = -1 EBADF (Bad file descriptor) [pid 5270] close(13) = -1 EBADF (Bad file descriptor) [pid 5270] close(14) = -1 EBADF (Bad file descriptor) [pid 5270] close(15) = -1 EBADF (Bad file descriptor) [pid 5270] close(16) = -1 EBADF (Bad file descriptor) [pid 5270] close(17) = -1 EBADF (Bad file descriptor) [pid 5270] close(18) = -1 EBADF (Bad file descriptor) [pid 5270] close(19) = -1 EBADF (Bad file descriptor) [pid 5270] close(20) = -1 EBADF (Bad file descriptor) [pid 5270] close(21) = -1 EBADF (Bad file descriptor) [pid 5270] close(22) = -1 EBADF (Bad file descriptor) [pid 5270] close(23) = -1 EBADF (Bad file descriptor) [pid 5270] close(24) = -1 EBADF (Bad file descriptor) [pid 5270] close(25) = -1 EBADF (Bad file descriptor) [pid 5270] close(26) = -1 EBADF (Bad file descriptor) [pid 5270] close(27) = -1 EBADF (Bad file descriptor) [pid 5270] close(28) = -1 EBADF (Bad file descriptor) [pid 5270] close(29) = -1 EBADF (Bad file descriptor) [pid 5270] exit_group(0) = ? [pid 5270] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=169, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 170 ./strace-static-x86_64: Process 5271 attached [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0) = 0 [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] write(3, "1000", 4) = 4 [pid 5271] close(3) = 0 [pid 5271] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5271] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5271] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5271] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5271] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5271] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5271] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5271] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5271] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5271] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5271] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5271] write(7, "5", 1) = 1 [ 114.609774][ T5270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 114.617754][ T5270] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 114.625774][ T5270] [ 114.664471][ T5271] FAULT_INJECTION: forcing a failure. [ 114.664471][ T5271] name failslab, interval 1, probability 0, space 0, times 0 [ 114.677155][ T5271] CPU: 0 PID: 5271 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 114.687048][ T5271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 114.697123][ T5271] Call Trace: [ 114.700506][ T5271] [ 114.703450][ T5271] dump_stack_lvl+0xd1/0x138 [ 114.708059][ T5271] should_fail_ex.cold+0x5/0xa [ 114.712831][ T5271] ? __inet_hash_connect+0x95e/0x1ba0 [ 114.718211][ T5271] should_failslab+0x9/0x20 [ 114.722719][ T5271] kmem_cache_alloc+0x5a/0x320 [ 114.727486][ T5271] __inet_hash_connect+0x95e/0x1ba0 [ 114.732708][ T5271] ? __inet_lookup_listener+0xbf0/0xbf0 [ 114.738288][ T5271] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 114.744663][ T5271] dccp_v4_connect+0xb82/0x1730 [ 114.749539][ T5271] __inet_stream_connect+0x69e/0xed0 [ 114.754895][ T5271] ? inet_listen+0x640/0x640 [ 114.759500][ T5271] ? mark_held_locks+0x9f/0xe0 [ 114.764293][ T5271] ? __local_bh_enable_ip+0xa4/0x130 [ 114.769603][ T5271] inet_stream_connect+0x57/0xa0 [ 114.774582][ T5271] ? __inet_stream_connect+0xed0/0xed0 [ 114.780049][ T5271] __sys_connect_file+0x153/0x1a0 [ 114.785088][ T5271] io_connect+0x3cc/0x720 [ 114.789429][ T5271] ? io_connect_prep+0x250/0x250 [ 114.794388][ T5271] ? receive_fd+0x110/0x110 [ 114.798930][ T5271] ? rcu_read_lock_sched_held+0x3e/0x70 [ 114.804486][ T5271] ? io_connect_prep+0x250/0x250 [ 114.809437][ T5271] io_issue_sqe+0x695/0x1250 [ 114.814056][ T5271] io_submit_sqes+0x96c/0x1e90 [ 114.818862][ T5271] __do_sys_io_uring_enter+0x103d/0x24e0 [ 114.824508][ T5271] ? io_submit_sqes+0x1e90/0x1e90 [ 114.829554][ T5271] ? ptrace_notify+0xfe/0x140 [ 114.834259][ T5271] ? lock_downgrade+0x6e0/0x6e0 [ 114.839116][ T5271] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.844322][ T5271] ? lockdep_hardirqs_on+0x7d/0x100 [ 114.849710][ T5271] ? _raw_spin_unlock_irq+0x2e/0x50 [ 114.854953][ T5271] ? ptrace_notify+0xfe/0x140 [ 114.859654][ T5271] do_syscall_64+0x39/0xb0 [ 114.864117][ T5271] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.870012][ T5271] RIP: 0033:0x7f607b0de549 [ 114.874427][ T5271] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 114.894039][ T5271] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 114.902466][ T5271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5271] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5271] close(3) = 0 [pid 5271] close(4) = 0 [pid 5271] close(5) = 0 [pid 5271] close(6) = 0 [pid 5271] close(7) = 0 [pid 5271] close(8) = -1 EBADF (Bad file descriptor) [pid 5271] close(9) = -1 EBADF (Bad file descriptor) [pid 5271] close(10) = -1 EBADF (Bad file descriptor) [pid 5271] close(11) = -1 EBADF (Bad file descriptor) [pid 5271] close(12) = -1 EBADF (Bad file descriptor) [pid 5271] close(13) = -1 EBADF (Bad file descriptor) [pid 5271] close(14) = -1 EBADF (Bad file descriptor) [pid 5271] close(15) = -1 EBADF (Bad file descriptor) [pid 5271] close(16) = -1 EBADF (Bad file descriptor) [pid 5271] close(17) = -1 EBADF (Bad file descriptor) [pid 5271] close(18) = -1 EBADF (Bad file descriptor) [pid 5271] close(19) = -1 EBADF (Bad file descriptor) [pid 5271] close(20) = -1 EBADF (Bad file descriptor) [pid 5271] close(21) = -1 EBADF (Bad file descriptor) [pid 5271] close(22) = -1 EBADF (Bad file descriptor) [pid 5271] close(23) = -1 EBADF (Bad file descriptor) [pid 5271] close(24) = -1 EBADF (Bad file descriptor) [pid 5271] close(25) = -1 EBADF (Bad file descriptor) [pid 5271] close(26) = -1 EBADF (Bad file descriptor) [pid 5271] close(27) = -1 EBADF (Bad file descriptor) [pid 5271] close(28) = -1 EBADF (Bad file descriptor) [pid 5271] close(29) = -1 EBADF (Bad file descriptor) [pid 5271] exit_group(0) = ? [pid 5271] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=170, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 171 ./strace-static-x86_64: Process 5272 attached [pid 5272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5272] setpgid(0, 0) = 0 [pid 5272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5272] write(3, "1000", 4) = 4 [pid 5272] close(3) = 0 [pid 5272] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5272] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5272] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5272] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5272] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5272] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5272] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5272] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5272] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5272] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5272] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5272] write(7, "5", 1) = 1 [ 114.910447][ T5271] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 114.918526][ T5271] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 114.926497][ T5271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 114.934472][ T5271] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 114.942487][ T5271] [ 114.978977][ T5272] FAULT_INJECTION: forcing a failure. [ 114.978977][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 114.992741][ T5272] CPU: 0 PID: 5272 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 115.002661][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 115.012838][ T5272] Call Trace: [ 115.016131][ T5272] [ 115.019059][ T5272] dump_stack_lvl+0xd1/0x138 [ 115.023664][ T5272] should_fail_ex.cold+0x5/0xa [ 115.028426][ T5272] ? io_issue_sqe+0x695/0x1250 [ 115.033195][ T5272] should_failslab+0x9/0x20 [ 115.037721][ T5272] __kmem_cache_alloc_node+0x5b/0x330 [ 115.043212][ T5272] ? ref_tracker_alloc+0x158/0x560 [ 115.048358][ T5272] kmalloc_trace+0x26/0x60 [ 115.052789][ T5272] ref_tracker_alloc+0x158/0x560 [ 115.057737][ T5272] ? __lock_acquire+0xbc3/0x56d0 [ 115.062694][ T5272] ? ref_tracker_free+0x6b0/0x6b0 [ 115.067768][ T5272] dst_init+0xe4/0x520 [ 115.071854][ T5272] dst_alloc+0x16f/0x1f0 [ 115.076117][ T5272] rt_dst_alloc+0x55/0x430 [ 115.080565][ T5272] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 115.086569][ T5272] ip_route_output_key_hash+0x18f/0x340 [ 115.092126][ T5272] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 115.098478][ T5272] dccp_v4_connect+0x7e1/0x1730 [ 115.103382][ T5272] __inet_stream_connect+0x69e/0xed0 [ 115.108700][ T5272] ? inet_listen+0x640/0x640 [ 115.113347][ T5272] ? mark_held_locks+0x9f/0xe0 [ 115.118114][ T5272] ? __local_bh_enable_ip+0xa4/0x130 [ 115.123402][ T5272] inet_stream_connect+0x57/0xa0 [ 115.128347][ T5272] ? __inet_stream_connect+0xed0/0xed0 [ 115.133817][ T5272] __sys_connect_file+0x153/0x1a0 [ 115.138861][ T5272] io_connect+0x3cc/0x720 [ 115.143314][ T5272] ? io_connect_prep+0x250/0x250 [ 115.148271][ T5272] ? receive_fd+0x110/0x110 [ 115.152790][ T5272] ? rcu_read_lock_sched_held+0x3e/0x70 [ 115.158338][ T5272] ? io_connect_prep+0x250/0x250 [ 115.163458][ T5272] io_issue_sqe+0x695/0x1250 [ 115.168063][ T5272] io_submit_sqes+0x96c/0x1e90 [ 115.172862][ T5272] __do_sys_io_uring_enter+0x103d/0x24e0 [ 115.178553][ T5272] ? io_submit_sqes+0x1e90/0x1e90 [ 115.183613][ T5272] ? ptrace_notify+0xfe/0x140 [ 115.188291][ T5272] ? lock_downgrade+0x6e0/0x6e0 [ 115.193160][ T5272] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.198364][ T5272] ? lockdep_hardirqs_on+0x7d/0x100 [ 115.203573][ T5272] ? _raw_spin_unlock_irq+0x2e/0x50 [ 115.208785][ T5272] ? ptrace_notify+0xfe/0x140 [ 115.213480][ T5272] do_syscall_64+0x39/0xb0 [ 115.217907][ T5272] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.223804][ T5272] RIP: 0033:0x7f607b0de549 [ 115.228218][ T5272] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 115.247890][ T5272] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 115.256306][ T5272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 115.264280][ T5272] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 115.272268][ T5272] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5272] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5272] close(3) = 0 [pid 5272] close(4) = 0 [pid 5272] close(5) = 0 [pid 5272] close(6) = 0 [pid 5272] close(7) = 0 [pid 5272] close(8) = -1 EBADF (Bad file descriptor) [pid 5272] close(9) = -1 EBADF (Bad file descriptor) [pid 5272] close(10) = -1 EBADF (Bad file descriptor) [pid 5272] close(11) = -1 EBADF (Bad file descriptor) [pid 5272] close(12) = -1 EBADF (Bad file descriptor) [pid 5272] close(13) = -1 EBADF (Bad file descriptor) [pid 5272] close(14) = -1 EBADF (Bad file descriptor) [pid 5272] close(15) = -1 EBADF (Bad file descriptor) [pid 5272] close(16) = -1 EBADF (Bad file descriptor) [pid 5272] close(17) = -1 EBADF (Bad file descriptor) [pid 5272] close(18) = -1 EBADF (Bad file descriptor) [pid 5272] close(19) = -1 EBADF (Bad file descriptor) [pid 5272] close(20) = -1 EBADF (Bad file descriptor) [pid 5272] close(21) = -1 EBADF (Bad file descriptor) [pid 5272] close(22) = -1 EBADF (Bad file descriptor) [pid 5272] close(23) = -1 EBADF (Bad file descriptor) [pid 5272] close(24) = -1 EBADF (Bad file descriptor) [pid 5272] close(25) = -1 EBADF (Bad file descriptor) [pid 5272] close(26) = -1 EBADF (Bad file descriptor) [pid 5272] close(27) = -1 EBADF (Bad file descriptor) [pid 5272] close(28) = -1 EBADF (Bad file descriptor) [pid 5272] close(29) = -1 EBADF (Bad file descriptor) [pid 5272] exit_group(0) = ? [pid 5272] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=171, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 172 ./strace-static-x86_64: Process 5273 attached [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5273] write(3, "1000", 4) = 4 [pid 5273] close(3) = 0 [pid 5273] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5273] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5273] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5273] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5273] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5273] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5273] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5273] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5273] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5273] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5273] write(7, "5", 1) = 1 [ 115.280263][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 115.288243][ T5272] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 115.296229][ T5272] [ 115.337577][ T5273] FAULT_INJECTION: forcing a failure. [ 115.337577][ T5273] name failslab, interval 1, probability 0, space 0, times 0 [ 115.350284][ T5273] CPU: 1 PID: 5273 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 115.360206][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 115.370268][ T5273] Call Trace: [ 115.373562][ T5273] [ 115.376520][ T5273] dump_stack_lvl+0xd1/0x138 [ 115.381161][ T5273] should_fail_ex.cold+0x5/0xa [ 115.386132][ T5273] ? __inet_hash_connect+0x95e/0x1ba0 [ 115.393512][ T5273] should_failslab+0x9/0x20 [ 115.398030][ T5273] kmem_cache_alloc+0x5a/0x320 [ 115.402800][ T5273] __inet_hash_connect+0x95e/0x1ba0 [ 115.408009][ T5273] ? __inet_lookup_listener+0xbf0/0xbf0 [ 115.413583][ T5273] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 115.419964][ T5273] dccp_v4_connect+0xb82/0x1730 [ 115.424865][ T5273] __inet_stream_connect+0x69e/0xed0 [ 115.430189][ T5273] ? inet_listen+0x640/0x640 [ 115.434825][ T5273] ? mark_held_locks+0x9f/0xe0 [ 115.439620][ T5273] ? __local_bh_enable_ip+0xa4/0x130 [ 115.444939][ T5273] inet_stream_connect+0x57/0xa0 [ 115.449913][ T5273] ? __inet_stream_connect+0xed0/0xed0 [ 115.455410][ T5273] __sys_connect_file+0x153/0x1a0 [ 115.460544][ T5273] io_connect+0x3cc/0x720 [ 115.464906][ T5273] ? io_connect_prep+0x250/0x250 [ 115.469877][ T5273] ? receive_fd+0x110/0x110 [ 115.474420][ T5273] ? rcu_read_lock_sched_held+0x3e/0x70 [ 115.479990][ T5273] ? io_connect_prep+0x250/0x250 [ 115.484966][ T5273] io_issue_sqe+0x695/0x1250 [ 115.489590][ T5273] io_submit_sqes+0x96c/0x1e90 [ 115.494419][ T5273] __do_sys_io_uring_enter+0x103d/0x24e0 [ 115.500172][ T5273] ? io_submit_sqes+0x1e90/0x1e90 [ 115.505224][ T5273] ? ptrace_notify+0xfe/0x140 [ 115.509921][ T5273] ? lock_downgrade+0x6e0/0x6e0 [ 115.514821][ T5273] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.520048][ T5273] ? lockdep_hardirqs_on+0x7d/0x100 [ 115.525266][ T5273] ? _raw_spin_unlock_irq+0x2e/0x50 [ 115.530576][ T5273] ? ptrace_notify+0xfe/0x140 [ 115.535364][ T5273] do_syscall_64+0x39/0xb0 [ 115.539811][ T5273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.545738][ T5273] RIP: 0033:0x7f607b0de549 [ 115.550166][ T5273] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 115.569809][ T5273] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 115.578250][ T5273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5273] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5273] close(3) = 0 [pid 5273] close(4) = 0 [pid 5273] close(5) = 0 [pid 5273] close(6) = 0 [pid 5273] close(7) = 0 [pid 5273] close(8) = -1 EBADF (Bad file descriptor) [pid 5273] close(9) = -1 EBADF (Bad file descriptor) [pid 5273] close(10) = -1 EBADF (Bad file descriptor) [pid 5273] close(11) = -1 EBADF (Bad file descriptor) [pid 5273] close(12) = -1 EBADF (Bad file descriptor) [pid 5273] close(13) = -1 EBADF (Bad file descriptor) [pid 5273] close(14) = -1 EBADF (Bad file descriptor) [pid 5273] close(15) = -1 EBADF (Bad file descriptor) [pid 5273] close(16) = -1 EBADF (Bad file descriptor) [pid 5273] close(17) = -1 EBADF (Bad file descriptor) [pid 5273] close(18) = -1 EBADF (Bad file descriptor) [pid 5273] close(19) = -1 EBADF (Bad file descriptor) [pid 5273] close(20) = -1 EBADF (Bad file descriptor) [pid 5273] close(21) = -1 EBADF (Bad file descriptor) [pid 5273] close(22) = -1 EBADF (Bad file descriptor) [pid 5273] close(23) = -1 EBADF (Bad file descriptor) [pid 5273] close(24) = -1 EBADF (Bad file descriptor) [pid 5273] close(25) = -1 EBADF (Bad file descriptor) [pid 5273] close(26) = -1 EBADF (Bad file descriptor) [pid 5273] close(27) = -1 EBADF (Bad file descriptor) [pid 5273] close(28) = -1 EBADF (Bad file descriptor) [pid 5273] close(29) = -1 EBADF (Bad file descriptor) [pid 5273] exit_group(0) = ? [pid 5273] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=172, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5274 attached [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5274] setpgid(0, 0 [pid 5075] <... clone resumed>, child_tidptr=0x555555eff5d0) = 173 [pid 5274] <... setpgid resumed>) = 0 [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5274] write(3, "1000", 4) = 4 [pid 5274] close(3) = 0 [pid 5274] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5274] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5274] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5274] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5274] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5274] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5274] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5274] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5274] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5274] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5274] write(7, "5", 1) = 1 [ 115.586322][ T5273] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 115.594310][ T5273] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 115.602295][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 115.610277][ T5273] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 115.618286][ T5273] [ 115.658116][ T5274] FAULT_INJECTION: forcing a failure. [ 115.658116][ T5274] name failslab, interval 1, probability 0, space 0, times 0 [ 115.671034][ T5274] CPU: 0 PID: 5274 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 115.680962][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 115.691045][ T5274] Call Trace: [ 115.694331][ T5274] [ 115.697263][ T5274] dump_stack_lvl+0xd1/0x138 [ 115.701926][ T5274] should_fail_ex.cold+0x5/0xa [ 115.706713][ T5274] ? io_issue_sqe+0x695/0x1250 [ 115.711487][ T5274] should_failslab+0x9/0x20 [ 115.715999][ T5274] __kmem_cache_alloc_node+0x5b/0x330 [ 115.721370][ T5274] ? ref_tracker_alloc+0x158/0x560 [ 115.727014][ T5274] kmalloc_trace+0x26/0x60 [ 115.731451][ T5274] ref_tracker_alloc+0x158/0x560 [ 115.736430][ T5274] ? __lock_acquire+0xbc3/0x56d0 [ 115.741471][ T5274] ? ref_tracker_free+0x6b0/0x6b0 [ 115.746547][ T5274] dst_init+0xe4/0x520 [ 115.750643][ T5274] dst_alloc+0x16f/0x1f0 [ 115.754920][ T5274] rt_dst_alloc+0x55/0x430 [ 115.759361][ T5274] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 115.765380][ T5274] ip_route_output_key_hash+0x18f/0x340 [ 115.770953][ T5274] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 115.777239][ T5274] dccp_v4_connect+0x7e1/0x1730 [ 115.782137][ T5274] __inet_stream_connect+0x69e/0xed0 [ 115.787461][ T5274] ? inet_listen+0x640/0x640 [ 115.792085][ T5274] ? mark_held_locks+0x9f/0xe0 [ 115.796876][ T5274] ? __local_bh_enable_ip+0xa4/0x130 [ 115.802189][ T5274] inet_stream_connect+0x57/0xa0 [ 115.807156][ T5274] ? __inet_stream_connect+0xed0/0xed0 [ 115.812642][ T5274] __sys_connect_file+0x153/0x1a0 [ 115.817693][ T5274] io_connect+0x3cc/0x720 [ 115.822057][ T5274] ? io_connect_prep+0x250/0x250 [ 115.827027][ T5274] ? receive_fd+0x110/0x110 [ 115.831611][ T5274] ? rcu_read_lock_sched_held+0x3e/0x70 [ 115.837187][ T5274] ? io_connect_prep+0x250/0x250 [ 115.842245][ T5274] io_issue_sqe+0x695/0x1250 [ 115.846871][ T5274] io_submit_sqes+0x96c/0x1e90 [ 115.851678][ T5274] __do_sys_io_uring_enter+0x103d/0x24e0 [ 115.857346][ T5274] ? io_submit_sqes+0x1e90/0x1e90 [ 115.862487][ T5274] ? ptrace_notify+0xfe/0x140 [ 115.867183][ T5274] ? lock_downgrade+0x6e0/0x6e0 [ 115.872060][ T5274] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.877298][ T5274] ? lockdep_hardirqs_on+0x7d/0x100 [ 115.882517][ T5274] ? _raw_spin_unlock_irq+0x2e/0x50 [ 115.887740][ T5274] ? ptrace_notify+0xfe/0x140 [ 115.892444][ T5274] do_syscall_64+0x39/0xb0 [ 115.896891][ T5274] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.902802][ T5274] RIP: 0033:0x7f607b0de549 [ 115.907233][ T5274] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 115.926860][ T5274] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 115.935291][ T5274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 115.943275][ T5274] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 115.951256][ T5274] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5274] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5274] close(3) = 0 [pid 5274] close(4) = 0 [pid 5274] close(5) = 0 [pid 5274] close(6) = 0 [pid 5274] close(7) = 0 [pid 5274] close(8) = -1 EBADF (Bad file descriptor) [pid 5274] close(9) = -1 EBADF (Bad file descriptor) [pid 5274] close(10) = -1 EBADF (Bad file descriptor) [pid 5274] close(11) = -1 EBADF (Bad file descriptor) [pid 5274] close(12) = -1 EBADF (Bad file descriptor) [pid 5274] close(13) = -1 EBADF (Bad file descriptor) [pid 5274] close(14) = -1 EBADF (Bad file descriptor) [pid 5274] close(15) = -1 EBADF (Bad file descriptor) [pid 5274] close(16) = -1 EBADF (Bad file descriptor) [pid 5274] close(17) = -1 EBADF (Bad file descriptor) [pid 5274] close(18) = -1 EBADF (Bad file descriptor) [pid 5274] close(19) = -1 EBADF (Bad file descriptor) [pid 5274] close(20) = -1 EBADF (Bad file descriptor) [pid 5274] close(21) = -1 EBADF (Bad file descriptor) [pid 5274] close(22) = -1 EBADF (Bad file descriptor) [pid 5274] close(23) = -1 EBADF (Bad file descriptor) [pid 5274] close(24) = -1 EBADF (Bad file descriptor) [pid 5274] close(25) = -1 EBADF (Bad file descriptor) [pid 5274] close(26) = -1 EBADF (Bad file descriptor) [pid 5274] close(27) = -1 EBADF (Bad file descriptor) [pid 5274] close(28) = -1 EBADF (Bad file descriptor) [pid 5274] close(29) = -1 EBADF (Bad file descriptor) [pid 5274] exit_group(0) = ? [pid 5274] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=173, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5275 attached [pid 5275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5275] setpgid(0, 0) = 0 [pid 5275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... clone resumed>, child_tidptr=0x555555eff5d0) = 174 [pid 5275] <... openat resumed>) = 3 [pid 5275] write(3, "1000", 4) = 4 [pid 5275] close(3) = 0 [pid 5275] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5275] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5275] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5275] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5275] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5275] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5275] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5275] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5275] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5275] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5275] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5275] write(7, "5", 1) = 1 [ 115.959334][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 115.967319][ T5274] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 115.975323][ T5274] [ 116.016202][ T5275] FAULT_INJECTION: forcing a failure. [ 116.016202][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 116.029395][ T5275] CPU: 0 PID: 5275 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 116.039342][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 116.049477][ T5275] Call Trace: [ 116.052945][ T5275] [ 116.055873][ T5275] dump_stack_lvl+0xd1/0x138 [ 116.060469][ T5275] should_fail_ex.cold+0x5/0xa [ 116.065237][ T5275] ? io_issue_sqe+0x695/0x1250 [ 116.070019][ T5275] should_failslab+0x9/0x20 [ 116.074572][ T5275] __kmem_cache_alloc_node+0x5b/0x330 [ 116.080755][ T5275] ? ref_tracker_alloc+0x158/0x560 [ 116.085925][ T5275] kmalloc_trace+0x26/0x60 [ 116.090381][ T5275] ref_tracker_alloc+0x158/0x560 [ 116.095341][ T5275] ? __lock_acquire+0xbc3/0x56d0 [ 116.100280][ T5275] ? ref_tracker_free+0x6b0/0x6b0 [ 116.105378][ T5275] dst_init+0xe4/0x520 [ 116.109482][ T5275] dst_alloc+0x16f/0x1f0 [ 116.113740][ T5275] rt_dst_alloc+0x55/0x430 [ 116.118164][ T5275] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 116.124160][ T5275] ip_route_output_key_hash+0x18f/0x340 [ 116.129720][ T5275] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 116.135998][ T5275] dccp_v4_connect+0x7e1/0x1730 [ 116.140901][ T5275] __inet_stream_connect+0x69e/0xed0 [ 116.146231][ T5275] ? inet_listen+0x640/0x640 [ 116.150857][ T5275] ? mark_held_locks+0x9f/0xe0 [ 116.155646][ T5275] ? __local_bh_enable_ip+0xa4/0x130 [ 116.160960][ T5275] inet_stream_connect+0x57/0xa0 [ 116.165927][ T5275] ? __inet_stream_connect+0xed0/0xed0 [ 116.171436][ T5275] __sys_connect_file+0x153/0x1a0 [ 116.176508][ T5275] io_connect+0x3cc/0x720 [ 116.180886][ T5275] ? io_connect_prep+0x250/0x250 [ 116.185861][ T5275] ? receive_fd+0x110/0x110 [ 116.190422][ T5275] ? rcu_read_lock_sched_held+0x3e/0x70 [ 116.195987][ T5275] ? io_connect_prep+0x250/0x250 [ 116.200962][ T5275] io_issue_sqe+0x695/0x1250 [ 116.205583][ T5275] io_submit_sqes+0x96c/0x1e90 [ 116.210393][ T5275] __do_sys_io_uring_enter+0x103d/0x24e0 [ 116.216075][ T5275] ? io_submit_sqes+0x1e90/0x1e90 [ 116.221141][ T5275] ? ptrace_notify+0xfe/0x140 [ 116.225853][ T5275] ? lock_downgrade+0x6e0/0x6e0 [ 116.230786][ T5275] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.236010][ T5275] ? lockdep_hardirqs_on+0x7d/0x100 [ 116.241250][ T5275] ? _raw_spin_unlock_irq+0x2e/0x50 [ 116.246477][ T5275] ? ptrace_notify+0xfe/0x140 [ 116.251183][ T5275] do_syscall_64+0x39/0xb0 [ 116.255634][ T5275] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.261547][ T5275] RIP: 0033:0x7f607b0de549 [ 116.265981][ T5275] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 116.285619][ T5275] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 116.294065][ T5275] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 116.302051][ T5275] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5275] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5275] close(3) = 0 [pid 5275] close(4) = 0 [pid 5275] close(5) = 0 [pid 5275] close(6) = 0 [pid 5275] close(7) = 0 [pid 5275] close(8) = -1 EBADF (Bad file descriptor) [pid 5275] close(9) = -1 EBADF (Bad file descriptor) [pid 5275] close(10) = -1 EBADF (Bad file descriptor) [pid 5275] close(11) = -1 EBADF (Bad file descriptor) [pid 5275] close(12) = -1 EBADF (Bad file descriptor) [pid 5275] close(13) = -1 EBADF (Bad file descriptor) [pid 5275] close(14) = -1 EBADF (Bad file descriptor) [pid 5275] close(15) = -1 EBADF (Bad file descriptor) [pid 5275] close(16) = -1 EBADF (Bad file descriptor) [pid 5275] close(17) = -1 EBADF (Bad file descriptor) [pid 5275] close(18) = -1 EBADF (Bad file descriptor) [pid 5275] close(19) = -1 EBADF (Bad file descriptor) [pid 5275] close(20) = -1 EBADF (Bad file descriptor) [pid 5275] close(21) = -1 EBADF (Bad file descriptor) [pid 5275] close(22) = -1 EBADF (Bad file descriptor) [pid 5275] close(23) = -1 EBADF (Bad file descriptor) [pid 5275] close(24) = -1 EBADF (Bad file descriptor) [pid 5275] close(25) = -1 EBADF (Bad file descriptor) [pid 5275] close(26) = -1 EBADF (Bad file descriptor) [pid 5275] close(27) = -1 EBADF (Bad file descriptor) [pid 5275] close(28) = -1 EBADF (Bad file descriptor) [pid 5275] close(29) = -1 EBADF (Bad file descriptor) [pid 5275] exit_group(0) = ? [pid 5275] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=174, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5276 attached , child_tidptr=0x555555eff5d0) = 175 [pid 5276] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5276] setpgid(0, 0) = 0 [pid 5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5276] write(3, "1000", 4) = 4 [pid 5276] close(3) = 0 [pid 5276] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5276] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5276] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5276] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5276] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5276] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5276] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5276] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5276] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5276] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5276] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5276] write(7, "5", 1) = 1 [ 116.310035][ T5275] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 116.318041][ T5275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 116.326047][ T5275] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 116.334079][ T5275] [ 116.373794][ T5276] FAULT_INJECTION: forcing a failure. [ 116.373794][ T5276] name failslab, interval 1, probability 0, space 0, times 0 [ 116.386490][ T5276] CPU: 0 PID: 5276 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 116.396431][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 116.406510][ T5276] Call Trace: [ 116.409811][ T5276] [ 116.412765][ T5276] dump_stack_lvl+0xd1/0x138 [ 116.417383][ T5276] should_fail_ex.cold+0x5/0xa [ 116.422150][ T5276] ? __inet_hash_connect+0x95e/0x1ba0 [ 116.427524][ T5276] should_failslab+0x9/0x20 [ 116.432033][ T5276] kmem_cache_alloc+0x5a/0x320 [ 116.436836][ T5276] __inet_hash_connect+0x95e/0x1ba0 [ 116.442064][ T5276] ? __inet_lookup_listener+0xbf0/0xbf0 [ 116.447660][ T5276] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 116.454029][ T5276] dccp_v4_connect+0xb82/0x1730 [ 116.460924][ T5276] __inet_stream_connect+0x69e/0xed0 [ 116.466258][ T5276] ? inet_listen+0x640/0x640 [ 116.470856][ T5276] ? mark_held_locks+0x9f/0xe0 [ 116.475639][ T5276] ? __local_bh_enable_ip+0xa4/0x130 [ 116.480954][ T5276] inet_stream_connect+0x57/0xa0 [ 116.485913][ T5276] ? __inet_stream_connect+0xed0/0xed0 [ 116.491425][ T5276] __sys_connect_file+0x153/0x1a0 [ 116.496482][ T5276] io_connect+0x3cc/0x720 [ 116.500823][ T5276] ? io_connect_prep+0x250/0x250 [ 116.505770][ T5276] ? receive_fd+0x110/0x110 [ 116.510309][ T5276] ? rcu_read_lock_sched_held+0x3e/0x70 [ 116.515886][ T5276] ? io_connect_prep+0x250/0x250 [ 116.520853][ T5276] io_issue_sqe+0x695/0x1250 [ 116.525477][ T5276] io_submit_sqes+0x96c/0x1e90 [ 116.530261][ T5276] __do_sys_io_uring_enter+0x103d/0x24e0 [ 116.535924][ T5276] ? io_submit_sqes+0x1e90/0x1e90 [ 116.540988][ T5276] ? ptrace_notify+0xfe/0x140 [ 116.545958][ T5276] ? lock_downgrade+0x6e0/0x6e0 [ 116.550837][ T5276] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.556071][ T5276] ? lockdep_hardirqs_on+0x7d/0x100 [ 116.561285][ T5276] ? _raw_spin_unlock_irq+0x2e/0x50 [ 116.566510][ T5276] ? ptrace_notify+0xfe/0x140 [ 116.571218][ T5276] do_syscall_64+0x39/0xb0 [ 116.575642][ T5276] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.581550][ T5276] RIP: 0033:0x7f607b0de549 [ 116.585962][ T5276] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 116.605666][ T5276] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 116.614089][ T5276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5276] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5276] close(3) = 0 [pid 5276] close(4) = 0 [pid 5276] close(5) = 0 [pid 5276] close(6) = 0 [pid 5276] close(7) = 0 [pid 5276] close(8) = -1 EBADF (Bad file descriptor) [pid 5276] close(9) = -1 EBADF (Bad file descriptor) [pid 5276] close(10) = -1 EBADF (Bad file descriptor) [pid 5276] close(11) = -1 EBADF (Bad file descriptor) [pid 5276] close(12) = -1 EBADF (Bad file descriptor) [pid 5276] close(13) = -1 EBADF (Bad file descriptor) [pid 5276] close(14) = -1 EBADF (Bad file descriptor) [pid 5276] close(15) = -1 EBADF (Bad file descriptor) [pid 5276] close(16) = -1 EBADF (Bad file descriptor) [pid 5276] close(17) = -1 EBADF (Bad file descriptor) [pid 5276] close(18) = -1 EBADF (Bad file descriptor) [pid 5276] close(19) = -1 EBADF (Bad file descriptor) [pid 5276] close(20) = -1 EBADF (Bad file descriptor) [pid 5276] close(21) = -1 EBADF (Bad file descriptor) [pid 5276] close(22) = -1 EBADF (Bad file descriptor) [pid 5276] close(23) = -1 EBADF (Bad file descriptor) [pid 5276] close(24) = -1 EBADF (Bad file descriptor) [pid 5276] close(25) = -1 EBADF (Bad file descriptor) [pid 5276] close(26) = -1 EBADF (Bad file descriptor) [pid 5276] close(27) = -1 EBADF (Bad file descriptor) [pid 5276] close(28) = -1 EBADF (Bad file descriptor) [pid 5276] close(29) = -1 EBADF (Bad file descriptor) [pid 5276] exit_group(0) = ? [pid 5276] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=175, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 176 ./strace-static-x86_64: Process 5277 attached [pid 5277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5277] setpgid(0, 0) = 0 [pid 5277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5277] write(3, "1000", 4) = 4 [pid 5277] close(3) = 0 [pid 5277] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5277] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5277] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5277] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5277] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5277] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5277] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5277] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5277] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5277] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5277] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5277] write(7, "5", 1) = 1 [ 116.622077][ T5276] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 116.630068][ T5276] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 116.638037][ T5276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 116.646014][ T5276] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 116.654009][ T5276] [ 116.693305][ T5277] FAULT_INJECTION: forcing a failure. [ 116.693305][ T5277] name failslab, interval 1, probability 0, space 0, times 0 [ 116.706126][ T5277] CPU: 0 PID: 5277 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 116.716055][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 116.726148][ T5277] Call Trace: [ 116.729440][ T5277] [ 116.732369][ T5277] dump_stack_lvl+0xd1/0x138 [ 116.736968][ T5277] should_fail_ex.cold+0x5/0xa [ 116.741755][ T5277] ? io_issue_sqe+0x695/0x1250 [ 116.746605][ T5277] should_failslab+0x9/0x20 [ 116.751114][ T5277] __kmem_cache_alloc_node+0x5b/0x330 [ 116.756484][ T5277] ? ref_tracker_alloc+0x158/0x560 [ 116.761627][ T5277] kmalloc_trace+0x26/0x60 [ 116.766085][ T5277] ref_tracker_alloc+0x158/0x560 [ 116.771050][ T5277] ? __lock_acquire+0xbc3/0x56d0 [ 116.776006][ T5277] ? ref_tracker_free+0x6b0/0x6b0 [ 116.781082][ T5277] dst_init+0xe4/0x520 [ 116.785177][ T5277] dst_alloc+0x16f/0x1f0 [ 116.789444][ T5277] rt_dst_alloc+0x55/0x430 [ 116.793897][ T5277] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 116.799923][ T5277] ip_route_output_key_hash+0x18f/0x340 [ 116.805494][ T5277] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 116.811787][ T5277] dccp_v4_connect+0x7e1/0x1730 [ 116.816694][ T5277] __inet_stream_connect+0x69e/0xed0 [ 116.822019][ T5277] ? inet_listen+0x640/0x640 [ 116.826643][ T5277] ? mark_held_locks+0x9f/0xe0 [ 116.831436][ T5277] ? __local_bh_enable_ip+0xa4/0x130 [ 116.836752][ T5277] inet_stream_connect+0x57/0xa0 [ 116.841733][ T5277] ? __inet_stream_connect+0xed0/0xed0 [ 116.847222][ T5277] __sys_connect_file+0x153/0x1a0 [ 116.852269][ T5277] io_connect+0x3cc/0x720 [ 116.856632][ T5277] ? io_connect_prep+0x250/0x250 [ 116.861695][ T5277] ? receive_fd+0x110/0x110 [ 116.866239][ T5277] ? rcu_read_lock_sched_held+0x3e/0x70 [ 116.871808][ T5277] ? io_connect_prep+0x250/0x250 [ 116.876812][ T5277] io_issue_sqe+0x695/0x1250 [ 116.881432][ T5277] io_submit_sqes+0x96c/0x1e90 [ 116.886244][ T5277] __do_sys_io_uring_enter+0x103d/0x24e0 [ 116.891913][ T5277] ? io_submit_sqes+0x1e90/0x1e90 [ 116.896967][ T5277] ? ptrace_notify+0xfe/0x140 [ 116.901666][ T5277] ? lock_downgrade+0x6e0/0x6e0 [ 116.906573][ T5277] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.911800][ T5277] ? lockdep_hardirqs_on+0x7d/0x100 [ 116.917016][ T5277] ? _raw_spin_unlock_irq+0x2e/0x50 [ 116.922234][ T5277] ? ptrace_notify+0xfe/0x140 [ 116.926936][ T5277] do_syscall_64+0x39/0xb0 [ 116.931379][ T5277] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 116.937290][ T5277] RIP: 0033:0x7f607b0de549 [ 116.941717][ T5277] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 116.961340][ T5277] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 116.969775][ T5277] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 116.977760][ T5277] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 116.985745][ T5277] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5277] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5277] close(3) = 0 [pid 5277] close(4) = 0 [pid 5277] close(5) = 0 [pid 5277] close(6) = 0 [pid 5277] close(7) = 0 [pid 5277] close(8) = -1 EBADF (Bad file descriptor) [pid 5277] close(9) = -1 EBADF (Bad file descriptor) [pid 5277] close(10) = -1 EBADF (Bad file descriptor) [pid 5277] close(11) = -1 EBADF (Bad file descriptor) [pid 5277] close(12) = -1 EBADF (Bad file descriptor) [pid 5277] close(13) = -1 EBADF (Bad file descriptor) [pid 5277] close(14) = -1 EBADF (Bad file descriptor) [pid 5277] close(15) = -1 EBADF (Bad file descriptor) [pid 5277] close(16) = -1 EBADF (Bad file descriptor) [pid 5277] close(17) = -1 EBADF (Bad file descriptor) [pid 5277] close(18) = -1 EBADF (Bad file descriptor) [pid 5277] close(19) = -1 EBADF (Bad file descriptor) [pid 5277] close(20) = -1 EBADF (Bad file descriptor) [pid 5277] close(21) = -1 EBADF (Bad file descriptor) [pid 5277] close(22) = -1 EBADF (Bad file descriptor) [pid 5277] close(23) = -1 EBADF (Bad file descriptor) [pid 5277] close(24) = -1 EBADF (Bad file descriptor) [pid 5277] close(25) = -1 EBADF (Bad file descriptor) [pid 5277] close(26) = -1 EBADF (Bad file descriptor) [pid 5277] close(27) = -1 EBADF (Bad file descriptor) [pid 5277] close(28) = -1 EBADF (Bad file descriptor) [pid 5277] close(29) = -1 EBADF (Bad file descriptor) [pid 5277] exit_group(0) = ? [pid 5277] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=176, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 177 ./strace-static-x86_64: Process 5278 attached [pid 5278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5278] setpgid(0, 0) = 0 [pid 5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5278] write(3, "1000", 4) = 4 [pid 5278] close(3) = 0 [pid 5278] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5278] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 116.993725][ T5277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 117.001723][ T5277] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 117.009738][ T5277] [pid 5278] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5278] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5278] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5278] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5278] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5278] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5278] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5278] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5278] write(7, "5", 1) = 1 [pid 5278] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5278] close(3) = 0 [pid 5278] close(4) = 0 [pid 5278] close(5) = 0 [pid 5278] close(6) = 0 [pid 5278] close(7) = 0 [pid 5278] close(8) = -1 EBADF (Bad file descriptor) [pid 5278] close(9) = -1 EBADF (Bad file descriptor) [pid 5278] close(10) = -1 EBADF (Bad file descriptor) [pid 5278] close(11) = -1 EBADF (Bad file descriptor) [pid 5278] close(12) = -1 EBADF (Bad file descriptor) [pid 5278] close(13) = -1 EBADF (Bad file descriptor) [pid 5278] close(14) = -1 EBADF (Bad file descriptor) [pid 5278] close(15) = -1 EBADF (Bad file descriptor) [pid 5278] close(16) = -1 EBADF (Bad file descriptor) [pid 5278] close(17) = -1 EBADF (Bad file descriptor) [pid 5278] close(18) = -1 EBADF (Bad file descriptor) [pid 5278] close(19) = -1 EBADF (Bad file descriptor) [pid 5278] close(20) = -1 EBADF (Bad file descriptor) [pid 5278] close(21) = -1 EBADF (Bad file descriptor) [pid 5278] close(22) = -1 EBADF (Bad file descriptor) [pid 5278] close(23) = -1 EBADF (Bad file descriptor) [pid 5278] close(24) = -1 EBADF (Bad file descriptor) [pid 5278] close(25) = -1 EBADF (Bad file descriptor) [pid 5278] close(26) = -1 EBADF (Bad file descriptor) [pid 5278] close(27) = -1 EBADF (Bad file descriptor) [pid 5278] close(28) = -1 EBADF (Bad file descriptor) [pid 5278] close(29) = -1 EBADF (Bad file descriptor) [pid 5278] exit_group(0) = ? [pid 5278] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=177, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 178 ./strace-static-x86_64: Process 5279 attached [pid 5279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5279] setpgid(0, 0) = 0 [pid 5279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5279] write(3, "1000", 4) = 4 [pid 5279] close(3) = 0 [pid 5279] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5279] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5279] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5279] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5279] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5279] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5279] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5279] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5279] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5279] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5279] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5279] write(7, "5", 1) = 1 [ 117.101743][ T5279] FAULT_INJECTION: forcing a failure. [ 117.101743][ T5279] name failslab, interval 1, probability 0, space 0, times 0 [ 117.114481][ T5279] CPU: 0 PID: 5279 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 117.124377][ T5279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 117.134443][ T5279] Call Trace: [ 117.137726][ T5279] [ 117.140656][ T5279] dump_stack_lvl+0xd1/0x138 [ 117.145257][ T5279] should_fail_ex.cold+0x5/0xa [ 117.150039][ T5279] ? __inet_hash_connect+0x95e/0x1ba0 [ 117.155613][ T5279] should_failslab+0x9/0x20 [ 117.160127][ T5279] kmem_cache_alloc+0x5a/0x320 [ 117.164932][ T5279] __inet_hash_connect+0x95e/0x1ba0 [ 117.170163][ T5279] ? __inet_lookup_listener+0xbf0/0xbf0 [ 117.175729][ T5279] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 117.182966][ T5279] dccp_v4_connect+0xb82/0x1730 [ 117.187863][ T5279] __inet_stream_connect+0x69e/0xed0 [ 117.193188][ T5279] ? inet_listen+0x640/0x640 [ 117.197810][ T5279] ? mark_held_locks+0x9f/0xe0 [ 117.202599][ T5279] ? __local_bh_enable_ip+0xa4/0x130 [ 117.207911][ T5279] inet_stream_connect+0x57/0xa0 [ 117.212882][ T5279] ? __inet_stream_connect+0xed0/0xed0 [ 117.218383][ T5279] __sys_connect_file+0x153/0x1a0 [ 117.223452][ T5279] io_connect+0x3cc/0x720 [ 117.227849][ T5279] ? io_connect_prep+0x250/0x250 [ 117.232858][ T5279] ? receive_fd+0x110/0x110 [ 117.237412][ T5279] ? rcu_read_lock_sched_held+0x3e/0x70 [ 117.242986][ T5279] ? io_connect_prep+0x250/0x250 [ 117.248044][ T5279] io_issue_sqe+0x695/0x1250 [ 117.252668][ T5279] io_submit_sqes+0x96c/0x1e90 [ 117.257502][ T5279] __do_sys_io_uring_enter+0x103d/0x24e0 [ 117.263169][ T5279] ? io_submit_sqes+0x1e90/0x1e90 [ 117.268221][ T5279] ? ptrace_notify+0xfe/0x140 [ 117.272919][ T5279] ? lock_downgrade+0x6e0/0x6e0 [ 117.277797][ T5279] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.283017][ T5279] ? lockdep_hardirqs_on+0x7d/0x100 [ 117.288240][ T5279] ? _raw_spin_unlock_irq+0x2e/0x50 [ 117.293461][ T5279] ? ptrace_notify+0xfe/0x140 [ 117.298161][ T5279] do_syscall_64+0x39/0xb0 [ 117.302608][ T5279] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.308613][ T5279] RIP: 0033:0x7f607b0de549 [ 117.313048][ T5279] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 117.332672][ T5279] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 117.341975][ T5279] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5279] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5279] close(3) = 0 [pid 5279] close(4) = 0 [pid 5279] close(5) = 0 [pid 5279] close(6) = 0 [pid 5279] close(7) = 0 [pid 5279] close(8) = -1 EBADF (Bad file descriptor) [pid 5279] close(9) = -1 EBADF (Bad file descriptor) [pid 5279] close(10) = -1 EBADF (Bad file descriptor) [pid 5279] close(11) = -1 EBADF (Bad file descriptor) [pid 5279] close(12) = -1 EBADF (Bad file descriptor) [pid 5279] close(13) = -1 EBADF (Bad file descriptor) [pid 5279] close(14) = -1 EBADF (Bad file descriptor) [pid 5279] close(15) = -1 EBADF (Bad file descriptor) [pid 5279] close(16) = -1 EBADF (Bad file descriptor) [pid 5279] close(17) = -1 EBADF (Bad file descriptor) [pid 5279] close(18) = -1 EBADF (Bad file descriptor) [pid 5279] close(19) = -1 EBADF (Bad file descriptor) [pid 5279] close(20) = -1 EBADF (Bad file descriptor) [pid 5279] close(21) = -1 EBADF (Bad file descriptor) [pid 5279] close(22) = -1 EBADF (Bad file descriptor) [pid 5279] close(23) = -1 EBADF (Bad file descriptor) [pid 5279] close(24) = -1 EBADF (Bad file descriptor) [pid 5279] close(25) = -1 EBADF (Bad file descriptor) [pid 5279] close(26) = -1 EBADF (Bad file descriptor) [pid 5279] close(27) = -1 EBADF (Bad file descriptor) [pid 5279] close(28) = -1 EBADF (Bad file descriptor) [pid 5279] close(29) = -1 EBADF (Bad file descriptor) [pid 5279] exit_group(0) = ? [pid 5279] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=178, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 179 ./strace-static-x86_64: Process 5280 attached [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5280] setpgid(0, 0) = 0 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5280] write(3, "1000", 4) = 4 [pid 5280] close(3) = 0 [pid 5280] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5280] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5280] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5280] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5280] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5280] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5280] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5280] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5280] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5280] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 117.349961][ T5279] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 117.357946][ T5279] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 117.365932][ T5279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 117.373925][ T5279] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 117.381932][ T5279] [pid 5280] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5280] write(7, "5", 1) = 1 [ 117.433268][ T5280] FAULT_INJECTION: forcing a failure. [ 117.433268][ T5280] name failslab, interval 1, probability 0, space 0, times 0 [ 117.446745][ T5280] CPU: 0 PID: 5280 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 117.456684][ T5280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 117.466737][ T5280] Call Trace: [ 117.470011][ T5280] [ 117.472936][ T5280] dump_stack_lvl+0xd1/0x138 [ 117.477538][ T5280] should_fail_ex.cold+0x5/0xa [ 117.482313][ T5280] ? io_issue_sqe+0x695/0x1250 [ 117.487098][ T5280] should_failslab+0x9/0x20 [ 117.491617][ T5280] __kmem_cache_alloc_node+0x5b/0x330 [ 117.496990][ T5280] ? ref_tracker_alloc+0x158/0x560 [ 117.502120][ T5280] kmalloc_trace+0x26/0x60 [ 117.506568][ T5280] ref_tracker_alloc+0x158/0x560 [ 117.511549][ T5280] ? __lock_acquire+0xbc3/0x56d0 [ 117.516513][ T5280] ? ref_tracker_free+0x6b0/0x6b0 [ 117.521593][ T5280] dst_init+0xe4/0x520 [ 117.525689][ T5280] dst_alloc+0x16f/0x1f0 [ 117.529958][ T5280] rt_dst_alloc+0x55/0x430 [ 117.534403][ T5280] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 117.540422][ T5280] ip_route_output_key_hash+0x18f/0x340 [ 117.545999][ T5280] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 117.552287][ T5280] dccp_v4_connect+0x7e1/0x1730 [ 117.557184][ T5280] __inet_stream_connect+0x69e/0xed0 [ 117.562508][ T5280] ? inet_listen+0x640/0x640 [ 117.567135][ T5280] ? mark_held_locks+0x9f/0xe0 [ 117.571920][ T5280] ? __local_bh_enable_ip+0xa4/0x130 [ 117.577239][ T5280] inet_stream_connect+0x57/0xa0 [ 117.582212][ T5280] ? __inet_stream_connect+0xed0/0xed0 [ 117.587704][ T5280] __sys_connect_file+0x153/0x1a0 [ 117.592754][ T5280] io_connect+0x3cc/0x720 [ 117.597117][ T5280] ? io_connect_prep+0x250/0x250 [ 117.602087][ T5280] ? receive_fd+0x110/0x110 [ 117.606737][ T5280] ? rcu_read_lock_sched_held+0x3e/0x70 [ 117.612329][ T5280] ? io_connect_prep+0x250/0x250 [ 117.617321][ T5280] io_issue_sqe+0x695/0x1250 [ 117.621950][ T5280] io_submit_sqes+0x96c/0x1e90 [ 117.626761][ T5280] __do_sys_io_uring_enter+0x103d/0x24e0 [ 117.632458][ T5280] ? io_submit_sqes+0x1e90/0x1e90 [ 117.637511][ T5280] ? ptrace_notify+0xfe/0x140 [ 117.642209][ T5280] ? lock_downgrade+0x6e0/0x6e0 [ 117.647087][ T5280] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.652314][ T5280] ? lockdep_hardirqs_on+0x7d/0x100 [ 117.657531][ T5280] ? _raw_spin_unlock_irq+0x2e/0x50 [ 117.662750][ T5280] ? ptrace_notify+0xfe/0x140 [ 117.667452][ T5280] do_syscall_64+0x39/0xb0 [ 117.671897][ T5280] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.677830][ T5280] RIP: 0033:0x7f607b0de549 [ 117.682264][ T5280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 117.701890][ T5280] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 117.710327][ T5280] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 117.718314][ T5280] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 117.726298][ T5280] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5280] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5280] close(3) = 0 [pid 5280] close(4) = 0 [pid 5280] close(5) = 0 [pid 5280] close(6) = 0 [pid 5280] close(7) = 0 [pid 5280] close(8) = -1 EBADF (Bad file descriptor) [pid 5280] close(9) = -1 EBADF (Bad file descriptor) [pid 5280] close(10) = -1 EBADF (Bad file descriptor) [pid 5280] close(11) = -1 EBADF (Bad file descriptor) [pid 5280] close(12) = -1 EBADF (Bad file descriptor) [pid 5280] close(13) = -1 EBADF (Bad file descriptor) [pid 5280] close(14) = -1 EBADF (Bad file descriptor) [pid 5280] close(15) = -1 EBADF (Bad file descriptor) [pid 5280] close(16) = -1 EBADF (Bad file descriptor) [pid 5280] close(17) = -1 EBADF (Bad file descriptor) [pid 5280] close(18) = -1 EBADF (Bad file descriptor) [pid 5280] close(19) = -1 EBADF (Bad file descriptor) [pid 5280] close(20) = -1 EBADF (Bad file descriptor) [pid 5280] close(21) = -1 EBADF (Bad file descriptor) [pid 5280] close(22) = -1 EBADF (Bad file descriptor) [pid 5280] close(23) = -1 EBADF (Bad file descriptor) [pid 5280] close(24) = -1 EBADF (Bad file descriptor) [pid 5280] close(25) = -1 EBADF (Bad file descriptor) [pid 5280] close(26) = -1 EBADF (Bad file descriptor) [pid 5280] close(27) = -1 EBADF (Bad file descriptor) [pid 5280] close(28) = -1 EBADF (Bad file descriptor) [pid 5280] close(29) = -1 EBADF (Bad file descriptor) [pid 5280] exit_group(0) = ? [pid 5280] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=179, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 180 ./strace-static-x86_64: Process 5281 attached [pid 5281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5281] setpgid(0, 0) = 0 [pid 5281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5281] write(3, "1000", 4) = 4 [pid 5281] close(3) = 0 [pid 5281] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5281] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5281] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5281] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5281] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5281] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5281] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5281] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5281] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5281] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5281] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5281] write(7, "5", 1) = 1 [ 117.734280][ T5280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 117.742267][ T5280] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 117.750275][ T5280] [ 117.788397][ T5281] FAULT_INJECTION: forcing a failure. [ 117.788397][ T5281] name failslab, interval 1, probability 0, space 0, times 0 [ 117.801266][ T5281] CPU: 0 PID: 5281 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 117.811198][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 117.821273][ T5281] Call Trace: [ 117.824561][ T5281] [ 117.827521][ T5281] dump_stack_lvl+0xd1/0x138 [ 117.832158][ T5281] should_fail_ex.cold+0x5/0xa [ 117.836921][ T5281] ? io_issue_sqe+0x695/0x1250 [ 117.841711][ T5281] should_failslab+0x9/0x20 [ 117.846262][ T5281] __kmem_cache_alloc_node+0x5b/0x330 [ 117.851671][ T5281] ? ref_tracker_alloc+0x158/0x560 [ 117.856819][ T5281] kmalloc_trace+0x26/0x60 [ 117.861255][ T5281] ref_tracker_alloc+0x158/0x560 [ 117.866229][ T5281] ? __lock_acquire+0xbc3/0x56d0 [ 117.871185][ T5281] ? ref_tracker_free+0x6b0/0x6b0 [ 117.876270][ T5281] dst_init+0xe4/0x520 [ 117.880380][ T5281] dst_alloc+0x16f/0x1f0 [ 117.884651][ T5281] rt_dst_alloc+0x55/0x430 [ 117.889100][ T5281] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 117.895123][ T5281] ip_route_output_key_hash+0x18f/0x340 [ 117.900696][ T5281] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 117.906984][ T5281] dccp_v4_connect+0x7e1/0x1730 [ 117.911886][ T5281] __inet_stream_connect+0x69e/0xed0 [ 117.917212][ T5281] ? inet_listen+0x640/0x640 [ 117.921834][ T5281] ? mark_held_locks+0x9f/0xe0 [ 117.926623][ T5281] ? __local_bh_enable_ip+0xa4/0x130 [ 117.931935][ T5281] inet_stream_connect+0x57/0xa0 [ 117.936905][ T5281] ? __inet_stream_connect+0xed0/0xed0 [ 117.942394][ T5281] __sys_connect_file+0x153/0x1a0 [ 117.947441][ T5281] io_connect+0x3cc/0x720 [ 117.951802][ T5281] ? io_connect_prep+0x250/0x250 [ 117.956770][ T5281] ? receive_fd+0x110/0x110 [ 117.961314][ T5281] ? rcu_read_lock_sched_held+0x3e/0x70 [ 117.966879][ T5281] ? io_connect_prep+0x250/0x250 [ 117.971847][ T5281] io_issue_sqe+0x695/0x1250 [ 117.976473][ T5281] io_submit_sqes+0x96c/0x1e90 [ 117.981283][ T5281] __do_sys_io_uring_enter+0x103d/0x24e0 [ 117.986956][ T5281] ? io_submit_sqes+0x1e90/0x1e90 [ 117.992099][ T5281] ? ptrace_notify+0xfe/0x140 [ 117.996797][ T5281] ? lock_downgrade+0x6e0/0x6e0 [ 118.001677][ T5281] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.006900][ T5281] ? lockdep_hardirqs_on+0x7d/0x100 [ 118.012115][ T5281] ? _raw_spin_unlock_irq+0x2e/0x50 [ 118.017334][ T5281] ? ptrace_notify+0xfe/0x140 [ 118.022038][ T5281] do_syscall_64+0x39/0xb0 [ 118.026483][ T5281] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.032395][ T5281] RIP: 0033:0x7f607b0de549 [ 118.036912][ T5281] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 118.056538][ T5281] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 118.064979][ T5281] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 118.072966][ T5281] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 118.080955][ T5281] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5281] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5281] close(3) = 0 [pid 5281] close(4) = 0 [pid 5281] close(5) = 0 [pid 5281] close(6) = 0 [pid 5281] close(7) = 0 [pid 5281] close(8) = -1 EBADF (Bad file descriptor) [pid 5281] close(9) = -1 EBADF (Bad file descriptor) [pid 5281] close(10) = -1 EBADF (Bad file descriptor) [pid 5281] close(11) = -1 EBADF (Bad file descriptor) [pid 5281] close(12) = -1 EBADF (Bad file descriptor) [pid 5281] close(13) = -1 EBADF (Bad file descriptor) [pid 5281] close(14) = -1 EBADF (Bad file descriptor) [pid 5281] close(15) = -1 EBADF (Bad file descriptor) [pid 5281] close(16) = -1 EBADF (Bad file descriptor) [pid 5281] close(17) = -1 EBADF (Bad file descriptor) [pid 5281] close(18) = -1 EBADF (Bad file descriptor) [pid 5281] close(19) = -1 EBADF (Bad file descriptor) [pid 5281] close(20) = -1 EBADF (Bad file descriptor) [pid 5281] close(21) = -1 EBADF (Bad file descriptor) [pid 5281] close(22) = -1 EBADF (Bad file descriptor) [pid 5281] close(23) = -1 EBADF (Bad file descriptor) [pid 5281] close(24) = -1 EBADF (Bad file descriptor) [pid 5281] close(25) = -1 EBADF (Bad file descriptor) [pid 5281] close(26) = -1 EBADF (Bad file descriptor) [pid 5281] close(27) = -1 EBADF (Bad file descriptor) [pid 5281] close(28) = -1 EBADF (Bad file descriptor) [pid 5281] close(29) = -1 EBADF (Bad file descriptor) [pid 5281] exit_group(0) = ? [pid 5281] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=180, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5282 attached , child_tidptr=0x555555eff5d0) = 181 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5282] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5282] write(3, "1000", 4) = 4 [pid 5282] close(3) = 0 [pid 5282] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 118.088947][ T5281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 118.096941][ T5281] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 118.104949][ T5281] [pid 5282] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5282] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5282] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5282] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5282] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5282] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5282] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5282] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5282] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5282] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5282] write(7, "5", 1) = 1 [ 118.166236][ T5282] FAULT_INJECTION: forcing a failure. [ 118.166236][ T5282] name failslab, interval 1, probability 0, space 0, times 0 [ 118.179026][ T5282] CPU: 0 PID: 5282 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 118.189036][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 118.199111][ T5282] Call Trace: [ 118.202403][ T5282] [ 118.205354][ T5282] dump_stack_lvl+0xd1/0x138 [ 118.209953][ T5282] should_fail_ex.cold+0x5/0xa [ 118.214723][ T5282] ? __inet_hash_connect+0x95e/0x1ba0 [ 118.220125][ T5282] should_failslab+0x9/0x20 [ 118.224634][ T5282] kmem_cache_alloc+0x5a/0x320 [ 118.229421][ T5282] __inet_hash_connect+0x95e/0x1ba0 [ 118.234659][ T5282] ? __inet_lookup_listener+0xbf0/0xbf0 [ 118.240250][ T5282] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 118.246624][ T5282] dccp_v4_connect+0xb82/0x1730 [ 118.251524][ T5282] __inet_stream_connect+0x69e/0xed0 [ 118.256856][ T5282] ? inet_listen+0x640/0x640 [ 118.261477][ T5282] ? mark_held_locks+0x9f/0xe0 [ 118.266268][ T5282] ? __local_bh_enable_ip+0xa4/0x130 [ 118.271581][ T5282] inet_stream_connect+0x57/0xa0 [ 118.276558][ T5282] ? __inet_stream_connect+0xed0/0xed0 [ 118.282058][ T5282] __sys_connect_file+0x153/0x1a0 [ 118.287106][ T5282] io_connect+0x3cc/0x720 [ 118.291470][ T5282] ? io_connect_prep+0x250/0x250 [ 118.296438][ T5282] ? receive_fd+0x110/0x110 [ 118.300978][ T5282] ? rcu_read_lock_sched_held+0x3e/0x70 [ 118.306633][ T5282] ? io_connect_prep+0x250/0x250 [ 118.311606][ T5282] io_issue_sqe+0x695/0x1250 [ 118.316227][ T5282] io_submit_sqes+0x96c/0x1e90 [ 118.321035][ T5282] __do_sys_io_uring_enter+0x103d/0x24e0 [ 118.326704][ T5282] ? io_submit_sqes+0x1e90/0x1e90 [ 118.331758][ T5282] ? ptrace_notify+0xfe/0x140 [ 118.336459][ T5282] ? lock_downgrade+0x6e0/0x6e0 [ 118.341424][ T5282] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.346653][ T5282] ? lockdep_hardirqs_on+0x7d/0x100 [ 118.351871][ T5282] ? _raw_spin_unlock_irq+0x2e/0x50 [ 118.357099][ T5282] ? ptrace_notify+0xfe/0x140 [ 118.361803][ T5282] do_syscall_64+0x39/0xb0 [ 118.366247][ T5282] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.372164][ T5282] RIP: 0033:0x7f607b0de549 [ 118.376594][ T5282] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 118.396226][ T5282] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 118.404659][ T5282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5282] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5282] close(3) = 0 [pid 5282] close(4) = 0 [pid 5282] close(5) = 0 [pid 5282] close(6) = 0 [pid 5282] close(7) = 0 [pid 5282] close(8) = -1 EBADF (Bad file descriptor) [pid 5282] close(9) = -1 EBADF (Bad file descriptor) [pid 5282] close(10) = -1 EBADF (Bad file descriptor) [pid 5282] close(11) = -1 EBADF (Bad file descriptor) [pid 5282] close(12) = -1 EBADF (Bad file descriptor) [pid 5282] close(13) = -1 EBADF (Bad file descriptor) [pid 5282] close(14) = -1 EBADF (Bad file descriptor) [pid 5282] close(15) = -1 EBADF (Bad file descriptor) [pid 5282] close(16) = -1 EBADF (Bad file descriptor) [pid 5282] close(17) = -1 EBADF (Bad file descriptor) [pid 5282] close(18) = -1 EBADF (Bad file descriptor) [pid 5282] close(19) = -1 EBADF (Bad file descriptor) [pid 5282] close(20) = -1 EBADF (Bad file descriptor) [pid 5282] close(21) = -1 EBADF (Bad file descriptor) [pid 5282] close(22) = -1 EBADF (Bad file descriptor) [pid 5282] close(23) = -1 EBADF (Bad file descriptor) [pid 5282] close(24) = -1 EBADF (Bad file descriptor) [pid 5282] close(25) = -1 EBADF (Bad file descriptor) [pid 5282] close(26) = -1 EBADF (Bad file descriptor) [pid 5282] close(27) = -1 EBADF (Bad file descriptor) [pid 5282] close(28) = -1 EBADF (Bad file descriptor) [pid 5282] close(29) = -1 EBADF (Bad file descriptor) [pid 5282] exit_group(0) = ? [pid 5282] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=181, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 182 ./strace-static-x86_64: Process 5283 attached [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5283] setpgid(0, 0) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5283] write(3, "1000", 4) = 4 [pid 5283] close(3) = 0 [pid 5283] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5283] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5283] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5283] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5283] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5283] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5283] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5283] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5283] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5283] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5283] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5283] write(7, "5", 1) = 1 [ 118.412646][ T5282] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 118.420629][ T5282] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 118.428615][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 118.436601][ T5282] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 118.444638][ T5282] [ 118.481855][ T5283] FAULT_INJECTION: forcing a failure. [ 118.481855][ T5283] name failslab, interval 1, probability 0, space 0, times 0 [ 118.495036][ T5283] CPU: 1 PID: 5283 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 118.505023][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 118.515105][ T5283] Call Trace: [ 118.518419][ T5283] [ 118.521381][ T5283] dump_stack_lvl+0xd1/0x138 [ 118.526013][ T5283] should_fail_ex.cold+0x5/0xa [ 118.530797][ T5283] ? io_issue_sqe+0x695/0x1250 [ 118.535599][ T5283] should_failslab+0x9/0x20 [ 118.540112][ T5283] __kmem_cache_alloc_node+0x5b/0x330 [ 118.545488][ T5283] ? ref_tracker_alloc+0x158/0x560 [ 118.550618][ T5283] ? mark_lock.part.0+0xee/0x1910 [ 118.555704][ T5283] kmalloc_trace+0x26/0x60 [ 118.560134][ T5283] ref_tracker_alloc+0x158/0x560 [ 118.565082][ T5283] ? __lock_acquire+0xbc3/0x56d0 [ 118.570037][ T5283] ? ref_tracker_free+0x6b0/0x6b0 [ 118.575127][ T5283] dst_init+0xe4/0x520 [ 118.579254][ T5283] dst_alloc+0x16f/0x1f0 [ 118.583548][ T5283] rt_dst_alloc+0x55/0x430 [ 118.588001][ T5283] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 118.594027][ T5283] ip_route_output_key_hash+0x18f/0x340 [ 118.599602][ T5283] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 118.605897][ T5283] dccp_v4_connect+0x7e1/0x1730 [ 118.610796][ T5283] __inet_stream_connect+0x69e/0xed0 [ 118.616124][ T5283] ? inet_listen+0x640/0x640 [ 118.620749][ T5283] ? mark_held_locks+0x9f/0xe0 [ 118.625538][ T5283] ? __local_bh_enable_ip+0xa4/0x130 [ 118.630870][ T5283] inet_stream_connect+0x57/0xa0 [ 118.635865][ T5283] ? __inet_stream_connect+0xed0/0xed0 [ 118.641377][ T5283] __sys_connect_file+0x153/0x1a0 [ 118.646452][ T5283] io_connect+0x3cc/0x720 [ 118.650843][ T5283] ? io_connect_prep+0x250/0x250 [ 118.655820][ T5283] ? receive_fd+0x110/0x110 [ 118.660368][ T5283] ? rcu_read_lock_sched_held+0x3e/0x70 [ 118.665961][ T5283] ? io_connect_prep+0x250/0x250 [ 118.670955][ T5283] io_issue_sqe+0x695/0x1250 [ 118.675668][ T5283] io_submit_sqes+0x96c/0x1e90 [ 118.680505][ T5283] __do_sys_io_uring_enter+0x103d/0x24e0 [ 118.686193][ T5283] ? io_submit_sqes+0x1e90/0x1e90 [ 118.691257][ T5283] ? ptrace_notify+0xfe/0x140 [ 118.695961][ T5283] ? lock_downgrade+0x6e0/0x6e0 [ 118.700841][ T5283] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.706063][ T5283] ? lockdep_hardirqs_on+0x7d/0x100 [ 118.711280][ T5283] ? _raw_spin_unlock_irq+0x2e/0x50 [ 118.716498][ T5283] ? ptrace_notify+0xfe/0x140 [ 118.721205][ T5283] do_syscall_64+0x39/0xb0 [ 118.725660][ T5283] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.731590][ T5283] RIP: 0033:0x7f607b0de549 [ 118.736018][ T5283] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 118.755644][ T5283] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 118.764163][ T5283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 118.772145][ T5283] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5283] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5283] close(3) = 0 [pid 5283] close(4) = 0 [pid 5283] close(5) = 0 [pid 5283] close(6) = 0 [pid 5283] close(7) = 0 [pid 5283] close(8) = -1 EBADF (Bad file descriptor) [pid 5283] close(9) = -1 EBADF (Bad file descriptor) [pid 5283] close(10) = -1 EBADF (Bad file descriptor) [pid 5283] close(11) = -1 EBADF (Bad file descriptor) [pid 5283] close(12) = -1 EBADF (Bad file descriptor) [pid 5283] close(13) = -1 EBADF (Bad file descriptor) [pid 5283] close(14) = -1 EBADF (Bad file descriptor) [pid 5283] close(15) = -1 EBADF (Bad file descriptor) [pid 5283] close(16) = -1 EBADF (Bad file descriptor) [pid 5283] close(17) = -1 EBADF (Bad file descriptor) [pid 5283] close(18) = -1 EBADF (Bad file descriptor) [pid 5283] close(19) = -1 EBADF (Bad file descriptor) [pid 5283] close(20) = -1 EBADF (Bad file descriptor) [pid 5283] close(21) = -1 EBADF (Bad file descriptor) [pid 5283] close(22) = -1 EBADF (Bad file descriptor) [pid 5283] close(23) = -1 EBADF (Bad file descriptor) [pid 5283] close(24) = -1 EBADF (Bad file descriptor) [pid 5283] close(25) = -1 EBADF (Bad file descriptor) [pid 5283] close(26) = -1 EBADF (Bad file descriptor) [pid 5283] close(27) = -1 EBADF (Bad file descriptor) [pid 5283] close(28) = -1 EBADF (Bad file descriptor) [pid 5283] close(29) = -1 EBADF (Bad file descriptor) [pid 5283] exit_group(0) = ? [pid 5283] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=182, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 183 ./strace-static-x86_64: Process 5284 attached [pid 5284] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5284] setpgid(0, 0) = 0 [pid 5284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5284] write(3, "1000", 4) = 4 [pid 5284] close(3) = 0 [pid 5284] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5284] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5284] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5284] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5284] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5284] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5284] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5284] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5284] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5284] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5284] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5284] write(7, "5", 1) = 1 [ 118.780218][ T5283] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 118.788199][ T5283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 118.796181][ T5283] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 118.804195][ T5283] [ 118.840427][ T5284] FAULT_INJECTION: forcing a failure. [ 118.840427][ T5284] name failslab, interval 1, probability 0, space 0, times 0 [ 118.853311][ T5284] CPU: 0 PID: 5284 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 118.863419][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 118.873510][ T5284] Call Trace: [ 118.876804][ T5284] [ 118.879733][ T5284] dump_stack_lvl+0xd1/0x138 [ 118.884330][ T5284] should_fail_ex.cold+0x5/0xa [ 118.889102][ T5284] ? io_issue_sqe+0x695/0x1250 [ 118.893887][ T5284] should_failslab+0x9/0x20 [ 118.898408][ T5284] __kmem_cache_alloc_node+0x5b/0x330 [ 118.903801][ T5284] ? ref_tracker_alloc+0x158/0x560 [ 118.908953][ T5284] kmalloc_trace+0x26/0x60 [ 118.913395][ T5284] ref_tracker_alloc+0x158/0x560 [ 118.918367][ T5284] ? __lock_acquire+0xbc3/0x56d0 [ 118.923325][ T5284] ? ref_tracker_free+0x6b0/0x6b0 [ 118.928400][ T5284] dst_init+0xe4/0x520 [ 118.932512][ T5284] dst_alloc+0x16f/0x1f0 [ 118.936788][ T5284] rt_dst_alloc+0x55/0x430 [ 118.941231][ T5284] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 118.947250][ T5284] ip_route_output_key_hash+0x18f/0x340 [ 118.952837][ T5284] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 118.959128][ T5284] dccp_v4_connect+0x7e1/0x1730 [ 118.964038][ T5284] __inet_stream_connect+0x69e/0xed0 [ 118.969450][ T5284] ? inet_listen+0x640/0x640 [ 118.974073][ T5284] ? mark_held_locks+0x9f/0xe0 [ 118.978866][ T5284] ? __local_bh_enable_ip+0xa4/0x130 [ 118.984179][ T5284] inet_stream_connect+0x57/0xa0 [ 118.989157][ T5284] ? __inet_stream_connect+0xed0/0xed0 [ 118.994650][ T5284] __sys_connect_file+0x153/0x1a0 [ 118.999701][ T5284] io_connect+0x3cc/0x720 [ 119.004067][ T5284] ? io_connect_prep+0x250/0x250 [ 119.009062][ T5284] ? receive_fd+0x110/0x110 [ 119.013604][ T5284] ? rcu_read_lock_sched_held+0x3e/0x70 [ 119.019171][ T5284] ? io_connect_prep+0x250/0x250 [ 119.024229][ T5284] io_issue_sqe+0x695/0x1250 [ 119.028852][ T5284] io_submit_sqes+0x96c/0x1e90 [ 119.033684][ T5284] __do_sys_io_uring_enter+0x103d/0x24e0 [ 119.039357][ T5284] ? io_submit_sqes+0x1e90/0x1e90 [ 119.044412][ T5284] ? ptrace_notify+0xfe/0x140 [ 119.049111][ T5284] ? lock_downgrade+0x6e0/0x6e0 [ 119.054336][ T5284] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.059559][ T5284] ? lockdep_hardirqs_on+0x7d/0x100 [ 119.064779][ T5284] ? _raw_spin_unlock_irq+0x2e/0x50 [ 119.070265][ T5284] ? ptrace_notify+0xfe/0x140 [ 119.074972][ T5284] do_syscall_64+0x39/0xb0 [ 119.079426][ T5284] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.085688][ T5284] RIP: 0033:0x7f607b0de549 [ 119.090116][ T5284] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 119.109743][ T5284] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 119.118176][ T5284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 119.126162][ T5284] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 119.134144][ T5284] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5284] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5284] close(3) = 0 [pid 5284] close(4) = 0 [pid 5284] close(5) = 0 [pid 5284] close(6) = 0 [pid 5284] close(7) = 0 [pid 5284] close(8) = -1 EBADF (Bad file descriptor) [pid 5284] close(9) = -1 EBADF (Bad file descriptor) [pid 5284] close(10) = -1 EBADF (Bad file descriptor) [pid 5284] close(11) = -1 EBADF (Bad file descriptor) [pid 5284] close(12) = -1 EBADF (Bad file descriptor) [pid 5284] close(13) = -1 EBADF (Bad file descriptor) [pid 5284] close(14) = -1 EBADF (Bad file descriptor) [pid 5284] close(15) = -1 EBADF (Bad file descriptor) [pid 5284] close(16) = -1 EBADF (Bad file descriptor) [pid 5284] close(17) = -1 EBADF (Bad file descriptor) [pid 5284] close(18) = -1 EBADF (Bad file descriptor) [pid 5284] close(19) = -1 EBADF (Bad file descriptor) [pid 5284] close(20) = -1 EBADF (Bad file descriptor) [pid 5284] close(21) = -1 EBADF (Bad file descriptor) [pid 5284] close(22) = -1 EBADF (Bad file descriptor) [pid 5284] close(23) = -1 EBADF (Bad file descriptor) [pid 5284] close(24) = -1 EBADF (Bad file descriptor) [pid 5284] close(25) = -1 EBADF (Bad file descriptor) [pid 5284] close(26) = -1 EBADF (Bad file descriptor) [pid 5284] close(27) = -1 EBADF (Bad file descriptor) [pid 5284] close(28) = -1 EBADF (Bad file descriptor) [pid 5284] close(29) = -1 EBADF (Bad file descriptor) [pid 5284] exit_group(0) = ? [pid 5284] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=183, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 184 ./strace-static-x86_64: Process 5285 attached [pid 5285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5285] setpgid(0, 0) = 0 [pid 5285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5285] write(3, "1000", 4) = 4 [pid 5285] close(3) = 0 [pid 5285] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5285] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5285] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5285] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5285] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5285] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5285] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5285] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5285] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5285] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5285] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5285] write(7, "5", 1) = 1 [ 119.142127][ T5284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 119.150110][ T5284] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 119.158117][ T5284] [ 119.195267][ T5285] FAULT_INJECTION: forcing a failure. [ 119.195267][ T5285] name failslab, interval 1, probability 0, space 0, times 0 [ 119.208907][ T5285] CPU: 0 PID: 5285 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 119.218821][ T5285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 119.228903][ T5285] Call Trace: [ 119.232192][ T5285] [ 119.235149][ T5285] dump_stack_lvl+0xd1/0x138 [ 119.239770][ T5285] should_fail_ex.cold+0x5/0xa [ 119.244529][ T5285] ? io_issue_sqe+0x695/0x1250 [ 119.249294][ T5285] should_failslab+0x9/0x20 [ 119.253798][ T5285] __kmem_cache_alloc_node+0x5b/0x330 [ 119.259186][ T5285] ? ref_tracker_alloc+0x158/0x560 [ 119.264325][ T5285] kmalloc_trace+0x26/0x60 [ 119.268788][ T5285] ref_tracker_alloc+0x158/0x560 [ 119.273753][ T5285] ? __lock_acquire+0xbc3/0x56d0 [ 119.278701][ T5285] ? ref_tracker_free+0x6b0/0x6b0 [ 119.283775][ T5285] dst_init+0xe4/0x520 [ 119.287862][ T5285] dst_alloc+0x16f/0x1f0 [ 119.292135][ T5285] rt_dst_alloc+0x55/0x430 [ 119.296597][ T5285] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 119.302628][ T5285] ip_route_output_key_hash+0x18f/0x340 [ 119.308187][ T5285] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 119.314460][ T5285] dccp_v4_connect+0x7e1/0x1730 [ 119.319338][ T5285] __inet_stream_connect+0x69e/0xed0 [ 119.324640][ T5285] ? inet_listen+0x640/0x640 [ 119.329244][ T5285] ? mark_held_locks+0x9f/0xe0 [ 119.334027][ T5285] ? __local_bh_enable_ip+0xa4/0x130 [ 119.339342][ T5285] inet_stream_connect+0x57/0xa0 [ 119.344313][ T5285] ? __inet_stream_connect+0xed0/0xed0 [ 119.349806][ T5285] __sys_connect_file+0x153/0x1a0 [ 119.354863][ T5285] io_connect+0x3cc/0x720 [ 119.359204][ T5285] ? io_connect_prep+0x250/0x250 [ 119.364178][ T5285] ? receive_fd+0x110/0x110 [ 119.368748][ T5285] ? rcu_read_lock_sched_held+0x3e/0x70 [ 119.374338][ T5285] ? io_connect_prep+0x250/0x250 [ 119.379336][ T5285] io_issue_sqe+0x695/0x1250 [ 119.383937][ T5285] io_submit_sqes+0x96c/0x1e90 [ 119.388750][ T5285] __do_sys_io_uring_enter+0x103d/0x24e0 [ 119.396424][ T5285] ? io_submit_sqes+0x1e90/0x1e90 [ 119.401471][ T5285] ? ptrace_notify+0xfe/0x140 [ 119.406176][ T5285] ? lock_downgrade+0x6e0/0x6e0 [ 119.411033][ T5285] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.416237][ T5285] ? lockdep_hardirqs_on+0x7d/0x100 [ 119.421444][ T5285] ? _raw_spin_unlock_irq+0x2e/0x50 [ 119.426680][ T5285] ? ptrace_notify+0xfe/0x140 [ 119.431380][ T5285] do_syscall_64+0x39/0xb0 [ 119.435830][ T5285] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.441725][ T5285] RIP: 0033:0x7f607b0de549 [ 119.446133][ T5285] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 119.465775][ T5285] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 119.474189][ T5285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 119.482169][ T5285] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5285] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5285] close(3) = 0 [pid 5285] close(4) = 0 [pid 5285] close(5) = 0 [pid 5285] close(6) = 0 [pid 5285] close(7) = 0 [pid 5285] close(8) = -1 EBADF (Bad file descriptor) [pid 5285] close(9) = -1 EBADF (Bad file descriptor) [pid 5285] close(10) = -1 EBADF (Bad file descriptor) [pid 5285] close(11) = -1 EBADF (Bad file descriptor) [pid 5285] close(12) = -1 EBADF (Bad file descriptor) [pid 5285] close(13) = -1 EBADF (Bad file descriptor) [pid 5285] close(14) = -1 EBADF (Bad file descriptor) [pid 5285] close(15) = -1 EBADF (Bad file descriptor) [pid 5285] close(16) = -1 EBADF (Bad file descriptor) [pid 5285] close(17) = -1 EBADF (Bad file descriptor) [pid 5285] close(18) = -1 EBADF (Bad file descriptor) [pid 5285] close(19) = -1 EBADF (Bad file descriptor) [pid 5285] close(20) = -1 EBADF (Bad file descriptor) [pid 5285] close(21) = -1 EBADF (Bad file descriptor) [pid 5285] close(22) = -1 EBADF (Bad file descriptor) [pid 5285] close(23) = -1 EBADF (Bad file descriptor) [pid 5285] close(24) = -1 EBADF (Bad file descriptor) [pid 5285] close(25) = -1 EBADF (Bad file descriptor) [pid 5285] close(26) = -1 EBADF (Bad file descriptor) [pid 5285] close(27) = -1 EBADF (Bad file descriptor) [pid 5285] close(28) = -1 EBADF (Bad file descriptor) [pid 5285] close(29) = -1 EBADF (Bad file descriptor) [pid 5285] exit_group(0) = ? [pid 5285] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=184, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 185 ./strace-static-x86_64: Process 5286 attached [pid 5286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5286] setpgid(0, 0) = 0 [pid 5286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5286] write(3, "1000", 4) = 4 [pid 5286] close(3) = 0 [pid 5286] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5286] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5286] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5286] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5286] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5286] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5286] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 119.490157][ T5285] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 119.498141][ T5285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 119.506116][ T5285] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 119.514099][ T5285] [pid 5286] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5286] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5286] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5286] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5286] write(7, "5", 1) = 1 [ 119.563319][ T5286] FAULT_INJECTION: forcing a failure. [ 119.563319][ T5286] name failslab, interval 1, probability 0, space 0, times 0 [ 119.576019][ T5286] CPU: 0 PID: 5286 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 119.585909][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 119.595976][ T5286] Call Trace: [ 119.599265][ T5286] [ 119.602193][ T5286] dump_stack_lvl+0xd1/0x138 [ 119.606791][ T5286] should_fail_ex.cold+0x5/0xa [ 119.611597][ T5286] ? __inet_hash_connect+0x95e/0x1ba0 [ 119.617008][ T5286] should_failslab+0x9/0x20 [ 119.621550][ T5286] kmem_cache_alloc+0x5a/0x320 [ 119.626318][ T5286] __inet_hash_connect+0x95e/0x1ba0 [ 119.631543][ T5286] ? __inet_lookup_listener+0xbf0/0xbf0 [ 119.637123][ T5286] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 119.643475][ T5286] dccp_v4_connect+0xb82/0x1730 [ 119.648344][ T5286] __inet_stream_connect+0x69e/0xed0 [ 119.653640][ T5286] ? inet_listen+0x640/0x640 [ 119.658251][ T5286] ? mark_held_locks+0x9f/0xe0 [ 119.663024][ T5286] ? __local_bh_enable_ip+0xa4/0x130 [ 119.668317][ T5286] inet_stream_connect+0x57/0xa0 [ 119.673282][ T5286] ? __inet_stream_connect+0xed0/0xed0 [ 119.678884][ T5286] __sys_connect_file+0x153/0x1a0 [ 119.683939][ T5286] io_connect+0x3cc/0x720 [ 119.688280][ T5286] ? io_connect_prep+0x250/0x250 [ 119.693232][ T5286] ? receive_fd+0x110/0x110 [ 119.697790][ T5286] ? rcu_read_lock_sched_held+0x3e/0x70 [ 119.703372][ T5286] ? io_connect_prep+0x250/0x250 [ 119.708347][ T5286] io_issue_sqe+0x695/0x1250 [ 119.712942][ T5286] io_submit_sqes+0x96c/0x1e90 [ 119.717747][ T5286] __do_sys_io_uring_enter+0x103d/0x24e0 [ 119.723434][ T5286] ? io_submit_sqes+0x1e90/0x1e90 [ 119.728525][ T5286] ? ptrace_notify+0xfe/0x140 [ 119.733211][ T5286] ? lock_downgrade+0x6e0/0x6e0 [ 119.738069][ T5286] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.743300][ T5286] ? lockdep_hardirqs_on+0x7d/0x100 [ 119.748523][ T5286] ? _raw_spin_unlock_irq+0x2e/0x50 [ 119.753744][ T5286] ? ptrace_notify+0xfe/0x140 [ 119.758451][ T5286] do_syscall_64+0x39/0xb0 [ 119.762901][ T5286] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.768810][ T5286] RIP: 0033:0x7f607b0de549 [ 119.773255][ T5286] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 119.792910][ T5286] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 119.801419][ T5286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5286] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5286] close(3) = 0 [pid 5286] close(4) = 0 [pid 5286] close(5) = 0 [pid 5286] close(6) = 0 [pid 5286] close(7) = 0 [pid 5286] close(8) = -1 EBADF (Bad file descriptor) [pid 5286] close(9) = -1 EBADF (Bad file descriptor) [pid 5286] close(10) = -1 EBADF (Bad file descriptor) [pid 5286] close(11) = -1 EBADF (Bad file descriptor) [pid 5286] close(12) = -1 EBADF (Bad file descriptor) [pid 5286] close(13) = -1 EBADF (Bad file descriptor) [pid 5286] close(14) = -1 EBADF (Bad file descriptor) [pid 5286] close(15) = -1 EBADF (Bad file descriptor) [pid 5286] close(16) = -1 EBADF (Bad file descriptor) [pid 5286] close(17) = -1 EBADF (Bad file descriptor) [pid 5286] close(18) = -1 EBADF (Bad file descriptor) [pid 5286] close(19) = -1 EBADF (Bad file descriptor) [pid 5286] close(20) = -1 EBADF (Bad file descriptor) [pid 5286] close(21) = -1 EBADF (Bad file descriptor) [pid 5286] close(22) = -1 EBADF (Bad file descriptor) [pid 5286] close(23) = -1 EBADF (Bad file descriptor) [pid 5286] close(24) = -1 EBADF (Bad file descriptor) [pid 5286] close(25) = -1 EBADF (Bad file descriptor) [pid 5286] close(26) = -1 EBADF (Bad file descriptor) [pid 5286] close(27) = -1 EBADF (Bad file descriptor) [pid 5286] close(28) = -1 EBADF (Bad file descriptor) [pid 5286] close(29) = -1 EBADF (Bad file descriptor) [pid 5286] exit_group(0) = ? [pid 5286] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=185, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5287 attached , child_tidptr=0x555555eff5d0) = 186 [pid 5287] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5287] setpgid(0, 0) = 0 [pid 5287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5287] write(3, "1000", 4) = 4 [pid 5287] close(3) = 0 [pid 5287] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5287] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5287] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5287] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5287] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5287] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5287] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 119.809394][ T5286] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 119.817386][ T5286] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 119.825378][ T5286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 119.833366][ T5286] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 119.841379][ T5286] [pid 5287] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5287] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5287] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5287] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5287] write(7, "5", 1) = 1 [ 119.901672][ T5287] FAULT_INJECTION: forcing a failure. [ 119.901672][ T5287] name failslab, interval 1, probability 0, space 0, times 0 [ 119.914465][ T5287] CPU: 0 PID: 5287 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 119.924369][ T5287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 119.934425][ T5287] Call Trace: [ 119.937704][ T5287] [ 119.940661][ T5287] dump_stack_lvl+0xd1/0x138 [ 119.945288][ T5287] should_fail_ex.cold+0x5/0xa [ 119.950051][ T5287] ? io_issue_sqe+0x695/0x1250 [ 119.954837][ T5287] should_failslab+0x9/0x20 [ 119.959393][ T5287] __kmem_cache_alloc_node+0x5b/0x330 [ 119.964796][ T5287] ? ref_tracker_alloc+0x158/0x560 [ 119.969955][ T5287] kmalloc_trace+0x26/0x60 [ 119.974392][ T5287] ref_tracker_alloc+0x158/0x560 [ 119.979351][ T5287] ? __lock_acquire+0xbc3/0x56d0 [ 119.984317][ T5287] ? ref_tracker_free+0x6b0/0x6b0 [ 119.989390][ T5287] dst_init+0xe4/0x520 [ 119.993518][ T5287] dst_alloc+0x16f/0x1f0 [ 119.997806][ T5287] rt_dst_alloc+0x55/0x430 [ 120.002266][ T5287] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 120.008262][ T5287] ip_route_output_key_hash+0x18f/0x340 [ 120.013816][ T5287] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 120.020082][ T5287] dccp_v4_connect+0x7e1/0x1730 [ 120.024975][ T5287] __inet_stream_connect+0x69e/0xed0 [ 120.030306][ T5287] ? inet_listen+0x640/0x640 [ 120.034950][ T5287] ? mark_held_locks+0x9f/0xe0 [ 120.039727][ T5287] ? __local_bh_enable_ip+0xa4/0x130 [ 120.045019][ T5287] inet_stream_connect+0x57/0xa0 [ 120.049968][ T5287] ? __inet_stream_connect+0xed0/0xed0 [ 120.055490][ T5287] __sys_connect_file+0x153/0x1a0 [ 120.060538][ T5287] io_connect+0x3cc/0x720 [ 120.064922][ T5287] ? io_connect_prep+0x250/0x250 [ 120.069879][ T5287] ? receive_fd+0x110/0x110 [ 120.074397][ T5287] ? rcu_read_lock_sched_held+0x3e/0x70 [ 120.079949][ T5287] ? io_connect_prep+0x250/0x250 [ 120.084910][ T5287] io_issue_sqe+0x695/0x1250 [ 120.089538][ T5287] io_submit_sqes+0x96c/0x1e90 [ 120.094334][ T5287] __do_sys_io_uring_enter+0x103d/0x24e0 [ 120.099979][ T5287] ? io_submit_sqes+0x1e90/0x1e90 [ 120.105011][ T5287] ? ptrace_notify+0xfe/0x140 [ 120.109696][ T5287] ? lock_downgrade+0x6e0/0x6e0 [ 120.114572][ T5287] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.119937][ T5287] ? lockdep_hardirqs_on+0x7d/0x100 [ 120.125178][ T5287] ? _raw_spin_unlock_irq+0x2e/0x50 [ 120.130446][ T5287] ? ptrace_notify+0xfe/0x140 [ 120.135161][ T5287] do_syscall_64+0x39/0xb0 [ 120.139612][ T5287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.145529][ T5287] RIP: 0033:0x7f607b0de549 [ 120.149964][ T5287] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 120.169593][ T5287] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 120.178032][ T5287] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 120.186018][ T5287] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 120.194180][ T5287] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5287] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5287] close(3) = 0 [pid 5287] close(4) = 0 [pid 5287] close(5) = 0 [pid 5287] close(6) = 0 [pid 5287] close(7) = 0 [pid 5287] close(8) = -1 EBADF (Bad file descriptor) [pid 5287] close(9) = -1 EBADF (Bad file descriptor) [pid 5287] close(10) = -1 EBADF (Bad file descriptor) [pid 5287] close(11) = -1 EBADF (Bad file descriptor) [pid 5287] close(12) = -1 EBADF (Bad file descriptor) [pid 5287] close(13) = -1 EBADF (Bad file descriptor) [pid 5287] close(14) = -1 EBADF (Bad file descriptor) [pid 5287] close(15) = -1 EBADF (Bad file descriptor) [pid 5287] close(16) = -1 EBADF (Bad file descriptor) [pid 5287] close(17) = -1 EBADF (Bad file descriptor) [pid 5287] close(18) = -1 EBADF (Bad file descriptor) [pid 5287] close(19) = -1 EBADF (Bad file descriptor) [pid 5287] close(20) = -1 EBADF (Bad file descriptor) [pid 5287] close(21) = -1 EBADF (Bad file descriptor) [pid 5287] close(22) = -1 EBADF (Bad file descriptor) [pid 5287] close(23) = -1 EBADF (Bad file descriptor) [pid 5287] close(24) = -1 EBADF (Bad file descriptor) [pid 5287] close(25) = -1 EBADF (Bad file descriptor) [pid 5287] close(26) = -1 EBADF (Bad file descriptor) [pid 5287] close(27) = -1 EBADF (Bad file descriptor) [pid 5287] close(28) = -1 EBADF (Bad file descriptor) [pid 5287] close(29) = -1 EBADF (Bad file descriptor) [pid 5287] exit_group(0) = ? [pid 5287] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=186, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5288 attached , child_tidptr=0x555555eff5d0) = 187 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5288] setpgid(0, 0) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 120.202167][ T5287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 120.210152][ T5287] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 120.218161][ T5287] [pid 5288] write(3, "1000", 4) = 4 [pid 5288] close(3) = 0 [pid 5288] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5288] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5288] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5288] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5288] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5288] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5288] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5288] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5288] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5288] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5288] write(7, "5", 1) = 1 [ 120.280859][ T5288] FAULT_INJECTION: forcing a failure. [ 120.280859][ T5288] name failslab, interval 1, probability 0, space 0, times 0 [ 120.293595][ T5288] CPU: 1 PID: 5288 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 120.303503][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 120.313593][ T5288] Call Trace: [ 120.316893][ T5288] [ 120.319827][ T5288] dump_stack_lvl+0xd1/0x138 [ 120.324707][ T5288] should_fail_ex.cold+0x5/0xa [ 120.329484][ T5288] ? __inet_hash_connect+0x95e/0x1ba0 [ 120.334874][ T5288] should_failslab+0x9/0x20 [ 120.339491][ T5288] kmem_cache_alloc+0x5a/0x320 [ 120.344281][ T5288] __inet_hash_connect+0x95e/0x1ba0 [ 120.349512][ T5288] ? __inet_lookup_listener+0xbf0/0xbf0 [ 120.355102][ T5288] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 120.361504][ T5288] dccp_v4_connect+0xb82/0x1730 [ 120.366407][ T5288] __inet_stream_connect+0x69e/0xed0 [ 120.371727][ T5288] ? inet_listen+0x640/0x640 [ 120.376362][ T5288] ? mark_held_locks+0x9f/0xe0 [ 120.381143][ T5288] ? __local_bh_enable_ip+0xa4/0x130 [ 120.386462][ T5288] inet_stream_connect+0x57/0xa0 [ 120.391410][ T5288] ? __inet_stream_connect+0xed0/0xed0 [ 120.396876][ T5288] __sys_connect_file+0x153/0x1a0 [ 120.401905][ T5288] io_connect+0x3cc/0x720 [ 120.406242][ T5288] ? io_connect_prep+0x250/0x250 [ 120.411184][ T5288] ? receive_fd+0x110/0x110 [ 120.415720][ T5288] ? rcu_read_lock_sched_held+0x3e/0x70 [ 120.421332][ T5288] ? io_connect_prep+0x250/0x250 [ 120.426364][ T5288] io_issue_sqe+0x695/0x1250 [ 120.431009][ T5288] io_submit_sqes+0x96c/0x1e90 [ 120.435795][ T5288] __do_sys_io_uring_enter+0x103d/0x24e0 [ 120.441467][ T5288] ? io_submit_sqes+0x1e90/0x1e90 [ 120.446528][ T5288] ? ptrace_notify+0xfe/0x140 [ 120.451225][ T5288] ? lock_downgrade+0x6e0/0x6e0 [ 120.456102][ T5288] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.461319][ T5288] ? lockdep_hardirqs_on+0x7d/0x100 [ 120.466543][ T5288] ? _raw_spin_unlock_irq+0x2e/0x50 [ 120.471760][ T5288] ? ptrace_notify+0xfe/0x140 [ 120.476465][ T5288] do_syscall_64+0x39/0xb0 [ 120.480903][ T5288] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.486824][ T5288] RIP: 0033:0x7f607b0de549 [ 120.491235][ T5288] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 120.510849][ T5288] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 120.519265][ T5288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5288] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5288] close(3) = 0 [pid 5288] close(4) = 0 [pid 5288] close(5) = 0 [pid 5288] close(6) = 0 [pid 5288] close(7) = 0 [pid 5288] close(8) = -1 EBADF (Bad file descriptor) [pid 5288] close(9) = -1 EBADF (Bad file descriptor) [pid 5288] close(10) = -1 EBADF (Bad file descriptor) [pid 5288] close(11) = -1 EBADF (Bad file descriptor) [pid 5288] close(12) = -1 EBADF (Bad file descriptor) [pid 5288] close(13) = -1 EBADF (Bad file descriptor) [pid 5288] close(14) = -1 EBADF (Bad file descriptor) [pid 5288] close(15) = -1 EBADF (Bad file descriptor) [pid 5288] close(16) = -1 EBADF (Bad file descriptor) [pid 5288] close(17) = -1 EBADF (Bad file descriptor) [pid 5288] close(18) = -1 EBADF (Bad file descriptor) [pid 5288] close(19) = -1 EBADF (Bad file descriptor) [pid 5288] close(20) = -1 EBADF (Bad file descriptor) [pid 5288] close(21) = -1 EBADF (Bad file descriptor) [pid 5288] close(22) = -1 EBADF (Bad file descriptor) [pid 5288] close(23) = -1 EBADF (Bad file descriptor) [pid 5288] close(24) = -1 EBADF (Bad file descriptor) [pid 5288] close(25) = -1 EBADF (Bad file descriptor) [pid 5288] close(26) = -1 EBADF (Bad file descriptor) [pid 5288] close(27) = -1 EBADF (Bad file descriptor) [pid 5288] close(28) = -1 EBADF (Bad file descriptor) [pid 5288] close(29) = -1 EBADF (Bad file descriptor) [pid 5288] exit_group(0) = ? [pid 5288] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=187, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 188 ./strace-static-x86_64: Process 5289 attached [pid 5289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5289] setpgid(0, 0) = 0 [pid 5289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5289] write(3, "1000", 4) = 4 [pid 5289] close(3) = 0 [pid 5289] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5289] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5289] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5289] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5289] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5289] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5289] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5289] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5289] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5289] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5289] write(7, "5", 1) = 1 [ 120.527256][ T5288] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 120.535278][ T5288] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 120.543265][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 120.551278][ T5288] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 120.559306][ T5288] [ 120.605749][ T5289] FAULT_INJECTION: forcing a failure. [ 120.605749][ T5289] name failslab, interval 1, probability 0, space 0, times 0 [ 120.618739][ T5289] CPU: 0 PID: 5289 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 120.628665][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 120.638721][ T5289] Call Trace: [ 120.642013][ T5289] [ 120.644960][ T5289] dump_stack_lvl+0xd1/0x138 [ 120.649558][ T5289] should_fail_ex.cold+0x5/0xa [ 120.654323][ T5289] ? io_issue_sqe+0x695/0x1250 [ 120.659110][ T5289] should_failslab+0x9/0x20 [ 120.663640][ T5289] __kmem_cache_alloc_node+0x5b/0x330 [ 120.669030][ T5289] ? ref_tracker_alloc+0x158/0x560 [ 120.674188][ T5289] kmalloc_trace+0x26/0x60 [ 120.678634][ T5289] ref_tracker_alloc+0x158/0x560 [ 120.683592][ T5289] ? __lock_acquire+0xbc3/0x56d0 [ 120.688559][ T5289] ? ref_tracker_free+0x6b0/0x6b0 [ 120.693627][ T5289] dst_init+0xe4/0x520 [ 120.697726][ T5289] dst_alloc+0x16f/0x1f0 [ 120.702021][ T5289] rt_dst_alloc+0x55/0x430 [ 120.706471][ T5289] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 120.712468][ T5289] ip_route_output_key_hash+0x18f/0x340 [ 120.718028][ T5289] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 120.724328][ T5289] dccp_v4_connect+0x7e1/0x1730 [ 120.729229][ T5289] __inet_stream_connect+0x69e/0xed0 [ 120.734560][ T5289] ? inet_listen+0x640/0x640 [ 120.739201][ T5289] ? mark_held_locks+0x9f/0xe0 [ 120.743985][ T5289] ? __local_bh_enable_ip+0xa4/0x130 [ 120.749276][ T5289] inet_stream_connect+0x57/0xa0 [ 120.754221][ T5289] ? __inet_stream_connect+0xed0/0xed0 [ 120.759708][ T5289] __sys_connect_file+0x153/0x1a0 [ 120.764752][ T5289] io_connect+0x3cc/0x720 [ 120.769121][ T5289] ? io_connect_prep+0x250/0x250 [ 120.774063][ T5289] ? receive_fd+0x110/0x110 [ 120.778577][ T5289] ? rcu_read_lock_sched_held+0x3e/0x70 [ 120.784125][ T5289] ? io_connect_prep+0x250/0x250 [ 120.789086][ T5289] io_issue_sqe+0x695/0x1250 [ 120.793714][ T5289] io_submit_sqes+0x96c/0x1e90 [ 120.798497][ T5289] __do_sys_io_uring_enter+0x103d/0x24e0 [ 120.804171][ T5289] ? io_submit_sqes+0x1e90/0x1e90 [ 120.809217][ T5289] ? ptrace_notify+0xfe/0x140 [ 120.813897][ T5289] ? lock_downgrade+0x6e0/0x6e0 [ 120.818758][ T5289] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.823985][ T5289] ? lockdep_hardirqs_on+0x7d/0x100 [ 120.829199][ T5289] ? _raw_spin_unlock_irq+0x2e/0x50 [ 120.834425][ T5289] ? ptrace_notify+0xfe/0x140 [ 120.839121][ T5289] do_syscall_64+0x39/0xb0 [ 120.843572][ T5289] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.849468][ T5289] RIP: 0033:0x7f607b0de549 [ 120.853881][ T5289] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 120.873509][ T5289] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 120.881964][ T5289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 120.889957][ T5289] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 120.897928][ T5289] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5289] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5289] close(3) = 0 [pid 5289] close(4) = 0 [pid 5289] close(5) = 0 [pid 5289] close(6) = 0 [pid 5289] close(7) = 0 [pid 5289] close(8) = -1 EBADF (Bad file descriptor) [pid 5289] close(9) = -1 EBADF (Bad file descriptor) [pid 5289] close(10) = -1 EBADF (Bad file descriptor) [pid 5289] close(11) = -1 EBADF (Bad file descriptor) [pid 5289] close(12) = -1 EBADF (Bad file descriptor) [pid 5289] close(13) = -1 EBADF (Bad file descriptor) [pid 5289] close(14) = -1 EBADF (Bad file descriptor) [pid 5289] close(15) = -1 EBADF (Bad file descriptor) [pid 5289] close(16) = -1 EBADF (Bad file descriptor) [pid 5289] close(17) = -1 EBADF (Bad file descriptor) [pid 5289] close(18) = -1 EBADF (Bad file descriptor) [pid 5289] close(19) = -1 EBADF (Bad file descriptor) [pid 5289] close(20) = -1 EBADF (Bad file descriptor) [pid 5289] close(21) = -1 EBADF (Bad file descriptor) [pid 5289] close(22) = -1 EBADF (Bad file descriptor) [pid 5289] close(23) = -1 EBADF (Bad file descriptor) [pid 5289] close(24) = -1 EBADF (Bad file descriptor) [pid 5289] close(25) = -1 EBADF (Bad file descriptor) [pid 5289] close(26) = -1 EBADF (Bad file descriptor) [pid 5289] close(27) = -1 EBADF (Bad file descriptor) [pid 5289] close(28) = -1 EBADF (Bad file descriptor) [pid 5289] close(29) = -1 EBADF (Bad file descriptor) [pid 5289] exit_group(0) = ? [pid 5289] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=188, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 189 ./strace-static-x86_64: Process 5290 attached [pid 5290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5290] setpgid(0, 0) = 0 [pid 5290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5290] write(3, "1000", 4) = 4 [ 120.905909][ T5289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 120.913897][ T5289] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 120.921904][ T5289] [pid 5290] close(3) = 0 [pid 5290] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5290] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5290] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5290] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5290] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5290] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5290] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5290] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5290] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5290] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5290] write(7, "5", 1) = 1 [ 120.987114][ T5290] FAULT_INJECTION: forcing a failure. [ 120.987114][ T5290] name failslab, interval 1, probability 0, space 0, times 0 [ 121.002459][ T5290] CPU: 0 PID: 5290 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 121.012402][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 121.022475][ T5290] Call Trace: [ 121.025783][ T5290] [ 121.028714][ T5290] dump_stack_lvl+0xd1/0x138 [ 121.033318][ T5290] should_fail_ex.cold+0x5/0xa [ 121.038107][ T5290] ? io_issue_sqe+0x695/0x1250 [ 121.042879][ T5290] should_failslab+0x9/0x20 [ 121.047389][ T5290] __kmem_cache_alloc_node+0x5b/0x330 [ 121.052763][ T5290] ? ref_tracker_alloc+0x158/0x560 [ 121.057884][ T5290] kmalloc_trace+0x26/0x60 [ 121.062324][ T5290] ref_tracker_alloc+0x158/0x560 [ 121.067295][ T5290] ? __lock_acquire+0xbc3/0x56d0 [ 121.072256][ T5290] ? ref_tracker_free+0x6b0/0x6b0 [ 121.077335][ T5290] dst_init+0xe4/0x520 [ 121.081432][ T5290] dst_alloc+0x16f/0x1f0 [ 121.085705][ T5290] rt_dst_alloc+0x55/0x430 [ 121.090148][ T5290] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 121.096170][ T5290] ip_route_output_key_hash+0x18f/0x340 [ 121.101743][ T5290] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 121.108031][ T5290] dccp_v4_connect+0x7e1/0x1730 [ 121.112931][ T5290] __inet_stream_connect+0x69e/0xed0 [ 121.118265][ T5290] ? inet_listen+0x640/0x640 [ 121.122892][ T5290] ? mark_held_locks+0x9f/0xe0 [ 121.127680][ T5290] ? __local_bh_enable_ip+0xa4/0x130 [ 121.132992][ T5290] inet_stream_connect+0x57/0xa0 [ 121.137961][ T5290] ? __inet_stream_connect+0xed0/0xed0 [ 121.143450][ T5290] __sys_connect_file+0x153/0x1a0 [ 121.148500][ T5290] io_connect+0x3cc/0x720 [ 121.152863][ T5290] ? io_connect_prep+0x250/0x250 [ 121.157826][ T5290] ? receive_fd+0x110/0x110 [ 121.162369][ T5290] ? rcu_read_lock_sched_held+0x3e/0x70 [ 121.167934][ T5290] ? io_connect_prep+0x250/0x250 [ 121.172905][ T5290] io_issue_sqe+0x695/0x1250 [ 121.177526][ T5290] io_submit_sqes+0x96c/0x1e90 [ 121.182335][ T5290] __do_sys_io_uring_enter+0x103d/0x24e0 [ 121.188004][ T5290] ? io_submit_sqes+0x1e90/0x1e90 [ 121.193057][ T5290] ? ptrace_notify+0xfe/0x140 [ 121.197756][ T5290] ? lock_downgrade+0x6e0/0x6e0 [ 121.202634][ T5290] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.207860][ T5290] ? lockdep_hardirqs_on+0x7d/0x100 [ 121.213105][ T5290] ? _raw_spin_unlock_irq+0x2e/0x50 [ 121.218328][ T5290] ? ptrace_notify+0xfe/0x140 [ 121.223032][ T5290] do_syscall_64+0x39/0xb0 [ 121.227474][ T5290] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.233386][ T5290] RIP: 0033:0x7f607b0de549 [ 121.237819][ T5290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 121.257534][ T5290] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 121.265967][ T5290] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 121.273955][ T5290] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5290] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5290] close(3) = 0 [pid 5290] close(4) = 0 [pid 5290] close(5) = 0 [pid 5290] close(6) = 0 [pid 5290] close(7) = 0 [pid 5290] close(8) = -1 EBADF (Bad file descriptor) [pid 5290] close(9) = -1 EBADF (Bad file descriptor) [pid 5290] close(10) = -1 EBADF (Bad file descriptor) [pid 5290] close(11) = -1 EBADF (Bad file descriptor) [pid 5290] close(12) = -1 EBADF (Bad file descriptor) [pid 5290] close(13) = -1 EBADF (Bad file descriptor) [pid 5290] close(14) = -1 EBADF (Bad file descriptor) [pid 5290] close(15) = -1 EBADF (Bad file descriptor) [pid 5290] close(16) = -1 EBADF (Bad file descriptor) [pid 5290] close(17) = -1 EBADF (Bad file descriptor) [pid 5290] close(18) = -1 EBADF (Bad file descriptor) [pid 5290] close(19) = -1 EBADF (Bad file descriptor) [pid 5290] close(20) = -1 EBADF (Bad file descriptor) [pid 5290] close(21) = -1 EBADF (Bad file descriptor) [pid 5290] close(22) = -1 EBADF (Bad file descriptor) [pid 5290] close(23) = -1 EBADF (Bad file descriptor) [pid 5290] close(24) = -1 EBADF (Bad file descriptor) [pid 5290] close(25) = -1 EBADF (Bad file descriptor) [pid 5290] close(26) = -1 EBADF (Bad file descriptor) [pid 5290] close(27) = -1 EBADF (Bad file descriptor) [pid 5290] close(28) = -1 EBADF (Bad file descriptor) [pid 5290] close(29) = -1 EBADF (Bad file descriptor) [pid 5290] exit_group(0) = ? [pid 5290] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=189, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5291 attached , child_tidptr=0x555555eff5d0) = 190 [pid 5291] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5291] setpgid(0, 0) = 0 [pid 5291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5291] write(3, "1000", 4) = 4 [pid 5291] close(3) = 0 [pid 5291] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5291] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5291] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5291] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 121.281943][ T5290] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 121.289930][ T5290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 121.297916][ T5290] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 121.305926][ T5290] [pid 5291] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5291] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5291] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5291] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5291] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5291] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5291] write(7, "5", 1) = 1 [ 121.358231][ T5291] FAULT_INJECTION: forcing a failure. [ 121.358231][ T5291] name failslab, interval 1, probability 0, space 0, times 0 [ 121.370927][ T5291] CPU: 0 PID: 5291 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 121.380843][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 121.390924][ T5291] Call Trace: [ 121.394231][ T5291] [ 121.397188][ T5291] dump_stack_lvl+0xd1/0x138 [ 121.401820][ T5291] should_fail_ex.cold+0x5/0xa [ 121.406591][ T5291] ? __inet_hash_connect+0x95e/0x1ba0 [ 121.411965][ T5291] should_failslab+0x9/0x20 [ 121.416473][ T5291] kmem_cache_alloc+0x5a/0x320 [ 121.421261][ T5291] __inet_hash_connect+0x95e/0x1ba0 [ 121.426531][ T5291] ? __inet_lookup_listener+0xbf0/0xbf0 [ 121.432107][ T5291] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 121.438478][ T5291] dccp_v4_connect+0xb82/0x1730 [ 121.443383][ T5291] __inet_stream_connect+0x69e/0xed0 [ 121.448729][ T5291] ? inet_listen+0x640/0x640 [ 121.453353][ T5291] ? mark_held_locks+0x9f/0xe0 [ 121.458160][ T5291] ? __local_bh_enable_ip+0xa4/0x130 [ 121.463480][ T5291] inet_stream_connect+0x57/0xa0 [ 121.468459][ T5291] ? __inet_stream_connect+0xed0/0xed0 [ 121.473936][ T5291] __sys_connect_file+0x153/0x1a0 [ 121.478966][ T5291] io_connect+0x3cc/0x720 [ 121.483340][ T5291] ? io_connect_prep+0x250/0x250 [ 121.488316][ T5291] ? receive_fd+0x110/0x110 [ 121.492832][ T5291] ? rcu_read_lock_sched_held+0x3e/0x70 [ 121.498382][ T5291] ? io_connect_prep+0x250/0x250 [ 121.503344][ T5291] io_issue_sqe+0x695/0x1250 [ 121.507967][ T5291] io_submit_sqes+0x96c/0x1e90 [ 121.512752][ T5291] __do_sys_io_uring_enter+0x103d/0x24e0 [ 121.518412][ T5291] ? io_submit_sqes+0x1e90/0x1e90 [ 121.523466][ T5291] ? ptrace_notify+0xfe/0x140 [ 121.528175][ T5291] ? lock_downgrade+0x6e0/0x6e0 [ 121.533034][ T5291] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.538243][ T5291] ? lockdep_hardirqs_on+0x7d/0x100 [ 121.543458][ T5291] ? _raw_spin_unlock_irq+0x2e/0x50 [ 121.549133][ T5291] ? ptrace_notify+0xfe/0x140 [ 121.553839][ T5291] do_syscall_64+0x39/0xb0 [ 121.558267][ T5291] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.564182][ T5291] RIP: 0033:0x7f607b0de549 [ 121.568614][ T5291] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 121.588235][ T5291] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 121.596652][ T5291] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5291] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5291] close(3) = 0 [pid 5291] close(4) = 0 [pid 5291] close(5) = 0 [pid 5291] close(6) = 0 [pid 5291] close(7) = 0 [pid 5291] close(8) = -1 EBADF (Bad file descriptor) [pid 5291] close(9) = -1 EBADF (Bad file descriptor) [pid 5291] close(10) = -1 EBADF (Bad file descriptor) [pid 5291] close(11) = -1 EBADF (Bad file descriptor) [pid 5291] close(12) = -1 EBADF (Bad file descriptor) [pid 5291] close(13) = -1 EBADF (Bad file descriptor) [pid 5291] close(14) = -1 EBADF (Bad file descriptor) [pid 5291] close(15) = -1 EBADF (Bad file descriptor) [pid 5291] close(16) = -1 EBADF (Bad file descriptor) [pid 5291] close(17) = -1 EBADF (Bad file descriptor) [pid 5291] close(18) = -1 EBADF (Bad file descriptor) [pid 5291] close(19) = -1 EBADF (Bad file descriptor) [pid 5291] close(20) = -1 EBADF (Bad file descriptor) [pid 5291] close(21) = -1 EBADF (Bad file descriptor) [pid 5291] close(22) = -1 EBADF (Bad file descriptor) [pid 5291] close(23) = -1 EBADF (Bad file descriptor) [pid 5291] close(24) = -1 EBADF (Bad file descriptor) [pid 5291] close(25) = -1 EBADF (Bad file descriptor) [pid 5291] close(26) = -1 EBADF (Bad file descriptor) [pid 5291] close(27) = -1 EBADF (Bad file descriptor) [pid 5291] close(28) = -1 EBADF (Bad file descriptor) [pid 5291] close(29) = -1 EBADF (Bad file descriptor) [pid 5291] exit_group(0) = ? [pid 5291] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=190, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 191 ./strace-static-x86_64: Process 5292 attached [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5292] setpgid(0, 0) = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5292] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5292] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5292] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5292] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5292] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5292] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5292] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5292] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5292] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5292] write(7, "5", 1) = 1 [pid 5292] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5292] close(3) = 0 [pid 5292] close(4) = 0 [pid 5292] close(5) = 0 [pid 5292] close(6) = 0 [pid 5292] close(7) = 0 [pid 5292] close(8) = -1 EBADF (Bad file descriptor) [pid 5292] close(9) = -1 EBADF (Bad file descriptor) [pid 5292] close(10) = -1 EBADF (Bad file descriptor) [pid 5292] close(11) = -1 EBADF (Bad file descriptor) [pid 5292] close(12) = -1 EBADF (Bad file descriptor) [pid 5292] close(13) = -1 EBADF (Bad file descriptor) [pid 5292] close(14) = -1 EBADF (Bad file descriptor) [pid 5292] close(15) = -1 EBADF (Bad file descriptor) [ 121.604638][ T5291] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 121.612636][ T5291] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 121.620620][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 121.628608][ T5291] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 121.636622][ T5291] [pid 5292] close(16) = -1 EBADF (Bad file descriptor) [pid 5292] close(17) = -1 EBADF (Bad file descriptor) [pid 5292] close(18) = -1 EBADF (Bad file descriptor) [pid 5292] close(19) = -1 EBADF (Bad file descriptor) [pid 5292] close(20) = -1 EBADF (Bad file descriptor) [pid 5292] close(21) = -1 EBADF (Bad file descriptor) [pid 5292] close(22) = -1 EBADF (Bad file descriptor) [pid 5292] close(23) = -1 EBADF (Bad file descriptor) [pid 5292] close(24) = -1 EBADF (Bad file descriptor) [pid 5292] close(25) = -1 EBADF (Bad file descriptor) [pid 5292] close(26) = -1 EBADF (Bad file descriptor) [pid 5292] close(27) = -1 EBADF (Bad file descriptor) [pid 5292] close(28) = -1 EBADF (Bad file descriptor) [pid 5292] close(29) = -1 EBADF (Bad file descriptor) [pid 5292] exit_group(0) = ? [pid 5292] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=191, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5293 attached , child_tidptr=0x555555eff5d0) = 192 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5293] setpgid(0, 0) = 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5293] write(3, "1000", 4) = 4 [pid 5293] close(3) = 0 [pid 5293] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5293] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5293] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5293] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5293] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5293] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5293] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5293] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5293] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5293] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5293] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5293] write(7, "5", 1) = 1 [ 121.723082][ T5293] FAULT_INJECTION: forcing a failure. [ 121.723082][ T5293] name failslab, interval 1, probability 0, space 0, times 0 [ 121.737300][ T5293] CPU: 0 PID: 5293 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 121.747237][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 121.757316][ T5293] Call Trace: [ 121.760610][ T5293] [ 121.763542][ T5293] dump_stack_lvl+0xd1/0x138 [ 121.768141][ T5293] should_fail_ex.cold+0x5/0xa [ 121.772919][ T5293] ? io_issue_sqe+0x695/0x1250 [ 121.777718][ T5293] should_failslab+0x9/0x20 [ 121.782232][ T5293] __kmem_cache_alloc_node+0x5b/0x330 [ 121.787608][ T5293] ? ref_tracker_alloc+0x158/0x560 [ 121.792753][ T5293] kmalloc_trace+0x26/0x60 [ 121.797229][ T5293] ref_tracker_alloc+0x158/0x560 [ 121.802311][ T5293] ? __lock_acquire+0xbc3/0x56d0 [ 121.807287][ T5293] ? ref_tracker_free+0x6b0/0x6b0 [ 121.812377][ T5293] dst_init+0xe4/0x520 [ 121.816458][ T5293] dst_alloc+0x16f/0x1f0 [ 121.820710][ T5293] rt_dst_alloc+0x55/0x430 [ 121.825138][ T5293] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 121.831132][ T5293] ip_route_output_key_hash+0x18f/0x340 [ 121.836949][ T5293] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 121.843219][ T5293] dccp_v4_connect+0x7e1/0x1730 [ 121.848103][ T5293] __inet_stream_connect+0x69e/0xed0 [ 121.853406][ T5293] ? inet_listen+0x640/0x640 [ 121.858014][ T5293] ? mark_held_locks+0x9f/0xe0 [ 121.862798][ T5293] ? __local_bh_enable_ip+0xa4/0x130 [ 121.868116][ T5293] inet_stream_connect+0x57/0xa0 [ 121.873063][ T5293] ? __inet_stream_connect+0xed0/0xed0 [ 121.878543][ T5293] __sys_connect_file+0x153/0x1a0 [ 121.883595][ T5293] io_connect+0x3cc/0x720 [ 121.887939][ T5293] ? io_connect_prep+0x250/0x250 [ 121.892902][ T5293] ? receive_fd+0x110/0x110 [ 121.897424][ T5293] ? rcu_read_lock_sched_held+0x3e/0x70 [ 121.902976][ T5293] ? io_connect_prep+0x250/0x250 [ 121.907923][ T5293] io_issue_sqe+0x695/0x1250 [ 121.912548][ T5293] io_submit_sqes+0x96c/0x1e90 [ 121.917354][ T5293] __do_sys_io_uring_enter+0x103d/0x24e0 [ 121.923085][ T5293] ? io_submit_sqes+0x1e90/0x1e90 [ 121.928133][ T5293] ? ptrace_notify+0xfe/0x140 [ 121.932846][ T5293] ? lock_downgrade+0x6e0/0x6e0 [ 121.937702][ T5293] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.942905][ T5293] ? lockdep_hardirqs_on+0x7d/0x100 [ 121.948118][ T5293] ? _raw_spin_unlock_irq+0x2e/0x50 [ 121.953349][ T5293] ? ptrace_notify+0xfe/0x140 [ 121.958048][ T5293] do_syscall_64+0x39/0xb0 [ 121.962505][ T5293] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.968401][ T5293] RIP: 0033:0x7f607b0de549 [ 121.972818][ T5293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 121.992454][ T5293] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 122.000909][ T5293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 122.008901][ T5293] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5293] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5293] close(3) = 0 [pid 5293] close(4) = 0 [pid 5293] close(5) = 0 [pid 5293] close(6) = 0 [pid 5293] close(7) = 0 [pid 5293] close(8) = -1 EBADF (Bad file descriptor) [pid 5293] close(9) = -1 EBADF (Bad file descriptor) [pid 5293] close(10) = -1 EBADF (Bad file descriptor) [pid 5293] close(11) = -1 EBADF (Bad file descriptor) [pid 5293] close(12) = -1 EBADF (Bad file descriptor) [pid 5293] close(13) = -1 EBADF (Bad file descriptor) [pid 5293] close(14) = -1 EBADF (Bad file descriptor) [pid 5293] close(15) = -1 EBADF (Bad file descriptor) [pid 5293] close(16) = -1 EBADF (Bad file descriptor) [pid 5293] close(17) = -1 EBADF (Bad file descriptor) [pid 5293] close(18) = -1 EBADF (Bad file descriptor) [pid 5293] close(19) = -1 EBADF (Bad file descriptor) [pid 5293] close(20) = -1 EBADF (Bad file descriptor) [pid 5293] close(21) = -1 EBADF (Bad file descriptor) [pid 5293] close(22) = -1 EBADF (Bad file descriptor) [pid 5293] close(23) = -1 EBADF (Bad file descriptor) [pid 5293] close(24) = -1 EBADF (Bad file descriptor) [pid 5293] close(25) = -1 EBADF (Bad file descriptor) [pid 5293] close(26) = -1 EBADF (Bad file descriptor) [pid 5293] close(27) = -1 EBADF (Bad file descriptor) [pid 5293] close(28) = -1 EBADF (Bad file descriptor) [pid 5293] close(29) = -1 EBADF (Bad file descriptor) [pid 5293] exit_group(0) = ? [pid 5293] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=192, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5294 attached , child_tidptr=0x555555eff5d0) = 193 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5294] setpgid(0, 0) = 0 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5294] write(3, "1000", 4) = 4 [pid 5294] close(3) = 0 [pid 5294] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5294] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 122.016874][ T5293] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 122.024862][ T5293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 122.032857][ T5293] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 122.040859][ T5293] [pid 5294] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5294] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5294] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5294] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5294] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5294] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5294] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5294] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5294] write(7, "5", 1) = 1 [ 122.092586][ T5294] FAULT_INJECTION: forcing a failure. [ 122.092586][ T5294] name failslab, interval 1, probability 0, space 0, times 0 [ 122.105317][ T5294] CPU: 0 PID: 5294 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 122.115216][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 122.125274][ T5294] Call Trace: [ 122.128560][ T5294] [ 122.131489][ T5294] dump_stack_lvl+0xd1/0x138 [ 122.136102][ T5294] should_fail_ex.cold+0x5/0xa [ 122.140894][ T5294] ? __inet_hash_connect+0x95e/0x1ba0 [ 122.146279][ T5294] should_failslab+0x9/0x20 [ 122.150819][ T5294] kmem_cache_alloc+0x5a/0x320 [ 122.155594][ T5294] __inet_hash_connect+0x95e/0x1ba0 [ 122.160805][ T5294] ? __inet_lookup_listener+0xbf0/0xbf0 [ 122.166378][ T5294] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 122.172744][ T5294] dccp_v4_connect+0xb82/0x1730 [ 122.177638][ T5294] __inet_stream_connect+0x69e/0xed0 [ 122.182966][ T5294] ? inet_listen+0x640/0x640 [ 122.187578][ T5294] ? mark_held_locks+0x9f/0xe0 [ 122.192367][ T5294] ? __local_bh_enable_ip+0xa4/0x130 [ 122.197671][ T5294] inet_stream_connect+0x57/0xa0 [ 122.202643][ T5294] ? __inet_stream_connect+0xed0/0xed0 [ 122.208105][ T5294] __sys_connect_file+0x153/0x1a0 [ 122.213135][ T5294] io_connect+0x3cc/0x720 [ 122.217508][ T5294] ? io_connect_prep+0x250/0x250 [ 122.222481][ T5294] ? receive_fd+0x110/0x110 [ 122.227009][ T5294] ? rcu_read_lock_sched_held+0x3e/0x70 [ 122.232580][ T5294] ? io_connect_prep+0x250/0x250 [ 122.237545][ T5294] io_issue_sqe+0x695/0x1250 [ 122.242174][ T5294] io_submit_sqes+0x96c/0x1e90 [ 122.246963][ T5294] __do_sys_io_uring_enter+0x103d/0x24e0 [ 122.252606][ T5294] ? io_submit_sqes+0x1e90/0x1e90 [ 122.257649][ T5294] ? ptrace_notify+0xfe/0x140 [ 122.262347][ T5294] ? lock_downgrade+0x6e0/0x6e0 [ 122.267205][ T5294] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.272408][ T5294] ? lockdep_hardirqs_on+0x7d/0x100 [ 122.277619][ T5294] ? _raw_spin_unlock_irq+0x2e/0x50 [ 122.282851][ T5294] ? ptrace_notify+0xfe/0x140 [ 122.287548][ T5294] do_syscall_64+0x39/0xb0 [ 122.292016][ T5294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.297920][ T5294] RIP: 0033:0x7f607b0de549 [ 122.302332][ T5294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 122.321957][ T5294] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 122.330415][ T5294] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5294] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5294] close(3) = 0 [pid 5294] close(4) = 0 [pid 5294] close(5) = 0 [pid 5294] close(6) = 0 [pid 5294] close(7) = 0 [pid 5294] close(8) = -1 EBADF (Bad file descriptor) [pid 5294] close(9) = -1 EBADF (Bad file descriptor) [pid 5294] close(10) = -1 EBADF (Bad file descriptor) [pid 5294] close(11) = -1 EBADF (Bad file descriptor) [pid 5294] close(12) = -1 EBADF (Bad file descriptor) [pid 5294] close(13) = -1 EBADF (Bad file descriptor) [pid 5294] close(14) = -1 EBADF (Bad file descriptor) [pid 5294] close(15) = -1 EBADF (Bad file descriptor) [pid 5294] close(16) = -1 EBADF (Bad file descriptor) [pid 5294] close(17) = -1 EBADF (Bad file descriptor) [pid 5294] close(18) = -1 EBADF (Bad file descriptor) [pid 5294] close(19) = -1 EBADF (Bad file descriptor) [pid 5294] close(20) = -1 EBADF (Bad file descriptor) [pid 5294] close(21) = -1 EBADF (Bad file descriptor) [pid 5294] close(22) = -1 EBADF (Bad file descriptor) [pid 5294] close(23) = -1 EBADF (Bad file descriptor) [pid 5294] close(24) = -1 EBADF (Bad file descriptor) [pid 5294] close(25) = -1 EBADF (Bad file descriptor) [pid 5294] close(26) = -1 EBADF (Bad file descriptor) [pid 5294] close(27) = -1 EBADF (Bad file descriptor) [pid 5294] close(28) = -1 EBADF (Bad file descriptor) [pid 5294] close(29) = -1 EBADF (Bad file descriptor) [pid 5294] exit_group(0) = ? [pid 5294] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=193, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5295 attached , child_tidptr=0x555555eff5d0) = 194 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5295] setpgid(0, 0) = 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4) = 4 [pid 5295] close(3) = 0 [pid 5295] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5295] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5295] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5295] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5295] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5295] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 122.338412][ T5294] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 122.346387][ T5294] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 122.354358][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 122.362346][ T5294] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 122.370382][ T5294] [pid 5295] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5295] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5295] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5295] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5295] write(7, "5", 1) = 1 [ 122.408309][ T5295] FAULT_INJECTION: forcing a failure. [ 122.408309][ T5295] name failslab, interval 1, probability 0, space 0, times 0 [ 122.421108][ T5295] CPU: 0 PID: 5295 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 122.431053][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 122.441134][ T5295] Call Trace: [ 122.444413][ T5295] [ 122.447357][ T5295] dump_stack_lvl+0xd1/0x138 [ 122.452002][ T5295] should_fail_ex.cold+0x5/0xa [ 122.456785][ T5295] ? io_issue_sqe+0x695/0x1250 [ 122.461565][ T5295] should_failslab+0x9/0x20 [ 122.466094][ T5295] __kmem_cache_alloc_node+0x5b/0x330 [ 122.471500][ T5295] ? ref_tracker_alloc+0x158/0x560 [ 122.476628][ T5295] kmalloc_trace+0x26/0x60 [ 122.481063][ T5295] ref_tracker_alloc+0x158/0x560 [ 122.486043][ T5295] ? __lock_acquire+0xbc3/0x56d0 [ 122.490985][ T5295] ? ref_tracker_free+0x6b0/0x6b0 [ 122.496030][ T5295] dst_init+0xe4/0x520 [ 122.500128][ T5295] dst_alloc+0x16f/0x1f0 [ 122.504394][ T5295] rt_dst_alloc+0x55/0x430 [ 122.508817][ T5295] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 122.514835][ T5295] ip_route_output_key_hash+0x18f/0x340 [ 122.520420][ T5295] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 122.526687][ T5295] dccp_v4_connect+0x7e1/0x1730 [ 122.531610][ T5295] __inet_stream_connect+0x69e/0xed0 [ 122.536950][ T5295] ? inet_listen+0x640/0x640 [ 122.541561][ T5295] ? mark_held_locks+0x9f/0xe0 [ 122.546347][ T5295] ? __local_bh_enable_ip+0xa4/0x130 [ 122.551668][ T5295] inet_stream_connect+0x57/0xa0 [ 122.556620][ T5295] ? __inet_stream_connect+0xed0/0xed0 [ 122.562105][ T5295] __sys_connect_file+0x153/0x1a0 [ 122.567156][ T5295] io_connect+0x3cc/0x720 [ 122.571490][ T5295] ? io_connect_prep+0x250/0x250 [ 122.576431][ T5295] ? receive_fd+0x110/0x110 [ 122.580973][ T5295] ? rcu_read_lock_sched_held+0x3e/0x70 [ 122.586557][ T5295] ? io_connect_prep+0x250/0x250 [ 122.591550][ T5295] io_issue_sqe+0x695/0x1250 [ 122.596150][ T5295] io_submit_sqes+0x96c/0x1e90 [ 122.600968][ T5295] __do_sys_io_uring_enter+0x103d/0x24e0 [ 122.606666][ T5295] ? io_submit_sqes+0x1e90/0x1e90 [ 122.611727][ T5295] ? ptrace_notify+0xfe/0x140 [ 122.616407][ T5295] ? lock_downgrade+0x6e0/0x6e0 [ 122.621289][ T5295] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.626505][ T5295] ? lockdep_hardirqs_on+0x7d/0x100 [ 122.631741][ T5295] ? _raw_spin_unlock_irq+0x2e/0x50 [ 122.636969][ T5295] ? ptrace_notify+0xfe/0x140 [ 122.641651][ T5295] do_syscall_64+0x39/0xb0 [ 122.646094][ T5295] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.652030][ T5295] RIP: 0033:0x7f607b0de549 [ 122.656461][ T5295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 122.676091][ T5295] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 122.684543][ T5295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 122.692528][ T5295] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 122.700521][ T5295] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5295] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5295] close(3) = 0 [pid 5295] close(4) = 0 [pid 5295] close(5) = 0 [pid 5295] close(6) = 0 [pid 5295] close(7) = 0 [pid 5295] close(8) = -1 EBADF (Bad file descriptor) [pid 5295] close(9) = -1 EBADF (Bad file descriptor) [pid 5295] close(10) = -1 EBADF (Bad file descriptor) [pid 5295] close(11) = -1 EBADF (Bad file descriptor) [pid 5295] close(12) = -1 EBADF (Bad file descriptor) [pid 5295] close(13) = -1 EBADF (Bad file descriptor) [pid 5295] close(14) = -1 EBADF (Bad file descriptor) [pid 5295] close(15) = -1 EBADF (Bad file descriptor) [pid 5295] close(16) = -1 EBADF (Bad file descriptor) [pid 5295] close(17) = -1 EBADF (Bad file descriptor) [pid 5295] close(18) = -1 EBADF (Bad file descriptor) [pid 5295] close(19) = -1 EBADF (Bad file descriptor) [pid 5295] close(20) = -1 EBADF (Bad file descriptor) [pid 5295] close(21) = -1 EBADF (Bad file descriptor) [pid 5295] close(22) = -1 EBADF (Bad file descriptor) [pid 5295] close(23) = -1 EBADF (Bad file descriptor) [pid 5295] close(24) = -1 EBADF (Bad file descriptor) [pid 5295] close(25) = -1 EBADF (Bad file descriptor) [pid 5295] close(26) = -1 EBADF (Bad file descriptor) [pid 5295] close(27) = -1 EBADF (Bad file descriptor) [pid 5295] close(28) = -1 EBADF (Bad file descriptor) [pid 5295] close(29) = -1 EBADF (Bad file descriptor) [pid 5295] exit_group(0) = ? [pid 5295] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=194, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 122.708494][ T5295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 122.716478][ T5295] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 122.724481][ T5295] [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5296 attached , child_tidptr=0x555555eff5d0) = 195 [pid 5296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5296] setpgid(0, 0) = 0 [pid 5296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5296] write(3, "1000", 4) = 4 [pid 5296] close(3) = 0 [pid 5296] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5296] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5296] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5296] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5296] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5296] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5296] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5296] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5296] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5296] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5296] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5296] write(7, "5", 1) = 1 [ 122.786722][ T5296] FAULT_INJECTION: forcing a failure. [ 122.786722][ T5296] name failslab, interval 1, probability 0, space 0, times 0 [ 122.800626][ T5296] CPU: 0 PID: 5296 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 122.810593][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 122.820673][ T5296] Call Trace: [ 122.823968][ T5296] [ 122.826930][ T5296] dump_stack_lvl+0xd1/0x138 [ 122.831560][ T5296] should_fail_ex.cold+0x5/0xa [ 122.836324][ T5296] ? io_issue_sqe+0x695/0x1250 [ 122.841115][ T5296] should_failslab+0x9/0x20 [ 122.845661][ T5296] __kmem_cache_alloc_node+0x5b/0x330 [ 122.851049][ T5296] ? ref_tracker_alloc+0x158/0x560 [ 122.856197][ T5296] kmalloc_trace+0x26/0x60 [ 122.860645][ T5296] ref_tracker_alloc+0x158/0x560 [ 122.865612][ T5296] ? __lock_acquire+0xbc3/0x56d0 [ 122.870655][ T5296] ? ref_tracker_free+0x6b0/0x6b0 [ 122.875743][ T5296] dst_init+0xe4/0x520 [ 122.879842][ T5296] dst_alloc+0x16f/0x1f0 [ 122.884110][ T5296] rt_dst_alloc+0x55/0x430 [ 122.888563][ T5296] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 122.894587][ T5296] ip_route_output_key_hash+0x18f/0x340 [ 122.900163][ T5296] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 122.906455][ T5296] dccp_v4_connect+0x7e1/0x1730 [ 122.911359][ T5296] __inet_stream_connect+0x69e/0xed0 [ 122.916694][ T5296] ? inet_listen+0x640/0x640 [ 122.921318][ T5296] ? mark_held_locks+0x9f/0xe0 [ 122.926106][ T5296] ? __local_bh_enable_ip+0xa4/0x130 [ 122.931421][ T5296] inet_stream_connect+0x57/0xa0 [ 122.936389][ T5296] ? __inet_stream_connect+0xed0/0xed0 [ 122.941880][ T5296] __sys_connect_file+0x153/0x1a0 [ 122.946930][ T5296] io_connect+0x3cc/0x720 [ 122.951294][ T5296] ? io_connect_prep+0x250/0x250 [ 122.956261][ T5296] ? receive_fd+0x110/0x110 [ 122.960808][ T5296] ? rcu_read_lock_sched_held+0x3e/0x70 [ 122.966376][ T5296] ? io_connect_prep+0x250/0x250 [ 122.971348][ T5296] io_issue_sqe+0x695/0x1250 [ 122.975971][ T5296] io_submit_sqes+0x96c/0x1e90 [ 122.980781][ T5296] __do_sys_io_uring_enter+0x103d/0x24e0 [ 122.986453][ T5296] ? io_submit_sqes+0x1e90/0x1e90 [ 122.991714][ T5296] ? ptrace_notify+0xfe/0x140 [ 122.996410][ T5296] ? lock_downgrade+0x6e0/0x6e0 [ 123.001292][ T5296] ? _raw_spin_unlock_irq+0x23/0x50 [ 123.006521][ T5296] ? lockdep_hardirqs_on+0x7d/0x100 [ 123.011738][ T5296] ? _raw_spin_unlock_irq+0x2e/0x50 [ 123.016961][ T5296] ? ptrace_notify+0xfe/0x140 [ 123.021662][ T5296] do_syscall_64+0x39/0xb0 [ 123.026110][ T5296] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.032023][ T5296] RIP: 0033:0x7f607b0de549 [ 123.036454][ T5296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 123.056118][ T5296] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 123.064553][ T5296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 123.072542][ T5296] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5296] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5296] close(3) = 0 [pid 5296] close(4) = 0 [pid 5296] close(5) = 0 [pid 5296] close(6) = 0 [pid 5296] close(7) = 0 [pid 5296] close(8) = -1 EBADF (Bad file descriptor) [pid 5296] close(9) = -1 EBADF (Bad file descriptor) [pid 5296] close(10) = -1 EBADF (Bad file descriptor) [pid 5296] close(11) = -1 EBADF (Bad file descriptor) [pid 5296] close(12) = -1 EBADF (Bad file descriptor) [pid 5296] close(13) = -1 EBADF (Bad file descriptor) [pid 5296] close(14) = -1 EBADF (Bad file descriptor) [pid 5296] close(15) = -1 EBADF (Bad file descriptor) [pid 5296] close(16) = -1 EBADF (Bad file descriptor) [pid 5296] close(17) = -1 EBADF (Bad file descriptor) [pid 5296] close(18) = -1 EBADF (Bad file descriptor) [pid 5296] close(19) = -1 EBADF (Bad file descriptor) [pid 5296] close(20) = -1 EBADF (Bad file descriptor) [pid 5296] close(21) = -1 EBADF (Bad file descriptor) [pid 5296] close(22) = -1 EBADF (Bad file descriptor) [pid 5296] close(23) = -1 EBADF (Bad file descriptor) [pid 5296] close(24) = -1 EBADF (Bad file descriptor) [pid 5296] close(25) = -1 EBADF (Bad file descriptor) [pid 5296] close(26) = -1 EBADF (Bad file descriptor) [pid 5296] close(27) = -1 EBADF (Bad file descriptor) [pid 5296] close(28) = -1 EBADF (Bad file descriptor) [pid 5296] close(29) = -1 EBADF (Bad file descriptor) [pid 5296] exit_group(0) = ? [pid 5296] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=195, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 196 ./strace-static-x86_64: Process 5297 attached [pid 5297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5297] setpgid(0, 0) = 0 [pid 5297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5297] write(3, "1000", 4) = 4 [pid 5297] close(3) = 0 [pid 5297] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5297] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5297] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5297] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5297] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 123.080526][ T5296] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 123.088984][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 123.096978][ T5296] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 123.104987][ T5296] [pid 5297] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5297] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5297] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5297] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5297] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5297] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5297] write(7, "5", 1) = 1 [ 123.163889][ T5297] FAULT_INJECTION: forcing a failure. [ 123.163889][ T5297] name failslab, interval 1, probability 0, space 0, times 0 [ 123.176616][ T5297] CPU: 0 PID: 5297 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 123.186562][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 123.196634][ T5297] Call Trace: [ 123.199926][ T5297] [ 123.202883][ T5297] dump_stack_lvl+0xd1/0x138 [ 123.207511][ T5297] should_fail_ex.cold+0x5/0xa [ 123.212277][ T5297] ? __inet_hash_connect+0x95e/0x1ba0 [ 123.217664][ T5297] should_failslab+0x9/0x20 [ 123.222204][ T5297] kmem_cache_alloc+0x5a/0x320 [ 123.226997][ T5297] __inet_hash_connect+0x95e/0x1ba0 [ 123.232223][ T5297] ? __inet_lookup_listener+0xbf0/0xbf0 [ 123.237803][ T5297] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 123.244268][ T5297] dccp_v4_connect+0xb82/0x1730 [ 123.249138][ T5297] __inet_stream_connect+0x69e/0xed0 [ 123.254466][ T5297] ? inet_listen+0x640/0x640 [ 123.259067][ T5297] ? mark_held_locks+0x9f/0xe0 [ 123.264284][ T5297] ? __local_bh_enable_ip+0xa4/0x130 [ 123.269603][ T5297] inet_stream_connect+0x57/0xa0 [ 123.274549][ T5297] ? __inet_stream_connect+0xed0/0xed0 [ 123.280031][ T5297] __sys_connect_file+0x153/0x1a0 [ 123.285089][ T5297] io_connect+0x3cc/0x720 [ 123.289430][ T5297] ? io_connect_prep+0x250/0x250 [ 123.294373][ T5297] ? receive_fd+0x110/0x110 [ 123.298912][ T5297] ? rcu_read_lock_sched_held+0x3e/0x70 [ 123.304493][ T5297] ? io_connect_prep+0x250/0x250 [ 123.309470][ T5297] io_issue_sqe+0x695/0x1250 [ 123.314065][ T5297] io_submit_sqes+0x96c/0x1e90 [ 123.318871][ T5297] __do_sys_io_uring_enter+0x103d/0x24e0 [ 123.324559][ T5297] ? io_submit_sqes+0x1e90/0x1e90 [ 123.329646][ T5297] ? ptrace_notify+0xfe/0x140 [ 123.334327][ T5297] ? lock_downgrade+0x6e0/0x6e0 [ 123.339185][ T5297] ? _raw_spin_unlock_irq+0x23/0x50 [ 123.344397][ T5297] ? lockdep_hardirqs_on+0x7d/0x100 [ 123.349621][ T5297] ? _raw_spin_unlock_irq+0x2e/0x50 [ 123.354823][ T5297] ? ptrace_notify+0xfe/0x140 [ 123.359504][ T5297] do_syscall_64+0x39/0xb0 [ 123.363929][ T5297] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.369825][ T5297] RIP: 0033:0x7f607b0de549 [ 123.374234][ T5297] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 123.393853][ T5297] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 123.402272][ T5297] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5297] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5297] close(3) = 0 [pid 5297] close(4) = 0 [pid 5297] close(5) = 0 [pid 5297] close(6) = 0 [pid 5297] close(7) = 0 [pid 5297] close(8) = -1 EBADF (Bad file descriptor) [pid 5297] close(9) = -1 EBADF (Bad file descriptor) [pid 5297] close(10) = -1 EBADF (Bad file descriptor) [pid 5297] close(11) = -1 EBADF (Bad file descriptor) [pid 5297] close(12) = -1 EBADF (Bad file descriptor) [pid 5297] close(13) = -1 EBADF (Bad file descriptor) [pid 5297] close(14) = -1 EBADF (Bad file descriptor) [pid 5297] close(15) = -1 EBADF (Bad file descriptor) [pid 5297] close(16) = -1 EBADF (Bad file descriptor) [pid 5297] close(17) = -1 EBADF (Bad file descriptor) [pid 5297] close(18) = -1 EBADF (Bad file descriptor) [pid 5297] close(19) = -1 EBADF (Bad file descriptor) [pid 5297] close(20) = -1 EBADF (Bad file descriptor) [pid 5297] close(21) = -1 EBADF (Bad file descriptor) [pid 5297] close(22) = -1 EBADF (Bad file descriptor) [pid 5297] close(23) = -1 EBADF (Bad file descriptor) [pid 5297] close(24) = -1 EBADF (Bad file descriptor) [pid 5297] close(25) = -1 EBADF (Bad file descriptor) [pid 5297] close(26) = -1 EBADF (Bad file descriptor) [pid 5297] close(27) = -1 EBADF (Bad file descriptor) [pid 5297] close(28) = -1 EBADF (Bad file descriptor) [pid 5297] close(29) = -1 EBADF (Bad file descriptor) [pid 5297] exit_group(0) = ? [pid 5297] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=196, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5298 attached , child_tidptr=0x555555eff5d0) = 197 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 [pid 5298] close(3) = 0 [pid 5298] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5298] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5298] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5298] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5298] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5298] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5298] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5298] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5298] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5298] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 123.410254][ T5297] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 123.418244][ T5297] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 123.426213][ T5297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 123.434217][ T5297] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 123.442221][ T5297] [pid 5298] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5298] write(7, "5", 1) = 1 [ 123.505327][ T5298] FAULT_INJECTION: forcing a failure. [ 123.505327][ T5298] name failslab, interval 1, probability 0, space 0, times 0 [ 123.518374][ T5298] CPU: 1 PID: 5298 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 123.528319][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 123.538379][ T5298] Call Trace: [ 123.541656][ T5298] [ 123.544585][ T5298] dump_stack_lvl+0xd1/0x138 [ 123.549202][ T5298] should_fail_ex.cold+0x5/0xa [ 123.554004][ T5298] ? io_issue_sqe+0x695/0x1250 [ 123.558800][ T5298] should_failslab+0x9/0x20 [ 123.563344][ T5298] __kmem_cache_alloc_node+0x5b/0x330 [ 123.568732][ T5298] ? ref_tracker_alloc+0x158/0x560 [ 123.573883][ T5298] kmalloc_trace+0x26/0x60 [ 123.578309][ T5298] ref_tracker_alloc+0x158/0x560 [ 123.583256][ T5298] ? __lock_acquire+0xbc3/0x56d0 [ 123.588196][ T5298] ? ref_tracker_free+0x6b0/0x6b0 [ 123.593241][ T5298] dst_init+0xe4/0x520 [ 123.597321][ T5298] dst_alloc+0x16f/0x1f0 [ 123.601583][ T5298] rt_dst_alloc+0x55/0x430 [ 123.606007][ T5298] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 123.611999][ T5298] ip_route_output_key_hash+0x18f/0x340 [ 123.617557][ T5298] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 123.623833][ T5298] dccp_v4_connect+0x7e1/0x1730 [ 123.628744][ T5298] __inet_stream_connect+0x69e/0xed0 [ 123.634080][ T5298] ? inet_listen+0x640/0x640 [ 123.638715][ T5298] ? mark_held_locks+0x9f/0xe0 [ 123.643506][ T5298] ? __local_bh_enable_ip+0xa4/0x130 [ 123.648801][ T5298] inet_stream_connect+0x57/0xa0 [ 123.653754][ T5298] ? __inet_stream_connect+0xed0/0xed0 [ 123.659223][ T5298] __sys_connect_file+0x153/0x1a0 [ 123.664273][ T5298] io_connect+0x3cc/0x720 [ 123.668659][ T5298] ? io_connect_prep+0x250/0x250 [ 123.673619][ T5298] ? receive_fd+0x110/0x110 [ 123.678135][ T5298] ? rcu_read_lock_sched_held+0x3e/0x70 [ 123.683713][ T5298] ? io_connect_prep+0x250/0x250 [ 123.688670][ T5298] io_issue_sqe+0x695/0x1250 [ 123.693301][ T5298] io_submit_sqes+0x96c/0x1e90 [ 123.698088][ T5298] __do_sys_io_uring_enter+0x103d/0x24e0 [ 123.703762][ T5298] ? io_submit_sqes+0x1e90/0x1e90 [ 123.708820][ T5298] ? ptrace_notify+0xfe/0x140 [ 123.713498][ T5298] ? lock_downgrade+0x6e0/0x6e0 [ 123.718376][ T5298] ? _raw_spin_unlock_irq+0x23/0x50 [ 123.723583][ T5298] ? lockdep_hardirqs_on+0x7d/0x100 [ 123.728783][ T5298] ? _raw_spin_unlock_irq+0x2e/0x50 [ 123.734001][ T5298] ? ptrace_notify+0xfe/0x140 [ 123.738689][ T5298] do_syscall_64+0x39/0xb0 [ 123.743118][ T5298] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.749024][ T5298] RIP: 0033:0x7f607b0de549 [ 123.753440][ T5298] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 123.773090][ T5298] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 123.781509][ T5298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 123.789496][ T5298] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 123.797493][ T5298] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5298] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5298] close(3) = 0 [pid 5298] close(4) = 0 [pid 5298] close(5) = 0 [pid 5298] close(6) = 0 [pid 5298] close(7) = 0 [pid 5298] close(8) = -1 EBADF (Bad file descriptor) [pid 5298] close(9) = -1 EBADF (Bad file descriptor) [pid 5298] close(10) = -1 EBADF (Bad file descriptor) [pid 5298] close(11) = -1 EBADF (Bad file descriptor) [pid 5298] close(12) = -1 EBADF (Bad file descriptor) [pid 5298] close(13) = -1 EBADF (Bad file descriptor) [pid 5298] close(14) = -1 EBADF (Bad file descriptor) [pid 5298] close(15) = -1 EBADF (Bad file descriptor) [pid 5298] close(16) = -1 EBADF (Bad file descriptor) [pid 5298] close(17) = -1 EBADF (Bad file descriptor) [pid 5298] close(18) = -1 EBADF (Bad file descriptor) [pid 5298] close(19) = -1 EBADF (Bad file descriptor) [pid 5298] close(20) = -1 EBADF (Bad file descriptor) [pid 5298] close(21) = -1 EBADF (Bad file descriptor) [pid 5298] close(22) = -1 EBADF (Bad file descriptor) [pid 5298] close(23) = -1 EBADF (Bad file descriptor) [pid 5298] close(24) = -1 EBADF (Bad file descriptor) [pid 5298] close(25) = -1 EBADF (Bad file descriptor) [pid 5298] close(26) = -1 EBADF (Bad file descriptor) [pid 5298] close(27) = -1 EBADF (Bad file descriptor) [pid 5298] close(28) = -1 EBADF (Bad file descriptor) [pid 5298] close(29) = -1 EBADF (Bad file descriptor) [pid 5298] exit_group(0) = ? [pid 5298] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=197, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 198 ./strace-static-x86_64: Process 5299 attached [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5299] setpgid(0, 0) = 0 [pid 5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1000", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5299] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5299] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5299] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5299] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5299] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5299] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5299] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5299] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5299] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5299] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5299] write(7, "5", 1) = 1 [ 123.805479][ T5298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 123.813465][ T5298] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 123.821456][ T5298] [ 123.860056][ T5299] FAULT_INJECTION: forcing a failure. [ 123.860056][ T5299] name failslab, interval 1, probability 0, space 0, times 0 [ 123.873246][ T5299] CPU: 0 PID: 5299 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 123.883182][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 123.893274][ T5299] Call Trace: [ 123.896577][ T5299] [ 123.899514][ T5299] dump_stack_lvl+0xd1/0x138 [ 123.904114][ T5299] should_fail_ex.cold+0x5/0xa [ 123.908891][ T5299] ? io_issue_sqe+0x695/0x1250 [ 123.913745][ T5299] should_failslab+0x9/0x20 [ 123.918255][ T5299] __kmem_cache_alloc_node+0x5b/0x330 [ 123.923626][ T5299] ? ref_tracker_alloc+0x158/0x560 [ 123.928773][ T5299] kmalloc_trace+0x26/0x60 [ 123.933249][ T5299] ref_tracker_alloc+0x158/0x560 [ 123.938219][ T5299] ? __lock_acquire+0xbc3/0x56d0 [ 123.943179][ T5299] ? ref_tracker_free+0x6b0/0x6b0 [ 123.948256][ T5299] dst_init+0xe4/0x520 [ 123.952351][ T5299] dst_alloc+0x16f/0x1f0 [ 123.956620][ T5299] rt_dst_alloc+0x55/0x430 [ 123.961066][ T5299] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 123.967090][ T5299] ip_route_output_key_hash+0x18f/0x340 [ 123.972668][ T5299] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 123.978967][ T5299] dccp_v4_connect+0x7e1/0x1730 [ 123.983868][ T5299] __inet_stream_connect+0x69e/0xed0 [ 123.989196][ T5299] ? inet_listen+0x640/0x640 [ 123.993821][ T5299] ? mark_held_locks+0x9f/0xe0 [ 123.998611][ T5299] ? __local_bh_enable_ip+0xa4/0x130 [ 124.003928][ T5299] inet_stream_connect+0x57/0xa0 [ 124.008903][ T5299] ? __inet_stream_connect+0xed0/0xed0 [ 124.014400][ T5299] __sys_connect_file+0x153/0x1a0 [ 124.019448][ T5299] io_connect+0x3cc/0x720 [ 124.023811][ T5299] ? io_connect_prep+0x250/0x250 [ 124.028783][ T5299] ? receive_fd+0x110/0x110 [ 124.033326][ T5299] ? rcu_read_lock_sched_held+0x3e/0x70 [ 124.038898][ T5299] ? io_connect_prep+0x250/0x250 [ 124.043871][ T5299] io_issue_sqe+0x695/0x1250 [ 124.048490][ T5299] io_submit_sqes+0x96c/0x1e90 [ 124.053319][ T5299] __do_sys_io_uring_enter+0x103d/0x24e0 [ 124.059010][ T5299] ? io_submit_sqes+0x1e90/0x1e90 [ 124.064084][ T5299] ? ptrace_notify+0xfe/0x140 [ 124.068789][ T5299] ? lock_downgrade+0x6e0/0x6e0 [ 124.073674][ T5299] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.078901][ T5299] ? lockdep_hardirqs_on+0x7d/0x100 [ 124.084119][ T5299] ? _raw_spin_unlock_irq+0x2e/0x50 [ 124.089360][ T5299] ? ptrace_notify+0xfe/0x140 [ 124.094080][ T5299] do_syscall_64+0x39/0xb0 [ 124.098553][ T5299] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.104477][ T5299] RIP: 0033:0x7f607b0de549 [ 124.108909][ T5299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 124.128543][ T5299] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 124.137155][ T5299] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 124.145146][ T5299] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 124.153138][ T5299] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5299] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5299] close(3) = 0 [pid 5299] close(4) = 0 [pid 5299] close(5) = 0 [pid 5299] close(6) = 0 [pid 5299] close(7) = 0 [pid 5299] close(8) = -1 EBADF (Bad file descriptor) [pid 5299] close(9) = -1 EBADF (Bad file descriptor) [pid 5299] close(10) = -1 EBADF (Bad file descriptor) [pid 5299] close(11) = -1 EBADF (Bad file descriptor) [pid 5299] close(12) = -1 EBADF (Bad file descriptor) [pid 5299] close(13) = -1 EBADF (Bad file descriptor) [pid 5299] close(14) = -1 EBADF (Bad file descriptor) [pid 5299] close(15) = -1 EBADF (Bad file descriptor) [pid 5299] close(16) = -1 EBADF (Bad file descriptor) [pid 5299] close(17) = -1 EBADF (Bad file descriptor) [pid 5299] close(18) = -1 EBADF (Bad file descriptor) [pid 5299] close(19) = -1 EBADF (Bad file descriptor) [pid 5299] close(20) = -1 EBADF (Bad file descriptor) [pid 5299] close(21) = -1 EBADF (Bad file descriptor) [pid 5299] close(22) = -1 EBADF (Bad file descriptor) [pid 5299] close(23) = -1 EBADF (Bad file descriptor) [pid 5299] close(24) = -1 EBADF (Bad file descriptor) [pid 5299] close(25) = -1 EBADF (Bad file descriptor) [pid 5299] close(26) = -1 EBADF (Bad file descriptor) [pid 5299] close(27) = -1 EBADF (Bad file descriptor) [pid 5299] close(28) = -1 EBADF (Bad file descriptor) [pid 5299] close(29) = -1 EBADF (Bad file descriptor) [pid 5299] exit_group(0) = ? [pid 5299] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=198, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 199 ./strace-static-x86_64: Process 5300 attached [pid 5300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5300] setpgid(0, 0) = 0 [pid 5300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5300] write(3, "1000", 4) = 4 [pid 5300] close(3) = 0 [pid 5300] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5300] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5300] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5300] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5300] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5300] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5300] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5300] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5300] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5300] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 124.161133][ T5299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 124.169161][ T5299] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 124.177256][ T5299] [pid 5300] write(7, "5", 1) = 1 [ 124.222827][ T5300] FAULT_INJECTION: forcing a failure. [ 124.222827][ T5300] name failslab, interval 1, probability 0, space 0, times 0 [ 124.235700][ T5300] CPU: 0 PID: 5300 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 124.245593][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 124.255661][ T5300] Call Trace: [ 124.258959][ T5300] [ 124.261902][ T5300] dump_stack_lvl+0xd1/0x138 [ 124.266502][ T5300] should_fail_ex.cold+0x5/0xa [ 124.271274][ T5300] ? __inet_hash_connect+0x95e/0x1ba0 [ 124.276651][ T5300] should_failslab+0x9/0x20 [ 124.281162][ T5300] kmem_cache_alloc+0x5a/0x320 [ 124.285952][ T5300] __inet_hash_connect+0x95e/0x1ba0 [ 124.291184][ T5300] ? __inet_lookup_listener+0xbf0/0xbf0 [ 124.296737][ T5300] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 124.303112][ T5300] dccp_v4_connect+0xb82/0x1730 [ 124.308269][ T5300] __inet_stream_connect+0x69e/0xed0 [ 124.313572][ T5300] ? inet_listen+0x640/0x640 [ 124.318259][ T5300] ? mark_held_locks+0x9f/0xe0 [ 124.323026][ T5300] ? __local_bh_enable_ip+0xa4/0x130 [ 124.328318][ T5300] inet_stream_connect+0x57/0xa0 [ 124.333276][ T5300] ? __inet_stream_connect+0xed0/0xed0 [ 124.338786][ T5300] __sys_connect_file+0x153/0x1a0 [ 124.343840][ T5300] io_connect+0x3cc/0x720 [ 124.348180][ T5300] ? io_connect_prep+0x250/0x250 [ 124.353122][ T5300] ? receive_fd+0x110/0x110 [ 124.357685][ T5300] ? rcu_read_lock_sched_held+0x3e/0x70 [ 124.363271][ T5300] ? io_connect_prep+0x250/0x250 [ 124.368244][ T5300] io_issue_sqe+0x695/0x1250 [ 124.372836][ T5300] io_submit_sqes+0x96c/0x1e90 [ 124.377640][ T5300] __do_sys_io_uring_enter+0x103d/0x24e0 [ 124.383327][ T5300] ? io_submit_sqes+0x1e90/0x1e90 [ 124.388386][ T5300] ? ptrace_notify+0xfe/0x140 [ 124.393068][ T5300] ? lock_downgrade+0x6e0/0x6e0 [ 124.397949][ T5300] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.403181][ T5300] ? lockdep_hardirqs_on+0x7d/0x100 [ 124.408386][ T5300] ? _raw_spin_unlock_irq+0x2e/0x50 [ 124.413603][ T5300] ? ptrace_notify+0xfe/0x140 [ 124.418309][ T5300] do_syscall_64+0x39/0xb0 [ 124.422733][ T5300] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.428628][ T5300] RIP: 0033:0x7f607b0de549 [ 124.433045][ T5300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 124.452854][ T5300] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 124.461275][ T5300] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5300] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5300] close(3) = 0 [pid 5300] close(4) = 0 [pid 5300] close(5) = 0 [pid 5300] close(6) = 0 [pid 5300] close(7) = 0 [pid 5300] close(8) = -1 EBADF (Bad file descriptor) [pid 5300] close(9) = -1 EBADF (Bad file descriptor) [pid 5300] close(10) = -1 EBADF (Bad file descriptor) [pid 5300] close(11) = -1 EBADF (Bad file descriptor) [pid 5300] close(12) = -1 EBADF (Bad file descriptor) [pid 5300] close(13) = -1 EBADF (Bad file descriptor) [pid 5300] close(14) = -1 EBADF (Bad file descriptor) [pid 5300] close(15) = -1 EBADF (Bad file descriptor) [pid 5300] close(16) = -1 EBADF (Bad file descriptor) [pid 5300] close(17) = -1 EBADF (Bad file descriptor) [pid 5300] close(18) = -1 EBADF (Bad file descriptor) [pid 5300] close(19) = -1 EBADF (Bad file descriptor) [pid 5300] close(20) = -1 EBADF (Bad file descriptor) [pid 5300] close(21) = -1 EBADF (Bad file descriptor) [pid 5300] close(22) = -1 EBADF (Bad file descriptor) [pid 5300] close(23) = -1 EBADF (Bad file descriptor) [pid 5300] close(24) = -1 EBADF (Bad file descriptor) [pid 5300] close(25) = -1 EBADF (Bad file descriptor) [pid 5300] close(26) = -1 EBADF (Bad file descriptor) [pid 5300] close(27) = -1 EBADF (Bad file descriptor) [pid 5300] close(28) = -1 EBADF (Bad file descriptor) [pid 5300] close(29) = -1 EBADF (Bad file descriptor) [pid 5300] exit_group(0) = ? [pid 5300] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=199, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 200 ./strace-static-x86_64: Process 5301 attached [pid 5301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5301] setpgid(0, 0) = 0 [pid 5301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5301] write(3, "1000", 4) = 4 [pid 5301] close(3) = 0 [pid 5301] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5301] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5301] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5301] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5301] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5301] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5301] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5301] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5301] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5301] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5301] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 124.469265][ T5300] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 124.477258][ T5300] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 124.485234][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 124.493206][ T5300] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 124.501219][ T5300] [pid 5301] write(7, "5", 1) = 1 [ 124.555753][ T5301] FAULT_INJECTION: forcing a failure. [ 124.555753][ T5301] name failslab, interval 1, probability 0, space 0, times 0 [ 124.568616][ T5301] CPU: 0 PID: 5301 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 124.578542][ T5301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 124.588609][ T5301] Call Trace: [ 124.591889][ T5301] [ 124.594823][ T5301] dump_stack_lvl+0xd1/0x138 [ 124.599423][ T5301] should_fail_ex.cold+0x5/0xa [ 124.604202][ T5301] ? io_issue_sqe+0x695/0x1250 [ 124.608999][ T5301] should_failslab+0x9/0x20 [ 124.613509][ T5301] __kmem_cache_alloc_node+0x5b/0x330 [ 124.618904][ T5301] ? ref_tracker_alloc+0x158/0x560 [ 124.624077][ T5301] kmalloc_trace+0x26/0x60 [ 124.628524][ T5301] ref_tracker_alloc+0x158/0x560 [ 124.633489][ T5301] ? __lock_acquire+0xbc3/0x56d0 [ 124.638446][ T5301] ? ref_tracker_free+0x6b0/0x6b0 [ 124.643522][ T5301] dst_init+0xe4/0x520 [ 124.647621][ T5301] dst_alloc+0x16f/0x1f0 [ 124.651887][ T5301] rt_dst_alloc+0x55/0x430 [ 124.656336][ T5301] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 124.662357][ T5301] ip_route_output_key_hash+0x18f/0x340 [ 124.667935][ T5301] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 124.674226][ T5301] dccp_v4_connect+0x7e1/0x1730 [ 124.679126][ T5301] __inet_stream_connect+0x69e/0xed0 [ 124.684449][ T5301] ? inet_listen+0x640/0x640 [ 124.689074][ T5301] ? mark_held_locks+0x9f/0xe0 [ 124.693874][ T5301] ? __local_bh_enable_ip+0xa4/0x130 [ 124.699188][ T5301] inet_stream_connect+0x57/0xa0 [ 124.704158][ T5301] ? __inet_stream_connect+0xed0/0xed0 [ 124.709671][ T5301] __sys_connect_file+0x153/0x1a0 [ 124.714821][ T5301] io_connect+0x3cc/0x720 [ 124.719184][ T5301] ? io_connect_prep+0x250/0x250 [ 124.724148][ T5301] ? receive_fd+0x110/0x110 [ 124.728690][ T5301] ? rcu_read_lock_sched_held+0x3e/0x70 [ 124.734255][ T5301] ? io_connect_prep+0x250/0x250 [ 124.739223][ T5301] io_issue_sqe+0x695/0x1250 [ 124.743840][ T5301] io_submit_sqes+0x96c/0x1e90 [ 124.748737][ T5301] __do_sys_io_uring_enter+0x103d/0x24e0 [ 124.754404][ T5301] ? io_submit_sqes+0x1e90/0x1e90 [ 124.759458][ T5301] ? ptrace_notify+0xfe/0x140 [ 124.764151][ T5301] ? lock_downgrade+0x6e0/0x6e0 [ 124.769026][ T5301] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.774247][ T5301] ? lockdep_hardirqs_on+0x7d/0x100 [ 124.779464][ T5301] ? _raw_spin_unlock_irq+0x2e/0x50 [ 124.784684][ T5301] ? ptrace_notify+0xfe/0x140 [ 124.789387][ T5301] do_syscall_64+0x39/0xb0 [ 124.793842][ T5301] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.799757][ T5301] RIP: 0033:0x7f607b0de549 [ 124.804184][ T5301] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 124.823810][ T5301] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 124.832242][ T5301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 124.840248][ T5301] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 124.848235][ T5301] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5301] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5301] close(3) = 0 [pid 5301] close(4) = 0 [pid 5301] close(5) = 0 [pid 5301] close(6) = 0 [pid 5301] close(7) = 0 [pid 5301] close(8) = -1 EBADF (Bad file descriptor) [pid 5301] close(9) = -1 EBADF (Bad file descriptor) [pid 5301] close(10) = -1 EBADF (Bad file descriptor) [pid 5301] close(11) = -1 EBADF (Bad file descriptor) [pid 5301] close(12) = -1 EBADF (Bad file descriptor) [pid 5301] close(13) = -1 EBADF (Bad file descriptor) [pid 5301] close(14) = -1 EBADF (Bad file descriptor) [pid 5301] close(15) = -1 EBADF (Bad file descriptor) [pid 5301] close(16) = -1 EBADF (Bad file descriptor) [pid 5301] close(17) = -1 EBADF (Bad file descriptor) [pid 5301] close(18) = -1 EBADF (Bad file descriptor) [pid 5301] close(19) = -1 EBADF (Bad file descriptor) [pid 5301] close(20) = -1 EBADF (Bad file descriptor) [pid 5301] close(21) = -1 EBADF (Bad file descriptor) [pid 5301] close(22) = -1 EBADF (Bad file descriptor) [pid 5301] close(23) = -1 EBADF (Bad file descriptor) [pid 5301] close(24) = -1 EBADF (Bad file descriptor) [pid 5301] close(25) = -1 EBADF (Bad file descriptor) [pid 5301] close(26) = -1 EBADF (Bad file descriptor) [pid 5301] close(27) = -1 EBADF (Bad file descriptor) [pid 5301] close(28) = -1 EBADF (Bad file descriptor) [pid 5301] close(29) = -1 EBADF (Bad file descriptor) [pid 5301] exit_group(0) = ? [pid 5301] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=200, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 201 ./strace-static-x86_64: Process 5302 attached [pid 5302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5302] setpgid(0, 0) = 0 [pid 5302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5302] write(3, "1000", 4) = 4 [pid 5302] close(3) = 0 [pid 5302] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5302] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5302] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5302] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5302] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5302] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5302] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5302] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5302] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5302] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 124.856219][ T5301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 124.864201][ T5301] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 124.872208][ T5301] [pid 5302] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5302] write(7, "5", 1) = 1 [ 124.923721][ T5302] FAULT_INJECTION: forcing a failure. [ 124.923721][ T5302] name failslab, interval 1, probability 0, space 0, times 0 [ 124.937790][ T5302] CPU: 0 PID: 5302 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 124.947756][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 124.957865][ T5302] Call Trace: [ 124.961149][ T5302] [ 124.964084][ T5302] dump_stack_lvl+0xd1/0x138 [ 124.968686][ T5302] should_fail_ex.cold+0x5/0xa [ 124.973473][ T5302] ? io_issue_sqe+0x695/0x1250 [ 124.978271][ T5302] should_failslab+0x9/0x20 [ 124.982779][ T5302] __kmem_cache_alloc_node+0x5b/0x330 [ 124.988171][ T5302] ? ref_tracker_alloc+0x158/0x560 [ 124.993346][ T5302] kmalloc_trace+0x26/0x60 [ 124.997794][ T5302] ref_tracker_alloc+0x158/0x560 [ 125.002780][ T5302] ? __lock_acquire+0xbc3/0x56d0 [ 125.007793][ T5302] ? ref_tracker_free+0x6b0/0x6b0 [ 125.012891][ T5302] dst_init+0xe4/0x520 [ 125.016992][ T5302] dst_alloc+0x16f/0x1f0 [ 125.021244][ T5302] rt_dst_alloc+0x55/0x430 [ 125.025663][ T5302] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 125.031658][ T5302] ip_route_output_key_hash+0x18f/0x340 [ 125.037210][ T5302] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 125.043581][ T5302] dccp_v4_connect+0x7e1/0x1730 [ 125.048479][ T5302] __inet_stream_connect+0x69e/0xed0 [ 125.053817][ T5302] ? inet_listen+0x640/0x640 [ 125.058461][ T5302] ? mark_held_locks+0x9f/0xe0 [ 125.063274][ T5302] ? __local_bh_enable_ip+0xa4/0x130 [ 125.068581][ T5302] inet_stream_connect+0x57/0xa0 [ 125.073559][ T5302] ? __inet_stream_connect+0xed0/0xed0 [ 125.079024][ T5302] __sys_connect_file+0x153/0x1a0 [ 125.084051][ T5302] io_connect+0x3cc/0x720 [ 125.088388][ T5302] ? io_connect_prep+0x250/0x250 [ 125.093344][ T5302] ? receive_fd+0x110/0x110 [ 125.097948][ T5302] ? rcu_read_lock_sched_held+0x3e/0x70 [ 125.103506][ T5302] ? io_connect_prep+0x250/0x250 [ 125.108497][ T5302] io_issue_sqe+0x695/0x1250 [ 125.113142][ T5302] io_submit_sqes+0x96c/0x1e90 [ 125.117952][ T5302] __do_sys_io_uring_enter+0x103d/0x24e0 [ 125.123597][ T5302] ? io_submit_sqes+0x1e90/0x1e90 [ 125.128646][ T5302] ? ptrace_notify+0xfe/0x140 [ 125.133349][ T5302] ? lock_downgrade+0x6e0/0x6e0 [ 125.138206][ T5302] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.143417][ T5302] ? lockdep_hardirqs_on+0x7d/0x100 [ 125.148630][ T5302] ? _raw_spin_unlock_irq+0x2e/0x50 [ 125.153860][ T5302] ? ptrace_notify+0xfe/0x140 [ 125.158558][ T5302] do_syscall_64+0x39/0xb0 [ 125.163013][ T5302] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.168908][ T5302] RIP: 0033:0x7f607b0de549 [ 125.173319][ T5302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 125.192930][ T5302] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 125.201345][ T5302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 125.209417][ T5302] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5302] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5302] close(3) = 0 [pid 5302] close(4) = 0 [pid 5302] close(5) = 0 [pid 5302] close(6) = 0 [pid 5302] close(7) = 0 [pid 5302] close(8) = -1 EBADF (Bad file descriptor) [pid 5302] close(9) = -1 EBADF (Bad file descriptor) [pid 5302] close(10) = -1 EBADF (Bad file descriptor) [pid 5302] close(11) = -1 EBADF (Bad file descriptor) [pid 5302] close(12) = -1 EBADF (Bad file descriptor) [pid 5302] close(13) = -1 EBADF (Bad file descriptor) [pid 5302] close(14) = -1 EBADF (Bad file descriptor) [pid 5302] close(15) = -1 EBADF (Bad file descriptor) [pid 5302] close(16) = -1 EBADF (Bad file descriptor) [pid 5302] close(17) = -1 EBADF (Bad file descriptor) [pid 5302] close(18) = -1 EBADF (Bad file descriptor) [pid 5302] close(19) = -1 EBADF (Bad file descriptor) [pid 5302] close(20) = -1 EBADF (Bad file descriptor) [pid 5302] close(21) = -1 EBADF (Bad file descriptor) [pid 5302] close(22) = -1 EBADF (Bad file descriptor) [pid 5302] close(23) = -1 EBADF (Bad file descriptor) [pid 5302] close(24) = -1 EBADF (Bad file descriptor) [pid 5302] close(25) = -1 EBADF (Bad file descriptor) [pid 5302] close(26) = -1 EBADF (Bad file descriptor) [pid 5302] close(27) = -1 EBADF (Bad file descriptor) [pid 5302] close(28) = -1 EBADF (Bad file descriptor) [pid 5302] close(29) = -1 EBADF (Bad file descriptor) [pid 5302] exit_group(0) = ? [pid 5302] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=201, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 202 ./strace-static-x86_64: Process 5303 attached [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5303] setpgid(0, 0) = 0 [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5303] write(3, "1000", 4) = 4 [pid 5303] close(3) = 0 [pid 5303] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5303] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5303] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5303] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5303] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5303] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5303] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5303] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5303] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5303] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5303] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5303] write(7, "5", 1) = 1 [ 125.217411][ T5302] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 125.225383][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 125.233357][ T5302] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 125.241347][ T5302] [ 125.279617][ T5303] FAULT_INJECTION: forcing a failure. [ 125.279617][ T5303] name failslab, interval 1, probability 0, space 0, times 0 [ 125.292314][ T5303] CPU: 0 PID: 5303 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 125.302226][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 125.312310][ T5303] Call Trace: [ 125.315603][ T5303] [ 125.318560][ T5303] dump_stack_lvl+0xd1/0x138 [ 125.323203][ T5303] should_fail_ex.cold+0x5/0xa [ 125.327992][ T5303] ? __inet_hash_connect+0x95e/0x1ba0 [ 125.333384][ T5303] should_failslab+0x9/0x20 [ 125.337938][ T5303] kmem_cache_alloc+0x5a/0x320 [ 125.342731][ T5303] __inet_hash_connect+0x95e/0x1ba0 [ 125.347957][ T5303] ? __inet_lookup_listener+0xbf0/0xbf0 [ 125.353550][ T5303] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 125.359920][ T5303] dccp_v4_connect+0xb82/0x1730 [ 125.364819][ T5303] __inet_stream_connect+0x69e/0xed0 [ 125.370155][ T5303] ? inet_listen+0x640/0x640 [ 125.374868][ T5303] ? mark_held_locks+0x9f/0xe0 [ 125.379741][ T5303] ? __local_bh_enable_ip+0xa4/0x130 [ 125.385055][ T5303] inet_stream_connect+0x57/0xa0 [ 125.390026][ T5303] ? __inet_stream_connect+0xed0/0xed0 [ 125.395545][ T5303] __sys_connect_file+0x153/0x1a0 [ 125.400597][ T5303] io_connect+0x3cc/0x720 [ 125.404959][ T5303] ? io_connect_prep+0x250/0x250 [ 125.409924][ T5303] ? receive_fd+0x110/0x110 [ 125.414474][ T5303] ? rcu_read_lock_sched_held+0x3e/0x70 [ 125.420040][ T5303] ? io_connect_prep+0x250/0x250 [ 125.425010][ T5303] io_issue_sqe+0x695/0x1250 [ 125.429632][ T5303] io_submit_sqes+0x96c/0x1e90 [ 125.434448][ T5303] __do_sys_io_uring_enter+0x103d/0x24e0 [ 125.440118][ T5303] ? io_submit_sqes+0x1e90/0x1e90 [ 125.445170][ T5303] ? ptrace_notify+0xfe/0x140 [ 125.449866][ T5303] ? lock_downgrade+0x6e0/0x6e0 [ 125.454748][ T5303] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.459975][ T5303] ? lockdep_hardirqs_on+0x7d/0x100 [ 125.465193][ T5303] ? _raw_spin_unlock_irq+0x2e/0x50 [ 125.470412][ T5303] ? ptrace_notify+0xfe/0x140 [ 125.475121][ T5303] do_syscall_64+0x39/0xb0 [ 125.479567][ T5303] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.485482][ T5303] RIP: 0033:0x7f607b0de549 [ 125.489920][ T5303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 125.509556][ T5303] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 125.517990][ T5303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5303] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5303] close(3) = 0 [pid 5303] close(4) = 0 [pid 5303] close(5) = 0 [pid 5303] close(6) = 0 [pid 5303] close(7) = 0 [pid 5303] close(8) = -1 EBADF (Bad file descriptor) [pid 5303] close(9) = -1 EBADF (Bad file descriptor) [pid 5303] close(10) = -1 EBADF (Bad file descriptor) [pid 5303] close(11) = -1 EBADF (Bad file descriptor) [pid 5303] close(12) = -1 EBADF (Bad file descriptor) [pid 5303] close(13) = -1 EBADF (Bad file descriptor) [pid 5303] close(14) = -1 EBADF (Bad file descriptor) [pid 5303] close(15) = -1 EBADF (Bad file descriptor) [pid 5303] close(16) = -1 EBADF (Bad file descriptor) [pid 5303] close(17) = -1 EBADF (Bad file descriptor) [pid 5303] close(18) = -1 EBADF (Bad file descriptor) [pid 5303] close(19) = -1 EBADF (Bad file descriptor) [pid 5303] close(20) = -1 EBADF (Bad file descriptor) [pid 5303] close(21) = -1 EBADF (Bad file descriptor) [pid 5303] close(22) = -1 EBADF (Bad file descriptor) [pid 5303] close(23) = -1 EBADF (Bad file descriptor) [pid 5303] close(24) = -1 EBADF (Bad file descriptor) [pid 5303] close(25) = -1 EBADF (Bad file descriptor) [pid 5303] close(26) = -1 EBADF (Bad file descriptor) [pid 5303] close(27) = -1 EBADF (Bad file descriptor) [pid 5303] close(28) = -1 EBADF (Bad file descriptor) [pid 5303] close(29) = -1 EBADF (Bad file descriptor) [pid 5303] exit_group(0) = ? [pid 5303] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=202, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5304 attached , child_tidptr=0x555555eff5d0) = 203 [pid 5304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5304] setpgid(0, 0) = 0 [pid 5304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5304] write(3, "1000", 4) = 4 [pid 5304] close(3) = 0 [pid 5304] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5304] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5304] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5304] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5304] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5304] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5304] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5304] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5304] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5304] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5304] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5304] write(7, "5", 1) = 1 [ 125.525976][ T5303] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 125.534050][ T5303] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 125.542150][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 125.550174][ T5303] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 125.558192][ T5303] [ 125.598562][ T5304] FAULT_INJECTION: forcing a failure. [ 125.598562][ T5304] name failslab, interval 1, probability 0, space 0, times 0 [ 125.611294][ T5304] CPU: 0 PID: 5304 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 125.621210][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 125.631379][ T5304] Call Trace: [ 125.634673][ T5304] [ 125.637629][ T5304] dump_stack_lvl+0xd1/0x138 [ 125.642238][ T5304] should_fail_ex.cold+0x5/0xa [ 125.647001][ T5304] ? io_issue_sqe+0x695/0x1250 [ 125.651783][ T5304] should_failslab+0x9/0x20 [ 125.656317][ T5304] __kmem_cache_alloc_node+0x5b/0x330 [ 125.661704][ T5304] ? ref_tracker_alloc+0x158/0x560 [ 125.666849][ T5304] kmalloc_trace+0x26/0x60 [ 125.671272][ T5304] ref_tracker_alloc+0x158/0x560 [ 125.676215][ T5304] ? __lock_acquire+0xbc3/0x56d0 [ 125.681349][ T5304] ? ref_tracker_free+0x6b0/0x6b0 [ 125.686393][ T5304] dst_init+0xe4/0x520 [ 125.690469][ T5304] dst_alloc+0x16f/0x1f0 [ 125.694733][ T5304] rt_dst_alloc+0x55/0x430 [ 125.699181][ T5304] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 125.705171][ T5304] ip_route_output_key_hash+0x18f/0x340 [ 125.710721][ T5304] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 125.716979][ T5304] dccp_v4_connect+0x7e1/0x1730 [ 125.721874][ T5304] __inet_stream_connect+0x69e/0xed0 [ 125.727206][ T5304] ? inet_listen+0x640/0x640 [ 125.731821][ T5304] ? mark_held_locks+0x9f/0xe0 [ 125.736610][ T5304] ? __local_bh_enable_ip+0xa4/0x130 [ 125.741915][ T5304] inet_stream_connect+0x57/0xa0 [ 125.746878][ T5304] ? __inet_stream_connect+0xed0/0xed0 [ 125.752345][ T5304] __sys_connect_file+0x153/0x1a0 [ 125.757386][ T5304] io_connect+0x3cc/0x720 [ 125.761764][ T5304] ? io_connect_prep+0x250/0x250 [ 125.766730][ T5304] ? receive_fd+0x110/0x110 [ 125.771245][ T5304] ? rcu_read_lock_sched_held+0x3e/0x70 [ 125.776794][ T5304] ? io_connect_prep+0x250/0x250 [ 125.781739][ T5304] io_issue_sqe+0x695/0x1250 [ 125.786335][ T5304] io_submit_sqes+0x96c/0x1e90 [ 125.791114][ T5304] __do_sys_io_uring_enter+0x103d/0x24e0 [ 125.796755][ T5304] ? io_submit_sqes+0x1e90/0x1e90 [ 125.801797][ T5304] ? ptrace_notify+0xfe/0x140 [ 125.806489][ T5304] ? lock_downgrade+0x6e0/0x6e0 [ 125.811370][ T5304] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.816624][ T5304] ? lockdep_hardirqs_on+0x7d/0x100 [ 125.821830][ T5304] ? _raw_spin_unlock_irq+0x2e/0x50 [ 125.827048][ T5304] ? ptrace_notify+0xfe/0x140 [ 125.831755][ T5304] do_syscall_64+0x39/0xb0 [ 125.836181][ T5304] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 125.842074][ T5304] RIP: 0033:0x7f607b0de549 [ 125.846485][ T5304] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 125.866095][ T5304] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 125.874511][ T5304] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 125.882495][ T5304] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 125.890484][ T5304] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5304] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5304] close(3) = 0 [pid 5304] close(4) = 0 [pid 5304] close(5) = 0 [pid 5304] close(6) = 0 [pid 5304] close(7) = 0 [pid 5304] close(8) = -1 EBADF (Bad file descriptor) [pid 5304] close(9) = -1 EBADF (Bad file descriptor) [pid 5304] close(10) = -1 EBADF (Bad file descriptor) [pid 5304] close(11) = -1 EBADF (Bad file descriptor) [pid 5304] close(12) = -1 EBADF (Bad file descriptor) [pid 5304] close(13) = -1 EBADF (Bad file descriptor) [pid 5304] close(14) = -1 EBADF (Bad file descriptor) [pid 5304] close(15) = -1 EBADF (Bad file descriptor) [pid 5304] close(16) = -1 EBADF (Bad file descriptor) [pid 5304] close(17) = -1 EBADF (Bad file descriptor) [pid 5304] close(18) = -1 EBADF (Bad file descriptor) [pid 5304] close(19) = -1 EBADF (Bad file descriptor) [pid 5304] close(20) = -1 EBADF (Bad file descriptor) [pid 5304] close(21) = -1 EBADF (Bad file descriptor) [pid 5304] close(22) = -1 EBADF (Bad file descriptor) [pid 5304] close(23) = -1 EBADF (Bad file descriptor) [pid 5304] close(24) = -1 EBADF (Bad file descriptor) [pid 5304] close(25) = -1 EBADF (Bad file descriptor) [pid 5304] close(26) = -1 EBADF (Bad file descriptor) [pid 5304] close(27) = -1 EBADF (Bad file descriptor) [pid 5304] close(28) = -1 EBADF (Bad file descriptor) [pid 5304] close(29) = -1 EBADF (Bad file descriptor) [pid 5304] exit_group(0) = ? [pid 5304] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=203, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 204 ./strace-static-x86_64: Process 5305 attached [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5305] setpgid(0, 0) = 0 [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5305] write(3, "1000", 4) = 4 [pid 5305] close(3) = 0 [pid 5305] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5305] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5305] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5305] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5305] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5305] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5305] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5305] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5305] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 125.898476][ T5304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 125.906460][ T5304] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 125.914466][ T5304] [pid 5305] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5305] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5305] write(7, "5", 1) = 1 [ 125.962562][ T5305] FAULT_INJECTION: forcing a failure. [ 125.962562][ T5305] name failslab, interval 1, probability 0, space 0, times 0 [ 125.976334][ T5305] CPU: 0 PID: 5305 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 125.986244][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 125.996306][ T5305] Call Trace: [ 125.999583][ T5305] [ 126.002516][ T5305] dump_stack_lvl+0xd1/0x138 [ 126.007147][ T5305] should_fail_ex.cold+0x5/0xa [ 126.011928][ T5305] ? io_issue_sqe+0x695/0x1250 [ 126.016723][ T5305] should_failslab+0x9/0x20 [ 126.021230][ T5305] __kmem_cache_alloc_node+0x5b/0x330 [ 126.026627][ T5305] ? ref_tracker_alloc+0x158/0x560 [ 126.031787][ T5305] kmalloc_trace+0x26/0x60 [ 126.036277][ T5305] ref_tracker_alloc+0x158/0x560 [ 126.041241][ T5305] ? __lock_acquire+0xbc3/0x56d0 [ 126.046204][ T5305] ? ref_tracker_free+0x6b0/0x6b0 [ 126.051288][ T5305] dst_init+0xe4/0x520 [ 126.055396][ T5305] dst_alloc+0x16f/0x1f0 [ 126.059674][ T5305] rt_dst_alloc+0x55/0x430 [ 126.064124][ T5305] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 126.070165][ T5305] ip_route_output_key_hash+0x18f/0x340 [ 126.075741][ T5305] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 126.082029][ T5305] dccp_v4_connect+0x7e1/0x1730 [ 126.086932][ T5305] __inet_stream_connect+0x69e/0xed0 [ 126.092261][ T5305] ? inet_listen+0x640/0x640 [ 126.096887][ T5305] ? mark_held_locks+0x9f/0xe0 [ 126.101675][ T5305] ? __local_bh_enable_ip+0xa4/0x130 [ 126.106988][ T5305] inet_stream_connect+0x57/0xa0 [ 126.111959][ T5305] ? __inet_stream_connect+0xed0/0xed0 [ 126.117461][ T5305] __sys_connect_file+0x153/0x1a0 [ 126.122510][ T5305] io_connect+0x3cc/0x720 [ 126.126873][ T5305] ? io_connect_prep+0x250/0x250 [ 126.131837][ T5305] ? receive_fd+0x110/0x110 [ 126.136389][ T5305] ? rcu_read_lock_sched_held+0x3e/0x70 [ 126.141955][ T5305] ? io_connect_prep+0x250/0x250 [ 126.146925][ T5305] io_issue_sqe+0x695/0x1250 [ 126.151544][ T5305] io_submit_sqes+0x96c/0x1e90 [ 126.156353][ T5305] __do_sys_io_uring_enter+0x103d/0x24e0 [ 126.162020][ T5305] ? io_submit_sqes+0x1e90/0x1e90 [ 126.167074][ T5305] ? ptrace_notify+0xfe/0x140 [ 126.171769][ T5305] ? lock_downgrade+0x6e0/0x6e0 [ 126.176648][ T5305] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.181873][ T5305] ? lockdep_hardirqs_on+0x7d/0x100 [ 126.187089][ T5305] ? _raw_spin_unlock_irq+0x2e/0x50 [ 126.192310][ T5305] ? ptrace_notify+0xfe/0x140 [ 126.197011][ T5305] do_syscall_64+0x39/0xb0 [ 126.201456][ T5305] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.207370][ T5305] RIP: 0033:0x7f607b0de549 [ 126.211798][ T5305] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 126.231511][ T5305] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 126.239945][ T5305] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 126.247932][ T5305] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 126.255916][ T5305] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5305] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5305] close(3) = 0 [pid 5305] close(4) = 0 [pid 5305] close(5) = 0 [pid 5305] close(6) = 0 [pid 5305] close(7) = 0 [pid 5305] close(8) = -1 EBADF (Bad file descriptor) [pid 5305] close(9) = -1 EBADF (Bad file descriptor) [pid 5305] close(10) = -1 EBADF (Bad file descriptor) [pid 5305] close(11) = -1 EBADF (Bad file descriptor) [pid 5305] close(12) = -1 EBADF (Bad file descriptor) [pid 5305] close(13) = -1 EBADF (Bad file descriptor) [pid 5305] close(14) = -1 EBADF (Bad file descriptor) [pid 5305] close(15) = -1 EBADF (Bad file descriptor) [pid 5305] close(16) = -1 EBADF (Bad file descriptor) [pid 5305] close(17) = -1 EBADF (Bad file descriptor) [pid 5305] close(18) = -1 EBADF (Bad file descriptor) [pid 5305] close(19) = -1 EBADF (Bad file descriptor) [pid 5305] close(20) = -1 EBADF (Bad file descriptor) [pid 5305] close(21) = -1 EBADF (Bad file descriptor) [pid 5305] close(22) = -1 EBADF (Bad file descriptor) [pid 5305] close(23) = -1 EBADF (Bad file descriptor) [pid 5305] close(24) = -1 EBADF (Bad file descriptor) [pid 5305] close(25) = -1 EBADF (Bad file descriptor) [pid 5305] close(26) = -1 EBADF (Bad file descriptor) [pid 5305] close(27) = -1 EBADF (Bad file descriptor) [pid 5305] close(28) = -1 EBADF (Bad file descriptor) [pid 5305] close(29) = -1 EBADF (Bad file descriptor) [pid 5305] exit_group(0) = ? [pid 5305] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=204, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5306 attached , child_tidptr=0x555555eff5d0) = 205 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5306] setpgid(0, 0) = 0 [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5306] write(3, "1000", 4) = 4 [pid 5306] close(3) = 0 [pid 5306] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5306] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [ 126.263901][ T5305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 126.271885][ T5305] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 126.279890][ T5305] [pid 5306] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5306] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5306] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5306] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5306] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5306] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5306] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5306] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5306] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5306] write(7, "5", 1) = 1 [ 126.336408][ T5306] FAULT_INJECTION: forcing a failure. [ 126.336408][ T5306] name failslab, interval 1, probability 0, space 0, times 0 [ 126.349137][ T5306] CPU: 0 PID: 5306 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 126.359080][ T5306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 126.369168][ T5306] Call Trace: [ 126.372460][ T5306] [ 126.375388][ T5306] dump_stack_lvl+0xd1/0x138 [ 126.380199][ T5306] should_fail_ex.cold+0x5/0xa [ 126.384998][ T5306] ? __inet_hash_connect+0x95e/0x1ba0 [ 126.390391][ T5306] should_failslab+0x9/0x20 [ 126.394931][ T5306] kmem_cache_alloc+0x5a/0x320 [ 126.399698][ T5306] __inet_hash_connect+0x95e/0x1ba0 [ 126.404921][ T5306] ? __inet_lookup_listener+0xbf0/0xbf0 [ 126.410521][ T5306] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 126.416899][ T5306] dccp_v4_connect+0xb82/0x1730 [ 126.421793][ T5306] __inet_stream_connect+0x69e/0xed0 [ 126.427121][ T5306] ? inet_listen+0x640/0x640 [ 126.431735][ T5306] ? mark_held_locks+0x9f/0xe0 [ 126.436525][ T5306] ? __local_bh_enable_ip+0xa4/0x130 [ 126.441944][ T5306] inet_stream_connect+0x57/0xa0 [ 126.446932][ T5306] ? __inet_stream_connect+0xed0/0xed0 [ 126.452579][ T5306] __sys_connect_file+0x153/0x1a0 [ 126.457631][ T5306] io_connect+0x3cc/0x720 [ 126.462015][ T5306] ? io_connect_prep+0x250/0x250 [ 126.466986][ T5306] ? receive_fd+0x110/0x110 [ 126.471501][ T5306] ? rcu_read_lock_sched_held+0x3e/0x70 [ 126.477045][ T5306] ? io_connect_prep+0x250/0x250 [ 126.482002][ T5306] io_issue_sqe+0x695/0x1250 [ 126.486625][ T5306] io_submit_sqes+0x96c/0x1e90 [ 126.491404][ T5306] __do_sys_io_uring_enter+0x103d/0x24e0 [ 126.497061][ T5306] ? io_submit_sqes+0x1e90/0x1e90 [ 126.502286][ T5306] ? ptrace_notify+0xfe/0x140 [ 126.506979][ T5306] ? lock_downgrade+0x6e0/0x6e0 [ 126.511856][ T5306] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.517087][ T5306] ? lockdep_hardirqs_on+0x7d/0x100 [ 126.522285][ T5306] ? _raw_spin_unlock_irq+0x2e/0x50 [ 126.527499][ T5306] ? ptrace_notify+0xfe/0x140 [ 126.532206][ T5306] do_syscall_64+0x39/0xb0 [ 126.536627][ T5306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.542521][ T5306] RIP: 0033:0x7f607b0de549 [ 126.546936][ T5306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 126.566559][ T5306] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 126.574994][ T5306] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5306] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5306] close(3) = 0 [pid 5306] close(4) = 0 [pid 5306] close(5) = 0 [pid 5306] close(6) = 0 [pid 5306] close(7) = 0 [pid 5306] close(8) = -1 EBADF (Bad file descriptor) [pid 5306] close(9) = -1 EBADF (Bad file descriptor) [pid 5306] close(10) = -1 EBADF (Bad file descriptor) [pid 5306] close(11) = -1 EBADF (Bad file descriptor) [pid 5306] close(12) = -1 EBADF (Bad file descriptor) [pid 5306] close(13) = -1 EBADF (Bad file descriptor) [pid 5306] close(14) = -1 EBADF (Bad file descriptor) [pid 5306] close(15) = -1 EBADF (Bad file descriptor) [pid 5306] close(16) = -1 EBADF (Bad file descriptor) [pid 5306] close(17) = -1 EBADF (Bad file descriptor) [pid 5306] close(18) = -1 EBADF (Bad file descriptor) [pid 5306] close(19) = -1 EBADF (Bad file descriptor) [pid 5306] close(20) = -1 EBADF (Bad file descriptor) [pid 5306] close(21) = -1 EBADF (Bad file descriptor) [pid 5306] close(22) = -1 EBADF (Bad file descriptor) [pid 5306] close(23) = -1 EBADF (Bad file descriptor) [pid 5306] close(24) = -1 EBADF (Bad file descriptor) [pid 5306] close(25) = -1 EBADF (Bad file descriptor) [pid 5306] close(26) = -1 EBADF (Bad file descriptor) [pid 5306] close(27) = -1 EBADF (Bad file descriptor) [pid 5306] close(28) = -1 EBADF (Bad file descriptor) [pid 5306] close(29) = -1 EBADF (Bad file descriptor) [pid 5306] exit_group(0) = ? [pid 5306] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=205, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 206 ./strace-static-x86_64: Process 5307 attached [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5307] setpgid(0, 0) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5307] write(3, "1000", 4) = 4 [pid 5307] close(3) = 0 [pid 5307] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5307] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5307] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5307] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5307] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5307] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5307] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5307] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5307] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5307] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5307] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5307] write(7, "5", 1) = 1 [ 126.582987][ T5306] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 126.590962][ T5306] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 126.598950][ T5306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 126.606981][ T5306] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 126.614977][ T5306] [ 126.656301][ T5307] FAULT_INJECTION: forcing a failure. [ 126.656301][ T5307] name failslab, interval 1, probability 0, space 0, times 0 [ 126.669513][ T5307] CPU: 1 PID: 5307 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 126.679527][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 126.689599][ T5307] Call Trace: [ 126.692884][ T5307] [ 126.695823][ T5307] dump_stack_lvl+0xd1/0x138 [ 126.700423][ T5307] should_fail_ex.cold+0x5/0xa [ 126.705190][ T5307] ? io_issue_sqe+0x695/0x1250 [ 126.709980][ T5307] should_failslab+0x9/0x20 [ 126.714538][ T5307] __kmem_cache_alloc_node+0x5b/0x330 [ 126.719930][ T5307] ? ref_tracker_alloc+0x158/0x560 [ 126.725061][ T5307] kmalloc_trace+0x26/0x60 [ 126.729484][ T5307] ref_tracker_alloc+0x158/0x560 [ 126.734439][ T5307] ? __lock_acquire+0xbc3/0x56d0 [ 126.739408][ T5307] ? ref_tracker_free+0x6b0/0x6b0 [ 126.744486][ T5307] dst_init+0xe4/0x520 [ 126.748582][ T5307] dst_alloc+0x16f/0x1f0 [ 126.752851][ T5307] rt_dst_alloc+0x55/0x430 [ 126.757298][ T5307] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 126.763317][ T5307] ip_route_output_key_hash+0x18f/0x340 [ 126.768888][ T5307] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 126.775188][ T5307] dccp_v4_connect+0x7e1/0x1730 [ 126.780087][ T5307] __inet_stream_connect+0x69e/0xed0 [ 126.785414][ T5307] ? inet_listen+0x640/0x640 [ 126.790036][ T5307] ? mark_held_locks+0x9f/0xe0 [ 126.794826][ T5307] ? __local_bh_enable_ip+0xa4/0x130 [ 126.800144][ T5307] inet_stream_connect+0x57/0xa0 [ 126.805132][ T5307] ? __inet_stream_connect+0xed0/0xed0 [ 126.810627][ T5307] __sys_connect_file+0x153/0x1a0 [ 126.815676][ T5307] io_connect+0x3cc/0x720 [ 126.820038][ T5307] ? io_connect_prep+0x250/0x250 [ 126.825004][ T5307] ? receive_fd+0x110/0x110 [ 126.829545][ T5307] ? rcu_read_lock_sched_held+0x3e/0x70 [ 126.835116][ T5307] ? io_connect_prep+0x250/0x250 [ 126.840091][ T5307] io_issue_sqe+0x695/0x1250 [ 126.844713][ T5307] io_submit_sqes+0x96c/0x1e90 [ 126.849526][ T5307] __do_sys_io_uring_enter+0x103d/0x24e0 [ 126.855199][ T5307] ? io_submit_sqes+0x1e90/0x1e90 [ 126.860255][ T5307] ? ptrace_notify+0xfe/0x140 [ 126.864953][ T5307] ? lock_downgrade+0x6e0/0x6e0 [ 126.869833][ T5307] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.875057][ T5307] ? lockdep_hardirqs_on+0x7d/0x100 [ 126.880278][ T5307] ? _raw_spin_unlock_irq+0x2e/0x50 [ 126.885502][ T5307] ? ptrace_notify+0xfe/0x140 [ 126.890204][ T5307] do_syscall_64+0x39/0xb0 [ 126.894652][ T5307] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.900569][ T5307] RIP: 0033:0x7f607b0de549 [ 126.905001][ T5307] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 126.924629][ T5307] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 126.933062][ T5307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 126.941055][ T5307] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 126.949047][ T5307] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5307] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5307] close(3) = 0 [pid 5307] close(4) = 0 [pid 5307] close(5) = 0 [pid 5307] close(6) = 0 [pid 5307] close(7) = 0 [pid 5307] close(8) = -1 EBADF (Bad file descriptor) [pid 5307] close(9) = -1 EBADF (Bad file descriptor) [pid 5307] close(10) = -1 EBADF (Bad file descriptor) [pid 5307] close(11) = -1 EBADF (Bad file descriptor) [pid 5307] close(12) = -1 EBADF (Bad file descriptor) [pid 5307] close(13) = -1 EBADF (Bad file descriptor) [pid 5307] close(14) = -1 EBADF (Bad file descriptor) [pid 5307] close(15) = -1 EBADF (Bad file descriptor) [pid 5307] close(16) = -1 EBADF (Bad file descriptor) [pid 5307] close(17) = -1 EBADF (Bad file descriptor) [pid 5307] close(18) = -1 EBADF (Bad file descriptor) [pid 5307] close(19) = -1 EBADF (Bad file descriptor) [pid 5307] close(20) = -1 EBADF (Bad file descriptor) [pid 5307] close(21) = -1 EBADF (Bad file descriptor) [pid 5307] close(22) = -1 EBADF (Bad file descriptor) [pid 5307] close(23) = -1 EBADF (Bad file descriptor) [pid 5307] close(24) = -1 EBADF (Bad file descriptor) [pid 5307] close(25) = -1 EBADF (Bad file descriptor) [pid 5307] close(26) = -1 EBADF (Bad file descriptor) [pid 5307] close(27) = -1 EBADF (Bad file descriptor) [pid 5307] close(28) = -1 EBADF (Bad file descriptor) [pid 5307] close(29) = -1 EBADF (Bad file descriptor) [pid 5307] exit_group(0) = ? [pid 5307] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=206, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5308 attached , child_tidptr=0x555555eff5d0) = 207 [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5308] setpgid(0, 0) = 0 [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5308] write(3, "1000", 4) = 4 [pid 5308] close(3) = 0 [pid 5308] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5308] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5308] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5308] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5308] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5308] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5308] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5308] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5308] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5308] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5308] write(7, "5", 1) = 1 [pid 5308] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5308] close(3) = 0 [pid 5308] close(4) = 0 [pid 5308] close(5) = 0 [pid 5308] close(6) = 0 [ 126.957035][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 126.965020][ T5307] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 126.973049][ T5307] [pid 5308] close(7) = 0 [pid 5308] close(8) = -1 EBADF (Bad file descriptor) [pid 5308] close(9) = -1 EBADF (Bad file descriptor) [pid 5308] close(10) = -1 EBADF (Bad file descriptor) [pid 5308] close(11) = -1 EBADF (Bad file descriptor) [pid 5308] close(12) = -1 EBADF (Bad file descriptor) [pid 5308] close(13) = -1 EBADF (Bad file descriptor) [pid 5308] close(14) = -1 EBADF (Bad file descriptor) [pid 5308] close(15) = -1 EBADF (Bad file descriptor) [pid 5308] close(16) = -1 EBADF (Bad file descriptor) [pid 5308] close(17) = -1 EBADF (Bad file descriptor) [pid 5308] close(18) = -1 EBADF (Bad file descriptor) [pid 5308] close(19) = -1 EBADF (Bad file descriptor) [pid 5308] close(20) = -1 EBADF (Bad file descriptor) [pid 5308] close(21) = -1 EBADF (Bad file descriptor) [pid 5308] close(22) = -1 EBADF (Bad file descriptor) [pid 5308] close(23) = -1 EBADF (Bad file descriptor) [pid 5308] close(24) = -1 EBADF (Bad file descriptor) [pid 5308] close(25) = -1 EBADF (Bad file descriptor) [pid 5308] close(26) = -1 EBADF (Bad file descriptor) [pid 5308] close(27) = -1 EBADF (Bad file descriptor) [pid 5308] close(28) = -1 EBADF (Bad file descriptor) [pid 5308] close(29) = -1 EBADF (Bad file descriptor) [pid 5308] exit_group(0) = ? [pid 5308] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=207, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 208 ./strace-static-x86_64: Process 5309 attached [pid 5309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5309] setpgid(0, 0) = 0 [pid 5309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5309] write(3, "1000", 4) = 4 [pid 5309] close(3) = 0 [pid 5309] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5309] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5309] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5309] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5309] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5309] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5309] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5309] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5309] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5309] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5309] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5309] write(7, "5", 1) = 1 [ 127.049204][ T5309] FAULT_INJECTION: forcing a failure. [ 127.049204][ T5309] name failslab, interval 1, probability 0, space 0, times 0 [ 127.061911][ T5309] CPU: 0 PID: 5309 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 127.071812][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 127.081890][ T5309] Call Trace: [ 127.085186][ T5309] [ 127.088146][ T5309] dump_stack_lvl+0xd1/0x138 [ 127.092780][ T5309] should_fail_ex.cold+0x5/0xa [ 127.097547][ T5309] ? __inet_hash_connect+0x95e/0x1ba0 [ 127.102940][ T5309] should_failslab+0x9/0x20 [ 127.107454][ T5309] kmem_cache_alloc+0x5a/0x320 [ 127.112280][ T5309] __inet_hash_connect+0x95e/0x1ba0 [ 127.117506][ T5309] ? __inet_lookup_listener+0xbf0/0xbf0 [ 127.123096][ T5309] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 127.129474][ T5309] dccp_v4_connect+0xb82/0x1730 [ 127.134375][ T5309] __inet_stream_connect+0x69e/0xed0 [ 127.139713][ T5309] ? inet_listen+0x640/0x640 [ 127.144341][ T5309] ? mark_held_locks+0x9f/0xe0 [ 127.149128][ T5309] ? __local_bh_enable_ip+0xa4/0x130 [ 127.154444][ T5309] inet_stream_connect+0x57/0xa0 [ 127.159498][ T5309] ? __inet_stream_connect+0xed0/0xed0 [ 127.164992][ T5309] __sys_connect_file+0x153/0x1a0 [ 127.170044][ T5309] io_connect+0x3cc/0x720 [ 127.174407][ T5309] ? io_connect_prep+0x250/0x250 [ 127.179382][ T5309] ? receive_fd+0x110/0x110 [ 127.183930][ T5309] ? rcu_read_lock_sched_held+0x3e/0x70 [ 127.189494][ T5309] ? io_connect_prep+0x250/0x250 [ 127.194463][ T5309] io_issue_sqe+0x695/0x1250 [ 127.199083][ T5309] io_submit_sqes+0x96c/0x1e90 [ 127.203894][ T5309] __do_sys_io_uring_enter+0x103d/0x24e0 [ 127.209563][ T5309] ? io_submit_sqes+0x1e90/0x1e90 [ 127.214622][ T5309] ? ptrace_notify+0xfe/0x140 [ 127.219346][ T5309] ? lock_downgrade+0x6e0/0x6e0 [ 127.224224][ T5309] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.229447][ T5309] ? lockdep_hardirqs_on+0x7d/0x100 [ 127.234664][ T5309] ? _raw_spin_unlock_irq+0x2e/0x50 [ 127.239982][ T5309] ? ptrace_notify+0xfe/0x140 [ 127.244692][ T5309] do_syscall_64+0x39/0xb0 [ 127.249170][ T5309] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.255086][ T5309] RIP: 0033:0x7f607b0de549 [ 127.259516][ T5309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 127.279148][ T5309] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 127.287582][ T5309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5309] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5309] close(3) = 0 [pid 5309] close(4) = 0 [pid 5309] close(5) = 0 [pid 5309] close(6) = 0 [pid 5309] close(7) = 0 [pid 5309] close(8) = -1 EBADF (Bad file descriptor) [pid 5309] close(9) = -1 EBADF (Bad file descriptor) [pid 5309] close(10) = -1 EBADF (Bad file descriptor) [pid 5309] close(11) = -1 EBADF (Bad file descriptor) [pid 5309] close(12) = -1 EBADF (Bad file descriptor) [pid 5309] close(13) = -1 EBADF (Bad file descriptor) [pid 5309] close(14) = -1 EBADF (Bad file descriptor) [pid 5309] close(15) = -1 EBADF (Bad file descriptor) [pid 5309] close(16) = -1 EBADF (Bad file descriptor) [pid 5309] close(17) = -1 EBADF (Bad file descriptor) [pid 5309] close(18) = -1 EBADF (Bad file descriptor) [pid 5309] close(19) = -1 EBADF (Bad file descriptor) [pid 5309] close(20) = -1 EBADF (Bad file descriptor) [pid 5309] close(21) = -1 EBADF (Bad file descriptor) [pid 5309] close(22) = -1 EBADF (Bad file descriptor) [pid 5309] close(23) = -1 EBADF (Bad file descriptor) [pid 5309] close(24) = -1 EBADF (Bad file descriptor) [pid 5309] close(25) = -1 EBADF (Bad file descriptor) [pid 5309] close(26) = -1 EBADF (Bad file descriptor) [pid 5309] close(27) = -1 EBADF (Bad file descriptor) [pid 5309] close(28) = -1 EBADF (Bad file descriptor) [pid 5309] close(29) = -1 EBADF (Bad file descriptor) [pid 5309] exit_group(0) = ? [pid 5309] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=208, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5310 attached , child_tidptr=0x555555eff5d0) = 209 [pid 5310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5310] setpgid(0, 0) = 0 [pid 5310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5310] write(3, "1000", 4) = 4 [pid 5310] close(3) = 0 [pid 5310] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5310] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5310] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5310] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5310] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5310] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5310] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5310] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5310] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5310] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5310] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5310] write(7, "5", 1) = 1 [ 127.295567][ T5309] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 127.303550][ T5309] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 127.311532][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 127.319518][ T5309] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 127.327524][ T5309] [ 127.373432][ T5310] FAULT_INJECTION: forcing a failure. [ 127.373432][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 127.386289][ T5310] CPU: 0 PID: 5310 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 127.396238][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 127.406331][ T5310] Call Trace: [ 127.409619][ T5310] [ 127.412549][ T5310] dump_stack_lvl+0xd1/0x138 [ 127.417150][ T5310] should_fail_ex.cold+0x5/0xa [ 127.421931][ T5310] ? io_issue_sqe+0x695/0x1250 [ 127.426810][ T5310] should_failslab+0x9/0x20 [ 127.431315][ T5310] __kmem_cache_alloc_node+0x5b/0x330 [ 127.436776][ T5310] ? ref_tracker_alloc+0x158/0x560 [ 127.441914][ T5310] kmalloc_trace+0x26/0x60 [ 127.446401][ T5310] ref_tracker_alloc+0x158/0x560 [ 127.451347][ T5310] ? __lock_acquire+0xbc3/0x56d0 [ 127.456297][ T5310] ? ref_tracker_free+0x6b0/0x6b0 [ 127.461348][ T5310] dst_init+0xe4/0x520 [ 127.465432][ T5310] dst_alloc+0x16f/0x1f0 [ 127.470573][ T5310] rt_dst_alloc+0x55/0x430 [ 127.475073][ T5310] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 127.481102][ T5310] ip_route_output_key_hash+0x18f/0x340 [ 127.486656][ T5310] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 127.492918][ T5310] dccp_v4_connect+0x7e1/0x1730 [ 127.497816][ T5310] __inet_stream_connect+0x69e/0xed0 [ 127.503172][ T5310] ? inet_listen+0x640/0x640 [ 127.507777][ T5310] ? mark_held_locks+0x9f/0xe0 [ 127.512584][ T5310] ? __local_bh_enable_ip+0xa4/0x130 [ 127.517898][ T5310] inet_stream_connect+0x57/0xa0 [ 127.522882][ T5310] ? __inet_stream_connect+0xed0/0xed0 [ 127.528351][ T5310] __sys_connect_file+0x153/0x1a0 [ 127.533377][ T5310] io_connect+0x3cc/0x720 [ 127.537750][ T5310] ? io_connect_prep+0x250/0x250 [ 127.542723][ T5310] ? receive_fd+0x110/0x110 [ 127.547275][ T5310] ? rcu_read_lock_sched_held+0x3e/0x70 [ 127.552829][ T5310] ? io_connect_prep+0x250/0x250 [ 127.557786][ T5310] io_issue_sqe+0x695/0x1250 [ 127.562411][ T5310] io_submit_sqes+0x96c/0x1e90 [ 127.567189][ T5310] __do_sys_io_uring_enter+0x103d/0x24e0 [ 127.572832][ T5310] ? io_submit_sqes+0x1e90/0x1e90 [ 127.577865][ T5310] ? ptrace_notify+0xfe/0x140 [ 127.582544][ T5310] ? lock_downgrade+0x6e0/0x6e0 [ 127.587419][ T5310] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.592650][ T5310] ? lockdep_hardirqs_on+0x7d/0x100 [ 127.597848][ T5310] ? _raw_spin_unlock_irq+0x2e/0x50 [ 127.603058][ T5310] ? ptrace_notify+0xfe/0x140 [ 127.607783][ T5310] do_syscall_64+0x39/0xb0 [ 127.612244][ T5310] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.618145][ T5310] RIP: 0033:0x7f607b0de549 [ 127.622562][ T5310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 127.642366][ T5310] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 127.650815][ T5310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 127.658802][ T5310] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 127.666790][ T5310] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5310] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5310] close(3) = 0 [pid 5310] close(4) = 0 [pid 5310] close(5) = 0 [pid 5310] close(6) = 0 [pid 5310] close(7) = 0 [pid 5310] close(8) = -1 EBADF (Bad file descriptor) [pid 5310] close(9) = -1 EBADF (Bad file descriptor) [pid 5310] close(10) = -1 EBADF (Bad file descriptor) [pid 5310] close(11) = -1 EBADF (Bad file descriptor) [pid 5310] close(12) = -1 EBADF (Bad file descriptor) [pid 5310] close(13) = -1 EBADF (Bad file descriptor) [pid 5310] close(14) = -1 EBADF (Bad file descriptor) [pid 5310] close(15) = -1 EBADF (Bad file descriptor) [pid 5310] close(16) = -1 EBADF (Bad file descriptor) [pid 5310] close(17) = -1 EBADF (Bad file descriptor) [pid 5310] close(18) = -1 EBADF (Bad file descriptor) [pid 5310] close(19) = -1 EBADF (Bad file descriptor) [pid 5310] close(20) = -1 EBADF (Bad file descriptor) [pid 5310] close(21) = -1 EBADF (Bad file descriptor) [pid 5310] close(22) = -1 EBADF (Bad file descriptor) [pid 5310] close(23) = -1 EBADF (Bad file descriptor) [pid 5310] close(24) = -1 EBADF (Bad file descriptor) [pid 5310] close(25) = -1 EBADF (Bad file descriptor) [pid 5310] close(26) = -1 EBADF (Bad file descriptor) [pid 5310] close(27) = -1 EBADF (Bad file descriptor) [pid 5310] close(28) = -1 EBADF (Bad file descriptor) [pid 5310] close(29) = -1 EBADF (Bad file descriptor) [pid 5310] exit_group(0) = ? [pid 5310] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=209, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 210 ./strace-static-x86_64: Process 5311 attached [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5311] setpgid(0, 0) = 0 [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5311] write(3, "1000", 4) = 4 [pid 5311] close(3) = 0 [pid 5311] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5311] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5311] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5311] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5311] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5311] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 127.674760][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 127.682751][ T5310] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 127.690782][ T5310] [pid 5311] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5311] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5311] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5311] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5311] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5311] write(7, "5", 1) = 1 [ 127.743280][ T5311] FAULT_INJECTION: forcing a failure. [ 127.743280][ T5311] name failslab, interval 1, probability 0, space 0, times 0 [ 127.757050][ T5311] CPU: 0 PID: 5311 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 127.766957][ T5311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 127.777026][ T5311] Call Trace: [ 127.780330][ T5311] [ 127.783261][ T5311] dump_stack_lvl+0xd1/0x138 [ 127.787979][ T5311] should_fail_ex.cold+0x5/0xa [ 127.792787][ T5311] ? io_issue_sqe+0x695/0x1250 [ 127.797590][ T5311] should_failslab+0x9/0x20 [ 127.802145][ T5311] __kmem_cache_alloc_node+0x5b/0x330 [ 127.807570][ T5311] ? ref_tracker_alloc+0x158/0x560 [ 127.812778][ T5311] kmalloc_trace+0x26/0x60 [ 127.817203][ T5311] ref_tracker_alloc+0x158/0x560 [ 127.822153][ T5311] ? __lock_acquire+0xbc3/0x56d0 [ 127.827090][ T5311] ? ref_tracker_free+0x6b0/0x6b0 [ 127.832136][ T5311] dst_init+0xe4/0x520 [ 127.836228][ T5311] dst_alloc+0x16f/0x1f0 [ 127.840480][ T5311] rt_dst_alloc+0x55/0x430 [ 127.844969][ T5311] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 127.851012][ T5311] ip_route_output_key_hash+0x18f/0x340 [ 127.856599][ T5311] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 127.862888][ T5311] dccp_v4_connect+0x7e1/0x1730 [ 127.867781][ T5311] __inet_stream_connect+0x69e/0xed0 [ 127.873111][ T5311] ? inet_listen+0x640/0x640 [ 127.877739][ T5311] ? mark_held_locks+0x9f/0xe0 [ 127.882531][ T5311] ? __local_bh_enable_ip+0xa4/0x130 [ 127.887835][ T5311] inet_stream_connect+0x57/0xa0 [ 127.892829][ T5311] ? __inet_stream_connect+0xed0/0xed0 [ 127.898309][ T5311] __sys_connect_file+0x153/0x1a0 [ 127.903351][ T5311] io_connect+0x3cc/0x720 [ 127.907689][ T5311] ? io_connect_prep+0x250/0x250 [ 127.912652][ T5311] ? receive_fd+0x110/0x110 [ 127.917172][ T5311] ? rcu_read_lock_sched_held+0x3e/0x70 [ 127.922720][ T5311] ? io_connect_prep+0x250/0x250 [ 127.927678][ T5311] io_issue_sqe+0x695/0x1250 [ 127.932305][ T5311] io_submit_sqes+0x96c/0x1e90 [ 127.937084][ T5311] __do_sys_io_uring_enter+0x103d/0x24e0 [ 127.942726][ T5311] ? io_submit_sqes+0x1e90/0x1e90 [ 127.947775][ T5311] ? ptrace_notify+0xfe/0x140 [ 127.952476][ T5311] ? lock_downgrade+0x6e0/0x6e0 [ 127.957336][ T5311] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.962545][ T5311] ? lockdep_hardirqs_on+0x7d/0x100 [ 127.967759][ T5311] ? _raw_spin_unlock_irq+0x2e/0x50 [ 127.972985][ T5311] ? ptrace_notify+0xfe/0x140 [ 127.977680][ T5311] do_syscall_64+0x39/0xb0 [ 127.982133][ T5311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.988027][ T5311] RIP: 0033:0x7f607b0de549 [ 127.992437][ T5311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 128.012048][ T5311] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 128.020466][ T5311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 128.028435][ T5311] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 128.036424][ T5311] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5311] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5311] close(3) = 0 [pid 5311] close(4) = 0 [pid 5311] close(5) = 0 [pid 5311] close(6) = 0 [pid 5311] close(7) = 0 [pid 5311] close(8) = -1 EBADF (Bad file descriptor) [pid 5311] close(9) = -1 EBADF (Bad file descriptor) [pid 5311] close(10) = -1 EBADF (Bad file descriptor) [pid 5311] close(11) = -1 EBADF (Bad file descriptor) [pid 5311] close(12) = -1 EBADF (Bad file descriptor) [pid 5311] close(13) = -1 EBADF (Bad file descriptor) [pid 5311] close(14) = -1 EBADF (Bad file descriptor) [pid 5311] close(15) = -1 EBADF (Bad file descriptor) [pid 5311] close(16) = -1 EBADF (Bad file descriptor) [pid 5311] close(17) = -1 EBADF (Bad file descriptor) [pid 5311] close(18) = -1 EBADF (Bad file descriptor) [pid 5311] close(19) = -1 EBADF (Bad file descriptor) [pid 5311] close(20) = -1 EBADF (Bad file descriptor) [pid 5311] close(21) = -1 EBADF (Bad file descriptor) [pid 5311] close(22) = -1 EBADF (Bad file descriptor) [pid 5311] close(23) = -1 EBADF (Bad file descriptor) [pid 5311] close(24) = -1 EBADF (Bad file descriptor) [pid 5311] close(25) = -1 EBADF (Bad file descriptor) [pid 5311] close(26) = -1 EBADF (Bad file descriptor) [pid 5311] close(27) = -1 EBADF (Bad file descriptor) [pid 5311] close(28) = -1 EBADF (Bad file descriptor) [pid 5311] close(29) = -1 EBADF (Bad file descriptor) [pid 5311] exit_group(0) = ? [pid 5311] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=210, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5312 attached , child_tidptr=0x555555eff5d0) = 211 [pid 5312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5312] setpgid(0, 0) = 0 [ 128.044416][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 128.052388][ T5311] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 128.060378][ T5311] [pid 5312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5312] write(3, "1000", 4) = 4 [pid 5312] close(3) = 0 [pid 5312] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5312] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5312] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5312] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5312] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5312] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5312] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5312] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5312] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5312] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5312] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5312] write(7, "5", 1) = 1 [ 128.119991][ T5312] FAULT_INJECTION: forcing a failure. [ 128.119991][ T5312] name failslab, interval 1, probability 0, space 0, times 0 [ 128.133191][ T5312] CPU: 0 PID: 5312 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 128.143126][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 128.153189][ T5312] Call Trace: [ 128.156479][ T5312] [ 128.159433][ T5312] dump_stack_lvl+0xd1/0x138 [ 128.164076][ T5312] should_fail_ex.cold+0x5/0xa [ 128.168860][ T5312] ? io_issue_sqe+0x695/0x1250 [ 128.173625][ T5312] should_failslab+0x9/0x20 [ 128.178137][ T5312] __kmem_cache_alloc_node+0x5b/0x330 [ 128.183508][ T5312] ? ref_tracker_alloc+0x158/0x560 [ 128.188702][ T5312] kmalloc_trace+0x26/0x60 [ 128.193165][ T5312] ref_tracker_alloc+0x158/0x560 [ 128.198132][ T5312] ? __lock_acquire+0xbc3/0x56d0 [ 128.203089][ T5312] ? ref_tracker_free+0x6b0/0x6b0 [ 128.208171][ T5312] dst_init+0xe4/0x520 [ 128.212264][ T5312] dst_alloc+0x16f/0x1f0 [ 128.216559][ T5312] rt_dst_alloc+0x55/0x430 [ 128.221092][ T5312] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 128.227112][ T5312] ip_route_output_key_hash+0x18f/0x340 [ 128.232686][ T5312] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 128.238970][ T5312] dccp_v4_connect+0x7e1/0x1730 [ 128.243957][ T5312] __inet_stream_connect+0x69e/0xed0 [ 128.249280][ T5312] ? inet_listen+0x640/0x640 [ 128.253901][ T5312] ? mark_held_locks+0x9f/0xe0 [ 128.258685][ T5312] ? __local_bh_enable_ip+0xa4/0x130 [ 128.263995][ T5312] inet_stream_connect+0x57/0xa0 [ 128.268965][ T5312] ? __inet_stream_connect+0xed0/0xed0 [ 128.274468][ T5312] __sys_connect_file+0x153/0x1a0 [ 128.279516][ T5312] io_connect+0x3cc/0x720 [ 128.283876][ T5312] ? io_connect_prep+0x250/0x250 [ 128.288841][ T5312] ? receive_fd+0x110/0x110 [ 128.293379][ T5312] ? rcu_read_lock_sched_held+0x3e/0x70 [ 128.298941][ T5312] ? io_connect_prep+0x250/0x250 [ 128.303910][ T5312] io_issue_sqe+0x695/0x1250 [ 128.308531][ T5312] io_submit_sqes+0x96c/0x1e90 [ 128.313427][ T5312] __do_sys_io_uring_enter+0x103d/0x24e0 [ 128.319111][ T5312] ? io_submit_sqes+0x1e90/0x1e90 [ 128.324253][ T5312] ? ptrace_notify+0xfe/0x140 [ 128.328949][ T5312] ? lock_downgrade+0x6e0/0x6e0 [ 128.333827][ T5312] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.339054][ T5312] ? lockdep_hardirqs_on+0x7d/0x100 [ 128.344274][ T5312] ? _raw_spin_unlock_irq+0x2e/0x50 [ 128.349494][ T5312] ? ptrace_notify+0xfe/0x140 [ 128.354201][ T5312] do_syscall_64+0x39/0xb0 [ 128.358645][ T5312] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.364560][ T5312] RIP: 0033:0x7f607b0de549 [ 128.368989][ T5312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 128.388638][ T5312] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 128.397072][ T5312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 128.405055][ T5312] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 128.413038][ T5312] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5312] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5312] close(3) = 0 [pid 5312] close(4) = 0 [pid 5312] close(5) = 0 [pid 5312] close(6) = 0 [pid 5312] close(7) = 0 [pid 5312] close(8) = -1 EBADF (Bad file descriptor) [pid 5312] close(9) = -1 EBADF (Bad file descriptor) [pid 5312] close(10) = -1 EBADF (Bad file descriptor) [pid 5312] close(11) = -1 EBADF (Bad file descriptor) [pid 5312] close(12) = -1 EBADF (Bad file descriptor) [pid 5312] close(13) = -1 EBADF (Bad file descriptor) [pid 5312] close(14) = -1 EBADF (Bad file descriptor) [pid 5312] close(15) = -1 EBADF (Bad file descriptor) [pid 5312] close(16) = -1 EBADF (Bad file descriptor) [pid 5312] close(17) = -1 EBADF (Bad file descriptor) [pid 5312] close(18) = -1 EBADF (Bad file descriptor) [pid 5312] close(19) = -1 EBADF (Bad file descriptor) [pid 5312] close(20) = -1 EBADF (Bad file descriptor) [pid 5312] close(21) = -1 EBADF (Bad file descriptor) [pid 5312] close(22) = -1 EBADF (Bad file descriptor) [pid 5312] close(23) = -1 EBADF (Bad file descriptor) [pid 5312] close(24) = -1 EBADF (Bad file descriptor) [pid 5312] close(25) = -1 EBADF (Bad file descriptor) [pid 5312] close(26) = -1 EBADF (Bad file descriptor) [pid 5312] close(27) = -1 EBADF (Bad file descriptor) [pid 5312] close(28) = -1 EBADF (Bad file descriptor) [pid 5312] close(29) = -1 EBADF (Bad file descriptor) [pid 5312] exit_group(0) = ? [pid 5312] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=211, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 212 ./strace-static-x86_64: Process 5313 attached [pid 5313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5313] setpgid(0, 0) = 0 [pid 5313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5313] write(3, "1000", 4) = 4 [pid 5313] close(3) = 0 [pid 5313] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5313] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5313] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5313] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5313] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5313] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5313] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5313] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5313] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5313] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5313] write(7, "5", 1) = 1 [ 128.421025][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 128.429010][ T5312] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 128.437028][ T5312] [ 128.473398][ T5313] FAULT_INJECTION: forcing a failure. [ 128.473398][ T5313] name failslab, interval 1, probability 0, space 0, times 0 [ 128.486197][ T5313] CPU: 0 PID: 5313 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 128.496107][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 128.506183][ T5313] Call Trace: [ 128.509472][ T5313] [ 128.512428][ T5313] dump_stack_lvl+0xd1/0x138 [ 128.517052][ T5313] should_fail_ex.cold+0x5/0xa [ 128.521810][ T5313] ? io_issue_sqe+0x695/0x1250 [ 128.526575][ T5313] should_failslab+0x9/0x20 [ 128.531080][ T5313] __kmem_cache_alloc_node+0x5b/0x330 [ 128.536476][ T5313] ? ref_tracker_alloc+0x158/0x560 [ 128.541613][ T5313] kmalloc_trace+0x26/0x60 [ 128.546065][ T5313] ref_tracker_alloc+0x158/0x560 [ 128.551021][ T5313] ? __lock_acquire+0xbc3/0x56d0 [ 128.555981][ T5313] ? ref_tracker_free+0x6b0/0x6b0 [ 128.561066][ T5313] dst_init+0xe4/0x520 [ 128.565165][ T5313] dst_alloc+0x16f/0x1f0 [ 128.569459][ T5313] rt_dst_alloc+0x55/0x430 [ 128.573924][ T5313] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 128.579952][ T5313] ip_route_output_key_hash+0x18f/0x340 [ 128.585506][ T5313] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 128.591790][ T5313] dccp_v4_connect+0x7e1/0x1730 [ 128.596696][ T5313] __inet_stream_connect+0x69e/0xed0 [ 128.602024][ T5313] ? inet_listen+0x640/0x640 [ 128.606649][ T5313] ? mark_held_locks+0x9f/0xe0 [ 128.611436][ T5313] ? __local_bh_enable_ip+0xa4/0x130 [ 128.616771][ T5313] inet_stream_connect+0x57/0xa0 [ 128.621757][ T5313] ? __inet_stream_connect+0xed0/0xed0 [ 128.627276][ T5313] __sys_connect_file+0x153/0x1a0 [ 128.632334][ T5313] io_connect+0x3cc/0x720 [ 128.636706][ T5313] ? io_connect_prep+0x250/0x250 [ 128.641697][ T5313] ? receive_fd+0x110/0x110 [ 128.646247][ T5313] ? rcu_read_lock_sched_held+0x3e/0x70 [ 128.651812][ T5313] ? io_connect_prep+0x250/0x250 [ 128.656781][ T5313] io_issue_sqe+0x695/0x1250 [ 128.661419][ T5313] io_submit_sqes+0x96c/0x1e90 [ 128.666259][ T5313] __do_sys_io_uring_enter+0x103d/0x24e0 [ 128.671945][ T5313] ? io_submit_sqes+0x1e90/0x1e90 [ 128.677020][ T5313] ? ptrace_notify+0xfe/0x140 [ 128.681747][ T5313] ? lock_downgrade+0x6e0/0x6e0 [ 128.686640][ T5313] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.691872][ T5313] ? lockdep_hardirqs_on+0x7d/0x100 [ 128.697120][ T5313] ? _raw_spin_unlock_irq+0x2e/0x50 [ 128.702340][ T5313] ? ptrace_notify+0xfe/0x140 [ 128.707056][ T5313] do_syscall_64+0x39/0xb0 [ 128.711500][ T5313] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.717415][ T5313] RIP: 0033:0x7f607b0de549 [ 128.721842][ T5313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 128.741468][ T5313] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 128.749898][ T5313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 128.757883][ T5313] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 128.765865][ T5313] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5313] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5313] close(3) = 0 [pid 5313] close(4) = 0 [pid 5313] close(5) = 0 [pid 5313] close(6) = 0 [pid 5313] close(7) = 0 [pid 5313] close(8) = -1 EBADF (Bad file descriptor) [pid 5313] close(9) = -1 EBADF (Bad file descriptor) [pid 5313] close(10) = -1 EBADF (Bad file descriptor) [pid 5313] close(11) = -1 EBADF (Bad file descriptor) [pid 5313] close(12) = -1 EBADF (Bad file descriptor) [pid 5313] close(13) = -1 EBADF (Bad file descriptor) [pid 5313] close(14) = -1 EBADF (Bad file descriptor) [pid 5313] close(15) = -1 EBADF (Bad file descriptor) [pid 5313] close(16) = -1 EBADF (Bad file descriptor) [pid 5313] close(17) = -1 EBADF (Bad file descriptor) [pid 5313] close(18) = -1 EBADF (Bad file descriptor) [pid 5313] close(19) = -1 EBADF (Bad file descriptor) [pid 5313] close(20) = -1 EBADF (Bad file descriptor) [pid 5313] close(21) = -1 EBADF (Bad file descriptor) [pid 5313] close(22) = -1 EBADF (Bad file descriptor) [pid 5313] close(23) = -1 EBADF (Bad file descriptor) [pid 5313] close(24) = -1 EBADF (Bad file descriptor) [pid 5313] close(25) = -1 EBADF (Bad file descriptor) [pid 5313] close(26) = -1 EBADF (Bad file descriptor) [pid 5313] close(27) = -1 EBADF (Bad file descriptor) [pid 5313] close(28) = -1 EBADF (Bad file descriptor) [pid 5313] close(29) = -1 EBADF (Bad file descriptor) [pid 5313] exit_group(0) = ? [pid 5313] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=212, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 213 ./strace-static-x86_64: Process 5314 attached [pid 5314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5314] setpgid(0, 0) = 0 [pid 5314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5314] write(3, "1000", 4) = 4 [pid 5314] close(3) = 0 [pid 5314] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5314] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5314] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5314] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5314] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5314] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5314] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5314] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5314] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5314] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5314] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5314] write(7, "5", 1) = 1 [ 128.773847][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 128.781828][ T5313] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 128.789832][ T5313] [ 128.831685][ T5314] FAULT_INJECTION: forcing a failure. [ 128.831685][ T5314] name failslab, interval 1, probability 0, space 0, times 0 [ 128.844380][ T5314] CPU: 0 PID: 5314 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 128.854270][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 128.864322][ T5314] Call Trace: [ 128.867600][ T5314] [ 128.870528][ T5314] dump_stack_lvl+0xd1/0x138 [ 128.875128][ T5314] should_fail_ex.cold+0x5/0xa [ 128.879907][ T5314] ? __inet_hash_connect+0x95e/0x1ba0 [ 128.885306][ T5314] should_failslab+0x9/0x20 [ 128.889920][ T5314] kmem_cache_alloc+0x5a/0x320 [ 128.894711][ T5314] __inet_hash_connect+0x95e/0x1ba0 [ 128.899923][ T5314] ? __inet_lookup_listener+0xbf0/0xbf0 [ 128.905513][ T5314] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 128.911882][ T5314] dccp_v4_connect+0xb82/0x1730 [ 128.916773][ T5314] __inet_stream_connect+0x69e/0xed0 [ 128.922106][ T5314] ? inet_listen+0x640/0x640 [ 128.926716][ T5314] ? mark_held_locks+0x9f/0xe0 [ 128.931505][ T5314] ? __local_bh_enable_ip+0xa4/0x130 [ 128.936796][ T5314] inet_stream_connect+0x57/0xa0 [ 128.941750][ T5314] ? __inet_stream_connect+0xed0/0xed0 [ 128.947220][ T5314] __sys_connect_file+0x153/0x1a0 [ 128.952258][ T5314] io_connect+0x3cc/0x720 [ 128.956624][ T5314] ? io_connect_prep+0x250/0x250 [ 128.961590][ T5314] ? receive_fd+0x110/0x110 [ 128.966129][ T5314] ? rcu_read_lock_sched_held+0x3e/0x70 [ 128.971694][ T5314] ? io_connect_prep+0x250/0x250 [ 128.976667][ T5314] io_issue_sqe+0x695/0x1250 [ 128.981286][ T5314] io_submit_sqes+0x96c/0x1e90 [ 128.986093][ T5314] __do_sys_io_uring_enter+0x103d/0x24e0 [ 128.991760][ T5314] ? io_submit_sqes+0x1e90/0x1e90 [ 128.996810][ T5314] ? ptrace_notify+0xfe/0x140 [ 129.001504][ T5314] ? lock_downgrade+0x6e0/0x6e0 [ 129.006383][ T5314] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.011608][ T5314] ? lockdep_hardirqs_on+0x7d/0x100 [ 129.016824][ T5314] ? _raw_spin_unlock_irq+0x2e/0x50 [ 129.022057][ T5314] ? ptrace_notify+0xfe/0x140 [ 129.026755][ T5314] do_syscall_64+0x39/0xb0 [ 129.031195][ T5314] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.037109][ T5314] RIP: 0033:0x7f607b0de549 [ 129.041538][ T5314] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 129.061166][ T5314] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 129.069596][ T5314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5314] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5314] close(3) = 0 [pid 5314] close(4) = 0 [pid 5314] close(5) = 0 [pid 5314] close(6) = 0 [pid 5314] close(7) = 0 [pid 5314] close(8) = -1 EBADF (Bad file descriptor) [pid 5314] close(9) = -1 EBADF (Bad file descriptor) [pid 5314] close(10) = -1 EBADF (Bad file descriptor) [pid 5314] close(11) = -1 EBADF (Bad file descriptor) [pid 5314] close(12) = -1 EBADF (Bad file descriptor) [pid 5314] close(13) = -1 EBADF (Bad file descriptor) [pid 5314] close(14) = -1 EBADF (Bad file descriptor) [pid 5314] close(15) = -1 EBADF (Bad file descriptor) [pid 5314] close(16) = -1 EBADF (Bad file descriptor) [pid 5314] close(17) = -1 EBADF (Bad file descriptor) [pid 5314] close(18) = -1 EBADF (Bad file descriptor) [pid 5314] close(19) = -1 EBADF (Bad file descriptor) [pid 5314] close(20) = -1 EBADF (Bad file descriptor) [pid 5314] close(21) = -1 EBADF (Bad file descriptor) [pid 5314] close(22) = -1 EBADF (Bad file descriptor) [pid 5314] close(23) = -1 EBADF (Bad file descriptor) [pid 5314] close(24) = -1 EBADF (Bad file descriptor) [pid 5314] close(25) = -1 EBADF (Bad file descriptor) [pid 5314] close(26) = -1 EBADF (Bad file descriptor) [pid 5314] close(27) = -1 EBADF (Bad file descriptor) [pid 5314] close(28) = -1 EBADF (Bad file descriptor) [pid 5314] close(29) = -1 EBADF (Bad file descriptor) [pid 5314] exit_group(0) = ? [pid 5314] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=213, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5315 attached , child_tidptr=0x555555eff5d0) = 214 [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5315] setpgid(0, 0) = 0 [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5315] write(3, "1000", 4) = 4 [pid 5315] close(3) = 0 [pid 5315] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5315] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5315] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5315] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5315] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5315] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5315] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5315] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5315] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5315] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5315] write(7, "5", 1) = 1 [ 129.077580][ T5314] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 129.085563][ T5314] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 129.093547][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 129.101535][ T5314] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 129.109540][ T5314] [ 129.160798][ T5315] FAULT_INJECTION: forcing a failure. [ 129.160798][ T5315] name failslab, interval 1, probability 0, space 0, times 0 [ 129.174376][ T5315] CPU: 0 PID: 5315 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 129.184460][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 129.194619][ T5315] Call Trace: [ 129.197918][ T5315] [ 129.200848][ T5315] dump_stack_lvl+0xd1/0x138 [ 129.205447][ T5315] should_fail_ex.cold+0x5/0xa [ 129.210227][ T5315] ? io_issue_sqe+0x695/0x1250 [ 129.215021][ T5315] should_failslab+0x9/0x20 [ 129.219529][ T5315] __kmem_cache_alloc_node+0x5b/0x330 [ 129.224899][ T5315] ? ref_tracker_alloc+0x158/0x560 [ 129.230017][ T5315] kmalloc_trace+0x26/0x60 [ 129.234470][ T5315] ref_tracker_alloc+0x158/0x560 [ 129.239443][ T5315] ? __lock_acquire+0xbc3/0x56d0 [ 129.244391][ T5315] ? ref_tracker_free+0x6b0/0x6b0 [ 129.249461][ T5315] dst_init+0xe4/0x520 [ 129.253532][ T5315] dst_alloc+0x16f/0x1f0 [ 129.257792][ T5315] rt_dst_alloc+0x55/0x430 [ 129.262212][ T5315] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 129.268204][ T5315] ip_route_output_key_hash+0x18f/0x340 [ 129.273752][ T5315] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 129.280041][ T5315] dccp_v4_connect+0x7e1/0x1730 [ 129.284963][ T5315] __inet_stream_connect+0x69e/0xed0 [ 129.290291][ T5315] ? inet_listen+0x640/0x640 [ 129.294929][ T5315] ? mark_held_locks+0x9f/0xe0 [ 129.299708][ T5315] ? __local_bh_enable_ip+0xa4/0x130 [ 129.305029][ T5315] inet_stream_connect+0x57/0xa0 [ 129.309977][ T5315] ? __inet_stream_connect+0xed0/0xed0 [ 129.315473][ T5315] __sys_connect_file+0x153/0x1a0 [ 129.320514][ T5315] io_connect+0x3cc/0x720 [ 129.324874][ T5315] ? io_connect_prep+0x250/0x250 [ 129.329811][ T5315] ? receive_fd+0x110/0x110 [ 129.334325][ T5315] ? rcu_read_lock_sched_held+0x3e/0x70 [ 129.339869][ T5315] ? io_connect_prep+0x250/0x250 [ 129.344819][ T5315] io_issue_sqe+0x695/0x1250 [ 129.349505][ T5315] io_submit_sqes+0x96c/0x1e90 [ 129.354285][ T5315] __do_sys_io_uring_enter+0x103d/0x24e0 [ 129.359929][ T5315] ? io_submit_sqes+0x1e90/0x1e90 [ 129.364967][ T5315] ? ptrace_notify+0xfe/0x140 [ 129.369643][ T5315] ? lock_downgrade+0x6e0/0x6e0 [ 129.374517][ T5315] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.379744][ T5315] ? lockdep_hardirqs_on+0x7d/0x100 [ 129.384949][ T5315] ? _raw_spin_unlock_irq+0x2e/0x50 [ 129.390168][ T5315] ? ptrace_notify+0xfe/0x140 [ 129.394871][ T5315] do_syscall_64+0x39/0xb0 [ 129.399293][ T5315] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.405188][ T5315] RIP: 0033:0x7f607b0de549 [ 129.409600][ T5315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 129.429215][ T5315] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 129.437652][ T5315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 129.445661][ T5315] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 129.453649][ T5315] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5315] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5315] close(3) = 0 [pid 5315] close(4) = 0 [pid 5315] close(5) = 0 [pid 5315] close(6) = 0 [pid 5315] close(7) = 0 [pid 5315] close(8) = -1 EBADF (Bad file descriptor) [pid 5315] close(9) = -1 EBADF (Bad file descriptor) [pid 5315] close(10) = -1 EBADF (Bad file descriptor) [pid 5315] close(11) = -1 EBADF (Bad file descriptor) [pid 5315] close(12) = -1 EBADF (Bad file descriptor) [pid 5315] close(13) = -1 EBADF (Bad file descriptor) [pid 5315] close(14) = -1 EBADF (Bad file descriptor) [pid 5315] close(15) = -1 EBADF (Bad file descriptor) [pid 5315] close(16) = -1 EBADF (Bad file descriptor) [pid 5315] close(17) = -1 EBADF (Bad file descriptor) [pid 5315] close(18) = -1 EBADF (Bad file descriptor) [pid 5315] close(19) = -1 EBADF (Bad file descriptor) [pid 5315] close(20) = -1 EBADF (Bad file descriptor) [pid 5315] close(21) = -1 EBADF (Bad file descriptor) [pid 5315] close(22) = -1 EBADF (Bad file descriptor) [pid 5315] close(23) = -1 EBADF (Bad file descriptor) [pid 5315] close(24) = -1 EBADF (Bad file descriptor) [pid 5315] close(25) = -1 EBADF (Bad file descriptor) [pid 5315] close(26) = -1 EBADF (Bad file descriptor) [pid 5315] close(27) = -1 EBADF (Bad file descriptor) [pid 5315] close(28) = -1 EBADF (Bad file descriptor) [pid 5315] close(29) = -1 EBADF (Bad file descriptor) [pid 5315] exit_group(0) = ? [pid 5315] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=214, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5316 attached , child_tidptr=0x555555eff5d0) = 215 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5316] setpgid(0, 0) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5316] write(3, "1000", 4) = 4 [pid 5316] close(3) = 0 [pid 5316] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5316] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5316] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [ 129.461640][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 129.469608][ T5315] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 129.477622][ T5315] [pid 5316] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5316] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5316] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5316] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5316] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5316] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5316] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5316] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5316] write(7, "5", 1) = 1 [ 129.515348][ T5316] FAULT_INJECTION: forcing a failure. [ 129.515348][ T5316] name failslab, interval 1, probability 0, space 0, times 0 [ 129.528053][ T5316] CPU: 0 PID: 5316 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 129.537952][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 129.548014][ T5316] Call Trace: [ 129.551290][ T5316] [ 129.554222][ T5316] dump_stack_lvl+0xd1/0x138 [ 129.558832][ T5316] should_fail_ex.cold+0x5/0xa [ 129.563621][ T5316] ? __inet_hash_connect+0x95e/0x1ba0 [ 129.569011][ T5316] should_failslab+0x9/0x20 [ 129.573575][ T5316] kmem_cache_alloc+0x5a/0x320 [ 129.578384][ T5316] __inet_hash_connect+0x95e/0x1ba0 [ 129.583612][ T5316] ? __inet_lookup_listener+0xbf0/0xbf0 [ 129.589200][ T5316] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 129.595570][ T5316] dccp_v4_connect+0xb82/0x1730 [ 129.600440][ T5316] __inet_stream_connect+0x69e/0xed0 [ 129.605737][ T5316] ? inet_listen+0x640/0x640 [ 129.610342][ T5316] ? mark_held_locks+0x9f/0xe0 [ 129.615124][ T5316] ? __local_bh_enable_ip+0xa4/0x130 [ 129.620442][ T5316] inet_stream_connect+0x57/0xa0 [ 129.625416][ T5316] ? __inet_stream_connect+0xed0/0xed0 [ 129.630895][ T5316] __sys_connect_file+0x153/0x1a0 [ 129.636040][ T5316] io_connect+0x3cc/0x720 [ 129.640398][ T5316] ? io_connect_prep+0x250/0x250 [ 129.645351][ T5316] ? receive_fd+0x110/0x110 [ 129.649884][ T5316] ? rcu_read_lock_sched_held+0x3e/0x70 [ 129.655435][ T5316] ? io_connect_prep+0x250/0x250 [ 129.660384][ T5316] io_issue_sqe+0x695/0x1250 [ 129.664999][ T5316] io_submit_sqes+0x96c/0x1e90 [ 129.669804][ T5316] __do_sys_io_uring_enter+0x103d/0x24e0 [ 129.675531][ T5316] ? io_submit_sqes+0x1e90/0x1e90 [ 129.680582][ T5316] ? ptrace_notify+0xfe/0x140 [ 129.685286][ T5316] ? lock_downgrade+0x6e0/0x6e0 [ 129.690144][ T5316] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.695346][ T5316] ? lockdep_hardirqs_on+0x7d/0x100 [ 129.700565][ T5316] ? _raw_spin_unlock_irq+0x2e/0x50 [ 129.705793][ T5316] ? ptrace_notify+0xfe/0x140 [ 129.710490][ T5316] do_syscall_64+0x39/0xb0 [ 129.714960][ T5316] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.720867][ T5316] RIP: 0033:0x7f607b0de549 [ 129.725276][ T5316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 129.744897][ T5316] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 129.753346][ T5316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5316] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5316] close(3) = 0 [pid 5316] close(4) = 0 [pid 5316] close(5) = 0 [pid 5316] close(6) = 0 [pid 5316] close(7) = 0 [pid 5316] close(8) = -1 EBADF (Bad file descriptor) [pid 5316] close(9) = -1 EBADF (Bad file descriptor) [pid 5316] close(10) = -1 EBADF (Bad file descriptor) [pid 5316] close(11) = -1 EBADF (Bad file descriptor) [pid 5316] close(12) = -1 EBADF (Bad file descriptor) [pid 5316] close(13) = -1 EBADF (Bad file descriptor) [pid 5316] close(14) = -1 EBADF (Bad file descriptor) [pid 5316] close(15) = -1 EBADF (Bad file descriptor) [pid 5316] close(16) = -1 EBADF (Bad file descriptor) [pid 5316] close(17) = -1 EBADF (Bad file descriptor) [pid 5316] close(18) = -1 EBADF (Bad file descriptor) [pid 5316] close(19) = -1 EBADF (Bad file descriptor) [pid 5316] close(20) = -1 EBADF (Bad file descriptor) [pid 5316] close(21) = -1 EBADF (Bad file descriptor) [pid 5316] close(22) = -1 EBADF (Bad file descriptor) [pid 5316] close(23) = -1 EBADF (Bad file descriptor) [pid 5316] close(24) = -1 EBADF (Bad file descriptor) [pid 5316] close(25) = -1 EBADF (Bad file descriptor) [pid 5316] close(26) = -1 EBADF (Bad file descriptor) [pid 5316] close(27) = -1 EBADF (Bad file descriptor) [pid 5316] close(28) = -1 EBADF (Bad file descriptor) [pid 5316] close(29) = -1 EBADF (Bad file descriptor) [pid 5316] exit_group(0) = ? [pid 5316] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=215, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 216 ./strace-static-x86_64: Process 5317 attached [pid 5317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5317] setpgid(0, 0) = 0 [pid 5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5317] write(3, "1000", 4) = 4 [pid 5317] close(3) = 0 [pid 5317] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5317] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5317] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5317] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5317] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5317] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5317] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5317] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5317] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5317] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5317] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5317] write(7, "5", 1) = 1 [ 129.761345][ T5316] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 129.769325][ T5316] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 129.777311][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 129.785309][ T5316] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 129.793340][ T5316] [ 129.835211][ T5317] FAULT_INJECTION: forcing a failure. [ 129.835211][ T5317] name failslab, interval 1, probability 0, space 0, times 0 [ 129.848973][ T5317] CPU: 0 PID: 5317 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 129.858911][ T5317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 129.868971][ T5317] Call Trace: [ 129.872258][ T5317] [ 129.875190][ T5317] dump_stack_lvl+0xd1/0x138 [ 129.879810][ T5317] should_fail_ex.cold+0x5/0xa [ 129.884599][ T5317] ? io_issue_sqe+0x695/0x1250 [ 129.889374][ T5317] should_failslab+0x9/0x20 [ 129.893884][ T5317] __kmem_cache_alloc_node+0x5b/0x330 [ 129.899259][ T5317] ? ref_tracker_alloc+0x158/0x560 [ 129.904392][ T5317] kmalloc_trace+0x26/0x60 [ 129.908842][ T5317] ref_tracker_alloc+0x158/0x560 [ 129.913803][ T5317] ? __lock_acquire+0xbc3/0x56d0 [ 129.918761][ T5317] ? ref_tracker_free+0x6b0/0x6b0 [ 129.923837][ T5317] dst_init+0xe4/0x520 [ 129.927933][ T5317] dst_alloc+0x16f/0x1f0 [ 129.932201][ T5317] rt_dst_alloc+0x55/0x430 [ 129.936643][ T5317] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 129.942661][ T5317] ip_route_output_key_hash+0x18f/0x340 [ 129.948232][ T5317] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 129.954520][ T5317] dccp_v4_connect+0x7e1/0x1730 [ 129.959420][ T5317] __inet_stream_connect+0x69e/0xed0 [ 129.964744][ T5317] ? inet_listen+0x640/0x640 [ 129.969366][ T5317] ? mark_held_locks+0x9f/0xe0 [ 129.974151][ T5317] ? __local_bh_enable_ip+0xa4/0x130 [ 129.979464][ T5317] inet_stream_connect+0x57/0xa0 [ 129.984434][ T5317] ? __inet_stream_connect+0xed0/0xed0 [ 129.989923][ T5317] __sys_connect_file+0x153/0x1a0 [ 129.994969][ T5317] io_connect+0x3cc/0x720 [ 129.999332][ T5317] ? io_connect_prep+0x250/0x250 [ 130.004306][ T5317] ? receive_fd+0x110/0x110 [ 130.008854][ T5317] ? rcu_read_lock_sched_held+0x3e/0x70 [ 130.014422][ T5317] ? io_connect_prep+0x250/0x250 [ 130.019391][ T5317] io_issue_sqe+0x695/0x1250 [ 130.024097][ T5317] io_submit_sqes+0x96c/0x1e90 [ 130.028908][ T5317] __do_sys_io_uring_enter+0x103d/0x24e0 [ 130.034576][ T5317] ? io_submit_sqes+0x1e90/0x1e90 [ 130.039635][ T5317] ? ptrace_notify+0xfe/0x140 [ 130.044335][ T5317] ? lock_downgrade+0x6e0/0x6e0 [ 130.049216][ T5317] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.054445][ T5317] ? lockdep_hardirqs_on+0x7d/0x100 [ 130.059661][ T5317] ? _raw_spin_unlock_irq+0x2e/0x50 [ 130.064966][ T5317] ? ptrace_notify+0xfe/0x140 [ 130.069681][ T5317] do_syscall_64+0x39/0xb0 [ 130.074137][ T5317] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.080057][ T5317] RIP: 0033:0x7f607b0de549 [ 130.084489][ T5317] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 130.104203][ T5317] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 130.112642][ T5317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 130.120626][ T5317] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 130.128610][ T5317] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5317] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5317] close(3) = 0 [pid 5317] close(4) = 0 [pid 5317] close(5) = 0 [pid 5317] close(6) = 0 [pid 5317] close(7) = 0 [pid 5317] close(8) = -1 EBADF (Bad file descriptor) [pid 5317] close(9) = -1 EBADF (Bad file descriptor) [pid 5317] close(10) = -1 EBADF (Bad file descriptor) [pid 5317] close(11) = -1 EBADF (Bad file descriptor) [pid 5317] close(12) = -1 EBADF (Bad file descriptor) [pid 5317] close(13) = -1 EBADF (Bad file descriptor) [pid 5317] close(14) = -1 EBADF (Bad file descriptor) [pid 5317] close(15) = -1 EBADF (Bad file descriptor) [pid 5317] close(16) = -1 EBADF (Bad file descriptor) [pid 5317] close(17) = -1 EBADF (Bad file descriptor) [pid 5317] close(18) = -1 EBADF (Bad file descriptor) [pid 5317] close(19) = -1 EBADF (Bad file descriptor) [pid 5317] close(20) = -1 EBADF (Bad file descriptor) [pid 5317] close(21) = -1 EBADF (Bad file descriptor) [pid 5317] close(22) = -1 EBADF (Bad file descriptor) [pid 5317] close(23) = -1 EBADF (Bad file descriptor) [pid 5317] close(24) = -1 EBADF (Bad file descriptor) [pid 5317] close(25) = -1 EBADF (Bad file descriptor) [pid 5317] close(26) = -1 EBADF (Bad file descriptor) [pid 5317] close(27) = -1 EBADF (Bad file descriptor) [pid 5317] close(28) = -1 EBADF (Bad file descriptor) [pid 5317] close(29) = -1 EBADF (Bad file descriptor) [pid 5317] exit_group(0) = ? [pid 5317] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=216, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5318 attached , child_tidptr=0x555555eff5d0) = 217 [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5318] setpgid(0, 0) = 0 [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5318] write(3, "1000", 4) = 4 [pid 5318] close(3) = 0 [pid 5318] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5318] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5318] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5318] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5318] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5318] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5318] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5318] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5318] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5318] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5318] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 130.136598][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 130.144581][ T5317] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 130.152588][ T5317] [pid 5318] write(7, "5", 1) = 1 [ 130.196144][ T5318] FAULT_INJECTION: forcing a failure. [ 130.196144][ T5318] name failslab, interval 1, probability 0, space 0, times 0 [ 130.209398][ T5318] CPU: 1 PID: 5318 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 130.219423][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 130.229488][ T5318] Call Trace: [ 130.232763][ T5318] [ 130.235693][ T5318] dump_stack_lvl+0xd1/0x138 [ 130.240300][ T5318] should_fail_ex.cold+0x5/0xa [ 130.245094][ T5318] ? io_issue_sqe+0x695/0x1250 [ 130.249885][ T5318] should_failslab+0x9/0x20 [ 130.254441][ T5318] __kmem_cache_alloc_node+0x5b/0x330 [ 130.259843][ T5318] ? ref_tracker_alloc+0x158/0x560 [ 130.264977][ T5318] kmalloc_trace+0x26/0x60 [ 130.269416][ T5318] ref_tracker_alloc+0x158/0x560 [ 130.274391][ T5318] ? __lock_acquire+0xbc3/0x56d0 [ 130.279333][ T5318] ? ref_tracker_free+0x6b0/0x6b0 [ 130.284380][ T5318] ? io_schedule_timeout+0x150/0x150 [ 130.289701][ T5318] dst_init+0xe4/0x520 [ 130.293797][ T5318] dst_alloc+0x16f/0x1f0 [ 130.298089][ T5318] rt_dst_alloc+0x55/0x430 [ 130.302542][ T5318] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 130.308540][ T5318] ip_route_output_key_hash+0x18f/0x340 [ 130.314094][ T5318] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 130.320370][ T5318] dccp_v4_connect+0x7e1/0x1730 [ 130.325263][ T5318] __inet_stream_connect+0x69e/0xed0 [ 130.330593][ T5318] ? inet_listen+0x640/0x640 [ 130.335224][ T5318] ? mark_held_locks+0x9f/0xe0 [ 130.340001][ T5318] ? __local_bh_enable_ip+0xa4/0x130 [ 130.345306][ T5318] inet_stream_connect+0x57/0xa0 [ 130.350262][ T5318] ? __inet_stream_connect+0xed0/0xed0 [ 130.355753][ T5318] __sys_connect_file+0x153/0x1a0 [ 130.360814][ T5318] io_connect+0x3cc/0x720 [ 130.365213][ T5318] ? io_connect_prep+0x250/0x250 [ 130.370203][ T5318] ? receive_fd+0x110/0x110 [ 130.374728][ T5318] ? rcu_read_lock_sched_held+0x3e/0x70 [ 130.380282][ T5318] ? io_connect_prep+0x250/0x250 [ 130.385345][ T5318] io_issue_sqe+0x695/0x1250 [ 130.390076][ T5318] io_submit_sqes+0x96c/0x1e90 [ 130.394894][ T5318] __do_sys_io_uring_enter+0x103d/0x24e0 [ 130.400566][ T5318] ? io_submit_sqes+0x1e90/0x1e90 [ 130.405650][ T5318] ? ptrace_notify+0xfe/0x140 [ 130.410356][ T5318] ? lock_downgrade+0x6e0/0x6e0 [ 130.415239][ T5318] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.420462][ T5318] ? lockdep_hardirqs_on+0x7d/0x100 [ 130.425691][ T5318] ? _raw_spin_unlock_irq+0x2e/0x50 [ 130.430894][ T5318] ? ptrace_notify+0xfe/0x140 [ 130.435577][ T5318] do_syscall_64+0x39/0xb0 [ 130.440003][ T5318] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.445907][ T5318] RIP: 0033:0x7f607b0de549 [ 130.450364][ T5318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 130.470029][ T5318] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 130.478462][ T5318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 130.486450][ T5318] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5318] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5318] close(3) = 0 [pid 5318] close(4) = 0 [pid 5318] close(5) = 0 [pid 5318] close(6) = 0 [pid 5318] close(7) = 0 [pid 5318] close(8) = -1 EBADF (Bad file descriptor) [pid 5318] close(9) = -1 EBADF (Bad file descriptor) [pid 5318] close(10) = -1 EBADF (Bad file descriptor) [pid 5318] close(11) = -1 EBADF (Bad file descriptor) [pid 5318] close(12) = -1 EBADF (Bad file descriptor) [pid 5318] close(13) = -1 EBADF (Bad file descriptor) [pid 5318] close(14) = -1 EBADF (Bad file descriptor) [pid 5318] close(15) = -1 EBADF (Bad file descriptor) [pid 5318] close(16) = -1 EBADF (Bad file descriptor) [pid 5318] close(17) = -1 EBADF (Bad file descriptor) [pid 5318] close(18) = -1 EBADF (Bad file descriptor) [pid 5318] close(19) = -1 EBADF (Bad file descriptor) [pid 5318] close(20) = -1 EBADF (Bad file descriptor) [pid 5318] close(21) = -1 EBADF (Bad file descriptor) [pid 5318] close(22) = -1 EBADF (Bad file descriptor) [pid 5318] close(23) = -1 EBADF (Bad file descriptor) [pid 5318] close(24) = -1 EBADF (Bad file descriptor) [pid 5318] close(25) = -1 EBADF (Bad file descriptor) [pid 5318] close(26) = -1 EBADF (Bad file descriptor) [pid 5318] close(27) = -1 EBADF (Bad file descriptor) [pid 5318] close(28) = -1 EBADF (Bad file descriptor) [pid 5318] close(29) = -1 EBADF (Bad file descriptor) [pid 5318] exit_group(0) = ? [pid 5318] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=217, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5319 attached , child_tidptr=0x555555eff5d0) = 218 [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5319] setpgid(0, 0) = 0 [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5319] write(3, "1000", 4) = 4 [pid 5319] close(3) = 0 [pid 5319] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5319] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5319] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5319] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5319] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5319] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5319] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 130.494449][ T5318] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 130.502447][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 130.510428][ T5318] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 130.518420][ T5318] [pid 5319] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5319] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5319] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5319] write(7, "5", 1) = 1 [ 130.552859][ T5319] FAULT_INJECTION: forcing a failure. [ 130.552859][ T5319] name failslab, interval 1, probability 0, space 0, times 0 [ 130.565562][ T5319] CPU: 0 PID: 5319 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 130.575455][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 130.585510][ T5319] Call Trace: [ 130.588790][ T5319] [ 130.591721][ T5319] dump_stack_lvl+0xd1/0x138 [ 130.596461][ T5319] should_fail_ex.cold+0x5/0xa [ 130.601275][ T5319] ? __inet_hash_connect+0x95e/0x1ba0 [ 130.606662][ T5319] should_failslab+0x9/0x20 [ 130.611284][ T5319] kmem_cache_alloc+0x5a/0x320 [ 130.616060][ T5319] __inet_hash_connect+0x95e/0x1ba0 [ 130.621285][ T5319] ? __inet_lookup_listener+0xbf0/0xbf0 [ 130.626843][ T5319] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 130.633191][ T5319] dccp_v4_connect+0xb82/0x1730 [ 130.638085][ T5319] __inet_stream_connect+0x69e/0xed0 [ 130.643398][ T5319] ? inet_listen+0x640/0x640 [ 130.648082][ T5319] ? mark_held_locks+0x9f/0xe0 [ 130.652848][ T5319] ? __local_bh_enable_ip+0xa4/0x130 [ 130.658137][ T5319] inet_stream_connect+0x57/0xa0 [ 130.663100][ T5319] ? __inet_stream_connect+0xed0/0xed0 [ 130.668578][ T5319] __sys_connect_file+0x153/0x1a0 [ 130.673632][ T5319] io_connect+0x3cc/0x720 [ 130.678010][ T5319] ? io_connect_prep+0x250/0x250 [ 130.682953][ T5319] ? receive_fd+0x110/0x110 [ 130.687465][ T5319] ? rcu_read_lock_sched_held+0x3e/0x70 [ 130.693011][ T5319] ? io_connect_prep+0x250/0x250 [ 130.697958][ T5319] io_issue_sqe+0x695/0x1250 [ 130.702561][ T5319] io_submit_sqes+0x96c/0x1e90 [ 130.707345][ T5319] __do_sys_io_uring_enter+0x103d/0x24e0 [ 130.713007][ T5319] ? io_submit_sqes+0x1e90/0x1e90 [ 130.718040][ T5319] ? ptrace_notify+0xfe/0x140 [ 130.722721][ T5319] ? lock_downgrade+0x6e0/0x6e0 [ 130.727599][ T5319] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.732833][ T5319] ? lockdep_hardirqs_on+0x7d/0x100 [ 130.738062][ T5319] ? _raw_spin_unlock_irq+0x2e/0x50 [ 130.743282][ T5319] ? ptrace_notify+0xfe/0x140 [ 130.747988][ T5319] do_syscall_64+0x39/0xb0 [ 130.752413][ T5319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.758313][ T5319] RIP: 0033:0x7f607b0de549 [ 130.762726][ T5319] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 130.782349][ T5319] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 130.790804][ T5319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5319] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5319] close(3) = 0 [pid 5319] close(4) = 0 [pid 5319] close(5) = 0 [pid 5319] close(6) = 0 [pid 5319] close(7) = 0 [pid 5319] close(8) = -1 EBADF (Bad file descriptor) [pid 5319] close(9) = -1 EBADF (Bad file descriptor) [pid 5319] close(10) = -1 EBADF (Bad file descriptor) [pid 5319] close(11) = -1 EBADF (Bad file descriptor) [pid 5319] close(12) = -1 EBADF (Bad file descriptor) [pid 5319] close(13) = -1 EBADF (Bad file descriptor) [pid 5319] close(14) = -1 EBADF (Bad file descriptor) [pid 5319] close(15) = -1 EBADF (Bad file descriptor) [pid 5319] close(16) = -1 EBADF (Bad file descriptor) [pid 5319] close(17) = -1 EBADF (Bad file descriptor) [pid 5319] close(18) = -1 EBADF (Bad file descriptor) [pid 5319] close(19) = -1 EBADF (Bad file descriptor) [pid 5319] close(20) = -1 EBADF (Bad file descriptor) [pid 5319] close(21) = -1 EBADF (Bad file descriptor) [pid 5319] close(22) = -1 EBADF (Bad file descriptor) [pid 5319] close(23) = -1 EBADF (Bad file descriptor) [pid 5319] close(24) = -1 EBADF (Bad file descriptor) [pid 5319] close(25) = -1 EBADF (Bad file descriptor) [pid 5319] close(26) = -1 EBADF (Bad file descriptor) [pid 5319] close(27) = -1 EBADF (Bad file descriptor) [pid 5319] close(28) = -1 EBADF (Bad file descriptor) [pid 5319] close(29) = -1 EBADF (Bad file descriptor) [pid 5319] exit_group(0) = ? [pid 5319] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=218, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 219 ./strace-static-x86_64: Process 5320 attached [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5320] setpgid(0, 0) = 0 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5320] write(3, "1000", 4) = 4 [pid 5320] close(3) = 0 [pid 5320] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5320] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5320] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5320] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5320] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5320] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5320] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5320] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5320] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5320] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5320] write(7, "5", 1) = 1 [ 130.798828][ T5319] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 130.806809][ T5319] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 130.814798][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 130.822791][ T5319] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 130.830800][ T5319] [ 130.872664][ T5320] FAULT_INJECTION: forcing a failure. [ 130.872664][ T5320] name failslab, interval 1, probability 0, space 0, times 0 [ 130.885747][ T5320] CPU: 0 PID: 5320 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 130.895680][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 130.905771][ T5320] Call Trace: [ 130.909069][ T5320] [ 130.911995][ T5320] dump_stack_lvl+0xd1/0x138 [ 130.916596][ T5320] should_fail_ex.cold+0x5/0xa [ 130.921358][ T5320] ? io_issue_sqe+0x695/0x1250 [ 130.926138][ T5320] should_failslab+0x9/0x20 [ 130.930690][ T5320] __kmem_cache_alloc_node+0x5b/0x330 [ 130.936091][ T5320] ? ref_tracker_alloc+0x158/0x560 [ 130.941238][ T5320] kmalloc_trace+0x26/0x60 [ 130.945697][ T5320] ref_tracker_alloc+0x158/0x560 [ 130.950661][ T5320] ? __lock_acquire+0xbc3/0x56d0 [ 130.955621][ T5320] ? ref_tracker_free+0x6b0/0x6b0 [ 130.960697][ T5320] dst_init+0xe4/0x520 [ 130.964794][ T5320] dst_alloc+0x16f/0x1f0 [ 130.969062][ T5320] rt_dst_alloc+0x55/0x430 [ 130.973505][ T5320] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 130.979528][ T5320] ip_route_output_key_hash+0x18f/0x340 [ 130.985103][ T5320] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 130.991393][ T5320] dccp_v4_connect+0x7e1/0x1730 [ 130.996292][ T5320] __inet_stream_connect+0x69e/0xed0 [ 131.001634][ T5320] ? inet_listen+0x640/0x640 [ 131.006259][ T5320] ? mark_held_locks+0x9f/0xe0 [ 131.011044][ T5320] ? __local_bh_enable_ip+0xa4/0x130 [ 131.016356][ T5320] inet_stream_connect+0x57/0xa0 [ 131.021328][ T5320] ? __inet_stream_connect+0xed0/0xed0 [ 131.026821][ T5320] __sys_connect_file+0x153/0x1a0 [ 131.031870][ T5320] io_connect+0x3cc/0x720 [ 131.036236][ T5320] ? io_connect_prep+0x250/0x250 [ 131.041208][ T5320] ? receive_fd+0x110/0x110 [ 131.045750][ T5320] ? rcu_read_lock_sched_held+0x3e/0x70 [ 131.051319][ T5320] ? io_connect_prep+0x250/0x250 [ 131.056288][ T5320] io_issue_sqe+0x695/0x1250 [ 131.060912][ T5320] io_submit_sqes+0x96c/0x1e90 [ 131.065723][ T5320] __do_sys_io_uring_enter+0x103d/0x24e0 [ 131.071397][ T5320] ? io_submit_sqes+0x1e90/0x1e90 [ 131.076449][ T5320] ? ptrace_notify+0xfe/0x140 [ 131.081144][ T5320] ? lock_downgrade+0x6e0/0x6e0 [ 131.086020][ T5320] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.091244][ T5320] ? lockdep_hardirqs_on+0x7d/0x100 [ 131.096460][ T5320] ? _raw_spin_unlock_irq+0x2e/0x50 [ 131.101680][ T5320] ? ptrace_notify+0xfe/0x140 [ 131.106383][ T5320] do_syscall_64+0x39/0xb0 [ 131.110829][ T5320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.116744][ T5320] RIP: 0033:0x7f607b0de549 [ 131.121177][ T5320] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 131.140804][ T5320] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 131.149236][ T5320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 131.157223][ T5320] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 131.165208][ T5320] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5320] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5320] close(3) = 0 [pid 5320] close(4) = 0 [pid 5320] close(5) = 0 [pid 5320] close(6) = 0 [pid 5320] close(7) = 0 [pid 5320] close(8) = -1 EBADF (Bad file descriptor) [pid 5320] close(9) = -1 EBADF (Bad file descriptor) [pid 5320] close(10) = -1 EBADF (Bad file descriptor) [pid 5320] close(11) = -1 EBADF (Bad file descriptor) [pid 5320] close(12) = -1 EBADF (Bad file descriptor) [pid 5320] close(13) = -1 EBADF (Bad file descriptor) [pid 5320] close(14) = -1 EBADF (Bad file descriptor) [pid 5320] close(15) = -1 EBADF (Bad file descriptor) [pid 5320] close(16) = -1 EBADF (Bad file descriptor) [pid 5320] close(17) = -1 EBADF (Bad file descriptor) [pid 5320] close(18) = -1 EBADF (Bad file descriptor) [pid 5320] close(19) = -1 EBADF (Bad file descriptor) [pid 5320] close(20) = -1 EBADF (Bad file descriptor) [pid 5320] close(21) = -1 EBADF (Bad file descriptor) [pid 5320] close(22) = -1 EBADF (Bad file descriptor) [pid 5320] close(23) = -1 EBADF (Bad file descriptor) [pid 5320] close(24) = -1 EBADF (Bad file descriptor) [pid 5320] close(25) = -1 EBADF (Bad file descriptor) [pid 5320] close(26) = -1 EBADF (Bad file descriptor) [pid 5320] close(27) = -1 EBADF (Bad file descriptor) [pid 5320] close(28) = -1 EBADF (Bad file descriptor) [pid 5320] close(29) = -1 EBADF (Bad file descriptor) [pid 5320] exit_group(0) = ? [pid 5320] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=219, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5321 attached , child_tidptr=0x555555eff5d0) = 220 [pid 5321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5321] setpgid(0, 0) = 0 [pid 5321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5321] write(3, "1000", 4) = 4 [pid 5321] close(3) = 0 [pid 5321] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5321] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5321] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5321] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5321] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5321] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5321] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 131.173195][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 131.181179][ T5320] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 131.189190][ T5320] [pid 5321] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5321] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5321] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5321] write(7, "5", 1) = 1 [ 131.237760][ T5321] FAULT_INJECTION: forcing a failure. [ 131.237760][ T5321] name failslab, interval 1, probability 0, space 0, times 0 [ 131.251043][ T5321] CPU: 0 PID: 5321 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 131.260990][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 131.271076][ T5321] Call Trace: [ 131.274367][ T5321] [ 131.277298][ T5321] dump_stack_lvl+0xd1/0x138 [ 131.281897][ T5321] should_fail_ex.cold+0x5/0xa [ 131.286659][ T5321] ? io_issue_sqe+0x695/0x1250 [ 131.291444][ T5321] should_failslab+0x9/0x20 [ 131.295989][ T5321] __kmem_cache_alloc_node+0x5b/0x330 [ 131.301367][ T5321] ? ref_tracker_alloc+0x158/0x560 [ 131.306488][ T5321] kmalloc_trace+0x26/0x60 [ 131.310936][ T5321] ref_tracker_alloc+0x158/0x560 [ 131.315910][ T5321] ? __lock_acquire+0xbc3/0x56d0 [ 131.320864][ T5321] ? ref_tracker_free+0x6b0/0x6b0 [ 131.325936][ T5321] dst_init+0xe4/0x520 [ 131.330013][ T5321] dst_alloc+0x16f/0x1f0 [ 131.334263][ T5321] rt_dst_alloc+0x55/0x430 [ 131.338684][ T5321] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 131.344677][ T5321] ip_route_output_key_hash+0x18f/0x340 [ 131.350231][ T5321] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 131.356488][ T5321] dccp_v4_connect+0x7e1/0x1730 [ 131.361400][ T5321] __inet_stream_connect+0x69e/0xed0 [ 131.366731][ T5321] ? inet_listen+0x640/0x640 [ 131.371339][ T5321] ? mark_held_locks+0x9f/0xe0 [ 131.376127][ T5321] ? __local_bh_enable_ip+0xa4/0x130 [ 131.381450][ T5321] inet_stream_connect+0x57/0xa0 [ 131.386413][ T5321] ? __inet_stream_connect+0xed0/0xed0 [ 131.391927][ T5321] __sys_connect_file+0x153/0x1a0 [ 131.396991][ T5321] io_connect+0x3cc/0x720 [ 131.401331][ T5321] ? io_connect_prep+0x250/0x250 [ 131.406286][ T5321] ? receive_fd+0x110/0x110 [ 131.410852][ T5321] ? rcu_read_lock_sched_held+0x3e/0x70 [ 131.416448][ T5321] ? io_connect_prep+0x250/0x250 [ 131.421426][ T5321] io_issue_sqe+0x695/0x1250 [ 131.426025][ T5321] io_submit_sqes+0x96c/0x1e90 [ 131.430809][ T5321] __do_sys_io_uring_enter+0x103d/0x24e0 [ 131.436453][ T5321] ? io_submit_sqes+0x1e90/0x1e90 [ 131.441488][ T5321] ? ptrace_notify+0xfe/0x140 [ 131.446184][ T5321] ? lock_downgrade+0x6e0/0x6e0 [ 131.451070][ T5321] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.456287][ T5321] ? lockdep_hardirqs_on+0x7d/0x100 [ 131.461523][ T5321] ? _raw_spin_unlock_irq+0x2e/0x50 [ 131.466761][ T5321] ? ptrace_notify+0xfe/0x140 [ 131.471445][ T5321] do_syscall_64+0x39/0xb0 [ 131.475883][ T5321] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.481824][ T5321] RIP: 0033:0x7f607b0de549 [ 131.486257][ T5321] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 131.505873][ T5321] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 131.514296][ T5321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 131.522271][ T5321] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 131.530263][ T5321] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5321] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5321] close(3) = 0 [pid 5321] close(4) = 0 [pid 5321] close(5) = 0 [pid 5321] close(6) = 0 [pid 5321] close(7) = 0 [pid 5321] close(8) = -1 EBADF (Bad file descriptor) [pid 5321] close(9) = -1 EBADF (Bad file descriptor) [pid 5321] close(10) = -1 EBADF (Bad file descriptor) [pid 5321] close(11) = -1 EBADF (Bad file descriptor) [pid 5321] close(12) = -1 EBADF (Bad file descriptor) [pid 5321] close(13) = -1 EBADF (Bad file descriptor) [pid 5321] close(14) = -1 EBADF (Bad file descriptor) [pid 5321] close(15) = -1 EBADF (Bad file descriptor) [pid 5321] close(16) = -1 EBADF (Bad file descriptor) [pid 5321] close(17) = -1 EBADF (Bad file descriptor) [pid 5321] close(18) = -1 EBADF (Bad file descriptor) [pid 5321] close(19) = -1 EBADF (Bad file descriptor) [pid 5321] close(20) = -1 EBADF (Bad file descriptor) [pid 5321] close(21) = -1 EBADF (Bad file descriptor) [pid 5321] close(22) = -1 EBADF (Bad file descriptor) [pid 5321] close(23) = -1 EBADF (Bad file descriptor) [pid 5321] close(24) = -1 EBADF (Bad file descriptor) [pid 5321] close(25) = -1 EBADF (Bad file descriptor) [pid 5321] close(26) = -1 EBADF (Bad file descriptor) [pid 5321] close(27) = -1 EBADF (Bad file descriptor) [pid 5321] close(28) = -1 EBADF (Bad file descriptor) [pid 5321] close(29) = -1 EBADF (Bad file descriptor) [pid 5321] exit_group(0) = ? [pid 5321] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=220, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 221 ./strace-static-x86_64: Process 5322 attached [pid 5322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5322] setpgid(0, 0) = 0 [pid 5322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5322] write(3, "1000", 4) = 4 [pid 5322] close(3) = 0 [pid 5322] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5322] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5322] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [ 131.538253][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 131.546238][ T5321] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 131.554245][ T5321] [pid 5322] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5322] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5322] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5322] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5322] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5322] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5322] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5322] write(7, "5", 1) = 1 [ 131.606780][ T5322] FAULT_INJECTION: forcing a failure. [ 131.606780][ T5322] name failslab, interval 1, probability 0, space 0, times 0 [ 131.619996][ T5322] CPU: 1 PID: 5322 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 131.629988][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 131.640046][ T5322] Call Trace: [ 131.643338][ T5322] [ 131.646295][ T5322] dump_stack_lvl+0xd1/0x138 [ 131.650921][ T5322] should_fail_ex.cold+0x5/0xa [ 131.655699][ T5322] ? io_issue_sqe+0x695/0x1250 [ 131.660481][ T5322] should_failslab+0x9/0x20 [ 131.665020][ T5322] __kmem_cache_alloc_node+0x5b/0x330 [ 131.670684][ T5322] ? ref_tracker_alloc+0x158/0x560 [ 131.675826][ T5322] kmalloc_trace+0x26/0x60 [ 131.680375][ T5322] ref_tracker_alloc+0x158/0x560 [ 131.685351][ T5322] ? __lock_acquire+0xbc3/0x56d0 [ 131.690321][ T5322] ? ref_tracker_free+0x6b0/0x6b0 [ 131.695382][ T5322] dst_init+0xe4/0x520 [ 131.699452][ T5322] dst_alloc+0x16f/0x1f0 [ 131.703698][ T5322] rt_dst_alloc+0x55/0x430 [ 131.708121][ T5322] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 131.714112][ T5322] ip_route_output_key_hash+0x18f/0x340 [ 131.719663][ T5322] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 131.725950][ T5322] dccp_v4_connect+0x7e1/0x1730 [ 131.730853][ T5322] __inet_stream_connect+0x69e/0xed0 [ 131.736169][ T5322] ? inet_listen+0x640/0x640 [ 131.740795][ T5322] ? mark_held_locks+0x9f/0xe0 [ 131.745585][ T5322] ? __local_bh_enable_ip+0xa4/0x130 [ 131.750877][ T5322] inet_stream_connect+0x57/0xa0 [ 131.755836][ T5322] ? __inet_stream_connect+0xed0/0xed0 [ 131.761351][ T5322] __sys_connect_file+0x153/0x1a0 [ 131.766407][ T5322] io_connect+0x3cc/0x720 [ 131.770878][ T5322] ? io_connect_prep+0x250/0x250 [ 131.775855][ T5322] ? receive_fd+0x110/0x110 [ 131.780386][ T5322] ? rcu_read_lock_sched_held+0x3e/0x70 [ 131.785965][ T5322] ? io_connect_prep+0x250/0x250 [ 131.790940][ T5322] io_issue_sqe+0x695/0x1250 [ 131.795538][ T5322] io_submit_sqes+0x96c/0x1e90 [ 131.800343][ T5322] __do_sys_io_uring_enter+0x103d/0x24e0 [ 131.806031][ T5322] ? io_submit_sqes+0x1e90/0x1e90 [ 131.811087][ T5322] ? ptrace_notify+0xfe/0x140 [ 131.815764][ T5322] ? lock_downgrade+0x6e0/0x6e0 [ 131.820644][ T5322] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.825890][ T5322] ? lockdep_hardirqs_on+0x7d/0x100 [ 131.831116][ T5322] ? _raw_spin_unlock_irq+0x2e/0x50 [ 131.836319][ T5322] ? ptrace_notify+0xfe/0x140 [ 131.841016][ T5322] do_syscall_64+0x39/0xb0 [ 131.845469][ T5322] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.851363][ T5322] RIP: 0033:0x7f607b0de549 [ 131.855788][ T5322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 131.875425][ T5322] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 131.883853][ T5322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 131.891848][ T5322] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 131.899822][ T5322] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5322] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5322] close(3) = 0 [pid 5322] close(4) = 0 [pid 5322] close(5) = 0 [pid 5322] close(6) = 0 [pid 5322] close(7) = 0 [pid 5322] close(8) = -1 EBADF (Bad file descriptor) [pid 5322] close(9) = -1 EBADF (Bad file descriptor) [pid 5322] close(10) = -1 EBADF (Bad file descriptor) [pid 5322] close(11) = -1 EBADF (Bad file descriptor) [pid 5322] close(12) = -1 EBADF (Bad file descriptor) [pid 5322] close(13) = -1 EBADF (Bad file descriptor) [pid 5322] close(14) = -1 EBADF (Bad file descriptor) [pid 5322] close(15) = -1 EBADF (Bad file descriptor) [pid 5322] close(16) = -1 EBADF (Bad file descriptor) [pid 5322] close(17) = -1 EBADF (Bad file descriptor) [pid 5322] close(18) = -1 EBADF (Bad file descriptor) [pid 5322] close(19) = -1 EBADF (Bad file descriptor) [pid 5322] close(20) = -1 EBADF (Bad file descriptor) [pid 5322] close(21) = -1 EBADF (Bad file descriptor) [pid 5322] close(22) = -1 EBADF (Bad file descriptor) [pid 5322] close(23) = -1 EBADF (Bad file descriptor) [pid 5322] close(24) = -1 EBADF (Bad file descriptor) [pid 5322] close(25) = -1 EBADF (Bad file descriptor) [pid 5322] close(26) = -1 EBADF (Bad file descriptor) [pid 5322] close(27) = -1 EBADF (Bad file descriptor) [pid 5322] close(28) = -1 EBADF (Bad file descriptor) [pid 5322] close(29) = -1 EBADF (Bad file descriptor) [pid 5322] exit_group(0) = ? [pid 5322] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=221, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5323 attached , child_tidptr=0x555555eff5d0) = 222 [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5323] setpgid(0, 0) = 0 [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5323] write(3, "1000", 4) = 4 [pid 5323] close(3) = 0 [pid 5323] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5323] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5323] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5323] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5323] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5323] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5323] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5323] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5323] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5323] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5323] write(7, "5", 1) = 1 [ 131.907794][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 131.915764][ T5322] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 131.923754][ T5322] [ 131.969931][ T5323] FAULT_INJECTION: forcing a failure. [ 131.969931][ T5323] name failslab, interval 1, probability 0, space 0, times 0 [ 131.982618][ T5323] CPU: 0 PID: 5323 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 131.992508][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 132.002563][ T5323] Call Trace: [ 132.005837][ T5323] [ 132.008776][ T5323] dump_stack_lvl+0xd1/0x138 [ 132.013408][ T5323] should_fail_ex.cold+0x5/0xa [ 132.018174][ T5323] ? __inet_hash_connect+0x95e/0x1ba0 [ 132.023635][ T5323] should_failslab+0x9/0x20 [ 132.028141][ T5323] kmem_cache_alloc+0x5a/0x320 [ 132.032914][ T5323] __inet_hash_connect+0x95e/0x1ba0 [ 132.038147][ T5323] ? __inet_lookup_listener+0xbf0/0xbf0 [ 132.043722][ T5323] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 132.050063][ T5323] dccp_v4_connect+0xb82/0x1730 [ 132.054953][ T5323] __inet_stream_connect+0x69e/0xed0 [ 132.060295][ T5323] ? inet_listen+0x640/0x640 [ 132.064920][ T5323] ? mark_held_locks+0x9f/0xe0 [ 132.069688][ T5323] ? __local_bh_enable_ip+0xa4/0x130 [ 132.074978][ T5323] inet_stream_connect+0x57/0xa0 [ 132.079926][ T5323] ? __inet_stream_connect+0xed0/0xed0 [ 132.085388][ T5323] __sys_connect_file+0x153/0x1a0 [ 132.090525][ T5323] io_connect+0x3cc/0x720 [ 132.094864][ T5323] ? io_connect_prep+0x250/0x250 [ 132.099803][ T5323] ? receive_fd+0x110/0x110 [ 132.104314][ T5323] ? rcu_read_lock_sched_held+0x3e/0x70 [ 132.109897][ T5323] ? io_connect_prep+0x250/0x250 [ 132.114841][ T5323] io_issue_sqe+0x695/0x1250 [ 132.119437][ T5323] io_submit_sqes+0x96c/0x1e90 [ 132.124221][ T5323] __do_sys_io_uring_enter+0x103d/0x24e0 [ 132.129877][ T5323] ? io_submit_sqes+0x1e90/0x1e90 [ 132.134911][ T5323] ? ptrace_notify+0xfe/0x140 [ 132.139589][ T5323] ? lock_downgrade+0x6e0/0x6e0 [ 132.144465][ T5323] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.149694][ T5323] ? lockdep_hardirqs_on+0x7d/0x100 [ 132.154891][ T5323] ? _raw_spin_unlock_irq+0x2e/0x50 [ 132.160104][ T5323] ? ptrace_notify+0xfe/0x140 [ 132.164810][ T5323] do_syscall_64+0x39/0xb0 [ 132.169232][ T5323] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.175124][ T5323] RIP: 0033:0x7f607b0de549 [ 132.179534][ T5323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 132.199164][ T5323] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 132.207583][ T5323] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5323] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5323] close(3) = 0 [pid 5323] close(4) = 0 [pid 5323] close(5) = 0 [pid 5323] close(6) = 0 [pid 5323] close(7) = 0 [pid 5323] close(8) = -1 EBADF (Bad file descriptor) [pid 5323] close(9) = -1 EBADF (Bad file descriptor) [pid 5323] close(10) = -1 EBADF (Bad file descriptor) [pid 5323] close(11) = -1 EBADF (Bad file descriptor) [pid 5323] close(12) = -1 EBADF (Bad file descriptor) [pid 5323] close(13) = -1 EBADF (Bad file descriptor) [pid 5323] close(14) = -1 EBADF (Bad file descriptor) [pid 5323] close(15) = -1 EBADF (Bad file descriptor) [pid 5323] close(16) = -1 EBADF (Bad file descriptor) [pid 5323] close(17) = -1 EBADF (Bad file descriptor) [pid 5323] close(18) = -1 EBADF (Bad file descriptor) [pid 5323] close(19) = -1 EBADF (Bad file descriptor) [pid 5323] close(20) = -1 EBADF (Bad file descriptor) [pid 5323] close(21) = -1 EBADF (Bad file descriptor) [pid 5323] close(22) = -1 EBADF (Bad file descriptor) [pid 5323] close(23) = -1 EBADF (Bad file descriptor) [pid 5323] close(24) = -1 EBADF (Bad file descriptor) [pid 5323] close(25) = -1 EBADF (Bad file descriptor) [pid 5323] close(26) = -1 EBADF (Bad file descriptor) [pid 5323] close(27) = -1 EBADF (Bad file descriptor) [pid 5323] close(28) = -1 EBADF (Bad file descriptor) [pid 5323] close(29) = -1 EBADF (Bad file descriptor) [pid 5323] exit_group(0) = ? [pid 5323] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=222, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 223 ./strace-static-x86_64: Process 5324 attached [pid 5324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5324] setpgid(0, 0) = 0 [pid 5324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5324] write(3, "1000", 4) = 4 [pid 5324] close(3) = 0 [pid 5324] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5324] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5324] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5324] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5324] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5324] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5324] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5324] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5324] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5324] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5324] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5324] write(7, "5", 1) = 1 [ 132.215565][ T5323] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 132.224868][ T5323] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 132.232853][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 132.240937][ T5323] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 132.249010][ T5323] [ 132.294466][ T5324] FAULT_INJECTION: forcing a failure. [ 132.294466][ T5324] name failslab, interval 1, probability 0, space 0, times 0 [ 132.307335][ T5324] CPU: 0 PID: 5324 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 132.317235][ T5324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 132.327303][ T5324] Call Trace: [ 132.330609][ T5324] [ 132.333536][ T5324] dump_stack_lvl+0xd1/0x138 [ 132.338149][ T5324] should_fail_ex.cold+0x5/0xa [ 132.342909][ T5324] ? io_issue_sqe+0x695/0x1250 [ 132.347696][ T5324] should_failslab+0x9/0x20 [ 132.352242][ T5324] __kmem_cache_alloc_node+0x5b/0x330 [ 132.357625][ T5324] ? ref_tracker_alloc+0x158/0x560 [ 132.362788][ T5324] kmalloc_trace+0x26/0x60 [ 132.367238][ T5324] ref_tracker_alloc+0x158/0x560 [ 132.372210][ T5324] ? __lock_acquire+0xbc3/0x56d0 [ 132.377188][ T5324] ? ref_tracker_free+0x6b0/0x6b0 [ 132.382263][ T5324] dst_init+0xe4/0x520 [ 132.386358][ T5324] dst_alloc+0x16f/0x1f0 [ 132.390626][ T5324] rt_dst_alloc+0x55/0x430 [ 132.395068][ T5324] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 132.401093][ T5324] ip_route_output_key_hash+0x18f/0x340 [ 132.406666][ T5324] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 132.412958][ T5324] dccp_v4_connect+0x7e1/0x1730 [ 132.417875][ T5324] __inet_stream_connect+0x69e/0xed0 [ 132.423201][ T5324] ? inet_listen+0x640/0x640 [ 132.427824][ T5324] ? mark_held_locks+0x9f/0xe0 [ 132.432608][ T5324] ? __local_bh_enable_ip+0xa4/0x130 [ 132.437926][ T5324] inet_stream_connect+0x57/0xa0 [ 132.442913][ T5324] ? __inet_stream_connect+0xed0/0xed0 [ 132.448403][ T5324] __sys_connect_file+0x153/0x1a0 [ 132.453449][ T5324] io_connect+0x3cc/0x720 [ 132.457815][ T5324] ? io_connect_prep+0x250/0x250 [ 132.462779][ T5324] ? receive_fd+0x110/0x110 [ 132.467353][ T5324] ? rcu_read_lock_sched_held+0x3e/0x70 [ 132.472916][ T5324] ? io_connect_prep+0x250/0x250 [ 132.477884][ T5324] io_issue_sqe+0x695/0x1250 [ 132.482504][ T5324] io_submit_sqes+0x96c/0x1e90 [ 132.487315][ T5324] __do_sys_io_uring_enter+0x103d/0x24e0 [ 132.493031][ T5324] ? io_submit_sqes+0x1e90/0x1e90 [ 132.498090][ T5324] ? ptrace_notify+0xfe/0x140 [ 132.502803][ T5324] ? lock_downgrade+0x6e0/0x6e0 [ 132.507683][ T5324] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.512997][ T5324] ? lockdep_hardirqs_on+0x7d/0x100 [ 132.518229][ T5324] ? _raw_spin_unlock_irq+0x2e/0x50 [ 132.523448][ T5324] ? ptrace_notify+0xfe/0x140 [ 132.528150][ T5324] do_syscall_64+0x39/0xb0 [ 132.532595][ T5324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.538513][ T5324] RIP: 0033:0x7f607b0de549 [ 132.542939][ T5324] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 132.562650][ T5324] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 132.571092][ T5324] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 132.579077][ T5324] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 132.587142][ T5324] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5324] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5324] close(3) = 0 [pid 5324] close(4) = 0 [pid 5324] close(5) = 0 [pid 5324] close(6) = 0 [pid 5324] close(7) = 0 [pid 5324] close(8) = -1 EBADF (Bad file descriptor) [pid 5324] close(9) = -1 EBADF (Bad file descriptor) [pid 5324] close(10) = -1 EBADF (Bad file descriptor) [pid 5324] close(11) = -1 EBADF (Bad file descriptor) [pid 5324] close(12) = -1 EBADF (Bad file descriptor) [pid 5324] close(13) = -1 EBADF (Bad file descriptor) [pid 5324] close(14) = -1 EBADF (Bad file descriptor) [pid 5324] close(15) = -1 EBADF (Bad file descriptor) [pid 5324] close(16) = -1 EBADF (Bad file descriptor) [pid 5324] close(17) = -1 EBADF (Bad file descriptor) [pid 5324] close(18) = -1 EBADF (Bad file descriptor) [pid 5324] close(19) = -1 EBADF (Bad file descriptor) [pid 5324] close(20) = -1 EBADF (Bad file descriptor) [pid 5324] close(21) = -1 EBADF (Bad file descriptor) [pid 5324] close(22) = -1 EBADF (Bad file descriptor) [pid 5324] close(23) = -1 EBADF (Bad file descriptor) [pid 5324] close(24) = -1 EBADF (Bad file descriptor) [pid 5324] close(25) = -1 EBADF (Bad file descriptor) [pid 5324] close(26) = -1 EBADF (Bad file descriptor) [pid 5324] close(27) = -1 EBADF (Bad file descriptor) [pid 5324] close(28) = -1 EBADF (Bad file descriptor) [pid 5324] close(29) = -1 EBADF (Bad file descriptor) [pid 5324] exit_group(0) = ? [pid 5324] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=223, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5325 attached , child_tidptr=0x555555eff5d0) = 224 [pid 5325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5325] setpgid(0, 0) = 0 [pid 5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5325] write(3, "1000", 4) = 4 [pid 5325] close(3) = 0 [pid 5325] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5325] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5325] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5325] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5325] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5325] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 132.595156][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 132.603154][ T5324] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 132.611168][ T5324] [pid 5325] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5325] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5325] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5325] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5325] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5325] write(7, "5", 1) = 1 [ 132.662139][ T5325] FAULT_INJECTION: forcing a failure. [ 132.662139][ T5325] name failslab, interval 1, probability 0, space 0, times 0 [ 132.674838][ T5325] CPU: 1 PID: 5325 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 132.684772][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 132.694861][ T5325] Call Trace: [ 132.698154][ T5325] [ 132.701088][ T5325] dump_stack_lvl+0xd1/0x138 [ 132.705699][ T5325] should_fail_ex.cold+0x5/0xa [ 132.710478][ T5325] ? __inet_hash_connect+0x95e/0x1ba0 [ 132.715880][ T5325] should_failslab+0x9/0x20 [ 132.720427][ T5325] kmem_cache_alloc+0x5a/0x320 [ 132.726026][ T5325] __inet_hash_connect+0x95e/0x1ba0 [ 132.731280][ T5325] ? __inet_lookup_listener+0xbf0/0xbf0 [ 132.736858][ T5325] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 132.743221][ T5325] dccp_v4_connect+0xb82/0x1730 [ 132.748123][ T5325] __inet_stream_connect+0x69e/0xed0 [ 132.753425][ T5325] ? inet_listen+0x640/0x640 [ 132.758024][ T5325] ? mark_held_locks+0x9f/0xe0 [ 132.762796][ T5325] ? __local_bh_enable_ip+0xa4/0x130 [ 132.768089][ T5325] inet_stream_connect+0x57/0xa0 [ 132.773051][ T5325] ? __inet_stream_connect+0xed0/0xed0 [ 132.778553][ T5325] __sys_connect_file+0x153/0x1a0 [ 132.783577][ T5325] io_connect+0x3cc/0x720 [ 132.787916][ T5325] ? io_connect_prep+0x250/0x250 [ 132.792861][ T5325] ? receive_fd+0x110/0x110 [ 132.797500][ T5325] ? rcu_read_lock_sched_held+0x3e/0x70 [ 132.803089][ T5325] ? io_connect_prep+0x250/0x250 [ 132.808074][ T5325] io_issue_sqe+0x695/0x1250 [ 132.812679][ T5325] io_submit_sqes+0x96c/0x1e90 [ 132.817494][ T5325] __do_sys_io_uring_enter+0x103d/0x24e0 [ 132.823191][ T5325] ? io_submit_sqes+0x1e90/0x1e90 [ 132.828251][ T5325] ? ptrace_notify+0xfe/0x140 [ 132.832931][ T5325] ? lock_downgrade+0x6e0/0x6e0 [ 132.837788][ T5325] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.843005][ T5325] ? lockdep_hardirqs_on+0x7d/0x100 [ 132.848218][ T5325] ? _raw_spin_unlock_irq+0x2e/0x50 [ 132.853461][ T5325] ? ptrace_notify+0xfe/0x140 [ 132.858155][ T5325] do_syscall_64+0x39/0xb0 [ 132.862578][ T5325] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.868474][ T5325] RIP: 0033:0x7f607b0de549 [ 132.872890][ T5325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 132.892505][ T5325] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 132.900926][ T5325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5325] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5325] close(3) = 0 [pid 5325] close(4) = 0 [pid 5325] close(5) = 0 [pid 5325] close(6) = 0 [pid 5325] close(7) = 0 [pid 5325] close(8) = -1 EBADF (Bad file descriptor) [pid 5325] close(9) = -1 EBADF (Bad file descriptor) [pid 5325] close(10) = -1 EBADF (Bad file descriptor) [pid 5325] close(11) = -1 EBADF (Bad file descriptor) [pid 5325] close(12) = -1 EBADF (Bad file descriptor) [pid 5325] close(13) = -1 EBADF (Bad file descriptor) [pid 5325] close(14) = -1 EBADF (Bad file descriptor) [pid 5325] close(15) = -1 EBADF (Bad file descriptor) [pid 5325] close(16) = -1 EBADF (Bad file descriptor) [pid 5325] close(17) = -1 EBADF (Bad file descriptor) [pid 5325] close(18) = -1 EBADF (Bad file descriptor) [pid 5325] close(19) = -1 EBADF (Bad file descriptor) [pid 5325] close(20) = -1 EBADF (Bad file descriptor) [pid 5325] close(21) = -1 EBADF (Bad file descriptor) [pid 5325] close(22) = -1 EBADF (Bad file descriptor) [pid 5325] close(23) = -1 EBADF (Bad file descriptor) [pid 5325] close(24) = -1 EBADF (Bad file descriptor) [pid 5325] close(25) = -1 EBADF (Bad file descriptor) [pid 5325] close(26) = -1 EBADF (Bad file descriptor) [pid 5325] close(27) = -1 EBADF (Bad file descriptor) [pid 5325] close(28) = -1 EBADF (Bad file descriptor) [pid 5325] close(29) = -1 EBADF (Bad file descriptor) [pid 5325] exit_group(0) = ? [pid 5325] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=224, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 225 ./strace-static-x86_64: Process 5326 attached [pid 5326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5326] setpgid(0, 0) = 0 [pid 5326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5326] write(3, "1000", 4) = 4 [pid 5326] close(3) = 0 [pid 5326] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5326] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5326] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5326] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5326] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5326] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5326] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5326] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5326] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5326] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5326] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5326] write(7, "5", 1) = 1 [ 132.908909][ T5325] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 132.916904][ T5325] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 132.924875][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 132.932847][ T5325] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 132.940960][ T5325] [ 132.985231][ T5326] FAULT_INJECTION: forcing a failure. [ 132.985231][ T5326] name failslab, interval 1, probability 0, space 0, times 0 [ 132.998313][ T5326] CPU: 0 PID: 5326 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 133.008239][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 133.018294][ T5326] Call Trace: [ 133.021570][ T5326] [ 133.024505][ T5326] dump_stack_lvl+0xd1/0x138 [ 133.029122][ T5326] should_fail_ex.cold+0x5/0xa [ 133.033910][ T5326] ? io_issue_sqe+0x695/0x1250 [ 133.038721][ T5326] should_failslab+0x9/0x20 [ 133.043334][ T5326] __kmem_cache_alloc_node+0x5b/0x330 [ 133.048738][ T5326] ? ref_tracker_alloc+0x158/0x560 [ 133.053863][ T5326] kmalloc_trace+0x26/0x60 [ 133.058289][ T5326] ref_tracker_alloc+0x158/0x560 [ 133.063244][ T5326] ? __lock_acquire+0xbc3/0x56d0 [ 133.068211][ T5326] ? ref_tracker_free+0x6b0/0x6b0 [ 133.073289][ T5326] dst_init+0xe4/0x520 [ 133.077390][ T5326] dst_alloc+0x16f/0x1f0 [ 133.081656][ T5326] rt_dst_alloc+0x55/0x430 [ 133.086108][ T5326] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 133.092129][ T5326] ip_route_output_key_hash+0x18f/0x340 [ 133.097693][ T5326] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 133.103993][ T5326] dccp_v4_connect+0x7e1/0x1730 [ 133.108887][ T5326] __inet_stream_connect+0x69e/0xed0 [ 133.114215][ T5326] ? inet_listen+0x640/0x640 [ 133.118826][ T5326] ? mark_held_locks+0x9f/0xe0 [ 133.123615][ T5326] ? __local_bh_enable_ip+0xa4/0x130 [ 133.128916][ T5326] inet_stream_connect+0x57/0xa0 [ 133.133891][ T5326] ? __inet_stream_connect+0xed0/0xed0 [ 133.139356][ T5326] __sys_connect_file+0x153/0x1a0 [ 133.144408][ T5326] io_connect+0x3cc/0x720 [ 133.148872][ T5326] ? io_connect_prep+0x250/0x250 [ 133.153846][ T5326] ? receive_fd+0x110/0x110 [ 133.158362][ T5326] ? rcu_read_lock_sched_held+0x3e/0x70 [ 133.163908][ T5326] ? io_connect_prep+0x250/0x250 [ 133.168866][ T5326] io_issue_sqe+0x695/0x1250 [ 133.173582][ T5326] io_submit_sqes+0x96c/0x1e90 [ 133.178450][ T5326] __do_sys_io_uring_enter+0x103d/0x24e0 [ 133.185329][ T5326] ? io_submit_sqes+0x1e90/0x1e90 [ 133.190465][ T5326] ? ptrace_notify+0xfe/0x140 [ 133.195176][ T5326] ? lock_downgrade+0x6e0/0x6e0 [ 133.200035][ T5326] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.205255][ T5326] ? lockdep_hardirqs_on+0x7d/0x100 [ 133.210464][ T5326] ? _raw_spin_unlock_irq+0x2e/0x50 [ 133.215691][ T5326] ? ptrace_notify+0xfe/0x140 [ 133.220373][ T5326] do_syscall_64+0x39/0xb0 [ 133.224809][ T5326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.230739][ T5326] RIP: 0033:0x7f607b0de549 [ 133.235170][ T5326] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 133.254798][ T5326] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 133.263265][ T5326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 133.271258][ T5326] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5326] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5326] close(3) = 0 [pid 5326] close(4) = 0 [pid 5326] close(5) = 0 [pid 5326] close(6) = 0 [pid 5326] close(7) = 0 [pid 5326] close(8) = -1 EBADF (Bad file descriptor) [pid 5326] close(9) = -1 EBADF (Bad file descriptor) [pid 5326] close(10) = -1 EBADF (Bad file descriptor) [pid 5326] close(11) = -1 EBADF (Bad file descriptor) [pid 5326] close(12) = -1 EBADF (Bad file descriptor) [pid 5326] close(13) = -1 EBADF (Bad file descriptor) [pid 5326] close(14) = -1 EBADF (Bad file descriptor) [pid 5326] close(15) = -1 EBADF (Bad file descriptor) [pid 5326] close(16) = -1 EBADF (Bad file descriptor) [pid 5326] close(17) = -1 EBADF (Bad file descriptor) [pid 5326] close(18) = -1 EBADF (Bad file descriptor) [pid 5326] close(19) = -1 EBADF (Bad file descriptor) [pid 5326] close(20) = -1 EBADF (Bad file descriptor) [pid 5326] close(21) = -1 EBADF (Bad file descriptor) [pid 5326] close(22) = -1 EBADF (Bad file descriptor) [pid 5326] close(23) = -1 EBADF (Bad file descriptor) [pid 5326] close(24) = -1 EBADF (Bad file descriptor) [pid 5326] close(25) = -1 EBADF (Bad file descriptor) [pid 5326] close(26) = -1 EBADF (Bad file descriptor) [pid 5326] close(27) = -1 EBADF (Bad file descriptor) [pid 5326] close(28) = -1 EBADF (Bad file descriptor) [pid 5326] close(29) = -1 EBADF (Bad file descriptor) [pid 5326] exit_group(0) = ? [pid 5326] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=225, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5327 attached , child_tidptr=0x555555eff5d0) = 226 [pid 5327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 133.279232][ T5326] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 133.287207][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 133.295179][ T5326] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 133.303277][ T5326] [pid 5327] setpgid(0, 0) = 0 [pid 5327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5327] write(3, "1000", 4) = 4 [pid 5327] close(3) = 0 [pid 5327] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5327] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5327] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5327] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5327] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5327] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5327] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5327] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5327] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5327] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5327] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5327] write(7, "5", 1) = 1 [ 133.361703][ T5327] FAULT_INJECTION: forcing a failure. [ 133.361703][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 133.374586][ T5327] CPU: 1 PID: 5327 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 133.384523][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 133.394597][ T5327] Call Trace: [ 133.397875][ T5327] [ 133.400811][ T5327] dump_stack_lvl+0xd1/0x138 [ 133.405423][ T5327] should_fail_ex.cold+0x5/0xa [ 133.410208][ T5327] ? io_issue_sqe+0x695/0x1250 [ 133.414980][ T5327] should_failslab+0x9/0x20 [ 133.419492][ T5327] __kmem_cache_alloc_node+0x5b/0x330 [ 133.425131][ T5327] ? ref_tracker_alloc+0x158/0x560 [ 133.430518][ T5327] kmalloc_trace+0x26/0x60 [ 133.434940][ T5327] ref_tracker_alloc+0x158/0x560 [ 133.439897][ T5327] ? ref_tracker_free+0x6b0/0x6b0 [ 133.444954][ T5327] ? dst_alloc+0x14a/0x1f0 [ 133.449386][ T5327] dst_init+0xe4/0x520 [ 133.453457][ T5327] dst_alloc+0x16f/0x1f0 [ 133.457700][ T5327] rt_dst_alloc+0x55/0x430 [ 133.462118][ T5327] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 133.468139][ T5327] ip_route_output_key_hash+0x18f/0x340 [ 133.473738][ T5327] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 133.480032][ T5327] dccp_v4_connect+0x7e1/0x1730 [ 133.484901][ T5327] __inet_stream_connect+0x69e/0xed0 [ 133.490221][ T5327] ? inet_listen+0x640/0x640 [ 133.494828][ T5327] ? mark_held_locks+0x9f/0xe0 [ 133.499598][ T5327] ? __local_bh_enable_ip+0xa4/0x130 [ 133.504908][ T5327] inet_stream_connect+0x57/0xa0 [ 133.509881][ T5327] ? __inet_stream_connect+0xed0/0xed0 [ 133.515346][ T5327] __sys_connect_file+0x153/0x1a0 [ 133.520393][ T5327] io_connect+0x3cc/0x720 [ 133.524757][ T5327] ? io_connect_prep+0x250/0x250 [ 133.529713][ T5327] ? receive_fd+0x110/0x110 [ 133.534278][ T5327] ? rcu_read_lock_sched_held+0x3e/0x70 [ 133.539860][ T5327] ? io_connect_prep+0x250/0x250 [ 133.544836][ T5327] io_issue_sqe+0x695/0x1250 [ 133.549434][ T5327] io_submit_sqes+0x96c/0x1e90 [ 133.554237][ T5327] __do_sys_io_uring_enter+0x103d/0x24e0 [ 133.559902][ T5327] ? io_submit_sqes+0x1e90/0x1e90 [ 133.564938][ T5327] ? ptrace_notify+0xfe/0x140 [ 133.569647][ T5327] ? lock_downgrade+0x6e0/0x6e0 [ 133.574530][ T5327] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.579746][ T5327] ? lockdep_hardirqs_on+0x7d/0x100 [ 133.584969][ T5327] ? _raw_spin_unlock_irq+0x2e/0x50 [ 133.590170][ T5327] ? ptrace_notify+0xfe/0x140 [ 133.594850][ T5327] do_syscall_64+0x39/0xb0 [ 133.599278][ T5327] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.605211][ T5327] RIP: 0033:0x7f607b0de549 [ 133.609650][ T5327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 133.629280][ T5327] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 133.637730][ T5327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 133.645747][ T5327] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 133.653740][ T5327] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5327] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5327] close(3) = 0 [pid 5327] close(4) = 0 [pid 5327] close(5) = 0 [pid 5327] close(6) = 0 [pid 5327] close(7) = 0 [pid 5327] close(8) = -1 EBADF (Bad file descriptor) [pid 5327] close(9) = -1 EBADF (Bad file descriptor) [pid 5327] close(10) = -1 EBADF (Bad file descriptor) [pid 5327] close(11) = -1 EBADF (Bad file descriptor) [pid 5327] close(12) = -1 EBADF (Bad file descriptor) [pid 5327] close(13) = -1 EBADF (Bad file descriptor) [pid 5327] close(14) = -1 EBADF (Bad file descriptor) [pid 5327] close(15) = -1 EBADF (Bad file descriptor) [pid 5327] close(16) = -1 EBADF (Bad file descriptor) [pid 5327] close(17) = -1 EBADF (Bad file descriptor) [pid 5327] close(18) = -1 EBADF (Bad file descriptor) [pid 5327] close(19) = -1 EBADF (Bad file descriptor) [pid 5327] close(20) = -1 EBADF (Bad file descriptor) [pid 5327] close(21) = -1 EBADF (Bad file descriptor) [pid 5327] close(22) = -1 EBADF (Bad file descriptor) [pid 5327] close(23) = -1 EBADF (Bad file descriptor) [pid 5327] close(24) = -1 EBADF (Bad file descriptor) [pid 5327] close(25) = -1 EBADF (Bad file descriptor) [pid 5327] close(26) = -1 EBADF (Bad file descriptor) [pid 5327] close(27) = -1 EBADF (Bad file descriptor) [pid 5327] close(28) = -1 EBADF (Bad file descriptor) [pid 5327] close(29) = -1 EBADF (Bad file descriptor) [pid 5327] exit_group(0) = ? [pid 5327] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=226, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 227 ./strace-static-x86_64: Process 5328 attached [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] setpgid(0, 0) = 0 [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5328] write(3, "1000", 4) = 4 [pid 5328] close(3) = 0 [pid 5328] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5328] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5328] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5328] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5328] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5328] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5328] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5328] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5328] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5328] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5328] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5328] write(7, "5", 1) = 1 [ 133.661725][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 133.669889][ T5327] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 133.677873][ T5327] [ 133.722845][ T5328] FAULT_INJECTION: forcing a failure. [ 133.722845][ T5328] name failslab, interval 1, probability 0, space 0, times 0 [ 133.735901][ T5328] CPU: 0 PID: 5328 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 133.745878][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 133.755941][ T5328] Call Trace: [ 133.759212][ T5328] [ 133.762140][ T5328] dump_stack_lvl+0xd1/0x138 [ 133.766735][ T5328] should_fail_ex.cold+0x5/0xa [ 133.771493][ T5328] ? io_issue_sqe+0x695/0x1250 [ 133.776265][ T5328] should_failslab+0x9/0x20 [ 133.780764][ T5328] __kmem_cache_alloc_node+0x5b/0x330 [ 133.786143][ T5328] ? ref_tracker_alloc+0x158/0x560 [ 133.791277][ T5328] kmalloc_trace+0x26/0x60 [ 133.795722][ T5328] ref_tracker_alloc+0x158/0x560 [ 133.800661][ T5328] ? __lock_acquire+0xbc3/0x56d0 [ 133.805621][ T5328] ? ref_tracker_free+0x6b0/0x6b0 [ 133.811201][ T5328] dst_init+0xe4/0x520 [ 133.815376][ T5328] dst_alloc+0x16f/0x1f0 [ 133.819619][ T5328] rt_dst_alloc+0x55/0x430 [ 133.824033][ T5328] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 133.830020][ T5328] ip_route_output_key_hash+0x18f/0x340 [ 133.835566][ T5328] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 133.841839][ T5328] dccp_v4_connect+0x7e1/0x1730 [ 133.846737][ T5328] __inet_stream_connect+0x69e/0xed0 [ 133.852031][ T5328] ? inet_listen+0x640/0x640 [ 133.856624][ T5328] ? mark_held_locks+0x9f/0xe0 [ 133.861386][ T5328] ? __local_bh_enable_ip+0xa4/0x130 [ 133.866673][ T5328] inet_stream_connect+0x57/0xa0 [ 133.871614][ T5328] ? __inet_stream_connect+0xed0/0xed0 [ 133.877156][ T5328] __sys_connect_file+0x153/0x1a0 [ 133.882198][ T5328] io_connect+0x3cc/0x720 [ 133.886549][ T5328] ? io_connect_prep+0x250/0x250 [ 133.892027][ T5328] ? receive_fd+0x110/0x110 [ 133.896556][ T5328] ? rcu_read_lock_sched_held+0x3e/0x70 [ 133.902116][ T5328] ? io_connect_prep+0x250/0x250 [ 133.907071][ T5328] io_issue_sqe+0x695/0x1250 [ 133.911670][ T5328] io_submit_sqes+0x96c/0x1e90 [ 133.916448][ T5328] __do_sys_io_uring_enter+0x103d/0x24e0 [ 133.922095][ T5328] ? io_submit_sqes+0x1e90/0x1e90 [ 133.927381][ T5328] ? ptrace_notify+0xfe/0x140 [ 133.932078][ T5328] ? lock_downgrade+0x6e0/0x6e0 [ 133.936931][ T5328] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.942136][ T5328] ? lockdep_hardirqs_on+0x7d/0x100 [ 133.947335][ T5328] ? _raw_spin_unlock_irq+0x2e/0x50 [ 133.952528][ T5328] ? ptrace_notify+0xfe/0x140 [ 133.957210][ T5328] do_syscall_64+0x39/0xb0 [ 133.961629][ T5328] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.967519][ T5328] RIP: 0033:0x7f607b0de549 [ 133.971928][ T5328] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 133.991549][ T5328] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 133.999990][ T5328] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 134.007956][ T5328] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 134.015926][ T5328] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5328] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5328] close(3) = 0 [pid 5328] close(4) = 0 [pid 5328] close(5) = 0 [pid 5328] close(6) = 0 [pid 5328] close(7) = 0 [pid 5328] close(8) = -1 EBADF (Bad file descriptor) [pid 5328] close(9) = -1 EBADF (Bad file descriptor) [pid 5328] close(10) = -1 EBADF (Bad file descriptor) [pid 5328] close(11) = -1 EBADF (Bad file descriptor) [pid 5328] close(12) = -1 EBADF (Bad file descriptor) [pid 5328] close(13) = -1 EBADF (Bad file descriptor) [pid 5328] close(14) = -1 EBADF (Bad file descriptor) [pid 5328] close(15) = -1 EBADF (Bad file descriptor) [pid 5328] close(16) = -1 EBADF (Bad file descriptor) [pid 5328] close(17) = -1 EBADF (Bad file descriptor) [pid 5328] close(18) = -1 EBADF (Bad file descriptor) [pid 5328] close(19) = -1 EBADF (Bad file descriptor) [pid 5328] close(20) = -1 EBADF (Bad file descriptor) [pid 5328] close(21) = -1 EBADF (Bad file descriptor) [pid 5328] close(22) = -1 EBADF (Bad file descriptor) [pid 5328] close(23) = -1 EBADF (Bad file descriptor) [pid 5328] close(24) = -1 EBADF (Bad file descriptor) [pid 5328] close(25) = -1 EBADF (Bad file descriptor) [pid 5328] close(26) = -1 EBADF (Bad file descriptor) [pid 5328] close(27) = -1 EBADF (Bad file descriptor) [pid 5328] close(28) = -1 EBADF (Bad file descriptor) [pid 5328] close(29) = -1 EBADF (Bad file descriptor) [pid 5328] exit_group(0) = ? [pid 5328] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=227, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 228 ./strace-static-x86_64: Process 5329 attached [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5329] setpgid(0, 0) = 0 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5329] write(3, "1000", 4) = 4 [pid 5329] close(3) = 0 [pid 5329] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5329] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5329] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5329] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5329] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5329] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 134.023911][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 134.031876][ T5328] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 134.039854][ T5328] [pid 5329] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5329] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5329] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5329] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5329] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5329] write(7, "5", 1) = 1 [ 134.089188][ T5329] FAULT_INJECTION: forcing a failure. [ 134.089188][ T5329] name failslab, interval 1, probability 0, space 0, times 0 [ 134.101872][ T5329] CPU: 0 PID: 5329 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 134.111800][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 134.121873][ T5329] Call Trace: [ 134.125164][ T5329] [ 134.128117][ T5329] dump_stack_lvl+0xd1/0x138 [ 134.132754][ T5329] should_fail_ex.cold+0x5/0xa [ 134.137544][ T5329] ? __inet_hash_connect+0x95e/0x1ba0 [ 134.142933][ T5329] should_failslab+0x9/0x20 [ 134.147487][ T5329] kmem_cache_alloc+0x5a/0x320 [ 134.152274][ T5329] __inet_hash_connect+0x95e/0x1ba0 [ 134.157580][ T5329] ? __inet_lookup_listener+0xbf0/0xbf0 [ 134.163173][ T5329] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 134.169547][ T5329] dccp_v4_connect+0xb82/0x1730 [ 134.174445][ T5329] __inet_stream_connect+0x69e/0xed0 [ 134.179859][ T5329] ? inet_listen+0x640/0x640 [ 134.184657][ T5329] ? mark_held_locks+0x9f/0xe0 [ 134.189440][ T5329] ? __local_bh_enable_ip+0xa4/0x130 [ 134.194757][ T5329] inet_stream_connect+0x57/0xa0 [ 134.199725][ T5329] ? __inet_stream_connect+0xed0/0xed0 [ 134.205213][ T5329] __sys_connect_file+0x153/0x1a0 [ 134.210260][ T5329] io_connect+0x3cc/0x720 [ 134.214632][ T5329] ? io_connect_prep+0x250/0x250 [ 134.219684][ T5329] ? receive_fd+0x110/0x110 [ 134.224226][ T5329] ? rcu_read_lock_sched_held+0x3e/0x70 [ 134.229790][ T5329] ? io_connect_prep+0x250/0x250 [ 134.234846][ T5329] io_issue_sqe+0x695/0x1250 [ 134.239471][ T5329] io_submit_sqes+0x96c/0x1e90 [ 134.244279][ T5329] __do_sys_io_uring_enter+0x103d/0x24e0 [ 134.249945][ T5329] ? io_submit_sqes+0x1e90/0x1e90 [ 134.254998][ T5329] ? ptrace_notify+0xfe/0x140 [ 134.259692][ T5329] ? lock_downgrade+0x6e0/0x6e0 [ 134.264571][ T5329] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.269796][ T5329] ? lockdep_hardirqs_on+0x7d/0x100 [ 134.275014][ T5329] ? _raw_spin_unlock_irq+0x2e/0x50 [ 134.280233][ T5329] ? ptrace_notify+0xfe/0x140 [ 134.284937][ T5329] do_syscall_64+0x39/0xb0 [ 134.289387][ T5329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.295306][ T5329] RIP: 0033:0x7f607b0de549 [ 134.299736][ T5329] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 134.319458][ T5329] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 134.327896][ T5329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5329] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5329] close(3) = 0 [pid 5329] close(4) = 0 [pid 5329] close(5) = 0 [pid 5329] close(6) = 0 [pid 5329] close(7) = 0 [pid 5329] close(8) = -1 EBADF (Bad file descriptor) [pid 5329] close(9) = -1 EBADF (Bad file descriptor) [pid 5329] close(10) = -1 EBADF (Bad file descriptor) [pid 5329] close(11) = -1 EBADF (Bad file descriptor) [pid 5329] close(12) = -1 EBADF (Bad file descriptor) [pid 5329] close(13) = -1 EBADF (Bad file descriptor) [pid 5329] close(14) = -1 EBADF (Bad file descriptor) [pid 5329] close(15) = -1 EBADF (Bad file descriptor) [pid 5329] close(16) = -1 EBADF (Bad file descriptor) [pid 5329] close(17) = -1 EBADF (Bad file descriptor) [pid 5329] close(18) = -1 EBADF (Bad file descriptor) [pid 5329] close(19) = -1 EBADF (Bad file descriptor) [pid 5329] close(20) = -1 EBADF (Bad file descriptor) [pid 5329] close(21) = -1 EBADF (Bad file descriptor) [pid 5329] close(22) = -1 EBADF (Bad file descriptor) [pid 5329] close(23) = -1 EBADF (Bad file descriptor) [pid 5329] close(24) = -1 EBADF (Bad file descriptor) [pid 5329] close(25) = -1 EBADF (Bad file descriptor) [pid 5329] close(26) = -1 EBADF (Bad file descriptor) [pid 5329] close(27) = -1 EBADF (Bad file descriptor) [pid 5329] close(28) = -1 EBADF (Bad file descriptor) [pid 5329] close(29) = -1 EBADF (Bad file descriptor) [pid 5329] exit_group(0) = ? [pid 5329] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=228, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5330 attached [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... clone resumed>, child_tidptr=0x555555eff5d0) = 229 [pid 5330] <... prctl resumed>) = 0 [pid 5330] setpgid(0, 0) = 0 [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5330] write(3, "1000", 4) = 4 [pid 5330] close(3) = 0 [pid 5330] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5330] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5330] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5330] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5330] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 134.335903][ T5329] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 134.343887][ T5329] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 134.351875][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 134.359861][ T5329] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 134.367866][ T5329] [pid 5330] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5330] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5330] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5330] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5330] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5330] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5330] write(7, "5", 1) = 1 [ 134.427776][ T5330] FAULT_INJECTION: forcing a failure. [ 134.427776][ T5330] name failslab, interval 1, probability 0, space 0, times 0 [ 134.440472][ T5330] CPU: 1 PID: 5330 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 134.450366][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 134.460458][ T5330] Call Trace: [ 134.463766][ T5330] [ 134.466726][ T5330] dump_stack_lvl+0xd1/0x138 [ 134.471365][ T5330] should_fail_ex.cold+0x5/0xa [ 134.476132][ T5330] ? __inet_hash_connect+0x95e/0x1ba0 [ 134.481524][ T5330] should_failslab+0x9/0x20 [ 134.486041][ T5330] kmem_cache_alloc+0x5a/0x320 [ 134.490812][ T5330] __inet_hash_connect+0x95e/0x1ba0 [ 134.496024][ T5330] ? __inet_lookup_listener+0xbf0/0xbf0 [ 134.501580][ T5330] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 134.507922][ T5330] dccp_v4_connect+0xb82/0x1730 [ 134.512835][ T5330] __inet_stream_connect+0x69e/0xed0 [ 134.518162][ T5330] ? inet_listen+0x640/0x640 [ 134.522795][ T5330] ? mark_held_locks+0x9f/0xe0 [ 134.527574][ T5330] ? __local_bh_enable_ip+0xa4/0x130 [ 134.532907][ T5330] inet_stream_connect+0x57/0xa0 [ 134.537886][ T5330] ? __inet_stream_connect+0xed0/0xed0 [ 134.543388][ T5330] __sys_connect_file+0x153/0x1a0 [ 134.548431][ T5330] io_connect+0x3cc/0x720 [ 134.552840][ T5330] ? io_connect_prep+0x250/0x250 [ 134.557812][ T5330] ? receive_fd+0x110/0x110 [ 134.562333][ T5330] ? rcu_read_lock_sched_held+0x3e/0x70 [ 134.567892][ T5330] ? io_connect_prep+0x250/0x250 [ 134.572850][ T5330] io_issue_sqe+0x695/0x1250 [ 134.577449][ T5330] io_submit_sqes+0x96c/0x1e90 [ 134.582229][ T5330] __do_sys_io_uring_enter+0x103d/0x24e0 [ 134.587877][ T5330] ? io_submit_sqes+0x1e90/0x1e90 [ 134.592928][ T5330] ? ptrace_notify+0xfe/0x140 [ 134.597631][ T5330] ? lock_downgrade+0x6e0/0x6e0 [ 134.602485][ T5330] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.607866][ T5330] ? lockdep_hardirqs_on+0x7d/0x100 [ 134.613069][ T5330] ? _raw_spin_unlock_irq+0x2e/0x50 [ 134.618284][ T5330] ? ptrace_notify+0xfe/0x140 [ 134.622991][ T5330] do_syscall_64+0x39/0xb0 [ 134.627413][ T5330] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.633331][ T5330] RIP: 0033:0x7f607b0de549 [ 134.637756][ T5330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 134.657461][ T5330] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 134.665881][ T5330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5330] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5330] close(3) = 0 [pid 5330] close(4) = 0 [pid 5330] close(5) = 0 [pid 5330] close(6) = 0 [pid 5330] close(7) = 0 [pid 5330] close(8) = -1 EBADF (Bad file descriptor) [pid 5330] close(9) = -1 EBADF (Bad file descriptor) [pid 5330] close(10) = -1 EBADF (Bad file descriptor) [pid 5330] close(11) = -1 EBADF (Bad file descriptor) [pid 5330] close(12) = -1 EBADF (Bad file descriptor) [pid 5330] close(13) = -1 EBADF (Bad file descriptor) [pid 5330] close(14) = -1 EBADF (Bad file descriptor) [pid 5330] close(15) = -1 EBADF (Bad file descriptor) [pid 5330] close(16) = -1 EBADF (Bad file descriptor) [pid 5330] close(17) = -1 EBADF (Bad file descriptor) [pid 5330] close(18) = -1 EBADF (Bad file descriptor) [pid 5330] close(19) = -1 EBADF (Bad file descriptor) [pid 5330] close(20) = -1 EBADF (Bad file descriptor) [pid 5330] close(21) = -1 EBADF (Bad file descriptor) [pid 5330] close(22) = -1 EBADF (Bad file descriptor) [pid 5330] close(23) = -1 EBADF (Bad file descriptor) [pid 5330] close(24) = -1 EBADF (Bad file descriptor) [pid 5330] close(25) = -1 EBADF (Bad file descriptor) [pid 5330] close(26) = -1 EBADF (Bad file descriptor) [pid 5330] close(27) = -1 EBADF (Bad file descriptor) [pid 5330] close(28) = -1 EBADF (Bad file descriptor) [pid 5330] close(29) = -1 EBADF (Bad file descriptor) [pid 5330] exit_group(0) = ? [pid 5330] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=229, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 230 ./strace-static-x86_64: Process 5331 attached [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5331] setpgid(0, 0) = 0 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5331] write(3, "1000", 4) = 4 [pid 5331] close(3) = 0 [pid 5331] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5331] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5331] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5331] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5331] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5331] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5331] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5331] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5331] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5331] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5331] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5331] write(7, "5", 1) = 1 [ 134.673853][ T5330] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 134.681931][ T5330] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 134.689926][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 134.697999][ T5330] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 134.706162][ T5330] [ 134.757900][ T5331] FAULT_INJECTION: forcing a failure. [ 134.757900][ T5331] name failslab, interval 1, probability 0, space 0, times 0 [ 134.770916][ T5331] CPU: 1 PID: 5331 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 134.780871][ T5331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 134.790958][ T5331] Call Trace: [ 134.794258][ T5331] [ 134.797185][ T5331] dump_stack_lvl+0xd1/0x138 [ 134.801784][ T5331] should_fail_ex.cold+0x5/0xa [ 134.806559][ T5331] ? io_issue_sqe+0x695/0x1250 [ 134.811374][ T5331] should_failslab+0x9/0x20 [ 134.815918][ T5331] __kmem_cache_alloc_node+0x5b/0x330 [ 134.821311][ T5331] ? ref_tracker_alloc+0x158/0x560 [ 134.826546][ T5331] kmalloc_trace+0x26/0x60 [ 134.830996][ T5331] ref_tracker_alloc+0x158/0x560 [ 134.835962][ T5331] ? __lock_acquire+0xbc3/0x56d0 [ 134.840917][ T5331] ? ref_tracker_free+0x6b0/0x6b0 [ 134.846009][ T5331] dst_init+0xe4/0x520 [ 134.850103][ T5331] dst_alloc+0x16f/0x1f0 [ 134.854369][ T5331] rt_dst_alloc+0x55/0x430 [ 134.858811][ T5331] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 134.864919][ T5331] ip_route_output_key_hash+0x18f/0x340 [ 134.870495][ T5331] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 134.876780][ T5331] dccp_v4_connect+0x7e1/0x1730 [ 134.881677][ T5331] __inet_stream_connect+0x69e/0xed0 [ 134.887010][ T5331] ? inet_listen+0x640/0x640 [ 134.891632][ T5331] ? mark_held_locks+0x9f/0xe0 [ 134.896422][ T5331] ? __local_bh_enable_ip+0xa4/0x130 [ 134.901730][ T5331] inet_stream_connect+0x57/0xa0 [ 134.906698][ T5331] ? __inet_stream_connect+0xed0/0xed0 [ 134.912194][ T5331] __sys_connect_file+0x153/0x1a0 [ 134.917240][ T5331] io_connect+0x3cc/0x720 [ 134.921599][ T5331] ? io_connect_prep+0x250/0x250 [ 134.926562][ T5331] ? receive_fd+0x110/0x110 [ 134.931104][ T5331] ? rcu_read_lock_sched_held+0x3e/0x70 [ 134.936671][ T5331] ? io_connect_prep+0x250/0x250 [ 134.941642][ T5331] io_issue_sqe+0x695/0x1250 [ 134.946262][ T5331] io_submit_sqes+0x96c/0x1e90 [ 134.951072][ T5331] __do_sys_io_uring_enter+0x103d/0x24e0 [ 134.956738][ T5331] ? io_submit_sqes+0x1e90/0x1e90 [ 134.961794][ T5331] ? ptrace_notify+0xfe/0x140 [ 134.966492][ T5331] ? lock_downgrade+0x6e0/0x6e0 [ 134.971369][ T5331] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.976596][ T5331] ? lockdep_hardirqs_on+0x7d/0x100 [ 134.981902][ T5331] ? _raw_spin_unlock_irq+0x2e/0x50 [ 134.987142][ T5331] ? ptrace_notify+0xfe/0x140 [ 134.991845][ T5331] do_syscall_64+0x39/0xb0 [ 134.996291][ T5331] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.002201][ T5331] RIP: 0033:0x7f607b0de549 [ 135.006628][ T5331] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 135.026258][ T5331] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 135.034690][ T5331] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 135.042673][ T5331] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 135.050663][ T5331] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5331] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5331] close(3) = 0 [pid 5331] close(4) = 0 [pid 5331] close(5) = 0 [pid 5331] close(6) = 0 [pid 5331] close(7) = 0 [pid 5331] close(8) = -1 EBADF (Bad file descriptor) [pid 5331] close(9) = -1 EBADF (Bad file descriptor) [pid 5331] close(10) = -1 EBADF (Bad file descriptor) [pid 5331] close(11) = -1 EBADF (Bad file descriptor) [pid 5331] close(12) = -1 EBADF (Bad file descriptor) [pid 5331] close(13) = -1 EBADF (Bad file descriptor) [pid 5331] close(14) = -1 EBADF (Bad file descriptor) [pid 5331] close(15) = -1 EBADF (Bad file descriptor) [pid 5331] close(16) = -1 EBADF (Bad file descriptor) [pid 5331] close(17) = -1 EBADF (Bad file descriptor) [pid 5331] close(18) = -1 EBADF (Bad file descriptor) [pid 5331] close(19) = -1 EBADF (Bad file descriptor) [pid 5331] close(20) = -1 EBADF (Bad file descriptor) [pid 5331] close(21) = -1 EBADF (Bad file descriptor) [pid 5331] close(22) = -1 EBADF (Bad file descriptor) [pid 5331] close(23) = -1 EBADF (Bad file descriptor) [pid 5331] close(24) = -1 EBADF (Bad file descriptor) [pid 5331] close(25) = -1 EBADF (Bad file descriptor) [pid 5331] close(26) = -1 EBADF (Bad file descriptor) [pid 5331] close(27) = -1 EBADF (Bad file descriptor) [pid 5331] close(28) = -1 EBADF (Bad file descriptor) [pid 5331] close(29) = -1 EBADF (Bad file descriptor) [pid 5331] exit_group(0) = ? [pid 5331] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=230, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 231 ./strace-static-x86_64: Process 5332 attached [pid 5332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5332] setpgid(0, 0) = 0 [pid 5332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5332] write(3, "1000", 4) = 4 [pid 5332] close(3) = 0 [pid 5332] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [ 135.058645][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 135.066628][ T5331] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 135.074631][ T5331] [pid 5332] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5332] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5332] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5332] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5332] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5332] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5332] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5332] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5332] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5332] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5332] write(7, "5", 1) = 1 [ 135.136589][ T5332] FAULT_INJECTION: forcing a failure. [ 135.136589][ T5332] name failslab, interval 1, probability 0, space 0, times 0 [ 135.149609][ T5332] CPU: 1 PID: 5332 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 135.159543][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 135.169601][ T5332] Call Trace: [ 135.172882][ T5332] [ 135.175846][ T5332] dump_stack_lvl+0xd1/0x138 [ 135.180488][ T5332] should_fail_ex.cold+0x5/0xa [ 135.185292][ T5332] ? io_issue_sqe+0x695/0x1250 [ 135.190112][ T5332] should_failslab+0x9/0x20 [ 135.194628][ T5332] __kmem_cache_alloc_node+0x5b/0x330 [ 135.200016][ T5332] ? ref_tracker_alloc+0x158/0x560 [ 135.205500][ T5332] kmalloc_trace+0x26/0x60 [ 135.209926][ T5332] ref_tracker_alloc+0x158/0x560 [ 135.214869][ T5332] ? ref_tracker_free+0x6b0/0x6b0 [ 135.219899][ T5332] ? dst_alloc+0x14a/0x1f0 [ 135.224335][ T5332] dst_init+0xe4/0x520 [ 135.228411][ T5332] dst_alloc+0x16f/0x1f0 [ 135.232660][ T5332] rt_dst_alloc+0x55/0x430 [ 135.237080][ T5332] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 135.243107][ T5332] ip_route_output_key_hash+0x18f/0x340 [ 135.248662][ T5332] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 135.254951][ T5332] dccp_v4_connect+0x7e1/0x1730 [ 135.259850][ T5332] __inet_stream_connect+0x69e/0xed0 [ 135.265145][ T5332] ? inet_listen+0x640/0x640 [ 135.269743][ T5332] ? mark_held_locks+0x9f/0xe0 [ 135.274509][ T5332] ? __local_bh_enable_ip+0xa4/0x130 [ 135.279799][ T5332] inet_stream_connect+0x57/0xa0 [ 135.284762][ T5332] ? __inet_stream_connect+0xed0/0xed0 [ 135.290281][ T5332] __sys_connect_file+0x153/0x1a0 [ 135.295342][ T5332] io_connect+0x3cc/0x720 [ 135.299723][ T5332] ? io_connect_prep+0x250/0x250 [ 135.304692][ T5332] ? receive_fd+0x110/0x110 [ 135.309202][ T5332] ? rcu_read_lock_sched_held+0x3e/0x70 [ 135.314753][ T5332] ? io_connect_prep+0x250/0x250 [ 135.319717][ T5332] io_issue_sqe+0x695/0x1250 [ 135.324341][ T5332] io_submit_sqes+0x96c/0x1e90 [ 135.329120][ T5332] __do_sys_io_uring_enter+0x103d/0x24e0 [ 135.334770][ T5332] ? io_submit_sqes+0x1e90/0x1e90 [ 135.339810][ T5332] ? ptrace_notify+0xfe/0x140 [ 135.344575][ T5332] ? lock_downgrade+0x6e0/0x6e0 [ 135.349450][ T5332] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.354691][ T5332] ? lockdep_hardirqs_on+0x7d/0x100 [ 135.359890][ T5332] ? _raw_spin_unlock_irq+0x2e/0x50 [ 135.365103][ T5332] ? ptrace_notify+0xfe/0x140 [ 135.369810][ T5332] do_syscall_64+0x39/0xb0 [ 135.374238][ T5332] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.380131][ T5332] RIP: 0033:0x7f607b0de549 [ 135.384544][ T5332] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 135.404169][ T5332] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 135.412624][ T5332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 135.420703][ T5332] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 135.428689][ T5332] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5332] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5332] close(3) = 0 [pid 5332] close(4) = 0 [pid 5332] close(5) = 0 [pid 5332] close(6) = 0 [pid 5332] close(7) = 0 [pid 5332] close(8) = -1 EBADF (Bad file descriptor) [pid 5332] close(9) = -1 EBADF (Bad file descriptor) [pid 5332] close(10) = -1 EBADF (Bad file descriptor) [pid 5332] close(11) = -1 EBADF (Bad file descriptor) [pid 5332] close(12) = -1 EBADF (Bad file descriptor) [pid 5332] close(13) = -1 EBADF (Bad file descriptor) [pid 5332] close(14) = -1 EBADF (Bad file descriptor) [pid 5332] close(15) = -1 EBADF (Bad file descriptor) [pid 5332] close(16) = -1 EBADF (Bad file descriptor) [pid 5332] close(17) = -1 EBADF (Bad file descriptor) [pid 5332] close(18) = -1 EBADF (Bad file descriptor) [pid 5332] close(19) = -1 EBADF (Bad file descriptor) [pid 5332] close(20) = -1 EBADF (Bad file descriptor) [pid 5332] close(21) = -1 EBADF (Bad file descriptor) [pid 5332] close(22) = -1 EBADF (Bad file descriptor) [pid 5332] close(23) = -1 EBADF (Bad file descriptor) [pid 5332] close(24) = -1 EBADF (Bad file descriptor) [pid 5332] close(25) = -1 EBADF (Bad file descriptor) [pid 5332] close(26) = -1 EBADF (Bad file descriptor) [pid 5332] close(27) = -1 EBADF (Bad file descriptor) [pid 5332] close(28) = -1 EBADF (Bad file descriptor) [pid 5332] close(29) = -1 EBADF (Bad file descriptor) [pid 5332] exit_group(0) = ? [pid 5332] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=231, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 232 ./strace-static-x86_64: Process 5333 attached [pid 5333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5333] setpgid(0, 0) = 0 [pid 5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5333] write(3, "1000", 4) = 4 [pid 5333] close(3) = 0 [pid 5333] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5333] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5333] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5333] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5333] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5333] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5333] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5333] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5333] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5333] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5333] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5333] write(7, "5", 1) = 1 [ 135.436671][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 135.444688][ T5332] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 135.452692][ T5332] [ 135.489161][ T5333] FAULT_INJECTION: forcing a failure. [ 135.489161][ T5333] name failslab, interval 1, probability 0, space 0, times 0 [ 135.501988][ T5333] CPU: 0 PID: 5333 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 135.512003][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 135.522155][ T5333] Call Trace: [ 135.525440][ T5333] [ 135.528370][ T5333] dump_stack_lvl+0xd1/0x138 [ 135.532970][ T5333] should_fail_ex.cold+0x5/0xa [ 135.537796][ T5333] ? io_issue_sqe+0x695/0x1250 [ 135.542616][ T5333] should_failslab+0x9/0x20 [ 135.547127][ T5333] __kmem_cache_alloc_node+0x5b/0x330 [ 135.552586][ T5333] ? ref_tracker_alloc+0x158/0x560 [ 135.557703][ T5333] kmalloc_trace+0x26/0x60 [ 135.562138][ T5333] ref_tracker_alloc+0x158/0x560 [ 135.567109][ T5333] ? ref_tracker_free+0x6b0/0x6b0 [ 135.572155][ T5333] ? dst_alloc+0x14a/0x1f0 [ 135.576616][ T5333] dst_init+0xe4/0x520 [ 135.580713][ T5333] dst_alloc+0x16f/0x1f0 [ 135.584977][ T5333] rt_dst_alloc+0x55/0x430 [ 135.589438][ T5333] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 135.595477][ T5333] ip_route_output_key_hash+0x18f/0x340 [ 135.601059][ T5333] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 135.607352][ T5333] dccp_v4_connect+0x7e1/0x1730 [ 135.612250][ T5333] __inet_stream_connect+0x69e/0xed0 [ 135.617574][ T5333] ? inet_listen+0x640/0x640 [ 135.622196][ T5333] ? mark_held_locks+0x9f/0xe0 [ 135.626980][ T5333] ? __local_bh_enable_ip+0xa4/0x130 [ 135.632289][ T5333] inet_stream_connect+0x57/0xa0 [ 135.637254][ T5333] ? __inet_stream_connect+0xed0/0xed0 [ 135.642748][ T5333] __sys_connect_file+0x153/0x1a0 [ 135.647792][ T5333] io_connect+0x3cc/0x720 [ 135.652153][ T5333] ? io_connect_prep+0x250/0x250 [ 135.657116][ T5333] ? receive_fd+0x110/0x110 [ 135.661653][ T5333] ? rcu_read_lock_sched_held+0x3e/0x70 [ 135.667226][ T5333] ? io_connect_prep+0x250/0x250 [ 135.672194][ T5333] io_issue_sqe+0x695/0x1250 [ 135.676814][ T5333] io_submit_sqes+0x96c/0x1e90 [ 135.681621][ T5333] __do_sys_io_uring_enter+0x103d/0x24e0 [ 135.687286][ T5333] ? io_submit_sqes+0x1e90/0x1e90 [ 135.692336][ T5333] ? ptrace_notify+0xfe/0x140 [ 135.697047][ T5333] ? lock_downgrade+0x6e0/0x6e0 [ 135.702017][ T5333] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.707239][ T5333] ? lockdep_hardirqs_on+0x7d/0x100 [ 135.712453][ T5333] ? _raw_spin_unlock_irq+0x2e/0x50 [ 135.717767][ T5333] ? ptrace_notify+0xfe/0x140 [ 135.722476][ T5333] do_syscall_64+0x39/0xb0 [ 135.726941][ T5333] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.732852][ T5333] RIP: 0033:0x7f607b0de549 [ 135.737279][ T5333] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 135.756905][ T5333] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 135.765338][ T5333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 135.773325][ T5333] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 135.781308][ T5333] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5333] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5333] close(3) = 0 [pid 5333] close(4) = 0 [pid 5333] close(5) = 0 [pid 5333] close(6) = 0 [pid 5333] close(7) = 0 [pid 5333] close(8) = -1 EBADF (Bad file descriptor) [pid 5333] close(9) = -1 EBADF (Bad file descriptor) [pid 5333] close(10) = -1 EBADF (Bad file descriptor) [pid 5333] close(11) = -1 EBADF (Bad file descriptor) [pid 5333] close(12) = -1 EBADF (Bad file descriptor) [pid 5333] close(13) = -1 EBADF (Bad file descriptor) [pid 5333] close(14) = -1 EBADF (Bad file descriptor) [pid 5333] close(15) = -1 EBADF (Bad file descriptor) [pid 5333] close(16) = -1 EBADF (Bad file descriptor) [pid 5333] close(17) = -1 EBADF (Bad file descriptor) [pid 5333] close(18) = -1 EBADF (Bad file descriptor) [pid 5333] close(19) = -1 EBADF (Bad file descriptor) [pid 5333] close(20) = -1 EBADF (Bad file descriptor) [pid 5333] close(21) = -1 EBADF (Bad file descriptor) [pid 5333] close(22) = -1 EBADF (Bad file descriptor) [pid 5333] close(23) = -1 EBADF (Bad file descriptor) [pid 5333] close(24) = -1 EBADF (Bad file descriptor) [pid 5333] close(25) = -1 EBADF (Bad file descriptor) [pid 5333] close(26) = -1 EBADF (Bad file descriptor) [pid 5333] close(27) = -1 EBADF (Bad file descriptor) [pid 5333] close(28) = -1 EBADF (Bad file descriptor) [pid 5333] close(29) = -1 EBADF (Bad file descriptor) [pid 5333] exit_group(0) = ? [pid 5333] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=232, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 233 ./strace-static-x86_64: Process 5334 attached [pid 5334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5334] setpgid(0, 0) = 0 [pid 5334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5334] write(3, "1000", 4) = 4 [pid 5334] close(3) = 0 [pid 5334] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5334] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5334] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5334] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5334] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5334] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5334] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5334] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5334] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 135.790073][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 135.798059][ T5333] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 135.806075][ T5333] [pid 5334] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5334] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5334] write(7, "5", 1) = 1 [ 135.853320][ T5334] FAULT_INJECTION: forcing a failure. [ 135.853320][ T5334] name failslab, interval 1, probability 0, space 0, times 0 [ 135.866618][ T5334] CPU: 0 PID: 5334 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 135.876557][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 135.886613][ T5334] Call Trace: [ 135.889888][ T5334] [ 135.892817][ T5334] dump_stack_lvl+0xd1/0x138 [ 135.897414][ T5334] should_fail_ex.cold+0x5/0xa [ 135.902191][ T5334] ? io_issue_sqe+0x695/0x1250 [ 135.906997][ T5334] should_failslab+0x9/0x20 [ 135.911514][ T5334] __kmem_cache_alloc_node+0x5b/0x330 [ 135.916899][ T5334] ? ref_tracker_alloc+0x158/0x560 [ 135.922136][ T5334] kmalloc_trace+0x26/0x60 [ 135.926561][ T5334] ref_tracker_alloc+0x158/0x560 [ 135.931507][ T5334] ? __lock_acquire+0xbc3/0x56d0 [ 135.936444][ T5334] ? ref_tracker_free+0x6b0/0x6b0 [ 135.941497][ T5334] dst_init+0xe4/0x520 [ 135.945570][ T5334] dst_alloc+0x16f/0x1f0 [ 135.949815][ T5334] rt_dst_alloc+0x55/0x430 [ 135.954235][ T5334] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 135.960227][ T5334] ip_route_output_key_hash+0x18f/0x340 [ 135.965779][ T5334] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 135.972043][ T5334] dccp_v4_connect+0x7e1/0x1730 [ 135.977024][ T5334] __inet_stream_connect+0x69e/0xed0 [ 135.982358][ T5334] ? inet_listen+0x640/0x640 [ 135.986973][ T5334] ? mark_held_locks+0x9f/0xe0 [ 135.991762][ T5334] ? __local_bh_enable_ip+0xa4/0x130 [ 135.997069][ T5334] inet_stream_connect+0x57/0xa0 [ 136.002043][ T5334] ? __inet_stream_connect+0xed0/0xed0 [ 136.007516][ T5334] __sys_connect_file+0x153/0x1a0 [ 136.012557][ T5334] io_connect+0x3cc/0x720 [ 136.016946][ T5334] ? io_connect_prep+0x250/0x250 [ 136.021915][ T5334] ? receive_fd+0x110/0x110 [ 136.026440][ T5334] ? rcu_read_lock_sched_held+0x3e/0x70 [ 136.031987][ T5334] ? io_connect_prep+0x250/0x250 [ 136.036935][ T5334] io_issue_sqe+0x695/0x1250 [ 136.041535][ T5334] io_submit_sqes+0x96c/0x1e90 [ 136.046314][ T5334] __do_sys_io_uring_enter+0x103d/0x24e0 [ 136.051955][ T5334] ? io_submit_sqes+0x1e90/0x1e90 [ 136.056991][ T5334] ? ptrace_notify+0xfe/0x140 [ 136.061664][ T5334] ? lock_downgrade+0x6e0/0x6e0 [ 136.066537][ T5334] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.071820][ T5334] ? lockdep_hardirqs_on+0x7d/0x100 [ 136.077018][ T5334] ? _raw_spin_unlock_irq+0x2e/0x50 [ 136.082231][ T5334] ? ptrace_notify+0xfe/0x140 [ 136.087019][ T5334] do_syscall_64+0x39/0xb0 [ 136.091442][ T5334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.097338][ T5334] RIP: 0033:0x7f607b0de549 [ 136.101772][ T5334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 136.121408][ T5334] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 136.129825][ T5334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 136.137800][ T5334] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 136.145774][ T5334] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5334] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5334] close(3) = 0 [pid 5334] close(4) = 0 [pid 5334] close(5) = 0 [pid 5334] close(6) = 0 [pid 5334] close(7) = 0 [pid 5334] close(8) = -1 EBADF (Bad file descriptor) [pid 5334] close(9) = -1 EBADF (Bad file descriptor) [pid 5334] close(10) = -1 EBADF (Bad file descriptor) [pid 5334] close(11) = -1 EBADF (Bad file descriptor) [pid 5334] close(12) = -1 EBADF (Bad file descriptor) [pid 5334] close(13) = -1 EBADF (Bad file descriptor) [pid 5334] close(14) = -1 EBADF (Bad file descriptor) [pid 5334] close(15) = -1 EBADF (Bad file descriptor) [pid 5334] close(16) = -1 EBADF (Bad file descriptor) [pid 5334] close(17) = -1 EBADF (Bad file descriptor) [pid 5334] close(18) = -1 EBADF (Bad file descriptor) [pid 5334] close(19) = -1 EBADF (Bad file descriptor) [pid 5334] close(20) = -1 EBADF (Bad file descriptor) [pid 5334] close(21) = -1 EBADF (Bad file descriptor) [pid 5334] close(22) = -1 EBADF (Bad file descriptor) [pid 5334] close(23) = -1 EBADF (Bad file descriptor) [pid 5334] close(24) = -1 EBADF (Bad file descriptor) [pid 5334] close(25) = -1 EBADF (Bad file descriptor) [pid 5334] close(26) = -1 EBADF (Bad file descriptor) [pid 5334] close(27) = -1 EBADF (Bad file descriptor) [pid 5334] close(28) = -1 EBADF (Bad file descriptor) [pid 5334] close(29) = -1 EBADF (Bad file descriptor) [pid 5334] exit_group(0) = ? [pid 5334] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=233, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 234 ./strace-static-x86_64: Process 5335 attached [pid 5335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5335] setpgid(0, 0) = 0 [pid 5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5335] write(3, "1000", 4) = 4 [pid 5335] close(3) = 0 [pid 5335] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5335] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5335] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5335] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5335] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5335] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5335] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5335] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5335] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5335] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5335] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5335] write(7, "5", 1) = 1 [ 136.153760][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 136.161742][ T5334] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 136.169822][ T5334] [ 136.213681][ T5335] FAULT_INJECTION: forcing a failure. [ 136.213681][ T5335] name failslab, interval 1, probability 0, space 0, times 0 [ 136.227302][ T5335] CPU: 0 PID: 5335 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 136.237271][ T5335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 136.247361][ T5335] Call Trace: [ 136.250655][ T5335] [ 136.253585][ T5335] dump_stack_lvl+0xd1/0x138 [ 136.258188][ T5335] should_fail_ex.cold+0x5/0xa [ 136.262971][ T5335] ? io_issue_sqe+0x695/0x1250 [ 136.267776][ T5335] should_failslab+0x9/0x20 [ 136.272287][ T5335] __kmem_cache_alloc_node+0x5b/0x330 [ 136.277746][ T5335] ? ref_tracker_alloc+0x158/0x560 [ 136.282873][ T5335] kmalloc_trace+0x26/0x60 [ 136.287314][ T5335] ref_tracker_alloc+0x158/0x560 [ 136.292294][ T5335] ? __lock_acquire+0xbc3/0x56d0 [ 136.297264][ T5335] ? ref_tracker_free+0x6b0/0x6b0 [ 136.302337][ T5335] dst_init+0xe4/0x520 [ 136.306419][ T5335] dst_alloc+0x16f/0x1f0 [ 136.310704][ T5335] rt_dst_alloc+0x55/0x430 [ 136.315122][ T5335] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 136.321205][ T5335] ip_route_output_key_hash+0x18f/0x340 [ 136.326758][ T5335] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 136.333250][ T5335] dccp_v4_connect+0x7e1/0x1730 [ 136.338150][ T5335] __inet_stream_connect+0x69e/0xed0 [ 136.343479][ T5335] ? inet_listen+0x640/0x640 [ 136.348109][ T5335] ? mark_held_locks+0x9f/0xe0 [ 136.352875][ T5335] ? __local_bh_enable_ip+0xa4/0x130 [ 136.358167][ T5335] inet_stream_connect+0x57/0xa0 [ 136.363127][ T5335] ? __inet_stream_connect+0xed0/0xed0 [ 136.368624][ T5335] __sys_connect_file+0x153/0x1a0 [ 136.373651][ T5335] io_connect+0x3cc/0x720 [ 136.377990][ T5335] ? io_connect_prep+0x250/0x250 [ 136.382939][ T5335] ? receive_fd+0x110/0x110 [ 136.387485][ T5335] ? rcu_read_lock_sched_held+0x3e/0x70 [ 136.393073][ T5335] ? io_connect_prep+0x250/0x250 [ 136.398050][ T5335] io_issue_sqe+0x695/0x1250 [ 136.402651][ T5335] io_submit_sqes+0x96c/0x1e90 [ 136.407454][ T5335] __do_sys_io_uring_enter+0x103d/0x24e0 [ 136.413160][ T5335] ? io_submit_sqes+0x1e90/0x1e90 [ 136.418227][ T5335] ? ptrace_notify+0xfe/0x140 [ 136.422932][ T5335] ? lock_downgrade+0x6e0/0x6e0 [ 136.427823][ T5335] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.433140][ T5335] ? lockdep_hardirqs_on+0x7d/0x100 [ 136.438345][ T5335] ? _raw_spin_unlock_irq+0x2e/0x50 [ 136.443558][ T5335] ? ptrace_notify+0xfe/0x140 [ 136.448290][ T5335] do_syscall_64+0x39/0xb0 [ 136.452714][ T5335] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.458618][ T5335] RIP: 0033:0x7f607b0de549 [ 136.463035][ T5335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 136.482646][ T5335] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 136.491080][ T5335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 136.499070][ T5335] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 136.507072][ T5335] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5335] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5335] close(3) = 0 [pid 5335] close(4) = 0 [pid 5335] close(5) = 0 [pid 5335] close(6) = 0 [pid 5335] close(7) = 0 [pid 5335] close(8) = -1 EBADF (Bad file descriptor) [pid 5335] close(9) = -1 EBADF (Bad file descriptor) [pid 5335] close(10) = -1 EBADF (Bad file descriptor) [pid 5335] close(11) = -1 EBADF (Bad file descriptor) [pid 5335] close(12) = -1 EBADF (Bad file descriptor) [pid 5335] close(13) = -1 EBADF (Bad file descriptor) [pid 5335] close(14) = -1 EBADF (Bad file descriptor) [pid 5335] close(15) = -1 EBADF (Bad file descriptor) [pid 5335] close(16) = -1 EBADF (Bad file descriptor) [pid 5335] close(17) = -1 EBADF (Bad file descriptor) [pid 5335] close(18) = -1 EBADF (Bad file descriptor) [pid 5335] close(19) = -1 EBADF (Bad file descriptor) [pid 5335] close(20) = -1 EBADF (Bad file descriptor) [pid 5335] close(21) = -1 EBADF (Bad file descriptor) [pid 5335] close(22) = -1 EBADF (Bad file descriptor) [pid 5335] close(23) = -1 EBADF (Bad file descriptor) [pid 5335] close(24) = -1 EBADF (Bad file descriptor) [pid 5335] close(25) = -1 EBADF (Bad file descriptor) [pid 5335] close(26) = -1 EBADF (Bad file descriptor) [pid 5335] close(27) = -1 EBADF (Bad file descriptor) [pid 5335] close(28) = -1 EBADF (Bad file descriptor) [pid 5335] close(29) = -1 EBADF (Bad file descriptor) [pid 5335] exit_group(0) = ? [pid 5335] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=234, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 235 ./strace-static-x86_64: Process 5336 attached [pid 5336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 136.515146][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 136.523137][ T5335] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 136.531150][ T5335] [pid 5336] setpgid(0, 0) = 0 [pid 5336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5336] write(3, "1000", 4) = 4 [pid 5336] close(3) = 0 [pid 5336] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5336] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5336] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5336] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5336] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5336] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5336] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5336] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5336] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5336] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5336] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5336] write(7, "5", 1) = 1 [ 136.590999][ T5336] FAULT_INJECTION: forcing a failure. [ 136.590999][ T5336] name failslab, interval 1, probability 0, space 0, times 0 [ 136.603846][ T5336] CPU: 0 PID: 5336 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 136.613788][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 136.623842][ T5336] Call Trace: [ 136.627116][ T5336] [ 136.630044][ T5336] dump_stack_lvl+0xd1/0x138 [ 136.634638][ T5336] should_fail_ex.cold+0x5/0xa [ 136.639407][ T5336] ? io_issue_sqe+0x695/0x1250 [ 136.644171][ T5336] should_failslab+0x9/0x20 [ 136.648708][ T5336] __kmem_cache_alloc_node+0x5b/0x330 [ 136.654100][ T5336] ? ref_tracker_alloc+0x158/0x560 [ 136.659252][ T5336] kmalloc_trace+0x26/0x60 [ 136.663698][ T5336] ref_tracker_alloc+0x158/0x560 [ 136.668663][ T5336] ? __lock_acquire+0xbc3/0x56d0 [ 136.674054][ T5336] ? ref_tracker_free+0x6b0/0x6b0 [ 136.679132][ T5336] dst_init+0xe4/0x520 [ 136.683228][ T5336] dst_alloc+0x16f/0x1f0 [ 136.687497][ T5336] rt_dst_alloc+0x55/0x430 [ 136.691937][ T5336] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 136.697956][ T5336] ip_route_output_key_hash+0x18f/0x340 [ 136.703532][ T5336] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 136.717030][ T5336] dccp_v4_connect+0x7e1/0x1730 [ 136.721933][ T5336] __inet_stream_connect+0x69e/0xed0 [ 136.727256][ T5336] ? inet_listen+0x640/0x640 [ 136.731875][ T5336] ? mark_held_locks+0x9f/0xe0 [ 136.736664][ T5336] ? __local_bh_enable_ip+0xa4/0x130 [ 136.741974][ T5336] inet_stream_connect+0x57/0xa0 [ 136.746940][ T5336] ? __inet_stream_connect+0xed0/0xed0 [ 136.752430][ T5336] __sys_connect_file+0x153/0x1a0 [ 136.757480][ T5336] io_connect+0x3cc/0x720 [ 136.761840][ T5336] ? io_connect_prep+0x250/0x250 [ 136.766806][ T5336] ? receive_fd+0x110/0x110 [ 136.771345][ T5336] ? rcu_read_lock_sched_held+0x3e/0x70 [ 136.776914][ T5336] ? io_connect_prep+0x250/0x250 [ 136.781883][ T5336] io_issue_sqe+0x695/0x1250 [ 136.786504][ T5336] io_submit_sqes+0x96c/0x1e90 [ 136.791315][ T5336] __do_sys_io_uring_enter+0x103d/0x24e0 [ 136.796987][ T5336] ? io_submit_sqes+0x1e90/0x1e90 [ 136.802041][ T5336] ? ptrace_notify+0xfe/0x140 [ 136.806736][ T5336] ? lock_downgrade+0x6e0/0x6e0 [ 136.811615][ T5336] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.816848][ T5336] ? lockdep_hardirqs_on+0x7d/0x100 [ 136.822068][ T5336] ? _raw_spin_unlock_irq+0x2e/0x50 [ 136.827292][ T5336] ? ptrace_notify+0xfe/0x140 [ 136.831995][ T5336] do_syscall_64+0x39/0xb0 [ 136.836440][ T5336] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.842354][ T5336] RIP: 0033:0x7f607b0de549 [ 136.847477][ T5336] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 136.867107][ T5336] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 136.875539][ T5336] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 136.883527][ T5336] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5336] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5336] close(3) = 0 [pid 5336] close(4) = 0 [pid 5336] close(5) = 0 [pid 5336] close(6) = 0 [pid 5336] close(7) = 0 [pid 5336] close(8) = -1 EBADF (Bad file descriptor) [pid 5336] close(9) = -1 EBADF (Bad file descriptor) [pid 5336] close(10) = -1 EBADF (Bad file descriptor) [pid 5336] close(11) = -1 EBADF (Bad file descriptor) [pid 5336] close(12) = -1 EBADF (Bad file descriptor) [pid 5336] close(13) = -1 EBADF (Bad file descriptor) [pid 5336] close(14) = -1 EBADF (Bad file descriptor) [pid 5336] close(15) = -1 EBADF (Bad file descriptor) [pid 5336] close(16) = -1 EBADF (Bad file descriptor) [pid 5336] close(17) = -1 EBADF (Bad file descriptor) [pid 5336] close(18) = -1 EBADF (Bad file descriptor) [pid 5336] close(19) = -1 EBADF (Bad file descriptor) [pid 5336] close(20) = -1 EBADF (Bad file descriptor) [pid 5336] close(21) = -1 EBADF (Bad file descriptor) [pid 5336] close(22) = -1 EBADF (Bad file descriptor) [pid 5336] close(23) = -1 EBADF (Bad file descriptor) [pid 5336] close(24) = -1 EBADF (Bad file descriptor) [pid 5336] close(25) = -1 EBADF (Bad file descriptor) [pid 5336] close(26) = -1 EBADF (Bad file descriptor) [pid 5336] close(27) = -1 EBADF (Bad file descriptor) [pid 5336] close(28) = -1 EBADF (Bad file descriptor) [pid 5336] close(29) = -1 EBADF (Bad file descriptor) [pid 5336] exit_group(0) = ? [pid 5336] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=235, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 236 ./strace-static-x86_64: Process 5337 attached [pid 5337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5337] setpgid(0, 0) = 0 [pid 5337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5337] write(3, "1000", 4) = 4 [pid 5337] close(3) = 0 [pid 5337] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5337] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5337] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5337] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5337] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5337] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5337] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5337] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5337] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5337] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5337] write(7, "5", 1) = 1 [ 136.891526][ T5336] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 136.899508][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 136.907494][ T5336] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 136.915587][ T5336] [ 136.960222][ T5337] FAULT_INJECTION: forcing a failure. [ 136.960222][ T5337] name failslab, interval 1, probability 0, space 0, times 0 [ 136.972914][ T5337] CPU: 0 PID: 5337 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 136.982814][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 136.992882][ T5337] Call Trace: [ 136.996160][ T5337] [ 136.999087][ T5337] dump_stack_lvl+0xd1/0x138 [ 137.003688][ T5337] should_fail_ex.cold+0x5/0xa [ 137.008488][ T5337] ? __inet_hash_connect+0x95e/0x1ba0 [ 137.013881][ T5337] should_failslab+0x9/0x20 [ 137.018399][ T5337] kmem_cache_alloc+0x5a/0x320 [ 137.023199][ T5337] __inet_hash_connect+0x95e/0x1ba0 [ 137.028403][ T5337] ? __inet_lookup_listener+0xbf0/0xbf0 [ 137.033969][ T5337] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 137.040341][ T5337] dccp_v4_connect+0xb82/0x1730 [ 137.045244][ T5337] __inet_stream_connect+0x69e/0xed0 [ 137.050569][ T5337] ? inet_listen+0x640/0x640 [ 137.055195][ T5337] ? mark_held_locks+0x9f/0xe0 [ 137.059982][ T5337] ? __local_bh_enable_ip+0xa4/0x130 [ 137.065291][ T5337] inet_stream_connect+0x57/0xa0 [ 137.070264][ T5337] ? __inet_stream_connect+0xed0/0xed0 [ 137.075755][ T5337] __sys_connect_file+0x153/0x1a0 [ 137.080802][ T5337] io_connect+0x3cc/0x720 [ 137.085168][ T5337] ? io_connect_prep+0x250/0x250 [ 137.090135][ T5337] ? receive_fd+0x110/0x110 [ 137.094676][ T5337] ? rcu_read_lock_sched_held+0x3e/0x70 [ 137.100243][ T5337] ? io_connect_prep+0x250/0x250 [ 137.105215][ T5337] io_issue_sqe+0x695/0x1250 [ 137.109847][ T5337] io_submit_sqes+0x96c/0x1e90 [ 137.114658][ T5337] __do_sys_io_uring_enter+0x103d/0x24e0 [ 137.120328][ T5337] ? io_submit_sqes+0x1e90/0x1e90 [ 137.125382][ T5337] ? ptrace_notify+0xfe/0x140 [ 137.130077][ T5337] ? lock_downgrade+0x6e0/0x6e0 [ 137.134955][ T5337] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.140180][ T5337] ? lockdep_hardirqs_on+0x7d/0x100 [ 137.145397][ T5337] ? _raw_spin_unlock_irq+0x2e/0x50 [ 137.150704][ T5337] ? ptrace_notify+0xfe/0x140 [ 137.155410][ T5337] do_syscall_64+0x39/0xb0 [ 137.159947][ T5337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.165951][ T5337] RIP: 0033:0x7f607b0de549 [ 137.170381][ T5337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 137.190008][ T5337] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 137.198442][ T5337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5337] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5337] close(3) = 0 [pid 5337] close(4) = 0 [pid 5337] close(5) = 0 [pid 5337] close(6) = 0 [pid 5337] close(7) = 0 [pid 5337] close(8) = -1 EBADF (Bad file descriptor) [pid 5337] close(9) = -1 EBADF (Bad file descriptor) [pid 5337] close(10) = -1 EBADF (Bad file descriptor) [pid 5337] close(11) = -1 EBADF (Bad file descriptor) [pid 5337] close(12) = -1 EBADF (Bad file descriptor) [pid 5337] close(13) = -1 EBADF (Bad file descriptor) [pid 5337] close(14) = -1 EBADF (Bad file descriptor) [pid 5337] close(15) = -1 EBADF (Bad file descriptor) [pid 5337] close(16) = -1 EBADF (Bad file descriptor) [pid 5337] close(17) = -1 EBADF (Bad file descriptor) [pid 5337] close(18) = -1 EBADF (Bad file descriptor) [pid 5337] close(19) = -1 EBADF (Bad file descriptor) [pid 5337] close(20) = -1 EBADF (Bad file descriptor) [pid 5337] close(21) = -1 EBADF (Bad file descriptor) [pid 5337] close(22) = -1 EBADF (Bad file descriptor) [pid 5337] close(23) = -1 EBADF (Bad file descriptor) [pid 5337] close(24) = -1 EBADF (Bad file descriptor) [pid 5337] close(25) = -1 EBADF (Bad file descriptor) [pid 5337] close(26) = -1 EBADF (Bad file descriptor) [pid 5337] close(27) = -1 EBADF (Bad file descriptor) [pid 5337] close(28) = -1 EBADF (Bad file descriptor) [pid 5337] close(29) = -1 EBADF (Bad file descriptor) [pid 5337] exit_group(0) = ? [ 137.206429][ T5337] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 137.214417][ T5337] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 137.222416][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 137.230410][ T5337] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 137.238429][ T5337] [pid 5337] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=236, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 237 ./strace-static-x86_64: Process 5338 attached [pid 5338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5338] setpgid(0, 0) = 0 [pid 5338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5338] write(3, "1000", 4) = 4 [pid 5338] close(3) = 0 [pid 5338] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5338] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5338] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5338] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5338] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5338] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5338] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5338] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5338] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5338] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5338] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5338] write(7, "5", 1) = 1 [ 137.313316][ T5338] FAULT_INJECTION: forcing a failure. [ 137.313316][ T5338] name failslab, interval 1, probability 0, space 0, times 0 [ 137.326282][ T5338] CPU: 1 PID: 5338 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 137.336220][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 137.346290][ T5338] Call Trace: [ 137.349583][ T5338] [ 137.352548][ T5338] dump_stack_lvl+0xd1/0x138 [ 137.357179][ T5338] should_fail_ex.cold+0x5/0xa [ 137.361962][ T5338] ? io_issue_sqe+0x695/0x1250 [ 137.366933][ T5338] should_failslab+0x9/0x20 [ 137.371441][ T5338] __kmem_cache_alloc_node+0x5b/0x330 [ 137.376812][ T5338] ? ref_tracker_alloc+0x158/0x560 [ 137.381950][ T5338] kmalloc_trace+0x26/0x60 [ 137.386389][ T5338] ref_tracker_alloc+0x158/0x560 [ 137.391331][ T5338] ? __lock_acquire+0xbc3/0x56d0 [ 137.396273][ T5338] ? ref_tracker_free+0x6b0/0x6b0 [ 137.401350][ T5338] dst_init+0xe4/0x520 [ 137.405451][ T5338] dst_alloc+0x16f/0x1f0 [ 137.409706][ T5338] rt_dst_alloc+0x55/0x430 [ 137.414129][ T5338] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 137.420149][ T5338] ip_route_output_key_hash+0x18f/0x340 [ 137.425751][ T5338] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 137.432041][ T5338] dccp_v4_connect+0x7e1/0x1730 [ 137.436914][ T5338] __inet_stream_connect+0x69e/0xed0 [ 137.442215][ T5338] ? inet_listen+0x640/0x640 [ 137.446825][ T5338] ? mark_held_locks+0x9f/0xe0 [ 137.451615][ T5338] ? __local_bh_enable_ip+0xa4/0x130 [ 137.456995][ T5338] inet_stream_connect+0x57/0xa0 [ 137.461960][ T5338] ? __inet_stream_connect+0xed0/0xed0 [ 137.467460][ T5338] __sys_connect_file+0x153/0x1a0 [ 137.472526][ T5338] io_connect+0x3cc/0x720 [ 137.476913][ T5338] ? io_connect_prep+0x250/0x250 [ 137.481898][ T5338] ? receive_fd+0x110/0x110 [ 137.486437][ T5338] ? rcu_read_lock_sched_held+0x3e/0x70 [ 137.492000][ T5338] ? io_connect_prep+0x250/0x250 [ 137.496957][ T5338] io_issue_sqe+0x695/0x1250 [ 137.501580][ T5338] io_submit_sqes+0x96c/0x1e90 [ 137.506399][ T5338] __do_sys_io_uring_enter+0x103d/0x24e0 [ 137.512050][ T5338] ? io_submit_sqes+0x1e90/0x1e90 [ 137.517104][ T5338] ? ptrace_notify+0xfe/0x140 [ 137.521809][ T5338] ? lock_downgrade+0x6e0/0x6e0 [ 137.526710][ T5338] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.531935][ T5338] ? lockdep_hardirqs_on+0x7d/0x100 [ 137.537147][ T5338] ? _raw_spin_unlock_irq+0x2e/0x50 [ 137.542351][ T5338] ? ptrace_notify+0xfe/0x140 [ 137.547035][ T5338] do_syscall_64+0x39/0xb0 [ 137.551469][ T5338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.557414][ T5338] RIP: 0033:0x7f607b0de549 [ 137.561849][ T5338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 137.581568][ T5338] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 137.590023][ T5338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 137.598013][ T5338] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 137.606003][ T5338] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5338] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5338] close(3) = 0 [pid 5338] close(4) = 0 [pid 5338] close(5) = 0 [pid 5338] close(6) = 0 [pid 5338] close(7) = 0 [pid 5338] close(8) = -1 EBADF (Bad file descriptor) [pid 5338] close(9) = -1 EBADF (Bad file descriptor) [pid 5338] close(10) = -1 EBADF (Bad file descriptor) [pid 5338] close(11) = -1 EBADF (Bad file descriptor) [pid 5338] close(12) = -1 EBADF (Bad file descriptor) [pid 5338] close(13) = -1 EBADF (Bad file descriptor) [pid 5338] close(14) = -1 EBADF (Bad file descriptor) [pid 5338] close(15) = -1 EBADF (Bad file descriptor) [pid 5338] close(16) = -1 EBADF (Bad file descriptor) [pid 5338] close(17) = -1 EBADF (Bad file descriptor) [pid 5338] close(18) = -1 EBADF (Bad file descriptor) [pid 5338] close(19) = -1 EBADF (Bad file descriptor) [pid 5338] close(20) = -1 EBADF (Bad file descriptor) [pid 5338] close(21) = -1 EBADF (Bad file descriptor) [pid 5338] close(22) = -1 EBADF (Bad file descriptor) [pid 5338] close(23) = -1 EBADF (Bad file descriptor) [pid 5338] close(24) = -1 EBADF (Bad file descriptor) [pid 5338] close(25) = -1 EBADF (Bad file descriptor) [pid 5338] close(26) = -1 EBADF (Bad file descriptor) [pid 5338] close(27) = -1 EBADF (Bad file descriptor) [pid 5338] close(28) = -1 EBADF (Bad file descriptor) [pid 5338] close(29) = -1 EBADF (Bad file descriptor) [pid 5338] exit_group(0) = ? [pid 5338] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=237, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 238 ./strace-static-x86_64: Process 5339 attached [pid 5339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5339] setpgid(0, 0) = 0 [pid 5339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5339] write(3, "1000", 4) = 4 [pid 5339] close(3) = 0 [pid 5339] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5339] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5339] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5339] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5339] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5339] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5339] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5339] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5339] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5339] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5339] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 137.614009][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 137.622016][ T5338] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 137.630025][ T5338] [pid 5339] write(7, "5", 1) = 1 [ 137.676287][ T5339] FAULT_INJECTION: forcing a failure. [ 137.676287][ T5339] name failslab, interval 1, probability 0, space 0, times 0 [ 137.689427][ T5339] CPU: 1 PID: 5339 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 137.699371][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 137.709439][ T5339] Call Trace: [ 137.712738][ T5339] [ 137.715679][ T5339] dump_stack_lvl+0xd1/0x138 [ 137.720289][ T5339] should_fail_ex.cold+0x5/0xa [ 137.725076][ T5339] ? io_issue_sqe+0x695/0x1250 [ 137.729869][ T5339] should_failslab+0x9/0x20 [ 137.734379][ T5339] __kmem_cache_alloc_node+0x5b/0x330 [ 137.739761][ T5339] ? ref_tracker_alloc+0x158/0x560 [ 137.744890][ T5339] kmalloc_trace+0x26/0x60 [ 137.749339][ T5339] ref_tracker_alloc+0x158/0x560 [ 137.754304][ T5339] ? __lock_acquire+0xbc3/0x56d0 [ 137.759358][ T5339] ? ref_tracker_free+0x6b0/0x6b0 [ 137.764440][ T5339] dst_init+0xe4/0x520 [ 137.768539][ T5339] dst_alloc+0x16f/0x1f0 [ 137.772815][ T5339] rt_dst_alloc+0x55/0x430 [ 137.777258][ T5339] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 137.783279][ T5339] ip_route_output_key_hash+0x18f/0x340 [ 137.788853][ T5339] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 137.795142][ T5339] dccp_v4_connect+0x7e1/0x1730 [ 137.800046][ T5339] __inet_stream_connect+0x69e/0xed0 [ 137.805373][ T5339] ? inet_listen+0x640/0x640 [ 137.809995][ T5339] ? mark_held_locks+0x9f/0xe0 [ 137.814845][ T5339] ? __local_bh_enable_ip+0xa4/0x130 [ 137.820155][ T5339] inet_stream_connect+0x57/0xa0 [ 137.825299][ T5339] ? __inet_stream_connect+0xed0/0xed0 [ 137.830787][ T5339] __sys_connect_file+0x153/0x1a0 [ 137.835858][ T5339] io_connect+0x3cc/0x720 [ 137.840236][ T5339] ? io_connect_prep+0x250/0x250 [ 137.845222][ T5339] ? receive_fd+0x110/0x110 [ 137.849770][ T5339] ? rcu_read_lock_sched_held+0x3e/0x70 [ 137.855336][ T5339] ? io_connect_prep+0x250/0x250 [ 137.860305][ T5339] io_issue_sqe+0x695/0x1250 [ 137.864927][ T5339] io_submit_sqes+0x96c/0x1e90 [ 137.869737][ T5339] __do_sys_io_uring_enter+0x103d/0x24e0 [ 137.875410][ T5339] ? io_submit_sqes+0x1e90/0x1e90 [ 137.880469][ T5339] ? ptrace_notify+0xfe/0x140 [ 137.885170][ T5339] ? lock_downgrade+0x6e0/0x6e0 [ 137.890049][ T5339] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.895275][ T5339] ? lockdep_hardirqs_on+0x7d/0x100 [ 137.900497][ T5339] ? _raw_spin_unlock_irq+0x2e/0x50 [ 137.905719][ T5339] ? ptrace_notify+0xfe/0x140 [ 137.910420][ T5339] do_syscall_64+0x39/0xb0 [ 137.914867][ T5339] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.920787][ T5339] RIP: 0033:0x7f607b0de549 [ 137.925216][ T5339] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 137.944845][ T5339] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 137.953281][ T5339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 137.961268][ T5339] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 137.969255][ T5339] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5339] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5339] close(3) = 0 [pid 5339] close(4) = 0 [pid 5339] close(5) = 0 [pid 5339] close(6) = 0 [pid 5339] close(7) = 0 [pid 5339] close(8) = -1 EBADF (Bad file descriptor) [pid 5339] close(9) = -1 EBADF (Bad file descriptor) [pid 5339] close(10) = -1 EBADF (Bad file descriptor) [pid 5339] close(11) = -1 EBADF (Bad file descriptor) [pid 5339] close(12) = -1 EBADF (Bad file descriptor) [pid 5339] close(13) = -1 EBADF (Bad file descriptor) [pid 5339] close(14) = -1 EBADF (Bad file descriptor) [pid 5339] close(15) = -1 EBADF (Bad file descriptor) [pid 5339] close(16) = -1 EBADF (Bad file descriptor) [pid 5339] close(17) = -1 EBADF (Bad file descriptor) [pid 5339] close(18) = -1 EBADF (Bad file descriptor) [pid 5339] close(19) = -1 EBADF (Bad file descriptor) [pid 5339] close(20) = -1 EBADF (Bad file descriptor) [pid 5339] close(21) = -1 EBADF (Bad file descriptor) [pid 5339] close(22) = -1 EBADF (Bad file descriptor) [pid 5339] close(23) = -1 EBADF (Bad file descriptor) [pid 5339] close(24) = -1 EBADF (Bad file descriptor) [pid 5339] close(25) = -1 EBADF (Bad file descriptor) [pid 5339] close(26) = -1 EBADF (Bad file descriptor) [pid 5339] close(27) = -1 EBADF (Bad file descriptor) [pid 5339] close(28) = -1 EBADF (Bad file descriptor) [pid 5339] close(29) = -1 EBADF (Bad file descriptor) [pid 5339] exit_group(0) = ? [pid 5339] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=238, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 239 ./strace-static-x86_64: Process 5340 attached [pid 5340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5340] setpgid(0, 0) = 0 [pid 5340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5340] write(3, "1000", 4) = 4 [pid 5340] close(3) = 0 [pid 5340] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5340] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5340] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5340] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5340] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5340] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 137.977239][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 137.985223][ T5339] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 137.993225][ T5339] [pid 5340] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5340] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5340] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5340] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5340] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5340] write(7, "5", 1) = 1 [ 138.045302][ T5340] FAULT_INJECTION: forcing a failure. [ 138.045302][ T5340] name failslab, interval 1, probability 0, space 0, times 0 [ 138.059134][ T5340] CPU: 1 PID: 5340 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 138.069074][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 138.079159][ T5340] Call Trace: [ 138.082459][ T5340] [ 138.085412][ T5340] dump_stack_lvl+0xd1/0x138 [ 138.090053][ T5340] should_fail_ex.cold+0x5/0xa [ 138.094852][ T5340] ? io_issue_sqe+0x695/0x1250 [ 138.099664][ T5340] should_failslab+0x9/0x20 [ 138.104211][ T5340] __kmem_cache_alloc_node+0x5b/0x330 [ 138.109627][ T5340] ? ref_tracker_alloc+0x158/0x560 [ 138.114794][ T5340] kmalloc_trace+0x26/0x60 [ 138.119259][ T5340] ref_tracker_alloc+0x158/0x560 [ 138.124247][ T5340] ? __lock_acquire+0xbc3/0x56d0 [ 138.129223][ T5340] ? ref_tracker_free+0x6b0/0x6b0 [ 138.134330][ T5340] dst_init+0xe4/0x520 [ 138.138446][ T5340] dst_alloc+0x16f/0x1f0 [ 138.142729][ T5340] rt_dst_alloc+0x55/0x430 [ 138.147184][ T5340] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 138.153245][ T5340] ip_route_output_key_hash+0x18f/0x340 [ 138.158854][ T5340] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 138.165168][ T5340] dccp_v4_connect+0x7e1/0x1730 [ 138.170098][ T5340] __inet_stream_connect+0x69e/0xed0 [ 138.175450][ T5340] ? inet_listen+0x640/0x640 [ 138.180095][ T5340] ? mark_held_locks+0x9f/0xe0 [ 138.184896][ T5340] ? __local_bh_enable_ip+0xa4/0x130 [ 138.190237][ T5340] inet_stream_connect+0x57/0xa0 [ 138.195235][ T5340] ? __inet_stream_connect+0xed0/0xed0 [ 138.200746][ T5340] __sys_connect_file+0x153/0x1a0 [ 138.206772][ T5340] io_connect+0x3cc/0x720 [ 138.211151][ T5340] ? io_connect_prep+0x250/0x250 [ 138.216141][ T5340] ? receive_fd+0x110/0x110 [ 138.220713][ T5340] ? rcu_read_lock_sched_held+0x3e/0x70 [ 138.226299][ T5340] ? io_connect_prep+0x250/0x250 [ 138.231292][ T5340] io_issue_sqe+0x695/0x1250 [ 138.235938][ T5340] io_submit_sqes+0x96c/0x1e90 [ 138.240774][ T5340] __do_sys_io_uring_enter+0x103d/0x24e0 [ 138.246469][ T5340] ? io_submit_sqes+0x1e90/0x1e90 [ 138.251544][ T5340] ? ptrace_notify+0xfe/0x140 [ 138.256268][ T5340] ? lock_downgrade+0x6e0/0x6e0 [ 138.261166][ T5340] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.266406][ T5340] ? lockdep_hardirqs_on+0x7d/0x100 [ 138.271640][ T5340] ? _raw_spin_unlock_irq+0x2e/0x50 [ 138.276896][ T5340] ? ptrace_notify+0xfe/0x140 [ 138.281634][ T5340] do_syscall_64+0x39/0xb0 [ 138.286110][ T5340] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.292183][ T5340] RIP: 0033:0x7f607b0de549 [ 138.296629][ T5340] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 138.316289][ T5340] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 138.324742][ T5340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 138.332759][ T5340] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5340] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5340] close(3) = 0 [pid 5340] close(4) = 0 [pid 5340] close(5) = 0 [pid 5340] close(6) = 0 [pid 5340] close(7) = 0 [pid 5340] close(8) = -1 EBADF (Bad file descriptor) [pid 5340] close(9) = -1 EBADF (Bad file descriptor) [pid 5340] close(10) = -1 EBADF (Bad file descriptor) [pid 5340] close(11) = -1 EBADF (Bad file descriptor) [pid 5340] close(12) = -1 EBADF (Bad file descriptor) [pid 5340] close(13) = -1 EBADF (Bad file descriptor) [ 138.340761][ T5340] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 138.348770][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 138.356771][ T5340] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 138.364802][ T5340] [pid 5340] close(14) = -1 EBADF (Bad file descriptor) [pid 5340] close(15) = -1 EBADF (Bad file descriptor) [pid 5340] close(16) = -1 EBADF (Bad file descriptor) [pid 5340] close(17) = -1 EBADF (Bad file descriptor) [pid 5340] close(18) = -1 EBADF (Bad file descriptor) [pid 5340] close(19) = -1 EBADF (Bad file descriptor) [pid 5340] close(20) = -1 EBADF (Bad file descriptor) [pid 5340] close(21) = -1 EBADF (Bad file descriptor) [pid 5340] close(22) = -1 EBADF (Bad file descriptor) [pid 5340] close(23) = -1 EBADF (Bad file descriptor) [pid 5340] close(24) = -1 EBADF (Bad file descriptor) [pid 5340] close(25) = -1 EBADF (Bad file descriptor) [pid 5340] close(26) = -1 EBADF (Bad file descriptor) [pid 5340] close(27) = -1 EBADF (Bad file descriptor) [pid 5340] close(28) = -1 EBADF (Bad file descriptor) [pid 5340] close(29) = -1 EBADF (Bad file descriptor) [pid 5340] exit_group(0) = ? [pid 5340] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=239, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 240 ./strace-static-x86_64: Process 5341 attached [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5341] setpgid(0, 0) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4) = 4 [pid 5341] close(3) = 0 [pid 5341] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5341] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5341] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5341] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5341] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5341] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5341] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5341] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5341] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5341] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5341] write(7, "5", 1) = 1 [ 138.447140][ T5341] FAULT_INJECTION: forcing a failure. [ 138.447140][ T5341] name failslab, interval 1, probability 0, space 0, times 0 [ 138.459863][ T5341] CPU: 1 PID: 5341 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 138.469788][ T5341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 138.479955][ T5341] Call Trace: [ 138.483254][ T5341] [ 138.486217][ T5341] dump_stack_lvl+0xd1/0x138 [ 138.490860][ T5341] should_fail_ex.cold+0x5/0xa [ 138.495662][ T5341] ? __inet_hash_connect+0x95e/0x1ba0 [ 138.501070][ T5341] should_failslab+0x9/0x20 [ 138.505617][ T5341] kmem_cache_alloc+0x5a/0x320 [ 138.510438][ T5341] __inet_hash_connect+0x95e/0x1ba0 [ 138.515681][ T5341] ? __inet_lookup_listener+0xbf0/0xbf0 [ 138.521273][ T5341] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 138.527663][ T5341] dccp_v4_connect+0xb82/0x1730 [ 138.532581][ T5341] __inet_stream_connect+0x69e/0xed0 [ 138.537923][ T5341] ? inet_listen+0x640/0x640 [ 138.542565][ T5341] ? mark_held_locks+0x9f/0xe0 [ 138.547369][ T5341] ? __local_bh_enable_ip+0xa4/0x130 [ 138.552701][ T5341] inet_stream_connect+0x57/0xa0 [ 138.557715][ T5341] ? __inet_stream_connect+0xed0/0xed0 [ 138.563228][ T5341] __sys_connect_file+0x153/0x1a0 [ 138.568477][ T5341] io_connect+0x3cc/0x720 [ 138.572859][ T5341] ? io_connect_prep+0x250/0x250 [ 138.577842][ T5341] ? receive_fd+0x110/0x110 [ 138.582405][ T5341] ? rcu_read_lock_sched_held+0x3e/0x70 [ 138.587990][ T5341] ? io_connect_prep+0x250/0x250 [ 138.592994][ T5341] io_issue_sqe+0x695/0x1250 [ 138.597662][ T5341] io_submit_sqes+0x96c/0x1e90 [ 138.602513][ T5341] __do_sys_io_uring_enter+0x103d/0x24e0 [ 138.608214][ T5341] ? io_submit_sqes+0x1e90/0x1e90 [ 138.613293][ T5341] ? ptrace_notify+0xfe/0x140 [ 138.618011][ T5341] ? lock_downgrade+0x6e0/0x6e0 [ 138.622911][ T5341] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.628158][ T5341] ? lockdep_hardirqs_on+0x7d/0x100 [ 138.633395][ T5341] ? _raw_spin_unlock_irq+0x2e/0x50 [ 138.638632][ T5341] ? ptrace_notify+0xfe/0x140 [ 138.643355][ T5341] do_syscall_64+0x39/0xb0 [ 138.647820][ T5341] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.653755][ T5341] RIP: 0033:0x7f607b0de549 [ 138.658356][ T5341] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 138.678018][ T5341] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 138.686476][ T5341] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5341] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5341] close(3) = 0 [pid 5341] close(4) = 0 [pid 5341] close(5) = 0 [pid 5341] close(6) = 0 [pid 5341] close(7) = 0 [pid 5341] close(8) = -1 EBADF (Bad file descriptor) [pid 5341] close(9) = -1 EBADF (Bad file descriptor) [pid 5341] close(10) = -1 EBADF (Bad file descriptor) [pid 5341] close(11) = -1 EBADF (Bad file descriptor) [pid 5341] close(12) = -1 EBADF (Bad file descriptor) [pid 5341] close(13) = -1 EBADF (Bad file descriptor) [pid 5341] close(14) = -1 EBADF (Bad file descriptor) [pid 5341] close(15) = -1 EBADF (Bad file descriptor) [pid 5341] close(16) = -1 EBADF (Bad file descriptor) [pid 5341] close(17) = -1 EBADF (Bad file descriptor) [pid 5341] close(18) = -1 EBADF (Bad file descriptor) [pid 5341] close(19) = -1 EBADF (Bad file descriptor) [pid 5341] close(20) = -1 EBADF (Bad file descriptor) [pid 5341] close(21) = -1 EBADF (Bad file descriptor) [pid 5341] close(22) = -1 EBADF (Bad file descriptor) [pid 5341] close(23) = -1 EBADF (Bad file descriptor) [pid 5341] close(24) = -1 EBADF (Bad file descriptor) [pid 5341] close(25) = -1 EBADF (Bad file descriptor) [pid 5341] close(26) = -1 EBADF (Bad file descriptor) [pid 5341] close(27) = -1 EBADF (Bad file descriptor) [pid 5341] close(28) = -1 EBADF (Bad file descriptor) [pid 5341] close(29) = -1 EBADF (Bad file descriptor) [pid 5341] exit_group(0) = ? [pid 5341] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=240, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 241 ./strace-static-x86_64: Process 5342 attached [pid 5342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5342] setpgid(0, 0) = 0 [pid 5342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5342] write(3, "1000", 4) = 4 [pid 5342] close(3) = 0 [pid 5342] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5342] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5342] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5342] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5342] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5342] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5342] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5342] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5342] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5342] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5342] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5342] write(7, "5", 1) = 1 [ 138.694483][ T5341] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 138.702494][ T5341] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 138.710594][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 138.718594][ T5341] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 138.726609][ T5341] [ 138.761681][ T5342] FAULT_INJECTION: forcing a failure. [ 138.761681][ T5342] name failslab, interval 1, probability 0, space 0, times 0 [ 138.774374][ T5342] CPU: 0 PID: 5342 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 138.784270][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 138.794328][ T5342] Call Trace: [ 138.797603][ T5342] [ 138.800533][ T5342] dump_stack_lvl+0xd1/0x138 [ 138.805134][ T5342] should_fail_ex.cold+0x5/0xa [ 138.809923][ T5342] ? __inet_hash_connect+0x95e/0x1ba0 [ 138.815334][ T5342] should_failslab+0x9/0x20 [ 138.819845][ T5342] kmem_cache_alloc+0x5a/0x320 [ 138.824636][ T5342] __inet_hash_connect+0x95e/0x1ba0 [ 138.829866][ T5342] ? __inet_lookup_listener+0xbf0/0xbf0 [ 138.835429][ T5342] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 138.841774][ T5342] dccp_v4_connect+0xb82/0x1730 [ 138.846672][ T5342] __inet_stream_connect+0x69e/0xed0 [ 138.852007][ T5342] ? inet_listen+0x640/0x640 [ 138.856607][ T5342] ? mark_held_locks+0x9f/0xe0 [ 138.861394][ T5342] ? __local_bh_enable_ip+0xa4/0x130 [ 138.866720][ T5342] inet_stream_connect+0x57/0xa0 [ 138.871687][ T5342] ? __inet_stream_connect+0xed0/0xed0 [ 138.877164][ T5342] __sys_connect_file+0x153/0x1a0 [ 138.882221][ T5342] io_connect+0x3cc/0x720 [ 138.886580][ T5342] ? io_connect_prep+0x250/0x250 [ 138.891552][ T5342] ? receive_fd+0x110/0x110 [ 138.896089][ T5342] ? rcu_read_lock_sched_held+0x3e/0x70 [ 138.901643][ T5342] ? io_connect_prep+0x250/0x250 [ 138.906596][ T5342] io_issue_sqe+0x695/0x1250 [ 138.911209][ T5342] io_submit_sqes+0x96c/0x1e90 [ 138.916000][ T5342] __do_sys_io_uring_enter+0x103d/0x24e0 [ 138.921653][ T5342] ? io_submit_sqes+0x1e90/0x1e90 [ 138.926693][ T5342] ? ptrace_notify+0xfe/0x140 [ 138.931391][ T5342] ? lock_downgrade+0x6e0/0x6e0 [ 138.936277][ T5342] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.941487][ T5342] ? lockdep_hardirqs_on+0x7d/0x100 [ 138.946704][ T5342] ? _raw_spin_unlock_irq+0x2e/0x50 [ 138.951939][ T5342] ? ptrace_notify+0xfe/0x140 [ 138.956626][ T5342] do_syscall_64+0x39/0xb0 [ 138.961240][ T5342] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.967163][ T5342] RIP: 0033:0x7f607b0de549 [ 138.971667][ T5342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 138.991284][ T5342] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 138.999705][ T5342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5342] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5342] close(3) = 0 [pid 5342] close(4) = 0 [pid 5342] close(5) = 0 [pid 5342] close(6) = 0 [pid 5342] close(7) = 0 [pid 5342] close(8) = -1 EBADF (Bad file descriptor) [pid 5342] close(9) = -1 EBADF (Bad file descriptor) [pid 5342] close(10) = -1 EBADF (Bad file descriptor) [pid 5342] close(11) = -1 EBADF (Bad file descriptor) [pid 5342] close(12) = -1 EBADF (Bad file descriptor) [pid 5342] close(13) = -1 EBADF (Bad file descriptor) [pid 5342] close(14) = -1 EBADF (Bad file descriptor) [pid 5342] close(15) = -1 EBADF (Bad file descriptor) [pid 5342] close(16) = -1 EBADF (Bad file descriptor) [pid 5342] close(17) = -1 EBADF (Bad file descriptor) [pid 5342] close(18) = -1 EBADF (Bad file descriptor) [pid 5342] close(19) = -1 EBADF (Bad file descriptor) [pid 5342] close(20) = -1 EBADF (Bad file descriptor) [pid 5342] close(21) = -1 EBADF (Bad file descriptor) [pid 5342] close(22) = -1 EBADF (Bad file descriptor) [pid 5342] close(23) = -1 EBADF (Bad file descriptor) [pid 5342] close(24) = -1 EBADF (Bad file descriptor) [pid 5342] close(25) = -1 EBADF (Bad file descriptor) [pid 5342] close(26) = -1 EBADF (Bad file descriptor) [pid 5342] close(27) = -1 EBADF (Bad file descriptor) [pid 5342] close(28) = -1 EBADF (Bad file descriptor) [pid 5342] close(29) = -1 EBADF (Bad file descriptor) [pid 5342] exit_group(0) = ? [pid 5342] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=241, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 242 ./strace-static-x86_64: Process 5343 attached [pid 5343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5343] setpgid(0, 0) = 0 [pid 5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5343] write(3, "1000", 4) = 4 [pid 5343] close(3) = 0 [pid 5343] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5343] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5343] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5343] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5343] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5343] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5343] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5343] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5343] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5343] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5343] write(7, "5", 1) = 1 [ 139.007688][ T5342] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 139.015691][ T5342] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 139.023667][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 139.031659][ T5342] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 139.039676][ T5342] [ 139.071586][ T5343] FAULT_INJECTION: forcing a failure. [ 139.071586][ T5343] name failslab, interval 1, probability 0, space 0, times 0 [ 139.084692][ T5343] CPU: 0 PID: 5343 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 139.094618][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 139.104672][ T5343] Call Trace: [ 139.107961][ T5343] [ 139.110916][ T5343] dump_stack_lvl+0xd1/0x138 [ 139.115554][ T5343] should_fail_ex.cold+0x5/0xa [ 139.120344][ T5343] ? io_issue_sqe+0x695/0x1250 [ 139.125117][ T5343] should_failslab+0x9/0x20 [ 139.129629][ T5343] __kmem_cache_alloc_node+0x5b/0x330 [ 139.135010][ T5343] ? ref_tracker_alloc+0x158/0x560 [ 139.140151][ T5343] kmalloc_trace+0x26/0x60 [ 139.144607][ T5343] ref_tracker_alloc+0x158/0x560 [ 139.149569][ T5343] ? __lock_acquire+0xbc3/0x56d0 [ 139.154536][ T5343] ? ref_tracker_free+0x6b0/0x6b0 [ 139.159610][ T5343] dst_init+0xe4/0x520 [ 139.163708][ T5343] dst_alloc+0x16f/0x1f0 [ 139.167954][ T5343] rt_dst_alloc+0x55/0x430 [ 139.172377][ T5343] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 139.178421][ T5343] ip_route_output_key_hash+0x18f/0x340 [ 139.183986][ T5343] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 139.190259][ T5343] dccp_v4_connect+0x7e1/0x1730 [ 139.195167][ T5343] __inet_stream_connect+0x69e/0xed0 [ 139.200502][ T5343] ? inet_listen+0x640/0x640 [ 139.205132][ T5343] ? mark_held_locks+0x9f/0xe0 [ 139.209927][ T5343] ? __local_bh_enable_ip+0xa4/0x130 [ 139.215245][ T5343] inet_stream_connect+0x57/0xa0 [ 139.220220][ T5343] ? __inet_stream_connect+0xed0/0xed0 [ 139.225713][ T5343] __sys_connect_file+0x153/0x1a0 [ 139.230765][ T5343] io_connect+0x3cc/0x720 [ 139.235133][ T5343] ? io_connect_prep+0x250/0x250 [ 139.240132][ T5343] ? receive_fd+0x110/0x110 [ 139.244681][ T5343] ? rcu_read_lock_sched_held+0x3e/0x70 [ 139.250255][ T5343] ? io_connect_prep+0x250/0x250 [ 139.255227][ T5343] io_issue_sqe+0x695/0x1250 [ 139.259858][ T5343] io_submit_sqes+0x96c/0x1e90 [ 139.264671][ T5343] __do_sys_io_uring_enter+0x103d/0x24e0 [ 139.270352][ T5343] ? io_submit_sqes+0x1e90/0x1e90 [ 139.275414][ T5343] ? ptrace_notify+0xfe/0x140 [ 139.280114][ T5343] ? lock_downgrade+0x6e0/0x6e0 [ 139.284996][ T5343] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.290247][ T5343] ? lockdep_hardirqs_on+0x7d/0x100 [ 139.295468][ T5343] ? _raw_spin_unlock_irq+0x2e/0x50 [ 139.300691][ T5343] ? ptrace_notify+0xfe/0x140 [ 139.305394][ T5343] do_syscall_64+0x39/0xb0 [ 139.309844][ T5343] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.315762][ T5343] RIP: 0033:0x7f607b0de549 [ 139.320192][ T5343] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 139.339839][ T5343] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 139.348273][ T5343] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 139.356281][ T5343] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 139.364283][ T5343] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5343] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5343] close(3) = 0 [pid 5343] close(4) = 0 [pid 5343] close(5) = 0 [pid 5343] close(6) = 0 [pid 5343] close(7) = 0 [pid 5343] close(8) = -1 EBADF (Bad file descriptor) [pid 5343] close(9) = -1 EBADF (Bad file descriptor) [pid 5343] close(10) = -1 EBADF (Bad file descriptor) [pid 5343] close(11) = -1 EBADF (Bad file descriptor) [pid 5343] close(12) = -1 EBADF (Bad file descriptor) [pid 5343] close(13) = -1 EBADF (Bad file descriptor) [pid 5343] close(14) = -1 EBADF (Bad file descriptor) [pid 5343] close(15) = -1 EBADF (Bad file descriptor) [pid 5343] close(16) = -1 EBADF (Bad file descriptor) [pid 5343] close(17) = -1 EBADF (Bad file descriptor) [pid 5343] close(18) = -1 EBADF (Bad file descriptor) [pid 5343] close(19) = -1 EBADF (Bad file descriptor) [pid 5343] close(20) = -1 EBADF (Bad file descriptor) [pid 5343] close(21) = -1 EBADF (Bad file descriptor) [pid 5343] close(22) = -1 EBADF (Bad file descriptor) [pid 5343] close(23) = -1 EBADF (Bad file descriptor) [pid 5343] close(24) = -1 EBADF (Bad file descriptor) [pid 5343] close(25) = -1 EBADF (Bad file descriptor) [pid 5343] close(26) = -1 EBADF (Bad file descriptor) [pid 5343] close(27) = -1 EBADF (Bad file descriptor) [pid 5343] close(28) = -1 EBADF (Bad file descriptor) [pid 5343] close(29) = -1 EBADF (Bad file descriptor) [pid 5343] exit_group(0) = ? [pid 5343] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=242, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 243 ./strace-static-x86_64: Process 5344 attached [pid 5344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5344] setpgid(0, 0) = 0 [pid 5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5344] write(3, "1000", 4) = 4 [pid 5344] close(3) = 0 [pid 5344] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5344] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5344] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5344] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5344] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5344] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5344] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5344] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5344] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5344] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5344] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5344] write(7, "5", 1) = 1 [pid 5344] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5344] close(3) = 0 [pid 5344] close(4) = 0 [pid 5344] close(5) = 0 [pid 5344] close(6) = 0 [pid 5344] close(7) = 0 [pid 5344] close(8) = -1 EBADF (Bad file descriptor) [pid 5344] close(9) = -1 EBADF (Bad file descriptor) [pid 5344] close(10) = -1 EBADF (Bad file descriptor) [ 139.372279][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 139.380292][ T5343] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 139.388302][ T5343] [pid 5344] close(11) = -1 EBADF (Bad file descriptor) [pid 5344] close(12) = -1 EBADF (Bad file descriptor) [pid 5344] close(13) = -1 EBADF (Bad file descriptor) [pid 5344] close(14) = -1 EBADF (Bad file descriptor) [pid 5344] close(15) = -1 EBADF (Bad file descriptor) [pid 5344] close(16) = -1 EBADF (Bad file descriptor) [pid 5344] close(17) = -1 EBADF (Bad file descriptor) [pid 5344] close(18) = -1 EBADF (Bad file descriptor) [pid 5344] close(19) = -1 EBADF (Bad file descriptor) [pid 5344] close(20) = -1 EBADF (Bad file descriptor) [pid 5344] close(21) = -1 EBADF (Bad file descriptor) [pid 5344] close(22) = -1 EBADF (Bad file descriptor) [pid 5344] close(23) = -1 EBADF (Bad file descriptor) [pid 5344] close(24) = -1 EBADF (Bad file descriptor) [pid 5344] close(25) = -1 EBADF (Bad file descriptor) [pid 5344] close(26) = -1 EBADF (Bad file descriptor) [pid 5344] close(27) = -1 EBADF (Bad file descriptor) [pid 5344] close(28) = -1 EBADF (Bad file descriptor) [pid 5344] close(29) = -1 EBADF (Bad file descriptor) [pid 5344] exit_group(0) = ? [pid 5344] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=243, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5345 attached , child_tidptr=0x555555eff5d0) = 244 [pid 5345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5345] setpgid(0, 0) = 0 [pid 5345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5345] write(3, "1000", 4) = 4 [pid 5345] close(3) = 0 [pid 5345] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5345] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5345] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5345] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5345] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5345] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5345] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5345] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5345] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5345] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5345] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5345] write(7, "5", 1) = 1 [ 139.465220][ T5345] FAULT_INJECTION: forcing a failure. [ 139.465220][ T5345] name failslab, interval 1, probability 0, space 0, times 0 [ 139.477930][ T5345] CPU: 0 PID: 5345 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 139.487831][ T5345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 139.498066][ T5345] Call Trace: [ 139.501346][ T5345] [ 139.504276][ T5345] dump_stack_lvl+0xd1/0x138 [ 139.508891][ T5345] should_fail_ex.cold+0x5/0xa [ 139.513682][ T5345] ? __inet_hash_connect+0x95e/0x1ba0 [ 139.519068][ T5345] should_failslab+0x9/0x20 [ 139.523610][ T5345] kmem_cache_alloc+0x5a/0x320 [ 139.528380][ T5345] __inet_hash_connect+0x95e/0x1ba0 [ 139.533586][ T5345] ? __inet_lookup_listener+0xbf0/0xbf0 [ 139.539163][ T5345] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 139.545528][ T5345] dccp_v4_connect+0xb82/0x1730 [ 139.550429][ T5345] __inet_stream_connect+0x69e/0xed0 [ 139.555865][ T5345] ? inet_listen+0x640/0x640 [ 139.560931][ T5345] ? mark_held_locks+0x9f/0xe0 [ 139.565708][ T5345] ? __local_bh_enable_ip+0xa4/0x130 [ 139.571007][ T5345] inet_stream_connect+0x57/0xa0 [ 139.575960][ T5345] ? __inet_stream_connect+0xed0/0xed0 [ 139.581468][ T5345] __sys_connect_file+0x153/0x1a0 [ 139.586537][ T5345] io_connect+0x3cc/0x720 [ 139.590888][ T5345] ? io_connect_prep+0x250/0x250 [ 139.595836][ T5345] ? receive_fd+0x110/0x110 [ 139.600550][ T5345] ? rcu_read_lock_sched_held+0x3e/0x70 [ 139.606146][ T5345] ? io_connect_prep+0x250/0x250 [ 139.611158][ T5345] io_issue_sqe+0x695/0x1250 [ 139.615759][ T5345] io_submit_sqes+0x96c/0x1e90 [ 139.620568][ T5345] __do_sys_io_uring_enter+0x103d/0x24e0 [ 139.626444][ T5345] ? io_submit_sqes+0x1e90/0x1e90 [ 139.631504][ T5345] ? ptrace_notify+0xfe/0x140 [ 139.636219][ T5345] ? lock_downgrade+0x6e0/0x6e0 [ 139.641101][ T5345] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.646320][ T5345] ? lockdep_hardirqs_on+0x7d/0x100 [ 139.651543][ T5345] ? _raw_spin_unlock_irq+0x2e/0x50 [ 139.656745][ T5345] ? ptrace_notify+0xfe/0x140 [ 139.661426][ T5345] do_syscall_64+0x39/0xb0 [ 139.665860][ T5345] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 139.671768][ T5345] RIP: 0033:0x7f607b0de549 [ 139.676219][ T5345] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 139.695858][ T5345] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 139.704292][ T5345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5345] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5345] close(3) = 0 [pid 5345] close(4) = 0 [pid 5345] close(5) = 0 [pid 5345] close(6) = 0 [pid 5345] close(7) = 0 [pid 5345] close(8) = -1 EBADF (Bad file descriptor) [pid 5345] close(9) = -1 EBADF (Bad file descriptor) [pid 5345] close(10) = -1 EBADF (Bad file descriptor) [pid 5345] close(11) = -1 EBADF (Bad file descriptor) [pid 5345] close(12) = -1 EBADF (Bad file descriptor) [pid 5345] close(13) = -1 EBADF (Bad file descriptor) [pid 5345] close(14) = -1 EBADF (Bad file descriptor) [pid 5345] close(15) = -1 EBADF (Bad file descriptor) [pid 5345] close(16) = -1 EBADF (Bad file descriptor) [pid 5345] close(17) = -1 EBADF (Bad file descriptor) [pid 5345] close(18) = -1 EBADF (Bad file descriptor) [pid 5345] close(19) = -1 EBADF (Bad file descriptor) [pid 5345] close(20) = -1 EBADF (Bad file descriptor) [pid 5345] close(21) = -1 EBADF (Bad file descriptor) [pid 5345] close(22) = -1 EBADF (Bad file descriptor) [pid 5345] close(23) = -1 EBADF (Bad file descriptor) [pid 5345] close(24) = -1 EBADF (Bad file descriptor) [pid 5345] close(25) = -1 EBADF (Bad file descriptor) [pid 5345] close(26) = -1 EBADF (Bad file descriptor) [pid 5345] close(27) = -1 EBADF (Bad file descriptor) [pid 5345] close(28) = -1 EBADF (Bad file descriptor) [pid 5345] close(29) = -1 EBADF (Bad file descriptor) [pid 5345] exit_group(0) = ? [pid 5345] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=244, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 245 ./strace-static-x86_64: Process 5346 attached [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5346] setpgid(0, 0) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5346] write(3, "1000", 4) = 4 [pid 5346] close(3) = 0 [pid 5346] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5346] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5346] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5346] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5346] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5346] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5346] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5346] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5346] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5346] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5346] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5346] write(7, "5", 1) = 1 [ 139.712265][ T5345] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 139.720269][ T5345] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 139.728263][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 139.736254][ T5345] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 139.744263][ T5345] [ 139.797912][ T5346] FAULT_INJECTION: forcing a failure. [ 139.797912][ T5346] name failslab, interval 1, probability 0, space 0, times 0 [ 139.812083][ T5346] CPU: 0 PID: 5346 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 139.822043][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 139.832132][ T5346] Call Trace: [ 139.835451][ T5346] [ 139.838383][ T5346] dump_stack_lvl+0xd1/0x138 [ 139.842983][ T5346] should_fail_ex.cold+0x5/0xa [ 139.847747][ T5346] ? io_issue_sqe+0x695/0x1250 [ 139.852527][ T5346] should_failslab+0x9/0x20 [ 139.857080][ T5346] __kmem_cache_alloc_node+0x5b/0x330 [ 139.862480][ T5346] ? ref_tracker_alloc+0x158/0x560 [ 139.867611][ T5346] kmalloc_trace+0x26/0x60 [ 139.872047][ T5346] ref_tracker_alloc+0x158/0x560 [ 139.877022][ T5346] ? __lock_acquire+0xbc3/0x56d0 [ 139.881983][ T5346] ? ref_tracker_free+0x6b0/0x6b0 [ 139.887066][ T5346] dst_init+0xe4/0x520 [ 139.891168][ T5346] dst_alloc+0x16f/0x1f0 [ 139.895445][ T5346] rt_dst_alloc+0x55/0x430 [ 139.899893][ T5346] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 139.905929][ T5346] ip_route_output_key_hash+0x18f/0x340 [ 139.911520][ T5346] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 139.917812][ T5346] dccp_v4_connect+0x7e1/0x1730 [ 139.922713][ T5346] __inet_stream_connect+0x69e/0xed0 [ 139.928044][ T5346] ? inet_listen+0x640/0x640 [ 139.932670][ T5346] ? mark_held_locks+0x9f/0xe0 [ 139.937459][ T5346] ? __local_bh_enable_ip+0xa4/0x130 [ 139.942773][ T5346] inet_stream_connect+0x57/0xa0 [ 139.947744][ T5346] ? __inet_stream_connect+0xed0/0xed0 [ 139.953236][ T5346] __sys_connect_file+0x153/0x1a0 [ 139.958291][ T5346] io_connect+0x3cc/0x720 [ 139.962654][ T5346] ? io_connect_prep+0x250/0x250 [ 139.967627][ T5346] ? receive_fd+0x110/0x110 [ 139.972172][ T5346] ? rcu_read_lock_sched_held+0x3e/0x70 [ 139.977740][ T5346] ? io_connect_prep+0x250/0x250 [ 139.982714][ T5346] io_issue_sqe+0x695/0x1250 [ 139.987336][ T5346] io_submit_sqes+0x96c/0x1e90 [ 139.992148][ T5346] __do_sys_io_uring_enter+0x103d/0x24e0 [ 139.997820][ T5346] ? io_submit_sqes+0x1e90/0x1e90 [ 140.002882][ T5346] ? ptrace_notify+0xfe/0x140 [ 140.007591][ T5346] ? lock_downgrade+0x6e0/0x6e0 [ 140.012584][ T5346] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.017809][ T5346] ? lockdep_hardirqs_on+0x7d/0x100 [ 140.023031][ T5346] ? _raw_spin_unlock_irq+0x2e/0x50 [ 140.028255][ T5346] ? ptrace_notify+0xfe/0x140 [ 140.032956][ T5346] do_syscall_64+0x39/0xb0 [ 140.037402][ T5346] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.043319][ T5346] RIP: 0033:0x7f607b0de549 [ 140.047749][ T5346] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 140.067379][ T5346] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 140.075817][ T5346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 140.083818][ T5346] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5346] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5346] close(3) = 0 [pid 5346] close(4) = 0 [pid 5346] close(5) = 0 [pid 5346] close(6) = 0 [pid 5346] close(7) = 0 [pid 5346] close(8) = -1 EBADF (Bad file descriptor) [pid 5346] close(9) = -1 EBADF (Bad file descriptor) [pid 5346] close(10) = -1 EBADF (Bad file descriptor) [pid 5346] close(11) = -1 EBADF (Bad file descriptor) [pid 5346] close(12) = -1 EBADF (Bad file descriptor) [pid 5346] close(13) = -1 EBADF (Bad file descriptor) [pid 5346] close(14) = -1 EBADF (Bad file descriptor) [pid 5346] close(15) = -1 EBADF (Bad file descriptor) [pid 5346] close(16) = -1 EBADF (Bad file descriptor) [pid 5346] close(17) = -1 EBADF (Bad file descriptor) [pid 5346] close(18) = -1 EBADF (Bad file descriptor) [pid 5346] close(19) = -1 EBADF (Bad file descriptor) [pid 5346] close(20) = -1 EBADF (Bad file descriptor) [pid 5346] close(21) = -1 EBADF (Bad file descriptor) [pid 5346] close(22) = -1 EBADF (Bad file descriptor) [pid 5346] close(23) = -1 EBADF (Bad file descriptor) [pid 5346] close(24) = -1 EBADF (Bad file descriptor) [pid 5346] close(25) = -1 EBADF (Bad file descriptor) [pid 5346] close(26) = -1 EBADF (Bad file descriptor) [pid 5346] close(27) = -1 EBADF (Bad file descriptor) [pid 5346] close(28) = -1 EBADF (Bad file descriptor) [pid 5346] close(29) = -1 EBADF (Bad file descriptor) [pid 5346] exit_group(0) = ? [pid 5346] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=245, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5347 attached , child_tidptr=0x555555eff5d0) = 246 [pid 5347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5347] setpgid(0, 0) = 0 [pid 5347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5347] write(3, "1000", 4) = 4 [pid 5347] close(3) = 0 [pid 5347] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5347] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5347] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5347] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5347] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5347] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5347] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5347] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5347] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5347] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5347] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5347] write(7, "5", 1) = 1 [ 140.091814][ T5346] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 140.099803][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 140.107797][ T5346] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 140.115813][ T5346] [ 140.159986][ T5347] FAULT_INJECTION: forcing a failure. [ 140.159986][ T5347] name failslab, interval 1, probability 0, space 0, times 0 [ 140.172669][ T5347] CPU: 0 PID: 5347 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 140.182559][ T5347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 140.192615][ T5347] Call Trace: [ 140.195895][ T5347] [ 140.198826][ T5347] dump_stack_lvl+0xd1/0x138 [ 140.203472][ T5347] should_fail_ex.cold+0x5/0xa [ 140.208264][ T5347] ? __inet_hash_connect+0x95e/0x1ba0 [ 140.213646][ T5347] should_failslab+0x9/0x20 [ 140.218155][ T5347] kmem_cache_alloc+0x5a/0x320 [ 140.222928][ T5347] __inet_hash_connect+0x95e/0x1ba0 [ 140.228139][ T5347] ? __inet_lookup_listener+0xbf0/0xbf0 [ 140.233716][ T5347] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 140.240092][ T5347] dccp_v4_connect+0xb82/0x1730 [ 140.245000][ T5347] __inet_stream_connect+0x69e/0xed0 [ 140.250330][ T5347] ? inet_listen+0x640/0x640 [ 140.254956][ T5347] ? mark_held_locks+0x9f/0xe0 [ 140.259750][ T5347] ? __local_bh_enable_ip+0xa4/0x130 [ 140.265094][ T5347] inet_stream_connect+0x57/0xa0 [ 140.270063][ T5347] ? __inet_stream_connect+0xed0/0xed0 [ 140.275562][ T5347] __sys_connect_file+0x153/0x1a0 [ 140.280614][ T5347] io_connect+0x3cc/0x720 [ 140.284978][ T5347] ? io_connect_prep+0x250/0x250 [ 140.289950][ T5347] ? receive_fd+0x110/0x110 [ 140.294494][ T5347] ? rcu_read_lock_sched_held+0x3e/0x70 [ 140.300065][ T5347] ? io_connect_prep+0x250/0x250 [ 140.305034][ T5347] io_issue_sqe+0x695/0x1250 [ 140.309657][ T5347] io_submit_sqes+0x96c/0x1e90 [ 140.314733][ T5347] __do_sys_io_uring_enter+0x103d/0x24e0 [ 140.320404][ T5347] ? io_submit_sqes+0x1e90/0x1e90 [ 140.325460][ T5347] ? ptrace_notify+0xfe/0x140 [ 140.330155][ T5347] ? lock_downgrade+0x6e0/0x6e0 [ 140.335036][ T5347] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.340261][ T5347] ? lockdep_hardirqs_on+0x7d/0x100 [ 140.345480][ T5347] ? _raw_spin_unlock_irq+0x2e/0x50 [ 140.350703][ T5347] ? ptrace_notify+0xfe/0x140 [ 140.355409][ T5347] do_syscall_64+0x39/0xb0 [ 140.359860][ T5347] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.365780][ T5347] RIP: 0033:0x7f607b0de549 [ 140.370210][ T5347] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 140.389854][ T5347] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 140.398314][ T5347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5347] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5347] close(3) = 0 [pid 5347] close(4) = 0 [pid 5347] close(5) = 0 [pid 5347] close(6) = 0 [pid 5347] close(7) = 0 [pid 5347] close(8) = -1 EBADF (Bad file descriptor) [pid 5347] close(9) = -1 EBADF (Bad file descriptor) [pid 5347] close(10) = -1 EBADF (Bad file descriptor) [pid 5347] close(11) = -1 EBADF (Bad file descriptor) [pid 5347] close(12) = -1 EBADF (Bad file descriptor) [pid 5347] close(13) = -1 EBADF (Bad file descriptor) [pid 5347] close(14) = -1 EBADF (Bad file descriptor) [pid 5347] close(15) = -1 EBADF (Bad file descriptor) [pid 5347] close(16) = -1 EBADF (Bad file descriptor) [pid 5347] close(17) = -1 EBADF (Bad file descriptor) [pid 5347] close(18) = -1 EBADF (Bad file descriptor) [pid 5347] close(19) = -1 EBADF (Bad file descriptor) [pid 5347] close(20) = -1 EBADF (Bad file descriptor) [pid 5347] close(21) = -1 EBADF (Bad file descriptor) [pid 5347] close(22) = -1 EBADF (Bad file descriptor) [pid 5347] close(23) = -1 EBADF (Bad file descriptor) [pid 5347] close(24) = -1 EBADF (Bad file descriptor) [pid 5347] close(25) = -1 EBADF (Bad file descriptor) [pid 5347] close(26) = -1 EBADF (Bad file descriptor) [pid 5347] close(27) = -1 EBADF (Bad file descriptor) [pid 5347] close(28) = -1 EBADF (Bad file descriptor) [pid 5347] close(29) = -1 EBADF (Bad file descriptor) [pid 5347] exit_group(0) = ? [pid 5347] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=246, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 247 ./strace-static-x86_64: Process 5348 attached [pid 5348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5348] setpgid(0, 0) = 0 [pid 5348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5348] write(3, "1000", 4) = 4 [pid 5348] close(3) = 0 [pid 5348] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5348] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5348] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5348] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5348] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5348] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5348] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5348] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5348] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5348] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5348] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5348] write(7, "5", 1) = 1 [ 140.406396][ T5347] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 140.414472][ T5347] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 140.422459][ T5347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 140.430447][ T5347] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 140.438457][ T5347] [ 140.479394][ T5348] FAULT_INJECTION: forcing a failure. [ 140.479394][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 140.492767][ T5348] CPU: 0 PID: 5348 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 140.502720][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 140.512810][ T5348] Call Trace: [ 140.516109][ T5348] [ 140.519069][ T5348] dump_stack_lvl+0xd1/0x138 [ 140.523701][ T5348] should_fail_ex.cold+0x5/0xa [ 140.528466][ T5348] ? io_issue_sqe+0x695/0x1250 [ 140.533261][ T5348] should_failslab+0x9/0x20 [ 140.537821][ T5348] __kmem_cache_alloc_node+0x5b/0x330 [ 140.543229][ T5348] ? ref_tracker_alloc+0x158/0x560 [ 140.548355][ T5348] kmalloc_trace+0x26/0x60 [ 140.552787][ T5348] ref_tracker_alloc+0x158/0x560 [ 140.557766][ T5348] ? __lock_acquire+0xbc3/0x56d0 [ 140.562756][ T5348] ? ref_tracker_free+0x6b0/0x6b0 [ 140.567835][ T5348] dst_init+0xe4/0x520 [ 140.571959][ T5348] dst_alloc+0x16f/0x1f0 [ 140.576252][ T5348] rt_dst_alloc+0x55/0x430 [ 140.580726][ T5348] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 140.586773][ T5348] ip_route_output_key_hash+0x18f/0x340 [ 140.592347][ T5348] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 140.598639][ T5348] dccp_v4_connect+0x7e1/0x1730 [ 140.603536][ T5348] __inet_stream_connect+0x69e/0xed0 [ 140.608867][ T5348] ? inet_listen+0x640/0x640 [ 140.613514][ T5348] ? mark_held_locks+0x9f/0xe0 [ 140.618288][ T5348] ? __local_bh_enable_ip+0xa4/0x130 [ 140.623585][ T5348] inet_stream_connect+0x57/0xa0 [ 140.628532][ T5348] ? __inet_stream_connect+0xed0/0xed0 [ 140.634001][ T5348] __sys_connect_file+0x153/0x1a0 [ 140.639048][ T5348] io_connect+0x3cc/0x720 [ 140.643431][ T5348] ? io_connect_prep+0x250/0x250 [ 140.648392][ T5348] ? receive_fd+0x110/0x110 [ 140.652921][ T5348] ? rcu_read_lock_sched_held+0x3e/0x70 [ 140.658478][ T5348] ? io_connect_prep+0x250/0x250 [ 140.663451][ T5348] io_issue_sqe+0x695/0x1250 [ 140.668090][ T5348] io_submit_sqes+0x96c/0x1e90 [ 140.672873][ T5348] __do_sys_io_uring_enter+0x103d/0x24e0 [ 140.678523][ T5348] ? io_submit_sqes+0x1e90/0x1e90 [ 140.683576][ T5348] ? ptrace_notify+0xfe/0x140 [ 140.688282][ T5348] ? lock_downgrade+0x6e0/0x6e0 [ 140.693145][ T5348] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.698355][ T5348] ? lockdep_hardirqs_on+0x7d/0x100 [ 140.703567][ T5348] ? _raw_spin_unlock_irq+0x2e/0x50 [ 140.708779][ T5348] ? ptrace_notify+0xfe/0x140 [ 140.713485][ T5348] do_syscall_64+0x39/0xb0 [ 140.717933][ T5348] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.723830][ T5348] RIP: 0033:0x7f607b0de549 [ 140.728247][ T5348] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 140.747865][ T5348] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 140.756305][ T5348] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 140.764302][ T5348] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 140.772277][ T5348] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5348] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5348] close(3) = 0 [pid 5348] close(4) = 0 [pid 5348] close(5) = 0 [pid 5348] close(6) = 0 [pid 5348] close(7) = 0 [pid 5348] close(8) = -1 EBADF (Bad file descriptor) [pid 5348] close(9) = -1 EBADF (Bad file descriptor) [pid 5348] close(10) = -1 EBADF (Bad file descriptor) [pid 5348] close(11) = -1 EBADF (Bad file descriptor) [pid 5348] close(12) = -1 EBADF (Bad file descriptor) [pid 5348] close(13) = -1 EBADF (Bad file descriptor) [pid 5348] close(14) = -1 EBADF (Bad file descriptor) [pid 5348] close(15) = -1 EBADF (Bad file descriptor) [pid 5348] close(16) = -1 EBADF (Bad file descriptor) [pid 5348] close(17) = -1 EBADF (Bad file descriptor) [pid 5348] close(18) = -1 EBADF (Bad file descriptor) [pid 5348] close(19) = -1 EBADF (Bad file descriptor) [pid 5348] close(20) = -1 EBADF (Bad file descriptor) [pid 5348] close(21) = -1 EBADF (Bad file descriptor) [pid 5348] close(22) = -1 EBADF (Bad file descriptor) [pid 5348] close(23) = -1 EBADF (Bad file descriptor) [pid 5348] close(24) = -1 EBADF (Bad file descriptor) [pid 5348] close(25) = -1 EBADF (Bad file descriptor) [pid 5348] close(26) = -1 EBADF (Bad file descriptor) [pid 5348] close(27) = -1 EBADF (Bad file descriptor) [pid 5348] close(28) = -1 EBADF (Bad file descriptor) [pid 5348] close(29) = -1 EBADF (Bad file descriptor) [pid 5348] exit_group(0) = ? [pid 5348] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=247, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 248 ./strace-static-x86_64: Process 5349 attached [pid 5349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5349] setpgid(0, 0) = 0 [ 140.780262][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 140.788259][ T5348] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 140.796277][ T5348] [pid 5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5349] write(3, "1000", 4) = 4 [pid 5349] close(3) = 0 [pid 5349] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5349] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5349] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5349] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5349] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5349] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5349] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5349] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5349] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5349] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5349] write(7, "5", 1) = 1 [ 140.864503][ T5349] FAULT_INJECTION: forcing a failure. [ 140.864503][ T5349] name failslab, interval 1, probability 0, space 0, times 0 [ 140.877196][ T5349] CPU: 0 PID: 5349 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 140.887102][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 140.897163][ T5349] Call Trace: [ 140.900441][ T5349] [ 140.903545][ T5349] dump_stack_lvl+0xd1/0x138 [ 140.908149][ T5349] should_fail_ex.cold+0x5/0xa [ 140.912951][ T5349] ? __inet_hash_connect+0x95e/0x1ba0 [ 140.918339][ T5349] should_failslab+0x9/0x20 [ 140.922859][ T5349] kmem_cache_alloc+0x5a/0x320 [ 140.927655][ T5349] __inet_hash_connect+0x95e/0x1ba0 [ 140.932872][ T5349] ? __inet_lookup_listener+0xbf0/0xbf0 [ 140.938451][ T5349] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 140.944822][ T5349] dccp_v4_connect+0xb82/0x1730 [ 140.949723][ T5349] __inet_stream_connect+0x69e/0xed0 [ 140.955049][ T5349] ? inet_listen+0x640/0x640 [ 140.959700][ T5349] ? mark_held_locks+0x9f/0xe0 [ 140.964487][ T5349] ? __local_bh_enable_ip+0xa4/0x130 [ 140.969799][ T5349] inet_stream_connect+0x57/0xa0 [ 140.974768][ T5349] ? __inet_stream_connect+0xed0/0xed0 [ 140.980266][ T5349] __sys_connect_file+0x153/0x1a0 [ 140.985408][ T5349] io_connect+0x3cc/0x720 [ 140.989783][ T5349] ? io_connect_prep+0x250/0x250 [ 140.994749][ T5349] ? receive_fd+0x110/0x110 [ 140.999294][ T5349] ? rcu_read_lock_sched_held+0x3e/0x70 [ 141.004864][ T5349] ? io_connect_prep+0x250/0x250 [ 141.009836][ T5349] io_issue_sqe+0x695/0x1250 [ 141.014458][ T5349] io_submit_sqes+0x96c/0x1e90 [ 141.019297][ T5349] __do_sys_io_uring_enter+0x103d/0x24e0 [ 141.025073][ T5349] ? io_submit_sqes+0x1e90/0x1e90 [ 141.030141][ T5349] ? ptrace_notify+0xfe/0x140 [ 141.034858][ T5349] ? lock_downgrade+0x6e0/0x6e0 [ 141.039741][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.044965][ T5349] ? lockdep_hardirqs_on+0x7d/0x100 [ 141.050182][ T5349] ? _raw_spin_unlock_irq+0x2e/0x50 [ 141.055439][ T5349] ? ptrace_notify+0xfe/0x140 [ 141.060142][ T5349] do_syscall_64+0x39/0xb0 [ 141.064587][ T5349] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 141.070501][ T5349] RIP: 0033:0x7f607b0de549 [ 141.074932][ T5349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 141.094650][ T5349] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 141.103093][ T5349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5349] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5349] close(3) = 0 [pid 5349] close(4) = 0 [pid 5349] close(5) = 0 [pid 5349] close(6) = 0 [pid 5349] close(7) = 0 [pid 5349] close(8) = -1 EBADF (Bad file descriptor) [pid 5349] close(9) = -1 EBADF (Bad file descriptor) [pid 5349] close(10) = -1 EBADF (Bad file descriptor) [pid 5349] close(11) = -1 EBADF (Bad file descriptor) [pid 5349] close(12) = -1 EBADF (Bad file descriptor) [pid 5349] close(13) = -1 EBADF (Bad file descriptor) [pid 5349] close(14) = -1 EBADF (Bad file descriptor) [pid 5349] close(15) = -1 EBADF (Bad file descriptor) [pid 5349] close(16) = -1 EBADF (Bad file descriptor) [pid 5349] close(17) = -1 EBADF (Bad file descriptor) [pid 5349] close(18) = -1 EBADF (Bad file descriptor) [pid 5349] close(19) = -1 EBADF (Bad file descriptor) [pid 5349] close(20) = -1 EBADF (Bad file descriptor) [pid 5349] close(21) = -1 EBADF (Bad file descriptor) [pid 5349] close(22) = -1 EBADF (Bad file descriptor) [pid 5349] close(23) = -1 EBADF (Bad file descriptor) [pid 5349] close(24) = -1 EBADF (Bad file descriptor) [pid 5349] close(25) = -1 EBADF (Bad file descriptor) [pid 5349] close(26) = -1 EBADF (Bad file descriptor) [pid 5349] close(27) = -1 EBADF (Bad file descriptor) [pid 5349] close(28) = -1 EBADF (Bad file descriptor) [pid 5349] close(29) = -1 EBADF (Bad file descriptor) [pid 5349] exit_group(0) = ? [pid 5349] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=248, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 249 ./strace-static-x86_64: Process 5350 attached [pid 5350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5350] setpgid(0, 0) = 0 [pid 5350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5350] write(3, "1000", 4) = 4 [pid 5350] close(3) = 0 [pid 5350] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5350] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5350] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5350] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5350] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5350] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5350] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5350] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5350] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5350] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5350] write(7, "5", 1) = 1 [ 141.111089][ T5349] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 141.119076][ T5349] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 141.127073][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 141.135062][ T5349] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 141.143067][ T5349] [ 141.183275][ T5350] FAULT_INJECTION: forcing a failure. [ 141.183275][ T5350] name failslab, interval 1, probability 0, space 0, times 0 [ 141.196052][ T5350] CPU: 0 PID: 5350 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 141.205955][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 141.216032][ T5350] Call Trace: [ 141.219323][ T5350] [ 141.222280][ T5350] dump_stack_lvl+0xd1/0x138 [ 141.226909][ T5350] should_fail_ex.cold+0x5/0xa [ 141.231675][ T5350] ? io_issue_sqe+0x695/0x1250 [ 141.236445][ T5350] should_failslab+0x9/0x20 [ 141.240954][ T5350] __kmem_cache_alloc_node+0x5b/0x330 [ 141.246325][ T5350] ? ref_tracker_alloc+0x158/0x560 [ 141.251470][ T5350] kmalloc_trace+0x26/0x60 [ 141.255947][ T5350] ref_tracker_alloc+0x158/0x560 [ 141.260919][ T5350] ? __lock_acquire+0xbc3/0x56d0 [ 141.265874][ T5350] ? ref_tracker_free+0x6b0/0x6b0 [ 141.270961][ T5350] dst_init+0xe4/0x520 [ 141.275036][ T5350] dst_alloc+0x16f/0x1f0 [ 141.279300][ T5350] rt_dst_alloc+0x55/0x430 [ 141.283721][ T5350] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 141.289740][ T5350] ip_route_output_key_hash+0x18f/0x340 [ 141.295330][ T5350] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 141.301640][ T5350] dccp_v4_connect+0x7e1/0x1730 [ 141.306547][ T5350] __inet_stream_connect+0x69e/0xed0 [ 141.311884][ T5350] ? inet_listen+0x640/0x640 [ 141.316507][ T5350] ? mark_held_locks+0x9f/0xe0 [ 141.321292][ T5350] ? __local_bh_enable_ip+0xa4/0x130 [ 141.326606][ T5350] inet_stream_connect+0x57/0xa0 [ 141.331576][ T5350] ? __inet_stream_connect+0xed0/0xed0 [ 141.337071][ T5350] __sys_connect_file+0x153/0x1a0 [ 141.342121][ T5350] io_connect+0x3cc/0x720 [ 141.346490][ T5350] ? io_connect_prep+0x250/0x250 [ 141.351459][ T5350] ? receive_fd+0x110/0x110 [ 141.356000][ T5350] ? rcu_read_lock_sched_held+0x3e/0x70 [ 141.361569][ T5350] ? io_connect_prep+0x250/0x250 [ 141.366539][ T5350] io_issue_sqe+0x695/0x1250 [ 141.371160][ T5350] io_submit_sqes+0x96c/0x1e90 [ 141.375973][ T5350] __do_sys_io_uring_enter+0x103d/0x24e0 [ 141.381642][ T5350] ? io_submit_sqes+0x1e90/0x1e90 [ 141.386697][ T5350] ? ptrace_notify+0xfe/0x140 [ 141.391393][ T5350] ? lock_downgrade+0x6e0/0x6e0 [ 141.396273][ T5350] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.401496][ T5350] ? lockdep_hardirqs_on+0x7d/0x100 [ 141.406713][ T5350] ? _raw_spin_unlock_irq+0x2e/0x50 [ 141.411934][ T5350] ? ptrace_notify+0xfe/0x140 [ 141.416663][ T5350] do_syscall_64+0x39/0xb0 [ 141.421137][ T5350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 141.427153][ T5350] RIP: 0033:0x7f607b0de549 [ 141.431599][ T5350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 141.451227][ T5350] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 141.459664][ T5350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 141.467655][ T5350] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 141.475646][ T5350] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5350] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5350] close(3) = 0 [pid 5350] close(4) = 0 [pid 5350] close(5) = 0 [pid 5350] close(6) = 0 [pid 5350] close(7) = 0 [pid 5350] close(8) = -1 EBADF (Bad file descriptor) [pid 5350] close(9) = -1 EBADF (Bad file descriptor) [pid 5350] close(10) = -1 EBADF (Bad file descriptor) [pid 5350] close(11) = -1 EBADF (Bad file descriptor) [pid 5350] close(12) = -1 EBADF (Bad file descriptor) [pid 5350] close(13) = -1 EBADF (Bad file descriptor) [pid 5350] close(14) = -1 EBADF (Bad file descriptor) [pid 5350] close(15) = -1 EBADF (Bad file descriptor) [pid 5350] close(16) = -1 EBADF (Bad file descriptor) [pid 5350] close(17) = -1 EBADF (Bad file descriptor) [pid 5350] close(18) = -1 EBADF (Bad file descriptor) [pid 5350] close(19) = -1 EBADF (Bad file descriptor) [pid 5350] close(20) = -1 EBADF (Bad file descriptor) [pid 5350] close(21) = -1 EBADF (Bad file descriptor) [pid 5350] close(22) = -1 EBADF (Bad file descriptor) [pid 5350] close(23) = -1 EBADF (Bad file descriptor) [pid 5350] close(24) = -1 EBADF (Bad file descriptor) [pid 5350] close(25) = -1 EBADF (Bad file descriptor) [pid 5350] close(26) = -1 EBADF (Bad file descriptor) [pid 5350] close(27) = -1 EBADF (Bad file descriptor) [pid 5350] close(28) = -1 EBADF (Bad file descriptor) [pid 5350] close(29) = -1 EBADF (Bad file descriptor) [pid 5350] exit_group(0) = ? [pid 5350] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=249, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 250 ./strace-static-x86_64: Process 5351 attached [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5351] setpgid(0, 0) = 0 [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5351] write(3, "1000", 4) = 4 [pid 5351] close(3) = 0 [pid 5351] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5351] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5351] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5351] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5351] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 141.483630][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 141.491615][ T5350] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 141.499623][ T5350] [pid 5351] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5351] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5351] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5351] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5351] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5351] write(7, "5", 1) = 1 [ 141.554266][ T5351] FAULT_INJECTION: forcing a failure. [ 141.554266][ T5351] name failslab, interval 1, probability 0, space 0, times 0 [ 141.567077][ T5351] CPU: 0 PID: 5351 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 141.576974][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 141.587030][ T5351] Call Trace: [ 141.590319][ T5351] [ 141.593266][ T5351] dump_stack_lvl+0xd1/0x138 [ 141.597904][ T5351] should_fail_ex.cold+0x5/0xa [ 141.602674][ T5351] ? io_issue_sqe+0x695/0x1250 [ 141.607570][ T5351] should_failslab+0x9/0x20 [ 141.612137][ T5351] __kmem_cache_alloc_node+0x5b/0x330 [ 141.617548][ T5351] ? ref_tracker_alloc+0x158/0x560 [ 141.622676][ T5351] kmalloc_trace+0x26/0x60 [ 141.627113][ T5351] ref_tracker_alloc+0x158/0x560 [ 141.632089][ T5351] ? __lock_acquire+0xbc3/0x56d0 [ 141.637060][ T5351] ? ref_tracker_free+0x6b0/0x6b0 [ 141.642134][ T5351] dst_init+0xe4/0x520 [ 141.646261][ T5351] dst_alloc+0x16f/0x1f0 [ 141.650548][ T5351] rt_dst_alloc+0x55/0x430 [ 141.655009][ T5351] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 141.661041][ T5351] ip_route_output_key_hash+0x18f/0x340 [ 141.666594][ T5351] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 141.672857][ T5351] dccp_v4_connect+0x7e1/0x1730 [ 141.677757][ T5351] __inet_stream_connect+0x69e/0xed0 [ 141.683087][ T5351] ? inet_listen+0x640/0x640 [ 141.687704][ T5351] ? mark_held_locks+0x9f/0xe0 [ 141.692494][ T5351] ? __local_bh_enable_ip+0xa4/0x130 [ 141.697800][ T5351] inet_stream_connect+0x57/0xa0 [ 141.702757][ T5351] ? __inet_stream_connect+0xed0/0xed0 [ 141.708234][ T5351] __sys_connect_file+0x153/0x1a0 [ 141.713277][ T5351] io_connect+0x3cc/0x720 [ 141.717659][ T5351] ? io_connect_prep+0x250/0x250 [ 141.722629][ T5351] ? receive_fd+0x110/0x110 [ 141.727149][ T5351] ? rcu_read_lock_sched_held+0x3e/0x70 [ 141.732695][ T5351] ? io_connect_prep+0x250/0x250 [ 141.737654][ T5351] io_issue_sqe+0x695/0x1250 [ 141.742284][ T5351] io_submit_sqes+0x96c/0x1e90 [ 141.747063][ T5351] __do_sys_io_uring_enter+0x103d/0x24e0 [ 141.752711][ T5351] ? io_submit_sqes+0x1e90/0x1e90 [ 141.757765][ T5351] ? ptrace_notify+0xfe/0x140 [ 141.762455][ T5351] ? lock_downgrade+0x6e0/0x6e0 [ 141.767316][ T5351] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.772534][ T5351] ? lockdep_hardirqs_on+0x7d/0x100 [ 141.777748][ T5351] ? _raw_spin_unlock_irq+0x2e/0x50 [ 141.782978][ T5351] ? ptrace_notify+0xfe/0x140 [ 141.787685][ T5351] do_syscall_64+0x39/0xb0 [ 141.792151][ T5351] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 141.798050][ T5351] RIP: 0033:0x7f607b0de549 [ 141.802462][ T5351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 141.822176][ T5351] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 141.830632][ T5351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 141.838636][ T5351] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 141.846609][ T5351] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5351] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5351] close(3) = 0 [pid 5351] close(4) = 0 [pid 5351] close(5) = 0 [pid 5351] close(6) = 0 [pid 5351] close(7) = 0 [pid 5351] close(8) = -1 EBADF (Bad file descriptor) [pid 5351] close(9) = -1 EBADF (Bad file descriptor) [pid 5351] close(10) = -1 EBADF (Bad file descriptor) [pid 5351] close(11) = -1 EBADF (Bad file descriptor) [pid 5351] close(12) = -1 EBADF (Bad file descriptor) [pid 5351] close(13) = -1 EBADF (Bad file descriptor) [pid 5351] close(14) = -1 EBADF (Bad file descriptor) [pid 5351] close(15) = -1 EBADF (Bad file descriptor) [pid 5351] close(16) = -1 EBADF (Bad file descriptor) [pid 5351] close(17) = -1 EBADF (Bad file descriptor) [pid 5351] close(18) = -1 EBADF (Bad file descriptor) [pid 5351] close(19) = -1 EBADF (Bad file descriptor) [pid 5351] close(20) = -1 EBADF (Bad file descriptor) [pid 5351] close(21) = -1 EBADF (Bad file descriptor) [pid 5351] close(22) = -1 EBADF (Bad file descriptor) [pid 5351] close(23) = -1 EBADF (Bad file descriptor) [pid 5351] close(24) = -1 EBADF (Bad file descriptor) [pid 5351] close(25) = -1 EBADF (Bad file descriptor) [pid 5351] close(26) = -1 EBADF (Bad file descriptor) [pid 5351] close(27) = -1 EBADF (Bad file descriptor) [pid 5351] close(28) = -1 EBADF (Bad file descriptor) [pid 5351] close(29) = -1 EBADF (Bad file descriptor) [pid 5351] exit_group(0) = ? [pid 5351] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=250, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 251 ./strace-static-x86_64: Process 5352 attached [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5352] setpgid(0, 0) = 0 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5352] write(3, "1000", 4) = 4 [pid 5352] close(3) = 0 [pid 5352] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5352] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5352] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5352] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5352] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5352] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5352] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5352] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5352] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5352] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5352] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5352] write(7, "5", 1) = 1 [ 141.854601][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 141.862590][ T5351] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 141.870600][ T5351] [ 141.917389][ T5352] FAULT_INJECTION: forcing a failure. [ 141.917389][ T5352] name failslab, interval 1, probability 0, space 0, times 0 [ 141.930706][ T5352] CPU: 0 PID: 5352 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 141.940658][ T5352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 141.950741][ T5352] Call Trace: [ 141.954034][ T5352] [ 141.956961][ T5352] dump_stack_lvl+0xd1/0x138 [ 141.961562][ T5352] should_fail_ex.cold+0x5/0xa [ 141.966337][ T5352] ? io_issue_sqe+0x695/0x1250 [ 141.971136][ T5352] should_failslab+0x9/0x20 [ 141.975646][ T5352] __kmem_cache_alloc_node+0x5b/0x330 [ 141.981033][ T5352] ? ref_tracker_alloc+0x158/0x560 [ 141.986210][ T5352] kmalloc_trace+0x26/0x60 [ 141.990677][ T5352] ref_tracker_alloc+0x158/0x560 [ 141.995628][ T5352] ? ref_tracker_free+0x6b0/0x6b0 [ 142.000675][ T5352] ? dst_alloc+0x14a/0x1f0 [ 142.005118][ T5352] dst_init+0xe4/0x520 [ 142.009206][ T5352] dst_alloc+0x16f/0x1f0 [ 142.013473][ T5352] rt_dst_alloc+0x55/0x430 [ 142.017906][ T5352] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 142.023902][ T5352] ip_route_output_key_hash+0x18f/0x340 [ 142.029462][ T5352] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 142.035751][ T5352] dccp_v4_connect+0x7e1/0x1730 [ 142.040653][ T5352] __inet_stream_connect+0x69e/0xed0 [ 142.045950][ T5352] ? inet_listen+0x640/0x640 [ 142.050557][ T5352] ? mark_held_locks+0x9f/0xe0 [ 142.055327][ T5352] ? __local_bh_enable_ip+0xa4/0x130 [ 142.060620][ T5352] inet_stream_connect+0x57/0xa0 [ 142.065581][ T5352] ? __inet_stream_connect+0xed0/0xed0 [ 142.071092][ T5352] __sys_connect_file+0x153/0x1a0 [ 142.076165][ T5352] io_connect+0x3cc/0x720 [ 142.080532][ T5352] ? io_connect_prep+0x250/0x250 [ 142.085510][ T5352] ? receive_fd+0x110/0x110 [ 142.090028][ T5352] ? rcu_read_lock_sched_held+0x3e/0x70 [ 142.095579][ T5352] ? io_connect_prep+0x250/0x250 [ 142.100539][ T5352] io_issue_sqe+0x695/0x1250 [ 142.105163][ T5352] io_submit_sqes+0x96c/0x1e90 [ 142.109946][ T5352] __do_sys_io_uring_enter+0x103d/0x24e0 [ 142.115602][ T5352] ? io_submit_sqes+0x1e90/0x1e90 [ 142.120662][ T5352] ? ptrace_notify+0xfe/0x140 [ 142.125390][ T5352] ? lock_downgrade+0x6e0/0x6e0 [ 142.130253][ T5352] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.135484][ T5352] ? lockdep_hardirqs_on+0x7d/0x100 [ 142.140721][ T5352] ? _raw_spin_unlock_irq+0x2e/0x50 [ 142.146049][ T5352] ? ptrace_notify+0xfe/0x140 [ 142.150759][ T5352] do_syscall_64+0x39/0xb0 [ 142.155242][ T5352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 142.161146][ T5352] RIP: 0033:0x7f607b0de549 [ 142.165562][ T5352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 142.185266][ T5352] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 142.193684][ T5352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 142.201663][ T5352] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 142.209642][ T5352] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5352] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5352] close(3) = 0 [pid 5352] close(4) = 0 [pid 5352] close(5) = 0 [pid 5352] close(6) = 0 [pid 5352] close(7) = 0 [pid 5352] close(8) = -1 EBADF (Bad file descriptor) [pid 5352] close(9) = -1 EBADF (Bad file descriptor) [pid 5352] close(10) = -1 EBADF (Bad file descriptor) [pid 5352] close(11) = -1 EBADF (Bad file descriptor) [pid 5352] close(12) = -1 EBADF (Bad file descriptor) [pid 5352] close(13) = -1 EBADF (Bad file descriptor) [pid 5352] close(14) = -1 EBADF (Bad file descriptor) [pid 5352] close(15) = -1 EBADF (Bad file descriptor) [pid 5352] close(16) = -1 EBADF (Bad file descriptor) [pid 5352] close(17) = -1 EBADF (Bad file descriptor) [pid 5352] close(18) = -1 EBADF (Bad file descriptor) [pid 5352] close(19) = -1 EBADF (Bad file descriptor) [pid 5352] close(20) = -1 EBADF (Bad file descriptor) [pid 5352] close(21) = -1 EBADF (Bad file descriptor) [pid 5352] close(22) = -1 EBADF (Bad file descriptor) [pid 5352] close(23) = -1 EBADF (Bad file descriptor) [pid 5352] close(24) = -1 EBADF (Bad file descriptor) [pid 5352] close(25) = -1 EBADF (Bad file descriptor) [pid 5352] close(26) = -1 EBADF (Bad file descriptor) [pid 5352] close(27) = -1 EBADF (Bad file descriptor) [pid 5352] close(28) = -1 EBADF (Bad file descriptor) [pid 5352] close(29) = -1 EBADF (Bad file descriptor) [pid 5352] exit_group(0) = ? [pid 5352] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=251, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 252 ./strace-static-x86_64: Process 5353 attached [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5353] setpgid(0, 0) = 0 [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5353] write(3, "1000", 4) = 4 [pid 5353] close(3) = 0 [pid 5353] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5353] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5353] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5353] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5353] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5353] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5353] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5353] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5353] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5353] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5353] write(7, "5", 1) = 1 [ 142.217627][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 142.225626][ T5352] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 142.233611][ T5352] [ 142.269153][ T5353] FAULT_INJECTION: forcing a failure. [ 142.269153][ T5353] name failslab, interval 1, probability 0, space 0, times 0 [ 142.281911][ T5353] CPU: 0 PID: 5353 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 142.291822][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 142.301899][ T5353] Call Trace: [ 142.305191][ T5353] [ 142.308153][ T5353] dump_stack_lvl+0xd1/0x138 [ 142.312961][ T5353] should_fail_ex.cold+0x5/0xa [ 142.317735][ T5353] ? io_issue_sqe+0x695/0x1250 [ 142.322517][ T5353] should_failslab+0x9/0x20 [ 142.327071][ T5353] __kmem_cache_alloc_node+0x5b/0x330 [ 142.332474][ T5353] ? ref_tracker_alloc+0x158/0x560 [ 142.337617][ T5353] kmalloc_trace+0x26/0x60 [ 142.342096][ T5353] ref_tracker_alloc+0x158/0x560 [ 142.347071][ T5353] ? __lock_acquire+0xbc3/0x56d0 [ 142.352053][ T5353] ? ref_tracker_free+0x6b0/0x6b0 [ 142.357134][ T5353] dst_init+0xe4/0x520 [ 142.361235][ T5353] dst_alloc+0x16f/0x1f0 [ 142.365510][ T5353] rt_dst_alloc+0x55/0x430 [ 142.369977][ T5353] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 142.376002][ T5353] ip_route_output_key_hash+0x18f/0x340 [ 142.381585][ T5353] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 142.387886][ T5353] dccp_v4_connect+0x7e1/0x1730 [ 142.392791][ T5353] __inet_stream_connect+0x69e/0xed0 [ 142.398118][ T5353] ? inet_listen+0x640/0x640 [ 142.402744][ T5353] ? mark_held_locks+0x9f/0xe0 [ 142.407534][ T5353] ? __local_bh_enable_ip+0xa4/0x130 [ 142.412851][ T5353] inet_stream_connect+0x57/0xa0 [ 142.417824][ T5353] ? __inet_stream_connect+0xed0/0xed0 [ 142.423352][ T5353] __sys_connect_file+0x153/0x1a0 [ 142.428404][ T5353] io_connect+0x3cc/0x720 [ 142.432772][ T5353] ? io_connect_prep+0x250/0x250 [ 142.437738][ T5353] ? receive_fd+0x110/0x110 [ 142.442282][ T5353] ? rcu_read_lock_sched_held+0x3e/0x70 [ 142.447851][ T5353] ? io_connect_prep+0x250/0x250 [ 142.452821][ T5353] io_issue_sqe+0x695/0x1250 [ 142.457445][ T5353] io_submit_sqes+0x96c/0x1e90 [ 142.462257][ T5353] __do_sys_io_uring_enter+0x103d/0x24e0 [ 142.467928][ T5353] ? io_submit_sqes+0x1e90/0x1e90 [ 142.472990][ T5353] ? ptrace_notify+0xfe/0x140 [ 142.477698][ T5353] ? lock_downgrade+0x6e0/0x6e0 [ 142.482589][ T5353] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.487824][ T5353] ? lockdep_hardirqs_on+0x7d/0x100 [ 142.493043][ T5353] ? _raw_spin_unlock_irq+0x2e/0x50 [ 142.498266][ T5353] ? ptrace_notify+0xfe/0x140 [ 142.502974][ T5353] do_syscall_64+0x39/0xb0 [ 142.507423][ T5353] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 142.513341][ T5353] RIP: 0033:0x7f607b0de549 [ 142.517773][ T5353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 142.537403][ T5353] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 142.545847][ T5353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 142.553831][ T5353] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 142.561814][ T5353] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5353] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5353] close(3) = 0 [pid 5353] close(4) = 0 [pid 5353] close(5) = 0 [pid 5353] close(6) = 0 [pid 5353] close(7) = 0 [pid 5353] close(8) = -1 EBADF (Bad file descriptor) [pid 5353] close(9) = -1 EBADF (Bad file descriptor) [pid 5353] close(10) = -1 EBADF (Bad file descriptor) [pid 5353] close(11) = -1 EBADF (Bad file descriptor) [pid 5353] close(12) = -1 EBADF (Bad file descriptor) [pid 5353] close(13) = -1 EBADF (Bad file descriptor) [pid 5353] close(14) = -1 EBADF (Bad file descriptor) [pid 5353] close(15) = -1 EBADF (Bad file descriptor) [pid 5353] close(16) = -1 EBADF (Bad file descriptor) [pid 5353] close(17) = -1 EBADF (Bad file descriptor) [pid 5353] close(18) = -1 EBADF (Bad file descriptor) [pid 5353] close(19) = -1 EBADF (Bad file descriptor) [pid 5353] close(20) = -1 EBADF (Bad file descriptor) [pid 5353] close(21) = -1 EBADF (Bad file descriptor) [pid 5353] close(22) = -1 EBADF (Bad file descriptor) [pid 5353] close(23) = -1 EBADF (Bad file descriptor) [pid 5353] close(24) = -1 EBADF (Bad file descriptor) [pid 5353] close(25) = -1 EBADF (Bad file descriptor) [pid 5353] close(26) = -1 EBADF (Bad file descriptor) [pid 5353] close(27) = -1 EBADF (Bad file descriptor) [pid 5353] close(28) = -1 EBADF (Bad file descriptor) [pid 5353] close(29) = -1 EBADF (Bad file descriptor) [pid 5353] exit_group(0) = ? [pid 5353] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=252, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5354 attached [pid 5354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... clone resumed>, child_tidptr=0x555555eff5d0) = 253 [pid 5354] <... prctl resumed>) = 0 [pid 5354] setpgid(0, 0) = 0 [pid 5354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5354] write(3, "1000", 4) = 4 [pid 5354] close(3) = 0 [pid 5354] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5354] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5354] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5354] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5354] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5354] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5354] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5354] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5354] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5354] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5354] write(7, "5", 1) = 1 [ 142.569824][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 142.577824][ T5353] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 142.585853][ T5353] [ 142.624101][ T5354] FAULT_INJECTION: forcing a failure. [ 142.624101][ T5354] name failslab, interval 1, probability 0, space 0, times 0 [ 142.637209][ T5354] CPU: 0 PID: 5354 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 142.647117][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 142.657178][ T5354] Call Trace: [ 142.660470][ T5354] [ 142.663432][ T5354] dump_stack_lvl+0xd1/0x138 [ 142.668061][ T5354] should_fail_ex.cold+0x5/0xa [ 142.672827][ T5354] ? io_issue_sqe+0x695/0x1250 [ 142.677619][ T5354] should_failslab+0x9/0x20 [ 142.682173][ T5354] __kmem_cache_alloc_node+0x5b/0x330 [ 142.687565][ T5354] ? ref_tracker_alloc+0x158/0x560 [ 142.692717][ T5354] kmalloc_trace+0x26/0x60 [ 142.697144][ T5354] ref_tracker_alloc+0x158/0x560 [ 142.702100][ T5354] ? __lock_acquire+0xbc3/0x56d0 [ 142.707053][ T5354] ? ref_tracker_free+0x6b0/0x6b0 [ 142.712109][ T5354] dst_init+0xe4/0x520 [ 142.716203][ T5354] dst_alloc+0x16f/0x1f0 [ 142.720497][ T5354] rt_dst_alloc+0x55/0x430 [ 142.724945][ T5354] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 142.730936][ T5354] ip_route_output_key_hash+0x18f/0x340 [ 142.736491][ T5354] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 142.742768][ T5354] dccp_v4_connect+0x7e1/0x1730 [ 142.747672][ T5354] __inet_stream_connect+0x69e/0xed0 [ 142.752998][ T5354] ? inet_listen+0x640/0x640 [ 142.757630][ T5354] ? mark_held_locks+0x9f/0xe0 [ 142.762421][ T5354] ? __local_bh_enable_ip+0xa4/0x130 [ 142.767732][ T5354] inet_stream_connect+0x57/0xa0 [ 142.772700][ T5354] ? __inet_stream_connect+0xed0/0xed0 [ 142.778189][ T5354] __sys_connect_file+0x153/0x1a0 [ 142.783237][ T5354] io_connect+0x3cc/0x720 [ 142.787599][ T5354] ? io_connect_prep+0x250/0x250 [ 142.792566][ T5354] ? receive_fd+0x110/0x110 [ 142.797106][ T5354] ? rcu_read_lock_sched_held+0x3e/0x70 [ 142.802673][ T5354] ? io_connect_prep+0x250/0x250 [ 142.807644][ T5354] io_issue_sqe+0x695/0x1250 [ 142.812269][ T5354] io_submit_sqes+0x96c/0x1e90 [ 142.817081][ T5354] __do_sys_io_uring_enter+0x103d/0x24e0 [ 142.822751][ T5354] ? io_submit_sqes+0x1e90/0x1e90 [ 142.827814][ T5354] ? ptrace_notify+0xfe/0x140 [ 142.832513][ T5354] ? lock_downgrade+0x6e0/0x6e0 [ 142.837393][ T5354] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.842621][ T5354] ? lockdep_hardirqs_on+0x7d/0x100 [ 142.847844][ T5354] ? _raw_spin_unlock_irq+0x2e/0x50 [ 142.853065][ T5354] ? ptrace_notify+0xfe/0x140 [ 142.857765][ T5354] do_syscall_64+0x39/0xb0 [ 142.862212][ T5354] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 142.868131][ T5354] RIP: 0033:0x7f607b0de549 [ 142.872558][ T5354] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 142.892187][ T5354] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 142.900620][ T5354] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 142.908613][ T5354] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 142.916599][ T5354] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5354] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5354] close(3) = 0 [pid 5354] close(4) = 0 [pid 5354] close(5) = 0 [pid 5354] close(6) = 0 [pid 5354] close(7) = 0 [pid 5354] close(8) = -1 EBADF (Bad file descriptor) [pid 5354] close(9) = -1 EBADF (Bad file descriptor) [pid 5354] close(10) = -1 EBADF (Bad file descriptor) [pid 5354] close(11) = -1 EBADF (Bad file descriptor) [pid 5354] close(12) = -1 EBADF (Bad file descriptor) [pid 5354] close(13) = -1 EBADF (Bad file descriptor) [pid 5354] close(14) = -1 EBADF (Bad file descriptor) [pid 5354] close(15) = -1 EBADF (Bad file descriptor) [pid 5354] close(16) = -1 EBADF (Bad file descriptor) [pid 5354] close(17) = -1 EBADF (Bad file descriptor) [pid 5354] close(18) = -1 EBADF (Bad file descriptor) [pid 5354] close(19) = -1 EBADF (Bad file descriptor) [pid 5354] close(20) = -1 EBADF (Bad file descriptor) [pid 5354] close(21) = -1 EBADF (Bad file descriptor) [pid 5354] close(22) = -1 EBADF (Bad file descriptor) [pid 5354] close(23) = -1 EBADF (Bad file descriptor) [pid 5354] close(24) = -1 EBADF (Bad file descriptor) [pid 5354] close(25) = -1 EBADF (Bad file descriptor) [pid 5354] close(26) = -1 EBADF (Bad file descriptor) [pid 5354] close(27) = -1 EBADF (Bad file descriptor) [pid 5354] close(28) = -1 EBADF (Bad file descriptor) [pid 5354] close(29) = -1 EBADF (Bad file descriptor) [pid 5354] exit_group(0) = ? [pid 5354] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=253, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 254 ./strace-static-x86_64: Process 5355 attached [pid 5355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5355] setpgid(0, 0) = 0 [pid 5355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5355] write(3, "1000", 4) = 4 [pid 5355] close(3) = 0 [pid 5355] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5355] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5355] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5355] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5355] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5355] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5355] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5355] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5355] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5355] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5355] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5355] write(7, "5", 1) = 1 [ 142.924583][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 142.932577][ T5354] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 142.940598][ T5354] [ 142.984890][ T5355] FAULT_INJECTION: forcing a failure. [ 142.984890][ T5355] name failslab, interval 1, probability 0, space 0, times 0 [ 142.997600][ T5355] CPU: 0 PID: 5355 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 143.007495][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 143.017561][ T5355] Call Trace: [ 143.020852][ T5355] [ 143.023808][ T5355] dump_stack_lvl+0xd1/0x138 [ 143.028446][ T5355] should_fail_ex.cold+0x5/0xa [ 143.033239][ T5355] ? __inet_hash_connect+0x95e/0x1ba0 [ 143.038635][ T5355] should_failslab+0x9/0x20 [ 143.043184][ T5355] kmem_cache_alloc+0x5a/0x320 [ 143.047972][ T5355] __inet_hash_connect+0x95e/0x1ba0 [ 143.053183][ T5355] ? __inet_lookup_listener+0xbf0/0xbf0 [ 143.058744][ T5355] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 143.065116][ T5355] dccp_v4_connect+0xb82/0x1730 [ 143.070042][ T5355] __inet_stream_connect+0x69e/0xed0 [ 143.075355][ T5355] ? inet_listen+0x640/0x640 [ 143.079994][ T5355] ? mark_held_locks+0x9f/0xe0 [ 143.084762][ T5355] ? __local_bh_enable_ip+0xa4/0x130 [ 143.090071][ T5355] inet_stream_connect+0x57/0xa0 [ 143.095049][ T5355] ? __inet_stream_connect+0xed0/0xed0 [ 143.100532][ T5355] __sys_connect_file+0x153/0x1a0 [ 143.105586][ T5355] io_connect+0x3cc/0x720 [ 143.109926][ T5355] ? io_connect_prep+0x250/0x250 [ 143.114874][ T5355] ? receive_fd+0x110/0x110 [ 143.119420][ T5355] ? rcu_read_lock_sched_held+0x3e/0x70 [ 143.124991][ T5355] ? io_connect_prep+0x250/0x250 [ 143.129970][ T5355] io_issue_sqe+0x695/0x1250 [ 143.134679][ T5355] io_submit_sqes+0x96c/0x1e90 [ 143.139497][ T5355] __do_sys_io_uring_enter+0x103d/0x24e0 [ 143.145188][ T5355] ? io_submit_sqes+0x1e90/0x1e90 [ 143.150244][ T5355] ? ptrace_notify+0xfe/0x140 [ 143.154958][ T5355] ? lock_downgrade+0x6e0/0x6e0 [ 143.159845][ T5355] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.165069][ T5355] ? lockdep_hardirqs_on+0x7d/0x100 [ 143.170298][ T5355] ? _raw_spin_unlock_irq+0x2e/0x50 [ 143.175525][ T5355] ? ptrace_notify+0xfe/0x140 [ 143.180232][ T5355] do_syscall_64+0x39/0xb0 [ 143.184680][ T5355] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.190594][ T5355] RIP: 0033:0x7f607b0de549 [ 143.195030][ T5355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 143.214661][ T5355] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 143.223096][ T5355] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5355] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5355] close(3) = 0 [pid 5355] close(4) = 0 [pid 5355] close(5) = 0 [pid 5355] close(6) = 0 [pid 5355] close(7) = 0 [pid 5355] close(8) = -1 EBADF (Bad file descriptor) [pid 5355] close(9) = -1 EBADF (Bad file descriptor) [pid 5355] close(10) = -1 EBADF (Bad file descriptor) [pid 5355] close(11) = -1 EBADF (Bad file descriptor) [pid 5355] close(12) = -1 EBADF (Bad file descriptor) [pid 5355] close(13) = -1 EBADF (Bad file descriptor) [pid 5355] close(14) = -1 EBADF (Bad file descriptor) [pid 5355] close(15) = -1 EBADF (Bad file descriptor) [pid 5355] close(16) = -1 EBADF (Bad file descriptor) [pid 5355] close(17) = -1 EBADF (Bad file descriptor) [pid 5355] close(18) = -1 EBADF (Bad file descriptor) [pid 5355] close(19) = -1 EBADF (Bad file descriptor) [pid 5355] close(20) = -1 EBADF (Bad file descriptor) [pid 5355] close(21) = -1 EBADF (Bad file descriptor) [pid 5355] close(22) = -1 EBADF (Bad file descriptor) [pid 5355] close(23) = -1 EBADF (Bad file descriptor) [pid 5355] close(24) = -1 EBADF (Bad file descriptor) [pid 5355] close(25) = -1 EBADF (Bad file descriptor) [pid 5355] close(26) = -1 EBADF (Bad file descriptor) [pid 5355] close(27) = -1 EBADF (Bad file descriptor) [pid 5355] close(28) = -1 EBADF (Bad file descriptor) [pid 5355] close(29) = -1 EBADF (Bad file descriptor) [pid 5355] exit_group(0) = ? [pid 5355] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=254, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 255 ./strace-static-x86_64: Process 5356 attached [pid 5356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5356] setpgid(0, 0) = 0 [pid 5356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5356] write(3, "1000", 4) = 4 [pid 5356] close(3) = 0 [pid 5356] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5356] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5356] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5356] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5356] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5356] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5356] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5356] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5356] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5356] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5356] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5356] write(7, "5", 1) = 1 [ 143.231091][ T5355] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 143.239078][ T5355] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 143.247068][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 143.255053][ T5355] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 143.263063][ T5355] [ 143.305642][ T5356] FAULT_INJECTION: forcing a failure. [ 143.305642][ T5356] name failslab, interval 1, probability 0, space 0, times 0 [ 143.318714][ T5356] CPU: 0 PID: 5356 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 143.328641][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 143.338696][ T5356] Call Trace: [ 143.341974][ T5356] [ 143.344903][ T5356] dump_stack_lvl+0xd1/0x138 [ 143.349507][ T5356] should_fail_ex.cold+0x5/0xa [ 143.354272][ T5356] ? io_issue_sqe+0x695/0x1250 [ 143.359057][ T5356] should_failslab+0x9/0x20 [ 143.363600][ T5356] __kmem_cache_alloc_node+0x5b/0x330 [ 143.368974][ T5356] ? ref_tracker_alloc+0x158/0x560 [ 143.374099][ T5356] kmalloc_trace+0x26/0x60 [ 143.378526][ T5356] ref_tracker_alloc+0x158/0x560 [ 143.383480][ T5356] ? __lock_acquire+0xbc3/0x56d0 [ 143.388436][ T5356] ? ref_tracker_free+0x6b0/0x6b0 [ 143.393519][ T5356] dst_init+0xe4/0x520 [ 143.397597][ T5356] dst_alloc+0x16f/0x1f0 [ 143.401845][ T5356] rt_dst_alloc+0x55/0x430 [ 143.406265][ T5356] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 143.412304][ T5356] ip_route_output_key_hash+0x18f/0x340 [ 143.417859][ T5356] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 143.424148][ T5356] dccp_v4_connect+0x7e1/0x1730 [ 143.429048][ T5356] __inet_stream_connect+0x69e/0xed0 [ 143.434362][ T5356] ? inet_listen+0x640/0x640 [ 143.438998][ T5356] ? mark_held_locks+0x9f/0xe0 [ 143.443767][ T5356] ? __local_bh_enable_ip+0xa4/0x130 [ 143.449064][ T5356] inet_stream_connect+0x57/0xa0 [ 143.454113][ T5356] ? __inet_stream_connect+0xed0/0xed0 [ 143.459648][ T5356] __sys_connect_file+0x153/0x1a0 [ 143.464710][ T5356] io_connect+0x3cc/0x720 [ 143.469053][ T5356] ? io_connect_prep+0x250/0x250 [ 143.474005][ T5356] ? receive_fd+0x110/0x110 [ 143.478551][ T5356] ? rcu_read_lock_sched_held+0x3e/0x70 [ 143.484143][ T5356] ? io_connect_prep+0x250/0x250 [ 143.489125][ T5356] io_issue_sqe+0x695/0x1250 [ 143.493721][ T5356] io_submit_sqes+0x96c/0x1e90 [ 143.498528][ T5356] __do_sys_io_uring_enter+0x103d/0x24e0 [ 143.504234][ T5356] ? io_submit_sqes+0x1e90/0x1e90 [ 143.509307][ T5356] ? ptrace_notify+0xfe/0x140 [ 143.514039][ T5356] ? lock_downgrade+0x6e0/0x6e0 [ 143.518919][ T5356] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.524160][ T5356] ? lockdep_hardirqs_on+0x7d/0x100 [ 143.529363][ T5356] ? _raw_spin_unlock_irq+0x2e/0x50 [ 143.534581][ T5356] ? ptrace_notify+0xfe/0x140 [ 143.539375][ T5356] do_syscall_64+0x39/0xb0 [ 143.543799][ T5356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.549701][ T5356] RIP: 0033:0x7f607b0de549 [ 143.554118][ T5356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 143.573730][ T5356] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 143.582156][ T5356] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 143.590145][ T5356] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 143.598124][ T5356] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5356] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5356] close(3) = 0 [pid 5356] close(4) = 0 [pid 5356] close(5) = 0 [pid 5356] close(6) = 0 [pid 5356] close(7) = 0 [pid 5356] close(8) = -1 EBADF (Bad file descriptor) [pid 5356] close(9) = -1 EBADF (Bad file descriptor) [pid 5356] close(10) = -1 EBADF (Bad file descriptor) [pid 5356] close(11) = -1 EBADF (Bad file descriptor) [pid 5356] close(12) = -1 EBADF (Bad file descriptor) [pid 5356] close(13) = -1 EBADF (Bad file descriptor) [pid 5356] close(14) = -1 EBADF (Bad file descriptor) [pid 5356] close(15) = -1 EBADF (Bad file descriptor) [pid 5356] close(16) = -1 EBADF (Bad file descriptor) [pid 5356] close(17) = -1 EBADF (Bad file descriptor) [pid 5356] close(18) = -1 EBADF (Bad file descriptor) [pid 5356] close(19) = -1 EBADF (Bad file descriptor) [pid 5356] close(20) = -1 EBADF (Bad file descriptor) [pid 5356] close(21) = -1 EBADF (Bad file descriptor) [pid 5356] close(22) = -1 EBADF (Bad file descriptor) [pid 5356] close(23) = -1 EBADF (Bad file descriptor) [pid 5356] close(24) = -1 EBADF (Bad file descriptor) [pid 5356] close(25) = -1 EBADF (Bad file descriptor) [pid 5356] close(26) = -1 EBADF (Bad file descriptor) [pid 5356] close(27) = -1 EBADF (Bad file descriptor) [pid 5356] close(28) = -1 EBADF (Bad file descriptor) [pid 5356] close(29) = -1 EBADF (Bad file descriptor) [pid 5356] exit_group(0) = ? [pid 5356] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=255, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 256 ./strace-static-x86_64: Process 5357 attached [pid 5357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5357] setpgid(0, 0) = 0 [pid 5357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5357] write(3, "1000", 4) = 4 [pid 5357] close(3) = 0 [pid 5357] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5357] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5357] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5357] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5357] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5357] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5357] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5357] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5357] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5357] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5357] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5357] write(7, "5", 1) = 1 [ 143.606104][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 143.614097][ T5356] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 143.622114][ T5356] [ 143.663685][ T5357] FAULT_INJECTION: forcing a failure. [ 143.663685][ T5357] name failslab, interval 1, probability 0, space 0, times 0 [ 143.676723][ T5357] CPU: 1 PID: 5357 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 143.686664][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 143.696728][ T5357] Call Trace: [ 143.700012][ T5357] [ 143.702945][ T5357] dump_stack_lvl+0xd1/0x138 [ 143.707565][ T5357] should_fail_ex.cold+0x5/0xa [ 143.712354][ T5357] ? io_issue_sqe+0x695/0x1250 [ 143.717129][ T5357] should_failslab+0x9/0x20 [ 143.721656][ T5357] __kmem_cache_alloc_node+0x5b/0x330 [ 143.727060][ T5357] ? ref_tracker_alloc+0x158/0x560 [ 143.732209][ T5357] kmalloc_trace+0x26/0x60 [ 143.736633][ T5357] ref_tracker_alloc+0x158/0x560 [ 143.741593][ T5357] ? __lock_acquire+0xbc3/0x56d0 [ 143.746563][ T5357] ? ref_tracker_free+0x6b0/0x6b0 [ 143.751644][ T5357] dst_init+0xe4/0x520 [ 143.755832][ T5357] dst_alloc+0x16f/0x1f0 [ 143.760103][ T5357] rt_dst_alloc+0x55/0x430 [ 143.764548][ T5357] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 143.770575][ T5357] ip_route_output_key_hash+0x18f/0x340 [ 143.776150][ T5357] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 143.782449][ T5357] dccp_v4_connect+0x7e1/0x1730 [ 143.787352][ T5357] __inet_stream_connect+0x69e/0xed0 [ 143.792685][ T5357] ? inet_listen+0x640/0x640 [ 143.797338][ T5357] ? mark_held_locks+0x9f/0xe0 [ 143.802127][ T5357] ? __local_bh_enable_ip+0xa4/0x130 [ 143.807449][ T5357] inet_stream_connect+0x57/0xa0 [ 143.812425][ T5357] ? __inet_stream_connect+0xed0/0xed0 [ 143.817919][ T5357] __sys_connect_file+0x153/0x1a0 [ 143.822970][ T5357] io_connect+0x3cc/0x720 [ 143.827353][ T5357] ? io_connect_prep+0x250/0x250 [ 143.832325][ T5357] ? receive_fd+0x110/0x110 [ 143.836870][ T5357] ? rcu_read_lock_sched_held+0x3e/0x70 [ 143.842440][ T5357] ? io_connect_prep+0x250/0x250 [ 143.847416][ T5357] io_issue_sqe+0x695/0x1250 [ 143.852040][ T5357] io_submit_sqes+0x96c/0x1e90 [ 143.856852][ T5357] __do_sys_io_uring_enter+0x103d/0x24e0 [ 143.862527][ T5357] ? io_submit_sqes+0x1e90/0x1e90 [ 143.867583][ T5357] ? ptrace_notify+0xfe/0x140 [ 143.872288][ T5357] ? lock_downgrade+0x6e0/0x6e0 [ 143.877191][ T5357] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.882421][ T5357] ? lockdep_hardirqs_on+0x7d/0x100 [ 143.887646][ T5357] ? _raw_spin_unlock_irq+0x2e/0x50 [ 143.892871][ T5357] ? ptrace_notify+0xfe/0x140 [ 143.897580][ T5357] do_syscall_64+0x39/0xb0 [ 143.902031][ T5357] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.908050][ T5357] RIP: 0033:0x7f607b0de549 [ 143.912486][ T5357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 143.932125][ T5357] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 143.940564][ T5357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 143.948550][ T5357] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 143.956535][ T5357] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5357] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5357] close(3) = 0 [pid 5357] close(4) = 0 [pid 5357] close(5) = 0 [pid 5357] close(6) = 0 [pid 5357] close(7) = 0 [pid 5357] close(8) = -1 EBADF (Bad file descriptor) [pid 5357] close(9) = -1 EBADF (Bad file descriptor) [pid 5357] close(10) = -1 EBADF (Bad file descriptor) [pid 5357] close(11) = -1 EBADF (Bad file descriptor) [pid 5357] close(12) = -1 EBADF (Bad file descriptor) [pid 5357] close(13) = -1 EBADF (Bad file descriptor) [pid 5357] close(14) = -1 EBADF (Bad file descriptor) [pid 5357] close(15) = -1 EBADF (Bad file descriptor) [pid 5357] close(16) = -1 EBADF (Bad file descriptor) [pid 5357] close(17) = -1 EBADF (Bad file descriptor) [pid 5357] close(18) = -1 EBADF (Bad file descriptor) [pid 5357] close(19) = -1 EBADF (Bad file descriptor) [pid 5357] close(20) = -1 EBADF (Bad file descriptor) [pid 5357] close(21) = -1 EBADF (Bad file descriptor) [pid 5357] close(22) = -1 EBADF (Bad file descriptor) [pid 5357] close(23) = -1 EBADF (Bad file descriptor) [pid 5357] close(24) = -1 EBADF (Bad file descriptor) [pid 5357] close(25) = -1 EBADF (Bad file descriptor) [pid 5357] close(26) = -1 EBADF (Bad file descriptor) [pid 5357] close(27) = -1 EBADF (Bad file descriptor) [pid 5357] close(28) = -1 EBADF (Bad file descriptor) [pid 5357] close(29) = -1 EBADF (Bad file descriptor) [pid 5357] exit_group(0) = ? [pid 5357] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=256, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 257 ./strace-static-x86_64: Process 5358 attached [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5358] setpgid(0, 0) = 0 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5358] write(3, "1000", 4) = 4 [pid 5358] close(3) = 0 [pid 5358] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5358] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5358] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5358] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5358] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5358] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5358] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5358] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5358] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5358] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5358] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5358] write(7, "5", 1) = 1 [ 143.964522][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 143.972509][ T5357] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 143.980518][ T5357] [ 144.024867][ T5358] FAULT_INJECTION: forcing a failure. [ 144.024867][ T5358] name failslab, interval 1, probability 0, space 0, times 0 [ 144.037598][ T5358] CPU: 0 PID: 5358 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 144.047497][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 144.057582][ T5358] Call Trace: [ 144.060874][ T5358] [ 144.063808][ T5358] dump_stack_lvl+0xd1/0x138 [ 144.068405][ T5358] should_fail_ex.cold+0x5/0xa [ 144.073188][ T5358] ? __inet_hash_connect+0x95e/0x1ba0 [ 144.078589][ T5358] should_failslab+0x9/0x20 [ 144.083105][ T5358] kmem_cache_alloc+0x5a/0x320 [ 144.087911][ T5358] __inet_hash_connect+0x95e/0x1ba0 [ 144.093117][ T5358] ? __inet_lookup_listener+0xbf0/0xbf0 [ 144.098671][ T5358] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 144.105019][ T5358] dccp_v4_connect+0xb82/0x1730 [ 144.109896][ T5358] __inet_stream_connect+0x69e/0xed0 [ 144.115213][ T5358] ? inet_listen+0x640/0x640 [ 144.119840][ T5358] ? mark_held_locks+0x9f/0xe0 [ 144.124609][ T5358] ? __local_bh_enable_ip+0xa4/0x130 [ 144.129908][ T5358] inet_stream_connect+0x57/0xa0 [ 144.134855][ T5358] ? __inet_stream_connect+0xed0/0xed0 [ 144.140345][ T5358] __sys_connect_file+0x153/0x1a0 [ 144.145404][ T5358] io_connect+0x3cc/0x720 [ 144.149770][ T5358] ? io_connect_prep+0x250/0x250 [ 144.154740][ T5358] ? receive_fd+0x110/0x110 [ 144.159286][ T5358] ? rcu_read_lock_sched_held+0x3e/0x70 [ 144.164860][ T5358] ? io_connect_prep+0x250/0x250 [ 144.169839][ T5358] io_issue_sqe+0x695/0x1250 [ 144.174469][ T5358] io_submit_sqes+0x96c/0x1e90 [ 144.179279][ T5358] __do_sys_io_uring_enter+0x103d/0x24e0 [ 144.184954][ T5358] ? io_submit_sqes+0x1e90/0x1e90 [ 144.190017][ T5358] ? ptrace_notify+0xfe/0x140 [ 144.194725][ T5358] ? lock_downgrade+0x6e0/0x6e0 [ 144.199620][ T5358] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.204870][ T5358] ? lockdep_hardirqs_on+0x7d/0x100 [ 144.210093][ T5358] ? _raw_spin_unlock_irq+0x2e/0x50 [ 144.215323][ T5358] ? ptrace_notify+0xfe/0x140 [ 144.220063][ T5358] do_syscall_64+0x39/0xb0 [ 144.224511][ T5358] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 144.230425][ T5358] RIP: 0033:0x7f607b0de549 [ 144.234856][ T5358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 144.254577][ T5358] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 144.263013][ T5358] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5358] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5358] close(3) = 0 [pid 5358] close(4) = 0 [pid 5358] close(5) = 0 [pid 5358] close(6) = 0 [pid 5358] close(7) = 0 [pid 5358] close(8) = -1 EBADF (Bad file descriptor) [pid 5358] close(9) = -1 EBADF (Bad file descriptor) [pid 5358] close(10) = -1 EBADF (Bad file descriptor) [pid 5358] close(11) = -1 EBADF (Bad file descriptor) [pid 5358] close(12) = -1 EBADF (Bad file descriptor) [pid 5358] close(13) = -1 EBADF (Bad file descriptor) [pid 5358] close(14) = -1 EBADF (Bad file descriptor) [pid 5358] close(15) = -1 EBADF (Bad file descriptor) [pid 5358] close(16) = -1 EBADF (Bad file descriptor) [pid 5358] close(17) = -1 EBADF (Bad file descriptor) [pid 5358] close(18) = -1 EBADF (Bad file descriptor) [pid 5358] close(19) = -1 EBADF (Bad file descriptor) [pid 5358] close(20) = -1 EBADF (Bad file descriptor) [pid 5358] close(21) = -1 EBADF (Bad file descriptor) [pid 5358] close(22) = -1 EBADF (Bad file descriptor) [pid 5358] close(23) = -1 EBADF (Bad file descriptor) [pid 5358] close(24) = -1 EBADF (Bad file descriptor) [pid 5358] close(25) = -1 EBADF (Bad file descriptor) [pid 5358] close(26) = -1 EBADF (Bad file descriptor) [pid 5358] close(27) = -1 EBADF (Bad file descriptor) [pid 5358] close(28) = -1 EBADF (Bad file descriptor) [pid 5358] close(29) = -1 EBADF (Bad file descriptor) [pid 5358] exit_group(0) = ? [pid 5358] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=257, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 258 ./strace-static-x86_64: Process 5359 attached [pid 5359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5359] setpgid(0, 0) = 0 [pid 5359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5359] write(3, "1000", 4) = 4 [pid 5359] close(3) = 0 [pid 5359] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5359] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5359] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5359] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5359] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5359] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5359] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5359] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5359] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5359] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5359] write(7, "5", 1) = 1 [ 144.270997][ T5358] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 144.278989][ T5358] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 144.286980][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 144.294965][ T5358] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 144.302976][ T5358] [ 144.340025][ T5359] FAULT_INJECTION: forcing a failure. [ 144.340025][ T5359] name failslab, interval 1, probability 0, space 0, times 0 [ 144.352996][ T5359] CPU: 0 PID: 5359 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 144.362920][ T5359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 144.372977][ T5359] Call Trace: [ 144.376253][ T5359] [ 144.379180][ T5359] dump_stack_lvl+0xd1/0x138 [ 144.383801][ T5359] should_fail_ex.cold+0x5/0xa [ 144.388593][ T5359] ? io_issue_sqe+0x695/0x1250 [ 144.393363][ T5359] should_failslab+0x9/0x20 [ 144.397886][ T5359] __kmem_cache_alloc_node+0x5b/0x330 [ 144.403283][ T5359] ? ref_tracker_alloc+0x158/0x560 [ 144.408403][ T5359] kmalloc_trace+0x26/0x60 [ 144.412915][ T5359] ref_tracker_alloc+0x158/0x560 [ 144.417874][ T5359] ? __lock_acquire+0xbc3/0x56d0 [ 144.422844][ T5359] ? ref_tracker_free+0x6b0/0x6b0 [ 144.427933][ T5359] dst_init+0xe4/0x520 [ 144.432062][ T5359] dst_alloc+0x16f/0x1f0 [ 144.436355][ T5359] rt_dst_alloc+0x55/0x430 [ 144.440835][ T5359] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 144.446903][ T5359] ip_route_output_key_hash+0x18f/0x340 [ 144.452459][ T5359] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 144.458723][ T5359] dccp_v4_connect+0x7e1/0x1730 [ 144.463699][ T5359] __inet_stream_connect+0x69e/0xed0 [ 144.469016][ T5359] ? inet_listen+0x640/0x640 [ 144.473645][ T5359] ? mark_held_locks+0x9f/0xe0 [ 144.478414][ T5359] ? __local_bh_enable_ip+0xa4/0x130 [ 144.483706][ T5359] inet_stream_connect+0x57/0xa0 [ 144.488655][ T5359] ? __inet_stream_connect+0xed0/0xed0 [ 144.494129][ T5359] __sys_connect_file+0x153/0x1a0 [ 144.499172][ T5359] io_connect+0x3cc/0x720 [ 144.503510][ T5359] ? io_connect_prep+0x250/0x250 [ 144.508450][ T5359] ? receive_fd+0x110/0x110 [ 144.512965][ T5359] ? rcu_read_lock_sched_held+0x3e/0x70 [ 144.518515][ T5359] ? io_connect_prep+0x250/0x250 [ 144.523473][ T5359] io_issue_sqe+0x695/0x1250 [ 144.528094][ T5359] io_submit_sqes+0x96c/0x1e90 [ 144.532878][ T5359] __do_sys_io_uring_enter+0x103d/0x24e0 [ 144.538521][ T5359] ? io_submit_sqes+0x1e90/0x1e90 [ 144.543547][ T5359] ? ptrace_notify+0xfe/0x140 [ 144.548227][ T5359] ? lock_downgrade+0x6e0/0x6e0 [ 144.553082][ T5359] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.558300][ T5359] ? lockdep_hardirqs_on+0x7d/0x100 [ 144.563500][ T5359] ? _raw_spin_unlock_irq+0x2e/0x50 [ 144.568701][ T5359] ? ptrace_notify+0xfe/0x140 [ 144.573419][ T5359] do_syscall_64+0x39/0xb0 [ 144.577855][ T5359] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 144.583744][ T5359] RIP: 0033:0x7f607b0de549 [ 144.588156][ T5359] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 144.607765][ T5359] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 144.616203][ T5359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 144.624201][ T5359] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 144.632171][ T5359] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5359] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5359] close(3) = 0 [pid 5359] close(4) = 0 [pid 5359] close(5) = 0 [pid 5359] close(6) = 0 [pid 5359] close(7) = 0 [pid 5359] close(8) = -1 EBADF (Bad file descriptor) [pid 5359] close(9) = -1 EBADF (Bad file descriptor) [pid 5359] close(10) = -1 EBADF (Bad file descriptor) [pid 5359] close(11) = -1 EBADF (Bad file descriptor) [pid 5359] close(12) = -1 EBADF (Bad file descriptor) [pid 5359] close(13) = -1 EBADF (Bad file descriptor) [pid 5359] close(14) = -1 EBADF (Bad file descriptor) [pid 5359] close(15) = -1 EBADF (Bad file descriptor) [pid 5359] close(16) = -1 EBADF (Bad file descriptor) [pid 5359] close(17) = -1 EBADF (Bad file descriptor) [pid 5359] close(18) = -1 EBADF (Bad file descriptor) [pid 5359] close(19) = -1 EBADF (Bad file descriptor) [pid 5359] close(20) = -1 EBADF (Bad file descriptor) [pid 5359] close(21) = -1 EBADF (Bad file descriptor) [pid 5359] close(22) = -1 EBADF (Bad file descriptor) [pid 5359] close(23) = -1 EBADF (Bad file descriptor) [pid 5359] close(24) = -1 EBADF (Bad file descriptor) [pid 5359] close(25) = -1 EBADF (Bad file descriptor) [pid 5359] close(26) = -1 EBADF (Bad file descriptor) [pid 5359] close(27) = -1 EBADF (Bad file descriptor) [pid 5359] close(28) = -1 EBADF (Bad file descriptor) [pid 5359] close(29) = -1 EBADF (Bad file descriptor) [pid 5359] exit_group(0) = ? [pid 5359] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=258, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5360 attached , child_tidptr=0x555555eff5d0) = 259 [pid 5360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5360] setpgid(0, 0) = 0 [pid 5360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5360] write(3, "1000", 4) = 4 [pid 5360] close(3) = 0 [pid 5360] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5360] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5360] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5360] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5360] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5360] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5360] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5360] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5360] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5360] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5360] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5360] write(7, "5", 1) = 1 [ 144.640139][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 144.648107][ T5359] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 144.656112][ T5359] [ 144.694621][ T5360] FAULT_INJECTION: forcing a failure. [ 144.694621][ T5360] name failslab, interval 1, probability 0, space 0, times 0 [ 144.707772][ T5360] CPU: 0 PID: 5360 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 144.717726][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 144.727818][ T5360] Call Trace: [ 144.731113][ T5360] [ 144.734042][ T5360] dump_stack_lvl+0xd1/0x138 [ 144.738728][ T5360] should_fail_ex.cold+0x5/0xa [ 144.743506][ T5360] ? io_issue_sqe+0x695/0x1250 [ 144.748303][ T5360] should_failslab+0x9/0x20 [ 144.752813][ T5360] __kmem_cache_alloc_node+0x5b/0x330 [ 144.758193][ T5360] ? ref_tracker_alloc+0x158/0x560 [ 144.763318][ T5360] kmalloc_trace+0x26/0x60 [ 144.767755][ T5360] ref_tracker_alloc+0x158/0x560 [ 144.775087][ T5360] ? __lock_acquire+0xbc3/0x56d0 [ 144.780051][ T5360] ? ref_tracker_free+0x6b0/0x6b0 [ 144.785122][ T5360] dst_init+0xe4/0x520 [ 144.789212][ T5360] dst_alloc+0x16f/0x1f0 [ 144.793503][ T5360] rt_dst_alloc+0x55/0x430 [ 144.797949][ T5360] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 144.803941][ T5360] ip_route_output_key_hash+0x18f/0x340 [ 144.809492][ T5360] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 144.815765][ T5360] dccp_v4_connect+0x7e1/0x1730 [ 144.820667][ T5360] __inet_stream_connect+0x69e/0xed0 [ 144.825995][ T5360] ? inet_listen+0x640/0x640 [ 144.830617][ T5360] ? mark_held_locks+0x9f/0xe0 [ 144.835406][ T5360] ? __local_bh_enable_ip+0xa4/0x130 [ 144.840715][ T5360] inet_stream_connect+0x57/0xa0 [ 144.845683][ T5360] ? __inet_stream_connect+0xed0/0xed0 [ 144.851172][ T5360] __sys_connect_file+0x153/0x1a0 [ 144.856224][ T5360] io_connect+0x3cc/0x720 [ 144.860586][ T5360] ? io_connect_prep+0x250/0x250 [ 144.865554][ T5360] ? receive_fd+0x110/0x110 [ 144.870188][ T5360] ? rcu_read_lock_sched_held+0x3e/0x70 [ 144.875757][ T5360] ? io_connect_prep+0x250/0x250 [ 144.880728][ T5360] io_issue_sqe+0x695/0x1250 [ 144.885353][ T5360] io_submit_sqes+0x96c/0x1e90 [ 144.890162][ T5360] __do_sys_io_uring_enter+0x103d/0x24e0 [ 144.895838][ T5360] ? io_submit_sqes+0x1e90/0x1e90 [ 144.900892][ T5360] ? ptrace_notify+0xfe/0x140 [ 144.905589][ T5360] ? lock_downgrade+0x6e0/0x6e0 [ 144.910468][ T5360] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.915698][ T5360] ? lockdep_hardirqs_on+0x7d/0x100 [ 144.920920][ T5360] ? _raw_spin_unlock_irq+0x2e/0x50 [ 144.926148][ T5360] ? ptrace_notify+0xfe/0x140 [ 144.930875][ T5360] do_syscall_64+0x39/0xb0 [ 144.935316][ T5360] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 144.941231][ T5360] RIP: 0033:0x7f607b0de549 [ 144.945658][ T5360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 144.965301][ T5360] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 144.973735][ T5360] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 144.981724][ T5360] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5360] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5360] close(3) = 0 [pid 5360] close(4) = 0 [pid 5360] close(5) = 0 [pid 5360] close(6) = 0 [pid 5360] close(7) = 0 [pid 5360] close(8) = -1 EBADF (Bad file descriptor) [pid 5360] close(9) = -1 EBADF (Bad file descriptor) [pid 5360] close(10) = -1 EBADF (Bad file descriptor) [pid 5360] close(11) = -1 EBADF (Bad file descriptor) [pid 5360] close(12) = -1 EBADF (Bad file descriptor) [pid 5360] close(13) = -1 EBADF (Bad file descriptor) [pid 5360] close(14) = -1 EBADF (Bad file descriptor) [pid 5360] close(15) = -1 EBADF (Bad file descriptor) [pid 5360] close(16) = -1 EBADF (Bad file descriptor) [pid 5360] close(17) = -1 EBADF (Bad file descriptor) [pid 5360] close(18) = -1 EBADF (Bad file descriptor) [pid 5360] close(19) = -1 EBADF (Bad file descriptor) [pid 5360] close(20) = -1 EBADF (Bad file descriptor) [pid 5360] close(21) = -1 EBADF (Bad file descriptor) [pid 5360] close(22) = -1 EBADF (Bad file descriptor) [pid 5360] close(23) = -1 EBADF (Bad file descriptor) [pid 5360] close(24) = -1 EBADF (Bad file descriptor) [pid 5360] close(25) = -1 EBADF (Bad file descriptor) [pid 5360] close(26) = -1 EBADF (Bad file descriptor) [pid 5360] close(27) = -1 EBADF (Bad file descriptor) [pid 5360] close(28) = -1 EBADF (Bad file descriptor) [pid 5360] close(29) = -1 EBADF (Bad file descriptor) [pid 5360] exit_group(0) = ? [pid 5360] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=259, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 260 ./strace-static-x86_64: Process 5361 attached [pid 5361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5361] setpgid(0, 0) = 0 [pid 5361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5361] write(3, "1000", 4) = 4 [pid 5361] close(3) = 0 [pid 5361] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5361] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5361] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5361] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5361] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5361] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5361] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 144.989718][ T5360] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 144.997708][ T5360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 145.005703][ T5360] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 145.013708][ T5360] [pid 5361] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5361] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5361] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5361] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5361] write(7, "5", 1) = 1 [ 145.064429][ T5361] FAULT_INJECTION: forcing a failure. [ 145.064429][ T5361] name failslab, interval 1, probability 0, space 0, times 0 [ 145.077137][ T5361] CPU: 0 PID: 5361 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 145.087030][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 145.097088][ T5361] Call Trace: [ 145.100380][ T5361] [ 145.103336][ T5361] dump_stack_lvl+0xd1/0x138 [ 145.107976][ T5361] should_fail_ex.cold+0x5/0xa [ 145.112743][ T5361] ? __inet_hash_connect+0x95e/0x1ba0 [ 145.118117][ T5361] should_failslab+0x9/0x20 [ 145.122649][ T5361] kmem_cache_alloc+0x5a/0x320 [ 145.127438][ T5361] __inet_hash_connect+0x95e/0x1ba0 [ 145.132676][ T5361] ? __inet_lookup_listener+0xbf0/0xbf0 [ 145.138229][ T5361] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 145.144593][ T5361] dccp_v4_connect+0xb82/0x1730 [ 145.149494][ T5361] __inet_stream_connect+0x69e/0xed0 [ 145.154817][ T5361] ? inet_listen+0x640/0x640 [ 145.159444][ T5361] ? mark_held_locks+0x9f/0xe0 [ 145.164212][ T5361] ? __local_bh_enable_ip+0xa4/0x130 [ 145.169503][ T5361] inet_stream_connect+0x57/0xa0 [ 145.174449][ T5361] ? __inet_stream_connect+0xed0/0xed0 [ 145.179921][ T5361] __sys_connect_file+0x153/0x1a0 [ 145.184973][ T5361] io_connect+0x3cc/0x720 [ 145.189357][ T5361] ? io_connect_prep+0x250/0x250 [ 145.194339][ T5361] ? receive_fd+0x110/0x110 [ 145.198866][ T5361] ? rcu_read_lock_sched_held+0x3e/0x70 [ 145.204414][ T5361] ? io_connect_prep+0x250/0x250 [ 145.209376][ T5361] io_issue_sqe+0x695/0x1250 [ 145.213976][ T5361] io_submit_sqes+0x96c/0x1e90 [ 145.218757][ T5361] __do_sys_io_uring_enter+0x103d/0x24e0 [ 145.224402][ T5361] ? io_submit_sqes+0x1e90/0x1e90 [ 145.229433][ T5361] ? ptrace_notify+0xfe/0x140 [ 145.234112][ T5361] ? lock_downgrade+0x6e0/0x6e0 [ 145.238989][ T5361] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.244219][ T5361] ? lockdep_hardirqs_on+0x7d/0x100 [ 145.249414][ T5361] ? _raw_spin_unlock_irq+0x2e/0x50 [ 145.254628][ T5361] ? ptrace_notify+0xfe/0x140 [ 145.259334][ T5361] do_syscall_64+0x39/0xb0 [ 145.263754][ T5361] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.269652][ T5361] RIP: 0033:0x7f607b0de549 [ 145.274065][ T5361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 145.293675][ T5361] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 145.302106][ T5361] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5361] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5361] close(3) = 0 [pid 5361] close(4) = 0 [pid 5361] close(5) = 0 [pid 5361] close(6) = 0 [pid 5361] close(7) = 0 [pid 5361] close(8) = -1 EBADF (Bad file descriptor) [pid 5361] close(9) = -1 EBADF (Bad file descriptor) [pid 5361] close(10) = -1 EBADF (Bad file descriptor) [pid 5361] close(11) = -1 EBADF (Bad file descriptor) [pid 5361] close(12) = -1 EBADF (Bad file descriptor) [pid 5361] close(13) = -1 EBADF (Bad file descriptor) [pid 5361] close(14) = -1 EBADF (Bad file descriptor) [pid 5361] close(15) = -1 EBADF (Bad file descriptor) [pid 5361] close(16) = -1 EBADF (Bad file descriptor) [pid 5361] close(17) = -1 EBADF (Bad file descriptor) [pid 5361] close(18) = -1 EBADF (Bad file descriptor) [pid 5361] close(19) = -1 EBADF (Bad file descriptor) [pid 5361] close(20) = -1 EBADF (Bad file descriptor) [pid 5361] close(21) = -1 EBADF (Bad file descriptor) [pid 5361] close(22) = -1 EBADF (Bad file descriptor) [pid 5361] close(23) = -1 EBADF (Bad file descriptor) [pid 5361] close(24) = -1 EBADF (Bad file descriptor) [pid 5361] close(25) = -1 EBADF (Bad file descriptor) [pid 5361] close(26) = -1 EBADF (Bad file descriptor) [pid 5361] close(27) = -1 EBADF (Bad file descriptor) [pid 5361] close(28) = -1 EBADF (Bad file descriptor) [pid 5361] close(29) = -1 EBADF (Bad file descriptor) [pid 5361] exit_group(0) = ? [pid 5361] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=260, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 261 ./strace-static-x86_64: Process 5362 attached [pid 5362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5362] setpgid(0, 0) = 0 [pid 5362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5362] write(3, "1000", 4) = 4 [pid 5362] close(3) = 0 [pid 5362] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5362] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5362] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5362] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5362] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5362] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5362] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5362] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5362] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5362] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5362] write(7, "5", 1) = 1 [ 145.310083][ T5361] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 145.318054][ T5361] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 145.326040][ T5361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 145.334212][ T5361] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 145.342214][ T5361] [ 145.384797][ T5362] FAULT_INJECTION: forcing a failure. [ 145.384797][ T5362] name failslab, interval 1, probability 0, space 0, times 0 [ 145.398136][ T5362] CPU: 0 PID: 5362 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 145.408065][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 145.418140][ T5362] Call Trace: [ 145.421439][ T5362] [ 145.424406][ T5362] dump_stack_lvl+0xd1/0x138 [ 145.429047][ T5362] should_fail_ex.cold+0x5/0xa [ 145.433842][ T5362] ? io_issue_sqe+0x695/0x1250 [ 145.438628][ T5362] should_failslab+0x9/0x20 [ 145.443227][ T5362] __kmem_cache_alloc_node+0x5b/0x330 [ 145.448600][ T5362] ? ref_tracker_alloc+0x158/0x560 [ 145.453727][ T5362] kmalloc_trace+0x26/0x60 [ 145.458167][ T5362] ref_tracker_alloc+0x158/0x560 [ 145.463136][ T5362] ? __lock_acquire+0xbc3/0x56d0 [ 145.468071][ T5362] ? ref_tracker_free+0x6b0/0x6b0 [ 145.473141][ T5362] dst_init+0xe4/0x520 [ 145.477242][ T5362] dst_alloc+0x16f/0x1f0 [ 145.481494][ T5362] rt_dst_alloc+0x55/0x430 [ 145.485916][ T5362] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 145.491928][ T5362] ip_route_output_key_hash+0x18f/0x340 [ 145.497508][ T5362] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 145.503789][ T5362] dccp_v4_connect+0x7e1/0x1730 [ 145.508667][ T5362] __inet_stream_connect+0x69e/0xed0 [ 145.513965][ T5362] ? inet_listen+0x640/0x640 [ 145.518563][ T5362] ? mark_held_locks+0x9f/0xe0 [ 145.523341][ T5362] ? __local_bh_enable_ip+0xa4/0x130 [ 145.528657][ T5362] inet_stream_connect+0x57/0xa0 [ 145.533607][ T5362] ? __inet_stream_connect+0xed0/0xed0 [ 145.539084][ T5362] __sys_connect_file+0x153/0x1a0 [ 145.544143][ T5362] io_connect+0x3cc/0x720 [ 145.548488][ T5362] ? io_connect_prep+0x250/0x250 [ 145.553444][ T5362] ? receive_fd+0x110/0x110 [ 145.557984][ T5362] ? rcu_read_lock_sched_held+0x3e/0x70 [ 145.563547][ T5362] ? io_connect_prep+0x250/0x250 [ 145.568502][ T5362] io_issue_sqe+0x695/0x1250 [ 145.573109][ T5362] io_submit_sqes+0x96c/0x1e90 [ 145.577930][ T5362] __do_sys_io_uring_enter+0x103d/0x24e0 [ 145.583642][ T5362] ? io_submit_sqes+0x1e90/0x1e90 [ 145.588727][ T5362] ? ptrace_notify+0xfe/0x140 [ 145.593422][ T5362] ? lock_downgrade+0x6e0/0x6e0 [ 145.598309][ T5362] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.603535][ T5362] ? lockdep_hardirqs_on+0x7d/0x100 [ 145.608815][ T5362] ? _raw_spin_unlock_irq+0x2e/0x50 [ 145.614020][ T5362] ? ptrace_notify+0xfe/0x140 [ 145.618705][ T5362] do_syscall_64+0x39/0xb0 [ 145.623149][ T5362] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.629084][ T5362] RIP: 0033:0x7f607b0de549 [ 145.633521][ T5362] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 145.653339][ T5362] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 145.661789][ T5362] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 145.669776][ T5362] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 145.677764][ T5362] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5362] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5362] close(3) = 0 [pid 5362] close(4) = 0 [pid 5362] close(5) = 0 [pid 5362] close(6) = 0 [pid 5362] close(7) = 0 [pid 5362] close(8) = -1 EBADF (Bad file descriptor) [pid 5362] close(9) = -1 EBADF (Bad file descriptor) [pid 5362] close(10) = -1 EBADF (Bad file descriptor) [pid 5362] close(11) = -1 EBADF (Bad file descriptor) [pid 5362] close(12) = -1 EBADF (Bad file descriptor) [pid 5362] close(13) = -1 EBADF (Bad file descriptor) [pid 5362] close(14) = -1 EBADF (Bad file descriptor) [pid 5362] close(15) = -1 EBADF (Bad file descriptor) [pid 5362] close(16) = -1 EBADF (Bad file descriptor) [pid 5362] close(17) = -1 EBADF (Bad file descriptor) [pid 5362] close(18) = -1 EBADF (Bad file descriptor) [pid 5362] close(19) = -1 EBADF (Bad file descriptor) [pid 5362] close(20) = -1 EBADF (Bad file descriptor) [pid 5362] close(21) = -1 EBADF (Bad file descriptor) [pid 5362] close(22) = -1 EBADF (Bad file descriptor) [pid 5362] close(23) = -1 EBADF (Bad file descriptor) [pid 5362] close(24) = -1 EBADF (Bad file descriptor) [pid 5362] close(25) = -1 EBADF (Bad file descriptor) [pid 5362] close(26) = -1 EBADF (Bad file descriptor) [pid 5362] close(27) = -1 EBADF (Bad file descriptor) [pid 5362] close(28) = -1 EBADF (Bad file descriptor) [pid 5362] close(29) = -1 EBADF (Bad file descriptor) [pid 5362] exit_group(0) = ? [pid 5362] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=261, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5363 attached , child_tidptr=0x555555eff5d0) = 262 [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5363] setpgid(0, 0) = 0 [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5363] write(3, "1000", 4) = 4 [pid 5363] close(3) = 0 [pid 5363] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5363] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5363] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5363] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5363] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5363] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5363] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5363] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5363] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5363] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5363] write(7, "5", 1) = 1 [ 145.685753][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 145.693726][ T5362] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 145.701712][ T5362] [ 145.737185][ T5363] FAULT_INJECTION: forcing a failure. [ 145.737185][ T5363] name failslab, interval 1, probability 0, space 0, times 0 [ 145.750043][ T5363] CPU: 1 PID: 5363 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 145.759979][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 145.770045][ T5363] Call Trace: [ 145.773324][ T5363] [ 145.776253][ T5363] dump_stack_lvl+0xd1/0x138 [ 145.780873][ T5363] should_fail_ex.cold+0x5/0xa [ 145.785667][ T5363] ? io_issue_sqe+0x695/0x1250 [ 145.790441][ T5363] should_failslab+0x9/0x20 [ 145.794950][ T5363] __kmem_cache_alloc_node+0x5b/0x330 [ 145.800336][ T5363] ? ref_tracker_alloc+0x158/0x560 [ 145.805471][ T5363] kmalloc_trace+0x26/0x60 [ 145.809896][ T5363] ref_tracker_alloc+0x158/0x560 [ 145.814844][ T5363] ? __lock_acquire+0xbc3/0x56d0 [ 145.819797][ T5363] ? ref_tracker_free+0x6b0/0x6b0 [ 145.825049][ T5363] dst_init+0xe4/0x520 [ 145.829127][ T5363] dst_alloc+0x16f/0x1f0 [ 145.833415][ T5363] rt_dst_alloc+0x55/0x430 [ 145.837843][ T5363] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 145.843861][ T5363] ip_route_output_key_hash+0x18f/0x340 [ 145.849458][ T5363] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 145.855758][ T5363] dccp_v4_connect+0x7e1/0x1730 [ 145.860631][ T5363] __inet_stream_connect+0x69e/0xed0 [ 145.865934][ T5363] ? inet_listen+0x640/0x640 [ 145.870556][ T5363] ? mark_held_locks+0x9f/0xe0 [ 145.875338][ T5363] ? __local_bh_enable_ip+0xa4/0x130 [ 145.880657][ T5363] inet_stream_connect+0x57/0xa0 [ 145.885645][ T5363] ? __inet_stream_connect+0xed0/0xed0 [ 145.891123][ T5363] __sys_connect_file+0x153/0x1a0 [ 145.896157][ T5363] io_connect+0x3cc/0x720 [ 145.900498][ T5363] ? io_connect_prep+0x250/0x250 [ 145.905450][ T5363] ? receive_fd+0x110/0x110 [ 145.909973][ T5363] ? rcu_read_lock_sched_held+0x3e/0x70 [ 145.915526][ T5363] ? io_connect_prep+0x250/0x250 [ 145.920494][ T5363] io_issue_sqe+0x695/0x1250 [ 145.925124][ T5363] io_submit_sqes+0x96c/0x1e90 [ 145.929939][ T5363] __do_sys_io_uring_enter+0x103d/0x24e0 [ 145.935634][ T5363] ? io_submit_sqes+0x1e90/0x1e90 [ 145.940698][ T5363] ? ptrace_notify+0xfe/0x140 [ 145.945393][ T5363] ? lock_downgrade+0x6e0/0x6e0 [ 145.950286][ T5363] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.955534][ T5363] ? lockdep_hardirqs_on+0x7d/0x100 [ 145.960772][ T5363] ? _raw_spin_unlock_irq+0x2e/0x50 [ 145.965976][ T5363] ? ptrace_notify+0xfe/0x140 [ 145.970661][ T5363] do_syscall_64+0x39/0xb0 [ 145.975090][ T5363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 145.981004][ T5363] RIP: 0033:0x7f607b0de549 [ 145.985454][ T5363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 146.005103][ T5363] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 146.013554][ T5363] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 146.021548][ T5363] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 146.029532][ T5363] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5363] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5363] close(3) = 0 [pid 5363] close(4) = 0 [pid 5363] close(5) = 0 [pid 5363] close(6) = 0 [pid 5363] close(7) = 0 [pid 5363] close(8) = -1 EBADF (Bad file descriptor) [pid 5363] close(9) = -1 EBADF (Bad file descriptor) [pid 5363] close(10) = -1 EBADF (Bad file descriptor) [pid 5363] close(11) = -1 EBADF (Bad file descriptor) [pid 5363] close(12) = -1 EBADF (Bad file descriptor) [pid 5363] close(13) = -1 EBADF (Bad file descriptor) [pid 5363] close(14) = -1 EBADF (Bad file descriptor) [pid 5363] close(15) = -1 EBADF (Bad file descriptor) [pid 5363] close(16) = -1 EBADF (Bad file descriptor) [pid 5363] close(17) = -1 EBADF (Bad file descriptor) [pid 5363] close(18) = -1 EBADF (Bad file descriptor) [pid 5363] close(19) = -1 EBADF (Bad file descriptor) [pid 5363] close(20) = -1 EBADF (Bad file descriptor) [pid 5363] close(21) = -1 EBADF (Bad file descriptor) [pid 5363] close(22) = -1 EBADF (Bad file descriptor) [pid 5363] close(23) = -1 EBADF (Bad file descriptor) [pid 5363] close(24) = -1 EBADF (Bad file descriptor) [pid 5363] close(25) = -1 EBADF (Bad file descriptor) [pid 5363] close(26) = -1 EBADF (Bad file descriptor) [pid 5363] close(27) = -1 EBADF (Bad file descriptor) [pid 5363] close(28) = -1 EBADF (Bad file descriptor) [pid 5363] close(29) = -1 EBADF (Bad file descriptor) [pid 5363] exit_group(0) = ? [pid 5363] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=262, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 263 ./strace-static-x86_64: Process 5364 attached [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5364] setpgid(0, 0) = 0 [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5364] write(3, "1000", 4) = 4 [pid 5364] close(3) = 0 [pid 5364] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5364] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5364] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5364] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5364] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [ 146.037527][ T5363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 146.045523][ T5363] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 146.053549][ T5363] [pid 5364] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5364] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5364] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5364] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5364] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5364] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5364] write(7, "5", 1) = 1 [ 146.115985][ T5364] FAULT_INJECTION: forcing a failure. [ 146.115985][ T5364] name failslab, interval 1, probability 0, space 0, times 0 [ 146.128685][ T5364] CPU: 0 PID: 5364 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 146.138580][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 146.148637][ T5364] Call Trace: [ 146.151929][ T5364] [ 146.154860][ T5364] dump_stack_lvl+0xd1/0x138 [ 146.159635][ T5364] should_fail_ex.cold+0x5/0xa [ 146.164423][ T5364] ? __inet_hash_connect+0x95e/0x1ba0 [ 146.169815][ T5364] should_failslab+0x9/0x20 [ 146.174362][ T5364] kmem_cache_alloc+0x5a/0x320 [ 146.179218][ T5364] __inet_hash_connect+0x95e/0x1ba0 [ 146.184425][ T5364] ? __inet_lookup_listener+0xbf0/0xbf0 [ 146.189982][ T5364] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 146.196344][ T5364] dccp_v4_connect+0xb82/0x1730 [ 146.201222][ T5364] __inet_stream_connect+0x69e/0xed0 [ 146.206517][ T5364] ? inet_listen+0x640/0x640 [ 146.211113][ T5364] ? mark_held_locks+0x9f/0xe0 [ 146.215877][ T5364] ? __local_bh_enable_ip+0xa4/0x130 [ 146.221197][ T5364] inet_stream_connect+0x57/0xa0 [ 146.226153][ T5364] ? __inet_stream_connect+0xed0/0xed0 [ 146.231664][ T5364] __sys_connect_file+0x153/0x1a0 [ 146.236726][ T5364] io_connect+0x3cc/0x720 [ 146.241084][ T5364] ? io_connect_prep+0x250/0x250 [ 146.246042][ T5364] ? receive_fd+0x110/0x110 [ 146.250581][ T5364] ? rcu_read_lock_sched_held+0x3e/0x70 [ 146.256146][ T5364] ? io_connect_prep+0x250/0x250 [ 146.261198][ T5364] io_issue_sqe+0x695/0x1250 [ 146.265810][ T5364] io_submit_sqes+0x96c/0x1e90 [ 146.270617][ T5364] __do_sys_io_uring_enter+0x103d/0x24e0 [ 146.276260][ T5364] ? io_submit_sqes+0x1e90/0x1e90 [ 146.281306][ T5364] ? ptrace_notify+0xfe/0x140 [ 146.286019][ T5364] ? lock_downgrade+0x6e0/0x6e0 [ 146.290897][ T5364] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.296110][ T5364] ? lockdep_hardirqs_on+0x7d/0x100 [ 146.301315][ T5364] ? _raw_spin_unlock_irq+0x2e/0x50 [ 146.306513][ T5364] ? ptrace_notify+0xfe/0x140 [ 146.311279][ T5364] do_syscall_64+0x39/0xb0 [ 146.315738][ T5364] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.321683][ T5364] RIP: 0033:0x7f607b0de549 [ 146.326123][ T5364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 146.345753][ T5364] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 146.354209][ T5364] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5364] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5364] close(3) = 0 [pid 5364] close(4) = 0 [pid 5364] close(5) = 0 [pid 5364] close(6) = 0 [pid 5364] close(7) = 0 [pid 5364] close(8) = -1 EBADF (Bad file descriptor) [pid 5364] close(9) = -1 EBADF (Bad file descriptor) [pid 5364] close(10) = -1 EBADF (Bad file descriptor) [pid 5364] close(11) = -1 EBADF (Bad file descriptor) [pid 5364] close(12) = -1 EBADF (Bad file descriptor) [pid 5364] close(13) = -1 EBADF (Bad file descriptor) [pid 5364] close(14) = -1 EBADF (Bad file descriptor) [pid 5364] close(15) = -1 EBADF (Bad file descriptor) [pid 5364] close(16) = -1 EBADF (Bad file descriptor) [pid 5364] close(17) = -1 EBADF (Bad file descriptor) [pid 5364] close(18) = -1 EBADF (Bad file descriptor) [pid 5364] close(19) = -1 EBADF (Bad file descriptor) [pid 5364] close(20) = -1 EBADF (Bad file descriptor) [pid 5364] close(21) = -1 EBADF (Bad file descriptor) [pid 5364] close(22) = -1 EBADF (Bad file descriptor) [pid 5364] close(23) = -1 EBADF (Bad file descriptor) [pid 5364] close(24) = -1 EBADF (Bad file descriptor) [pid 5364] close(25) = -1 EBADF (Bad file descriptor) [pid 5364] close(26) = -1 EBADF (Bad file descriptor) [pid 5364] close(27) = -1 EBADF (Bad file descriptor) [pid 5364] close(28) = -1 EBADF (Bad file descriptor) [pid 5364] close(29) = -1 EBADF (Bad file descriptor) [pid 5364] exit_group(0) = ? [pid 5364] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=263, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 264 ./strace-static-x86_64: Process 5365 attached [pid 5365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5365] setpgid(0, 0) = 0 [pid 5365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5365] write(3, "1000", 4) = 4 [pid 5365] close(3) = 0 [pid 5365] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5365] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5365] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5365] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5365] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5365] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5365] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5365] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5365] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5365] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5365] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5365] write(7, "5", 1) = 1 [pid 5365] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5365] close(3) = 0 [pid 5365] close(4) = 0 [pid 5365] close(5) = 0 [pid 5365] close(6) = 0 [pid 5365] close(7) = 0 [pid 5365] close(8) = -1 EBADF (Bad file descriptor) [pid 5365] close(9) = -1 EBADF (Bad file descriptor) [pid 5365] close(10) = -1 EBADF (Bad file descriptor) [pid 5365] close(11) = -1 EBADF (Bad file descriptor) [pid 5365] close(12) = -1 EBADF (Bad file descriptor) [pid 5365] close(13) = -1 EBADF (Bad file descriptor) [pid 5365] close(14) = -1 EBADF (Bad file descriptor) [pid 5365] close(15) = -1 EBADF (Bad file descriptor) [pid 5365] close(16) = -1 EBADF (Bad file descriptor) [pid 5365] close(17) = -1 EBADF (Bad file descriptor) [pid 5365] close(18) = -1 EBADF (Bad file descriptor) [pid 5365] close(19) = -1 EBADF (Bad file descriptor) [pid 5365] close(20) = -1 EBADF (Bad file descriptor) [pid 5365] close(21) = -1 EBADF (Bad file descriptor) [pid 5365] close(22) = -1 EBADF (Bad file descriptor) [pid 5365] close(23) = -1 EBADF (Bad file descriptor) [pid 5365] close(24) = -1 EBADF (Bad file descriptor) [ 146.362201][ T5364] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 146.370170][ T5364] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 146.378176][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 146.386175][ T5364] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 146.394181][ T5364] [pid 5365] close(25) = -1 EBADF (Bad file descriptor) [pid 5365] close(26) = -1 EBADF (Bad file descriptor) [pid 5365] close(27) = -1 EBADF (Bad file descriptor) [pid 5365] close(28) = -1 EBADF (Bad file descriptor) [pid 5365] close(29) = -1 EBADF (Bad file descriptor) [pid 5365] exit_group(0) = ? [pid 5365] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=264, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5366 attached , child_tidptr=0x555555eff5d0) = 265 [pid 5366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5366] setpgid(0, 0) = 0 [pid 5366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5366] write(3, "1000", 4) = 4 [pid 5366] close(3) = 0 [pid 5366] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5366] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5366] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5366] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5366] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5366] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5366] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5366] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5366] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5366] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5366] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5366] write(7, "5", 1) = 1 [ 146.470771][ T5366] FAULT_INJECTION: forcing a failure. [ 146.470771][ T5366] name failslab, interval 1, probability 0, space 0, times 0 [ 146.483532][ T5366] CPU: 0 PID: 5366 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 146.493432][ T5366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 146.503497][ T5366] Call Trace: [ 146.506873][ T5366] [ 146.509802][ T5366] dump_stack_lvl+0xd1/0x138 [ 146.514399][ T5366] should_fail_ex.cold+0x5/0xa [ 146.519178][ T5366] ? io_issue_sqe+0x695/0x1250 [ 146.523975][ T5366] should_failslab+0x9/0x20 [ 146.528484][ T5366] __kmem_cache_alloc_node+0x5b/0x330 [ 146.533860][ T5366] ? ref_tracker_alloc+0x158/0x560 [ 146.539027][ T5366] kmalloc_trace+0x26/0x60 [ 146.543489][ T5366] ref_tracker_alloc+0x158/0x560 [ 146.548454][ T5366] ? __lock_acquire+0xbc3/0x56d0 [ 146.553411][ T5366] ? ref_tracker_free+0x6b0/0x6b0 [ 146.558486][ T5366] dst_init+0xe4/0x520 [ 146.562584][ T5366] dst_alloc+0x16f/0x1f0 [ 146.566860][ T5366] rt_dst_alloc+0x55/0x430 [ 146.571301][ T5366] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 146.577323][ T5366] ip_route_output_key_hash+0x18f/0x340 [ 146.582894][ T5366] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 146.589181][ T5366] dccp_v4_connect+0x7e1/0x1730 [ 146.594083][ T5366] __inet_stream_connect+0x69e/0xed0 [ 146.599633][ T5366] ? inet_listen+0x640/0x640 [ 146.604317][ T5366] ? mark_held_locks+0x9f/0xe0 [ 146.609110][ T5366] ? __local_bh_enable_ip+0xa4/0x130 [ 146.614428][ T5366] inet_stream_connect+0x57/0xa0 [ 146.619405][ T5366] ? __inet_stream_connect+0xed0/0xed0 [ 146.624901][ T5366] __sys_connect_file+0x153/0x1a0 [ 146.629950][ T5366] io_connect+0x3cc/0x720 [ 146.634311][ T5366] ? io_connect_prep+0x250/0x250 [ 146.639275][ T5366] ? receive_fd+0x110/0x110 [ 146.643816][ T5366] ? rcu_read_lock_sched_held+0x3e/0x70 [ 146.649385][ T5366] ? io_connect_prep+0x250/0x250 [ 146.654356][ T5366] io_issue_sqe+0x695/0x1250 [ 146.658979][ T5366] io_submit_sqes+0x96c/0x1e90 [ 146.663811][ T5366] __do_sys_io_uring_enter+0x103d/0x24e0 [ 146.669497][ T5366] ? io_submit_sqes+0x1e90/0x1e90 [ 146.674556][ T5366] ? ptrace_notify+0xfe/0x140 [ 146.679263][ T5366] ? lock_downgrade+0x6e0/0x6e0 [ 146.684144][ T5366] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.689372][ T5366] ? lockdep_hardirqs_on+0x7d/0x100 [ 146.694601][ T5366] ? _raw_spin_unlock_irq+0x2e/0x50 [ 146.699829][ T5366] ? ptrace_notify+0xfe/0x140 [ 146.704533][ T5366] do_syscall_64+0x39/0xb0 [ 146.708984][ T5366] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 146.714903][ T5366] RIP: 0033:0x7f607b0de549 [ 146.719347][ T5366] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 146.738982][ T5366] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 146.747420][ T5366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 146.755413][ T5366] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 146.763399][ T5366] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5366] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5366] close(3) = 0 [pid 5366] close(4) = 0 [pid 5366] close(5) = 0 [pid 5366] close(6) = 0 [pid 5366] close(7) = 0 [pid 5366] close(8) = -1 EBADF (Bad file descriptor) [pid 5366] close(9) = -1 EBADF (Bad file descriptor) [pid 5366] close(10) = -1 EBADF (Bad file descriptor) [pid 5366] close(11) = -1 EBADF (Bad file descriptor) [pid 5366] close(12) = -1 EBADF (Bad file descriptor) [pid 5366] close(13) = -1 EBADF (Bad file descriptor) [pid 5366] close(14) = -1 EBADF (Bad file descriptor) [pid 5366] close(15) = -1 EBADF (Bad file descriptor) [pid 5366] close(16) = -1 EBADF (Bad file descriptor) [pid 5366] close(17) = -1 EBADF (Bad file descriptor) [pid 5366] close(18) = -1 EBADF (Bad file descriptor) [pid 5366] close(19) = -1 EBADF (Bad file descriptor) [pid 5366] close(20) = -1 EBADF (Bad file descriptor) [pid 5366] close(21) = -1 EBADF (Bad file descriptor) [pid 5366] close(22) = -1 EBADF (Bad file descriptor) [pid 5366] close(23) = -1 EBADF (Bad file descriptor) [pid 5366] close(24) = -1 EBADF (Bad file descriptor) [pid 5366] close(25) = -1 EBADF (Bad file descriptor) [pid 5366] close(26) = -1 EBADF (Bad file descriptor) [pid 5366] close(27) = -1 EBADF (Bad file descriptor) [pid 5366] close(28) = -1 EBADF (Bad file descriptor) [pid 5366] close(29) = -1 EBADF (Bad file descriptor) [pid 5366] exit_group(0) = ? [pid 5366] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=265, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5367 attached , child_tidptr=0x555555eff5d0) = 266 [pid 5367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5367] setpgid(0, 0) = 0 [pid 5367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5367] write(3, "1000", 4) = 4 [pid 5367] close(3) = 0 [pid 5367] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5367] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5367] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5367] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5367] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5367] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5367] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5367] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5367] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5367] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5367] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5367] write(7, "5", 1) = 1 [ 146.771385][ T5366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 146.779372][ T5366] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 146.787380][ T5366] [ 146.831447][ T5367] FAULT_INJECTION: forcing a failure. [ 146.831447][ T5367] name failslab, interval 1, probability 0, space 0, times 0 [ 146.844165][ T5367] CPU: 0 PID: 5367 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 146.854062][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 146.864124][ T5367] Call Trace: [ 146.867403][ T5367] [ 146.870340][ T5367] dump_stack_lvl+0xd1/0x138 [ 146.874954][ T5367] should_fail_ex.cold+0x5/0xa [ 146.879746][ T5367] ? __inet_hash_connect+0x95e/0x1ba0 [ 146.885136][ T5367] should_failslab+0x9/0x20 [ 146.889681][ T5367] kmem_cache_alloc+0x5a/0x320 [ 146.894601][ T5367] __inet_hash_connect+0x95e/0x1ba0 [ 146.899817][ T5367] ? __inet_lookup_listener+0xbf0/0xbf0 [ 146.905384][ T5367] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 146.911742][ T5367] dccp_v4_connect+0xb82/0x1730 [ 146.916614][ T5367] __inet_stream_connect+0x69e/0xed0 [ 146.921929][ T5367] ? inet_listen+0x640/0x640 [ 146.926559][ T5367] ? mark_held_locks+0x9f/0xe0 [ 146.931323][ T5367] ? __local_bh_enable_ip+0xa4/0x130 [ 146.936622][ T5367] inet_stream_connect+0x57/0xa0 [ 146.941576][ T5367] ? __inet_stream_connect+0xed0/0xed0 [ 146.947038][ T5367] __sys_connect_file+0x153/0x1a0 [ 146.952065][ T5367] io_connect+0x3cc/0x720 [ 146.956407][ T5367] ? io_connect_prep+0x250/0x250 [ 146.961346][ T5367] ? receive_fd+0x110/0x110 [ 146.965888][ T5367] ? rcu_read_lock_sched_held+0x3e/0x70 [ 146.971458][ T5367] ? io_connect_prep+0x250/0x250 [ 146.976404][ T5367] io_issue_sqe+0x695/0x1250 [ 146.981004][ T5367] io_submit_sqes+0x96c/0x1e90 [ 146.985786][ T5367] __do_sys_io_uring_enter+0x103d/0x24e0 [ 146.991652][ T5367] ? io_submit_sqes+0x1e90/0x1e90 [ 146.996708][ T5367] ? ptrace_notify+0xfe/0x140 [ 147.001398][ T5367] ? lock_downgrade+0x6e0/0x6e0 [ 147.006304][ T5367] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.011553][ T5367] ? lockdep_hardirqs_on+0x7d/0x100 [ 147.016758][ T5367] ? _raw_spin_unlock_irq+0x2e/0x50 [ 147.021986][ T5367] ? ptrace_notify+0xfe/0x140 [ 147.026697][ T5367] do_syscall_64+0x39/0xb0 [ 147.031122][ T5367] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 147.037017][ T5367] RIP: 0033:0x7f607b0de549 [ 147.041430][ T5367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 147.061044][ T5367] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 147.069459][ T5367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5367] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5367] close(3) = 0 [pid 5367] close(4) = 0 [pid 5367] close(5) = 0 [pid 5367] close(6) = 0 [pid 5367] close(7) = 0 [pid 5367] close(8) = -1 EBADF (Bad file descriptor) [pid 5367] close(9) = -1 EBADF (Bad file descriptor) [pid 5367] close(10) = -1 EBADF (Bad file descriptor) [pid 5367] close(11) = -1 EBADF (Bad file descriptor) [pid 5367] close(12) = -1 EBADF (Bad file descriptor) [pid 5367] close(13) = -1 EBADF (Bad file descriptor) [pid 5367] close(14) = -1 EBADF (Bad file descriptor) [pid 5367] close(15) = -1 EBADF (Bad file descriptor) [pid 5367] close(16) = -1 EBADF (Bad file descriptor) [pid 5367] close(17) = -1 EBADF (Bad file descriptor) [pid 5367] close(18) = -1 EBADF (Bad file descriptor) [pid 5367] close(19) = -1 EBADF (Bad file descriptor) [pid 5367] close(20) = -1 EBADF (Bad file descriptor) [pid 5367] close(21) = -1 EBADF (Bad file descriptor) [pid 5367] close(22) = -1 EBADF (Bad file descriptor) [pid 5367] close(23) = -1 EBADF (Bad file descriptor) [pid 5367] close(24) = -1 EBADF (Bad file descriptor) [pid 5367] close(25) = -1 EBADF (Bad file descriptor) [pid 5367] close(26) = -1 EBADF (Bad file descriptor) [pid 5367] close(27) = -1 EBADF (Bad file descriptor) [pid 5367] close(28) = -1 EBADF (Bad file descriptor) [pid 5367] close(29) = -1 EBADF (Bad file descriptor) [pid 5367] exit_group(0) = ? [pid 5367] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=266, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 267 ./strace-static-x86_64: Process 5368 attached [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5368] setpgid(0, 0) = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5368] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5368] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5368] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5368] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5368] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5368] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5368] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5368] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5368] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 147.077429][ T5367] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 147.085403][ T5367] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 147.093386][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 147.101371][ T5367] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 147.109374][ T5367] [pid 5368] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5368] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5368] write(7, "5", 1) = 1 [ 147.167217][ T5368] FAULT_INJECTION: forcing a failure. [ 147.167217][ T5368] name failslab, interval 1, probability 0, space 0, times 0 [ 147.181640][ T5368] CPU: 0 PID: 5368 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 147.191581][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 147.201659][ T5368] Call Trace: [ 147.204946][ T5368] [ 147.207915][ T5368] dump_stack_lvl+0xd1/0x138 [ 147.212545][ T5368] should_fail_ex.cold+0x5/0xa [ 147.217316][ T5368] ? io_issue_sqe+0x695/0x1250 [ 147.222100][ T5368] should_failslab+0x9/0x20 [ 147.226636][ T5368] __kmem_cache_alloc_node+0x5b/0x330 [ 147.232033][ T5368] ? ref_tracker_alloc+0x158/0x560 [ 147.237204][ T5368] kmalloc_trace+0x26/0x60 [ 147.241628][ T5368] ref_tracker_alloc+0x158/0x560 [ 147.246586][ T5368] ? __lock_acquire+0xbc3/0x56d0 [ 147.251533][ T5368] ? ref_tracker_free+0x6b0/0x6b0 [ 147.256585][ T5368] dst_init+0xe4/0x520 [ 147.260672][ T5368] dst_alloc+0x16f/0x1f0 [ 147.264950][ T5368] rt_dst_alloc+0x55/0x430 [ 147.269390][ T5368] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 147.275381][ T5368] ip_route_output_key_hash+0x18f/0x340 [ 147.280931][ T5368] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 147.287184][ T5368] dccp_v4_connect+0x7e1/0x1730 [ 147.292115][ T5368] __inet_stream_connect+0x69e/0xed0 [ 147.297644][ T5368] ? inet_listen+0x640/0x640 [ 147.302272][ T5368] ? mark_held_locks+0x9f/0xe0 [ 147.307037][ T5368] ? __local_bh_enable_ip+0xa4/0x130 [ 147.312327][ T5368] inet_stream_connect+0x57/0xa0 [ 147.317272][ T5368] ? __inet_stream_connect+0xed0/0xed0 [ 147.322740][ T5368] __sys_connect_file+0x153/0x1a0 [ 147.327768][ T5368] io_connect+0x3cc/0x720 [ 147.332106][ T5368] ? io_connect_prep+0x250/0x250 [ 147.337044][ T5368] ? receive_fd+0x110/0x110 [ 147.341561][ T5368] ? rcu_read_lock_sched_held+0x3e/0x70 [ 147.347113][ T5368] ? io_connect_prep+0x250/0x250 [ 147.352058][ T5368] io_issue_sqe+0x695/0x1250 [ 147.356658][ T5368] io_submit_sqes+0x96c/0x1e90 [ 147.361438][ T5368] __do_sys_io_uring_enter+0x103d/0x24e0 [ 147.367078][ T5368] ? io_submit_sqes+0x1e90/0x1e90 [ 147.372106][ T5368] ? ptrace_notify+0xfe/0x140 [ 147.376782][ T5368] ? lock_downgrade+0x6e0/0x6e0 [ 147.381651][ T5368] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.386882][ T5368] ? lockdep_hardirqs_on+0x7d/0x100 [ 147.392081][ T5368] ? _raw_spin_unlock_irq+0x2e/0x50 [ 147.397283][ T5368] ? ptrace_notify+0xfe/0x140 [ 147.401982][ T5368] do_syscall_64+0x39/0xb0 [ 147.406432][ T5368] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 147.412328][ T5368] RIP: 0033:0x7f607b0de549 [ 147.417175][ T5368] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 147.436787][ T5368] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 147.445204][ T5368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 147.453188][ T5368] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5368] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5368] close(3) = 0 [pid 5368] close(4) = 0 [pid 5368] close(5) = 0 [pid 5368] close(6) = 0 [pid 5368] close(7) = 0 [pid 5368] close(8) = -1 EBADF (Bad file descriptor) [pid 5368] close(9) = -1 EBADF (Bad file descriptor) [pid 5368] close(10) = -1 EBADF (Bad file descriptor) [pid 5368] close(11) = -1 EBADF (Bad file descriptor) [pid 5368] close(12) = -1 EBADF (Bad file descriptor) [pid 5368] close(13) = -1 EBADF (Bad file descriptor) [pid 5368] close(14) = -1 EBADF (Bad file descriptor) [pid 5368] close(15) = -1 EBADF (Bad file descriptor) [pid 5368] close(16) = -1 EBADF (Bad file descriptor) [pid 5368] close(17) = -1 EBADF (Bad file descriptor) [pid 5368] close(18) = -1 EBADF (Bad file descriptor) [pid 5368] close(19) = -1 EBADF (Bad file descriptor) [pid 5368] close(20) = -1 EBADF (Bad file descriptor) [pid 5368] close(21) = -1 EBADF (Bad file descriptor) [pid 5368] close(22) = -1 EBADF (Bad file descriptor) [pid 5368] close(23) = -1 EBADF (Bad file descriptor) [pid 5368] close(24) = -1 EBADF (Bad file descriptor) [pid 5368] close(25) = -1 EBADF (Bad file descriptor) [pid 5368] close(26) = -1 EBADF (Bad file descriptor) [pid 5368] close(27) = -1 EBADF (Bad file descriptor) [pid 5368] close(28) = -1 EBADF (Bad file descriptor) [pid 5368] close(29) = -1 EBADF (Bad file descriptor) [pid 5368] exit_group(0) = ? [pid 5368] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=267, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 268 ./strace-static-x86_64: Process 5369 attached [pid 5369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5369] setpgid(0, 0) = 0 [pid 5369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5369] write(3, "1000", 4) = 4 [pid 5369] close(3) = 0 [pid 5369] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5369] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5369] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5369] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5369] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5369] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5369] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5369] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5369] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5369] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5369] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 147.461177][ T5368] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 147.469144][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 147.477117][ T5368] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 147.485101][ T5368] [pid 5369] write(7, "5", 1) = 1 [ 147.528431][ T5369] FAULT_INJECTION: forcing a failure. [ 147.528431][ T5369] name failslab, interval 1, probability 0, space 0, times 0 [ 147.541359][ T5369] CPU: 1 PID: 5369 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 147.551296][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 147.561384][ T5369] Call Trace: [ 147.564691][ T5369] [ 147.567648][ T5369] dump_stack_lvl+0xd1/0x138 [ 147.572276][ T5369] should_fail_ex.cold+0x5/0xa [ 147.577047][ T5369] ? io_issue_sqe+0x695/0x1250 [ 147.581837][ T5369] should_failslab+0x9/0x20 [ 147.586391][ T5369] __kmem_cache_alloc_node+0x5b/0x330 [ 147.591812][ T5369] ? ref_tracker_alloc+0x158/0x560 [ 147.596961][ T5369] kmalloc_trace+0x26/0x60 [ 147.601407][ T5369] ref_tracker_alloc+0x158/0x560 [ 147.606372][ T5369] ? __lock_acquire+0xbc3/0x56d0 [ 147.611332][ T5369] ? ref_tracker_free+0x6b0/0x6b0 [ 147.616415][ T5369] dst_init+0xe4/0x520 [ 147.620529][ T5369] dst_alloc+0x16f/0x1f0 [ 147.624925][ T5369] rt_dst_alloc+0x55/0x430 [ 147.629391][ T5369] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 147.635413][ T5369] ip_route_output_key_hash+0x18f/0x340 [ 147.640991][ T5369] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 147.647279][ T5369] dccp_v4_connect+0x7e1/0x1730 [ 147.652218][ T5369] __inet_stream_connect+0x69e/0xed0 [ 147.657548][ T5369] ? inet_listen+0x640/0x640 [ 147.662172][ T5369] ? mark_held_locks+0x9f/0xe0 [ 147.666960][ T5369] ? __local_bh_enable_ip+0xa4/0x130 [ 147.672280][ T5369] inet_stream_connect+0x57/0xa0 [ 147.677249][ T5369] ? __inet_stream_connect+0xed0/0xed0 [ 147.682742][ T5369] __sys_connect_file+0x153/0x1a0 [ 147.687793][ T5369] io_connect+0x3cc/0x720 [ 147.692155][ T5369] ? io_connect_prep+0x250/0x250 [ 147.697121][ T5369] ? receive_fd+0x110/0x110 [ 147.701661][ T5369] ? rcu_read_lock_sched_held+0x3e/0x70 [ 147.707315][ T5369] ? io_connect_prep+0x250/0x250 [ 147.712286][ T5369] io_issue_sqe+0x695/0x1250 [ 147.716910][ T5369] io_submit_sqes+0x96c/0x1e90 [ 147.721723][ T5369] __do_sys_io_uring_enter+0x103d/0x24e0 [ 147.727393][ T5369] ? io_submit_sqes+0x1e90/0x1e90 [ 147.732447][ T5369] ? ptrace_notify+0xfe/0x140 [ 147.737146][ T5369] ? lock_downgrade+0x6e0/0x6e0 [ 147.742030][ T5369] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.747263][ T5369] ? lockdep_hardirqs_on+0x7d/0x100 [ 147.752486][ T5369] ? _raw_spin_unlock_irq+0x2e/0x50 [ 147.757709][ T5369] ? ptrace_notify+0xfe/0x140 [ 147.762413][ T5369] do_syscall_64+0x39/0xb0 [ 147.766860][ T5369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 147.772773][ T5369] RIP: 0033:0x7f607b0de549 [ 147.777200][ T5369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 147.796832][ T5369] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 147.805268][ T5369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 147.813257][ T5369] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 147.821239][ T5369] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5369] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5369] close(3) = 0 [pid 5369] close(4) = 0 [pid 5369] close(5) = 0 [pid 5369] close(6) = 0 [pid 5369] close(7) = 0 [pid 5369] close(8) = -1 EBADF (Bad file descriptor) [pid 5369] close(9) = -1 EBADF (Bad file descriptor) [pid 5369] close(10) = -1 EBADF (Bad file descriptor) [pid 5369] close(11) = -1 EBADF (Bad file descriptor) [pid 5369] close(12) = -1 EBADF (Bad file descriptor) [pid 5369] close(13) = -1 EBADF (Bad file descriptor) [pid 5369] close(14) = -1 EBADF (Bad file descriptor) [pid 5369] close(15) = -1 EBADF (Bad file descriptor) [pid 5369] close(16) = -1 EBADF (Bad file descriptor) [pid 5369] close(17) = -1 EBADF (Bad file descriptor) [pid 5369] close(18) = -1 EBADF (Bad file descriptor) [pid 5369] close(19) = -1 EBADF (Bad file descriptor) [pid 5369] close(20) = -1 EBADF (Bad file descriptor) [pid 5369] close(21) = -1 EBADF (Bad file descriptor) [pid 5369] close(22) = -1 EBADF (Bad file descriptor) [pid 5369] close(23) = -1 EBADF (Bad file descriptor) [pid 5369] close(24) = -1 EBADF (Bad file descriptor) [pid 5369] close(25) = -1 EBADF (Bad file descriptor) [pid 5369] close(26) = -1 EBADF (Bad file descriptor) [pid 5369] close(27) = -1 EBADF (Bad file descriptor) [pid 5369] close(28) = -1 EBADF (Bad file descriptor) [pid 5369] close(29) = -1 EBADF (Bad file descriptor) [pid 5369] exit_group(0) = ? [pid 5369] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=268, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 269 ./strace-static-x86_64: Process 5370 attached [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5370] setpgid(0, 0) = 0 [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5370] write(3, "1000", 4) = 4 [pid 5370] close(3) = 0 [pid 5370] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5370] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5370] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5370] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5370] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5370] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5370] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5370] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5370] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5370] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5370] write(7, "5", 1) = 1 [ 147.829225][ T5369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 147.837210][ T5369] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 147.845218][ T5369] [ 147.880500][ T5370] FAULT_INJECTION: forcing a failure. [ 147.880500][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 147.894508][ T5370] CPU: 0 PID: 5370 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 147.904401][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 147.914480][ T5370] Call Trace: [ 147.917755][ T5370] [ 147.920679][ T5370] dump_stack_lvl+0xd1/0x138 [ 147.925277][ T5370] should_fail_ex.cold+0x5/0xa [ 147.930056][ T5370] ? __inet_hash_connect+0x95e/0x1ba0 [ 147.935463][ T5370] should_failslab+0x9/0x20 [ 147.939971][ T5370] kmem_cache_alloc+0x5a/0x320 [ 147.944760][ T5370] __inet_hash_connect+0x95e/0x1ba0 [ 147.949993][ T5370] ? __inet_lookup_listener+0xbf0/0xbf0 [ 147.955551][ T5370] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 147.961985][ T5370] dccp_v4_connect+0xb82/0x1730 [ 147.966879][ T5370] __inet_stream_connect+0x69e/0xed0 [ 147.972211][ T5370] ? inet_listen+0x640/0x640 [ 147.976824][ T5370] ? mark_held_locks+0x9f/0xe0 [ 147.981703][ T5370] ? __local_bh_enable_ip+0xa4/0x130 [ 147.987015][ T5370] inet_stream_connect+0x57/0xa0 [ 147.991994][ T5370] ? __inet_stream_connect+0xed0/0xed0 [ 147.997471][ T5370] __sys_connect_file+0x153/0x1a0 [ 148.002529][ T5370] io_connect+0x3cc/0x720 [ 148.006894][ T5370] ? io_connect_prep+0x250/0x250 [ 148.011860][ T5370] ? receive_fd+0x110/0x110 [ 148.016410][ T5370] ? rcu_read_lock_sched_held+0x3e/0x70 [ 148.021986][ T5370] ? io_connect_prep+0x250/0x250 [ 148.026954][ T5370] io_issue_sqe+0x695/0x1250 [ 148.031583][ T5370] io_submit_sqes+0x96c/0x1e90 [ 148.036489][ T5370] __do_sys_io_uring_enter+0x103d/0x24e0 [ 148.042157][ T5370] ? io_submit_sqes+0x1e90/0x1e90 [ 148.047205][ T5370] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.053382][ T5370] ? lockdep_hardirqs_on+0x7d/0x100 [ 148.058601][ T5370] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.064788][ T5370] ? _raw_spin_unlock_irq+0x29/0x50 [ 148.070015][ T5370] ? _raw_spin_unlock_irq+0x2e/0x50 [ 148.075233][ T5370] ? ptrace_notify+0xfe/0x140 [ 148.079939][ T5370] do_syscall_64+0x39/0xb0 [ 148.084385][ T5370] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.090305][ T5370] RIP: 0033:0x7f607b0de549 [ 148.094733][ T5370] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.114359][ T5370] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 148.122794][ T5370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5370] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5370] close(3) = 0 [pid 5370] close(4) = 0 [pid 5370] close(5) = 0 [pid 5370] close(6) = 0 [pid 5370] close(7) = 0 [pid 5370] close(8) = -1 EBADF (Bad file descriptor) [pid 5370] close(9) = -1 EBADF (Bad file descriptor) [pid 5370] close(10) = -1 EBADF (Bad file descriptor) [pid 5370] close(11) = -1 EBADF (Bad file descriptor) [pid 5370] close(12) = -1 EBADF (Bad file descriptor) [pid 5370] close(13) = -1 EBADF (Bad file descriptor) [pid 5370] close(14) = -1 EBADF (Bad file descriptor) [pid 5370] close(15) = -1 EBADF (Bad file descriptor) [pid 5370] close(16) = -1 EBADF (Bad file descriptor) [pid 5370] close(17) = -1 EBADF (Bad file descriptor) [pid 5370] close(18) = -1 EBADF (Bad file descriptor) [pid 5370] close(19) = -1 EBADF (Bad file descriptor) [pid 5370] close(20) = -1 EBADF (Bad file descriptor) [pid 5370] close(21) = -1 EBADF (Bad file descriptor) [pid 5370] close(22) = -1 EBADF (Bad file descriptor) [pid 5370] close(23) = -1 EBADF (Bad file descriptor) [pid 5370] close(24) = -1 EBADF (Bad file descriptor) [pid 5370] close(25) = -1 EBADF (Bad file descriptor) [pid 5370] close(26) = -1 EBADF (Bad file descriptor) [pid 5370] close(27) = -1 EBADF (Bad file descriptor) [pid 5370] close(28) = -1 EBADF (Bad file descriptor) [pid 5370] close(29) = -1 EBADF (Bad file descriptor) [pid 5370] exit_group(0) = ? [pid 5370] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=269, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 270 ./strace-static-x86_64: Process 5371 attached [pid 5371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5371] setpgid(0, 0) = 0 [pid 5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5371] write(3, "1000", 4) = 4 [pid 5371] close(3) = 0 [pid 5371] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5371] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5371] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5371] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5371] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5371] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5371] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5371] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5371] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5371] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 148.130789][ T5370] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 148.138792][ T5370] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 148.146778][ T5370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 148.154762][ T5370] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 148.162773][ T5370] [pid 5371] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5371] write(7, "5", 1) = 1 [ 148.215470][ T5371] FAULT_INJECTION: forcing a failure. [ 148.215470][ T5371] name failslab, interval 1, probability 0, space 0, times 0 [ 148.228944][ T5371] CPU: 0 PID: 5371 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 148.238970][ T5371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 148.249110][ T5371] Call Trace: [ 148.252401][ T5371] [ 148.255343][ T5371] dump_stack_lvl+0xd1/0x138 [ 148.259938][ T5371] should_fail_ex.cold+0x5/0xa [ 148.264699][ T5371] ? io_issue_sqe+0x695/0x1250 [ 148.269484][ T5371] should_failslab+0x9/0x20 [ 148.274085][ T5371] __kmem_cache_alloc_node+0x5b/0x330 [ 148.279456][ T5371] ? ref_tracker_alloc+0x158/0x560 [ 148.284593][ T5371] kmalloc_trace+0x26/0x60 [ 148.289062][ T5371] ref_tracker_alloc+0x158/0x560 [ 148.294034][ T5371] ? __lock_acquire+0xbc3/0x56d0 [ 148.298988][ T5371] ? ref_tracker_free+0x6b0/0x6b0 [ 148.304063][ T5371] dst_init+0xe4/0x520 [ 148.308134][ T5371] dst_alloc+0x16f/0x1f0 [ 148.312385][ T5371] rt_dst_alloc+0x55/0x430 [ 148.316809][ T5371] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 148.322894][ T5371] ip_route_output_key_hash+0x18f/0x340 [ 148.328444][ T5371] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 148.334731][ T5371] dccp_v4_connect+0x7e1/0x1730 [ 148.339633][ T5371] __inet_stream_connect+0x69e/0xed0 [ 148.344933][ T5371] ? inet_listen+0x640/0x640 [ 148.349532][ T5371] ? mark_held_locks+0x9f/0xe0 [ 148.354398][ T5371] ? __local_bh_enable_ip+0xa4/0x130 [ 148.360326][ T5371] inet_stream_connect+0x57/0xa0 [ 148.365302][ T5371] ? __inet_stream_connect+0xed0/0xed0 [ 148.370767][ T5371] __sys_connect_file+0x153/0x1a0 [ 148.375798][ T5371] io_connect+0x3cc/0x720 [ 148.380147][ T5371] ? io_connect_prep+0x250/0x250 [ 148.385127][ T5371] ? receive_fd+0x110/0x110 [ 148.389643][ T5371] ? rcu_read_lock_sched_held+0x3e/0x70 [ 148.395190][ T5371] ? io_connect_prep+0x250/0x250 [ 148.400137][ T5371] io_issue_sqe+0x695/0x1250 [ 148.404753][ T5371] io_submit_sqes+0x96c/0x1e90 [ 148.409563][ T5371] __do_sys_io_uring_enter+0x103d/0x24e0 [ 148.415229][ T5371] ? io_submit_sqes+0x1e90/0x1e90 [ 148.420281][ T5371] ? ptrace_notify+0xfe/0x140 [ 148.424988][ T5371] ? lock_downgrade+0x6e0/0x6e0 [ 148.429847][ T5371] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.435049][ T5371] ? lockdep_hardirqs_on+0x7d/0x100 [ 148.440264][ T5371] ? _raw_spin_unlock_irq+0x2e/0x50 [ 148.445490][ T5371] ? ptrace_notify+0xfe/0x140 [ 148.450194][ T5371] do_syscall_64+0x39/0xb0 [ 148.454673][ T5371] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.460620][ T5371] RIP: 0033:0x7f607b0de549 [ 148.465081][ T5371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.484724][ T5371] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 148.493182][ T5371] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 148.501171][ T5371] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5371] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5371] close(3) = 0 [pid 5371] close(4) = 0 [pid 5371] close(5) = 0 [pid 5371] close(6) = 0 [pid 5371] close(7) = 0 [pid 5371] close(8) = -1 EBADF (Bad file descriptor) [pid 5371] close(9) = -1 EBADF (Bad file descriptor) [pid 5371] close(10) = -1 EBADF (Bad file descriptor) [pid 5371] close(11) = -1 EBADF (Bad file descriptor) [pid 5371] close(12) = -1 EBADF (Bad file descriptor) [pid 5371] close(13) = -1 EBADF (Bad file descriptor) [pid 5371] close(14) = -1 EBADF (Bad file descriptor) [pid 5371] close(15) = -1 EBADF (Bad file descriptor) [pid 5371] close(16) = -1 EBADF (Bad file descriptor) [pid 5371] close(17) = -1 EBADF (Bad file descriptor) [pid 5371] close(18) = -1 EBADF (Bad file descriptor) [pid 5371] close(19) = -1 EBADF (Bad file descriptor) [pid 5371] close(20) = -1 EBADF (Bad file descriptor) [pid 5371] close(21) = -1 EBADF (Bad file descriptor) [pid 5371] close(22) = -1 EBADF (Bad file descriptor) [pid 5371] close(23) = -1 EBADF (Bad file descriptor) [pid 5371] close(24) = -1 EBADF (Bad file descriptor) [pid 5371] close(25) = -1 EBADF (Bad file descriptor) [pid 5371] close(26) = -1 EBADF (Bad file descriptor) [pid 5371] close(27) = -1 EBADF (Bad file descriptor) [pid 5371] close(28) = -1 EBADF (Bad file descriptor) [pid 5371] close(29) = -1 EBADF (Bad file descriptor) [pid 5371] exit_group(0) = ? [pid 5371] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=270, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 271 ./strace-static-x86_64: Process 5372 attached [pid 5372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5372] setpgid(0, 0) = 0 [pid 5372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5372] write(3, "1000", 4) = 4 [pid 5372] close(3) = 0 [pid 5372] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5372] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5372] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5372] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5372] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5372] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5372] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5372] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5372] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5372] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5372] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5372] write(7, "5", 1) = 1 [ 148.509153][ T5371] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 148.517160][ T5371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 148.525406][ T5371] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 148.533422][ T5371] [ 148.571791][ T5372] FAULT_INJECTION: forcing a failure. [ 148.571791][ T5372] name failslab, interval 1, probability 0, space 0, times 0 [ 148.584954][ T5372] CPU: 1 PID: 5372 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 148.594901][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 148.604993][ T5372] Call Trace: [ 148.608275][ T5372] [ 148.611218][ T5372] dump_stack_lvl+0xd1/0x138 [ 148.615846][ T5372] should_fail_ex.cold+0x5/0xa [ 148.620619][ T5372] ? io_issue_sqe+0x695/0x1250 [ 148.625417][ T5372] should_failslab+0x9/0x20 [ 148.629924][ T5372] __kmem_cache_alloc_node+0x5b/0x330 [ 148.635300][ T5372] ? ref_tracker_alloc+0x158/0x560 [ 148.640530][ T5372] kmalloc_trace+0x26/0x60 [ 148.644998][ T5372] ref_tracker_alloc+0x158/0x560 [ 148.649972][ T5372] ? __lock_acquire+0xbc3/0x56d0 [ 148.654967][ T5372] ? ref_tracker_free+0x6b0/0x6b0 [ 148.660048][ T5372] dst_init+0xe4/0x520 [ 148.664126][ T5372] dst_alloc+0x16f/0x1f0 [ 148.668375][ T5372] rt_dst_alloc+0x55/0x430 [ 148.672799][ T5372] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 148.678799][ T5372] ip_route_output_key_hash+0x18f/0x340 [ 148.684357][ T5372] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 148.690644][ T5372] dccp_v4_connect+0x7e1/0x1730 [ 148.695542][ T5372] __inet_stream_connect+0x69e/0xed0 [ 148.700842][ T5372] ? inet_listen+0x640/0x640 [ 148.705448][ T5372] ? mark_held_locks+0x9f/0xe0 [ 148.710248][ T5372] ? __local_bh_enable_ip+0xa4/0x130 [ 148.715598][ T5372] inet_stream_connect+0x57/0xa0 [ 148.720552][ T5372] ? __inet_stream_connect+0xed0/0xed0 [ 148.726121][ T5372] __sys_connect_file+0x153/0x1a0 [ 148.731190][ T5372] io_connect+0x3cc/0x720 [ 148.735557][ T5372] ? io_connect_prep+0x250/0x250 [ 148.740512][ T5372] ? receive_fd+0x110/0x110 [ 148.745035][ T5372] ? rcu_read_lock_sched_held+0x3e/0x70 [ 148.750595][ T5372] ? io_connect_prep+0x250/0x250 [ 148.755575][ T5372] io_issue_sqe+0x695/0x1250 [ 148.760181][ T5372] io_submit_sqes+0x96c/0x1e90 [ 148.764987][ T5372] __do_sys_io_uring_enter+0x103d/0x24e0 [ 148.770682][ T5372] ? io_submit_sqes+0x1e90/0x1e90 [ 148.775742][ T5372] ? ptrace_notify+0xfe/0x140 [ 148.780438][ T5372] ? lock_downgrade+0x6e0/0x6e0 [ 148.785320][ T5372] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.790538][ T5372] ? lockdep_hardirqs_on+0x7d/0x100 [ 148.795762][ T5372] ? _raw_spin_unlock_irq+0x2e/0x50 [ 148.800966][ T5372] ? ptrace_notify+0xfe/0x140 [ 148.805997][ T5372] do_syscall_64+0x39/0xb0 [ 148.810448][ T5372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.816382][ T5372] RIP: 0033:0x7f607b0de549 [ 148.820809][ T5372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 148.840443][ T5372] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 148.848900][ T5372] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 148.856924][ T5372] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 148.864902][ T5372] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5372] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5372] close(3) = 0 [pid 5372] close(4) = 0 [pid 5372] close(5) = 0 [pid 5372] close(6) = 0 [pid 5372] close(7) = 0 [pid 5372] close(8) = -1 EBADF (Bad file descriptor) [pid 5372] close(9) = -1 EBADF (Bad file descriptor) [pid 5372] close(10) = -1 EBADF (Bad file descriptor) [pid 5372] close(11) = -1 EBADF (Bad file descriptor) [pid 5372] close(12) = -1 EBADF (Bad file descriptor) [pid 5372] close(13) = -1 EBADF (Bad file descriptor) [pid 5372] close(14) = -1 EBADF (Bad file descriptor) [pid 5372] close(15) = -1 EBADF (Bad file descriptor) [pid 5372] close(16) = -1 EBADF (Bad file descriptor) [pid 5372] close(17) = -1 EBADF (Bad file descriptor) [pid 5372] close(18) = -1 EBADF (Bad file descriptor) [pid 5372] close(19) = -1 EBADF (Bad file descriptor) [pid 5372] close(20) = -1 EBADF (Bad file descriptor) [pid 5372] close(21) = -1 EBADF (Bad file descriptor) [pid 5372] close(22) = -1 EBADF (Bad file descriptor) [pid 5372] close(23) = -1 EBADF (Bad file descriptor) [pid 5372] close(24) = -1 EBADF (Bad file descriptor) [pid 5372] close(25) = -1 EBADF (Bad file descriptor) [pid 5372] close(26) = -1 EBADF (Bad file descriptor) [pid 5372] close(27) = -1 EBADF (Bad file descriptor) [pid 5372] close(28) = -1 EBADF (Bad file descriptor) [pid 5372] close(29) = -1 EBADF (Bad file descriptor) [pid 5372] exit_group(0) = ? [pid 5372] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=271, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5373 attached , child_tidptr=0x555555eff5d0) = 272 [pid 5373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5373] setpgid(0, 0) = 0 [pid 5373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5373] write(3, "1000", 4) = 4 [pid 5373] close(3) = 0 [pid 5373] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5373] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5373] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5373] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5373] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5373] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5373] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5373] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5373] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5373] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5373] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5373] write(7, "5", 1) = 1 [ 148.872878][ T5372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 148.880854][ T5372] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 148.888869][ T5372] [ 148.929453][ T5373] FAULT_INJECTION: forcing a failure. [ 148.929453][ T5373] name failslab, interval 1, probability 0, space 0, times 0 [ 148.942145][ T5373] CPU: 0 PID: 5373 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 148.952041][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 148.962127][ T5373] Call Trace: [ 148.965418][ T5373] [ 148.968350][ T5373] dump_stack_lvl+0xd1/0x138 [ 148.972947][ T5373] should_fail_ex.cold+0x5/0xa [ 148.977728][ T5373] ? __inet_hash_connect+0x95e/0x1ba0 [ 148.983129][ T5373] should_failslab+0x9/0x20 [ 148.987650][ T5373] kmem_cache_alloc+0x5a/0x320 [ 148.992716][ T5373] __inet_hash_connect+0x95e/0x1ba0 [ 148.997947][ T5373] ? __inet_lookup_listener+0xbf0/0xbf0 [ 149.003559][ T5373] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 149.009933][ T5373] dccp_v4_connect+0xb82/0x1730 [ 149.014808][ T5373] __inet_stream_connect+0x69e/0xed0 [ 149.020118][ T5373] ? inet_listen+0x640/0x640 [ 149.024718][ T5373] ? mark_held_locks+0x9f/0xe0 [ 149.029484][ T5373] ? __local_bh_enable_ip+0xa4/0x130 [ 149.034793][ T5373] inet_stream_connect+0x57/0xa0 [ 149.039778][ T5373] ? __inet_stream_connect+0xed0/0xed0 [ 149.045275][ T5373] __sys_connect_file+0x153/0x1a0 [ 149.050325][ T5373] io_connect+0x3cc/0x720 [ 149.054699][ T5373] ? io_connect_prep+0x250/0x250 [ 149.059656][ T5373] ? receive_fd+0x110/0x110 [ 149.064174][ T5373] ? rcu_read_lock_sched_held+0x3e/0x70 [ 149.069725][ T5373] ? io_connect_prep+0x250/0x250 [ 149.074691][ T5373] io_issue_sqe+0x695/0x1250 [ 149.079324][ T5373] io_submit_sqes+0x96c/0x1e90 [ 149.084145][ T5373] __do_sys_io_uring_enter+0x103d/0x24e0 [ 149.089794][ T5373] ? io_submit_sqes+0x1e90/0x1e90 [ 149.094845][ T5373] ? ptrace_notify+0xfe/0x140 [ 149.099547][ T5373] ? lock_downgrade+0x6e0/0x6e0 [ 149.104410][ T5373] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.109620][ T5373] ? lockdep_hardirqs_on+0x7d/0x100 [ 149.114837][ T5373] ? _raw_spin_unlock_irq+0x2e/0x50 [ 149.120070][ T5373] ? ptrace_notify+0xfe/0x140 [ 149.124772][ T5373] do_syscall_64+0x39/0xb0 [ 149.129231][ T5373] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.135130][ T5373] RIP: 0033:0x7f607b0de549 [ 149.139547][ T5373] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 149.159173][ T5373] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 149.167634][ T5373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5373] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5373] close(3) = 0 [pid 5373] close(4) = 0 [pid 5373] close(5) = 0 [pid 5373] close(6) = 0 [pid 5373] close(7) = 0 [pid 5373] close(8) = -1 EBADF (Bad file descriptor) [pid 5373] close(9) = -1 EBADF (Bad file descriptor) [pid 5373] close(10) = -1 EBADF (Bad file descriptor) [pid 5373] close(11) = -1 EBADF (Bad file descriptor) [pid 5373] close(12) = -1 EBADF (Bad file descriptor) [pid 5373] close(13) = -1 EBADF (Bad file descriptor) [pid 5373] close(14) = -1 EBADF (Bad file descriptor) [pid 5373] close(15) = -1 EBADF (Bad file descriptor) [pid 5373] close(16) = -1 EBADF (Bad file descriptor) [pid 5373] close(17) = -1 EBADF (Bad file descriptor) [pid 5373] close(18) = -1 EBADF (Bad file descriptor) [pid 5373] close(19) = -1 EBADF (Bad file descriptor) [pid 5373] close(20) = -1 EBADF (Bad file descriptor) [pid 5373] close(21) = -1 EBADF (Bad file descriptor) [pid 5373] close(22) = -1 EBADF (Bad file descriptor) [pid 5373] close(23) = -1 EBADF (Bad file descriptor) [pid 5373] close(24) = -1 EBADF (Bad file descriptor) [pid 5373] close(25) = -1 EBADF (Bad file descriptor) [pid 5373] close(26) = -1 EBADF (Bad file descriptor) [pid 5373] close(27) = -1 EBADF (Bad file descriptor) [pid 5373] close(28) = -1 EBADF (Bad file descriptor) [pid 5373] close(29) = -1 EBADF (Bad file descriptor) [pid 5373] exit_group(0) = ? [pid 5373] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=272, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 273 ./strace-static-x86_64: Process 5374 attached [pid 5374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5374] setpgid(0, 0) = 0 [pid 5374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5374] write(3, "1000", 4) = 4 [pid 5374] close(3) = 0 [pid 5374] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5374] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5374] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5374] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5374] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5374] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5374] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5374] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5374] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5374] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5374] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5374] write(7, "5", 1) = 1 [ 149.175629][ T5373] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 149.183604][ T5373] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 149.191574][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 149.199546][ T5373] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 149.207534][ T5373] [ 149.250413][ T5374] FAULT_INJECTION: forcing a failure. [ 149.250413][ T5374] name failslab, interval 1, probability 0, space 0, times 0 [ 149.263266][ T5374] CPU: 0 PID: 5374 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 149.273162][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 149.283216][ T5374] Call Trace: [ 149.286498][ T5374] [ 149.289450][ T5374] dump_stack_lvl+0xd1/0x138 [ 149.294063][ T5374] should_fail_ex.cold+0x5/0xa [ 149.298831][ T5374] ? io_issue_sqe+0x695/0x1250 [ 149.303619][ T5374] should_failslab+0x9/0x20 [ 149.308171][ T5374] __kmem_cache_alloc_node+0x5b/0x330 [ 149.313551][ T5374] ? ref_tracker_alloc+0x158/0x560 [ 149.318683][ T5374] kmalloc_trace+0x26/0x60 [ 149.323111][ T5374] ref_tracker_alloc+0x158/0x560 [ 149.328057][ T5374] ? __lock_acquire+0xbc3/0x56d0 [ 149.332993][ T5374] ? ref_tracker_free+0x6b0/0x6b0 [ 149.338067][ T5374] dst_init+0xe4/0x520 [ 149.342167][ T5374] dst_alloc+0x16f/0x1f0 [ 149.346415][ T5374] rt_dst_alloc+0x55/0x430 [ 149.350854][ T5374] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 149.356852][ T5374] ip_route_output_key_hash+0x18f/0x340 [ 149.362407][ T5374] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 149.368673][ T5374] dccp_v4_connect+0x7e1/0x1730 [ 149.373553][ T5374] __inet_stream_connect+0x69e/0xed0 [ 149.378866][ T5374] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.385072][ T5374] ? inet_listen+0x640/0x640 [ 149.389708][ T5374] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.395880][ T5374] inet_stream_connect+0x57/0xa0 [ 149.400830][ T5374] ? __inet_stream_connect+0xed0/0xed0 [ 149.406323][ T5374] __sys_connect_file+0x153/0x1a0 [ 149.411390][ T5374] io_connect+0x3cc/0x720 [ 149.415748][ T5374] ? io_connect_prep+0x250/0x250 [ 149.420722][ T5374] ? receive_fd+0x110/0x110 [ 149.425273][ T5374] ? rcu_read_lock_sched_held+0x3e/0x70 [ 149.430838][ T5374] ? io_connect_prep+0x250/0x250 [ 149.435790][ T5374] io_issue_sqe+0x695/0x1250 [ 149.440410][ T5374] io_submit_sqes+0x96c/0x1e90 [ 149.445219][ T5374] __do_sys_io_uring_enter+0x103d/0x24e0 [ 149.450885][ T5374] ? io_submit_sqes+0x1e90/0x1e90 [ 149.455922][ T5374] ? ptrace_notify+0xfe/0x140 [ 149.460615][ T5374] ? lock_downgrade+0x6e0/0x6e0 [ 149.465508][ T5374] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.470733][ T5374] ? lockdep_hardirqs_on+0x7d/0x100 [ 149.475966][ T5374] ? _raw_spin_unlock_irq+0x2e/0x50 [ 149.481192][ T5374] ? ptrace_notify+0xfe/0x140 [ 149.485892][ T5374] do_syscall_64+0x39/0xb0 [ 149.490379][ T5374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.496294][ T5374] RIP: 0033:0x7f607b0de549 [ 149.500751][ T5374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 149.520394][ T5374] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 149.528834][ T5374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 149.536809][ T5374] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5374] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5374] close(3) = 0 [pid 5374] close(4) = 0 [pid 5374] close(5) = 0 [pid 5374] close(6) = 0 [pid 5374] close(7) = 0 [pid 5374] close(8) = -1 EBADF (Bad file descriptor) [pid 5374] close(9) = -1 EBADF (Bad file descriptor) [pid 5374] close(10) = -1 EBADF (Bad file descriptor) [pid 5374] close(11) = -1 EBADF (Bad file descriptor) [pid 5374] close(12) = -1 EBADF (Bad file descriptor) [pid 5374] close(13) = -1 EBADF (Bad file descriptor) [pid 5374] close(14) = -1 EBADF (Bad file descriptor) [pid 5374] close(15) = -1 EBADF (Bad file descriptor) [pid 5374] close(16) = -1 EBADF (Bad file descriptor) [pid 5374] close(17) = -1 EBADF (Bad file descriptor) [pid 5374] close(18) = -1 EBADF (Bad file descriptor) [pid 5374] close(19) = -1 EBADF (Bad file descriptor) [pid 5374] close(20) = -1 EBADF (Bad file descriptor) [pid 5374] close(21) = -1 EBADF (Bad file descriptor) [pid 5374] close(22) = -1 EBADF (Bad file descriptor) [pid 5374] close(23) = -1 EBADF (Bad file descriptor) [pid 5374] close(24) = -1 EBADF (Bad file descriptor) [pid 5374] close(25) = -1 EBADF (Bad file descriptor) [pid 5374] close(26) = -1 EBADF (Bad file descriptor) [pid 5374] close(27) = -1 EBADF (Bad file descriptor) [pid 5374] close(28) = -1 EBADF (Bad file descriptor) [pid 5374] close(29) = -1 EBADF (Bad file descriptor) [pid 5374] exit_group(0) = ? [pid 5374] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=273, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 274 ./strace-static-x86_64: Process 5375 attached [pid 5375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5375] setpgid(0, 0) = 0 [pid 5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5375] write(3, "1000", 4) = 4 [pid 5375] close(3) = 0 [pid 5375] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5375] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5375] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5375] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5375] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5375] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5375] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 149.544975][ T5374] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 149.553066][ T5374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 149.561039][ T5374] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 149.569047][ T5374] [pid 5375] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5375] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5375] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5375] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5375] write(7, "5", 1) = 1 [ 149.619131][ T5375] FAULT_INJECTION: forcing a failure. [ 149.619131][ T5375] name failslab, interval 1, probability 0, space 0, times 0 [ 149.631933][ T5375] CPU: 0 PID: 5375 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 149.641866][ T5375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 149.651958][ T5375] Call Trace: [ 149.655256][ T5375] [ 149.658186][ T5375] dump_stack_lvl+0xd1/0x138 [ 149.662788][ T5375] should_fail_ex.cold+0x5/0xa [ 149.667571][ T5375] ? io_issue_sqe+0x695/0x1250 [ 149.672399][ T5375] should_failslab+0x9/0x20 [ 149.676911][ T5375] __kmem_cache_alloc_node+0x5b/0x330 [ 149.682284][ T5375] ? ref_tracker_alloc+0x158/0x560 [ 149.687418][ T5375] kmalloc_trace+0x26/0x60 [ 149.691889][ T5375] ref_tracker_alloc+0x158/0x560 [ 149.696863][ T5375] ? __lock_acquire+0xbc3/0x56d0 [ 149.701823][ T5375] ? ref_tracker_free+0x6b0/0x6b0 [ 149.706899][ T5375] dst_init+0xe4/0x520 [ 149.710975][ T5375] dst_alloc+0x16f/0x1f0 [ 149.715221][ T5375] rt_dst_alloc+0x55/0x430 [ 149.719641][ T5375] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 149.725638][ T5375] ip_route_output_key_hash+0x18f/0x340 [ 149.731191][ T5375] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 149.737492][ T5375] dccp_v4_connect+0x7e1/0x1730 [ 149.742394][ T5375] __inet_stream_connect+0x69e/0xed0 [ 149.747708][ T5375] ? inet_listen+0x640/0x640 [ 149.752337][ T5375] ? mark_held_locks+0x9f/0xe0 [ 149.757103][ T5375] ? __local_bh_enable_ip+0xa4/0x130 [ 149.762390][ T5375] inet_stream_connect+0x57/0xa0 [ 149.767335][ T5375] ? __inet_stream_connect+0xed0/0xed0 [ 149.772825][ T5375] __sys_connect_file+0x153/0x1a0 [ 149.777863][ T5375] io_connect+0x3cc/0x720 [ 149.782204][ T5375] ? io_connect_prep+0x250/0x250 [ 149.787246][ T5375] ? receive_fd+0x110/0x110 [ 149.791803][ T5375] ? rcu_read_lock_sched_held+0x3e/0x70 [ 149.797388][ T5375] ? io_connect_prep+0x250/0x250 [ 149.802339][ T5375] io_issue_sqe+0x695/0x1250 [ 149.806943][ T5375] io_submit_sqes+0x96c/0x1e90 [ 149.811726][ T5375] __do_sys_io_uring_enter+0x103d/0x24e0 [ 149.817371][ T5375] ? io_submit_sqes+0x1e90/0x1e90 [ 149.822411][ T5375] ? ptrace_notify+0xfe/0x140 [ 149.827090][ T5375] ? lock_downgrade+0x6e0/0x6e0 [ 149.831968][ T5375] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.837204][ T5375] ? lockdep_hardirqs_on+0x7d/0x100 [ 149.842411][ T5375] ? _raw_spin_unlock_irq+0x2e/0x50 [ 149.847630][ T5375] ? ptrace_notify+0xfe/0x140 [ 149.852344][ T5375] do_syscall_64+0x39/0xb0 [ 149.856769][ T5375] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.862671][ T5375] RIP: 0033:0x7f607b0de549 [ 149.867090][ T5375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 149.886699][ T5375] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 149.895120][ T5375] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 149.903094][ T5375] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 149.911069][ T5375] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5375] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5375] close(3) = 0 [pid 5375] close(4) = 0 [pid 5375] close(5) = 0 [pid 5375] close(6) = 0 [pid 5375] close(7) = 0 [pid 5375] close(8) = -1 EBADF (Bad file descriptor) [pid 5375] close(9) = -1 EBADF (Bad file descriptor) [pid 5375] close(10) = -1 EBADF (Bad file descriptor) [pid 5375] close(11) = -1 EBADF (Bad file descriptor) [pid 5375] close(12) = -1 EBADF (Bad file descriptor) [pid 5375] close(13) = -1 EBADF (Bad file descriptor) [pid 5375] close(14) = -1 EBADF (Bad file descriptor) [pid 5375] close(15) = -1 EBADF (Bad file descriptor) [pid 5375] close(16) = -1 EBADF (Bad file descriptor) [pid 5375] close(17) = -1 EBADF (Bad file descriptor) [pid 5375] close(18) = -1 EBADF (Bad file descriptor) [pid 5375] close(19) = -1 EBADF (Bad file descriptor) [pid 5375] close(20) = -1 EBADF (Bad file descriptor) [pid 5375] close(21) = -1 EBADF (Bad file descriptor) [pid 5375] close(22) = -1 EBADF (Bad file descriptor) [pid 5375] close(23) = -1 EBADF (Bad file descriptor) [pid 5375] close(24) = -1 EBADF (Bad file descriptor) [pid 5375] close(25) = -1 EBADF (Bad file descriptor) [pid 5375] close(26) = -1 EBADF (Bad file descriptor) [pid 5375] close(27) = -1 EBADF (Bad file descriptor) [pid 5375] close(28) = -1 EBADF (Bad file descriptor) [pid 5375] close(29) = -1 EBADF (Bad file descriptor) [pid 5375] exit_group(0) = ? [pid 5375] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=274, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 275 ./strace-static-x86_64: Process 5376 attached [pid 5376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5376] setpgid(0, 0) = 0 [pid 5376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5376] write(3, "1000", 4) = 4 [pid 5376] close(3) = 0 [pid 5376] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5376] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5376] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5376] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [ 149.919054][ T5375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 149.927046][ T5375] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 149.935036][ T5375] [pid 5376] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5376] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5376] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5376] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5376] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5376] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5376] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5376] write(7, "5", 1) = 1 [ 149.990012][ T5376] FAULT_INJECTION: forcing a failure. [ 149.990012][ T5376] name failslab, interval 1, probability 0, space 0, times 0 [ 150.002701][ T5376] CPU: 0 PID: 5376 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 150.012595][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 150.022652][ T5376] Call Trace: [ 150.025931][ T5376] [ 150.028870][ T5376] dump_stack_lvl+0xd1/0x138 [ 150.033513][ T5376] should_fail_ex.cold+0x5/0xa [ 150.038289][ T5376] ? __inet_hash_connect+0x95e/0x1ba0 [ 150.043665][ T5376] should_failslab+0x9/0x20 [ 150.048196][ T5376] kmem_cache_alloc+0x5a/0x320 [ 150.052991][ T5376] __inet_hash_connect+0x95e/0x1ba0 [ 150.058201][ T5376] ? __inet_lookup_listener+0xbf0/0xbf0 [ 150.063768][ T5376] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 150.070152][ T5376] dccp_v4_connect+0xb82/0x1730 [ 150.075051][ T5376] __inet_stream_connect+0x69e/0xed0 [ 150.080381][ T5376] ? inet_listen+0x640/0x640 [ 150.085011][ T5376] ? mark_held_locks+0x9f/0xe0 [ 150.089803][ T5376] ? __local_bh_enable_ip+0xa4/0x130 [ 150.095121][ T5376] inet_stream_connect+0x57/0xa0 [ 150.100132][ T5376] ? __inet_stream_connect+0xed0/0xed0 [ 150.105672][ T5376] __sys_connect_file+0x153/0x1a0 [ 150.110730][ T5376] io_connect+0x3cc/0x720 [ 150.115186][ T5376] ? io_connect_prep+0x250/0x250 [ 150.120166][ T5376] ? receive_fd+0x110/0x110 [ 150.124718][ T5376] ? rcu_read_lock_sched_held+0x3e/0x70 [ 150.130285][ T5376] ? io_connect_prep+0x250/0x250 [ 150.135275][ T5376] io_issue_sqe+0x695/0x1250 [ 150.139910][ T5376] io_submit_sqes+0x96c/0x1e90 [ 150.144735][ T5376] __do_sys_io_uring_enter+0x103d/0x24e0 [ 150.150413][ T5376] ? io_submit_sqes+0x1e90/0x1e90 [ 150.155471][ T5376] ? ptrace_notify+0xfe/0x140 [ 150.160170][ T5376] ? lock_downgrade+0x6e0/0x6e0 [ 150.165053][ T5376] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.170283][ T5376] ? lockdep_hardirqs_on+0x7d/0x100 [ 150.175505][ T5376] ? _raw_spin_unlock_irq+0x2e/0x50 [ 150.180819][ T5376] ? ptrace_notify+0xfe/0x140 [ 150.185524][ T5376] do_syscall_64+0x39/0xb0 [ 150.189971][ T5376] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 150.196168][ T5376] RIP: 0033:0x7f607b0de549 [ 150.200606][ T5376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 150.220261][ T5376] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 150.228701][ T5376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5376] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5376] close(3) = 0 [pid 5376] close(4) = 0 [pid 5376] close(5) = 0 [pid 5376] close(6) = 0 [pid 5376] close(7) = 0 [pid 5376] close(8) = -1 EBADF (Bad file descriptor) [pid 5376] close(9) = -1 EBADF (Bad file descriptor) [pid 5376] close(10) = -1 EBADF (Bad file descriptor) [pid 5376] close(11) = -1 EBADF (Bad file descriptor) [pid 5376] close(12) = -1 EBADF (Bad file descriptor) [pid 5376] close(13) = -1 EBADF (Bad file descriptor) [pid 5376] close(14) = -1 EBADF (Bad file descriptor) [pid 5376] close(15) = -1 EBADF (Bad file descriptor) [pid 5376] close(16) = -1 EBADF (Bad file descriptor) [pid 5376] close(17) = -1 EBADF (Bad file descriptor) [pid 5376] close(18) = -1 EBADF (Bad file descriptor) [pid 5376] close(19) = -1 EBADF (Bad file descriptor) [pid 5376] close(20) = -1 EBADF (Bad file descriptor) [pid 5376] close(21) = -1 EBADF (Bad file descriptor) [pid 5376] close(22) = -1 EBADF (Bad file descriptor) [pid 5376] close(23) = -1 EBADF (Bad file descriptor) [pid 5376] close(24) = -1 EBADF (Bad file descriptor) [pid 5376] close(25) = -1 EBADF (Bad file descriptor) [pid 5376] close(26) = -1 EBADF (Bad file descriptor) [pid 5376] close(27) = -1 EBADF (Bad file descriptor) [pid 5376] close(28) = -1 EBADF (Bad file descriptor) [pid 5376] close(29) = -1 EBADF (Bad file descriptor) [pid 5376] exit_group(0) = ? [pid 5376] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=275, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5377 attached , child_tidptr=0x555555eff5d0) = 276 [pid 5377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5377] setpgid(0, 0) = 0 [pid 5377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5377] write(3, "1000", 4) = 4 [pid 5377] close(3) = 0 [pid 5377] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5377] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5377] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5377] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5377] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5377] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5377] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5377] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5377] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5377] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5377] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5377] write(7, "5", 1) = 1 [ 150.236685][ T5376] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 150.244668][ T5376] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 150.252650][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 150.260638][ T5376] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 150.268645][ T5376] [ 150.312244][ T5377] FAULT_INJECTION: forcing a failure. [ 150.312244][ T5377] name failslab, interval 1, probability 0, space 0, times 0 [ 150.324946][ T5377] CPU: 1 PID: 5377 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 150.334853][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 150.345051][ T5377] Call Trace: [ 150.348344][ T5377] [ 150.351290][ T5377] dump_stack_lvl+0xd1/0x138 [ 150.355914][ T5377] should_fail_ex.cold+0x5/0xa [ 150.360700][ T5377] ? __inet_hash_connect+0x95e/0x1ba0 [ 150.366115][ T5377] should_failslab+0x9/0x20 [ 150.370667][ T5377] kmem_cache_alloc+0x5a/0x320 [ 150.375462][ T5377] __inet_hash_connect+0x95e/0x1ba0 [ 150.380687][ T5377] ? __inet_lookup_listener+0xbf0/0xbf0 [ 150.386276][ T5377] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 150.393166][ T5377] dccp_v4_connect+0xb82/0x1730 [ 150.398091][ T5377] __inet_stream_connect+0x69e/0xed0 [ 150.403435][ T5377] ? inet_listen+0x640/0x640 [ 150.408069][ T5377] ? mark_held_locks+0x9f/0xe0 [ 150.412860][ T5377] ? __local_bh_enable_ip+0xa4/0x130 [ 150.418173][ T5377] inet_stream_connect+0x57/0xa0 [ 150.423145][ T5377] ? __inet_stream_connect+0xed0/0xed0 [ 150.428636][ T5377] __sys_connect_file+0x153/0x1a0 [ 150.433688][ T5377] io_connect+0x3cc/0x720 [ 150.438057][ T5377] ? io_connect_prep+0x250/0x250 [ 150.443036][ T5377] ? receive_fd+0x110/0x110 [ 150.447579][ T5377] ? rcu_read_lock_sched_held+0x3e/0x70 [ 150.453143][ T5377] ? io_connect_prep+0x250/0x250 [ 150.458115][ T5377] io_issue_sqe+0x695/0x1250 [ 150.462739][ T5377] io_submit_sqes+0x96c/0x1e90 [ 150.467550][ T5377] __do_sys_io_uring_enter+0x103d/0x24e0 [ 150.473236][ T5377] ? io_submit_sqes+0x1e90/0x1e90 [ 150.478295][ T5377] ? ptrace_notify+0xfe/0x140 [ 150.482991][ T5377] ? lock_downgrade+0x6e0/0x6e0 [ 150.487868][ T5377] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.493091][ T5377] ? lockdep_hardirqs_on+0x7d/0x100 [ 150.498311][ T5377] ? _raw_spin_unlock_irq+0x2e/0x50 [ 150.503708][ T5377] ? ptrace_notify+0xfe/0x140 [ 150.508417][ T5377] do_syscall_64+0x39/0xb0 [ 150.512869][ T5377] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 150.518791][ T5377] RIP: 0033:0x7f607b0de549 [ 150.523233][ T5377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 150.542871][ T5377] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 150.551392][ T5377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5377] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5377] close(3) = 0 [pid 5377] close(4) = 0 [pid 5377] close(5) = 0 [pid 5377] close(6) = 0 [pid 5377] close(7) = 0 [pid 5377] close(8) = -1 EBADF (Bad file descriptor) [pid 5377] close(9) = -1 EBADF (Bad file descriptor) [pid 5377] close(10) = -1 EBADF (Bad file descriptor) [pid 5377] close(11) = -1 EBADF (Bad file descriptor) [pid 5377] close(12) = -1 EBADF (Bad file descriptor) [pid 5377] close(13) = -1 EBADF (Bad file descriptor) [pid 5377] close(14) = -1 EBADF (Bad file descriptor) [pid 5377] close(15) = -1 EBADF (Bad file descriptor) [pid 5377] close(16) = -1 EBADF (Bad file descriptor) [pid 5377] close(17) = -1 EBADF (Bad file descriptor) [pid 5377] close(18) = -1 EBADF (Bad file descriptor) [pid 5377] close(19) = -1 EBADF (Bad file descriptor) [pid 5377] close(20) = -1 EBADF (Bad file descriptor) [pid 5377] close(21) = -1 EBADF (Bad file descriptor) [pid 5377] close(22) = -1 EBADF (Bad file descriptor) [pid 5377] close(23) = -1 EBADF (Bad file descriptor) [pid 5377] close(24) = -1 EBADF (Bad file descriptor) [pid 5377] close(25) = -1 EBADF (Bad file descriptor) [pid 5377] close(26) = -1 EBADF (Bad file descriptor) [pid 5377] close(27) = -1 EBADF (Bad file descriptor) [pid 5377] close(28) = -1 EBADF (Bad file descriptor) [pid 5377] close(29) = -1 EBADF (Bad file descriptor) [pid 5377] exit_group(0) = ? [pid 5377] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=276, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5378 attached , child_tidptr=0x555555eff5d0) = 277 [pid 5378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5378] setpgid(0, 0) = 0 [pid 5378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5378] write(3, "1000", 4) = 4 [pid 5378] close(3) = 0 [pid 5378] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5378] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5378] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5378] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5378] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5378] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5378] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5378] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5378] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5378] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5378] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5378] write(7, "5", 1) = 1 [ 150.559379][ T5377] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 150.567363][ T5377] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 150.575352][ T5377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 150.583337][ T5377] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 150.591343][ T5377] [ 150.627619][ T5378] FAULT_INJECTION: forcing a failure. [ 150.627619][ T5378] name failslab, interval 1, probability 0, space 0, times 0 [ 150.640487][ T5378] CPU: 0 PID: 5378 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 150.650428][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 150.660535][ T5378] Call Trace: [ 150.663854][ T5378] [ 150.666787][ T5378] dump_stack_lvl+0xd1/0x138 [ 150.671394][ T5378] should_fail_ex.cold+0x5/0xa [ 150.676177][ T5378] ? io_issue_sqe+0x695/0x1250 [ 150.680976][ T5378] should_failslab+0x9/0x20 [ 150.685489][ T5378] __kmem_cache_alloc_node+0x5b/0x330 [ 150.690866][ T5378] ? ref_tracker_alloc+0x158/0x560 [ 150.696001][ T5378] kmalloc_trace+0x26/0x60 [ 150.700462][ T5378] ref_tracker_alloc+0x158/0x560 [ 150.705430][ T5378] ? ref_tracker_free+0x6b0/0x6b0 [ 150.710472][ T5378] ? dst_alloc+0x14a/0x1f0 [ 150.714955][ T5378] dst_init+0xe4/0x520 [ 150.719043][ T5378] dst_alloc+0x16f/0x1f0 [ 150.723337][ T5378] rt_dst_alloc+0x55/0x430 [ 150.727784][ T5378] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 150.733774][ T5378] ip_route_output_key_hash+0x18f/0x340 [ 150.739326][ T5378] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 150.745590][ T5378] dccp_v4_connect+0x7e1/0x1730 [ 150.750483][ T5378] __inet_stream_connect+0x69e/0xed0 [ 150.755835][ T5378] ? inet_listen+0x640/0x640 [ 150.760484][ T5378] ? mark_held_locks+0x9f/0xe0 [ 150.765355][ T5378] ? __local_bh_enable_ip+0xa4/0x130 [ 150.770656][ T5378] inet_stream_connect+0x57/0xa0 [ 150.775608][ T5378] ? __inet_stream_connect+0xed0/0xed0 [ 150.781076][ T5378] __sys_connect_file+0x153/0x1a0 [ 150.786208][ T5378] io_connect+0x3cc/0x720 [ 150.790547][ T5378] ? io_connect_prep+0x250/0x250 [ 150.795494][ T5378] ? receive_fd+0x110/0x110 [ 150.800016][ T5378] ? rcu_read_lock_sched_held+0x3e/0x70 [ 150.805591][ T5378] ? io_connect_prep+0x250/0x250 [ 150.810548][ T5378] io_issue_sqe+0x695/0x1250 [ 150.815148][ T5378] io_submit_sqes+0x96c/0x1e90 [ 150.819930][ T5378] __do_sys_io_uring_enter+0x103d/0x24e0 [ 150.825579][ T5378] ? io_submit_sqes+0x1e90/0x1e90 [ 150.830612][ T5378] ? ptrace_notify+0xfe/0x140 [ 150.835290][ T5378] ? lock_downgrade+0x6e0/0x6e0 [ 150.840168][ T5378] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.845398][ T5378] ? lockdep_hardirqs_on+0x7d/0x100 [ 150.850614][ T5378] ? _raw_spin_unlock_irq+0x2e/0x50 [ 150.855857][ T5378] ? ptrace_notify+0xfe/0x140 [ 150.860564][ T5378] do_syscall_64+0x39/0xb0 [ 150.864991][ T5378] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 150.870892][ T5378] RIP: 0033:0x7f607b0de549 [ 150.875313][ T5378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 150.894952][ T5378] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 150.903375][ T5378] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 150.911348][ T5378] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 150.919329][ T5378] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5378] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5378] close(3) = 0 [pid 5378] close(4) = 0 [pid 5378] close(5) = 0 [pid 5378] close(6) = 0 [pid 5378] close(7) = 0 [pid 5378] close(8) = -1 EBADF (Bad file descriptor) [pid 5378] close(9) = -1 EBADF (Bad file descriptor) [pid 5378] close(10) = -1 EBADF (Bad file descriptor) [pid 5378] close(11) = -1 EBADF (Bad file descriptor) [pid 5378] close(12) = -1 EBADF (Bad file descriptor) [pid 5378] close(13) = -1 EBADF (Bad file descriptor) [pid 5378] close(14) = -1 EBADF (Bad file descriptor) [pid 5378] close(15) = -1 EBADF (Bad file descriptor) [pid 5378] close(16) = -1 EBADF (Bad file descriptor) [pid 5378] close(17) = -1 EBADF (Bad file descriptor) [pid 5378] close(18) = -1 EBADF (Bad file descriptor) [pid 5378] close(19) = -1 EBADF (Bad file descriptor) [pid 5378] close(20) = -1 EBADF (Bad file descriptor) [pid 5378] close(21) = -1 EBADF (Bad file descriptor) [pid 5378] close(22) = -1 EBADF (Bad file descriptor) [pid 5378] close(23) = -1 EBADF (Bad file descriptor) [pid 5378] close(24) = -1 EBADF (Bad file descriptor) [pid 5378] close(25) = -1 EBADF (Bad file descriptor) [pid 5378] close(26) = -1 EBADF (Bad file descriptor) [pid 5378] close(27) = -1 EBADF (Bad file descriptor) [pid 5378] close(28) = -1 EBADF (Bad file descriptor) [pid 5378] close(29) = -1 EBADF (Bad file descriptor) [pid 5378] exit_group(0) = ? [pid 5378] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=277, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5379 attached , child_tidptr=0x555555eff5d0) = 278 [pid 5379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5379] setpgid(0, 0) = 0 [pid 5379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5379] write(3, "1000", 4) = 4 [pid 5379] close(3) = 0 [pid 5379] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5379] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5379] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5379] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5379] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5379] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5379] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5379] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5379] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5379] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5379] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5379] write(7, "5", 1) = 1 [ 150.927317][ T5378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 150.935313][ T5378] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 150.943301][ T5378] [ 150.981628][ T5379] FAULT_INJECTION: forcing a failure. [ 150.981628][ T5379] name failslab, interval 1, probability 0, space 0, times 0 [ 150.995181][ T5379] CPU: 0 PID: 5379 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 151.005125][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 151.015185][ T5379] Call Trace: [ 151.018462][ T5379] [ 151.021392][ T5379] dump_stack_lvl+0xd1/0x138 [ 151.026006][ T5379] should_fail_ex.cold+0x5/0xa [ 151.030793][ T5379] ? io_issue_sqe+0x695/0x1250 [ 151.035564][ T5379] should_failslab+0x9/0x20 [ 151.040072][ T5379] __kmem_cache_alloc_node+0x5b/0x330 [ 151.045450][ T5379] ? ref_tracker_alloc+0x158/0x560 [ 151.050598][ T5379] kmalloc_trace+0x26/0x60 [ 151.055056][ T5379] ref_tracker_alloc+0x158/0x560 [ 151.060026][ T5379] ? __lock_acquire+0xbc3/0x56d0 [ 151.064986][ T5379] ? ref_tracker_free+0x6b0/0x6b0 [ 151.070066][ T5379] dst_init+0xe4/0x520 [ 151.074165][ T5379] dst_alloc+0x16f/0x1f0 [ 151.078436][ T5379] rt_dst_alloc+0x55/0x430 [ 151.082879][ T5379] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 151.088902][ T5379] ip_route_output_key_hash+0x18f/0x340 [ 151.094824][ T5379] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 151.101116][ T5379] dccp_v4_connect+0x7e1/0x1730 [ 151.106020][ T5379] __inet_stream_connect+0x69e/0xed0 [ 151.111352][ T5379] ? inet_listen+0x640/0x640 [ 151.115986][ T5379] ? mark_held_locks+0x9f/0xe0 [ 151.120778][ T5379] ? __local_bh_enable_ip+0xa4/0x130 [ 151.126102][ T5379] inet_stream_connect+0x57/0xa0 [ 151.131079][ T5379] ? __inet_stream_connect+0xed0/0xed0 [ 151.136597][ T5379] __sys_connect_file+0x153/0x1a0 [ 151.141760][ T5379] io_connect+0x3cc/0x720 [ 151.146129][ T5379] ? io_connect_prep+0x250/0x250 [ 151.151113][ T5379] ? receive_fd+0x110/0x110 [ 151.155657][ T5379] ? rcu_read_lock_sched_held+0x3e/0x70 [ 151.161226][ T5379] ? io_connect_prep+0x250/0x250 [ 151.166200][ T5379] io_issue_sqe+0x695/0x1250 [ 151.170828][ T5379] io_submit_sqes+0x96c/0x1e90 [ 151.175640][ T5379] __do_sys_io_uring_enter+0x103d/0x24e0 [ 151.181311][ T5379] ? io_submit_sqes+0x1e90/0x1e90 [ 151.186415][ T5379] ? ptrace_notify+0xfe/0x140 [ 151.191129][ T5379] ? lock_downgrade+0x6e0/0x6e0 [ 151.196013][ T5379] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.201239][ T5379] ? lockdep_hardirqs_on+0x7d/0x100 [ 151.206463][ T5379] ? _raw_spin_unlock_irq+0x2e/0x50 [ 151.211688][ T5379] ? ptrace_notify+0xfe/0x140 [ 151.216391][ T5379] do_syscall_64+0x39/0xb0 [ 151.220838][ T5379] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.226755][ T5379] RIP: 0033:0x7f607b0de549 [ 151.231186][ T5379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 151.250814][ T5379] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 151.259247][ T5379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 151.267243][ T5379] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5379] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5379] close(3) = 0 [pid 5379] close(4) = 0 [pid 5379] close(5) = 0 [pid 5379] close(6) = 0 [pid 5379] close(7) = 0 [pid 5379] close(8) = -1 EBADF (Bad file descriptor) [pid 5379] close(9) = -1 EBADF (Bad file descriptor) [pid 5379] close(10) = -1 EBADF (Bad file descriptor) [pid 5379] close(11) = -1 EBADF (Bad file descriptor) [pid 5379] close(12) = -1 EBADF (Bad file descriptor) [pid 5379] close(13) = -1 EBADF (Bad file descriptor) [pid 5379] close(14) = -1 EBADF (Bad file descriptor) [pid 5379] close(15) = -1 EBADF (Bad file descriptor) [pid 5379] close(16) = -1 EBADF (Bad file descriptor) [pid 5379] close(17) = -1 EBADF (Bad file descriptor) [pid 5379] close(18) = -1 EBADF (Bad file descriptor) [pid 5379] close(19) = -1 EBADF (Bad file descriptor) [pid 5379] close(20) = -1 EBADF (Bad file descriptor) [pid 5379] close(21) = -1 EBADF (Bad file descriptor) [pid 5379] close(22) = -1 EBADF (Bad file descriptor) [pid 5379] close(23) = -1 EBADF (Bad file descriptor) [pid 5379] close(24) = -1 EBADF (Bad file descriptor) [pid 5379] close(25) = -1 EBADF (Bad file descriptor) [pid 5379] close(26) = -1 EBADF (Bad file descriptor) [pid 5379] close(27) = -1 EBADF (Bad file descriptor) [pid 5379] close(28) = -1 EBADF (Bad file descriptor) [pid 5379] close(29) = -1 EBADF (Bad file descriptor) [pid 5379] exit_group(0) = ? [pid 5379] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=278, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5380 attached , child_tidptr=0x555555eff5d0) = 279 [pid 5380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5380] setpgid(0, 0) = 0 [pid 5380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5380] write(3, "1000", 4) = 4 [pid 5380] close(3) = 0 [pid 5380] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5380] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5380] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5380] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5380] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5380] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 151.275323][ T5379] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 151.283309][ T5379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 151.291300][ T5379] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 151.299320][ T5379] [pid 5380] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5380] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5380] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5380] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5380] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5380] write(7, "5", 1) = 1 [ 151.348599][ T5380] FAULT_INJECTION: forcing a failure. [ 151.348599][ T5380] name failslab, interval 1, probability 0, space 0, times 0 [ 151.362180][ T5380] CPU: 0 PID: 5380 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 151.372123][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 151.382194][ T5380] Call Trace: [ 151.385473][ T5380] [ 151.388412][ T5380] dump_stack_lvl+0xd1/0x138 [ 151.393017][ T5380] should_fail_ex.cold+0x5/0xa [ 151.397796][ T5380] ? io_issue_sqe+0x695/0x1250 [ 151.402597][ T5380] should_failslab+0x9/0x20 [ 151.407155][ T5380] __kmem_cache_alloc_node+0x5b/0x330 [ 151.412562][ T5380] ? ref_tracker_alloc+0x158/0x560 [ 151.417703][ T5380] kmalloc_trace+0x26/0x60 [ 151.422142][ T5380] ref_tracker_alloc+0x158/0x560 [ 151.427116][ T5380] ? __lock_acquire+0xbc3/0x56d0 [ 151.432074][ T5380] ? ref_tracker_free+0x6b0/0x6b0 [ 151.437159][ T5380] dst_init+0xe4/0x520 [ 151.441258][ T5380] dst_alloc+0x16f/0x1f0 [ 151.445528][ T5380] rt_dst_alloc+0x55/0x430 [ 151.449969][ T5380] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 151.455988][ T5380] ip_route_output_key_hash+0x18f/0x340 [ 151.461572][ T5380] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 151.467875][ T5380] dccp_v4_connect+0x7e1/0x1730 [ 151.472779][ T5380] __inet_stream_connect+0x69e/0xed0 [ 151.478107][ T5380] ? inet_listen+0x640/0x640 [ 151.482732][ T5380] ? mark_held_locks+0x9f/0xe0 [ 151.487522][ T5380] ? __local_bh_enable_ip+0xa4/0x130 [ 151.492838][ T5380] inet_stream_connect+0x57/0xa0 [ 151.497812][ T5380] ? __inet_stream_connect+0xed0/0xed0 [ 151.503302][ T5380] __sys_connect_file+0x153/0x1a0 [ 151.508351][ T5380] io_connect+0x3cc/0x720 [ 151.512721][ T5380] ? io_connect_prep+0x250/0x250 [ 151.517696][ T5380] ? receive_fd+0x110/0x110 [ 151.522241][ T5380] ? rcu_read_lock_sched_held+0x3e/0x70 [ 151.527812][ T5380] ? io_connect_prep+0x250/0x250 [ 151.532785][ T5380] io_issue_sqe+0x695/0x1250 [ 151.537406][ T5380] io_submit_sqes+0x96c/0x1e90 [ 151.542218][ T5380] __do_sys_io_uring_enter+0x103d/0x24e0 [ 151.547889][ T5380] ? io_submit_sqes+0x1e90/0x1e90 [ 151.552946][ T5380] ? ptrace_notify+0xfe/0x140 [ 151.557644][ T5380] ? lock_downgrade+0x6e0/0x6e0 [ 151.562527][ T5380] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.567756][ T5380] ? lockdep_hardirqs_on+0x7d/0x100 [ 151.572976][ T5380] ? _raw_spin_unlock_irq+0x2e/0x50 [ 151.578196][ T5380] ? ptrace_notify+0xfe/0x140 [ 151.582896][ T5380] do_syscall_64+0x39/0xb0 [ 151.587361][ T5380] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.593903][ T5380] RIP: 0033:0x7f607b0de549 [ 151.598346][ T5380] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 151.617979][ T5380] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 151.626414][ T5380] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 151.634401][ T5380] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5380] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5380] close(3) = 0 [pid 5380] close(4) = 0 [pid 5380] close(5) = 0 [pid 5380] close(6) = 0 [pid 5380] close(7) = 0 [pid 5380] close(8) = -1 EBADF (Bad file descriptor) [pid 5380] close(9) = -1 EBADF (Bad file descriptor) [pid 5380] close(10) = -1 EBADF (Bad file descriptor) [pid 5380] close(11) = -1 EBADF (Bad file descriptor) [pid 5380] close(12) = -1 EBADF (Bad file descriptor) [pid 5380] close(13) = -1 EBADF (Bad file descriptor) [pid 5380] close(14) = -1 EBADF (Bad file descriptor) [pid 5380] close(15) = -1 EBADF (Bad file descriptor) [pid 5380] close(16) = -1 EBADF (Bad file descriptor) [pid 5380] close(17) = -1 EBADF (Bad file descriptor) [pid 5380] close(18) = -1 EBADF (Bad file descriptor) [pid 5380] close(19) = -1 EBADF (Bad file descriptor) [pid 5380] close(20) = -1 EBADF (Bad file descriptor) [pid 5380] close(21) = -1 EBADF (Bad file descriptor) [pid 5380] close(22) = -1 EBADF (Bad file descriptor) [pid 5380] close(23) = -1 EBADF (Bad file descriptor) [pid 5380] close(24) = -1 EBADF (Bad file descriptor) [pid 5380] close(25) = -1 EBADF (Bad file descriptor) [pid 5380] close(26) = -1 EBADF (Bad file descriptor) [pid 5380] close(27) = -1 EBADF (Bad file descriptor) [pid 5380] close(28) = -1 EBADF (Bad file descriptor) [pid 5380] close(29) = -1 EBADF (Bad file descriptor) [pid 5380] exit_group(0) = ? [pid 5380] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=279, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 280 ./strace-static-x86_64: Process 5381 attached [pid 5381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5381] setpgid(0, 0) = 0 [pid 5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5381] write(3, "1000", 4) = 4 [pid 5381] close(3) = 0 [pid 5381] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5381] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5381] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5381] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5381] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5381] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5381] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5381] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5381] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5381] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5381] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5381] write(7, "5", 1) = 1 [ 151.642476][ T5380] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 151.650461][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 151.658449][ T5380] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 151.666457][ T5380] [ 151.706419][ T5381] FAULT_INJECTION: forcing a failure. [ 151.706419][ T5381] name failslab, interval 1, probability 0, space 0, times 0 [ 151.719104][ T5381] CPU: 0 PID: 5381 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 151.729008][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 151.739071][ T5381] Call Trace: [ 151.742349][ T5381] [ 151.745280][ T5381] dump_stack_lvl+0xd1/0x138 [ 151.749879][ T5381] should_fail_ex.cold+0x5/0xa [ 151.754656][ T5381] ? __inet_hash_connect+0x95e/0x1ba0 [ 151.760984][ T5381] should_failslab+0x9/0x20 [ 151.765491][ T5381] kmem_cache_alloc+0x5a/0x320 [ 151.770259][ T5381] __inet_hash_connect+0x95e/0x1ba0 [ 151.775482][ T5381] ? __inet_lookup_listener+0xbf0/0xbf0 [ 151.781140][ T5381] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 151.787511][ T5381] dccp_v4_connect+0xb82/0x1730 [ 151.792406][ T5381] __inet_stream_connect+0x69e/0xed0 [ 151.797712][ T5381] ? inet_listen+0x640/0x640 [ 151.802308][ T5381] ? mark_held_locks+0x9f/0xe0 [ 151.807085][ T5381] ? __local_bh_enable_ip+0xa4/0x130 [ 151.812388][ T5381] inet_stream_connect+0x57/0xa0 [ 151.817362][ T5381] ? __inet_stream_connect+0xed0/0xed0 [ 151.822834][ T5381] __sys_connect_file+0x153/0x1a0 [ 151.827976][ T5381] io_connect+0x3cc/0x720 [ 151.832340][ T5381] ? io_connect_prep+0x250/0x250 [ 151.837304][ T5381] ? receive_fd+0x110/0x110 [ 151.841841][ T5381] ? rcu_read_lock_sched_held+0x3e/0x70 [ 151.847405][ T5381] ? io_connect_prep+0x250/0x250 [ 151.852458][ T5381] io_issue_sqe+0x695/0x1250 [ 151.857077][ T5381] io_submit_sqes+0x96c/0x1e90 [ 151.861888][ T5381] __do_sys_io_uring_enter+0x103d/0x24e0 [ 151.867555][ T5381] ? io_submit_sqes+0x1e90/0x1e90 [ 151.872627][ T5381] ? ptrace_notify+0xfe/0x140 [ 151.877325][ T5381] ? lock_downgrade+0x6e0/0x6e0 [ 151.882206][ T5381] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.887431][ T5381] ? lockdep_hardirqs_on+0x7d/0x100 [ 151.892647][ T5381] ? _raw_spin_unlock_irq+0x2e/0x50 [ 151.897869][ T5381] ? ptrace_notify+0xfe/0x140 [ 151.902574][ T5381] do_syscall_64+0x39/0xb0 [ 151.907205][ T5381] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 151.913121][ T5381] RIP: 0033:0x7f607b0de549 [ 151.918073][ T5381] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 151.937702][ T5381] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 151.946137][ T5381] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5381] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5381] close(3) = 0 [pid 5381] close(4) = 0 [pid 5381] close(5) = 0 [pid 5381] close(6) = 0 [pid 5381] close(7) = 0 [pid 5381] close(8) = -1 EBADF (Bad file descriptor) [pid 5381] close(9) = -1 EBADF (Bad file descriptor) [pid 5381] close(10) = -1 EBADF (Bad file descriptor) [pid 5381] close(11) = -1 EBADF (Bad file descriptor) [pid 5381] close(12) = -1 EBADF (Bad file descriptor) [pid 5381] close(13) = -1 EBADF (Bad file descriptor) [pid 5381] close(14) = -1 EBADF (Bad file descriptor) [pid 5381] close(15) = -1 EBADF (Bad file descriptor) [pid 5381] close(16) = -1 EBADF (Bad file descriptor) [pid 5381] close(17) = -1 EBADF (Bad file descriptor) [pid 5381] close(18) = -1 EBADF (Bad file descriptor) [pid 5381] close(19) = -1 EBADF (Bad file descriptor) [pid 5381] close(20) = -1 EBADF (Bad file descriptor) [pid 5381] close(21) = -1 EBADF (Bad file descriptor) [pid 5381] close(22) = -1 EBADF (Bad file descriptor) [pid 5381] close(23) = -1 EBADF (Bad file descriptor) [pid 5381] close(24) = -1 EBADF (Bad file descriptor) [pid 5381] close(25) = -1 EBADF (Bad file descriptor) [pid 5381] close(26) = -1 EBADF (Bad file descriptor) [pid 5381] close(27) = -1 EBADF (Bad file descriptor) [pid 5381] close(28) = -1 EBADF (Bad file descriptor) [pid 5381] close(29) = -1 EBADF (Bad file descriptor) [pid 5381] exit_group(0) = ? [pid 5381] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=280, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 281 ./strace-static-x86_64: Process 5382 attached [pid 5382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5382] setpgid(0, 0) = 0 [pid 5382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5382] write(3, "1000", 4) = 4 [pid 5382] close(3) = 0 [pid 5382] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5382] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5382] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5382] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5382] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5382] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5382] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5382] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5382] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5382] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5382] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5382] write(7, "5", 1) = 1 [ 151.954126][ T5381] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 151.962114][ T5381] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 151.970102][ T5381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 151.978092][ T5381] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 151.986106][ T5381] [ 152.033135][ T5382] FAULT_INJECTION: forcing a failure. [ 152.033135][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 152.045973][ T5382] CPU: 0 PID: 5382 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 152.055912][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 152.065980][ T5382] Call Trace: [ 152.069269][ T5382] [ 152.072196][ T5382] dump_stack_lvl+0xd1/0x138 [ 152.076815][ T5382] should_fail_ex.cold+0x5/0xa [ 152.081590][ T5382] ? io_issue_sqe+0x695/0x1250 [ 152.086399][ T5382] should_failslab+0x9/0x20 [ 152.090910][ T5382] __kmem_cache_alloc_node+0x5b/0x330 [ 152.096297][ T5382] ? ref_tracker_alloc+0x158/0x560 [ 152.101437][ T5382] kmalloc_trace+0x26/0x60 [ 152.105906][ T5382] ref_tracker_alloc+0x158/0x560 [ 152.110876][ T5382] ? __lock_acquire+0xbc3/0x56d0 [ 152.115827][ T5382] ? ref_tracker_free+0x6b0/0x6b0 [ 152.120901][ T5382] dst_init+0xe4/0x520 [ 152.124974][ T5382] dst_alloc+0x16f/0x1f0 [ 152.129223][ T5382] rt_dst_alloc+0x55/0x430 [ 152.133733][ T5382] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 152.139748][ T5382] ip_route_output_key_hash+0x18f/0x340 [ 152.145345][ T5382] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 152.151664][ T5382] dccp_v4_connect+0x7e1/0x1730 [ 152.156576][ T5382] __inet_stream_connect+0x69e/0xed0 [ 152.161892][ T5382] ? inet_listen+0x640/0x640 [ 152.166524][ T5382] ? mark_held_locks+0x9f/0xe0 [ 152.171287][ T5382] ? __local_bh_enable_ip+0xa4/0x130 [ 152.176579][ T5382] inet_stream_connect+0x57/0xa0 [ 152.181526][ T5382] ? __inet_stream_connect+0xed0/0xed0 [ 152.187004][ T5382] __sys_connect_file+0x153/0x1a0 [ 152.192037][ T5382] io_connect+0x3cc/0x720 [ 152.196374][ T5382] ? io_connect_prep+0x250/0x250 [ 152.201330][ T5382] ? receive_fd+0x110/0x110 [ 152.205871][ T5382] ? rcu_read_lock_sched_held+0x3e/0x70 [ 152.211446][ T5382] ? io_connect_prep+0x250/0x250 [ 152.216408][ T5382] io_issue_sqe+0x695/0x1250 [ 152.221011][ T5382] io_submit_sqes+0x96c/0x1e90 [ 152.225795][ T5382] __do_sys_io_uring_enter+0x103d/0x24e0 [ 152.231441][ T5382] ? io_submit_sqes+0x1e90/0x1e90 [ 152.236476][ T5382] ? ptrace_notify+0xfe/0x140 [ 152.241157][ T5382] ? lock_downgrade+0x6e0/0x6e0 [ 152.246033][ T5382] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.251279][ T5382] ? lockdep_hardirqs_on+0x7d/0x100 [ 152.256511][ T5382] ? _raw_spin_unlock_irq+0x2e/0x50 [ 152.261741][ T5382] ? ptrace_notify+0xfe/0x140 [ 152.266474][ T5382] do_syscall_64+0x39/0xb0 [ 152.270924][ T5382] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.276845][ T5382] RIP: 0033:0x7f607b0de549 [ 152.281285][ T5382] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 152.300909][ T5382] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 152.309352][ T5382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 152.317340][ T5382] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 152.325342][ T5382] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5382] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5382] close(3) = 0 [pid 5382] close(4) = 0 [pid 5382] close(5) = 0 [pid 5382] close(6) = 0 [pid 5382] close(7) = 0 [pid 5382] close(8) = -1 EBADF (Bad file descriptor) [pid 5382] close(9) = -1 EBADF (Bad file descriptor) [pid 5382] close(10) = -1 EBADF (Bad file descriptor) [pid 5382] close(11) = -1 EBADF (Bad file descriptor) [pid 5382] close(12) = -1 EBADF (Bad file descriptor) [pid 5382] close(13) = -1 EBADF (Bad file descriptor) [pid 5382] close(14) = -1 EBADF (Bad file descriptor) [pid 5382] close(15) = -1 EBADF (Bad file descriptor) [pid 5382] close(16) = -1 EBADF (Bad file descriptor) [pid 5382] close(17) = -1 EBADF (Bad file descriptor) [pid 5382] close(18) = -1 EBADF (Bad file descriptor) [pid 5382] close(19) = -1 EBADF (Bad file descriptor) [pid 5382] close(20) = -1 EBADF (Bad file descriptor) [pid 5382] close(21) = -1 EBADF (Bad file descriptor) [pid 5382] close(22) = -1 EBADF (Bad file descriptor) [pid 5382] close(23) = -1 EBADF (Bad file descriptor) [pid 5382] close(24) = -1 EBADF (Bad file descriptor) [pid 5382] close(25) = -1 EBADF (Bad file descriptor) [pid 5382] close(26) = -1 EBADF (Bad file descriptor) [pid 5382] close(27) = -1 EBADF (Bad file descriptor) [pid 5382] close(28) = -1 EBADF (Bad file descriptor) [pid 5382] close(29) = -1 EBADF (Bad file descriptor) [pid 5382] exit_group(0) = ? [ 152.333318][ T5382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 152.341290][ T5382] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 152.349280][ T5382] [pid 5382] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=281, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 282 ./strace-static-x86_64: Process 5383 attached [pid 5383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5383] setpgid(0, 0) = 0 [pid 5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5383] write(3, "1000", 4) = 4 [pid 5383] close(3) = 0 [pid 5383] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5383] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5383] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5383] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5383] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5383] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5383] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5383] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5383] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5383] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5383] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5383] write(7, "5", 1) = 1 [ 152.415195][ T5383] FAULT_INJECTION: forcing a failure. [ 152.415195][ T5383] name failslab, interval 1, probability 0, space 0, times 0 [ 152.428011][ T5383] CPU: 1 PID: 5383 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 152.437958][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 152.448018][ T5383] Call Trace: [ 152.451296][ T5383] [ 152.454227][ T5383] dump_stack_lvl+0xd1/0x138 [ 152.458827][ T5383] should_fail_ex.cold+0x5/0xa [ 152.463596][ T5383] ? io_issue_sqe+0x695/0x1250 [ 152.468383][ T5383] should_failslab+0x9/0x20 [ 152.472924][ T5383] __kmem_cache_alloc_node+0x5b/0x330 [ 152.478314][ T5383] ? ref_tracker_alloc+0x158/0x560 [ 152.483483][ T5383] kmalloc_trace+0x26/0x60 [ 152.487908][ T5383] ref_tracker_alloc+0x158/0x560 [ 152.492856][ T5383] ? __lock_acquire+0xbc3/0x56d0 [ 152.497800][ T5383] ? ref_tracker_free+0x6b0/0x6b0 [ 152.502848][ T5383] dst_init+0xe4/0x520 [ 152.506973][ T5383] dst_alloc+0x16f/0x1f0 [ 152.511267][ T5383] rt_dst_alloc+0x55/0x430 [ 152.515719][ T5383] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 152.521719][ T5383] ip_route_output_key_hash+0x18f/0x340 [ 152.527275][ T5383] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 152.533546][ T5383] dccp_v4_connect+0x7e1/0x1730 [ 152.538426][ T5383] __inet_stream_connect+0x69e/0xed0 [ 152.543742][ T5383] ? inet_listen+0x640/0x640 [ 152.548402][ T5383] ? mark_held_locks+0x9f/0xe0 [ 152.553206][ T5383] ? __local_bh_enable_ip+0xa4/0x130 [ 152.558517][ T5383] inet_stream_connect+0x57/0xa0 [ 152.563507][ T5383] ? __inet_stream_connect+0xed0/0xed0 [ 152.568990][ T5383] __sys_connect_file+0x153/0x1a0 [ 152.574046][ T5383] io_connect+0x3cc/0x720 [ 152.578457][ T5383] ? io_connect_prep+0x250/0x250 [ 152.583537][ T5383] ? receive_fd+0x110/0x110 [ 152.588059][ T5383] ? rcu_read_lock_sched_held+0x3e/0x70 [ 152.593623][ T5383] ? io_connect_prep+0x250/0x250 [ 152.598589][ T5383] io_issue_sqe+0x695/0x1250 [ 152.603218][ T5383] io_submit_sqes+0x96c/0x1e90 [ 152.608018][ T5383] __do_sys_io_uring_enter+0x103d/0x24e0 [ 152.613853][ T5383] ? io_submit_sqes+0x1e90/0x1e90 [ 152.618918][ T5383] ? ptrace_notify+0xfe/0x140 [ 152.623626][ T5383] ? lock_downgrade+0x6e0/0x6e0 [ 152.628486][ T5383] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.633694][ T5383] ? lockdep_hardirqs_on+0x7d/0x100 [ 152.638909][ T5383] ? _raw_spin_unlock_irq+0x2e/0x50 [ 152.644141][ T5383] ? ptrace_notify+0xfe/0x140 [ 152.648936][ T5383] do_syscall_64+0x39/0xb0 [ 152.653424][ T5383] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.659323][ T5383] RIP: 0033:0x7f607b0de549 [ 152.663738][ T5383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 152.685361][ T5383] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 152.693814][ T5383] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 152.701808][ T5383] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5383] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5383] close(3) = 0 [pid 5383] close(4) = 0 [pid 5383] close(5) = 0 [pid 5383] close(6) = 0 [pid 5383] close(7) = 0 [pid 5383] close(8) = -1 EBADF (Bad file descriptor) [pid 5383] close(9) = -1 EBADF (Bad file descriptor) [pid 5383] close(10) = -1 EBADF (Bad file descriptor) [pid 5383] close(11) = -1 EBADF (Bad file descriptor) [pid 5383] close(12) = -1 EBADF (Bad file descriptor) [pid 5383] close(13) = -1 EBADF (Bad file descriptor) [pid 5383] close(14) = -1 EBADF (Bad file descriptor) [pid 5383] close(15) = -1 EBADF (Bad file descriptor) [pid 5383] close(16) = -1 EBADF (Bad file descriptor) [pid 5383] close(17) = -1 EBADF (Bad file descriptor) [pid 5383] close(18) = -1 EBADF (Bad file descriptor) [pid 5383] close(19) = -1 EBADF (Bad file descriptor) [pid 5383] close(20) = -1 EBADF (Bad file descriptor) [pid 5383] close(21) = -1 EBADF (Bad file descriptor) [pid 5383] close(22) = -1 EBADF (Bad file descriptor) [pid 5383] close(23) = -1 EBADF (Bad file descriptor) [pid 5383] close(24) = -1 EBADF (Bad file descriptor) [pid 5383] close(25) = -1 EBADF (Bad file descriptor) [pid 5383] close(26) = -1 EBADF (Bad file descriptor) [pid 5383] close(27) = -1 EBADF (Bad file descriptor) [pid 5383] close(28) = -1 EBADF (Bad file descriptor) [pid 5383] close(29) = -1 EBADF (Bad file descriptor) [pid 5383] exit_group(0) = ? [pid 5383] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=282, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 283 ./strace-static-x86_64: Process 5384 attached [pid 5384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5384] setpgid(0, 0) = 0 [pid 5384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5384] write(3, "1000", 4) = 4 [pid 5384] close(3) = 0 [pid 5384] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5384] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5384] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5384] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5384] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5384] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5384] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5384] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5384] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5384] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5384] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5384] write(7, "5", 1) = 1 [ 152.709790][ T5383] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 152.717783][ T5383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 152.725752][ T5383] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 152.733760][ T5383] [ 152.775922][ T5384] FAULT_INJECTION: forcing a failure. [ 152.775922][ T5384] name failslab, interval 1, probability 0, space 0, times 0 [ 152.788619][ T5384] CPU: 0 PID: 5384 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 152.798512][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 152.808576][ T5384] Call Trace: [ 152.811851][ T5384] [ 152.814784][ T5384] dump_stack_lvl+0xd1/0x138 [ 152.819404][ T5384] should_fail_ex.cold+0x5/0xa [ 152.824195][ T5384] ? __inet_hash_connect+0x95e/0x1ba0 [ 152.829580][ T5384] should_failslab+0x9/0x20 [ 152.834140][ T5384] kmem_cache_alloc+0x5a/0x320 [ 152.838907][ T5384] __inet_hash_connect+0x95e/0x1ba0 [ 152.844400][ T5384] ? __inet_lookup_listener+0xbf0/0xbf0 [ 152.849981][ T5384] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 152.856359][ T5384] dccp_v4_connect+0xb82/0x1730 [ 152.861253][ T5384] __inet_stream_connect+0x69e/0xed0 [ 152.866582][ T5384] ? inet_listen+0x640/0x640 [ 152.871197][ T5384] ? mark_held_locks+0x9f/0xe0 [ 152.875986][ T5384] ? __local_bh_enable_ip+0xa4/0x130 [ 152.881383][ T5384] inet_stream_connect+0x57/0xa0 [ 152.886340][ T5384] ? __inet_stream_connect+0xed0/0xed0 [ 152.891810][ T5384] __sys_connect_file+0x153/0x1a0 [ 152.896870][ T5384] io_connect+0x3cc/0x720 [ 152.901254][ T5384] ? io_connect_prep+0x250/0x250 [ 152.906217][ T5384] ? receive_fd+0x110/0x110 [ 152.910740][ T5384] ? rcu_read_lock_sched_held+0x3e/0x70 [ 152.916292][ T5384] ? io_connect_prep+0x250/0x250 [ 152.921238][ T5384] io_issue_sqe+0x695/0x1250 [ 152.925834][ T5384] io_submit_sqes+0x96c/0x1e90 [ 152.932872][ T5384] __do_sys_io_uring_enter+0x103d/0x24e0 [ 152.938514][ T5384] ? io_submit_sqes+0x1e90/0x1e90 [ 152.943564][ T5384] ? ptrace_notify+0xfe/0x140 [ 152.948264][ T5384] ? lock_downgrade+0x6e0/0x6e0 [ 152.953121][ T5384] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.958333][ T5384] ? lockdep_hardirqs_on+0x7d/0x100 [ 152.963544][ T5384] ? _raw_spin_unlock_irq+0x2e/0x50 [ 152.968780][ T5384] ? ptrace_notify+0xfe/0x140 [ 152.973477][ T5384] do_syscall_64+0x39/0xb0 [ 152.977937][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.983832][ T5384] RIP: 0033:0x7f607b0de549 [ 152.988239][ T5384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.007856][ T5384] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 153.016284][ T5384] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5384] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5384] close(3) = 0 [pid 5384] close(4) = 0 [pid 5384] close(5) = 0 [pid 5384] close(6) = 0 [pid 5384] close(7) = 0 [pid 5384] close(8) = -1 EBADF (Bad file descriptor) [pid 5384] close(9) = -1 EBADF (Bad file descriptor) [pid 5384] close(10) = -1 EBADF (Bad file descriptor) [pid 5384] close(11) = -1 EBADF (Bad file descriptor) [pid 5384] close(12) = -1 EBADF (Bad file descriptor) [pid 5384] close(13) = -1 EBADF (Bad file descriptor) [pid 5384] close(14) = -1 EBADF (Bad file descriptor) [pid 5384] close(15) = -1 EBADF (Bad file descriptor) [pid 5384] close(16) = -1 EBADF (Bad file descriptor) [pid 5384] close(17) = -1 EBADF (Bad file descriptor) [pid 5384] close(18) = -1 EBADF (Bad file descriptor) [pid 5384] close(19) = -1 EBADF (Bad file descriptor) [pid 5384] close(20) = -1 EBADF (Bad file descriptor) [pid 5384] close(21) = -1 EBADF (Bad file descriptor) [pid 5384] close(22) = -1 EBADF (Bad file descriptor) [pid 5384] close(23) = -1 EBADF (Bad file descriptor) [pid 5384] close(24) = -1 EBADF (Bad file descriptor) [pid 5384] close(25) = -1 EBADF (Bad file descriptor) [pid 5384] close(26) = -1 EBADF (Bad file descriptor) [pid 5384] close(27) = -1 EBADF (Bad file descriptor) [pid 5384] close(28) = -1 EBADF (Bad file descriptor) [pid 5384] close(29) = -1 EBADF (Bad file descriptor) [pid 5384] exit_group(0) = ? [pid 5384] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=283, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 284 ./strace-static-x86_64: Process 5385 attached [pid 5385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5385] setpgid(0, 0) = 0 [pid 5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5385] write(3, "1000", 4) = 4 [pid 5385] close(3) = 0 [pid 5385] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5385] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5385] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5385] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5385] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5385] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5385] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5385] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5385] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5385] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5385] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5385] write(7, "5", 1) = 1 [ 153.024273][ T5384] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 153.032240][ T5384] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 153.040223][ T5384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 153.048220][ T5384] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 153.056233][ T5384] [ 153.094575][ T5385] FAULT_INJECTION: forcing a failure. [ 153.094575][ T5385] name failslab, interval 1, probability 0, space 0, times 0 [ 153.107946][ T5385] CPU: 0 PID: 5385 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 153.117884][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 153.127943][ T5385] Call Trace: [ 153.131223][ T5385] [ 153.134152][ T5385] dump_stack_lvl+0xd1/0x138 [ 153.138758][ T5385] should_fail_ex.cold+0x5/0xa [ 153.143538][ T5385] ? io_issue_sqe+0x695/0x1250 [ 153.148333][ T5385] should_failslab+0x9/0x20 [ 153.152836][ T5385] __kmem_cache_alloc_node+0x5b/0x330 [ 153.158217][ T5385] ? ref_tracker_alloc+0x158/0x560 [ 153.163389][ T5385] kmalloc_trace+0x26/0x60 [ 153.167856][ T5385] ref_tracker_alloc+0x158/0x560 [ 153.172884][ T5385] ? __lock_acquire+0xbc3/0x56d0 [ 153.177837][ T5385] ? ref_tracker_free+0x6b0/0x6b0 [ 153.182910][ T5385] dst_init+0xe4/0x520 [ 153.186999][ T5385] dst_alloc+0x16f/0x1f0 [ 153.191257][ T5385] rt_dst_alloc+0x55/0x430 [ 153.195691][ T5385] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 153.202231][ T5385] ip_route_output_key_hash+0x18f/0x340 [ 153.207826][ T5385] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 153.214141][ T5385] dccp_v4_connect+0x7e1/0x1730 [ 153.219044][ T5385] __inet_stream_connect+0x69e/0xed0 [ 153.224368][ T5385] ? inet_listen+0x640/0x640 [ 153.228992][ T5385] ? mark_held_locks+0x9f/0xe0 [ 153.233780][ T5385] ? __local_bh_enable_ip+0xa4/0x130 [ 153.239093][ T5385] inet_stream_connect+0x57/0xa0 [ 153.244063][ T5385] ? __inet_stream_connect+0xed0/0xed0 [ 153.249552][ T5385] __sys_connect_file+0x153/0x1a0 [ 153.254607][ T5385] io_connect+0x3cc/0x720 [ 153.258987][ T5385] ? io_connect_prep+0x250/0x250 [ 153.263961][ T5385] ? receive_fd+0x110/0x110 [ 153.268516][ T5385] ? rcu_read_lock_sched_held+0x3e/0x70 [ 153.274085][ T5385] ? io_connect_prep+0x250/0x250 [ 153.279059][ T5385] io_issue_sqe+0x695/0x1250 [ 153.283688][ T5385] io_submit_sqes+0x96c/0x1e90 [ 153.288502][ T5385] __do_sys_io_uring_enter+0x103d/0x24e0 [ 153.294173][ T5385] ? io_submit_sqes+0x1e90/0x1e90 [ 153.299227][ T5385] ? ptrace_notify+0xfe/0x140 [ 153.303932][ T5385] ? lock_downgrade+0x6e0/0x6e0 [ 153.308818][ T5385] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.314055][ T5385] ? lockdep_hardirqs_on+0x7d/0x100 [ 153.319284][ T5385] ? _raw_spin_unlock_irq+0x2e/0x50 [ 153.324504][ T5385] ? ptrace_notify+0xfe/0x140 [ 153.329471][ T5385] do_syscall_64+0x39/0xb0 [ 153.333924][ T5385] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 153.339842][ T5385] RIP: 0033:0x7f607b0de549 [ 153.344273][ T5385] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.363903][ T5385] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 153.372345][ T5385] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 153.380334][ T5385] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5385] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5385] close(3) = 0 [pid 5385] close(4) = 0 [pid 5385] close(5) = 0 [pid 5385] close(6) = 0 [pid 5385] close(7) = 0 [pid 5385] close(8) = -1 EBADF (Bad file descriptor) [pid 5385] close(9) = -1 EBADF (Bad file descriptor) [pid 5385] close(10) = -1 EBADF (Bad file descriptor) [pid 5385] close(11) = -1 EBADF (Bad file descriptor) [pid 5385] close(12) = -1 EBADF (Bad file descriptor) [pid 5385] close(13) = -1 EBADF (Bad file descriptor) [pid 5385] close(14) = -1 EBADF (Bad file descriptor) [pid 5385] close(15) = -1 EBADF (Bad file descriptor) [pid 5385] close(16) = -1 EBADF (Bad file descriptor) [pid 5385] close(17) = -1 EBADF (Bad file descriptor) [pid 5385] close(18) = -1 EBADF (Bad file descriptor) [pid 5385] close(19) = -1 EBADF (Bad file descriptor) [pid 5385] close(20) = -1 EBADF (Bad file descriptor) [pid 5385] close(21) = -1 EBADF (Bad file descriptor) [pid 5385] close(22) = -1 EBADF (Bad file descriptor) [pid 5385] close(23) = -1 EBADF (Bad file descriptor) [pid 5385] close(24) = -1 EBADF (Bad file descriptor) [pid 5385] close(25) = -1 EBADF (Bad file descriptor) [pid 5385] close(26) = -1 EBADF (Bad file descriptor) [pid 5385] close(27) = -1 EBADF (Bad file descriptor) [pid 5385] close(28) = -1 EBADF (Bad file descriptor) [pid 5385] close(29) = -1 EBADF (Bad file descriptor) [pid 5385] exit_group(0) = ? [pid 5385] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=284, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 285 ./strace-static-x86_64: Process 5386 attached [pid 5386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5386] setpgid(0, 0) = 0 [pid 5386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5386] write(3, "1000", 4) = 4 [pid 5386] close(3) = 0 [pid 5386] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5386] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5386] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5386] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5386] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5386] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 153.390837][ T5385] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 153.398837][ T5385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 153.406824][ T5385] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 153.414832][ T5385] [pid 5386] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5386] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5386] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5386] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5386] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5386] write(7, "5", 1) = 1 [ 153.463705][ T5386] FAULT_INJECTION: forcing a failure. [ 153.463705][ T5386] name failslab, interval 1, probability 0, space 0, times 0 [ 153.476734][ T5386] CPU: 1 PID: 5386 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 153.487106][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 153.497530][ T5386] Call Trace: [ 153.500823][ T5386] [ 153.503752][ T5386] dump_stack_lvl+0xd1/0x138 [ 153.508359][ T5386] should_fail_ex.cold+0x5/0xa [ 153.513125][ T5386] ? io_issue_sqe+0x695/0x1250 [ 153.517909][ T5386] should_failslab+0x9/0x20 [ 153.522425][ T5386] __kmem_cache_alloc_node+0x5b/0x330 [ 153.527803][ T5386] ? ref_tracker_alloc+0x158/0x560 [ 153.533099][ T5386] kmalloc_trace+0x26/0x60 [ 153.537524][ T5386] ref_tracker_alloc+0x158/0x560 [ 153.542488][ T5386] ? __lock_acquire+0xbc3/0x56d0 [ 153.547465][ T5386] ? ref_tracker_free+0x6b0/0x6b0 [ 153.552571][ T5386] dst_init+0xe4/0x520 [ 153.556701][ T5386] dst_alloc+0x16f/0x1f0 [ 153.560983][ T5386] rt_dst_alloc+0x55/0x430 [ 153.565443][ T5386] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 153.571497][ T5386] ip_route_output_key_hash+0x18f/0x340 [ 153.577108][ T5386] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 153.583413][ T5386] dccp_v4_connect+0x7e1/0x1730 [ 153.588326][ T5386] __inet_stream_connect+0x69e/0xed0 [ 153.593649][ T5386] ? inet_listen+0x640/0x640 [ 153.598273][ T5386] ? mark_held_locks+0x9f/0xe0 [ 153.603063][ T5386] ? __local_bh_enable_ip+0xa4/0x130 [ 153.608376][ T5386] inet_stream_connect+0x57/0xa0 [ 153.613348][ T5386] ? __inet_stream_connect+0xed0/0xed0 [ 153.618839][ T5386] __sys_connect_file+0x153/0x1a0 [ 153.623888][ T5386] io_connect+0x3cc/0x720 [ 153.628252][ T5386] ? io_connect_prep+0x250/0x250 [ 153.633227][ T5386] ? receive_fd+0x110/0x110 [ 153.637770][ T5386] ? rcu_read_lock_sched_held+0x3e/0x70 [ 153.643336][ T5386] ? io_connect_prep+0x250/0x250 [ 153.648309][ T5386] io_issue_sqe+0x695/0x1250 [ 153.652931][ T5386] io_submit_sqes+0x96c/0x1e90 [ 153.657744][ T5386] __do_sys_io_uring_enter+0x103d/0x24e0 [ 153.663412][ T5386] ? io_submit_sqes+0x1e90/0x1e90 [ 153.668476][ T5386] ? ptrace_notify+0xfe/0x140 [ 153.673174][ T5386] ? lock_downgrade+0x6e0/0x6e0 [ 153.678054][ T5386] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.683300][ T5386] ? lockdep_hardirqs_on+0x7d/0x100 [ 153.688537][ T5386] ? _raw_spin_unlock_irq+0x2e/0x50 [ 153.693769][ T5386] ? ptrace_notify+0xfe/0x140 [ 153.698480][ T5386] do_syscall_64+0x39/0xb0 [ 153.702931][ T5386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 153.708849][ T5386] RIP: 0033:0x7f607b0de549 [ 153.713299][ T5386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 153.732928][ T5386] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 153.741365][ T5386] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 153.749360][ T5386] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5386] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5386] close(3) = 0 [pid 5386] close(4) = 0 [pid 5386] close(5) = 0 [pid 5386] close(6) = 0 [pid 5386] close(7) = 0 [pid 5386] close(8) = -1 EBADF (Bad file descriptor) [pid 5386] close(9) = -1 EBADF (Bad file descriptor) [pid 5386] close(10) = -1 EBADF (Bad file descriptor) [pid 5386] close(11) = -1 EBADF (Bad file descriptor) [pid 5386] close(12) = -1 EBADF (Bad file descriptor) [pid 5386] close(13) = -1 EBADF (Bad file descriptor) [pid 5386] close(14) = -1 EBADF (Bad file descriptor) [pid 5386] close(15) = -1 EBADF (Bad file descriptor) [pid 5386] close(16) = -1 EBADF (Bad file descriptor) [pid 5386] close(17) = -1 EBADF (Bad file descriptor) [pid 5386] close(18) = -1 EBADF (Bad file descriptor) [pid 5386] close(19) = -1 EBADF (Bad file descriptor) [pid 5386] close(20) = -1 EBADF (Bad file descriptor) [pid 5386] close(21) = -1 EBADF (Bad file descriptor) [pid 5386] close(22) = -1 EBADF (Bad file descriptor) [pid 5386] close(23) = -1 EBADF (Bad file descriptor) [pid 5386] close(24) = -1 EBADF (Bad file descriptor) [pid 5386] close(25) = -1 EBADF (Bad file descriptor) [pid 5386] close(26) = -1 EBADF (Bad file descriptor) [pid 5386] close(27) = -1 EBADF (Bad file descriptor) [pid 5386] close(28) = -1 EBADF (Bad file descriptor) [pid 5386] close(29) = -1 EBADF (Bad file descriptor) [pid 5386] exit_group(0) = ? [pid 5386] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=285, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 286 ./strace-static-x86_64: Process 5387 attached [pid 5387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5387] setpgid(0, 0) = 0 [pid 5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5387] write(3, "1000", 4) = 4 [pid 5387] close(3) = 0 [pid 5387] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5387] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5387] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5387] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5387] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5387] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5387] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5387] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5387] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5387] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5387] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5387] write(7, "5", 1) = 1 [ 153.757350][ T5386] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 153.765349][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 153.773344][ T5386] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 153.781355][ T5386] [ 153.815000][ T5387] FAULT_INJECTION: forcing a failure. [ 153.815000][ T5387] name failslab, interval 1, probability 0, space 0, times 0 [ 153.828033][ T5387] CPU: 1 PID: 5387 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 153.837970][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 153.848063][ T5387] Call Trace: [ 153.851534][ T5387] [ 153.854463][ T5387] dump_stack_lvl+0xd1/0x138 [ 153.859072][ T5387] should_fail_ex.cold+0x5/0xa [ 153.863845][ T5387] ? io_issue_sqe+0x695/0x1250 [ 153.868622][ T5387] should_failslab+0x9/0x20 [ 153.873147][ T5387] __kmem_cache_alloc_node+0x5b/0x330 [ 153.878547][ T5387] ? ref_tracker_alloc+0x158/0x560 [ 153.883671][ T5387] kmalloc_trace+0x26/0x60 [ 153.888102][ T5387] ref_tracker_alloc+0x158/0x560 [ 153.893049][ T5387] ? __lock_acquire+0xbc3/0x56d0 [ 153.898110][ T5387] ? ref_tracker_free+0x6b0/0x6b0 [ 153.903217][ T5387] dst_init+0xe4/0x520 [ 153.907321][ T5387] dst_alloc+0x16f/0x1f0 [ 153.911594][ T5387] rt_dst_alloc+0x55/0x430 [ 153.916032][ T5387] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 153.922060][ T5387] ip_route_output_key_hash+0x18f/0x340 [ 153.927703][ T5387] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 153.933968][ T5387] dccp_v4_connect+0x7e1/0x1730 [ 153.938865][ T5387] __inet_stream_connect+0x69e/0xed0 [ 153.944200][ T5387] ? inet_listen+0x640/0x640 [ 153.948821][ T5387] ? mark_held_locks+0x9f/0xe0 [ 153.953619][ T5387] ? __local_bh_enable_ip+0xa4/0x130 [ 153.958932][ T5387] inet_stream_connect+0x57/0xa0 [ 153.963914][ T5387] ? __inet_stream_connect+0xed0/0xed0 [ 153.969392][ T5387] __sys_connect_file+0x153/0x1a0 [ 153.974442][ T5387] io_connect+0x3cc/0x720 [ 153.979073][ T5387] ? io_connect_prep+0x250/0x250 [ 153.984028][ T5387] ? receive_fd+0x110/0x110 [ 153.988572][ T5387] ? rcu_read_lock_sched_held+0x3e/0x70 [ 153.994668][ T5387] ? io_connect_prep+0x250/0x250 [ 153.999618][ T5387] io_issue_sqe+0x695/0x1250 [ 154.004231][ T5387] io_submit_sqes+0x96c/0x1e90 [ 154.009037][ T5387] __do_sys_io_uring_enter+0x103d/0x24e0 [ 154.014694][ T5387] ? io_submit_sqes+0x1e90/0x1e90 [ 154.019750][ T5387] ? ptrace_notify+0xfe/0x140 [ 154.024461][ T5387] ? lock_downgrade+0x6e0/0x6e0 [ 154.029332][ T5387] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.034551][ T5387] ? lockdep_hardirqs_on+0x7d/0x100 [ 154.039776][ T5387] ? _raw_spin_unlock_irq+0x2e/0x50 [ 154.044983][ T5387] ? ptrace_notify+0xfe/0x140 [ 154.049724][ T5387] do_syscall_64+0x39/0xb0 [ 154.054172][ T5387] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 154.060082][ T5387] RIP: 0033:0x7f607b0de549 [ 154.064535][ T5387] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 154.084180][ T5387] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 154.092597][ T5387] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 154.100585][ T5387] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 154.108576][ T5387] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5387] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5387] close(3) = 0 [pid 5387] close(4) = 0 [pid 5387] close(5) = 0 [pid 5387] close(6) = 0 [pid 5387] close(7) = 0 [pid 5387] close(8) = -1 EBADF (Bad file descriptor) [pid 5387] close(9) = -1 EBADF (Bad file descriptor) [pid 5387] close(10) = -1 EBADF (Bad file descriptor) [pid 5387] close(11) = -1 EBADF (Bad file descriptor) [pid 5387] close(12) = -1 EBADF (Bad file descriptor) [pid 5387] close(13) = -1 EBADF (Bad file descriptor) [pid 5387] close(14) = -1 EBADF (Bad file descriptor) [pid 5387] close(15) = -1 EBADF (Bad file descriptor) [pid 5387] close(16) = -1 EBADF (Bad file descriptor) [pid 5387] close(17) = -1 EBADF (Bad file descriptor) [pid 5387] close(18) = -1 EBADF (Bad file descriptor) [pid 5387] close(19) = -1 EBADF (Bad file descriptor) [pid 5387] close(20) = -1 EBADF (Bad file descriptor) [pid 5387] close(21) = -1 EBADF (Bad file descriptor) [pid 5387] close(22) = -1 EBADF (Bad file descriptor) [pid 5387] close(23) = -1 EBADF (Bad file descriptor) [pid 5387] close(24) = -1 EBADF (Bad file descriptor) [pid 5387] close(25) = -1 EBADF (Bad file descriptor) [pid 5387] close(26) = -1 EBADF (Bad file descriptor) [pid 5387] close(27) = -1 EBADF (Bad file descriptor) [pid 5387] close(28) = -1 EBADF (Bad file descriptor) [pid 5387] close(29) = -1 EBADF (Bad file descriptor) [pid 5387] exit_group(0) = ? [pid 5387] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=286, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 287 ./strace-static-x86_64: Process 5388 attached [pid 5388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5388] setpgid(0, 0) = 0 [pid 5388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5388] write(3, "1000", 4) = 4 [pid 5388] close(3) = 0 [pid 5388] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5388] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5388] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5388] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5388] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5388] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5388] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5388] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5388] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5388] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5388] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5388] write(7, "5", 1) = 1 [ 154.116550][ T5387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 154.124538][ T5387] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 154.132635][ T5387] [ 154.173912][ T5388] FAULT_INJECTION: forcing a failure. [ 154.173912][ T5388] name failslab, interval 1, probability 0, space 0, times 0 [ 154.188046][ T5388] CPU: 0 PID: 5388 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 154.198144][ T5388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 154.208206][ T5388] Call Trace: [ 154.211487][ T5388] [ 154.214415][ T5388] dump_stack_lvl+0xd1/0x138 [ 154.219031][ T5388] should_fail_ex.cold+0x5/0xa [ 154.223817][ T5388] ? io_issue_sqe+0x695/0x1250 [ 154.228585][ T5388] should_failslab+0x9/0x20 [ 154.233103][ T5388] __kmem_cache_alloc_node+0x5b/0x330 [ 154.238508][ T5388] ? ref_tracker_alloc+0x158/0x560 [ 154.243720][ T5388] kmalloc_trace+0x26/0x60 [ 154.248157][ T5388] ref_tracker_alloc+0x158/0x560 [ 154.253113][ T5388] ? __lock_acquire+0xbc3/0x56d0 [ 154.258085][ T5388] ? ref_tracker_free+0x6b0/0x6b0 [ 154.263179][ T5388] dst_init+0xe4/0x520 [ 154.267273][ T5388] dst_alloc+0x16f/0x1f0 [ 154.271534][ T5388] rt_dst_alloc+0x55/0x430 [ 154.275961][ T5388] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 154.281999][ T5388] ip_route_output_key_hash+0x18f/0x340 [ 154.287579][ T5388] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 154.293857][ T5388] dccp_v4_connect+0x7e1/0x1730 [ 154.298735][ T5388] __inet_stream_connect+0x69e/0xed0 [ 154.304068][ T5388] ? inet_listen+0x640/0x640 [ 154.308673][ T5388] ? mark_held_locks+0x9f/0xe0 [ 154.313557][ T5388] ? __local_bh_enable_ip+0xa4/0x130 [ 154.318898][ T5388] inet_stream_connect+0x57/0xa0 [ 154.323853][ T5388] ? __inet_stream_connect+0xed0/0xed0 [ 154.329343][ T5388] __sys_connect_file+0x153/0x1a0 [ 154.334384][ T5388] io_connect+0x3cc/0x720 [ 154.338728][ T5388] ? io_connect_prep+0x250/0x250 [ 154.343690][ T5388] ? receive_fd+0x110/0x110 [ 154.348231][ T5388] ? rcu_read_lock_sched_held+0x3e/0x70 [ 154.353777][ T5388] ? io_connect_prep+0x250/0x250 [ 154.358730][ T5388] io_issue_sqe+0x695/0x1250 [ 154.363353][ T5388] io_submit_sqes+0x96c/0x1e90 [ 154.368162][ T5388] __do_sys_io_uring_enter+0x103d/0x24e0 [ 154.373810][ T5388] ? io_submit_sqes+0x1e90/0x1e90 [ 154.378850][ T5388] ? ptrace_notify+0xfe/0x140 [ 154.383571][ T5388] ? lock_downgrade+0x6e0/0x6e0 [ 154.388434][ T5388] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.393660][ T5388] ? lockdep_hardirqs_on+0x7d/0x100 [ 154.398873][ T5388] ? _raw_spin_unlock_irq+0x2e/0x50 [ 154.404099][ T5388] ? ptrace_notify+0xfe/0x140 [ 154.408800][ T5388] do_syscall_64+0x39/0xb0 [ 154.413233][ T5388] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 154.419148][ T5388] RIP: 0033:0x7f607b0de549 [ 154.423599][ T5388] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 154.443239][ T5388] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 154.451659][ T5388] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 154.459629][ T5388] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 154.467616][ T5388] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5388] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5388] close(3) = 0 [pid 5388] close(4) = 0 [pid 5388] close(5) = 0 [pid 5388] close(6) = 0 [pid 5388] close(7) = 0 [pid 5388] close(8) = -1 EBADF (Bad file descriptor) [pid 5388] close(9) = -1 EBADF (Bad file descriptor) [pid 5388] close(10) = -1 EBADF (Bad file descriptor) [pid 5388] close(11) = -1 EBADF (Bad file descriptor) [pid 5388] close(12) = -1 EBADF (Bad file descriptor) [pid 5388] close(13) = -1 EBADF (Bad file descriptor) [pid 5388] close(14) = -1 EBADF (Bad file descriptor) [pid 5388] close(15) = -1 EBADF (Bad file descriptor) [pid 5388] close(16) = -1 EBADF (Bad file descriptor) [pid 5388] close(17) = -1 EBADF (Bad file descriptor) [pid 5388] close(18) = -1 EBADF (Bad file descriptor) [pid 5388] close(19) = -1 EBADF (Bad file descriptor) [pid 5388] close(20) = -1 EBADF (Bad file descriptor) [pid 5388] close(21) = -1 EBADF (Bad file descriptor) [pid 5388] close(22) = -1 EBADF (Bad file descriptor) [pid 5388] close(23) = -1 EBADF (Bad file descriptor) [pid 5388] close(24) = -1 EBADF (Bad file descriptor) [pid 5388] close(25) = -1 EBADF (Bad file descriptor) [pid 5388] close(26) = -1 EBADF (Bad file descriptor) [pid 5388] close(27) = -1 EBADF (Bad file descriptor) [pid 5388] close(28) = -1 EBADF (Bad file descriptor) [pid 5388] close(29) = -1 EBADF (Bad file descriptor) [pid 5388] exit_group(0) = ? [pid 5388] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=287, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 288 ./strace-static-x86_64: Process 5389 attached [pid 5389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5389] setpgid(0, 0) = 0 [pid 5389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5389] write(3, "1000", 4) = 4 [pid 5389] close(3) = 0 [pid 5389] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5389] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5389] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5389] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5389] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5389] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5389] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5389] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5389] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 154.475607][ T5388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 154.483604][ T5388] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 154.491625][ T5388] [pid 5389] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5389] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5389] write(7, "5", 1) = 1 [ 154.538376][ T5389] FAULT_INJECTION: forcing a failure. [ 154.538376][ T5389] name failslab, interval 1, probability 0, space 0, times 0 [ 154.551092][ T5389] CPU: 0 PID: 5389 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 154.561068][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 154.571125][ T5389] Call Trace: [ 154.574404][ T5389] [ 154.577336][ T5389] dump_stack_lvl+0xd1/0x138 [ 154.581952][ T5389] should_fail_ex.cold+0x5/0xa [ 154.586746][ T5389] ? __inet_hash_connect+0x95e/0x1ba0 [ 154.592148][ T5389] should_failslab+0x9/0x20 [ 154.596711][ T5389] kmem_cache_alloc+0x5a/0x320 [ 154.601524][ T5389] __inet_hash_connect+0x95e/0x1ba0 [ 154.606765][ T5389] ? __inet_lookup_listener+0xbf0/0xbf0 [ 154.612370][ T5389] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 154.618743][ T5389] dccp_v4_connect+0xb82/0x1730 [ 154.623641][ T5389] __inet_stream_connect+0x69e/0xed0 [ 154.628992][ T5389] ? inet_listen+0x640/0x640 [ 154.633613][ T5389] ? mark_held_locks+0x9f/0xe0 [ 154.638411][ T5389] ? __local_bh_enable_ip+0xa4/0x130 [ 154.643721][ T5389] inet_stream_connect+0x57/0xa0 [ 154.648711][ T5389] ? __inet_stream_connect+0xed0/0xed0 [ 154.654187][ T5389] __sys_connect_file+0x153/0x1a0 [ 154.659238][ T5389] io_connect+0x3cc/0x720 [ 154.663657][ T5389] ? io_connect_prep+0x250/0x250 [ 154.668815][ T5389] ? receive_fd+0x110/0x110 [ 154.673338][ T5389] ? rcu_read_lock_sched_held+0x3e/0x70 [ 154.678896][ T5389] ? io_connect_prep+0x250/0x250 [ 154.683965][ T5389] io_issue_sqe+0x695/0x1250 [ 154.688634][ T5389] io_submit_sqes+0x96c/0x1e90 [ 154.693433][ T5389] __do_sys_io_uring_enter+0x103d/0x24e0 [ 154.699087][ T5389] ? io_submit_sqes+0x1e90/0x1e90 [ 154.704146][ T5389] ? ptrace_notify+0xfe/0x140 [ 154.708851][ T5389] ? lock_downgrade+0x6e0/0x6e0 [ 154.713710][ T5389] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.718916][ T5389] ? lockdep_hardirqs_on+0x7d/0x100 [ 154.724130][ T5389] ? _raw_spin_unlock_irq+0x2e/0x50 [ 154.729357][ T5389] ? ptrace_notify+0xfe/0x140 [ 154.734069][ T5389] do_syscall_64+0x39/0xb0 [ 154.738524][ T5389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 154.744420][ T5389] RIP: 0033:0x7f607b0de549 [ 154.748841][ T5389] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 154.768483][ T5389] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 154.776904][ T5389] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5389] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5389] close(3) = 0 [pid 5389] close(4) = 0 [pid 5389] close(5) = 0 [pid 5389] close(6) = 0 [pid 5389] close(7) = 0 [pid 5389] close(8) = -1 EBADF (Bad file descriptor) [pid 5389] close(9) = -1 EBADF (Bad file descriptor) [pid 5389] close(10) = -1 EBADF (Bad file descriptor) [pid 5389] close(11) = -1 EBADF (Bad file descriptor) [pid 5389] close(12) = -1 EBADF (Bad file descriptor) [pid 5389] close(13) = -1 EBADF (Bad file descriptor) [pid 5389] close(14) = -1 EBADF (Bad file descriptor) [pid 5389] close(15) = -1 EBADF (Bad file descriptor) [pid 5389] close(16) = -1 EBADF (Bad file descriptor) [pid 5389] close(17) = -1 EBADF (Bad file descriptor) [pid 5389] close(18) = -1 EBADF (Bad file descriptor) [pid 5389] close(19) = -1 EBADF (Bad file descriptor) [pid 5389] close(20) = -1 EBADF (Bad file descriptor) [pid 5389] close(21) = -1 EBADF (Bad file descriptor) [pid 5389] close(22) = -1 EBADF (Bad file descriptor) [pid 5389] close(23) = -1 EBADF (Bad file descriptor) [pid 5389] close(24) = -1 EBADF (Bad file descriptor) [pid 5389] close(25) = -1 EBADF (Bad file descriptor) [pid 5389] close(26) = -1 EBADF (Bad file descriptor) [pid 5389] close(27) = -1 EBADF (Bad file descriptor) [pid 5389] close(28) = -1 EBADF (Bad file descriptor) [pid 5389] close(29) = -1 EBADF (Bad file descriptor) [pid 5389] exit_group(0) = ? [pid 5389] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=288, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 289 ./strace-static-x86_64: Process 5390 attached [pid 5390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5390] setpgid(0, 0) = 0 [pid 5390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5390] write(3, "1000", 4) = 4 [pid 5390] close(3) = 0 [pid 5390] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5390] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5390] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5390] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5390] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5390] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5390] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5390] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5390] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 154.784909][ T5389] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 154.792901][ T5389] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 154.800888][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 154.808877][ T5389] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 154.816865][ T5389] [pid 5390] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5390] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5390] write(7, "5", 1) = 1 [ 154.873900][ T5390] FAULT_INJECTION: forcing a failure. [ 154.873900][ T5390] name failslab, interval 1, probability 0, space 0, times 0 [ 154.888108][ T5390] CPU: 0 PID: 5390 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 154.898025][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 154.908082][ T5390] Call Trace: [ 154.911383][ T5390] [ 154.914344][ T5390] dump_stack_lvl+0xd1/0x138 [ 154.918976][ T5390] should_fail_ex.cold+0x5/0xa [ 154.923742][ T5390] ? io_issue_sqe+0x695/0x1250 [ 154.928528][ T5390] should_failslab+0x9/0x20 [ 154.933092][ T5390] __kmem_cache_alloc_node+0x5b/0x330 [ 154.938966][ T5390] ? ref_tracker_alloc+0x158/0x560 [ 154.944147][ T5390] kmalloc_trace+0x26/0x60 [ 154.948602][ T5390] ref_tracker_alloc+0x158/0x560 [ 154.953569][ T5390] ? __lock_acquire+0xbc3/0x56d0 [ 154.958528][ T5390] ? ref_tracker_free+0x6b0/0x6b0 [ 154.963607][ T5390] dst_init+0xe4/0x520 [ 154.967708][ T5390] dst_alloc+0x16f/0x1f0 [ 154.971981][ T5390] rt_dst_alloc+0x55/0x430 [ 154.976424][ T5390] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 154.982453][ T5390] ip_route_output_key_hash+0x18f/0x340 [ 154.988030][ T5390] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 154.994325][ T5390] dccp_v4_connect+0x7e1/0x1730 [ 154.999227][ T5390] __inet_stream_connect+0x69e/0xed0 [ 155.004560][ T5390] ? inet_listen+0x640/0x640 [ 155.009181][ T5390] ? mark_held_locks+0x9f/0xe0 [ 155.013972][ T5390] ? __local_bh_enable_ip+0xa4/0x130 [ 155.019285][ T5390] inet_stream_connect+0x57/0xa0 [ 155.024257][ T5390] ? __inet_stream_connect+0xed0/0xed0 [ 155.029752][ T5390] __sys_connect_file+0x153/0x1a0 [ 155.034807][ T5390] io_connect+0x3cc/0x720 [ 155.039169][ T5390] ? io_connect_prep+0x250/0x250 [ 155.044134][ T5390] ? receive_fd+0x110/0x110 [ 155.048676][ T5390] ? rcu_read_lock_sched_held+0x3e/0x70 [ 155.054243][ T5390] ? io_connect_prep+0x250/0x250 [ 155.059215][ T5390] io_issue_sqe+0x695/0x1250 [ 155.063840][ T5390] io_submit_sqes+0x96c/0x1e90 [ 155.068650][ T5390] __do_sys_io_uring_enter+0x103d/0x24e0 [ 155.074334][ T5390] ? io_submit_sqes+0x1e90/0x1e90 [ 155.079391][ T5390] ? ptrace_notify+0xfe/0x140 [ 155.084097][ T5390] ? lock_downgrade+0x6e0/0x6e0 [ 155.089008][ T5390] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.094256][ T5390] ? lockdep_hardirqs_on+0x7d/0x100 [ 155.099489][ T5390] ? _raw_spin_unlock_irq+0x2e/0x50 [ 155.104726][ T5390] ? ptrace_notify+0xfe/0x140 [ 155.109438][ T5390] do_syscall_64+0x39/0xb0 [ 155.113891][ T5390] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.119806][ T5390] RIP: 0033:0x7f607b0de549 [ 155.124239][ T5390] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 155.143875][ T5390] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 155.152312][ T5390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 155.160303][ T5390] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5390] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5390] close(3) = 0 [pid 5390] close(4) = 0 [pid 5390] close(5) = 0 [pid 5390] close(6) = 0 [pid 5390] close(7) = 0 [pid 5390] close(8) = -1 EBADF (Bad file descriptor) [pid 5390] close(9) = -1 EBADF (Bad file descriptor) [pid 5390] close(10) = -1 EBADF (Bad file descriptor) [pid 5390] close(11) = -1 EBADF (Bad file descriptor) [pid 5390] close(12) = -1 EBADF (Bad file descriptor) [pid 5390] close(13) = -1 EBADF (Bad file descriptor) [pid 5390] close(14) = -1 EBADF (Bad file descriptor) [pid 5390] close(15) = -1 EBADF (Bad file descriptor) [pid 5390] close(16) = -1 EBADF (Bad file descriptor) [pid 5390] close(17) = -1 EBADF (Bad file descriptor) [pid 5390] close(18) = -1 EBADF (Bad file descriptor) [pid 5390] close(19) = -1 EBADF (Bad file descriptor) [pid 5390] close(20) = -1 EBADF (Bad file descriptor) [pid 5390] close(21) = -1 EBADF (Bad file descriptor) [pid 5390] close(22) = -1 EBADF (Bad file descriptor) [pid 5390] close(23) = -1 EBADF (Bad file descriptor) [pid 5390] close(24) = -1 EBADF (Bad file descriptor) [pid 5390] close(25) = -1 EBADF (Bad file descriptor) [pid 5390] close(26) = -1 EBADF (Bad file descriptor) [pid 5390] close(27) = -1 EBADF (Bad file descriptor) [pid 5390] close(28) = -1 EBADF (Bad file descriptor) [pid 5390] close(29) = -1 EBADF (Bad file descriptor) [pid 5390] exit_group(0) = ? [pid 5390] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=289, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 290 ./strace-static-x86_64: Process 5391 attached [pid 5391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5391] setpgid(0, 0) = 0 [pid 5391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5391] write(3, "1000", 4) = 4 [pid 5391] close(3) = 0 [pid 5391] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5391] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5391] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5391] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5391] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5391] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5391] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5391] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5391] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5391] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5391] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5391] write(7, "5", 1) = 1 [ 155.168291][ T5390] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 155.176278][ T5390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 155.184262][ T5390] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 155.192273][ T5390] [ 155.235431][ T5391] FAULT_INJECTION: forcing a failure. [ 155.235431][ T5391] name failslab, interval 1, probability 0, space 0, times 0 [ 155.248194][ T5391] CPU: 0 PID: 5391 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 155.258108][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 155.268187][ T5391] Call Trace: [ 155.271489][ T5391] [ 155.274452][ T5391] dump_stack_lvl+0xd1/0x138 [ 155.279081][ T5391] should_fail_ex.cold+0x5/0xa [ 155.283850][ T5391] ? io_issue_sqe+0x695/0x1250 [ 155.288635][ T5391] should_failslab+0x9/0x20 [ 155.293147][ T5391] __kmem_cache_alloc_node+0x5b/0x330 [ 155.298524][ T5391] ? ref_tracker_alloc+0x158/0x560 [ 155.303665][ T5391] kmalloc_trace+0x26/0x60 [ 155.308132][ T5391] ref_tracker_alloc+0x158/0x560 [ 155.313109][ T5391] ? __lock_acquire+0xbc3/0x56d0 [ 155.318173][ T5391] ? ref_tracker_free+0x6b0/0x6b0 [ 155.323229][ T5391] dst_init+0xe4/0x520 [ 155.327324][ T5391] dst_alloc+0x16f/0x1f0 [ 155.331614][ T5391] rt_dst_alloc+0x55/0x430 [ 155.336077][ T5391] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 155.342122][ T5391] ip_route_output_key_hash+0x18f/0x340 [ 155.347722][ T5391] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 155.354012][ T5391] dccp_v4_connect+0x7e1/0x1730 [ 155.358885][ T5391] __inet_stream_connect+0x69e/0xed0 [ 155.364184][ T5391] ? inet_listen+0x640/0x640 [ 155.368784][ T5391] ? mark_held_locks+0x9f/0xe0 [ 155.373591][ T5391] ? __local_bh_enable_ip+0xa4/0x130 [ 155.378898][ T5391] inet_stream_connect+0x57/0xa0 [ 155.383879][ T5391] ? __inet_stream_connect+0xed0/0xed0 [ 155.389345][ T5391] __sys_connect_file+0x153/0x1a0 [ 155.394376][ T5391] io_connect+0x3cc/0x720 [ 155.398752][ T5391] ? io_connect_prep+0x250/0x250 [ 155.403715][ T5391] ? receive_fd+0x110/0x110 [ 155.408231][ T5391] ? rcu_read_lock_sched_held+0x3e/0x70 [ 155.413778][ T5391] ? io_connect_prep+0x250/0x250 [ 155.418725][ T5391] io_issue_sqe+0x695/0x1250 [ 155.423345][ T5391] io_submit_sqes+0x96c/0x1e90 [ 155.428165][ T5391] __do_sys_io_uring_enter+0x103d/0x24e0 [ 155.433821][ T5391] ? io_submit_sqes+0x1e90/0x1e90 [ 155.438860][ T5391] ? ptrace_notify+0xfe/0x140 [ 155.443565][ T5391] ? lock_downgrade+0x6e0/0x6e0 [ 155.448462][ T5391] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.453693][ T5391] ? lockdep_hardirqs_on+0x7d/0x100 [ 155.458926][ T5391] ? _raw_spin_unlock_irq+0x2e/0x50 [ 155.464130][ T5391] ? ptrace_notify+0xfe/0x140 [ 155.468816][ T5391] do_syscall_64+0x39/0xb0 [ 155.473249][ T5391] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.479154][ T5391] RIP: 0033:0x7f607b0de549 [ 155.483603][ T5391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 155.503252][ T5391] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 155.511668][ T5391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 155.519643][ T5391] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 155.527651][ T5391] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5391] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5391] close(3) = 0 [pid 5391] close(4) = 0 [pid 5391] close(5) = 0 [pid 5391] close(6) = 0 [pid 5391] close(7) = 0 [pid 5391] close(8) = -1 EBADF (Bad file descriptor) [pid 5391] close(9) = -1 EBADF (Bad file descriptor) [pid 5391] close(10) = -1 EBADF (Bad file descriptor) [pid 5391] close(11) = -1 EBADF (Bad file descriptor) [pid 5391] close(12) = -1 EBADF (Bad file descriptor) [pid 5391] close(13) = -1 EBADF (Bad file descriptor) [pid 5391] close(14) = -1 EBADF (Bad file descriptor) [pid 5391] close(15) = -1 EBADF (Bad file descriptor) [pid 5391] close(16) = -1 EBADF (Bad file descriptor) [pid 5391] close(17) = -1 EBADF (Bad file descriptor) [pid 5391] close(18) = -1 EBADF (Bad file descriptor) [pid 5391] close(19) = -1 EBADF (Bad file descriptor) [pid 5391] close(20) = -1 EBADF (Bad file descriptor) [pid 5391] close(21) = -1 EBADF (Bad file descriptor) [pid 5391] close(22) = -1 EBADF (Bad file descriptor) [pid 5391] close(23) = -1 EBADF (Bad file descriptor) [pid 5391] close(24) = -1 EBADF (Bad file descriptor) [pid 5391] close(25) = -1 EBADF (Bad file descriptor) [pid 5391] close(26) = -1 EBADF (Bad file descriptor) [pid 5391] close(27) = -1 EBADF (Bad file descriptor) [pid 5391] close(28) = -1 EBADF (Bad file descriptor) [pid 5391] close(29) = -1 EBADF (Bad file descriptor) [pid 5391] exit_group(0) = ? [pid 5391] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=290, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 291 ./strace-static-x86_64: Process 5392 attached [pid 5392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5392] setpgid(0, 0) = 0 [pid 5392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5392] write(3, "1000", 4) = 4 [pid 5392] close(3) = 0 [pid 5392] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5392] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5392] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5392] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5392] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5392] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5392] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5392] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5392] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5392] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5392] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5392] write(7, "5", 1) = 1 [ 155.535644][ T5391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 155.543615][ T5391] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 155.551600][ T5391] [ 155.594345][ T5392] FAULT_INJECTION: forcing a failure. [ 155.594345][ T5392] name failslab, interval 1, probability 0, space 0, times 0 [ 155.607039][ T5392] CPU: 0 PID: 5392 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 155.616933][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 155.626997][ T5392] Call Trace: [ 155.630282][ T5392] [ 155.633223][ T5392] dump_stack_lvl+0xd1/0x138 [ 155.637840][ T5392] should_fail_ex.cold+0x5/0xa [ 155.642634][ T5392] ? __inet_hash_connect+0x95e/0x1ba0 [ 155.648046][ T5392] should_failslab+0x9/0x20 [ 155.652585][ T5392] kmem_cache_alloc+0x5a/0x320 [ 155.657358][ T5392] __inet_hash_connect+0x95e/0x1ba0 [ 155.662574][ T5392] ? __inet_lookup_listener+0xbf0/0xbf0 [ 155.668161][ T5392] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 155.674539][ T5392] dccp_v4_connect+0xb82/0x1730 [ 155.679441][ T5392] __inet_stream_connect+0x69e/0xed0 [ 155.684778][ T5392] ? inet_listen+0x640/0x640 [ 155.689398][ T5392] ? mark_held_locks+0x9f/0xe0 [ 155.694535][ T5392] ? __local_bh_enable_ip+0xa4/0x130 [ 155.699829][ T5392] inet_stream_connect+0x57/0xa0 [ 155.704779][ T5392] ? __inet_stream_connect+0xed0/0xed0 [ 155.710246][ T5392] __sys_connect_file+0x153/0x1a0 [ 155.715284][ T5392] io_connect+0x3cc/0x720 [ 155.719627][ T5392] ? io_connect_prep+0x250/0x250 [ 155.724570][ T5392] ? receive_fd+0x110/0x110 [ 155.729105][ T5392] ? rcu_read_lock_sched_held+0x3e/0x70 [ 155.734677][ T5392] ? io_connect_prep+0x250/0x250 [ 155.739623][ T5392] io_issue_sqe+0x695/0x1250 [ 155.744224][ T5392] io_submit_sqes+0x96c/0x1e90 [ 155.749039][ T5392] __do_sys_io_uring_enter+0x103d/0x24e0 [ 155.754741][ T5392] ? io_submit_sqes+0x1e90/0x1e90 [ 155.759804][ T5392] ? ptrace_notify+0xfe/0x140 [ 155.764486][ T5392] ? lock_downgrade+0x6e0/0x6e0 [ 155.769367][ T5392] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.774602][ T5392] ? lockdep_hardirqs_on+0x7d/0x100 [ 155.779806][ T5392] ? _raw_spin_unlock_irq+0x2e/0x50 [ 155.785026][ T5392] ? ptrace_notify+0xfe/0x140 [ 155.789738][ T5392] do_syscall_64+0x39/0xb0 [ 155.794162][ T5392] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.800056][ T5392] RIP: 0033:0x7f607b0de549 [ 155.804470][ T5392] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 155.824119][ T5392] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 155.832537][ T5392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5392] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5392] close(3) = 0 [pid 5392] close(4) = 0 [pid 5392] close(5) = 0 [pid 5392] close(6) = 0 [pid 5392] close(7) = 0 [pid 5392] close(8) = -1 EBADF (Bad file descriptor) [pid 5392] close(9) = -1 EBADF (Bad file descriptor) [pid 5392] close(10) = -1 EBADF (Bad file descriptor) [pid 5392] close(11) = -1 EBADF (Bad file descriptor) [pid 5392] close(12) = -1 EBADF (Bad file descriptor) [pid 5392] close(13) = -1 EBADF (Bad file descriptor) [pid 5392] close(14) = -1 EBADF (Bad file descriptor) [pid 5392] close(15) = -1 EBADF (Bad file descriptor) [pid 5392] close(16) = -1 EBADF (Bad file descriptor) [pid 5392] close(17) = -1 EBADF (Bad file descriptor) [pid 5392] close(18) = -1 EBADF (Bad file descriptor) [pid 5392] close(19) = -1 EBADF (Bad file descriptor) [pid 5392] close(20) = -1 EBADF (Bad file descriptor) [pid 5392] close(21) = -1 EBADF (Bad file descriptor) [pid 5392] close(22) = -1 EBADF (Bad file descriptor) [pid 5392] close(23) = -1 EBADF (Bad file descriptor) [pid 5392] close(24) = -1 EBADF (Bad file descriptor) [pid 5392] close(25) = -1 EBADF (Bad file descriptor) [pid 5392] close(26) = -1 EBADF (Bad file descriptor) [pid 5392] close(27) = -1 EBADF (Bad file descriptor) [pid 5392] close(28) = -1 EBADF (Bad file descriptor) [pid 5392] close(29) = -1 EBADF (Bad file descriptor) [pid 5392] exit_group(0) = ? [pid 5392] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=291, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 292 ./strace-static-x86_64: Process 5393 attached [pid 5393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5393] setpgid(0, 0) = 0 [pid 5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5393] write(3, "1000", 4) = 4 [pid 5393] close(3) = 0 [pid 5393] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5393] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5393] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5393] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5393] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5393] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5393] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5393] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5393] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5393] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5393] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5393] write(7, "5", 1) = 1 [ 155.840522][ T5392] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 155.848631][ T5392] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 155.856607][ T5392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 155.864587][ T5392] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 155.872577][ T5392] [ 155.908677][ T5393] FAULT_INJECTION: forcing a failure. [ 155.908677][ T5393] name failslab, interval 1, probability 0, space 0, times 0 [ 155.921634][ T5393] CPU: 1 PID: 5393 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 155.931582][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 155.941688][ T5393] Call Trace: [ 155.944993][ T5393] [ 155.947941][ T5393] dump_stack_lvl+0xd1/0x138 [ 155.952542][ T5393] should_fail_ex.cold+0x5/0xa [ 155.957305][ T5393] ? io_issue_sqe+0x695/0x1250 [ 155.962082][ T5393] should_failslab+0x9/0x20 [ 155.966595][ T5393] __kmem_cache_alloc_node+0x5b/0x330 [ 155.971986][ T5393] ? ref_tracker_alloc+0x158/0x560 [ 155.977138][ T5393] kmalloc_trace+0x26/0x60 [ 155.981581][ T5393] ref_tracker_alloc+0x158/0x560 [ 155.986555][ T5393] ? __lock_acquire+0xbc3/0x56d0 [ 155.991495][ T5393] ? ref_tracker_free+0x6b0/0x6b0 [ 155.996545][ T5393] dst_init+0xe4/0x520 [ 156.000661][ T5393] dst_alloc+0x16f/0x1f0 [ 156.004940][ T5393] rt_dst_alloc+0x55/0x430 [ 156.009364][ T5393] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 156.015361][ T5393] ip_route_output_key_hash+0x18f/0x340 [ 156.020933][ T5393] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 156.027233][ T5393] dccp_v4_connect+0x7e1/0x1730 [ 156.032132][ T5393] __inet_stream_connect+0x69e/0xed0 [ 156.037453][ T5393] ? inet_listen+0x640/0x640 [ 156.042083][ T5393] ? mark_held_locks+0x9f/0xe0 [ 156.046853][ T5393] ? __local_bh_enable_ip+0xa4/0x130 [ 156.052169][ T5393] inet_stream_connect+0x57/0xa0 [ 156.057127][ T5393] ? __inet_stream_connect+0xed0/0xed0 [ 156.062596][ T5393] __sys_connect_file+0x153/0x1a0 [ 156.067636][ T5393] io_connect+0x3cc/0x720 [ 156.071977][ T5393] ? io_connect_prep+0x250/0x250 [ 156.076923][ T5393] ? receive_fd+0x110/0x110 [ 156.081566][ T5393] ? rcu_read_lock_sched_held+0x3e/0x70 [ 156.087153][ T5393] ? io_connect_prep+0x250/0x250 [ 156.092111][ T5393] io_issue_sqe+0x695/0x1250 [ 156.096726][ T5393] io_submit_sqes+0x96c/0x1e90 [ 156.101556][ T5393] __do_sys_io_uring_enter+0x103d/0x24e0 [ 156.107250][ T5393] ? io_submit_sqes+0x1e90/0x1e90 [ 156.112305][ T5393] ? ptrace_notify+0xfe/0x140 [ 156.116991][ T5393] ? lock_downgrade+0x6e0/0x6e0 [ 156.121871][ T5393] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.127106][ T5393] ? lockdep_hardirqs_on+0x7d/0x100 [ 156.132319][ T5393] ? _raw_spin_unlock_irq+0x2e/0x50 [ 156.137529][ T5393] ? ptrace_notify+0xfe/0x140 [ 156.142236][ T5393] do_syscall_64+0x39/0xb0 [ 156.146662][ T5393] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.152558][ T5393] RIP: 0033:0x7f607b0de549 [ 156.156973][ T5393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 156.176587][ T5393] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 156.185009][ T5393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 156.192985][ T5393] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 156.200969][ T5393] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5393] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5393] close(3) = 0 [pid 5393] close(4) = 0 [pid 5393] close(5) = 0 [pid 5393] close(6) = 0 [pid 5393] close(7) = 0 [pid 5393] close(8) = -1 EBADF (Bad file descriptor) [pid 5393] close(9) = -1 EBADF (Bad file descriptor) [pid 5393] close(10) = -1 EBADF (Bad file descriptor) [pid 5393] close(11) = -1 EBADF (Bad file descriptor) [pid 5393] close(12) = -1 EBADF (Bad file descriptor) [pid 5393] close(13) = -1 EBADF (Bad file descriptor) [pid 5393] close(14) = -1 EBADF (Bad file descriptor) [pid 5393] close(15) = -1 EBADF (Bad file descriptor) [pid 5393] close(16) = -1 EBADF (Bad file descriptor) [pid 5393] close(17) = -1 EBADF (Bad file descriptor) [pid 5393] close(18) = -1 EBADF (Bad file descriptor) [pid 5393] close(19) = -1 EBADF (Bad file descriptor) [pid 5393] close(20) = -1 EBADF (Bad file descriptor) [pid 5393] close(21) = -1 EBADF (Bad file descriptor) [pid 5393] close(22) = -1 EBADF (Bad file descriptor) [pid 5393] close(23) = -1 EBADF (Bad file descriptor) [pid 5393] close(24) = -1 EBADF (Bad file descriptor) [pid 5393] close(25) = -1 EBADF (Bad file descriptor) [pid 5393] close(26) = -1 EBADF (Bad file descriptor) [pid 5393] close(27) = -1 EBADF (Bad file descriptor) [pid 5393] close(28) = -1 EBADF (Bad file descriptor) [pid 5393] close(29) = -1 EBADF (Bad file descriptor) [pid 5393] exit_group(0) = ? [pid 5393] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=292, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 293 ./strace-static-x86_64: Process 5394 attached [pid 5394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5394] setpgid(0, 0) = 0 [pid 5394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5394] write(3, "1000", 4) = 4 [pid 5394] close(3) = 0 [pid 5394] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5394] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5394] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5394] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5394] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5394] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5394] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5394] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5394] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5394] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5394] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5394] write(7, "5", 1) = 1 [ 156.208964][ T5393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 156.216949][ T5393] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 156.224937][ T5393] [ 156.268396][ T5394] FAULT_INJECTION: forcing a failure. [ 156.268396][ T5394] name failslab, interval 1, probability 0, space 0, times 0 [ 156.282198][ T5394] CPU: 0 PID: 5394 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 156.292125][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 156.302181][ T5394] Call Trace: [ 156.305457][ T5394] [ 156.308401][ T5394] dump_stack_lvl+0xd1/0x138 [ 156.313005][ T5394] should_fail_ex.cold+0x5/0xa [ 156.317784][ T5394] ? io_issue_sqe+0x695/0x1250 [ 156.322630][ T5394] should_failslab+0x9/0x20 [ 156.327151][ T5394] __kmem_cache_alloc_node+0x5b/0x330 [ 156.332535][ T5394] ? ref_tracker_alloc+0x158/0x560 [ 156.337691][ T5394] kmalloc_trace+0x26/0x60 [ 156.342115][ T5394] ref_tracker_alloc+0x158/0x560 [ 156.347072][ T5394] ? __lock_acquire+0xbc3/0x56d0 [ 156.352037][ T5394] ? ref_tracker_free+0x6b0/0x6b0 [ 156.357084][ T5394] dst_init+0xe4/0x520 [ 156.361162][ T5394] dst_alloc+0x16f/0x1f0 [ 156.365409][ T5394] rt_dst_alloc+0x55/0x430 [ 156.369830][ T5394] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 156.375829][ T5394] ip_route_output_key_hash+0x18f/0x340 [ 156.381388][ T5394] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 156.387668][ T5394] dccp_v4_connect+0x7e1/0x1730 [ 156.392562][ T5394] __inet_stream_connect+0x69e/0xed0 [ 156.397919][ T5394] ? inet_listen+0x640/0x640 [ 156.402582][ T5394] ? mark_held_locks+0x9f/0xe0 [ 156.407404][ T5394] ? __local_bh_enable_ip+0xa4/0x130 [ 156.412713][ T5394] inet_stream_connect+0x57/0xa0 [ 156.417694][ T5394] ? __inet_stream_connect+0xed0/0xed0 [ 156.423162][ T5394] __sys_connect_file+0x153/0x1a0 [ 156.428192][ T5394] io_connect+0x3cc/0x720 [ 156.432538][ T5394] ? io_connect_prep+0x250/0x250 [ 156.437485][ T5394] ? receive_fd+0x110/0x110 [ 156.442002][ T5394] ? rcu_read_lock_sched_held+0x3e/0x70 [ 156.447560][ T5394] ? io_connect_prep+0x250/0x250 [ 156.452519][ T5394] io_issue_sqe+0x695/0x1250 [ 156.457146][ T5394] io_submit_sqes+0x96c/0x1e90 [ 156.462007][ T5394] __do_sys_io_uring_enter+0x103d/0x24e0 [ 156.467677][ T5394] ? io_submit_sqes+0x1e90/0x1e90 [ 156.472716][ T5394] ? ptrace_notify+0xfe/0x140 [ 156.477423][ T5394] ? lock_downgrade+0x6e0/0x6e0 [ 156.482313][ T5394] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.487528][ T5394] ? lockdep_hardirqs_on+0x7d/0x100 [ 156.492764][ T5394] ? _raw_spin_unlock_irq+0x2e/0x50 [ 156.497982][ T5394] ? ptrace_notify+0xfe/0x140 [ 156.502679][ T5394] do_syscall_64+0x39/0xb0 [ 156.507100][ T5394] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.512993][ T5394] RIP: 0033:0x7f607b0de549 [ 156.517405][ T5394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 156.537017][ T5394] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 156.545436][ T5394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 156.553420][ T5394] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 156.561584][ T5394] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5394] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5394] close(3) = 0 [pid 5394] close(4) = 0 [pid 5394] close(5) = 0 [pid 5394] close(6) = 0 [pid 5394] close(7) = 0 [pid 5394] close(8) = -1 EBADF (Bad file descriptor) [pid 5394] close(9) = -1 EBADF (Bad file descriptor) [pid 5394] close(10) = -1 EBADF (Bad file descriptor) [pid 5394] close(11) = -1 EBADF (Bad file descriptor) [pid 5394] close(12) = -1 EBADF (Bad file descriptor) [pid 5394] close(13) = -1 EBADF (Bad file descriptor) [pid 5394] close(14) = -1 EBADF (Bad file descriptor) [pid 5394] close(15) = -1 EBADF (Bad file descriptor) [pid 5394] close(16) = -1 EBADF (Bad file descriptor) [pid 5394] close(17) = -1 EBADF (Bad file descriptor) [pid 5394] close(18) = -1 EBADF (Bad file descriptor) [pid 5394] close(19) = -1 EBADF (Bad file descriptor) [pid 5394] close(20) = -1 EBADF (Bad file descriptor) [pid 5394] close(21) = -1 EBADF (Bad file descriptor) [pid 5394] close(22) = -1 EBADF (Bad file descriptor) [pid 5394] close(23) = -1 EBADF (Bad file descriptor) [pid 5394] close(24) = -1 EBADF (Bad file descriptor) [pid 5394] close(25) = -1 EBADF (Bad file descriptor) [pid 5394] close(26) = -1 EBADF (Bad file descriptor) [pid 5394] close(27) = -1 EBADF (Bad file descriptor) [pid 5394] close(28) = -1 EBADF (Bad file descriptor) [pid 5394] close(29) = -1 EBADF (Bad file descriptor) [pid 5394] exit_group(0) = ? [pid 5394] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5395 attached , child_tidptr=0x555555eff5d0) = 294 [pid 5395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5395] setpgid(0, 0) = 0 [pid 5395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5395] write(3, "1000", 4) = 4 [pid 5395] close(3) = 0 [pid 5395] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5395] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5395] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5395] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5395] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5395] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5395] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5395] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5395] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5395] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5395] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5395] write(7, "5", 1) = 1 [ 156.569561][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 156.577551][ T5394] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 156.585712][ T5394] [ 156.628541][ T5395] FAULT_INJECTION: forcing a failure. [ 156.628541][ T5395] name failslab, interval 1, probability 0, space 0, times 0 [ 156.641268][ T5395] CPU: 0 PID: 5395 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 156.651189][ T5395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 156.661270][ T5395] Call Trace: [ 156.664560][ T5395] [ 156.667516][ T5395] dump_stack_lvl+0xd1/0x138 [ 156.672147][ T5395] should_fail_ex.cold+0x5/0xa [ 156.676916][ T5395] ? __inet_hash_connect+0x95e/0x1ba0 [ 156.682296][ T5395] should_failslab+0x9/0x20 [ 156.686806][ T5395] kmem_cache_alloc+0x5a/0x320 [ 156.691576][ T5395] __inet_hash_connect+0x95e/0x1ba0 [ 156.696789][ T5395] ? __inet_lookup_listener+0xbf0/0xbf0 [ 156.702354][ T5395] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 156.709349][ T5395] dccp_v4_connect+0xb82/0x1730 [ 156.714270][ T5395] __inet_stream_connect+0x69e/0xed0 [ 156.719584][ T5395] ? inet_listen+0x640/0x640 [ 156.724191][ T5395] ? mark_held_locks+0x9f/0xe0 [ 156.728959][ T5395] ? __local_bh_enable_ip+0xa4/0x130 [ 156.734251][ T5395] inet_stream_connect+0x57/0xa0 [ 156.739215][ T5395] ? __inet_stream_connect+0xed0/0xed0 [ 156.744715][ T5395] __sys_connect_file+0x153/0x1a0 [ 156.749774][ T5395] io_connect+0x3cc/0x720 [ 156.754121][ T5395] ? io_connect_prep+0x250/0x250 [ 156.759066][ T5395] ? receive_fd+0x110/0x110 [ 156.763642][ T5395] ? rcu_read_lock_sched_held+0x3e/0x70 [ 156.769230][ T5395] ? io_connect_prep+0x250/0x250 [ 156.774208][ T5395] io_issue_sqe+0x695/0x1250 [ 156.778828][ T5395] io_submit_sqes+0x96c/0x1e90 [ 156.783642][ T5395] __do_sys_io_uring_enter+0x103d/0x24e0 [ 156.789332][ T5395] ? io_submit_sqes+0x1e90/0x1e90 [ 156.794387][ T5395] ? ptrace_notify+0xfe/0x140 [ 156.799080][ T5395] ? lock_downgrade+0x6e0/0x6e0 [ 156.803962][ T5395] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.809177][ T5395] ? lockdep_hardirqs_on+0x7d/0x100 [ 156.814403][ T5395] ? _raw_spin_unlock_irq+0x2e/0x50 [ 156.819611][ T5395] ? ptrace_notify+0xfe/0x140 [ 156.824292][ T5395] do_syscall_64+0x39/0xb0 [ 156.828714][ T5395] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 156.834628][ T5395] RIP: 0033:0x7f607b0de549 [ 156.839073][ T5395] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 156.858797][ T5395] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 156.867223][ T5395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5395] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5395] close(3) = 0 [pid 5395] close(4) = 0 [pid 5395] close(5) = 0 [pid 5395] close(6) = 0 [pid 5395] close(7) = 0 [pid 5395] close(8) = -1 EBADF (Bad file descriptor) [pid 5395] close(9) = -1 EBADF (Bad file descriptor) [pid 5395] close(10) = -1 EBADF (Bad file descriptor) [pid 5395] close(11) = -1 EBADF (Bad file descriptor) [pid 5395] close(12) = -1 EBADF (Bad file descriptor) [pid 5395] close(13) = -1 EBADF (Bad file descriptor) [pid 5395] close(14) = -1 EBADF (Bad file descriptor) [pid 5395] close(15) = -1 EBADF (Bad file descriptor) [pid 5395] close(16) = -1 EBADF (Bad file descriptor) [pid 5395] close(17) = -1 EBADF (Bad file descriptor) [pid 5395] close(18) = -1 EBADF (Bad file descriptor) [pid 5395] close(19) = -1 EBADF (Bad file descriptor) [pid 5395] close(20) = -1 EBADF (Bad file descriptor) [pid 5395] close(21) = -1 EBADF (Bad file descriptor) [pid 5395] close(22) = -1 EBADF (Bad file descriptor) [pid 5395] close(23) = -1 EBADF (Bad file descriptor) [pid 5395] close(24) = -1 EBADF (Bad file descriptor) [pid 5395] close(25) = -1 EBADF (Bad file descriptor) [pid 5395] close(26) = -1 EBADF (Bad file descriptor) [pid 5395] close(27) = -1 EBADF (Bad file descriptor) [pid 5395] close(28) = -1 EBADF (Bad file descriptor) [pid 5395] close(29) = -1 EBADF (Bad file descriptor) [pid 5395] exit_group(0) = ? [pid 5395] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=294, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 295 ./strace-static-x86_64: Process 5396 attached [pid 5396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5396] setpgid(0, 0) = 0 [pid 5396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5396] write(3, "1000", 4) = 4 [pid 5396] close(3) = 0 [pid 5396] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5396] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5396] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5396] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5396] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5396] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5396] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5396] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5396] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5396] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5396] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5396] write(7, "5", 1) = 1 [ 156.875197][ T5395] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 156.883179][ T5395] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 156.891520][ T5395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 156.899490][ T5395] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 156.907499][ T5395] [ 156.955144][ T5396] FAULT_INJECTION: forcing a failure. [ 156.955144][ T5396] name failslab, interval 1, probability 0, space 0, times 0 [ 156.968180][ T5396] CPU: 1 PID: 5396 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 156.978121][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 156.988182][ T5396] Call Trace: [ 156.991560][ T5396] [ 156.994489][ T5396] dump_stack_lvl+0xd1/0x138 [ 156.999279][ T5396] should_fail_ex.cold+0x5/0xa [ 157.004065][ T5396] ? io_issue_sqe+0x695/0x1250 [ 157.008854][ T5396] should_failslab+0x9/0x20 [ 157.013471][ T5396] __kmem_cache_alloc_node+0x5b/0x330 [ 157.018876][ T5396] ? ref_tracker_alloc+0x158/0x560 [ 157.024036][ T5396] kmalloc_trace+0x26/0x60 [ 157.028495][ T5396] ref_tracker_alloc+0x158/0x560 [ 157.033442][ T5396] ? __lock_acquire+0xbc3/0x56d0 [ 157.038396][ T5396] ? ref_tracker_free+0x6b0/0x6b0 [ 157.043492][ T5396] dst_init+0xe4/0x520 [ 157.047593][ T5396] dst_alloc+0x16f/0x1f0 [ 157.051889][ T5396] rt_dst_alloc+0x55/0x430 [ 157.056432][ T5396] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 157.062433][ T5396] ip_route_output_key_hash+0x18f/0x340 [ 157.067986][ T5396] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 157.074247][ T5396] dccp_v4_connect+0x7e1/0x1730 [ 157.079170][ T5396] __inet_stream_connect+0x69e/0xed0 [ 157.084503][ T5396] ? inet_listen+0x640/0x640 [ 157.089137][ T5396] ? mark_held_locks+0x9f/0xe0 [ 157.093905][ T5396] ? __local_bh_enable_ip+0xa4/0x130 [ 157.099236][ T5396] inet_stream_connect+0x57/0xa0 [ 157.104188][ T5396] ? __inet_stream_connect+0xed0/0xed0 [ 157.109672][ T5396] __sys_connect_file+0x153/0x1a0 [ 157.114718][ T5396] io_connect+0x3cc/0x720 [ 157.119106][ T5396] ? io_connect_prep+0x250/0x250 [ 157.124143][ T5396] ? receive_fd+0x110/0x110 [ 157.128669][ T5396] ? rcu_read_lock_sched_held+0x3e/0x70 [ 157.134258][ T5396] ? io_connect_prep+0x250/0x250 [ 157.139228][ T5396] io_issue_sqe+0x695/0x1250 [ 157.143839][ T5396] io_submit_sqes+0x96c/0x1e90 [ 157.148622][ T5396] __do_sys_io_uring_enter+0x103d/0x24e0 [ 157.154361][ T5396] ? io_submit_sqes+0x1e90/0x1e90 [ 157.159396][ T5396] ? ptrace_notify+0xfe/0x140 [ 157.164083][ T5396] ? lock_downgrade+0x6e0/0x6e0 [ 157.169053][ T5396] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.174286][ T5396] ? lockdep_hardirqs_on+0x7d/0x100 [ 157.179495][ T5396] ? _raw_spin_unlock_irq+0x2e/0x50 [ 157.184713][ T5396] ? ptrace_notify+0xfe/0x140 [ 157.189420][ T5396] do_syscall_64+0x39/0xb0 [ 157.193853][ T5396] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.199755][ T5396] RIP: 0033:0x7f607b0de549 [ 157.204171][ T5396] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 157.223871][ T5396] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 157.232286][ T5396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 157.240355][ T5396] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 157.248345][ T5396] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5396] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5396] close(3) = 0 [pid 5396] close(4) = 0 [pid 5396] close(5) = 0 [pid 5396] close(6) = 0 [pid 5396] close(7) = 0 [pid 5396] close(8) = -1 EBADF (Bad file descriptor) [pid 5396] close(9) = -1 EBADF (Bad file descriptor) [pid 5396] close(10) = -1 EBADF (Bad file descriptor) [pid 5396] close(11) = -1 EBADF (Bad file descriptor) [pid 5396] close(12) = -1 EBADF (Bad file descriptor) [pid 5396] close(13) = -1 EBADF (Bad file descriptor) [pid 5396] close(14) = -1 EBADF (Bad file descriptor) [pid 5396] close(15) = -1 EBADF (Bad file descriptor) [pid 5396] close(16) = -1 EBADF (Bad file descriptor) [pid 5396] close(17) = -1 EBADF (Bad file descriptor) [pid 5396] close(18) = -1 EBADF (Bad file descriptor) [pid 5396] close(19) = -1 EBADF (Bad file descriptor) [pid 5396] close(20) = -1 EBADF (Bad file descriptor) [pid 5396] close(21) = -1 EBADF (Bad file descriptor) [pid 5396] close(22) = -1 EBADF (Bad file descriptor) [pid 5396] close(23) = -1 EBADF (Bad file descriptor) [pid 5396] close(24) = -1 EBADF (Bad file descriptor) [pid 5396] close(25) = -1 EBADF (Bad file descriptor) [pid 5396] close(26) = -1 EBADF (Bad file descriptor) [pid 5396] close(27) = -1 EBADF (Bad file descriptor) [pid 5396] close(28) = -1 EBADF (Bad file descriptor) [pid 5396] close(29) = -1 EBADF (Bad file descriptor) [pid 5396] exit_group(0) = ? [pid 5396] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=295, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 296 ./strace-static-x86_64: Process 5397 attached [pid 5397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5397] setpgid(0, 0) = 0 [pid 5397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5397] write(3, "1000", 4) = 4 [pid 5397] close(3) = 0 [pid 5397] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5397] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5397] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5397] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5397] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5397] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [ 157.256318][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 157.264294][ T5396] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 157.272277][ T5396] [pid 5397] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5397] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5397] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5397] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5397] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5397] write(7, "5", 1) = 1 [ 157.324336][ T5397] FAULT_INJECTION: forcing a failure. [ 157.324336][ T5397] name failslab, interval 1, probability 0, space 0, times 0 [ 157.337179][ T5397] CPU: 0 PID: 5397 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 157.347129][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 157.357184][ T5397] Call Trace: [ 157.360554][ T5397] [ 157.363479][ T5397] dump_stack_lvl+0xd1/0x138 [ 157.368076][ T5397] should_fail_ex.cold+0x5/0xa [ 157.372851][ T5397] ? io_issue_sqe+0x695/0x1250 [ 157.377688][ T5397] should_failslab+0x9/0x20 [ 157.382204][ T5397] __kmem_cache_alloc_node+0x5b/0x330 [ 157.387669][ T5397] ? ref_tracker_alloc+0x158/0x560 [ 157.392808][ T5397] kmalloc_trace+0x26/0x60 [ 157.397263][ T5397] ref_tracker_alloc+0x158/0x560 [ 157.402205][ T5397] ? __lock_acquire+0xbc3/0x56d0 [ 157.407162][ T5397] ? ref_tracker_free+0x6b0/0x6b0 [ 157.412305][ T5397] dst_init+0xe4/0x520 [ 157.416399][ T5397] dst_alloc+0x16f/0x1f0 [ 157.420656][ T5397] rt_dst_alloc+0x55/0x430 [ 157.425079][ T5397] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 157.431076][ T5397] ip_route_output_key_hash+0x18f/0x340 [ 157.436639][ T5397] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 157.442926][ T5397] dccp_v4_connect+0x7e1/0x1730 [ 157.447813][ T5397] __inet_stream_connect+0x69e/0xed0 [ 157.453115][ T5397] ? inet_listen+0x640/0x640 [ 157.457718][ T5397] ? mark_held_locks+0x9f/0xe0 [ 157.462502][ T5397] ? __local_bh_enable_ip+0xa4/0x130 [ 157.467822][ T5397] inet_stream_connect+0x57/0xa0 [ 157.472780][ T5397] ? __inet_stream_connect+0xed0/0xed0 [ 157.478286][ T5397] __sys_connect_file+0x153/0x1a0 [ 157.483343][ T5397] io_connect+0x3cc/0x720 [ 157.487686][ T5397] ? io_connect_prep+0x250/0x250 [ 157.492642][ T5397] ? receive_fd+0x110/0x110 [ 157.497203][ T5397] ? rcu_read_lock_sched_held+0x3e/0x70 [ 157.502779][ T5397] ? io_connect_prep+0x250/0x250 [ 157.507781][ T5397] io_issue_sqe+0x695/0x1250 [ 157.512378][ T5397] io_submit_sqes+0x96c/0x1e90 [ 157.517164][ T5397] __do_sys_io_uring_enter+0x103d/0x24e0 [ 157.522905][ T5397] ? io_submit_sqes+0x1e90/0x1e90 [ 157.527945][ T5397] ? ptrace_notify+0xfe/0x140 [ 157.532668][ T5397] ? lock_downgrade+0x6e0/0x6e0 [ 157.537567][ T5397] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.542783][ T5397] ? lockdep_hardirqs_on+0x7d/0x100 [ 157.548002][ T5397] ? _raw_spin_unlock_irq+0x2e/0x50 [ 157.553229][ T5397] ? ptrace_notify+0xfe/0x140 [ 157.557926][ T5397] do_syscall_64+0x39/0xb0 [ 157.562390][ T5397] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.568320][ T5397] RIP: 0033:0x7f607b0de549 [ 157.572738][ T5397] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 157.592370][ T5397] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 157.600828][ T5397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 157.608918][ T5397] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 157.616906][ T5397] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5397] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5397] close(3) = 0 [pid 5397] close(4) = 0 [pid 5397] close(5) = 0 [pid 5397] close(6) = 0 [pid 5397] close(7) = 0 [pid 5397] close(8) = -1 EBADF (Bad file descriptor) [pid 5397] close(9) = -1 EBADF (Bad file descriptor) [pid 5397] close(10) = -1 EBADF (Bad file descriptor) [pid 5397] close(11) = -1 EBADF (Bad file descriptor) [pid 5397] close(12) = -1 EBADF (Bad file descriptor) [pid 5397] close(13) = -1 EBADF (Bad file descriptor) [pid 5397] close(14) = -1 EBADF (Bad file descriptor) [pid 5397] close(15) = -1 EBADF (Bad file descriptor) [pid 5397] close(16) = -1 EBADF (Bad file descriptor) [pid 5397] close(17) = -1 EBADF (Bad file descriptor) [pid 5397] close(18) = -1 EBADF (Bad file descriptor) [pid 5397] close(19) = -1 EBADF (Bad file descriptor) [pid 5397] close(20) = -1 EBADF (Bad file descriptor) [pid 5397] close(21) = -1 EBADF (Bad file descriptor) [pid 5397] close(22) = -1 EBADF (Bad file descriptor) [pid 5397] close(23) = -1 EBADF (Bad file descriptor) [pid 5397] close(24) = -1 EBADF (Bad file descriptor) [pid 5397] close(25) = -1 EBADF (Bad file descriptor) [pid 5397] close(26) = -1 EBADF (Bad file descriptor) [pid 5397] close(27) = -1 EBADF (Bad file descriptor) [pid 5397] close(28) = -1 EBADF (Bad file descriptor) [pid 5397] close(29) = -1 EBADF (Bad file descriptor) [pid 5397] exit_group(0) = ? [pid 5397] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 297 ./strace-static-x86_64: Process 5398 attached [pid 5398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5398] setpgid(0, 0) = 0 [pid 5398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5398] write(3, "1000", 4) = 4 [pid 5398] close(3) = 0 [pid 5398] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5398] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5398] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5398] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5398] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5398] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5398] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5398] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5398] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5398] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5398] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 157.624903][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 157.632875][ T5397] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 157.640902][ T5397] [pid 5398] write(7, "5", 1) = 1 [ 157.690869][ T5398] FAULT_INJECTION: forcing a failure. [ 157.690869][ T5398] name failslab, interval 1, probability 0, space 0, times 0 [ 157.703599][ T5398] CPU: 0 PID: 5398 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 157.713513][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 157.723586][ T5398] Call Trace: [ 157.726876][ T5398] [ 157.729918][ T5398] dump_stack_lvl+0xd1/0x138 [ 157.734544][ T5398] should_fail_ex.cold+0x5/0xa [ 157.739351][ T5398] ? __inet_hash_connect+0x95e/0x1ba0 [ 157.744738][ T5398] should_failslab+0x9/0x20 [ 157.749268][ T5398] kmem_cache_alloc+0x5a/0x320 [ 157.754038][ T5398] __inet_hash_connect+0x95e/0x1ba0 [ 157.759262][ T5398] ? __inet_lookup_listener+0xbf0/0xbf0 [ 157.764859][ T5398] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 157.771206][ T5398] dccp_v4_connect+0xb82/0x1730 [ 157.776088][ T5398] __inet_stream_connect+0x69e/0xed0 [ 157.781389][ T5398] ? inet_listen+0x640/0x640 [ 157.785991][ T5398] ? mark_held_locks+0x9f/0xe0 [ 157.790782][ T5398] ? __local_bh_enable_ip+0xa4/0x130 [ 157.796108][ T5398] inet_stream_connect+0x57/0xa0 [ 157.801058][ T5398] ? __inet_stream_connect+0xed0/0xed0 [ 157.806537][ T5398] __sys_connect_file+0x153/0x1a0 [ 157.811596][ T5398] io_connect+0x3cc/0x720 [ 157.815935][ T5398] ? io_connect_prep+0x250/0x250 [ 157.820890][ T5398] ? receive_fd+0x110/0x110 [ 157.825425][ T5398] ? rcu_read_lock_sched_held+0x3e/0x70 [ 157.830980][ T5398] ? io_connect_prep+0x250/0x250 [ 157.835927][ T5398] io_issue_sqe+0x695/0x1250 [ 157.840541][ T5398] io_submit_sqes+0x96c/0x1e90 [ 157.845350][ T5398] __do_sys_io_uring_enter+0x103d/0x24e0 [ 157.851165][ T5398] ? io_submit_sqes+0x1e90/0x1e90 [ 157.856212][ T5398] ? ptrace_notify+0xfe/0x140 [ 157.860915][ T5398] ? lock_downgrade+0x6e0/0x6e0 [ 157.865771][ T5398] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.870974][ T5398] ? lockdep_hardirqs_on+0x7d/0x100 [ 157.876220][ T5398] ? _raw_spin_unlock_irq+0x2e/0x50 [ 157.881457][ T5398] ? ptrace_notify+0xfe/0x140 [ 157.886178][ T5398] do_syscall_64+0x39/0xb0 [ 157.890643][ T5398] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 157.896984][ T5398] RIP: 0033:0x7f607b0de549 [ 157.901405][ T5398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 157.921022][ T5398] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 157.929492][ T5398] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5398] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5398] close(3) = 0 [pid 5398] close(4) = 0 [pid 5398] close(5) = 0 [pid 5398] close(6) = 0 [pid 5398] close(7) = 0 [pid 5398] close(8) = -1 EBADF (Bad file descriptor) [pid 5398] close(9) = -1 EBADF (Bad file descriptor) [pid 5398] close(10) = -1 EBADF (Bad file descriptor) [pid 5398] close(11) = -1 EBADF (Bad file descriptor) [pid 5398] close(12) = -1 EBADF (Bad file descriptor) [pid 5398] close(13) = -1 EBADF (Bad file descriptor) [pid 5398] close(14) = -1 EBADF (Bad file descriptor) [pid 5398] close(15) = -1 EBADF (Bad file descriptor) [pid 5398] close(16) = -1 EBADF (Bad file descriptor) [pid 5398] close(17) = -1 EBADF (Bad file descriptor) [pid 5398] close(18) = -1 EBADF (Bad file descriptor) [pid 5398] close(19) = -1 EBADF (Bad file descriptor) [pid 5398] close(20) = -1 EBADF (Bad file descriptor) [pid 5398] close(21) = -1 EBADF (Bad file descriptor) [pid 5398] close(22) = -1 EBADF (Bad file descriptor) [pid 5398] close(23) = -1 EBADF (Bad file descriptor) [pid 5398] close(24) = -1 EBADF (Bad file descriptor) [pid 5398] close(25) = -1 EBADF (Bad file descriptor) [pid 5398] close(26) = -1 EBADF (Bad file descriptor) [pid 5398] close(27) = -1 EBADF (Bad file descriptor) [pid 5398] close(28) = -1 EBADF (Bad file descriptor) [pid 5398] close(29) = -1 EBADF (Bad file descriptor) [pid 5398] exit_group(0) = ? [pid 5398] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5399 attached , child_tidptr=0x555555eff5d0) = 298 [pid 5399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5399] setpgid(0, 0) = 0 [pid 5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5399] write(3, "1000", 4) = 4 [pid 5399] close(3) = 0 [pid 5399] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5399] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5399] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5399] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5399] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5399] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5399] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5399] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5399] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5399] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 157.937480][ T5398] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 157.945475][ T5398] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 157.953464][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 157.961497][ T5398] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 157.969481][ T5398] [pid 5399] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5399] write(7, "5", 1) = 1 [ 158.024678][ T5399] FAULT_INJECTION: forcing a failure. [ 158.024678][ T5399] name failslab, interval 1, probability 0, space 0, times 0 [ 158.037696][ T5399] CPU: 1 PID: 5399 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 158.047646][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 158.057724][ T5399] Call Trace: [ 158.061001][ T5399] [ 158.063933][ T5399] dump_stack_lvl+0xd1/0x138 [ 158.068533][ T5399] should_fail_ex.cold+0x5/0xa [ 158.073394][ T5399] ? io_issue_sqe+0x695/0x1250 [ 158.078168][ T5399] should_failslab+0x9/0x20 [ 158.082690][ T5399] __kmem_cache_alloc_node+0x5b/0x330 [ 158.088086][ T5399] ? ref_tracker_alloc+0x158/0x560 [ 158.093237][ T5399] kmalloc_trace+0x26/0x60 [ 158.097718][ T5399] ref_tracker_alloc+0x158/0x560 [ 158.102684][ T5399] ? __lock_acquire+0xbc3/0x56d0 [ 158.107642][ T5399] ? ref_tracker_free+0x6b0/0x6b0 [ 158.112721][ T5399] dst_init+0xe4/0x520 [ 158.116822][ T5399] dst_alloc+0x16f/0x1f0 [ 158.121092][ T5399] rt_dst_alloc+0x55/0x430 [ 158.125541][ T5399] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 158.131564][ T5399] ip_route_output_key_hash+0x18f/0x340 [ 158.137147][ T5399] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 158.143445][ T5399] dccp_v4_connect+0x7e1/0x1730 [ 158.148350][ T5399] __inet_stream_connect+0x69e/0xed0 [ 158.153710][ T5399] ? inet_listen+0x640/0x640 [ 158.158355][ T5399] ? mark_held_locks+0x9f/0xe0 [ 158.163165][ T5399] ? __local_bh_enable_ip+0xa4/0x130 [ 158.168485][ T5399] inet_stream_connect+0x57/0xa0 [ 158.173460][ T5399] ? __inet_stream_connect+0xed0/0xed0 [ 158.178953][ T5399] __sys_connect_file+0x153/0x1a0 [ 158.184009][ T5399] io_connect+0x3cc/0x720 [ 158.188371][ T5399] ? io_connect_prep+0x250/0x250 [ 158.193340][ T5399] ? receive_fd+0x110/0x110 [ 158.197892][ T5399] ? rcu_read_lock_sched_held+0x3e/0x70 [ 158.203464][ T5399] ? io_connect_prep+0x250/0x250 [ 158.208445][ T5399] io_issue_sqe+0x695/0x1250 [ 158.213081][ T5399] io_submit_sqes+0x96c/0x1e90 [ 158.217898][ T5399] __do_sys_io_uring_enter+0x103d/0x24e0 [ 158.223574][ T5399] ? io_submit_sqes+0x1e90/0x1e90 [ 158.228637][ T5399] ? ptrace_notify+0xfe/0x140 [ 158.233339][ T5399] ? lock_downgrade+0x6e0/0x6e0 [ 158.238221][ T5399] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.243447][ T5399] ? lockdep_hardirqs_on+0x7d/0x100 [ 158.248669][ T5399] ? _raw_spin_unlock_irq+0x2e/0x50 [ 158.253894][ T5399] ? ptrace_notify+0xfe/0x140 [ 158.258602][ T5399] do_syscall_64+0x39/0xb0 [ 158.263049][ T5399] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 158.268973][ T5399] RIP: 0033:0x7f607b0de549 [ 158.273404][ T5399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 158.293041][ T5399] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 158.301506][ T5399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 158.309499][ T5399] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 158.317494][ T5399] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5399] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5399] close(3) = 0 [pid 5399] close(4) = 0 [pid 5399] close(5) = 0 [pid 5399] close(6) = 0 [pid 5399] close(7) = 0 [pid 5399] close(8) = -1 EBADF (Bad file descriptor) [pid 5399] close(9) = -1 EBADF (Bad file descriptor) [pid 5399] close(10) = -1 EBADF (Bad file descriptor) [pid 5399] close(11) = -1 EBADF (Bad file descriptor) [pid 5399] close(12) = -1 EBADF (Bad file descriptor) [pid 5399] close(13) = -1 EBADF (Bad file descriptor) [pid 5399] close(14) = -1 EBADF (Bad file descriptor) [pid 5399] close(15) = -1 EBADF (Bad file descriptor) [pid 5399] close(16) = -1 EBADF (Bad file descriptor) [pid 5399] close(17) = -1 EBADF (Bad file descriptor) [pid 5399] close(18) = -1 EBADF (Bad file descriptor) [pid 5399] close(19) = -1 EBADF (Bad file descriptor) [pid 5399] close(20) = -1 EBADF (Bad file descriptor) [pid 5399] close(21) = -1 EBADF (Bad file descriptor) [pid 5399] close(22) = -1 EBADF (Bad file descriptor) [pid 5399] close(23) = -1 EBADF (Bad file descriptor) [pid 5399] close(24) = -1 EBADF (Bad file descriptor) [pid 5399] close(25) = -1 EBADF (Bad file descriptor) [pid 5399] close(26) = -1 EBADF (Bad file descriptor) [pid 5399] close(27) = -1 EBADF (Bad file descriptor) [pid 5399] close(28) = -1 EBADF (Bad file descriptor) [pid 5399] close(29) = -1 EBADF (Bad file descriptor) [pid 5399] exit_group(0) = ? [pid 5399] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5400 attached , child_tidptr=0x555555eff5d0) = 299 [pid 5400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5400] setpgid(0, 0) = 0 [pid 5400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5400] write(3, "1000", 4) = 4 [pid 5400] close(3) = 0 [pid 5400] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5400] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5400] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5400] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [ 158.325480][ T5399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 158.333468][ T5399] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 158.341488][ T5399] [pid 5400] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5400] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5400] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5400] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5400] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5400] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5400] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5400] write(7, "5", 1) = 1 [ 158.398748][ T5400] FAULT_INJECTION: forcing a failure. [ 158.398748][ T5400] name failslab, interval 1, probability 0, space 0, times 0 [ 158.411463][ T5400] CPU: 0 PID: 5400 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 158.421375][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 158.431467][ T5400] Call Trace: [ 158.434767][ T5400] [ 158.437726][ T5400] dump_stack_lvl+0xd1/0x138 [ 158.442385][ T5400] should_fail_ex.cold+0x5/0xa [ 158.447177][ T5400] ? __inet_hash_connect+0x95e/0x1ba0 [ 158.452555][ T5400] should_failslab+0x9/0x20 [ 158.457068][ T5400] kmem_cache_alloc+0x5a/0x320 [ 158.461853][ T5400] __inet_hash_connect+0x95e/0x1ba0 [ 158.467088][ T5400] ? __inet_lookup_listener+0xbf0/0xbf0 [ 158.472665][ T5400] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 158.479042][ T5400] dccp_v4_connect+0xb82/0x1730 [ 158.483946][ T5400] __inet_stream_connect+0x69e/0xed0 [ 158.489273][ T5400] ? inet_listen+0x640/0x640 [ 158.493899][ T5400] ? mark_held_locks+0x9f/0xe0 [ 158.498691][ T5400] ? __local_bh_enable_ip+0xa4/0x130 [ 158.504008][ T5400] inet_stream_connect+0x57/0xa0 [ 158.508978][ T5400] ? __inet_stream_connect+0xed0/0xed0 [ 158.514477][ T5400] __sys_connect_file+0x153/0x1a0 [ 158.519529][ T5400] io_connect+0x3cc/0x720 [ 158.523894][ T5400] ? io_connect_prep+0x250/0x250 [ 158.528866][ T5400] ? receive_fd+0x110/0x110 [ 158.533415][ T5400] ? rcu_read_lock_sched_held+0x3e/0x70 [ 158.538985][ T5400] ? io_connect_prep+0x250/0x250 [ 158.543967][ T5400] io_issue_sqe+0x695/0x1250 [ 158.548594][ T5400] io_submit_sqes+0x96c/0x1e90 [ 158.553404][ T5400] __do_sys_io_uring_enter+0x103d/0x24e0 [ 158.559102][ T5400] ? io_submit_sqes+0x1e90/0x1e90 [ 158.564179][ T5400] ? ptrace_notify+0xfe/0x140 [ 158.568905][ T5400] ? lock_downgrade+0x6e0/0x6e0 [ 158.573801][ T5400] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.579035][ T5400] ? lockdep_hardirqs_on+0x7d/0x100 [ 158.584260][ T5400] ? _raw_spin_unlock_irq+0x2e/0x50 [ 158.589491][ T5400] ? ptrace_notify+0xfe/0x140 [ 158.594198][ T5400] do_syscall_64+0x39/0xb0 [ 158.598645][ T5400] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 158.604565][ T5400] RIP: 0033:0x7f607b0de549 [ 158.609013][ T5400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 158.628661][ T5400] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 158.637117][ T5400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5400] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5400] close(3) = 0 [pid 5400] close(4) = 0 [pid 5400] close(5) = 0 [pid 5400] close(6) = 0 [pid 5400] close(7) = 0 [pid 5400] close(8) = -1 EBADF (Bad file descriptor) [pid 5400] close(9) = -1 EBADF (Bad file descriptor) [pid 5400] close(10) = -1 EBADF (Bad file descriptor) [pid 5400] close(11) = -1 EBADF (Bad file descriptor) [pid 5400] close(12) = -1 EBADF (Bad file descriptor) [pid 5400] close(13) = -1 EBADF (Bad file descriptor) [pid 5400] close(14) = -1 EBADF (Bad file descriptor) [pid 5400] close(15) = -1 EBADF (Bad file descriptor) [pid 5400] close(16) = -1 EBADF (Bad file descriptor) [pid 5400] close(17) = -1 EBADF (Bad file descriptor) [pid 5400] close(18) = -1 EBADF (Bad file descriptor) [pid 5400] close(19) = -1 EBADF (Bad file descriptor) [pid 5400] close(20) = -1 EBADF (Bad file descriptor) [pid 5400] close(21) = -1 EBADF (Bad file descriptor) [pid 5400] close(22) = -1 EBADF (Bad file descriptor) [pid 5400] close(23) = -1 EBADF (Bad file descriptor) [pid 5400] close(24) = -1 EBADF (Bad file descriptor) [pid 5400] close(25) = -1 EBADF (Bad file descriptor) [pid 5400] close(26) = -1 EBADF (Bad file descriptor) [pid 5400] close(27) = -1 EBADF (Bad file descriptor) [pid 5400] close(28) = -1 EBADF (Bad file descriptor) [pid 5400] close(29) = -1 EBADF (Bad file descriptor) [pid 5400] exit_group(0) = ? [pid 5400] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 300 ./strace-static-x86_64: Process 5401 attached [pid 5401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5401] setpgid(0, 0) = 0 [pid 5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5401] write(3, "1000", 4) = 4 [pid 5401] close(3) = 0 [pid 5401] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5401] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5401] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5401] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5401] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5401] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5401] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5401] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5401] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5401] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5401] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 158.645131][ T5400] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 158.653121][ T5400] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 158.661118][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 158.669139][ T5400] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 158.677175][ T5400] [pid 5401] write(7, "5", 1) = 1 [ 158.716557][ T5401] FAULT_INJECTION: forcing a failure. [ 158.716557][ T5401] name failslab, interval 1, probability 0, space 0, times 0 [ 158.729857][ T5401] CPU: 1 PID: 5401 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 158.739795][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 158.749852][ T5401] Call Trace: [ 158.753133][ T5401] [ 158.756078][ T5401] dump_stack_lvl+0xd1/0x138 [ 158.760676][ T5401] should_fail_ex.cold+0x5/0xa [ 158.765452][ T5401] ? io_issue_sqe+0x695/0x1250 [ 158.770248][ T5401] should_failslab+0x9/0x20 [ 158.774804][ T5401] __kmem_cache_alloc_node+0x5b/0x330 [ 158.780207][ T5401] ? ref_tracker_alloc+0x158/0x560 [ 158.785328][ T5401] kmalloc_trace+0x26/0x60 [ 158.789775][ T5401] ref_tracker_alloc+0x158/0x560 [ 158.795243][ T5401] ? __lock_acquire+0xbc3/0x56d0 [ 158.800188][ T5401] ? ref_tracker_free+0x6b0/0x6b0 [ 158.805250][ T5401] dst_init+0xe4/0x520 [ 158.809351][ T5401] dst_alloc+0x16f/0x1f0 [ 158.813627][ T5401] rt_dst_alloc+0x55/0x430 [ 158.818075][ T5401] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 158.824184][ T5401] ip_route_output_key_hash+0x18f/0x340 [ 158.829764][ T5401] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 158.836062][ T5401] dccp_v4_connect+0x7e1/0x1730 [ 158.840961][ T5401] __inet_stream_connect+0x69e/0xed0 [ 158.846289][ T5401] ? inet_listen+0x640/0x640 [ 158.850913][ T5401] ? mark_held_locks+0x9f/0xe0 [ 158.855700][ T5401] ? __local_bh_enable_ip+0xa4/0x130 [ 158.861011][ T5401] inet_stream_connect+0x57/0xa0 [ 158.865985][ T5401] ? __inet_stream_connect+0xed0/0xed0 [ 158.871475][ T5401] __sys_connect_file+0x153/0x1a0 [ 158.876528][ T5401] io_connect+0x3cc/0x720 [ 158.880896][ T5401] ? io_connect_prep+0x250/0x250 [ 158.885866][ T5401] ? receive_fd+0x110/0x110 [ 158.890412][ T5401] ? rcu_read_lock_sched_held+0x3e/0x70 [ 158.895982][ T5401] ? io_connect_prep+0x250/0x250 [ 158.900952][ T5401] io_issue_sqe+0x695/0x1250 [ 158.905578][ T5401] io_submit_sqes+0x96c/0x1e90 [ 158.910395][ T5401] __do_sys_io_uring_enter+0x103d/0x24e0 [ 158.916071][ T5401] ? io_submit_sqes+0x1e90/0x1e90 [ 158.921129][ T5401] ? ptrace_notify+0xfe/0x140 [ 158.925828][ T5401] ? lock_downgrade+0x6e0/0x6e0 [ 158.930710][ T5401] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.935941][ T5401] ? lockdep_hardirqs_on+0x7d/0x100 [ 158.941165][ T5401] ? _raw_spin_unlock_irq+0x2e/0x50 [ 158.946393][ T5401] ? ptrace_notify+0xfe/0x140 [ 158.951098][ T5401] do_syscall_64+0x39/0xb0 [ 158.955547][ T5401] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 158.961464][ T5401] RIP: 0033:0x7f607b0de549 [ 158.965898][ T5401] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 158.985529][ T5401] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 158.993965][ T5401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 159.001952][ T5401] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 159.010029][ T5401] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5401] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5401] close(3) = 0 [pid 5401] close(4) = 0 [pid 5401] close(5) = 0 [pid 5401] close(6) = 0 [pid 5401] close(7) = 0 [pid 5401] close(8) = -1 EBADF (Bad file descriptor) [pid 5401] close(9) = -1 EBADF (Bad file descriptor) [pid 5401] close(10) = -1 EBADF (Bad file descriptor) [pid 5401] close(11) = -1 EBADF (Bad file descriptor) [pid 5401] close(12) = -1 EBADF (Bad file descriptor) [pid 5401] close(13) = -1 EBADF (Bad file descriptor) [pid 5401] close(14) = -1 EBADF (Bad file descriptor) [pid 5401] close(15) = -1 EBADF (Bad file descriptor) [pid 5401] close(16) = -1 EBADF (Bad file descriptor) [pid 5401] close(17) = -1 EBADF (Bad file descriptor) [pid 5401] close(18) = -1 EBADF (Bad file descriptor) [pid 5401] close(19) = -1 EBADF (Bad file descriptor) [pid 5401] close(20) = -1 EBADF (Bad file descriptor) [pid 5401] close(21) = -1 EBADF (Bad file descriptor) [pid 5401] close(22) = -1 EBADF (Bad file descriptor) [pid 5401] close(23) = -1 EBADF (Bad file descriptor) [pid 5401] close(24) = -1 EBADF (Bad file descriptor) [pid 5401] close(25) = -1 EBADF (Bad file descriptor) [pid 5401] close(26) = -1 EBADF (Bad file descriptor) [pid 5401] close(27) = -1 EBADF (Bad file descriptor) [pid 5401] close(28) = -1 EBADF (Bad file descriptor) [pid 5401] close(29) = -1 EBADF (Bad file descriptor) [pid 5401] exit_group(0) = ? [pid 5401] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 301 ./strace-static-x86_64: Process 5402 attached [pid 5402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5402] setpgid(0, 0) = 0 [pid 5402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5402] write(3, "1000", 4) = 4 [pid 5402] close(3) = 0 [pid 5402] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5402] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5402] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5402] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5402] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5402] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5402] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5402] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5402] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [ 159.018019][ T5401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 159.026007][ T5401] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 159.034021][ T5401] [pid 5402] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5402] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5402] write(7, "5", 1) = 1 [ 159.083206][ T5402] FAULT_INJECTION: forcing a failure. [ 159.083206][ T5402] name failslab, interval 1, probability 0, space 0, times 0 [ 159.096064][ T5402] CPU: 0 PID: 5402 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 159.105989][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 159.116051][ T5402] Call Trace: [ 159.119333][ T5402] [ 159.122278][ T5402] dump_stack_lvl+0xd1/0x138 [ 159.126916][ T5402] should_fail_ex.cold+0x5/0xa [ 159.131682][ T5402] ? io_issue_sqe+0x695/0x1250 [ 159.136471][ T5402] should_failslab+0x9/0x20 [ 159.141023][ T5402] __kmem_cache_alloc_node+0x5b/0x330 [ 159.146436][ T5402] ? ref_tracker_alloc+0x158/0x560 [ 159.151606][ T5402] kmalloc_trace+0x26/0x60 [ 159.156078][ T5402] ref_tracker_alloc+0x158/0x560 [ 159.161055][ T5402] ? __lock_acquire+0xbc3/0x56d0 [ 159.166018][ T5402] ? ref_tracker_free+0x6b0/0x6b0 [ 159.171092][ T5402] dst_init+0xe4/0x520 [ 159.175167][ T5402] dst_alloc+0x16f/0x1f0 [ 159.179415][ T5402] rt_dst_alloc+0x55/0x430 [ 159.183842][ T5402] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 159.189850][ T5402] ip_route_output_key_hash+0x18f/0x340 [ 159.195405][ T5402] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 159.201691][ T5402] dccp_v4_connect+0x7e1/0x1730 [ 159.206595][ T5402] __inet_stream_connect+0x69e/0xed0 [ 159.211914][ T5402] ? inet_listen+0x640/0x640 [ 159.216535][ T5402] ? mark_held_locks+0x9f/0xe0 [ 159.221317][ T5402] ? __local_bh_enable_ip+0xa4/0x130 [ 159.226611][ T5402] inet_stream_connect+0x57/0xa0 [ 159.231572][ T5402] ? __inet_stream_connect+0xed0/0xed0 [ 159.237070][ T5402] __sys_connect_file+0x153/0x1a0 [ 159.242102][ T5402] io_connect+0x3cc/0x720 [ 159.246443][ T5402] ? io_connect_prep+0x250/0x250 [ 159.251401][ T5402] ? receive_fd+0x110/0x110 [ 159.255966][ T5402] ? rcu_read_lock_sched_held+0x3e/0x70 [ 159.261563][ T5402] ? io_connect_prep+0x250/0x250 [ 159.266542][ T5402] io_issue_sqe+0x695/0x1250 [ 159.271143][ T5402] io_submit_sqes+0x96c/0x1e90 [ 159.275953][ T5402] __do_sys_io_uring_enter+0x103d/0x24e0 [ 159.281647][ T5402] ? io_submit_sqes+0x1e90/0x1e90 [ 159.286703][ T5402] ? ptrace_notify+0xfe/0x140 [ 159.291384][ T5402] ? lock_downgrade+0x6e0/0x6e0 [ 159.296243][ T5402] ? _raw_spin_unlock_irq+0x23/0x50 [ 159.301474][ T5402] ? lockdep_hardirqs_on+0x7d/0x100 [ 159.306711][ T5402] ? _raw_spin_unlock_irq+0x2e/0x50 [ 159.311915][ T5402] ? ptrace_notify+0xfe/0x140 [ 159.316598][ T5402] do_syscall_64+0x39/0xb0 [ 159.321023][ T5402] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 159.326926][ T5402] RIP: 0033:0x7f607b0de549 [ 159.331370][ T5402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 159.351107][ T5402] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 159.359552][ T5402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 159.367542][ T5402] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 159.375564][ T5402] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5402] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5402] close(3) = 0 [pid 5402] close(4) = 0 [pid 5402] close(5) = 0 [pid 5402] close(6) = 0 [pid 5402] close(7) = 0 [pid 5402] close(8) = -1 EBADF (Bad file descriptor) [pid 5402] close(9) = -1 EBADF (Bad file descriptor) [pid 5402] close(10) = -1 EBADF (Bad file descriptor) [pid 5402] close(11) = -1 EBADF (Bad file descriptor) [pid 5402] close(12) = -1 EBADF (Bad file descriptor) [pid 5402] close(13) = -1 EBADF (Bad file descriptor) [pid 5402] close(14) = -1 EBADF (Bad file descriptor) [pid 5402] close(15) = -1 EBADF (Bad file descriptor) [pid 5402] close(16) = -1 EBADF (Bad file descriptor) [pid 5402] close(17) = -1 EBADF (Bad file descriptor) [pid 5402] close(18) = -1 EBADF (Bad file descriptor) [pid 5402] close(19) = -1 EBADF (Bad file descriptor) [pid 5402] close(20) = -1 EBADF (Bad file descriptor) [pid 5402] close(21) = -1 EBADF (Bad file descriptor) [pid 5402] close(22) = -1 EBADF (Bad file descriptor) [pid 5402] close(23) = -1 EBADF (Bad file descriptor) [pid 5402] close(24) = -1 EBADF (Bad file descriptor) [pid 5402] close(25) = -1 EBADF (Bad file descriptor) [pid 5402] close(26) = -1 EBADF (Bad file descriptor) [pid 5402] close(27) = -1 EBADF (Bad file descriptor) [pid 5402] close(28) = -1 EBADF (Bad file descriptor) [pid 5402] close(29) = -1 EBADF (Bad file descriptor) [pid 5402] exit_group(0) = ? [pid 5402] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 302 ./strace-static-x86_64: Process 5403 attached [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5403] setpgid(0, 0) = 0 [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5403] write(3, "1000", 4) = 4 [pid 5403] close(3) = 0 [pid 5403] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5403] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5403] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5403] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5403] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5403] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5403] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5403] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5403] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5403] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5403] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5403] write(7, "5", 1) = 1 [ 159.383568][ T5402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 159.391544][ T5402] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 159.399533][ T5402] [ 159.444463][ T5403] FAULT_INJECTION: forcing a failure. [ 159.444463][ T5403] name failslab, interval 1, probability 0, space 0, times 0 [ 159.457272][ T5403] CPU: 0 PID: 5403 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 159.467172][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 159.477252][ T5403] Call Trace: [ 159.480534][ T5403] [ 159.483473][ T5403] dump_stack_lvl+0xd1/0x138 [ 159.488086][ T5403] should_fail_ex.cold+0x5/0xa [ 159.492880][ T5403] ? __inet_hash_connect+0x95e/0x1ba0 [ 159.498263][ T5403] should_failslab+0x9/0x20 [ 159.502810][ T5403] kmem_cache_alloc+0x5a/0x320 [ 159.507601][ T5403] __inet_hash_connect+0x95e/0x1ba0 [ 159.512811][ T5403] ? __inet_lookup_listener+0xbf0/0xbf0 [ 159.518371][ T5403] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 159.524710][ T5403] dccp_v4_connect+0xb82/0x1730 [ 159.529577][ T5403] __inet_stream_connect+0x69e/0xed0 [ 159.534892][ T5403] ? inet_listen+0x640/0x640 [ 159.539550][ T5403] ? mark_held_locks+0x9f/0xe0 [ 159.544320][ T5403] ? __local_bh_enable_ip+0xa4/0x130 [ 159.549614][ T5403] inet_stream_connect+0x57/0xa0 [ 159.554559][ T5403] ? __inet_stream_connect+0xed0/0xed0 [ 159.560027][ T5403] __sys_connect_file+0x153/0x1a0 [ 159.565073][ T5403] io_connect+0x3cc/0x720 [ 159.569444][ T5403] ? io_connect_prep+0x250/0x250 [ 159.574386][ T5403] ? receive_fd+0x110/0x110 [ 159.578930][ T5403] ? rcu_read_lock_sched_held+0x3e/0x70 [ 159.584484][ T5403] ? io_connect_prep+0x250/0x250 [ 159.589436][ T5403] io_issue_sqe+0x695/0x1250 [ 159.594153][ T5403] io_submit_sqes+0x96c/0x1e90 [ 159.598956][ T5403] __do_sys_io_uring_enter+0x103d/0x24e0 [ 159.604653][ T5403] ? io_submit_sqes+0x1e90/0x1e90 [ 159.609716][ T5403] ? ptrace_notify+0xfe/0x140 [ 159.614401][ T5403] ? lock_downgrade+0x6e0/0x6e0 [ 159.619281][ T5403] ? _raw_spin_unlock_irq+0x23/0x50 [ 159.624524][ T5403] ? lockdep_hardirqs_on+0x7d/0x100 [ 159.629727][ T5403] ? _raw_spin_unlock_irq+0x2e/0x50 [ 159.635651][ T5403] ? ptrace_notify+0xfe/0x140 [ 159.640344][ T5403] do_syscall_64+0x39/0xb0 [ 159.644797][ T5403] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 159.650718][ T5403] RIP: 0033:0x7f607b0de549 [ 159.655155][ T5403] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 159.674786][ T5403] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 159.683240][ T5403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5403] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5403] close(3) = 0 [pid 5403] close(4) = 0 [pid 5403] close(5) = 0 [pid 5403] close(6) = 0 [pid 5403] close(7) = 0 [pid 5403] close(8) = -1 EBADF (Bad file descriptor) [pid 5403] close(9) = -1 EBADF (Bad file descriptor) [pid 5403] close(10) = -1 EBADF (Bad file descriptor) [pid 5403] close(11) = -1 EBADF (Bad file descriptor) [pid 5403] close(12) = -1 EBADF (Bad file descriptor) [pid 5403] close(13) = -1 EBADF (Bad file descriptor) [pid 5403] close(14) = -1 EBADF (Bad file descriptor) [pid 5403] close(15) = -1 EBADF (Bad file descriptor) [pid 5403] close(16) = -1 EBADF (Bad file descriptor) [pid 5403] close(17) = -1 EBADF (Bad file descriptor) [pid 5403] close(18) = -1 EBADF (Bad file descriptor) [pid 5403] close(19) = -1 EBADF (Bad file descriptor) [pid 5403] close(20) = -1 EBADF (Bad file descriptor) [pid 5403] close(21) = -1 EBADF (Bad file descriptor) [pid 5403] close(22) = -1 EBADF (Bad file descriptor) [pid 5403] close(23) = -1 EBADF (Bad file descriptor) [pid 5403] close(24) = -1 EBADF (Bad file descriptor) [pid 5403] close(25) = -1 EBADF (Bad file descriptor) [pid 5403] close(26) = -1 EBADF (Bad file descriptor) [pid 5403] close(27) = -1 EBADF (Bad file descriptor) [pid 5403] close(28) = -1 EBADF (Bad file descriptor) [pid 5403] close(29) = -1 EBADF (Bad file descriptor) [pid 5403] exit_group(0) = ? [pid 5403] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 303 ./strace-static-x86_64: Process 5404 attached [pid 5404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5404] setpgid(0, 0) = 0 [pid 5404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5404] write(3, "1000", 4) = 4 [pid 5404] close(3) = 0 [pid 5404] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5404] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5404] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5404] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5404] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5404] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5404] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5404] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5404] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5404] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 159.691234][ T5403] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 159.699200][ T5403] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 159.707173][ T5403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 159.715146][ T5403] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 159.723134][ T5403] [pid 5404] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5404] write(7, "5", 1) = 1 [ 159.776975][ T5404] FAULT_INJECTION: forcing a failure. [ 159.776975][ T5404] name failslab, interval 1, probability 0, space 0, times 0 [ 159.789674][ T5404] CPU: 0 PID: 5404 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 159.799579][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 159.809663][ T5404] Call Trace: [ 159.812941][ T5404] [ 159.815881][ T5404] dump_stack_lvl+0xd1/0x138 [ 159.820519][ T5404] should_fail_ex.cold+0x5/0xa [ 159.825291][ T5404] ? __inet_hash_connect+0x95e/0x1ba0 [ 159.830662][ T5404] should_failslab+0x9/0x20 [ 159.835171][ T5404] kmem_cache_alloc+0x5a/0x320 [ 159.839937][ T5404] __inet_hash_connect+0x95e/0x1ba0 [ 159.845154][ T5404] ? __inet_lookup_listener+0xbf0/0xbf0 [ 159.850731][ T5404] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 159.857096][ T5404] dccp_v4_connect+0xb82/0x1730 [ 159.861993][ T5404] __inet_stream_connect+0x69e/0xed0 [ 159.867319][ T5404] ? inet_listen+0x640/0x640 [ 159.871945][ T5404] ? mark_held_locks+0x9f/0xe0 [ 159.876736][ T5404] ? __local_bh_enable_ip+0xa4/0x130 [ 159.882049][ T5404] inet_stream_connect+0x57/0xa0 [ 159.887021][ T5404] ? __inet_stream_connect+0xed0/0xed0 [ 159.892515][ T5404] __sys_connect_file+0x153/0x1a0 [ 159.897570][ T5404] io_connect+0x3cc/0x720 [ 159.901935][ T5404] ? io_connect_prep+0x250/0x250 [ 159.906937][ T5404] ? receive_fd+0x110/0x110 [ 159.911479][ T5404] ? rcu_read_lock_sched_held+0x3e/0x70 [ 159.917049][ T5404] ? io_connect_prep+0x250/0x250 [ 159.922027][ T5404] io_issue_sqe+0x695/0x1250 [ 159.926664][ T5404] io_submit_sqes+0x96c/0x1e90 [ 159.931476][ T5404] __do_sys_io_uring_enter+0x103d/0x24e0 [ 159.937151][ T5404] ? io_submit_sqes+0x1e90/0x1e90 [ 159.942208][ T5404] ? ptrace_notify+0xfe/0x140 [ 159.946915][ T5404] ? lock_downgrade+0x6e0/0x6e0 [ 159.951797][ T5404] ? _raw_spin_unlock_irq+0x23/0x50 [ 159.957024][ T5404] ? lockdep_hardirqs_on+0x7d/0x100 [ 159.962247][ T5404] ? _raw_spin_unlock_irq+0x2e/0x50 [ 159.967476][ T5404] ? ptrace_notify+0xfe/0x140 [ 159.972179][ T5404] do_syscall_64+0x39/0xb0 [ 159.976623][ T5404] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 159.982555][ T5404] RIP: 0033:0x7f607b0de549 [ 159.986985][ T5404] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 160.006615][ T5404] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 160.015053][ T5404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5404] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5404] close(3) = 0 [pid 5404] close(4) = 0 [pid 5404] close(5) = 0 [pid 5404] close(6) = 0 [pid 5404] close(7) = 0 [pid 5404] close(8) = -1 EBADF (Bad file descriptor) [pid 5404] close(9) = -1 EBADF (Bad file descriptor) [pid 5404] close(10) = -1 EBADF (Bad file descriptor) [pid 5404] close(11) = -1 EBADF (Bad file descriptor) [pid 5404] close(12) = -1 EBADF (Bad file descriptor) [pid 5404] close(13) = -1 EBADF (Bad file descriptor) [pid 5404] close(14) = -1 EBADF (Bad file descriptor) [pid 5404] close(15) = -1 EBADF (Bad file descriptor) [pid 5404] close(16) = -1 EBADF (Bad file descriptor) [pid 5404] close(17) = -1 EBADF (Bad file descriptor) [pid 5404] close(18) = -1 EBADF (Bad file descriptor) [pid 5404] close(19) = -1 EBADF (Bad file descriptor) [pid 5404] close(20) = -1 EBADF (Bad file descriptor) [pid 5404] close(21) = -1 EBADF (Bad file descriptor) [pid 5404] close(22) = -1 EBADF (Bad file descriptor) [pid 5404] close(23) = -1 EBADF (Bad file descriptor) [pid 5404] close(24) = -1 EBADF (Bad file descriptor) [pid 5404] close(25) = -1 EBADF (Bad file descriptor) [pid 5404] close(26) = -1 EBADF (Bad file descriptor) [pid 5404] close(27) = -1 EBADF (Bad file descriptor) [pid 5404] close(28) = -1 EBADF (Bad file descriptor) [pid 5404] close(29) = -1 EBADF (Bad file descriptor) [pid 5404] exit_group(0) = ? [pid 5404] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 304 ./strace-static-x86_64: Process 5405 attached [pid 5405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5405] setpgid(0, 0) = 0 [pid 5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5405] write(3, "1000", 4) = 4 [pid 5405] close(3) = 0 [pid 5405] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5405] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5405] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5405] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5405] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5405] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5405] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5405] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5405] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5405] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5405] write(7, "5", 1) = 1 [ 160.023041][ T5404] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 160.031028][ T5404] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 160.039033][ T5404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 160.047023][ T5404] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 160.055035][ T5404] [ 160.107467][ T5405] FAULT_INJECTION: forcing a failure. [ 160.107467][ T5405] name failslab, interval 1, probability 0, space 0, times 0 [ 160.120187][ T5405] CPU: 0 PID: 5405 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 160.130077][ T5405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 160.140124][ T5405] Call Trace: [ 160.143396][ T5405] [ 160.146322][ T5405] dump_stack_lvl+0xd1/0x138 [ 160.150915][ T5405] should_fail_ex.cold+0x5/0xa [ 160.155679][ T5405] ? __inet_hash_connect+0x95e/0x1ba0 [ 160.161046][ T5405] should_failslab+0x9/0x20 [ 160.165550][ T5405] kmem_cache_alloc+0x5a/0x320 [ 160.170330][ T5405] __inet_hash_connect+0x95e/0x1ba0 [ 160.175586][ T5405] ? __inet_lookup_listener+0xbf0/0xbf0 [ 160.181162][ T5405] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 160.187536][ T5405] dccp_v4_connect+0xb82/0x1730 [ 160.192435][ T5405] __inet_stream_connect+0x69e/0xed0 [ 160.197759][ T5405] ? inet_listen+0x640/0x640 [ 160.202382][ T5405] ? mark_held_locks+0x9f/0xe0 [ 160.207168][ T5405] ? __local_bh_enable_ip+0xa4/0x130 [ 160.212566][ T5405] inet_stream_connect+0x57/0xa0 [ 160.217536][ T5405] ? __inet_stream_connect+0xed0/0xed0 [ 160.223034][ T5405] __sys_connect_file+0x153/0x1a0 [ 160.228081][ T5405] io_connect+0x3cc/0x720 [ 160.232448][ T5405] ? io_connect_prep+0x250/0x250 [ 160.237413][ T5405] ? receive_fd+0x110/0x110 [ 160.241953][ T5405] ? rcu_read_lock_sched_held+0x3e/0x70 [ 160.247520][ T5405] ? io_connect_prep+0x250/0x250 [ 160.252492][ T5405] io_issue_sqe+0x695/0x1250 [ 160.257112][ T5405] io_submit_sqes+0x96c/0x1e90 [ 160.261925][ T5405] __do_sys_io_uring_enter+0x103d/0x24e0 [ 160.267679][ T5405] ? io_submit_sqes+0x1e90/0x1e90 [ 160.272741][ T5405] ? ptrace_notify+0xfe/0x140 [ 160.277491][ T5405] ? lock_downgrade+0x6e0/0x6e0 [ 160.282368][ T5405] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.287649][ T5405] ? lockdep_hardirqs_on+0x7d/0x100 [ 160.292865][ T5405] ? _raw_spin_unlock_irq+0x2e/0x50 [ 160.298083][ T5405] ? ptrace_notify+0xfe/0x140 [ 160.302782][ T5405] do_syscall_64+0x39/0xb0 [ 160.307233][ T5405] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.313147][ T5405] RIP: 0033:0x7f607b0de549 [ 160.317581][ T5405] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 160.337297][ T5405] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 160.345733][ T5405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5405] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5405] close(3) = 0 [pid 5405] close(4) = 0 [pid 5405] close(5) = 0 [pid 5405] close(6) = 0 [pid 5405] close(7) = 0 [pid 5405] close(8) = -1 EBADF (Bad file descriptor) [pid 5405] close(9) = -1 EBADF (Bad file descriptor) [pid 5405] close(10) = -1 EBADF (Bad file descriptor) [pid 5405] close(11) = -1 EBADF (Bad file descriptor) [pid 5405] close(12) = -1 EBADF (Bad file descriptor) [pid 5405] close(13) = -1 EBADF (Bad file descriptor) [pid 5405] close(14) = -1 EBADF (Bad file descriptor) [pid 5405] close(15) = -1 EBADF (Bad file descriptor) [pid 5405] close(16) = -1 EBADF (Bad file descriptor) [pid 5405] close(17) = -1 EBADF (Bad file descriptor) [pid 5405] close(18) = -1 EBADF (Bad file descriptor) [pid 5405] close(19) = -1 EBADF (Bad file descriptor) [pid 5405] close(20) = -1 EBADF (Bad file descriptor) [pid 5405] close(21) = -1 EBADF (Bad file descriptor) [pid 5405] close(22) = -1 EBADF (Bad file descriptor) [pid 5405] close(23) = -1 EBADF (Bad file descriptor) [pid 5405] close(24) = -1 EBADF (Bad file descriptor) [pid 5405] close(25) = -1 EBADF (Bad file descriptor) [pid 5405] close(26) = -1 EBADF (Bad file descriptor) [pid 5405] close(27) = -1 EBADF (Bad file descriptor) [pid 5405] close(28) = -1 EBADF (Bad file descriptor) [pid 5405] close(29) = -1 EBADF (Bad file descriptor) [pid 5405] exit_group(0) = ? [pid 5405] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 305 ./strace-static-x86_64: Process 5406 attached [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5406] setpgid(0, 0) = 0 [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5406] write(3, "1000", 4) = 4 [pid 5406] close(3) = 0 [pid 5406] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5406] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5406] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5406] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5406] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5406] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5406] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5406] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5406] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5406] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5406] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5406] write(7, "5", 1) = 1 [ 160.353720][ T5405] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 160.361704][ T5405] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 160.369695][ T5405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 160.377683][ T5405] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 160.385692][ T5405] [ 160.427853][ T5406] FAULT_INJECTION: forcing a failure. [ 160.427853][ T5406] name failslab, interval 1, probability 0, space 0, times 0 [ 160.440555][ T5406] CPU: 0 PID: 5406 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 160.450540][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 160.460622][ T5406] Call Trace: [ 160.463999][ T5406] [ 160.466926][ T5406] dump_stack_lvl+0xd1/0x138 [ 160.471555][ T5406] should_fail_ex.cold+0x5/0xa [ 160.476333][ T5406] ? __inet_hash_connect+0x95e/0x1ba0 [ 160.481723][ T5406] should_failslab+0x9/0x20 [ 160.486270][ T5406] kmem_cache_alloc+0x5a/0x320 [ 160.491047][ T5406] __inet_hash_connect+0x95e/0x1ba0 [ 160.496265][ T5406] ? __inet_lookup_listener+0xbf0/0xbf0 [ 160.501833][ T5406] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 160.508295][ T5406] dccp_v4_connect+0xb82/0x1730 [ 160.513203][ T5406] __inet_stream_connect+0x69e/0xed0 [ 160.518533][ T5406] ? inet_listen+0x640/0x640 [ 160.523204][ T5406] ? mark_held_locks+0x9f/0xe0 [ 160.527997][ T5406] ? __local_bh_enable_ip+0xa4/0x130 [ 160.533396][ T5406] inet_stream_connect+0x57/0xa0 [ 160.538368][ T5406] ? __inet_stream_connect+0xed0/0xed0 [ 160.543858][ T5406] __sys_connect_file+0x153/0x1a0 [ 160.549079][ T5406] io_connect+0x3cc/0x720 [ 160.553442][ T5406] ? io_connect_prep+0x250/0x250 [ 160.558407][ T5406] ? receive_fd+0x110/0x110 [ 160.562947][ T5406] ? rcu_read_lock_sched_held+0x3e/0x70 [ 160.568513][ T5406] ? io_connect_prep+0x250/0x250 [ 160.573486][ T5406] io_issue_sqe+0x695/0x1250 [ 160.578107][ T5406] io_submit_sqes+0x96c/0x1e90 [ 160.582917][ T5406] __do_sys_io_uring_enter+0x103d/0x24e0 [ 160.588673][ T5406] ? io_submit_sqes+0x1e90/0x1e90 [ 160.593730][ T5406] ? ptrace_notify+0xfe/0x140 [ 160.598430][ T5406] ? lock_downgrade+0x6e0/0x6e0 [ 160.603310][ T5406] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.608537][ T5406] ? lockdep_hardirqs_on+0x7d/0x100 [ 160.613756][ T5406] ? _raw_spin_unlock_irq+0x2e/0x50 [ 160.618980][ T5406] ? ptrace_notify+0xfe/0x140 [ 160.623694][ T5406] do_syscall_64+0x39/0xb0 [ 160.628139][ T5406] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.634053][ T5406] RIP: 0033:0x7f607b0de549 [ 160.638488][ T5406] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 160.658208][ T5406] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 160.666641][ T5406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5406] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5406] close(3) = 0 [pid 5406] close(4) = 0 [pid 5406] close(5) = 0 [pid 5406] close(6) = 0 [pid 5406] close(7) = 0 [pid 5406] close(8) = -1 EBADF (Bad file descriptor) [pid 5406] close(9) = -1 EBADF (Bad file descriptor) [pid 5406] close(10) = -1 EBADF (Bad file descriptor) [pid 5406] close(11) = -1 EBADF (Bad file descriptor) [pid 5406] close(12) = -1 EBADF (Bad file descriptor) [pid 5406] close(13) = -1 EBADF (Bad file descriptor) [pid 5406] close(14) = -1 EBADF (Bad file descriptor) [pid 5406] close(15) = -1 EBADF (Bad file descriptor) [pid 5406] close(16) = -1 EBADF (Bad file descriptor) [pid 5406] close(17) = -1 EBADF (Bad file descriptor) [pid 5406] close(18) = -1 EBADF (Bad file descriptor) [pid 5406] close(19) = -1 EBADF (Bad file descriptor) [pid 5406] close(20) = -1 EBADF (Bad file descriptor) [pid 5406] close(21) = -1 EBADF (Bad file descriptor) [pid 5406] close(22) = -1 EBADF (Bad file descriptor) [pid 5406] close(23) = -1 EBADF (Bad file descriptor) [pid 5406] close(24) = -1 EBADF (Bad file descriptor) [pid 5406] close(25) = -1 EBADF (Bad file descriptor) [pid 5406] close(26) = -1 EBADF (Bad file descriptor) [pid 5406] close(27) = -1 EBADF (Bad file descriptor) [pid 5406] close(28) = -1 EBADF (Bad file descriptor) [pid 5406] close(29) = -1 EBADF (Bad file descriptor) [pid 5406] exit_group(0) = ? [pid 5406] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 306 ./strace-static-x86_64: Process 5407 attached [pid 5407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5407] setpgid(0, 0) = 0 [pid 5407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5407] write(3, "1000", 4) = 4 [pid 5407] close(3) = 0 [pid 5407] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5407] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5407] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5407] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5407] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5407] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5407] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5407] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5407] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5407] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5407] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5407] write(7, "5", 1) = 1 [ 160.674626][ T5406] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 160.682614][ T5406] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 160.690598][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 160.698584][ T5406] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 160.706588][ T5406] [ 160.748223][ T5407] FAULT_INJECTION: forcing a failure. [ 160.748223][ T5407] name failslab, interval 1, probability 0, space 0, times 0 [ 160.761046][ T5407] CPU: 0 PID: 5407 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 160.771166][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 160.781260][ T5407] Call Trace: [ 160.784570][ T5407] [ 160.787499][ T5407] dump_stack_lvl+0xd1/0x138 [ 160.792102][ T5407] should_fail_ex.cold+0x5/0xa [ 160.796874][ T5407] ? __inet_hash_connect+0x95e/0x1ba0 [ 160.802261][ T5407] should_failslab+0x9/0x20 [ 160.806813][ T5407] kmem_cache_alloc+0x5a/0x320 [ 160.811581][ T5407] __inet_hash_connect+0x95e/0x1ba0 [ 160.816817][ T5407] ? __inet_lookup_listener+0xbf0/0xbf0 [ 160.822433][ T5407] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 160.828806][ T5407] dccp_v4_connect+0xb82/0x1730 [ 160.833708][ T5407] __inet_stream_connect+0x69e/0xed0 [ 160.839031][ T5407] ? inet_listen+0x640/0x640 [ 160.843651][ T5407] ? mark_held_locks+0x9f/0xe0 [ 160.848435][ T5407] ? __local_bh_enable_ip+0xa4/0x130 [ 160.853747][ T5407] inet_stream_connect+0x57/0xa0 [ 160.858713][ T5407] ? __inet_stream_connect+0xed0/0xed0 [ 160.864205][ T5407] __sys_connect_file+0x153/0x1a0 [ 160.869255][ T5407] io_connect+0x3cc/0x720 [ 160.873619][ T5407] ? io_connect_prep+0x250/0x250 [ 160.878584][ T5407] ? receive_fd+0x110/0x110 [ 160.883127][ T5407] ? rcu_read_lock_sched_held+0x3e/0x70 [ 160.888697][ T5407] ? io_connect_prep+0x250/0x250 [ 160.893667][ T5407] io_issue_sqe+0x695/0x1250 [ 160.898293][ T5407] io_submit_sqes+0x96c/0x1e90 [ 160.903107][ T5407] __do_sys_io_uring_enter+0x103d/0x24e0 [ 160.908775][ T5407] ? io_submit_sqes+0x1e90/0x1e90 [ 160.913839][ T5407] ? ptrace_notify+0xfe/0x140 [ 160.918535][ T5407] ? lock_downgrade+0x6e0/0x6e0 [ 160.923413][ T5407] ? _raw_spin_unlock_irq+0x23/0x50 [ 160.928640][ T5407] ? lockdep_hardirqs_on+0x7d/0x100 [ 160.933865][ T5407] ? _raw_spin_unlock_irq+0x2e/0x50 [ 160.939097][ T5407] ? ptrace_notify+0xfe/0x140 [ 160.943818][ T5407] do_syscall_64+0x39/0xb0 [ 160.948270][ T5407] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 160.954273][ T5407] RIP: 0033:0x7f607b0de549 [ 160.958700][ T5407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 160.978328][ T5407] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 160.986764][ T5407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5407] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5407] close(3) = 0 [pid 5407] close(4) = 0 [pid 5407] close(5) = 0 [pid 5407] close(6) = 0 [pid 5407] close(7) = 0 [pid 5407] close(8) = -1 EBADF (Bad file descriptor) [pid 5407] close(9) = -1 EBADF (Bad file descriptor) [pid 5407] close(10) = -1 EBADF (Bad file descriptor) [pid 5407] close(11) = -1 EBADF (Bad file descriptor) [pid 5407] close(12) = -1 EBADF (Bad file descriptor) [pid 5407] close(13) = -1 EBADF (Bad file descriptor) [pid 5407] close(14) = -1 EBADF (Bad file descriptor) [pid 5407] close(15) = -1 EBADF (Bad file descriptor) [pid 5407] close(16) = -1 EBADF (Bad file descriptor) [pid 5407] close(17) = -1 EBADF (Bad file descriptor) [pid 5407] close(18) = -1 EBADF (Bad file descriptor) [pid 5407] close(19) = -1 EBADF (Bad file descriptor) [pid 5407] close(20) = -1 EBADF (Bad file descriptor) [pid 5407] close(21) = -1 EBADF (Bad file descriptor) [pid 5407] close(22) = -1 EBADF (Bad file descriptor) [pid 5407] close(23) = -1 EBADF (Bad file descriptor) [pid 5407] close(24) = -1 EBADF (Bad file descriptor) [pid 5407] close(25) = -1 EBADF (Bad file descriptor) [pid 5407] close(26) = -1 EBADF (Bad file descriptor) [pid 5407] close(27) = -1 EBADF (Bad file descriptor) [pid 5407] close(28) = -1 EBADF (Bad file descriptor) [pid 5407] close(29) = -1 EBADF (Bad file descriptor) [pid 5407] exit_group(0) = ? [pid 5407] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 307 ./strace-static-x86_64: Process 5408 attached [pid 5408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5408] setpgid(0, 0) = 0 [pid 5408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5408] write(3, "1000", 4) = 4 [pid 5408] close(3) = 0 [pid 5408] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5408] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5408] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5408] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5408] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5408] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5408] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5408] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5408] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5408] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5408] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5408] write(7, "5", 1) = 1 [ 160.994759][ T5407] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 161.002745][ T5407] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 161.010732][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 161.018721][ T5407] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 161.026729][ T5407] [ 161.069498][ T5408] FAULT_INJECTION: forcing a failure. [ 161.069498][ T5408] name failslab, interval 1, probability 0, space 0, times 0 [ 161.082176][ T5408] CPU: 1 PID: 5408 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 161.092088][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 161.102171][ T5408] Call Trace: [ 161.105452][ T5408] [ 161.108380][ T5408] dump_stack_lvl+0xd1/0x138 [ 161.112984][ T5408] should_fail_ex.cold+0x5/0xa [ 161.117765][ T5408] ? __inet_hash_connect+0x95e/0x1ba0 [ 161.123209][ T5408] should_failslab+0x9/0x20 [ 161.127761][ T5408] kmem_cache_alloc+0x5a/0x320 [ 161.132558][ T5408] __inet_hash_connect+0x95e/0x1ba0 [ 161.137853][ T5408] ? __inet_lookup_listener+0xbf0/0xbf0 [ 161.143420][ T5408] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 161.149793][ T5408] dccp_v4_connect+0xb82/0x1730 [ 161.154708][ T5408] __inet_stream_connect+0x69e/0xed0 [ 161.160040][ T5408] ? inet_listen+0x640/0x640 [ 161.164668][ T5408] ? mark_held_locks+0x9f/0xe0 [ 161.169459][ T5408] ? __local_bh_enable_ip+0xa4/0x130 [ 161.174781][ T5408] inet_stream_connect+0x57/0xa0 [ 161.179751][ T5408] ? __inet_stream_connect+0xed0/0xed0 [ 161.185255][ T5408] __sys_connect_file+0x153/0x1a0 [ 161.190306][ T5408] io_connect+0x3cc/0x720 [ 161.194678][ T5408] ? io_connect_prep+0x250/0x250 [ 161.199650][ T5408] ? receive_fd+0x110/0x110 [ 161.204196][ T5408] ? rcu_read_lock_sched_held+0x3e/0x70 [ 161.209768][ T5408] ? io_connect_prep+0x250/0x250 [ 161.214744][ T5408] io_issue_sqe+0x695/0x1250 [ 161.219380][ T5408] io_submit_sqes+0x96c/0x1e90 [ 161.224191][ T5408] __do_sys_io_uring_enter+0x103d/0x24e0 [ 161.229948][ T5408] ? io_submit_sqes+0x1e90/0x1e90 [ 161.235018][ T5408] ? ptrace_notify+0xfe/0x140 [ 161.239716][ T5408] ? lock_downgrade+0x6e0/0x6e0 [ 161.244687][ T5408] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.249910][ T5408] ? lockdep_hardirqs_on+0x7d/0x100 [ 161.255132][ T5408] ? _raw_spin_unlock_irq+0x2e/0x50 [ 161.260350][ T5408] ? ptrace_notify+0xfe/0x140 [ 161.265052][ T5408] do_syscall_64+0x39/0xb0 [ 161.269499][ T5408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 161.275412][ T5408] RIP: 0033:0x7f607b0de549 [ 161.279845][ T5408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 161.299478][ T5408] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 161.307913][ T5408] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5408] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5408] close(3) = 0 [pid 5408] close(4) = 0 [pid 5408] close(5) = 0 [pid 5408] close(6) = 0 [pid 5408] close(7) = 0 [pid 5408] close(8) = -1 EBADF (Bad file descriptor) [pid 5408] close(9) = -1 EBADF (Bad file descriptor) [pid 5408] close(10) = -1 EBADF (Bad file descriptor) [pid 5408] close(11) = -1 EBADF (Bad file descriptor) [pid 5408] close(12) = -1 EBADF (Bad file descriptor) [pid 5408] close(13) = -1 EBADF (Bad file descriptor) [pid 5408] close(14) = -1 EBADF (Bad file descriptor) [pid 5408] close(15) = -1 EBADF (Bad file descriptor) [pid 5408] close(16) = -1 EBADF (Bad file descriptor) [pid 5408] close(17) = -1 EBADF (Bad file descriptor) [pid 5408] close(18) = -1 EBADF (Bad file descriptor) [pid 5408] close(19) = -1 EBADF (Bad file descriptor) [pid 5408] close(20) = -1 EBADF (Bad file descriptor) [pid 5408] close(21) = -1 EBADF (Bad file descriptor) [pid 5408] close(22) = -1 EBADF (Bad file descriptor) [pid 5408] close(23) = -1 EBADF (Bad file descriptor) [pid 5408] close(24) = -1 EBADF (Bad file descriptor) [pid 5408] close(25) = -1 EBADF (Bad file descriptor) [pid 5408] close(26) = -1 EBADF (Bad file descriptor) [pid 5408] close(27) = -1 EBADF (Bad file descriptor) [pid 5408] close(28) = -1 EBADF (Bad file descriptor) [pid 5408] close(29) = -1 EBADF (Bad file descriptor) [pid 5408] exit_group(0) = ? [pid 5408] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 308 ./strace-static-x86_64: Process 5409 attached [pid 5409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5409] setpgid(0, 0) = 0 [pid 5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5409] write(3, "1000", 4) = 4 [pid 5409] close(3) = 0 [pid 5409] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5409] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5409] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5409] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5409] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5409] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5409] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5409] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5409] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5409] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5409] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5409] write(7, "5", 1) = 1 [ 161.315898][ T5408] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 161.323882][ T5408] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 161.331875][ T5408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 161.339867][ T5408] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 161.347874][ T5408] [ 161.382629][ T5409] FAULT_INJECTION: forcing a failure. [ 161.382629][ T5409] name failslab, interval 1, probability 0, space 0, times 0 [ 161.395336][ T5409] CPU: 0 PID: 5409 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 161.405237][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 161.415315][ T5409] Call Trace: [ 161.418593][ T5409] [ 161.421527][ T5409] dump_stack_lvl+0xd1/0x138 [ 161.426126][ T5409] should_fail_ex.cold+0x5/0xa [ 161.430913][ T5409] ? __inet_hash_connect+0x95e/0x1ba0 [ 161.436323][ T5409] should_failslab+0x9/0x20 [ 161.440855][ T5409] kmem_cache_alloc+0x5a/0x320 [ 161.445642][ T5409] __inet_hash_connect+0x95e/0x1ba0 [ 161.450893][ T5409] ? __inet_lookup_listener+0xbf0/0xbf0 [ 161.456473][ T5409] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 161.462819][ T5409] dccp_v4_connect+0xb82/0x1730 [ 161.467715][ T5409] __inet_stream_connect+0x69e/0xed0 [ 161.473047][ T5409] ? inet_listen+0x640/0x640 [ 161.477647][ T5409] ? mark_held_locks+0x9f/0xe0 [ 161.482418][ T5409] ? __local_bh_enable_ip+0xa4/0x130 [ 161.487724][ T5409] inet_stream_connect+0x57/0xa0 [ 161.492705][ T5409] ? __inet_stream_connect+0xed0/0xed0 [ 161.498172][ T5409] __sys_connect_file+0x153/0x1a0 [ 161.503221][ T5409] io_connect+0x3cc/0x720 [ 161.507604][ T5409] ? io_connect_prep+0x250/0x250 [ 161.512579][ T5409] ? receive_fd+0x110/0x110 [ 161.517092][ T5409] ? rcu_read_lock_sched_held+0x3e/0x70 [ 161.522637][ T5409] ? io_connect_prep+0x250/0x250 [ 161.527594][ T5409] io_issue_sqe+0x695/0x1250 [ 161.532216][ T5409] io_submit_sqes+0x96c/0x1e90 [ 161.537080][ T5409] __do_sys_io_uring_enter+0x103d/0x24e0 [ 161.542721][ T5409] ? io_submit_sqes+0x1e90/0x1e90 [ 161.547748][ T5409] ? ptrace_notify+0xfe/0x140 [ 161.552439][ T5409] ? lock_downgrade+0x6e0/0x6e0 [ 161.557347][ T5409] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.562583][ T5409] ? lockdep_hardirqs_on+0x7d/0x100 [ 161.567789][ T5409] ? _raw_spin_unlock_irq+0x2e/0x50 [ 161.573005][ T5409] ? ptrace_notify+0xfe/0x140 [ 161.577708][ T5409] do_syscall_64+0x39/0xb0 [ 161.582138][ T5409] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 161.588034][ T5409] RIP: 0033:0x7f607b0de549 [ 161.592454][ T5409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 161.612079][ T5409] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 161.620532][ T5409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5409] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5409] close(3) = 0 [pid 5409] close(4) = 0 [pid 5409] close(5) = 0 [pid 5409] close(6) = 0 [pid 5409] close(7) = 0 [pid 5409] close(8) = -1 EBADF (Bad file descriptor) [pid 5409] close(9) = -1 EBADF (Bad file descriptor) [pid 5409] close(10) = -1 EBADF (Bad file descriptor) [pid 5409] close(11) = -1 EBADF (Bad file descriptor) [pid 5409] close(12) = -1 EBADF (Bad file descriptor) [pid 5409] close(13) = -1 EBADF (Bad file descriptor) [pid 5409] close(14) = -1 EBADF (Bad file descriptor) [pid 5409] close(15) = -1 EBADF (Bad file descriptor) [pid 5409] close(16) = -1 EBADF (Bad file descriptor) [pid 5409] close(17) = -1 EBADF (Bad file descriptor) [pid 5409] close(18) = -1 EBADF (Bad file descriptor) [pid 5409] close(19) = -1 EBADF (Bad file descriptor) [pid 5409] close(20) = -1 EBADF (Bad file descriptor) [pid 5409] close(21) = -1 EBADF (Bad file descriptor) [pid 5409] close(22) = -1 EBADF (Bad file descriptor) [pid 5409] close(23) = -1 EBADF (Bad file descriptor) [pid 5409] close(24) = -1 EBADF (Bad file descriptor) [pid 5409] close(25) = -1 EBADF (Bad file descriptor) [pid 5409] close(26) = -1 EBADF (Bad file descriptor) [pid 5409] close(27) = -1 EBADF (Bad file descriptor) [pid 5409] close(28) = -1 EBADF (Bad file descriptor) [pid 5409] close(29) = -1 EBADF (Bad file descriptor) [pid 5409] exit_group(0) = ? [pid 5409] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 309 ./strace-static-x86_64: Process 5410 attached [pid 5410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5410] setpgid(0, 0) = 0 [pid 5410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5410] write(3, "1000", 4) = 4 [pid 5410] close(3) = 0 [pid 5410] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5410] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5410] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5410] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5410] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5410] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5410] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5410] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5410] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5410] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5410] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5410] write(7, "5", 1) = 1 [ 161.628522][ T5409] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 161.636586][ T5409] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 161.644563][ T5409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 161.652539][ T5409] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 161.660654][ T5409] [ 161.709521][ T5410] FAULT_INJECTION: forcing a failure. [ 161.709521][ T5410] name failslab, interval 1, probability 0, space 0, times 0 [ 161.722752][ T5410] CPU: 0 PID: 5410 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 161.732692][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 161.742759][ T5410] Call Trace: [ 161.746059][ T5410] [ 161.748992][ T5410] dump_stack_lvl+0xd1/0x138 [ 161.753592][ T5410] should_fail_ex.cold+0x5/0xa [ 161.758374][ T5410] ? io_issue_sqe+0x695/0x1250 [ 161.763158][ T5410] should_failslab+0x9/0x20 [ 161.767664][ T5410] __kmem_cache_alloc_node+0x5b/0x330 [ 161.773043][ T5410] ? ref_tracker_alloc+0x158/0x560 [ 161.778195][ T5410] kmalloc_trace+0x26/0x60 [ 161.782645][ T5410] ref_tracker_alloc+0x158/0x560 [ 161.787640][ T5410] ? __lock_acquire+0xbc3/0x56d0 [ 161.792613][ T5410] ? ref_tracker_free+0x6b0/0x6b0 [ 161.797880][ T5410] dst_init+0xe4/0x520 [ 161.801983][ T5410] dst_alloc+0x16f/0x1f0 [ 161.806254][ T5410] rt_dst_alloc+0x55/0x430 [ 161.810695][ T5410] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 161.816719][ T5410] ip_route_output_key_hash+0x18f/0x340 [ 161.822295][ T5410] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 161.828583][ T5410] dccp_v4_connect+0x7e1/0x1730 [ 161.833480][ T5410] __inet_stream_connect+0x69e/0xed0 [ 161.838802][ T5410] ? inet_listen+0x640/0x640 [ 161.843426][ T5410] ? mark_held_locks+0x9f/0xe0 [ 161.848214][ T5410] ? __local_bh_enable_ip+0xa4/0x130 [ 161.853523][ T5410] inet_stream_connect+0x57/0xa0 [ 161.858499][ T5410] ? __inet_stream_connect+0xed0/0xed0 [ 161.863993][ T5410] __sys_connect_file+0x153/0x1a0 [ 161.869060][ T5410] io_connect+0x3cc/0x720 [ 161.873425][ T5410] ? io_connect_prep+0x250/0x250 [ 161.878394][ T5410] ? receive_fd+0x110/0x110 [ 161.882935][ T5410] ? rcu_read_lock_sched_held+0x3e/0x70 [ 161.888501][ T5410] ? io_connect_prep+0x250/0x250 [ 161.893475][ T5410] io_issue_sqe+0x695/0x1250 [ 161.898102][ T5410] io_submit_sqes+0x96c/0x1e90 [ 161.902911][ T5410] __do_sys_io_uring_enter+0x103d/0x24e0 [ 161.908578][ T5410] ? io_submit_sqes+0x1e90/0x1e90 [ 161.913634][ T5410] ? ptrace_notify+0xfe/0x140 [ 161.918330][ T5410] ? lock_downgrade+0x6e0/0x6e0 [ 161.923208][ T5410] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.928434][ T5410] ? lockdep_hardirqs_on+0x7d/0x100 [ 161.933656][ T5410] ? _raw_spin_unlock_irq+0x2e/0x50 [ 161.938877][ T5410] ? ptrace_notify+0xfe/0x140 [ 161.943580][ T5410] do_syscall_64+0x39/0xb0 [ 161.948028][ T5410] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 161.953952][ T5410] RIP: 0033:0x7f607b0de549 [ 161.958386][ T5410] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 161.978018][ T5410] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 161.986463][ T5410] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 161.994450][ T5410] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 162.002437][ T5410] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5410] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5410] close(3) = 0 [pid 5410] close(4) = 0 [pid 5410] close(5) = 0 [pid 5410] close(6) = 0 [pid 5410] close(7) = 0 [pid 5410] close(8) = -1 EBADF (Bad file descriptor) [pid 5410] close(9) = -1 EBADF (Bad file descriptor) [pid 5410] close(10) = -1 EBADF (Bad file descriptor) [pid 5410] close(11) = -1 EBADF (Bad file descriptor) [pid 5410] close(12) = -1 EBADF (Bad file descriptor) [pid 5410] close(13) = -1 EBADF (Bad file descriptor) [pid 5410] close(14) = -1 EBADF (Bad file descriptor) [pid 5410] close(15) = -1 EBADF (Bad file descriptor) [pid 5410] close(16) = -1 EBADF (Bad file descriptor) [pid 5410] close(17) = -1 EBADF (Bad file descriptor) [pid 5410] close(18) = -1 EBADF (Bad file descriptor) [pid 5410] close(19) = -1 EBADF (Bad file descriptor) [pid 5410] close(20) = -1 EBADF (Bad file descriptor) [pid 5410] close(21) = -1 EBADF (Bad file descriptor) [pid 5410] close(22) = -1 EBADF (Bad file descriptor) [pid 5410] close(23) = -1 EBADF (Bad file descriptor) [pid 5410] close(24) = -1 EBADF (Bad file descriptor) [pid 5410] close(25) = -1 EBADF (Bad file descriptor) [pid 5410] close(26) = -1 EBADF (Bad file descriptor) [pid 5410] close(27) = -1 EBADF (Bad file descriptor) [pid 5410] close(28) = -1 EBADF (Bad file descriptor) [pid 5410] close(29) = -1 EBADF (Bad file descriptor) [pid 5410] exit_group(0) = ? [pid 5410] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5411 attached , child_tidptr=0x555555eff5d0) = 310 [pid 5411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5411] setpgid(0, 0) = 0 [pid 5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5411] write(3, "1000", 4) = 4 [pid 5411] close(3) = 0 [pid 5411] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5411] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5411] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5411] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5411] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5411] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5411] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5411] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5411] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5411] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5411] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5411] write(7, "5", 1) = 1 [ 162.010427][ T5410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 162.018415][ T5410] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 162.026424][ T5410] [ 162.066003][ T5411] FAULT_INJECTION: forcing a failure. [ 162.066003][ T5411] name failslab, interval 1, probability 0, space 0, times 0 [ 162.078710][ T5411] CPU: 0 PID: 5411 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 162.088607][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 162.098667][ T5411] Call Trace: [ 162.101951][ T5411] [ 162.104880][ T5411] dump_stack_lvl+0xd1/0x138 [ 162.109497][ T5411] should_fail_ex.cold+0x5/0xa [ 162.114291][ T5411] ? __inet_hash_connect+0x95e/0x1ba0 [ 162.119695][ T5411] should_failslab+0x9/0x20 [ 162.124206][ T5411] kmem_cache_alloc+0x5a/0x320 [ 162.128983][ T5411] __inet_hash_connect+0x95e/0x1ba0 [ 162.134215][ T5411] ? __inet_lookup_listener+0xbf0/0xbf0 [ 162.139818][ T5411] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 162.146196][ T5411] dccp_v4_connect+0xb82/0x1730 [ 162.151091][ T5411] __inet_stream_connect+0x69e/0xed0 [ 162.156421][ T5411] ? inet_listen+0x640/0x640 [ 162.161048][ T5411] ? mark_held_locks+0x9f/0xe0 [ 162.165841][ T5411] ? __local_bh_enable_ip+0xa4/0x130 [ 162.171155][ T5411] inet_stream_connect+0x57/0xa0 [ 162.176120][ T5411] ? __inet_stream_connect+0xed0/0xed0 [ 162.181611][ T5411] __sys_connect_file+0x153/0x1a0 [ 162.186663][ T5411] io_connect+0x3cc/0x720 [ 162.191035][ T5411] ? io_connect_prep+0x250/0x250 [ 162.196010][ T5411] ? receive_fd+0x110/0x110 [ 162.200559][ T5411] ? rcu_read_lock_sched_held+0x3e/0x70 [ 162.206133][ T5411] ? io_connect_prep+0x250/0x250 [ 162.211112][ T5411] io_issue_sqe+0x695/0x1250 [ 162.215740][ T5411] io_submit_sqes+0x96c/0x1e90 [ 162.220550][ T5411] __do_sys_io_uring_enter+0x103d/0x24e0 [ 162.226221][ T5411] ? io_submit_sqes+0x1e90/0x1e90 [ 162.231278][ T5411] ? ptrace_notify+0xfe/0x140 [ 162.235978][ T5411] ? lock_downgrade+0x6e0/0x6e0 [ 162.240864][ T5411] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.246095][ T5411] ? lockdep_hardirqs_on+0x7d/0x100 [ 162.251324][ T5411] ? _raw_spin_unlock_irq+0x2e/0x50 [ 162.256547][ T5411] ? ptrace_notify+0xfe/0x140 [ 162.261250][ T5411] do_syscall_64+0x39/0xb0 [ 162.265697][ T5411] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.271620][ T5411] RIP: 0033:0x7f607b0de549 [ 162.276054][ T5411] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 162.295682][ T5411] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 162.304120][ T5411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5411] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5411] close(3) = 0 [pid 5411] close(4) = 0 [pid 5411] close(5) = 0 [pid 5411] close(6) = 0 [pid 5411] close(7) = 0 [pid 5411] close(8) = -1 EBADF (Bad file descriptor) [pid 5411] close(9) = -1 EBADF (Bad file descriptor) [pid 5411] close(10) = -1 EBADF (Bad file descriptor) [pid 5411] close(11) = -1 EBADF (Bad file descriptor) [pid 5411] close(12) = -1 EBADF (Bad file descriptor) [pid 5411] close(13) = -1 EBADF (Bad file descriptor) [pid 5411] close(14) = -1 EBADF (Bad file descriptor) [pid 5411] close(15) = -1 EBADF (Bad file descriptor) [pid 5411] close(16) = -1 EBADF (Bad file descriptor) [pid 5411] close(17) = -1 EBADF (Bad file descriptor) [pid 5411] close(18) = -1 EBADF (Bad file descriptor) [pid 5411] close(19) = -1 EBADF (Bad file descriptor) [pid 5411] close(20) = -1 EBADF (Bad file descriptor) [pid 5411] close(21) = -1 EBADF (Bad file descriptor) [pid 5411] close(22) = -1 EBADF (Bad file descriptor) [pid 5411] close(23) = -1 EBADF (Bad file descriptor) [pid 5411] close(24) = -1 EBADF (Bad file descriptor) [pid 5411] close(25) = -1 EBADF (Bad file descriptor) [pid 5411] close(26) = -1 EBADF (Bad file descriptor) [pid 5411] close(27) = -1 EBADF (Bad file descriptor) [pid 5411] close(28) = -1 EBADF (Bad file descriptor) [pid 5411] close(29) = -1 EBADF (Bad file descriptor) [pid 5411] exit_group(0) = ? [pid 5411] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 311 ./strace-static-x86_64: Process 5412 attached [pid 5412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5412] setpgid(0, 0) = 0 [pid 5412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5412] write(3, "1000", 4) = 4 [pid 5412] close(3) = 0 [pid 5412] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5412] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5412] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5412] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5412] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5412] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5412] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5412] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5412] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5412] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5412] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5412] write(7, "5", 1) = 1 [ 162.312104][ T5411] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 162.320093][ T5411] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 162.328082][ T5411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 162.336069][ T5411] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 162.344076][ T5411] [ 162.386304][ T5412] FAULT_INJECTION: forcing a failure. [ 162.386304][ T5412] name failslab, interval 1, probability 0, space 0, times 0 [ 162.398994][ T5412] CPU: 0 PID: 5412 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 162.408904][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 162.418970][ T5412] Call Trace: [ 162.422251][ T5412] [ 162.425180][ T5412] dump_stack_lvl+0xd1/0x138 [ 162.429794][ T5412] should_fail_ex.cold+0x5/0xa [ 162.434602][ T5412] ? __inet_hash_connect+0x95e/0x1ba0 [ 162.439985][ T5412] should_failslab+0x9/0x20 [ 162.444528][ T5412] kmem_cache_alloc+0x5a/0x320 [ 162.449322][ T5412] __inet_hash_connect+0x95e/0x1ba0 [ 162.454539][ T5412] ? __inet_lookup_listener+0xbf0/0xbf0 [ 162.460098][ T5412] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 162.466488][ T5412] dccp_v4_connect+0xb82/0x1730 [ 162.471403][ T5412] __inet_stream_connect+0x69e/0xed0 [ 162.476723][ T5412] ? inet_listen+0x640/0x640 [ 162.481337][ T5412] ? mark_held_locks+0x9f/0xe0 [ 162.486105][ T5412] ? __local_bh_enable_ip+0xa4/0x130 [ 162.491404][ T5412] inet_stream_connect+0x57/0xa0 [ 162.496368][ T5412] ? __inet_stream_connect+0xed0/0xed0 [ 162.501868][ T5412] __sys_connect_file+0x153/0x1a0 [ 162.506916][ T5412] io_connect+0x3cc/0x720 [ 162.511260][ T5412] ? io_connect_prep+0x250/0x250 [ 162.516213][ T5412] ? receive_fd+0x110/0x110 [ 162.520753][ T5412] ? rcu_read_lock_sched_held+0x3e/0x70 [ 162.526314][ T5412] ? io_connect_prep+0x250/0x250 [ 162.531301][ T5412] io_issue_sqe+0x695/0x1250 [ 162.535916][ T5412] io_submit_sqes+0x96c/0x1e90 [ 162.540730][ T5412] __do_sys_io_uring_enter+0x103d/0x24e0 [ 162.546435][ T5412] ? io_submit_sqes+0x1e90/0x1e90 [ 162.551503][ T5412] ? ptrace_notify+0xfe/0x140 [ 162.556181][ T5412] ? lock_downgrade+0x6e0/0x6e0 [ 162.561039][ T5412] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.566249][ T5412] ? lockdep_hardirqs_on+0x7d/0x100 [ 162.571473][ T5412] ? _raw_spin_unlock_irq+0x2e/0x50 [ 162.576675][ T5412] ? ptrace_notify+0xfe/0x140 [ 162.581356][ T5412] do_syscall_64+0x39/0xb0 [ 162.585781][ T5412] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.591678][ T5412] RIP: 0033:0x7f607b0de549 [ 162.596102][ T5412] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 162.615721][ T5412] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 162.624142][ T5412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5412] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5412] close(3) = 0 [pid 5412] close(4) = 0 [pid 5412] close(5) = 0 [pid 5412] close(6) = 0 [pid 5412] close(7) = 0 [pid 5412] close(8) = -1 EBADF (Bad file descriptor) [pid 5412] close(9) = -1 EBADF (Bad file descriptor) [pid 5412] close(10) = -1 EBADF (Bad file descriptor) [pid 5412] close(11) = -1 EBADF (Bad file descriptor) [pid 5412] close(12) = -1 EBADF (Bad file descriptor) [pid 5412] close(13) = -1 EBADF (Bad file descriptor) [pid 5412] close(14) = -1 EBADF (Bad file descriptor) [pid 5412] close(15) = -1 EBADF (Bad file descriptor) [pid 5412] close(16) = -1 EBADF (Bad file descriptor) [pid 5412] close(17) = -1 EBADF (Bad file descriptor) [pid 5412] close(18) = -1 EBADF (Bad file descriptor) [pid 5412] close(19) = -1 EBADF (Bad file descriptor) [pid 5412] close(20) = -1 EBADF (Bad file descriptor) [pid 5412] close(21) = -1 EBADF (Bad file descriptor) [pid 5412] close(22) = -1 EBADF (Bad file descriptor) [pid 5412] close(23) = -1 EBADF (Bad file descriptor) [pid 5412] close(24) = -1 EBADF (Bad file descriptor) [pid 5412] close(25) = -1 EBADF (Bad file descriptor) [pid 5412] close(26) = -1 EBADF (Bad file descriptor) [pid 5412] close(27) = -1 EBADF (Bad file descriptor) [pid 5412] close(28) = -1 EBADF (Bad file descriptor) [pid 5412] close(29) = -1 EBADF (Bad file descriptor) [pid 5412] exit_group(0) = ? [pid 5412] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 312 ./strace-static-x86_64: Process 5413 attached [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5413] setpgid(0, 0) = 0 [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5413] write(3, "1000", 4) = 4 [pid 5413] close(3) = 0 [pid 5413] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5413] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5413] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5413] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5413] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5413] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5413] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5413] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5413] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5413] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [ 162.632116][ T5412] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 162.640084][ T5412] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 162.648065][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 162.656048][ T5412] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 162.664056][ T5412] [pid 5413] write(7, "5", 1) = 1 [ 162.701959][ T5413] FAULT_INJECTION: forcing a failure. [ 162.701959][ T5413] name failslab, interval 1, probability 0, space 0, times 0 [ 162.714620][ T5413] CPU: 0 PID: 5413 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 162.724513][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 162.734565][ T5413] Call Trace: [ 162.737836][ T5413] [ 162.740761][ T5413] dump_stack_lvl+0xd1/0x138 [ 162.745352][ T5413] should_fail_ex.cold+0x5/0xa [ 162.750114][ T5413] ? __inet_hash_connect+0x95e/0x1ba0 [ 162.755485][ T5413] should_failslab+0x9/0x20 [ 162.759991][ T5413] kmem_cache_alloc+0x5a/0x320 [ 162.764756][ T5413] __inet_hash_connect+0x95e/0x1ba0 [ 162.769958][ T5413] ? __inet_lookup_listener+0xbf0/0xbf0 [ 162.775516][ T5413] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 162.781865][ T5413] dccp_v4_connect+0xb82/0x1730 [ 162.786762][ T5413] __inet_stream_connect+0x69e/0xed0 [ 162.792095][ T5413] ? inet_listen+0x640/0x640 [ 162.796694][ T5413] ? mark_held_locks+0x9f/0xe0 [ 162.801477][ T5413] ? __local_bh_enable_ip+0xa4/0x130 [ 162.806791][ T5413] inet_stream_connect+0x57/0xa0 [ 162.811750][ T5413] ? __inet_stream_connect+0xed0/0xed0 [ 162.817251][ T5413] __sys_connect_file+0x153/0x1a0 [ 162.822292][ T5413] io_connect+0x3cc/0x720 [ 162.826658][ T5413] ? io_connect_prep+0x250/0x250 [ 162.831624][ T5413] ? receive_fd+0x110/0x110 [ 162.836167][ T5413] ? rcu_read_lock_sched_held+0x3e/0x70 [ 162.841735][ T5413] ? io_connect_prep+0x250/0x250 [ 162.846709][ T5413] io_issue_sqe+0x695/0x1250 [ 162.851335][ T5413] io_submit_sqes+0x96c/0x1e90 [ 162.856145][ T5413] __do_sys_io_uring_enter+0x103d/0x24e0 [ 162.861820][ T5413] ? io_submit_sqes+0x1e90/0x1e90 [ 162.866880][ T5413] ? ptrace_notify+0xfe/0x140 [ 162.871579][ T5413] ? lock_downgrade+0x6e0/0x6e0 [ 162.876463][ T5413] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.881693][ T5413] ? lockdep_hardirqs_on+0x7d/0x100 [ 162.886920][ T5413] ? _raw_spin_unlock_irq+0x2e/0x50 [ 162.892144][ T5413] ? ptrace_notify+0xfe/0x140 [ 162.896848][ T5413] do_syscall_64+0x39/0xb0 [ 162.901297][ T5413] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 162.907214][ T5413] RIP: 0033:0x7f607b0de549 [ 162.911650][ T5413] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 162.931280][ T5413] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 162.939716][ T5413] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5413] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5413] close(3) = 0 [pid 5413] close(4) = 0 [pid 5413] close(5) = 0 [pid 5413] close(6) = 0 [pid 5413] close(7) = 0 [pid 5413] close(8) = -1 EBADF (Bad file descriptor) [pid 5413] close(9) = -1 EBADF (Bad file descriptor) [pid 5413] close(10) = -1 EBADF (Bad file descriptor) [pid 5413] close(11) = -1 EBADF (Bad file descriptor) [pid 5413] close(12) = -1 EBADF (Bad file descriptor) [pid 5413] close(13) = -1 EBADF (Bad file descriptor) [pid 5413] close(14) = -1 EBADF (Bad file descriptor) [pid 5413] close(15) = -1 EBADF (Bad file descriptor) [pid 5413] close(16) = -1 EBADF (Bad file descriptor) [pid 5413] close(17) = -1 EBADF (Bad file descriptor) [pid 5413] close(18) = -1 EBADF (Bad file descriptor) [pid 5413] close(19) = -1 EBADF (Bad file descriptor) [pid 5413] close(20) = -1 EBADF (Bad file descriptor) [pid 5413] close(21) = -1 EBADF (Bad file descriptor) [pid 5413] close(22) = -1 EBADF (Bad file descriptor) [pid 5413] close(23) = -1 EBADF (Bad file descriptor) [pid 5413] close(24) = -1 EBADF (Bad file descriptor) [pid 5413] close(25) = -1 EBADF (Bad file descriptor) [pid 5413] close(26) = -1 EBADF (Bad file descriptor) [pid 5413] close(27) = -1 EBADF (Bad file descriptor) [pid 5413] close(28) = -1 EBADF (Bad file descriptor) [pid 5413] close(29) = -1 EBADF (Bad file descriptor) [pid 5413] exit_group(0) = ? [pid 5413] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5414 attached , child_tidptr=0x555555eff5d0) = 313 [pid 5414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5414] setpgid(0, 0) = 0 [pid 5414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5414] write(3, "1000", 4) = 4 [pid 5414] close(3) = 0 [pid 5414] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5414] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5414] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5414] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5414] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5414] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5414] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5414] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5414] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5414] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5414] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5414] write(7, "5", 1) = 1 [ 162.947706][ T5413] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 162.955697][ T5413] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 162.963689][ T5413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 162.971675][ T5413] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 162.979723][ T5413] [ 163.015315][ T5414] FAULT_INJECTION: forcing a failure. [ 163.015315][ T5414] name failslab, interval 1, probability 0, space 0, times 0 [ 163.028036][ T5414] CPU: 0 PID: 5414 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 163.037944][ T5414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 163.048037][ T5414] Call Trace: [ 163.051345][ T5414] [ 163.054461][ T5414] dump_stack_lvl+0xd1/0x138 [ 163.059077][ T5414] should_fail_ex.cold+0x5/0xa [ 163.063871][ T5414] ? __inet_hash_connect+0x95e/0x1ba0 [ 163.069251][ T5414] should_failslab+0x9/0x20 [ 163.073765][ T5414] kmem_cache_alloc+0x5a/0x320 [ 163.078534][ T5414] __inet_hash_connect+0x95e/0x1ba0 [ 163.083741][ T5414] ? __inet_lookup_listener+0xbf0/0xbf0 [ 163.089315][ T5414] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 163.095682][ T5414] dccp_v4_connect+0xb82/0x1730 [ 163.100580][ T5414] __inet_stream_connect+0x69e/0xed0 [ 163.105908][ T5414] ? inet_listen+0x640/0x640 [ 163.110529][ T5414] ? mark_held_locks+0x9f/0xe0 [ 163.115319][ T5414] ? __local_bh_enable_ip+0xa4/0x130 [ 163.120698][ T5414] inet_stream_connect+0x57/0xa0 [ 163.125652][ T5414] ? __inet_stream_connect+0xed0/0xed0 [ 163.131127][ T5414] __sys_connect_file+0x153/0x1a0 [ 163.136174][ T5414] io_connect+0x3cc/0x720 [ 163.140558][ T5414] ? io_connect_prep+0x250/0x250 [ 163.145531][ T5414] ? receive_fd+0x110/0x110 [ 163.150052][ T5414] ? rcu_read_lock_sched_held+0x3e/0x70 [ 163.155599][ T5414] ? io_connect_prep+0x250/0x250 [ 163.160564][ T5414] io_issue_sqe+0x695/0x1250 [ 163.165190][ T5414] io_submit_sqes+0x96c/0x1e90 [ 163.169974][ T5414] __do_sys_io_uring_enter+0x103d/0x24e0 [ 163.175619][ T5414] ? io_submit_sqes+0x1e90/0x1e90 [ 163.180674][ T5414] ? ptrace_notify+0xfe/0x140 [ 163.185383][ T5414] ? lock_downgrade+0x6e0/0x6e0 [ 163.190247][ T5414] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.195464][ T5414] ? lockdep_hardirqs_on+0x7d/0x100 [ 163.200673][ T5414] ? _raw_spin_unlock_irq+0x2e/0x50 [ 163.205878][ T5414] ? ptrace_notify+0xfe/0x140 [ 163.210577][ T5414] do_syscall_64+0x39/0xb0 [ 163.215028][ T5414] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 163.220925][ T5414] RIP: 0033:0x7f607b0de549 [ 163.225341][ T5414] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 163.244966][ T5414] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 163.253406][ T5414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5414] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5414] close(3) = 0 [pid 5414] close(4) = 0 [pid 5414] close(5) = 0 [pid 5414] close(6) = 0 [pid 5414] close(7) = 0 [pid 5414] close(8) = -1 EBADF (Bad file descriptor) [pid 5414] close(9) = -1 EBADF (Bad file descriptor) [pid 5414] close(10) = -1 EBADF (Bad file descriptor) [pid 5414] close(11) = -1 EBADF (Bad file descriptor) [pid 5414] close(12) = -1 EBADF (Bad file descriptor) [pid 5414] close(13) = -1 EBADF (Bad file descriptor) [pid 5414] close(14) = -1 EBADF (Bad file descriptor) [pid 5414] close(15) = -1 EBADF (Bad file descriptor) [pid 5414] close(16) = -1 EBADF (Bad file descriptor) [pid 5414] close(17) = -1 EBADF (Bad file descriptor) [pid 5414] close(18) = -1 EBADF (Bad file descriptor) [pid 5414] close(19) = -1 EBADF (Bad file descriptor) [pid 5414] close(20) = -1 EBADF (Bad file descriptor) [pid 5414] close(21) = -1 EBADF (Bad file descriptor) [pid 5414] close(22) = -1 EBADF (Bad file descriptor) [pid 5414] close(23) = -1 EBADF (Bad file descriptor) [pid 5414] close(24) = -1 EBADF (Bad file descriptor) [pid 5414] close(25) = -1 EBADF (Bad file descriptor) [pid 5414] close(26) = -1 EBADF (Bad file descriptor) [pid 5414] close(27) = -1 EBADF (Bad file descriptor) [pid 5414] close(28) = -1 EBADF (Bad file descriptor) [pid 5414] close(29) = -1 EBADF (Bad file descriptor) [pid 5414] exit_group(0) = ? [pid 5414] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 314 ./strace-static-x86_64: Process 5415 attached [pid 5415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5415] setpgid(0, 0) = 0 [pid 5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5415] write(3, "1000", 4) = 4 [pid 5415] close(3) = 0 [pid 5415] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5415] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5415] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5415] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5415] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5415] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5415] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5415] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5415] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5415] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5415] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5415] write(7, "5", 1) = 1 [ 163.261404][ T5414] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 163.269381][ T5414] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 163.277367][ T5414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 163.285364][ T5414] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 163.293386][ T5414] [ 163.329962][ T5415] FAULT_INJECTION: forcing a failure. [ 163.329962][ T5415] name failslab, interval 1, probability 0, space 0, times 0 [ 163.342652][ T5415] CPU: 0 PID: 5415 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 163.352548][ T5415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 163.362613][ T5415] Call Trace: [ 163.365905][ T5415] [ 163.368832][ T5415] dump_stack_lvl+0xd1/0x138 [ 163.373431][ T5415] should_fail_ex.cold+0x5/0xa [ 163.378197][ T5415] ? __inet_hash_connect+0x95e/0x1ba0 [ 163.383575][ T5415] should_failslab+0x9/0x20 [ 163.388085][ T5415] kmem_cache_alloc+0x5a/0x320 [ 163.392854][ T5415] __inet_hash_connect+0x95e/0x1ba0 [ 163.398061][ T5415] ? __inet_lookup_listener+0xbf0/0xbf0 [ 163.403637][ T5415] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 163.410005][ T5415] dccp_v4_connect+0xb82/0x1730 [ 163.414875][ T5415] __inet_stream_connect+0x69e/0xed0 [ 163.420199][ T5415] ? inet_listen+0x640/0x640 [ 163.424800][ T5415] ? mark_held_locks+0x9f/0xe0 [ 163.429588][ T5415] ? __local_bh_enable_ip+0xa4/0x130 [ 163.434885][ T5415] inet_stream_connect+0x57/0xa0 [ 163.439830][ T5415] ? __inet_stream_connect+0xed0/0xed0 [ 163.445300][ T5415] __sys_connect_file+0x153/0x1a0 [ 163.450356][ T5415] io_connect+0x3cc/0x720 [ 163.454719][ T5415] ? io_connect_prep+0x250/0x250 [ 163.459676][ T5415] ? receive_fd+0x110/0x110 [ 163.464250][ T5415] ? rcu_read_lock_sched_held+0x3e/0x70 [ 163.469800][ T5415] ? io_connect_prep+0x250/0x250 [ 163.474767][ T5415] io_issue_sqe+0x695/0x1250 [ 163.479381][ T5415] io_submit_sqes+0x96c/0x1e90 [ 163.484191][ T5415] __do_sys_io_uring_enter+0x103d/0x24e0 [ 163.489867][ T5415] ? io_submit_sqes+0x1e90/0x1e90 [ 163.494916][ T5415] ? ptrace_notify+0xfe/0x140 [ 163.499710][ T5415] ? lock_downgrade+0x6e0/0x6e0 [ 163.504582][ T5415] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.509796][ T5415] ? lockdep_hardirqs_on+0x7d/0x100 [ 163.515029][ T5415] ? _raw_spin_unlock_irq+0x2e/0x50 [ 163.520261][ T5415] ? ptrace_notify+0xfe/0x140 [ 163.524981][ T5415] do_syscall_64+0x39/0xb0 [ 163.529453][ T5415] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 163.535380][ T5415] RIP: 0033:0x7f607b0de549 [ 163.539793][ T5415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 163.559579][ T5415] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 163.568010][ T5415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5415] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5415] close(3) = 0 [pid 5415] close(4) = 0 [pid 5415] close(5) = 0 [pid 5415] close(6) = 0 [pid 5415] close(7) = 0 [pid 5415] close(8) = -1 EBADF (Bad file descriptor) [pid 5415] close(9) = -1 EBADF (Bad file descriptor) [pid 5415] close(10) = -1 EBADF (Bad file descriptor) [pid 5415] close(11) = -1 EBADF (Bad file descriptor) [pid 5415] close(12) = -1 EBADF (Bad file descriptor) [pid 5415] close(13) = -1 EBADF (Bad file descriptor) [pid 5415] close(14) = -1 EBADF (Bad file descriptor) [pid 5415] close(15) = -1 EBADF (Bad file descriptor) [pid 5415] close(16) = -1 EBADF (Bad file descriptor) [pid 5415] close(17) = -1 EBADF (Bad file descriptor) [pid 5415] close(18) = -1 EBADF (Bad file descriptor) [pid 5415] close(19) = -1 EBADF (Bad file descriptor) [pid 5415] close(20) = -1 EBADF (Bad file descriptor) [pid 5415] close(21) = -1 EBADF (Bad file descriptor) [pid 5415] close(22) = -1 EBADF (Bad file descriptor) [pid 5415] close(23) = -1 EBADF (Bad file descriptor) [pid 5415] close(24) = -1 EBADF (Bad file descriptor) [pid 5415] close(25) = -1 EBADF (Bad file descriptor) [pid 5415] close(26) = -1 EBADF (Bad file descriptor) [pid 5415] close(27) = -1 EBADF (Bad file descriptor) [pid 5415] close(28) = -1 EBADF (Bad file descriptor) [pid 5415] close(29) = -1 EBADF (Bad file descriptor) [pid 5415] exit_group(0) = ? [pid 5415] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 315 ./strace-static-x86_64: Process 5416 attached [pid 5416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5416] setpgid(0, 0) = 0 [pid 5416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5416] write(3, "1000", 4) = 4 [pid 5416] close(3) = 0 [pid 5416] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5416] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5416] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5416] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5416] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5416] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5416] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5416] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5416] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5416] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5416] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5416] write(7, "5", 1) = 1 [pid 5416] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5416] close(3) = 0 [pid 5416] close(4) = 0 [pid 5416] close(5) = 0 [pid 5416] close(6) = 0 [pid 5416] close(7) = 0 [pid 5416] close(8) = -1 EBADF (Bad file descriptor) [pid 5416] close(9) = -1 EBADF (Bad file descriptor) [pid 5416] close(10) = -1 EBADF (Bad file descriptor) [pid 5416] close(11) = -1 EBADF (Bad file descriptor) [pid 5416] close(12) = -1 EBADF (Bad file descriptor) [pid 5416] close(13) = -1 EBADF (Bad file descriptor) [pid 5416] close(14) = -1 EBADF (Bad file descriptor) [pid 5416] close(15) = -1 EBADF (Bad file descriptor) [pid 5416] close(16) = -1 EBADF (Bad file descriptor) [pid 5416] close(17) = -1 EBADF (Bad file descriptor) [pid 5416] close(18) = -1 EBADF (Bad file descriptor) [pid 5416] close(19) = -1 EBADF (Bad file descriptor) [pid 5416] close(20) = -1 EBADF (Bad file descriptor) [pid 5416] close(21) = -1 EBADF (Bad file descriptor) [pid 5416] close(22) = -1 EBADF (Bad file descriptor) [ 163.575987][ T5415] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 163.583973][ T5415] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 163.591949][ T5415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 163.599924][ T5415] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 163.607945][ T5415] [pid 5416] close(23) = -1 EBADF (Bad file descriptor) [pid 5416] close(24) = -1 EBADF (Bad file descriptor) [pid 5416] close(25) = -1 EBADF (Bad file descriptor) [pid 5416] close(26) = -1 EBADF (Bad file descriptor) [pid 5416] close(27) = -1 EBADF (Bad file descriptor) [pid 5416] close(28) = -1 EBADF (Bad file descriptor) [pid 5416] close(29) = -1 EBADF (Bad file descriptor) [pid 5416] exit_group(0) = ? [pid 5416] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 316 ./strace-static-x86_64: Process 5417 attached [pid 5417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5417] setpgid(0, 0) = 0 [pid 5417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5417] write(3, "1000", 4) = 4 [pid 5417] close(3) = 0 [pid 5417] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5417] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5417] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5417] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5417] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5417] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5417] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5417] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5417] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5417] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5417] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5417] write(7, "5", 1) = 1 [ 163.686061][ T5417] FAULT_INJECTION: forcing a failure. [ 163.686061][ T5417] name failslab, interval 1, probability 0, space 0, times 0 [ 163.699143][ T5417] CPU: 1 PID: 5417 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 163.709129][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 163.719204][ T5417] Call Trace: [ 163.722512][ T5417] [ 163.725467][ T5417] dump_stack_lvl+0xd1/0x138 [ 163.730106][ T5417] should_fail_ex.cold+0x5/0xa [ 163.734901][ T5417] ? io_issue_sqe+0x695/0x1250 [ 163.739699][ T5417] should_failslab+0x9/0x20 [ 163.744236][ T5417] __kmem_cache_alloc_node+0x5b/0x330 [ 163.749634][ T5417] ? ref_tracker_alloc+0x158/0x560 [ 163.754786][ T5417] kmalloc_trace+0x26/0x60 [ 163.759236][ T5417] ref_tracker_alloc+0x158/0x560 [ 163.764201][ T5417] ? __lock_acquire+0xbc3/0x56d0 [ 163.769187][ T5417] ? ref_tracker_free+0x6b0/0x6b0 [ 163.774269][ T5417] dst_init+0xe4/0x520 [ 163.778379][ T5417] dst_alloc+0x16f/0x1f0 [ 163.782658][ T5417] rt_dst_alloc+0x55/0x430 [ 163.787108][ T5417] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 163.793130][ T5417] ip_route_output_key_hash+0x18f/0x340 [ 163.798707][ T5417] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 163.804995][ T5417] dccp_v4_connect+0x7e1/0x1730 [ 163.809895][ T5417] __inet_stream_connect+0x69e/0xed0 [ 163.815221][ T5417] ? inet_listen+0x640/0x640 [ 163.819848][ T5417] ? mark_held_locks+0x9f/0xe0 [ 163.824636][ T5417] ? __local_bh_enable_ip+0xa4/0x130 [ 163.829954][ T5417] inet_stream_connect+0x57/0xa0 [ 163.834927][ T5417] ? __inet_stream_connect+0xed0/0xed0 [ 163.840421][ T5417] __sys_connect_file+0x153/0x1a0 [ 163.845480][ T5417] io_connect+0x3cc/0x720 [ 163.849874][ T5417] ? io_connect_prep+0x250/0x250 [ 163.854866][ T5417] ? receive_fd+0x110/0x110 [ 163.859422][ T5417] ? rcu_read_lock_sched_held+0x3e/0x70 [ 163.865001][ T5417] ? io_connect_prep+0x250/0x250 [ 163.870005][ T5417] io_issue_sqe+0x695/0x1250 [ 163.874648][ T5417] io_submit_sqes+0x96c/0x1e90 [ 163.879494][ T5417] __do_sys_io_uring_enter+0x103d/0x24e0 [ 163.885193][ T5417] ? io_submit_sqes+0x1e90/0x1e90 [ 163.890256][ T5417] ? ptrace_notify+0xfe/0x140 [ 163.894960][ T5417] ? lock_downgrade+0x6e0/0x6e0 [ 163.900105][ T5417] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.905333][ T5417] ? lockdep_hardirqs_on+0x7d/0x100 [ 163.910563][ T5417] ? _raw_spin_unlock_irq+0x2e/0x50 [ 163.915874][ T5417] ? ptrace_notify+0xfe/0x140 [ 163.920581][ T5417] do_syscall_64+0x39/0xb0 [ 163.925026][ T5417] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 163.930952][ T5417] RIP: 0033:0x7f607b0de549 [ 163.935381][ T5417] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 163.955012][ T5417] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 163.963446][ T5417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 163.971438][ T5417] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 163.979431][ T5417] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5417] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5417] close(3) = 0 [pid 5417] close(4) = 0 [pid 5417] close(5) = 0 [pid 5417] close(6) = 0 [pid 5417] close(7) = 0 [pid 5417] close(8) = -1 EBADF (Bad file descriptor) [pid 5417] close(9) = -1 EBADF (Bad file descriptor) [pid 5417] close(10) = -1 EBADF (Bad file descriptor) [pid 5417] close(11) = -1 EBADF (Bad file descriptor) [pid 5417] close(12) = -1 EBADF (Bad file descriptor) [pid 5417] close(13) = -1 EBADF (Bad file descriptor) [pid 5417] close(14) = -1 EBADF (Bad file descriptor) [pid 5417] close(15) = -1 EBADF (Bad file descriptor) [pid 5417] close(16) = -1 EBADF (Bad file descriptor) [pid 5417] close(17) = -1 EBADF (Bad file descriptor) [pid 5417] close(18) = -1 EBADF (Bad file descriptor) [pid 5417] close(19) = -1 EBADF (Bad file descriptor) [pid 5417] close(20) = -1 EBADF (Bad file descriptor) [pid 5417] close(21) = -1 EBADF (Bad file descriptor) [pid 5417] close(22) = -1 EBADF (Bad file descriptor) [pid 5417] close(23) = -1 EBADF (Bad file descriptor) [pid 5417] close(24) = -1 EBADF (Bad file descriptor) [pid 5417] close(25) = -1 EBADF (Bad file descriptor) [pid 5417] close(26) = -1 EBADF (Bad file descriptor) [pid 5417] close(27) = -1 EBADF (Bad file descriptor) [pid 5417] close(28) = -1 EBADF (Bad file descriptor) [pid 5417] close(29) = -1 EBADF (Bad file descriptor) [pid 5417] exit_group(0) = ? [pid 5417] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 317 ./strace-static-x86_64: Process 5418 attached [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5418] setpgid(0, 0) = 0 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5418] write(3, "1000", 4) = 4 [pid 5418] close(3) = 0 [pid 5418] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5418] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5418] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5418] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5418] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5418] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5418] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5418] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5418] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5418] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5418] write(7, "5", 1) = 1 [ 163.987426][ T5417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 163.995420][ T5417] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 164.003448][ T5417] [ 164.042827][ T5418] FAULT_INJECTION: forcing a failure. [ 164.042827][ T5418] name failslab, interval 1, probability 0, space 0, times 0 [ 164.055532][ T5418] CPU: 1 PID: 5418 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 164.065611][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 164.075670][ T5418] Call Trace: [ 164.078948][ T5418] [ 164.081885][ T5418] dump_stack_lvl+0xd1/0x138 [ 164.086485][ T5418] should_fail_ex.cold+0x5/0xa [ 164.091258][ T5418] ? __inet_hash_connect+0x95e/0x1ba0 [ 164.096634][ T5418] should_failslab+0x9/0x20 [ 164.101154][ T5418] kmem_cache_alloc+0x5a/0x320 [ 164.105927][ T5418] __inet_hash_connect+0x95e/0x1ba0 [ 164.111158][ T5418] ? __inet_lookup_listener+0xbf0/0xbf0 [ 164.116746][ T5418] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 164.123124][ T5418] dccp_v4_connect+0xb82/0x1730 [ 164.128028][ T5418] __inet_stream_connect+0x69e/0xed0 [ 164.133347][ T5418] ? inet_listen+0x640/0x640 [ 164.137983][ T5418] ? mark_held_locks+0x9f/0xe0 [ 164.142773][ T5418] ? __local_bh_enable_ip+0xa4/0x130 [ 164.148121][ T5418] inet_stream_connect+0x57/0xa0 [ 164.153093][ T5418] ? __inet_stream_connect+0xed0/0xed0 [ 164.158585][ T5418] __sys_connect_file+0x153/0x1a0 [ 164.163632][ T5418] io_connect+0x3cc/0x720 [ 164.167999][ T5418] ? io_connect_prep+0x250/0x250 [ 164.172967][ T5418] ? receive_fd+0x110/0x110 [ 164.177512][ T5418] ? rcu_read_lock_sched_held+0x3e/0x70 [ 164.183079][ T5418] ? io_connect_prep+0x250/0x250 [ 164.188050][ T5418] io_issue_sqe+0x695/0x1250 [ 164.192674][ T5418] io_submit_sqes+0x96c/0x1e90 [ 164.197485][ T5418] __do_sys_io_uring_enter+0x103d/0x24e0 [ 164.203159][ T5418] ? io_submit_sqes+0x1e90/0x1e90 [ 164.208214][ T5418] ? ptrace_notify+0xfe/0x140 [ 164.212916][ T5418] ? lock_downgrade+0x6e0/0x6e0 [ 164.217799][ T5418] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.223027][ T5418] ? lockdep_hardirqs_on+0x7d/0x100 [ 164.228249][ T5418] ? _raw_spin_unlock_irq+0x2e/0x50 [ 164.233475][ T5418] ? ptrace_notify+0xfe/0x140 [ 164.238214][ T5418] do_syscall_64+0x39/0xb0 [ 164.242666][ T5418] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.248586][ T5418] RIP: 0033:0x7f607b0de549 [ 164.253019][ T5418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 164.272655][ T5418] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 164.281088][ T5418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5418] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5418] close(3) = 0 [pid 5418] close(4) = 0 [pid 5418] close(5) = 0 [pid 5418] close(6) = 0 [pid 5418] close(7) = 0 [pid 5418] close(8) = -1 EBADF (Bad file descriptor) [pid 5418] close(9) = -1 EBADF (Bad file descriptor) [pid 5418] close(10) = -1 EBADF (Bad file descriptor) [pid 5418] close(11) = -1 EBADF (Bad file descriptor) [pid 5418] close(12) = -1 EBADF (Bad file descriptor) [pid 5418] close(13) = -1 EBADF (Bad file descriptor) [pid 5418] close(14) = -1 EBADF (Bad file descriptor) [pid 5418] close(15) = -1 EBADF (Bad file descriptor) [pid 5418] close(16) = -1 EBADF (Bad file descriptor) [pid 5418] close(17) = -1 EBADF (Bad file descriptor) [pid 5418] close(18) = -1 EBADF (Bad file descriptor) [pid 5418] close(19) = -1 EBADF (Bad file descriptor) [pid 5418] close(20) = -1 EBADF (Bad file descriptor) [pid 5418] close(21) = -1 EBADF (Bad file descriptor) [pid 5418] close(22) = -1 EBADF (Bad file descriptor) [pid 5418] close(23) = -1 EBADF (Bad file descriptor) [pid 5418] close(24) = -1 EBADF (Bad file descriptor) [pid 5418] close(25) = -1 EBADF (Bad file descriptor) [pid 5418] close(26) = -1 EBADF (Bad file descriptor) [pid 5418] close(27) = -1 EBADF (Bad file descriptor) [pid 5418] close(28) = -1 EBADF (Bad file descriptor) [pid 5418] close(29) = -1 EBADF (Bad file descriptor) [pid 5418] exit_group(0) = ? [pid 5418] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5419 attached , child_tidptr=0x555555eff5d0) = 318 [pid 5419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5419] setpgid(0, 0) = 0 [pid 5419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5419] write(3, "1000", 4) = 4 [pid 5419] close(3) = 0 [pid 5419] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5419] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5419] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5419] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5419] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5419] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5419] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5419] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5419] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5419] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5419] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5419] write(7, "5", 1) = 1 [ 164.289074][ T5418] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 164.297094][ T5418] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 164.305079][ T5418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 164.313154][ T5418] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 164.321161][ T5418] [ 164.364341][ T5419] FAULT_INJECTION: forcing a failure. [ 164.364341][ T5419] name failslab, interval 1, probability 0, space 0, times 0 [ 164.377037][ T5419] CPU: 0 PID: 5419 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 164.386939][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 164.397007][ T5419] Call Trace: [ 164.400321][ T5419] [ 164.403258][ T5419] dump_stack_lvl+0xd1/0x138 [ 164.407869][ T5419] should_fail_ex.cold+0x5/0xa [ 164.412659][ T5419] ? __inet_hash_connect+0x95e/0x1ba0 [ 164.418056][ T5419] should_failslab+0x9/0x20 [ 164.422597][ T5419] kmem_cache_alloc+0x5a/0x320 [ 164.427369][ T5419] __inet_hash_connect+0x95e/0x1ba0 [ 164.432581][ T5419] ? __inet_lookup_listener+0xbf0/0xbf0 [ 164.438142][ T5419] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 164.444489][ T5419] dccp_v4_connect+0xb82/0x1730 [ 164.449376][ T5419] __inet_stream_connect+0x69e/0xed0 [ 164.454694][ T5419] ? inet_listen+0x640/0x640 [ 164.459336][ T5419] ? mark_held_locks+0x9f/0xe0 [ 164.464139][ T5419] ? __local_bh_enable_ip+0xa4/0x130 [ 164.469434][ T5419] inet_stream_connect+0x57/0xa0 [ 164.474383][ T5419] ? __inet_stream_connect+0xed0/0xed0 [ 164.479850][ T5419] __sys_connect_file+0x153/0x1a0 [ 164.484900][ T5419] io_connect+0x3cc/0x720 [ 164.489258][ T5419] ? io_connect_prep+0x250/0x250 [ 164.494208][ T5419] ? receive_fd+0x110/0x110 [ 164.498735][ T5419] ? rcu_read_lock_sched_held+0x3e/0x70 [ 164.504290][ T5419] ? io_connect_prep+0x250/0x250 [ 164.509330][ T5419] io_issue_sqe+0x695/0x1250 [ 164.513939][ T5419] io_submit_sqes+0x96c/0x1e90 [ 164.518739][ T5419] __do_sys_io_uring_enter+0x103d/0x24e0 [ 164.524394][ T5419] ? io_submit_sqes+0x1e90/0x1e90 [ 164.529448][ T5419] ? ptrace_notify+0xfe/0x140 [ 164.534154][ T5419] ? lock_downgrade+0x6e0/0x6e0 [ 164.539017][ T5419] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.544246][ T5419] ? lockdep_hardirqs_on+0x7d/0x100 [ 164.549480][ T5419] ? _raw_spin_unlock_irq+0x2e/0x50 [ 164.554718][ T5419] ? ptrace_notify+0xfe/0x140 [ 164.559520][ T5419] do_syscall_64+0x39/0xb0 [ 164.564160][ T5419] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.570062][ T5419] RIP: 0033:0x7f607b0de549 [ 164.574480][ T5419] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 164.594097][ T5419] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 164.602520][ T5419] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5419] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5419] close(3) = 0 [pid 5419] close(4) = 0 [pid 5419] close(5) = 0 [pid 5419] close(6) = 0 [pid 5419] close(7) = 0 [pid 5419] close(8) = -1 EBADF (Bad file descriptor) [pid 5419] close(9) = -1 EBADF (Bad file descriptor) [pid 5419] close(10) = -1 EBADF (Bad file descriptor) [pid 5419] close(11) = -1 EBADF (Bad file descriptor) [pid 5419] close(12) = -1 EBADF (Bad file descriptor) [pid 5419] close(13) = -1 EBADF (Bad file descriptor) [pid 5419] close(14) = -1 EBADF (Bad file descriptor) [pid 5419] close(15) = -1 EBADF (Bad file descriptor) [pid 5419] close(16) = -1 EBADF (Bad file descriptor) [pid 5419] close(17) = -1 EBADF (Bad file descriptor) [pid 5419] close(18) = -1 EBADF (Bad file descriptor) [pid 5419] close(19) = -1 EBADF (Bad file descriptor) [pid 5419] close(20) = -1 EBADF (Bad file descriptor) [pid 5419] close(21) = -1 EBADF (Bad file descriptor) [pid 5419] close(22) = -1 EBADF (Bad file descriptor) [pid 5419] close(23) = -1 EBADF (Bad file descriptor) [pid 5419] close(24) = -1 EBADF (Bad file descriptor) [pid 5419] close(25) = -1 EBADF (Bad file descriptor) [pid 5419] close(26) = -1 EBADF (Bad file descriptor) [pid 5419] close(27) = -1 EBADF (Bad file descriptor) [pid 5419] close(28) = -1 EBADF (Bad file descriptor) [pid 5419] close(29) = -1 EBADF (Bad file descriptor) [pid 5419] exit_group(0) = ? [pid 5419] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 319 ./strace-static-x86_64: Process 5420 attached [pid 5420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5420] setpgid(0, 0) = 0 [pid 5420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5420] write(3, "1000", 4) = 4 [pid 5420] close(3) = 0 [pid 5420] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5420] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5420] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5420] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5420] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5420] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5420] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5420] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5420] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5420] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5420] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5420] write(7, "5", 1) = 1 [ 164.610508][ T5419] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 164.618502][ T5419] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 164.626475][ T5419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 164.634535][ T5419] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 164.642571][ T5419] [ 164.682135][ T5420] FAULT_INJECTION: forcing a failure. [ 164.682135][ T5420] name failslab, interval 1, probability 0, space 0, times 0 [ 164.694885][ T5420] CPU: 0 PID: 5420 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 164.704816][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 164.714898][ T5420] Call Trace: [ 164.718188][ T5420] [ 164.721117][ T5420] dump_stack_lvl+0xd1/0x138 [ 164.725740][ T5420] should_fail_ex.cold+0x5/0xa [ 164.730527][ T5420] ? io_issue_sqe+0x695/0x1250 [ 164.735347][ T5420] should_failslab+0x9/0x20 [ 164.739862][ T5420] __kmem_cache_alloc_node+0x5b/0x330 [ 164.745237][ T5420] ? ref_tracker_alloc+0x158/0x560 [ 164.750375][ T5420] kmalloc_trace+0x26/0x60 [ 164.754839][ T5420] ref_tracker_alloc+0x158/0x560 [ 164.759811][ T5420] ? __lock_acquire+0xbc3/0x56d0 [ 164.764777][ T5420] ? ref_tracker_free+0x6b0/0x6b0 [ 164.769856][ T5420] dst_init+0xe4/0x520 [ 164.773952][ T5420] dst_alloc+0x16f/0x1f0 [ 164.778231][ T5420] rt_dst_alloc+0x55/0x430 [ 164.782673][ T5420] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 164.788702][ T5420] ip_route_output_key_hash+0x18f/0x340 [ 164.794276][ T5420] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 164.800563][ T5420] dccp_v4_connect+0x7e1/0x1730 [ 164.805467][ T5420] __inet_stream_connect+0x69e/0xed0 [ 164.810802][ T5420] ? inet_listen+0x640/0x640 [ 164.815431][ T5420] ? mark_held_locks+0x9f/0xe0 [ 164.820223][ T5420] ? __local_bh_enable_ip+0xa4/0x130 [ 164.828060][ T5420] inet_stream_connect+0x57/0xa0 [ 164.833035][ T5420] ? __inet_stream_connect+0xed0/0xed0 [ 164.838532][ T5420] __sys_connect_file+0x153/0x1a0 [ 164.843584][ T5420] io_connect+0x3cc/0x720 [ 164.847948][ T5420] ? io_connect_prep+0x250/0x250 [ 164.852918][ T5420] ? receive_fd+0x110/0x110 [ 164.857465][ T5420] ? rcu_read_lock_sched_held+0x3e/0x70 [ 164.863039][ T5420] ? io_connect_prep+0x250/0x250 [ 164.868015][ T5420] io_issue_sqe+0x695/0x1250 [ 164.872666][ T5420] io_submit_sqes+0x96c/0x1e90 [ 164.877485][ T5420] __do_sys_io_uring_enter+0x103d/0x24e0 [ 164.883159][ T5420] ? io_submit_sqes+0x1e90/0x1e90 [ 164.888228][ T5420] ? ptrace_notify+0xfe/0x140 [ 164.893063][ T5420] ? lock_downgrade+0x6e0/0x6e0 [ 164.897967][ T5420] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.903208][ T5420] ? lockdep_hardirqs_on+0x7d/0x100 [ 164.908448][ T5420] ? _raw_spin_unlock_irq+0x2e/0x50 [ 164.913693][ T5420] ? ptrace_notify+0xfe/0x140 [ 164.918415][ T5420] do_syscall_64+0x39/0xb0 [ 164.922865][ T5420] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 164.928790][ T5420] RIP: 0033:0x7f607b0de549 [ 164.933228][ T5420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 164.952867][ T5420] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 164.961306][ T5420] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 164.969302][ T5420] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5420] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5420] close(3) = 0 [pid 5420] close(4) = 0 [pid 5420] close(5) = 0 [pid 5420] close(6) = 0 [pid 5420] close(7) = 0 [pid 5420] close(8) = -1 EBADF (Bad file descriptor) [pid 5420] close(9) = -1 EBADF (Bad file descriptor) [pid 5420] close(10) = -1 EBADF (Bad file descriptor) [pid 5420] close(11) = -1 EBADF (Bad file descriptor) [pid 5420] close(12) = -1 EBADF (Bad file descriptor) [pid 5420] close(13) = -1 EBADF (Bad file descriptor) [pid 5420] close(14) = -1 EBADF (Bad file descriptor) [pid 5420] close(15) = -1 EBADF (Bad file descriptor) [pid 5420] close(16) = -1 EBADF (Bad file descriptor) [pid 5420] close(17) = -1 EBADF (Bad file descriptor) [pid 5420] close(18) = -1 EBADF (Bad file descriptor) [pid 5420] close(19) = -1 EBADF (Bad file descriptor) [pid 5420] close(20) = -1 EBADF (Bad file descriptor) [pid 5420] close(21) = -1 EBADF (Bad file descriptor) [pid 5420] close(22) = -1 EBADF (Bad file descriptor) [pid 5420] close(23) = -1 EBADF (Bad file descriptor) [pid 5420] close(24) = -1 EBADF (Bad file descriptor) [pid 5420] close(25) = -1 EBADF (Bad file descriptor) [pid 5420] close(26) = -1 EBADF (Bad file descriptor) [pid 5420] close(27) = -1 EBADF (Bad file descriptor) [pid 5420] close(28) = -1 EBADF (Bad file descriptor) [pid 5420] close(29) = -1 EBADF (Bad file descriptor) [pid 5420] exit_group(0) = ? [pid 5420] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 164.977295][ T5420] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 164.985286][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 164.993364][ T5420] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 165.001372][ T5420] [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 320 ./strace-static-x86_64: Process 5421 attached [pid 5421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5421] setpgid(0, 0) = 0 [pid 5421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5421] write(3, "1000", 4) = 4 [pid 5421] close(3) = 0 [pid 5421] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5421] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5421] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5421] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5421] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5421] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5421] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5421] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5421] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5421] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5421] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5421] write(7, "5", 1) = 1 [ 165.052929][ T5421] FAULT_INJECTION: forcing a failure. [ 165.052929][ T5421] name failslab, interval 1, probability 0, space 0, times 0 [ 165.066974][ T5421] CPU: 0 PID: 5421 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 165.076905][ T5421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 165.087010][ T5421] Call Trace: [ 165.090304][ T5421] [ 165.093269][ T5421] dump_stack_lvl+0xd1/0x138 [ 165.097901][ T5421] should_fail_ex.cold+0x5/0xa [ 165.102756][ T5421] ? io_issue_sqe+0x695/0x1250 [ 165.107555][ T5421] should_failslab+0x9/0x20 [ 165.112093][ T5421] __kmem_cache_alloc_node+0x5b/0x330 [ 165.117484][ T5421] ? ref_tracker_alloc+0x158/0x560 [ 165.122640][ T5421] kmalloc_trace+0x26/0x60 [ 165.127104][ T5421] ref_tracker_alloc+0x158/0x560 [ 165.132057][ T5421] ? __lock_acquire+0xbc3/0x56d0 [ 165.137007][ T5421] ? ref_tracker_free+0x6b0/0x6b0 [ 165.142067][ T5421] dst_init+0xe4/0x520 [ 165.146165][ T5421] dst_alloc+0x16f/0x1f0 [ 165.150458][ T5421] rt_dst_alloc+0x55/0x430 [ 165.154917][ T5421] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 165.160917][ T5421] ip_route_output_key_hash+0x18f/0x340 [ 165.166504][ T5421] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 165.172801][ T5421] dccp_v4_connect+0x7e1/0x1730 [ 165.177703][ T5421] __inet_stream_connect+0x69e/0xed0 [ 165.183091][ T5421] ? inet_listen+0x640/0x640 [ 165.187809][ T5421] ? mark_held_locks+0x9f/0xe0 [ 165.192700][ T5421] ? __local_bh_enable_ip+0xa4/0x130 [ 165.197997][ T5421] inet_stream_connect+0x57/0xa0 [ 165.202948][ T5421] ? __inet_stream_connect+0xed0/0xed0 [ 165.208418][ T5421] __sys_connect_file+0x153/0x1a0 [ 165.213474][ T5421] io_connect+0x3cc/0x720 [ 165.217855][ T5421] ? io_connect_prep+0x250/0x250 [ 165.222810][ T5421] ? receive_fd+0x110/0x110 [ 165.227421][ T5421] ? rcu_read_lock_sched_held+0x3e/0x70 [ 165.232976][ T5421] ? io_connect_prep+0x250/0x250 [ 165.237944][ T5421] io_issue_sqe+0x695/0x1250 [ 165.242550][ T5421] io_submit_sqes+0x96c/0x1e90 [ 165.247338][ T5421] __do_sys_io_uring_enter+0x103d/0x24e0 [ 165.252990][ T5421] ? io_submit_sqes+0x1e90/0x1e90 [ 165.258025][ T5421] ? ptrace_notify+0xfe/0x140 [ 165.262972][ T5421] ? lock_downgrade+0x6e0/0x6e0 [ 165.267848][ T5421] ? _raw_spin_unlock_irq+0x23/0x50 [ 165.273164][ T5421] ? lockdep_hardirqs_on+0x7d/0x100 [ 165.278370][ T5421] ? _raw_spin_unlock_irq+0x2e/0x50 [ 165.283596][ T5421] ? ptrace_notify+0xfe/0x140 [ 165.288291][ T5421] do_syscall_64+0x39/0xb0 [ 165.292723][ T5421] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.298624][ T5421] RIP: 0033:0x7f607b0de549 [ 165.303040][ T5421] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 165.322656][ T5421] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 165.331086][ T5421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 165.339073][ T5421] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5421] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5421] close(3) = 0 [pid 5421] close(4) = 0 [pid 5421] close(5) = 0 [pid 5421] close(6) = 0 [pid 5421] close(7) = 0 [pid 5421] close(8) = -1 EBADF (Bad file descriptor) [pid 5421] close(9) = -1 EBADF (Bad file descriptor) [pid 5421] close(10) = -1 EBADF (Bad file descriptor) [pid 5421] close(11) = -1 EBADF (Bad file descriptor) [pid 5421] close(12) = -1 EBADF (Bad file descriptor) [pid 5421] close(13) = -1 EBADF (Bad file descriptor) [pid 5421] close(14) = -1 EBADF (Bad file descriptor) [pid 5421] close(15) = -1 EBADF (Bad file descriptor) [pid 5421] close(16) = -1 EBADF (Bad file descriptor) [pid 5421] close(17) = -1 EBADF (Bad file descriptor) [pid 5421] close(18) = -1 EBADF (Bad file descriptor) [pid 5421] close(19) = -1 EBADF (Bad file descriptor) [pid 5421] close(20) = -1 EBADF (Bad file descriptor) [pid 5421] close(21) = -1 EBADF (Bad file descriptor) [pid 5421] close(22) = -1 EBADF (Bad file descriptor) [pid 5421] close(23) = -1 EBADF (Bad file descriptor) [pid 5421] close(24) = -1 EBADF (Bad file descriptor) [pid 5421] close(25) = -1 EBADF (Bad file descriptor) [pid 5421] close(26) = -1 EBADF (Bad file descriptor) [pid 5421] close(27) = -1 EBADF (Bad file descriptor) [pid 5421] close(28) = -1 EBADF (Bad file descriptor) [pid 5421] close(29) = -1 EBADF (Bad file descriptor) [pid 5421] exit_group(0) = ? [pid 5421] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 321 ./strace-static-x86_64: Process 5422 attached [pid 5422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5422] setpgid(0, 0) = 0 [pid 5422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5422] write(3, "1000", 4) = 4 [pid 5422] close(3) = 0 [pid 5422] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5422] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5422] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5422] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5422] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5422] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5422] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5422] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5422] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 165.347085][ T5421] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 165.355057][ T5421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 165.363032][ T5421] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 165.371038][ T5421] [pid 5422] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5422] write(7, "5", 1) = 1 [ 165.416874][ T5422] FAULT_INJECTION: forcing a failure. [ 165.416874][ T5422] name failslab, interval 1, probability 0, space 0, times 0 [ 165.429591][ T5422] CPU: 0 PID: 5422 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 165.439508][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 165.449565][ T5422] Call Trace: [ 165.452844][ T5422] [ 165.455774][ T5422] dump_stack_lvl+0xd1/0x138 [ 165.460387][ T5422] should_fail_ex.cold+0x5/0xa [ 165.465214][ T5422] ? __inet_hash_connect+0x95e/0x1ba0 [ 165.470602][ T5422] should_failslab+0x9/0x20 [ 165.475116][ T5422] kmem_cache_alloc+0x5a/0x320 [ 165.479893][ T5422] __inet_hash_connect+0x95e/0x1ba0 [ 165.485111][ T5422] ? __inet_lookup_listener+0xbf0/0xbf0 [ 165.490699][ T5422] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 165.497067][ T5422] dccp_v4_connect+0xb82/0x1730 [ 165.501967][ T5422] __inet_stream_connect+0x69e/0xed0 [ 165.507292][ T5422] ? inet_listen+0x640/0x640 [ 165.511920][ T5422] ? mark_held_locks+0x9f/0xe0 [ 165.516714][ T5422] ? __local_bh_enable_ip+0xa4/0x130 [ 165.522032][ T5422] inet_stream_connect+0x57/0xa0 [ 165.527005][ T5422] ? __inet_stream_connect+0xed0/0xed0 [ 165.532499][ T5422] __sys_connect_file+0x153/0x1a0 [ 165.537571][ T5422] io_connect+0x3cc/0x720 [ 165.541938][ T5422] ? io_connect_prep+0x250/0x250 [ 165.547432][ T5422] ? receive_fd+0x110/0x110 [ 165.551973][ T5422] ? rcu_read_lock_sched_held+0x3e/0x70 [ 165.557547][ T5422] ? io_connect_prep+0x250/0x250 [ 165.562521][ T5422] io_issue_sqe+0x695/0x1250 [ 165.567148][ T5422] io_submit_sqes+0x96c/0x1e90 [ 165.571966][ T5422] __do_sys_io_uring_enter+0x103d/0x24e0 [ 165.577661][ T5422] ? io_submit_sqes+0x1e90/0x1e90 [ 165.582813][ T5422] ? ptrace_notify+0xfe/0x140 [ 165.587511][ T5422] ? lock_downgrade+0x6e0/0x6e0 [ 165.592391][ T5422] ? _raw_spin_unlock_irq+0x23/0x50 [ 165.597619][ T5422] ? lockdep_hardirqs_on+0x7d/0x100 [ 165.602860][ T5422] ? _raw_spin_unlock_irq+0x2e/0x50 [ 165.608130][ T5422] ? ptrace_notify+0xfe/0x140 [ 165.612846][ T5422] do_syscall_64+0x39/0xb0 [ 165.617297][ T5422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.623213][ T5422] RIP: 0033:0x7f607b0de549 [ 165.627650][ T5422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 165.647282][ T5422] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 165.655719][ T5422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5422] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5422] close(3) = 0 [pid 5422] close(4) = 0 [pid 5422] close(5) = 0 [pid 5422] close(6) = 0 [pid 5422] close(7) = 0 [pid 5422] close(8) = -1 EBADF (Bad file descriptor) [pid 5422] close(9) = -1 EBADF (Bad file descriptor) [pid 5422] close(10) = -1 EBADF (Bad file descriptor) [pid 5422] close(11) = -1 EBADF (Bad file descriptor) [pid 5422] close(12) = -1 EBADF (Bad file descriptor) [pid 5422] close(13) = -1 EBADF (Bad file descriptor) [pid 5422] close(14) = -1 EBADF (Bad file descriptor) [pid 5422] close(15) = -1 EBADF (Bad file descriptor) [pid 5422] close(16) = -1 EBADF (Bad file descriptor) [pid 5422] close(17) = -1 EBADF (Bad file descriptor) [pid 5422] close(18) = -1 EBADF (Bad file descriptor) [pid 5422] close(19) = -1 EBADF (Bad file descriptor) [pid 5422] close(20) = -1 EBADF (Bad file descriptor) [pid 5422] close(21) = -1 EBADF (Bad file descriptor) [pid 5422] close(22) = -1 EBADF (Bad file descriptor) [pid 5422] close(23) = -1 EBADF (Bad file descriptor) [pid 5422] close(24) = -1 EBADF (Bad file descriptor) [pid 5422] close(25) = -1 EBADF (Bad file descriptor) [pid 5422] close(26) = -1 EBADF (Bad file descriptor) [pid 5422] close(27) = -1 EBADF (Bad file descriptor) [pid 5422] close(28) = -1 EBADF (Bad file descriptor) [pid 5422] close(29) = -1 EBADF (Bad file descriptor) [pid 5422] exit_group(0) = ? [pid 5422] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 322 ./strace-static-x86_64: Process 5423 attached [pid 5423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5423] setpgid(0, 0) = 0 [pid 5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5423] write(3, "1000", 4) = 4 [pid 5423] close(3) = 0 [pid 5423] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5423] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5423] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5423] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5423] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5423] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5423] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5423] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5423] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5423] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5423] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5423] write(7, "5", 1) = 1 [ 165.663709][ T5422] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 165.671704][ T5422] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 165.679699][ T5422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 165.687694][ T5422] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 165.695713][ T5422] [ 165.739090][ T5423] FAULT_INJECTION: forcing a failure. [ 165.739090][ T5423] name failslab, interval 1, probability 0, space 0, times 0 [ 165.751826][ T5423] CPU: 0 PID: 5423 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 165.761846][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 165.771937][ T5423] Call Trace: [ 165.775227][ T5423] [ 165.778156][ T5423] dump_stack_lvl+0xd1/0x138 [ 165.782760][ T5423] should_fail_ex.cold+0x5/0xa [ 165.787542][ T5423] ? __inet_hash_connect+0x95e/0x1ba0 [ 165.792947][ T5423] should_failslab+0x9/0x20 [ 165.797468][ T5423] kmem_cache_alloc+0x5a/0x320 [ 165.802264][ T5423] __inet_hash_connect+0x95e/0x1ba0 [ 165.807495][ T5423] ? __inet_lookup_listener+0xbf0/0xbf0 [ 165.813096][ T5423] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 165.819475][ T5423] dccp_v4_connect+0xb82/0x1730 [ 165.824378][ T5423] __inet_stream_connect+0x69e/0xed0 [ 165.829711][ T5423] ? inet_listen+0x640/0x640 [ 165.834339][ T5423] ? mark_held_locks+0x9f/0xe0 [ 165.839132][ T5423] ? __local_bh_enable_ip+0xa4/0x130 [ 165.844447][ T5423] inet_stream_connect+0x57/0xa0 [ 165.849421][ T5423] ? __inet_stream_connect+0xed0/0xed0 [ 165.854915][ T5423] __sys_connect_file+0x153/0x1a0 [ 165.859966][ T5423] io_connect+0x3cc/0x720 [ 165.864336][ T5423] ? io_connect_prep+0x250/0x250 [ 165.869303][ T5423] ? receive_fd+0x110/0x110 [ 165.873843][ T5423] ? rcu_read_lock_sched_held+0x3e/0x70 [ 165.879411][ T5423] ? io_connect_prep+0x250/0x250 [ 165.884380][ T5423] io_issue_sqe+0x695/0x1250 [ 165.889091][ T5423] io_submit_sqes+0x96c/0x1e90 [ 165.893903][ T5423] __do_sys_io_uring_enter+0x103d/0x24e0 [ 165.899572][ T5423] ? io_submit_sqes+0x1e90/0x1e90 [ 165.904630][ T5423] ? ptrace_notify+0xfe/0x140 [ 165.909331][ T5423] ? lock_downgrade+0x6e0/0x6e0 [ 165.914212][ T5423] ? _raw_spin_unlock_irq+0x23/0x50 [ 165.919546][ T5423] ? lockdep_hardirqs_on+0x7d/0x100 [ 165.924793][ T5423] ? _raw_spin_unlock_irq+0x2e/0x50 [ 165.930032][ T5423] ? ptrace_notify+0xfe/0x140 [ 165.934740][ T5423] do_syscall_64+0x39/0xb0 [ 165.939187][ T5423] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 165.945107][ T5423] RIP: 0033:0x7f607b0de549 [ 165.949544][ T5423] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 165.969190][ T5423] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 165.977630][ T5423] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5423] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5423] close(3) = 0 [pid 5423] close(4) = 0 [pid 5423] close(5) = 0 [pid 5423] close(6) = 0 [pid 5423] close(7) = 0 [pid 5423] close(8) = -1 EBADF (Bad file descriptor) [pid 5423] close(9) = -1 EBADF (Bad file descriptor) [pid 5423] close(10) = -1 EBADF (Bad file descriptor) [pid 5423] close(11) = -1 EBADF (Bad file descriptor) [pid 5423] close(12) = -1 EBADF (Bad file descriptor) [pid 5423] close(13) = -1 EBADF (Bad file descriptor) [pid 5423] close(14) = -1 EBADF (Bad file descriptor) [pid 5423] close(15) = -1 EBADF (Bad file descriptor) [pid 5423] close(16) = -1 EBADF (Bad file descriptor) [pid 5423] close(17) = -1 EBADF (Bad file descriptor) [pid 5423] close(18) = -1 EBADF (Bad file descriptor) [pid 5423] close(19) = -1 EBADF (Bad file descriptor) [pid 5423] close(20) = -1 EBADF (Bad file descriptor) [pid 5423] close(21) = -1 EBADF (Bad file descriptor) [pid 5423] close(22) = -1 EBADF (Bad file descriptor) [pid 5423] close(23) = -1 EBADF (Bad file descriptor) [pid 5423] close(24) = -1 EBADF (Bad file descriptor) [pid 5423] close(25) = -1 EBADF (Bad file descriptor) [pid 5423] close(26) = -1 EBADF (Bad file descriptor) [pid 5423] close(27) = -1 EBADF (Bad file descriptor) [pid 5423] close(28) = -1 EBADF (Bad file descriptor) [pid 5423] close(29) = -1 EBADF (Bad file descriptor) [pid 5423] exit_group(0) = ? [pid 5423] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 323 ./strace-static-x86_64: Process 5424 attached [pid 5424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5424] setpgid(0, 0) = 0 [pid 5424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5424] write(3, "1000", 4) = 4 [pid 5424] close(3) = 0 [pid 5424] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5424] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5424] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5424] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5424] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5424] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5424] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5424] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5424] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5424] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5424] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5424] write(7, "5", 1) = 1 [ 165.985638][ T5423] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 165.993628][ T5423] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 166.001624][ T5423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 166.009618][ T5423] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 166.017651][ T5423] [ 166.067598][ T5424] FAULT_INJECTION: forcing a failure. [ 166.067598][ T5424] name failslab, interval 1, probability 0, space 0, times 0 [ 166.080421][ T5424] CPU: 0 PID: 5424 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 166.090333][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 166.100422][ T5424] Call Trace: [ 166.103721][ T5424] [ 166.106661][ T5424] dump_stack_lvl+0xd1/0x138 [ 166.111262][ T5424] should_fail_ex.cold+0x5/0xa [ 166.116032][ T5424] ? __inet_hash_connect+0x95e/0x1ba0 [ 166.121409][ T5424] should_failslab+0x9/0x20 [ 166.125960][ T5424] kmem_cache_alloc+0x5a/0x320 [ 166.130915][ T5424] __inet_hash_connect+0x95e/0x1ba0 [ 166.136122][ T5424] ? __inet_lookup_listener+0xbf0/0xbf0 [ 166.141701][ T5424] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 166.148080][ T5424] dccp_v4_connect+0xb82/0x1730 [ 166.152978][ T5424] __inet_stream_connect+0x69e/0xed0 [ 166.158307][ T5424] ? inet_listen+0x640/0x640 [ 166.162935][ T5424] ? mark_held_locks+0x9f/0xe0 [ 166.167724][ T5424] ? __local_bh_enable_ip+0xa4/0x130 [ 166.173035][ T5424] inet_stream_connect+0x57/0xa0 [ 166.178006][ T5424] ? __inet_stream_connect+0xed0/0xed0 [ 166.183501][ T5424] __sys_connect_file+0x153/0x1a0 [ 166.188561][ T5424] io_connect+0x3cc/0x720 [ 166.192937][ T5424] ? io_connect_prep+0x250/0x250 [ 166.197909][ T5424] ? receive_fd+0x110/0x110 [ 166.202540][ T5424] ? rcu_read_lock_sched_held+0x3e/0x70 [ 166.208109][ T5424] ? io_connect_prep+0x250/0x250 [ 166.213086][ T5424] io_issue_sqe+0x695/0x1250 [ 166.217874][ T5424] io_submit_sqes+0x96c/0x1e90 [ 166.222688][ T5424] __do_sys_io_uring_enter+0x103d/0x24e0 [ 166.228359][ T5424] ? io_submit_sqes+0x1e90/0x1e90 [ 166.233501][ T5424] ? ptrace_notify+0xfe/0x140 [ 166.238284][ T5424] ? lock_downgrade+0x6e0/0x6e0 [ 166.243168][ T5424] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.248406][ T5424] ? lockdep_hardirqs_on+0x7d/0x100 [ 166.253648][ T5424] ? _raw_spin_unlock_irq+0x2e/0x50 [ 166.258871][ T5424] ? ptrace_notify+0xfe/0x140 [ 166.263595][ T5424] do_syscall_64+0x39/0xb0 [ 166.268046][ T5424] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 166.273965][ T5424] RIP: 0033:0x7f607b0de549 [ 166.278400][ T5424] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 166.298031][ T5424] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 166.306467][ T5424] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5424] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5424] close(3) = 0 [pid 5424] close(4) = 0 [pid 5424] close(5) = 0 [pid 5424] close(6) = 0 [pid 5424] close(7) = 0 [pid 5424] close(8) = -1 EBADF (Bad file descriptor) [pid 5424] close(9) = -1 EBADF (Bad file descriptor) [pid 5424] close(10) = -1 EBADF (Bad file descriptor) [pid 5424] close(11) = -1 EBADF (Bad file descriptor) [pid 5424] close(12) = -1 EBADF (Bad file descriptor) [pid 5424] close(13) = -1 EBADF (Bad file descriptor) [pid 5424] close(14) = -1 EBADF (Bad file descriptor) [pid 5424] close(15) = -1 EBADF (Bad file descriptor) [pid 5424] close(16) = -1 EBADF (Bad file descriptor) [pid 5424] close(17) = -1 EBADF (Bad file descriptor) [pid 5424] close(18) = -1 EBADF (Bad file descriptor) [pid 5424] close(19) = -1 EBADF (Bad file descriptor) [pid 5424] close(20) = -1 EBADF (Bad file descriptor) [pid 5424] close(21) = -1 EBADF (Bad file descriptor) [pid 5424] close(22) = -1 EBADF (Bad file descriptor) [pid 5424] close(23) = -1 EBADF (Bad file descriptor) [pid 5424] close(24) = -1 EBADF (Bad file descriptor) [pid 5424] close(25) = -1 EBADF (Bad file descriptor) [pid 5424] close(26) = -1 EBADF (Bad file descriptor) [pid 5424] close(27) = -1 EBADF (Bad file descriptor) [pid 5424] close(28) = -1 EBADF (Bad file descriptor) [pid 5424] close(29) = -1 EBADF (Bad file descriptor) [pid 5424] exit_group(0) = ? [pid 5424] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 324 ./strace-static-x86_64: Process 5425 attached [pid 5425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5425] setpgid(0, 0) = 0 [pid 5425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5425] write(3, "1000", 4) = 4 [pid 5425] close(3) = 0 [pid 5425] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5425] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5425] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5425] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5425] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5425] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5425] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5425] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5425] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5425] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5425] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5425] write(7, "5", 1) = 1 [ 166.314468][ T5424] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 166.322457][ T5424] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 166.330446][ T5424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 166.338434][ T5424] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 166.346446][ T5424] [ 166.390890][ T5425] FAULT_INJECTION: forcing a failure. [ 166.390890][ T5425] name failslab, interval 1, probability 0, space 0, times 0 [ 166.403956][ T5425] CPU: 0 PID: 5425 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 166.413852][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 166.423911][ T5425] Call Trace: [ 166.427202][ T5425] [ 166.430170][ T5425] dump_stack_lvl+0xd1/0x138 [ 166.434813][ T5425] should_fail_ex.cold+0x5/0xa [ 166.439596][ T5425] ? __inet_hash_connect+0x95e/0x1ba0 [ 166.444982][ T5425] should_failslab+0x9/0x20 [ 166.449499][ T5425] kmem_cache_alloc+0x5a/0x320 [ 166.454392][ T5425] __inet_hash_connect+0x95e/0x1ba0 [ 166.459629][ T5425] ? __inet_lookup_listener+0xbf0/0xbf0 [ 166.465211][ T5425] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 166.471569][ T5425] dccp_v4_connect+0xb82/0x1730 [ 166.476471][ T5425] __inet_stream_connect+0x69e/0xed0 [ 166.481806][ T5425] ? inet_listen+0x640/0x640 [ 166.486417][ T5425] ? preempt_schedule_thunk+0x1a/0x20 [ 166.491837][ T5425] ? preempt_schedule_common+0x59/0xc0 [ 166.497331][ T5425] ? preempt_schedule_thunk+0x1a/0x20 [ 166.502717][ T5425] inet_stream_connect+0x57/0xa0 [ 166.507687][ T5425] ? __inet_stream_connect+0xed0/0xed0 [ 166.513202][ T5425] __sys_connect_file+0x153/0x1a0 [ 166.518239][ T5425] io_connect+0x3cc/0x720 [ 166.522591][ T5425] ? io_connect_prep+0x250/0x250 [ 166.527561][ T5425] ? receive_fd+0x110/0x110 [ 166.532136][ T5425] ? rcu_read_lock_sched_held+0x3e/0x70 [ 166.537729][ T5425] ? io_connect_prep+0x250/0x250 [ 166.542713][ T5425] io_issue_sqe+0x695/0x1250 [ 166.547318][ T5425] io_submit_sqes+0x96c/0x1e90 [ 166.552129][ T5425] __do_sys_io_uring_enter+0x103d/0x24e0 [ 166.557827][ T5425] ? io_submit_sqes+0x1e90/0x1e90 [ 166.562899][ T5425] ? ptrace_notify+0xfe/0x140 [ 166.567684][ T5425] ? lock_downgrade+0x6e0/0x6e0 [ 166.572641][ T5425] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.577973][ T5425] ? lockdep_hardirqs_on+0x7d/0x100 [ 166.583213][ T5425] ? _raw_spin_unlock_irq+0x2e/0x50 [ 166.588434][ T5425] ? ptrace_notify+0xfe/0x140 [ 166.593124][ T5425] do_syscall_64+0x39/0xb0 [ 166.597552][ T5425] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 166.603452][ T5425] RIP: 0033:0x7f607b0de549 [ 166.607869][ T5425] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 166.627486][ T5425] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [pid 5425] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5425] close(3) = 0 [pid 5425] close(4) = 0 [pid 5425] close(5) = 0 [pid 5425] close(6) = 0 [pid 5425] close(7) = 0 [pid 5425] close(8) = -1 EBADF (Bad file descriptor) [pid 5425] close(9) = -1 EBADF (Bad file descriptor) [pid 5425] close(10) = -1 EBADF (Bad file descriptor) [pid 5425] close(11) = -1 EBADF (Bad file descriptor) [pid 5425] close(12) = -1 EBADF (Bad file descriptor) [pid 5425] close(13) = -1 EBADF (Bad file descriptor) [pid 5425] close(14) = -1 EBADF (Bad file descriptor) [pid 5425] close(15) = -1 EBADF (Bad file descriptor) [pid 5425] close(16) = -1 EBADF (Bad file descriptor) [pid 5425] close(17) = -1 EBADF (Bad file descriptor) [pid 5425] close(18) = -1 EBADF (Bad file descriptor) [pid 5425] close(19) = -1 EBADF (Bad file descriptor) [pid 5425] close(20) = -1 EBADF (Bad file descriptor) [pid 5425] close(21) = -1 EBADF (Bad file descriptor) [pid 5425] close(22) = -1 EBADF (Bad file descriptor) [pid 5425] close(23) = -1 EBADF (Bad file descriptor) [pid 5425] close(24) = -1 EBADF (Bad file descriptor) [pid 5425] close(25) = -1 EBADF (Bad file descriptor) [pid 5425] close(26) = -1 EBADF (Bad file descriptor) [pid 5425] close(27) = -1 EBADF (Bad file descriptor) [pid 5425] close(28) = -1 EBADF (Bad file descriptor) [pid 5425] close(29) = -1 EBADF (Bad file descriptor) [pid 5425] exit_group(0) = ? [pid 5425] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 325 ./strace-static-x86_64: Process 5426 attached [pid 5426] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5426] setpgid(0, 0) = 0 [pid 5426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5426] write(3, "1000", 4) = 4 [pid 5426] close(3) = 0 [pid 5426] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5426] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5426] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5426] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5426] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5426] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 166.635911][ T5425] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 166.643896][ T5425] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 166.651890][ T5425] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 166.659866][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 166.667846][ T5425] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 166.675833][ T5425] [pid 5426] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5426] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5426] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5426] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5426] write(7, "5", 1) = 1 [ 166.731078][ T5426] FAULT_INJECTION: forcing a failure. [ 166.731078][ T5426] name failslab, interval 1, probability 0, space 0, times 0 [ 166.743799][ T5426] CPU: 1 PID: 5426 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 166.753704][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 166.763965][ T5426] Call Trace: [ 166.767260][ T5426] [ 166.770194][ T5426] dump_stack_lvl+0xd1/0x138 [ 166.774806][ T5426] should_fail_ex.cold+0x5/0xa [ 166.779589][ T5426] ? __inet_hash_connect+0x95e/0x1ba0 [ 166.786914][ T5426] should_failslab+0x9/0x20 [ 166.791442][ T5426] kmem_cache_alloc+0x5a/0x320 [ 166.796224][ T5426] __inet_hash_connect+0x95e/0x1ba0 [ 166.801451][ T5426] ? __inet_lookup_listener+0xbf0/0xbf0 [ 166.807031][ T5426] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 166.813405][ T5426] dccp_v4_connect+0xb82/0x1730 [ 166.818303][ T5426] __inet_stream_connect+0x69e/0xed0 [ 166.823640][ T5426] ? inet_listen+0x640/0x640 [ 166.828261][ T5426] ? mark_held_locks+0x9f/0xe0 [ 166.833056][ T5426] ? __local_bh_enable_ip+0xa4/0x130 [ 166.838368][ T5426] inet_stream_connect+0x57/0xa0 [ 166.843552][ T5426] ? __inet_stream_connect+0xed0/0xed0 [ 166.849032][ T5426] __sys_connect_file+0x153/0x1a0 [ 166.854171][ T5426] io_connect+0x3cc/0x720 [ 166.858569][ T5426] ? io_connect_prep+0x250/0x250 [ 166.863555][ T5426] ? receive_fd+0x110/0x110 [ 166.868075][ T5426] ? rcu_read_lock_sched_held+0x3e/0x70 [ 166.873646][ T5426] ? io_connect_prep+0x250/0x250 [ 166.878606][ T5426] io_issue_sqe+0x695/0x1250 [ 166.883236][ T5426] io_submit_sqes+0x96c/0x1e90 [ 166.888024][ T5426] __do_sys_io_uring_enter+0x103d/0x24e0 [ 166.893762][ T5426] ? io_submit_sqes+0x1e90/0x1e90 [ 166.898838][ T5426] ? ptrace_notify+0xfe/0x140 [ 166.903524][ T5426] ? lock_downgrade+0x6e0/0x6e0 [ 166.908411][ T5426] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.913646][ T5426] ? lockdep_hardirqs_on+0x7d/0x100 [ 166.918849][ T5426] ? _raw_spin_unlock_irq+0x2e/0x50 [ 166.924063][ T5426] ? ptrace_notify+0xfe/0x140 [ 166.928770][ T5426] do_syscall_64+0x39/0xb0 [ 166.933193][ T5426] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 166.939087][ T5426] RIP: 0033:0x7f607b0de549 [ 166.943505][ T5426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 166.963244][ T5426] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 166.971663][ T5426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5426] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5426] close(3) = 0 [pid 5426] close(4) = 0 [pid 5426] close(5) = 0 [pid 5426] close(6) = 0 [pid 5426] close(7) = 0 [pid 5426] close(8) = -1 EBADF (Bad file descriptor) [pid 5426] close(9) = -1 EBADF (Bad file descriptor) [pid 5426] close(10) = -1 EBADF (Bad file descriptor) [pid 5426] close(11) = -1 EBADF (Bad file descriptor) [pid 5426] close(12) = -1 EBADF (Bad file descriptor) [pid 5426] close(13) = -1 EBADF (Bad file descriptor) [pid 5426] close(14) = -1 EBADF (Bad file descriptor) [pid 5426] close(15) = -1 EBADF (Bad file descriptor) [pid 5426] close(16) = -1 EBADF (Bad file descriptor) [pid 5426] close(17) = -1 EBADF (Bad file descriptor) [pid 5426] close(18) = -1 EBADF (Bad file descriptor) [pid 5426] close(19) = -1 EBADF (Bad file descriptor) [pid 5426] close(20) = -1 EBADF (Bad file descriptor) [pid 5426] close(21) = -1 EBADF (Bad file descriptor) [pid 5426] close(22) = -1 EBADF (Bad file descriptor) [pid 5426] close(23) = -1 EBADF (Bad file descriptor) [pid 5426] close(24) = -1 EBADF (Bad file descriptor) [pid 5426] close(25) = -1 EBADF (Bad file descriptor) [pid 5426] close(26) = -1 EBADF (Bad file descriptor) [pid 5426] close(27) = -1 EBADF (Bad file descriptor) [pid 5426] close(28) = -1 EBADF (Bad file descriptor) [pid 5426] close(29) = -1 EBADF (Bad file descriptor) [pid 5426] exit_group(0) = ? [pid 5426] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5427 attached , child_tidptr=0x555555eff5d0) = 326 [pid 5427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5427] setpgid(0, 0) = 0 [pid 5427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5427] write(3, "1000", 4) = 4 [pid 5427] close(3) = 0 [pid 5427] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5427] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5427] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5427] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5427] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5427] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5427] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5427] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5427] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5427] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5427] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5427] write(7, "5", 1) = 1 [ 166.979653][ T5426] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 166.987651][ T5426] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 166.995715][ T5426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 167.003796][ T5426] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 167.011918][ T5426] [ 167.048971][ T5427] FAULT_INJECTION: forcing a failure. [ 167.048971][ T5427] name failslab, interval 1, probability 0, space 0, times 0 [ 167.061670][ T5427] CPU: 0 PID: 5427 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 167.071730][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 167.081792][ T5427] Call Trace: [ 167.085080][ T5427] [ 167.088009][ T5427] dump_stack_lvl+0xd1/0x138 [ 167.092614][ T5427] should_fail_ex.cold+0x5/0xa [ 167.097384][ T5427] ? __inet_hash_connect+0x95e/0x1ba0 [ 167.102788][ T5427] should_failslab+0x9/0x20 [ 167.107321][ T5427] kmem_cache_alloc+0x5a/0x320 [ 167.112103][ T5427] __inet_hash_connect+0x95e/0x1ba0 [ 167.117311][ T5427] ? __inet_lookup_listener+0xbf0/0xbf0 [ 167.122868][ T5427] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 167.129249][ T5427] dccp_v4_connect+0xb82/0x1730 [ 167.134147][ T5427] __inet_stream_connect+0x69e/0xed0 [ 167.139446][ T5427] ? inet_listen+0x640/0x640 [ 167.144049][ T5427] ? mark_held_locks+0x9f/0xe0 [ 167.148909][ T5427] ? __local_bh_enable_ip+0xa4/0x130 [ 167.154223][ T5427] inet_stream_connect+0x57/0xa0 [ 167.159255][ T5427] ? __inet_stream_connect+0xed0/0xed0 [ 167.164739][ T5427] __sys_connect_file+0x153/0x1a0 [ 167.169793][ T5427] io_connect+0x3cc/0x720 [ 167.174136][ T5427] ? io_connect_prep+0x250/0x250 [ 167.179095][ T5427] ? receive_fd+0x110/0x110 [ 167.183649][ T5427] ? rcu_read_lock_sched_held+0x3e/0x70 [ 167.189211][ T5427] ? io_connect_prep+0x250/0x250 [ 167.194215][ T5427] io_issue_sqe+0x695/0x1250 [ 167.198922][ T5427] io_submit_sqes+0x96c/0x1e90 [ 167.203737][ T5427] __do_sys_io_uring_enter+0x103d/0x24e0 [ 167.209424][ T5427] ? io_submit_sqes+0x1e90/0x1e90 [ 167.214478][ T5427] ? ptrace_notify+0xfe/0x140 [ 167.219172][ T5427] ? lock_downgrade+0x6e0/0x6e0 [ 167.224057][ T5427] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.229277][ T5427] ? lockdep_hardirqs_on+0x7d/0x100 [ 167.234634][ T5427] ? _raw_spin_unlock_irq+0x2e/0x50 [ 167.239863][ T5427] ? ptrace_notify+0xfe/0x140 [ 167.244560][ T5427] do_syscall_64+0x39/0xb0 [ 167.249032][ T5427] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 167.254967][ T5427] RIP: 0033:0x7f607b0de549 [ 167.259395][ T5427] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 167.279029][ T5427] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 167.287494][ T5427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5427] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5427] close(3) = 0 [pid 5427] close(4) = 0 [pid 5427] close(5) = 0 [pid 5427] close(6) = 0 [pid 5427] close(7) = 0 [pid 5427] close(8) = -1 EBADF (Bad file descriptor) [pid 5427] close(9) = -1 EBADF (Bad file descriptor) [pid 5427] close(10) = -1 EBADF (Bad file descriptor) [pid 5427] close(11) = -1 EBADF (Bad file descriptor) [pid 5427] close(12) = -1 EBADF (Bad file descriptor) [pid 5427] close(13) = -1 EBADF (Bad file descriptor) [pid 5427] close(14) = -1 EBADF (Bad file descriptor) [pid 5427] close(15) = -1 EBADF (Bad file descriptor) [pid 5427] close(16) = -1 EBADF (Bad file descriptor) [pid 5427] close(17) = -1 EBADF (Bad file descriptor) [pid 5427] close(18) = -1 EBADF (Bad file descriptor) [pid 5427] close(19) = -1 EBADF (Bad file descriptor) [pid 5427] close(20) = -1 EBADF (Bad file descriptor) [pid 5427] close(21) = -1 EBADF (Bad file descriptor) [pid 5427] close(22) = -1 EBADF (Bad file descriptor) [pid 5427] close(23) = -1 EBADF (Bad file descriptor) [pid 5427] close(24) = -1 EBADF (Bad file descriptor) [pid 5427] close(25) = -1 EBADF (Bad file descriptor) [pid 5427] close(26) = -1 EBADF (Bad file descriptor) [pid 5427] close(27) = -1 EBADF (Bad file descriptor) [pid 5427] close(28) = -1 EBADF (Bad file descriptor) [pid 5427] close(29) = -1 EBADF (Bad file descriptor) [pid 5427] exit_group(0) = ? [pid 5427] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 327 ./strace-static-x86_64: Process 5428 attached [pid 5428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5428] setpgid(0, 0) = 0 [pid 5428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5428] write(3, "1000", 4) = 4 [pid 5428] close(3) = 0 [pid 5428] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5428] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5428] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5428] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5428] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5428] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5428] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5428] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5428] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5428] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5428] write(7, "5", 1) = 1 [ 167.295489][ T5427] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 167.303476][ T5427] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 167.311456][ T5427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 167.319526][ T5427] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 167.327535][ T5427] [ 167.360141][ T5428] FAULT_INJECTION: forcing a failure. [ 167.360141][ T5428] name failslab, interval 1, probability 0, space 0, times 0 [ 167.373014][ T5428] CPU: 0 PID: 5428 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 167.382956][ T5428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 167.393048][ T5428] Call Trace: [ 167.396346][ T5428] [ 167.399273][ T5428] dump_stack_lvl+0xd1/0x138 [ 167.403874][ T5428] should_fail_ex.cold+0x5/0xa [ 167.408642][ T5428] ? __inet_hash_connect+0x95e/0x1ba0 [ 167.414023][ T5428] should_failslab+0x9/0x20 [ 167.418540][ T5428] kmem_cache_alloc+0x5a/0x320 [ 167.423338][ T5428] __inet_hash_connect+0x95e/0x1ba0 [ 167.428546][ T5428] ? __inet_lookup_listener+0xbf0/0xbf0 [ 167.434109][ T5428] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 167.440460][ T5428] dccp_v4_connect+0xb82/0x1730 [ 167.445366][ T5428] __inet_stream_connect+0x69e/0xed0 [ 167.450697][ T5428] ? inet_listen+0x640/0x640 [ 167.455295][ T5428] ? mark_held_locks+0x9f/0xe0 [ 167.460096][ T5428] ? __local_bh_enable_ip+0xa4/0x130 [ 167.465427][ T5428] inet_stream_connect+0x57/0xa0 [ 167.470398][ T5428] ? __inet_stream_connect+0xed0/0xed0 [ 167.475925][ T5428] __sys_connect_file+0x153/0x1a0 [ 167.480974][ T5428] io_connect+0x3cc/0x720 [ 167.485345][ T5428] ? io_connect_prep+0x250/0x250 [ 167.490316][ T5428] ? receive_fd+0x110/0x110 [ 167.494863][ T5428] ? rcu_read_lock_sched_held+0x3e/0x70 [ 167.500434][ T5428] ? io_connect_prep+0x250/0x250 [ 167.505409][ T5428] io_issue_sqe+0x695/0x1250 [ 167.510036][ T5428] io_submit_sqes+0x96c/0x1e90 [ 167.514846][ T5428] __do_sys_io_uring_enter+0x103d/0x24e0 [ 167.520519][ T5428] ? io_submit_sqes+0x1e90/0x1e90 [ 167.525574][ T5428] ? ptrace_notify+0xfe/0x140 [ 167.530270][ T5428] ? lock_downgrade+0x6e0/0x6e0 [ 167.535151][ T5428] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.540378][ T5428] ? lockdep_hardirqs_on+0x7d/0x100 [ 167.545611][ T5428] ? _raw_spin_unlock_irq+0x2e/0x50 [ 167.550834][ T5428] ? ptrace_notify+0xfe/0x140 [ 167.555540][ T5428] do_syscall_64+0x39/0xb0 [ 167.559992][ T5428] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 167.565913][ T5428] RIP: 0033:0x7f607b0de549 [ 167.570352][ T5428] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 167.589993][ T5428] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 167.598435][ T5428] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5428] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5428] close(3) = 0 [pid 5428] close(4) = 0 [pid 5428] close(5) = 0 [pid 5428] close(6) = 0 [pid 5428] close(7) = 0 [pid 5428] close(8) = -1 EBADF (Bad file descriptor) [pid 5428] close(9) = -1 EBADF (Bad file descriptor) [pid 5428] close(10) = -1 EBADF (Bad file descriptor) [pid 5428] close(11) = -1 EBADF (Bad file descriptor) [pid 5428] close(12) = -1 EBADF (Bad file descriptor) [pid 5428] close(13) = -1 EBADF (Bad file descriptor) [pid 5428] close(14) = -1 EBADF (Bad file descriptor) [pid 5428] close(15) = -1 EBADF (Bad file descriptor) [pid 5428] close(16) = -1 EBADF (Bad file descriptor) [pid 5428] close(17) = -1 EBADF (Bad file descriptor) [pid 5428] close(18) = -1 EBADF (Bad file descriptor) [pid 5428] close(19) = -1 EBADF (Bad file descriptor) [pid 5428] close(20) = -1 EBADF (Bad file descriptor) [pid 5428] close(21) = -1 EBADF (Bad file descriptor) [pid 5428] close(22) = -1 EBADF (Bad file descriptor) [pid 5428] close(23) = -1 EBADF (Bad file descriptor) [pid 5428] close(24) = -1 EBADF (Bad file descriptor) [pid 5428] close(25) = -1 EBADF (Bad file descriptor) [pid 5428] close(26) = -1 EBADF (Bad file descriptor) [pid 5428] close(27) = -1 EBADF (Bad file descriptor) [pid 5428] close(28) = -1 EBADF (Bad file descriptor) [pid 5428] close(29) = -1 EBADF (Bad file descriptor) [pid 5428] exit_group(0) = ? [pid 5428] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 328 ./strace-static-x86_64: Process 5429 attached [pid 5429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5429] setpgid(0, 0) = 0 [pid 5429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5429] write(3, "1000", 4) = 4 [pid 5429] close(3) = 0 [pid 5429] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5429] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5429] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5429] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5429] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5429] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5429] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5429] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5429] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5429] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5429] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5429] write(7, "5", 1) = 1 [ 167.606429][ T5428] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 167.614420][ T5428] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 167.622414][ T5428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 167.630409][ T5428] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 167.638432][ T5428] [ 167.691093][ T5429] FAULT_INJECTION: forcing a failure. [ 167.691093][ T5429] name failslab, interval 1, probability 0, space 0, times 0 [ 167.703801][ T5429] CPU: 0 PID: 5429 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 167.713709][ T5429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 167.723768][ T5429] Call Trace: [ 167.727045][ T5429] [ 167.729977][ T5429] dump_stack_lvl+0xd1/0x138 [ 167.734583][ T5429] should_fail_ex.cold+0x5/0xa [ 167.739352][ T5429] ? __inet_hash_connect+0x95e/0x1ba0 [ 167.744743][ T5429] should_failslab+0x9/0x20 [ 167.749285][ T5429] kmem_cache_alloc+0x5a/0x320 [ 167.754064][ T5429] __inet_hash_connect+0x95e/0x1ba0 [ 167.759272][ T5429] ? __inet_lookup_listener+0xbf0/0xbf0 [ 167.764846][ T5429] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 167.771219][ T5429] dccp_v4_connect+0xb82/0x1730 [ 167.776116][ T5429] __inet_stream_connect+0x69e/0xed0 [ 167.781448][ T5429] ? inet_listen+0x640/0x640 [ 167.786067][ T5429] ? mark_held_locks+0x9f/0xe0 [ 167.790860][ T5429] ? __local_bh_enable_ip+0xa4/0x130 [ 167.796172][ T5429] inet_stream_connect+0x57/0xa0 [ 167.801154][ T5429] ? __inet_stream_connect+0xed0/0xed0 [ 167.806623][ T5429] __sys_connect_file+0x153/0x1a0 [ 167.811672][ T5429] io_connect+0x3cc/0x720 [ 167.816054][ T5429] ? io_connect_prep+0x250/0x250 [ 167.821032][ T5429] ? receive_fd+0x110/0x110 [ 167.825553][ T5429] ? rcu_read_lock_sched_held+0x3e/0x70 [ 167.831109][ T5429] ? io_connect_prep+0x250/0x250 [ 167.836072][ T5429] io_issue_sqe+0x695/0x1250 [ 167.840702][ T5429] io_submit_sqes+0x96c/0x1e90 [ 167.845487][ T5429] __do_sys_io_uring_enter+0x103d/0x24e0 [ 167.851132][ T5429] ? io_submit_sqes+0x1e90/0x1e90 [ 167.856186][ T5429] ? ptrace_notify+0xfe/0x140 [ 167.860907][ T5429] ? lock_downgrade+0x6e0/0x6e0 [ 167.865791][ T5429] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.870997][ T5429] ? lockdep_hardirqs_on+0x7d/0x100 [ 167.876215][ T5429] ? _raw_spin_unlock_irq+0x2e/0x50 [ 167.881450][ T5429] ? ptrace_notify+0xfe/0x140 [ 167.886153][ T5429] do_syscall_64+0x39/0xb0 [ 167.890632][ T5429] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 167.896553][ T5429] RIP: 0033:0x7f607b0de549 [ 167.900982][ T5429] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 167.920626][ T5429] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 167.929079][ T5429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5429] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5429] close(3) = 0 [pid 5429] close(4) = 0 [pid 5429] close(5) = 0 [pid 5429] close(6) = 0 [pid 5429] close(7) = 0 [pid 5429] close(8) = -1 EBADF (Bad file descriptor) [pid 5429] close(9) = -1 EBADF (Bad file descriptor) [pid 5429] close(10) = -1 EBADF (Bad file descriptor) [pid 5429] close(11) = -1 EBADF (Bad file descriptor) [pid 5429] close(12) = -1 EBADF (Bad file descriptor) [pid 5429] close(13) = -1 EBADF (Bad file descriptor) [pid 5429] close(14) = -1 EBADF (Bad file descriptor) [pid 5429] close(15) = -1 EBADF (Bad file descriptor) [pid 5429] close(16) = -1 EBADF (Bad file descriptor) [pid 5429] close(17) = -1 EBADF (Bad file descriptor) [pid 5429] close(18) = -1 EBADF (Bad file descriptor) [pid 5429] close(19) = -1 EBADF (Bad file descriptor) [pid 5429] close(20) = -1 EBADF (Bad file descriptor) [pid 5429] close(21) = -1 EBADF (Bad file descriptor) [pid 5429] close(22) = -1 EBADF (Bad file descriptor) [pid 5429] close(23) = -1 EBADF (Bad file descriptor) [pid 5429] close(24) = -1 EBADF (Bad file descriptor) [pid 5429] close(25) = -1 EBADF (Bad file descriptor) [pid 5429] close(26) = -1 EBADF (Bad file descriptor) [pid 5429] close(27) = -1 EBADF (Bad file descriptor) [pid 5429] close(28) = -1 EBADF (Bad file descriptor) [pid 5429] close(29) = -1 EBADF (Bad file descriptor) [pid 5429] exit_group(0) = ? [pid 5429] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 329 ./strace-static-x86_64: Process 5430 attached [pid 5430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5430] setpgid(0, 0) = 0 [pid 5430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5430] write(3, "1000", 4) = 4 [pid 5430] close(3) = 0 [pid 5430] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5430] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5430] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5430] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5430] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5430] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5430] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [ 167.937074][ T5429] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 167.945046][ T5429] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 167.953027][ T5429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 167.961031][ T5429] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 167.969060][ T5429] [pid 5430] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5430] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5430] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5430] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5430] write(7, "5", 1) = 1 [ 168.034150][ T5430] FAULT_INJECTION: forcing a failure. [ 168.034150][ T5430] name failslab, interval 1, probability 0, space 0, times 0 [ 168.046844][ T5430] CPU: 1 PID: 5430 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 168.056759][ T5430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 168.066823][ T5430] Call Trace: [ 168.070104][ T5430] [ 168.073037][ T5430] dump_stack_lvl+0xd1/0x138 [ 168.077657][ T5430] should_fail_ex.cold+0x5/0xa [ 168.082466][ T5430] ? __inet_hash_connect+0x95e/0x1ba0 [ 168.087872][ T5430] should_failslab+0x9/0x20 [ 168.092388][ T5430] kmem_cache_alloc+0x5a/0x320 [ 168.097163][ T5430] __inet_hash_connect+0x95e/0x1ba0 [ 168.102379][ T5430] ? __inet_lookup_listener+0xbf0/0xbf0 [ 168.107939][ T5430] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 168.114284][ T5430] dccp_v4_connect+0xb82/0x1730 [ 168.119157][ T5430] __inet_stream_connect+0x69e/0xed0 [ 168.124482][ T5430] ? inet_listen+0x640/0x640 [ 168.129123][ T5430] ? mark_held_locks+0x9f/0xe0 [ 168.133891][ T5430] ? __local_bh_enable_ip+0xa4/0x130 [ 168.139185][ T5430] inet_stream_connect+0x57/0xa0 [ 168.144134][ T5430] ? __inet_stream_connect+0xed0/0xed0 [ 168.149604][ T5430] __sys_connect_file+0x153/0x1a0 [ 168.154654][ T5430] io_connect+0x3cc/0x720 [ 168.159009][ T5430] ? io_connect_prep+0x250/0x250 [ 168.163963][ T5430] ? receive_fd+0x110/0x110 [ 168.168479][ T5430] ? rcu_read_lock_sched_held+0x3e/0x70 [ 168.174038][ T5430] ? io_connect_prep+0x250/0x250 [ 168.178987][ T5430] io_issue_sqe+0x695/0x1250 [ 168.183589][ T5430] io_submit_sqes+0x96c/0x1e90 [ 168.188371][ T5430] __do_sys_io_uring_enter+0x103d/0x24e0 [ 168.194068][ T5430] ? io_submit_sqes+0x1e90/0x1e90 [ 168.199131][ T5430] ? ptrace_notify+0xfe/0x140 [ 168.203826][ T5430] ? lock_downgrade+0x6e0/0x6e0 [ 168.208710][ T5430] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.213920][ T5430] ? lockdep_hardirqs_on+0x7d/0x100 [ 168.219135][ T5430] ? _raw_spin_unlock_irq+0x2e/0x50 [ 168.224366][ T5430] ? ptrace_notify+0xfe/0x140 [ 168.229071][ T5430] do_syscall_64+0x39/0xb0 [ 168.233526][ T5430] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 168.239448][ T5430] RIP: 0033:0x7f607b0de549 [ 168.243871][ T5430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 168.263485][ T5430] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 168.271917][ T5430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5430] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5430] close(3) = 0 [pid 5430] close(4) = 0 [pid 5430] close(5) = 0 [pid 5430] close(6) = 0 [pid 5430] close(7) = 0 [pid 5430] close(8) = -1 EBADF (Bad file descriptor) [pid 5430] close(9) = -1 EBADF (Bad file descriptor) [pid 5430] close(10) = -1 EBADF (Bad file descriptor) [pid 5430] close(11) = -1 EBADF (Bad file descriptor) [pid 5430] close(12) = -1 EBADF (Bad file descriptor) [pid 5430] close(13) = -1 EBADF (Bad file descriptor) [pid 5430] close(14) = -1 EBADF (Bad file descriptor) [pid 5430] close(15) = -1 EBADF (Bad file descriptor) [pid 5430] close(16) = -1 EBADF (Bad file descriptor) [pid 5430] close(17) = -1 EBADF (Bad file descriptor) [pid 5430] close(18) = -1 EBADF (Bad file descriptor) [pid 5430] close(19) = -1 EBADF (Bad file descriptor) [pid 5430] close(20) = -1 EBADF (Bad file descriptor) [pid 5430] close(21) = -1 EBADF (Bad file descriptor) [pid 5430] close(22) = -1 EBADF (Bad file descriptor) [pid 5430] close(23) = -1 EBADF (Bad file descriptor) [pid 5430] close(24) = -1 EBADF (Bad file descriptor) [pid 5430] close(25) = -1 EBADF (Bad file descriptor) [pid 5430] close(26) = -1 EBADF (Bad file descriptor) [pid 5430] close(27) = -1 EBADF (Bad file descriptor) [pid 5430] close(28) = -1 EBADF (Bad file descriptor) [pid 5430] close(29) = -1 EBADF (Bad file descriptor) [pid 5430] exit_group(0) = ? [pid 5430] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5431 attached , child_tidptr=0x555555eff5d0) = 330 [pid 5431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5431] setpgid(0, 0) = 0 [pid 5431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5431] write(3, "1000", 4) = 4 [pid 5431] close(3) = 0 [pid 5431] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5431] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5431] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5431] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5431] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5431] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5431] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5431] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5431] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5431] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5431] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5431] write(7, "5", 1) = 1 [ 168.279893][ T5430] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 168.287869][ T5430] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 168.295856][ T5430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 168.303864][ T5430] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 168.311899][ T5430] [ 168.346405][ T5431] FAULT_INJECTION: forcing a failure. [ 168.346405][ T5431] name failslab, interval 1, probability 0, space 0, times 0 [ 168.359139][ T5431] CPU: 0 PID: 5431 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 168.369069][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 168.379158][ T5431] Call Trace: [ 168.382452][ T5431] [ 168.385386][ T5431] dump_stack_lvl+0xd1/0x138 [ 168.389984][ T5431] should_fail_ex.cold+0x5/0xa [ 168.394768][ T5431] ? __inet_hash_connect+0x95e/0x1ba0 [ 168.400170][ T5431] should_failslab+0x9/0x20 [ 168.404696][ T5431] kmem_cache_alloc+0x5a/0x320 [ 168.409496][ T5431] __inet_hash_connect+0x95e/0x1ba0 [ 168.414731][ T5431] ? __inet_lookup_listener+0xbf0/0xbf0 [ 168.420318][ T5431] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 168.426700][ T5431] dccp_v4_connect+0xb82/0x1730 [ 168.431605][ T5431] __inet_stream_connect+0x69e/0xed0 [ 168.436948][ T5431] ? inet_listen+0x640/0x640 [ 168.441580][ T5431] ? mark_held_locks+0x9f/0xe0 [ 168.446352][ T5431] ? __local_bh_enable_ip+0xa4/0x130 [ 168.452172][ T5431] inet_stream_connect+0x57/0xa0 [ 168.457149][ T5431] ? __inet_stream_connect+0xed0/0xed0 [ 168.462729][ T5431] __sys_connect_file+0x153/0x1a0 [ 168.467791][ T5431] io_connect+0x3cc/0x720 [ 168.472179][ T5431] ? io_connect_prep+0x250/0x250 [ 168.477177][ T5431] ? receive_fd+0x110/0x110 [ 168.481752][ T5431] ? rcu_read_lock_sched_held+0x3e/0x70 [ 168.487331][ T5431] ? io_connect_prep+0x250/0x250 [ 168.492304][ T5431] io_issue_sqe+0x695/0x1250 [ 168.496931][ T5431] io_submit_sqes+0x96c/0x1e90 [ 168.501741][ T5431] __do_sys_io_uring_enter+0x103d/0x24e0 [ 168.507414][ T5431] ? io_submit_sqes+0x1e90/0x1e90 [ 168.512558][ T5431] ? ptrace_notify+0xfe/0x140 [ 168.517256][ T5431] ? lock_downgrade+0x6e0/0x6e0 [ 168.522135][ T5431] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.527364][ T5431] ? lockdep_hardirqs_on+0x7d/0x100 [ 168.532587][ T5431] ? _raw_spin_unlock_irq+0x2e/0x50 [ 168.537844][ T5431] ? ptrace_notify+0xfe/0x140 [ 168.542550][ T5431] do_syscall_64+0x39/0xb0 [ 168.546996][ T5431] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 168.552914][ T5431] RIP: 0033:0x7f607b0de549 [ 168.557345][ T5431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 168.576979][ T5431] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 168.585420][ T5431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5431] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5431] close(3) = 0 [pid 5431] close(4) = 0 [pid 5431] close(5) = 0 [pid 5431] close(6) = 0 [pid 5431] close(7) = 0 [pid 5431] close(8) = -1 EBADF (Bad file descriptor) [pid 5431] close(9) = -1 EBADF (Bad file descriptor) [pid 5431] close(10) = -1 EBADF (Bad file descriptor) [pid 5431] close(11) = -1 EBADF (Bad file descriptor) [pid 5431] close(12) = -1 EBADF (Bad file descriptor) [pid 5431] close(13) = -1 EBADF (Bad file descriptor) [pid 5431] close(14) = -1 EBADF (Bad file descriptor) [pid 5431] close(15) = -1 EBADF (Bad file descriptor) [pid 5431] close(16) = -1 EBADF (Bad file descriptor) [pid 5431] close(17) = -1 EBADF (Bad file descriptor) [pid 5431] close(18) = -1 EBADF (Bad file descriptor) [pid 5431] close(19) = -1 EBADF (Bad file descriptor) [pid 5431] close(20) = -1 EBADF (Bad file descriptor) [pid 5431] close(21) = -1 EBADF (Bad file descriptor) [pid 5431] close(22) = -1 EBADF (Bad file descriptor) [pid 5431] close(23) = -1 EBADF (Bad file descriptor) [pid 5431] close(24) = -1 EBADF (Bad file descriptor) [pid 5431] close(25) = -1 EBADF (Bad file descriptor) [pid 5431] close(26) = -1 EBADF (Bad file descriptor) [pid 5431] close(27) = -1 EBADF (Bad file descriptor) [pid 5431] close(28) = -1 EBADF (Bad file descriptor) [pid 5431] close(29) = -1 EBADF (Bad file descriptor) [pid 5431] exit_group(0) = ? [pid 5431] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5432 attached , child_tidptr=0x555555eff5d0) = 331 [pid 5432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5432] setpgid(0, 0) = 0 [pid 5432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5432] write(3, "1000", 4) = 4 [pid 5432] close(3) = 0 [pid 5432] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5432] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5432] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5432] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5432] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5432] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5432] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5432] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5432] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5432] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5432] write(7, "5", 1) = 1 [ 168.593408][ T5431] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 168.601393][ T5431] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 168.609447][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 168.617440][ T5431] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 168.625449][ T5431] [ 168.668740][ T5432] FAULT_INJECTION: forcing a failure. [ 168.668740][ T5432] name failslab, interval 1, probability 0, space 0, times 0 [ 168.681424][ T5432] CPU: 1 PID: 5432 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 168.691348][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 168.701422][ T5432] Call Trace: [ 168.704715][ T5432] [ 168.707646][ T5432] dump_stack_lvl+0xd1/0x138 [ 168.712246][ T5432] should_fail_ex.cold+0x5/0xa [ 168.717041][ T5432] ? __inet_hash_connect+0x95e/0x1ba0 [ 168.722427][ T5432] should_failslab+0x9/0x20 [ 168.726941][ T5432] kmem_cache_alloc+0x5a/0x320 [ 168.731730][ T5432] __inet_hash_connect+0x95e/0x1ba0 [ 168.736972][ T5432] ? __inet_lookup_listener+0xbf0/0xbf0 [ 168.742547][ T5432] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 168.748915][ T5432] dccp_v4_connect+0xb82/0x1730 [ 168.753814][ T5432] __inet_stream_connect+0x69e/0xed0 [ 168.759146][ T5432] ? inet_listen+0x640/0x640 [ 168.763764][ T5432] ? mark_held_locks+0x9f/0xe0 [ 168.768555][ T5432] ? __local_bh_enable_ip+0xa4/0x130 [ 168.773868][ T5432] inet_stream_connect+0x57/0xa0 [ 168.778846][ T5432] ? __inet_stream_connect+0xed0/0xed0 [ 168.784321][ T5432] __sys_connect_file+0x153/0x1a0 [ 168.789383][ T5432] io_connect+0x3cc/0x720 [ 168.793772][ T5432] ? io_connect_prep+0x250/0x250 [ 168.798744][ T5432] ? receive_fd+0x110/0x110 [ 168.803261][ T5432] ? rcu_read_lock_sched_held+0x3e/0x70 [ 168.808830][ T5432] ? io_connect_prep+0x250/0x250 [ 168.813788][ T5432] io_issue_sqe+0x695/0x1250 [ 168.818394][ T5432] io_submit_sqes+0x96c/0x1e90 [ 168.823177][ T5432] __do_sys_io_uring_enter+0x103d/0x24e0 [ 168.828824][ T5432] ? io_submit_sqes+0x1e90/0x1e90 [ 168.833858][ T5432] ? ptrace_notify+0xfe/0x140 [ 168.838537][ T5432] ? lock_downgrade+0x6e0/0x6e0 [ 168.843416][ T5432] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.848649][ T5432] ? lockdep_hardirqs_on+0x7d/0x100 [ 168.853855][ T5432] ? _raw_spin_unlock_irq+0x2e/0x50 [ 168.859061][ T5432] ? ptrace_notify+0xfe/0x140 [ 168.863746][ T5432] do_syscall_64+0x39/0xb0 [ 168.868183][ T5432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 168.874121][ T5432] RIP: 0033:0x7f607b0de549 [ 168.878556][ T5432] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 168.898186][ T5432] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 168.906642][ T5432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5432] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5432] close(3) = 0 [pid 5432] close(4) = 0 [pid 5432] close(5) = 0 [pid 5432] close(6) = 0 [pid 5432] close(7) = 0 [pid 5432] close(8) = -1 EBADF (Bad file descriptor) [pid 5432] close(9) = -1 EBADF (Bad file descriptor) [pid 5432] close(10) = -1 EBADF (Bad file descriptor) [pid 5432] close(11) = -1 EBADF (Bad file descriptor) [pid 5432] close(12) = -1 EBADF (Bad file descriptor) [pid 5432] close(13) = -1 EBADF (Bad file descriptor) [pid 5432] close(14) = -1 EBADF (Bad file descriptor) [pid 5432] close(15) = -1 EBADF (Bad file descriptor) [pid 5432] close(16) = -1 EBADF (Bad file descriptor) [pid 5432] close(17) = -1 EBADF (Bad file descriptor) [pid 5432] close(18) = -1 EBADF (Bad file descriptor) [pid 5432] close(19) = -1 EBADF (Bad file descriptor) [pid 5432] close(20) = -1 EBADF (Bad file descriptor) [pid 5432] close(21) = -1 EBADF (Bad file descriptor) [pid 5432] close(22) = -1 EBADF (Bad file descriptor) [pid 5432] close(23) = -1 EBADF (Bad file descriptor) [pid 5432] close(24) = -1 EBADF (Bad file descriptor) [pid 5432] close(25) = -1 EBADF (Bad file descriptor) [pid 5432] close(26) = -1 EBADF (Bad file descriptor) [pid 5432] close(27) = -1 EBADF (Bad file descriptor) [pid 5432] close(28) = -1 EBADF (Bad file descriptor) [pid 5432] close(29) = -1 EBADF (Bad file descriptor) [pid 5432] exit_group(0) = ? [pid 5432] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 332 ./strace-static-x86_64: Process 5433 attached [pid 5433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5433] setpgid(0, 0) = 0 [pid 5433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5433] write(3, "1000", 4) = 4 [pid 5433] close(3) = 0 [pid 5433] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5433] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5433] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5433] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5433] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5433] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5433] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5433] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5433] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5433] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5433] write(7, "5", 1) = 1 [ 168.914686][ T5432] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 168.922679][ T5432] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 168.930661][ T5432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 168.938653][ T5432] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 168.946639][ T5432] [ 168.989935][ T5433] FAULT_INJECTION: forcing a failure. [ 168.989935][ T5433] name failslab, interval 1, probability 0, space 0, times 0 [ 169.002674][ T5433] CPU: 0 PID: 5433 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 169.012636][ T5433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 169.022699][ T5433] Call Trace: [ 169.025995][ T5433] [ 169.028954][ T5433] dump_stack_lvl+0xd1/0x138 [ 169.033584][ T5433] should_fail_ex.cold+0x5/0xa [ 169.038354][ T5433] ? __inet_hash_connect+0x95e/0x1ba0 [ 169.043730][ T5433] should_failslab+0x9/0x20 [ 169.048240][ T5433] kmem_cache_alloc+0x5a/0x320 [ 169.053012][ T5433] __inet_hash_connect+0x95e/0x1ba0 [ 169.058311][ T5433] ? __inet_lookup_listener+0xbf0/0xbf0 [ 169.063882][ T5433] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 169.070246][ T5433] dccp_v4_connect+0xb82/0x1730 [ 169.075320][ T5433] __inet_stream_connect+0x69e/0xed0 [ 169.080640][ T5433] ? inet_listen+0x640/0x640 [ 169.085344][ T5433] ? mark_held_locks+0x9f/0xe0 [ 169.090119][ T5433] ? __local_bh_enable_ip+0xa4/0x130 [ 169.095414][ T5433] inet_stream_connect+0x57/0xa0 [ 169.100380][ T5433] ? __inet_stream_connect+0xed0/0xed0 [ 169.105886][ T5433] __sys_connect_file+0x153/0x1a0 [ 169.110932][ T5433] io_connect+0x3cc/0x720 [ 169.115307][ T5433] ? io_connect_prep+0x250/0x250 [ 169.120257][ T5433] ? receive_fd+0x110/0x110 [ 169.124825][ T5433] ? rcu_read_lock_sched_held+0x3e/0x70 [ 169.130418][ T5433] ? io_connect_prep+0x250/0x250 [ 169.135405][ T5433] io_issue_sqe+0x695/0x1250 [ 169.140010][ T5433] io_submit_sqes+0x96c/0x1e90 [ 169.144818][ T5433] __do_sys_io_uring_enter+0x103d/0x24e0 [ 169.150517][ T5433] ? io_submit_sqes+0x1e90/0x1e90 [ 169.155581][ T5433] ? ptrace_notify+0xfe/0x140 [ 169.160284][ T5433] ? lock_downgrade+0x6e0/0x6e0 [ 169.165166][ T5433] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.170383][ T5433] ? lockdep_hardirqs_on+0x7d/0x100 [ 169.175618][ T5433] ? _raw_spin_unlock_irq+0x2e/0x50 [ 169.180822][ T5433] ? ptrace_notify+0xfe/0x140 [ 169.185509][ T5433] do_syscall_64+0x39/0xb0 [ 169.189941][ T5433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.195866][ T5433] RIP: 0033:0x7f607b0de549 [ 169.200298][ T5433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 169.219964][ T5433] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 169.228410][ T5433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5433] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5433] close(3) = 0 [pid 5433] close(4) = 0 [pid 5433] close(5) = 0 [pid 5433] close(6) = 0 [pid 5433] close(7) = 0 [pid 5433] close(8) = -1 EBADF (Bad file descriptor) [pid 5433] close(9) = -1 EBADF (Bad file descriptor) [pid 5433] close(10) = -1 EBADF (Bad file descriptor) [pid 5433] close(11) = -1 EBADF (Bad file descriptor) [pid 5433] close(12) = -1 EBADF (Bad file descriptor) [pid 5433] close(13) = -1 EBADF (Bad file descriptor) [pid 5433] close(14) = -1 EBADF (Bad file descriptor) [pid 5433] close(15) = -1 EBADF (Bad file descriptor) [pid 5433] close(16) = -1 EBADF (Bad file descriptor) [pid 5433] close(17) = -1 EBADF (Bad file descriptor) [pid 5433] close(18) = -1 EBADF (Bad file descriptor) [pid 5433] close(19) = -1 EBADF (Bad file descriptor) [pid 5433] close(20) = -1 EBADF (Bad file descriptor) [pid 5433] close(21) = -1 EBADF (Bad file descriptor) [pid 5433] close(22) = -1 EBADF (Bad file descriptor) [pid 5433] close(23) = -1 EBADF (Bad file descriptor) [pid 5433] close(24) = -1 EBADF (Bad file descriptor) [pid 5433] close(25) = -1 EBADF (Bad file descriptor) [pid 5433] close(26) = -1 EBADF (Bad file descriptor) [pid 5433] close(27) = -1 EBADF (Bad file descriptor) [pid 5433] close(28) = -1 EBADF (Bad file descriptor) [pid 5433] close(29) = -1 EBADF (Bad file descriptor) [pid 5433] exit_group(0) = ? [pid 5433] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 333 ./strace-static-x86_64: Process 5434 attached [pid 5434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5434] setpgid(0, 0) = 0 [pid 5434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5434] write(3, "1000", 4) = 4 [pid 5434] close(3) = 0 [pid 5434] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5434] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5434] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5434] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5434] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5434] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5434] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5434] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5434] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5434] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5434] write(7, "5", 1) = 1 [ 169.236446][ T5433] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 169.244463][ T5433] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 169.252443][ T5433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 169.260449][ T5433] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 169.268460][ T5433] [ 169.316748][ T5434] FAULT_INJECTION: forcing a failure. [ 169.316748][ T5434] name failslab, interval 1, probability 0, space 0, times 0 [ 169.329474][ T5434] CPU: 0 PID: 5434 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 169.339373][ T5434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 169.349435][ T5434] Call Trace: [ 169.352711][ T5434] [ 169.355641][ T5434] dump_stack_lvl+0xd1/0x138 [ 169.360338][ T5434] should_fail_ex.cold+0x5/0xa [ 169.365123][ T5434] ? __inet_hash_connect+0x95e/0x1ba0 [ 169.370537][ T5434] should_failslab+0x9/0x20 [ 169.375048][ T5434] kmem_cache_alloc+0x5a/0x320 [ 169.379850][ T5434] __inet_hash_connect+0x95e/0x1ba0 [ 169.385110][ T5434] ? __inet_lookup_listener+0xbf0/0xbf0 [ 169.390694][ T5434] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 169.397066][ T5434] dccp_v4_connect+0xb82/0x1730 [ 169.401966][ T5434] __inet_stream_connect+0x69e/0xed0 [ 169.407294][ T5434] ? inet_listen+0x640/0x640 [ 169.411923][ T5434] ? mark_held_locks+0x9f/0xe0 [ 169.416715][ T5434] ? __local_bh_enable_ip+0xa4/0x130 [ 169.422034][ T5434] inet_stream_connect+0x57/0xa0 [ 169.427201][ T5434] ? __inet_stream_connect+0xed0/0xed0 [ 169.432812][ T5434] __sys_connect_file+0x153/0x1a0 [ 169.437880][ T5434] io_connect+0x3cc/0x720 [ 169.442268][ T5434] ? io_connect_prep+0x250/0x250 [ 169.447262][ T5434] ? receive_fd+0x110/0x110 [ 169.451821][ T5434] ? rcu_read_lock_sched_held+0x3e/0x70 [ 169.457618][ T5434] ? io_connect_prep+0x250/0x250 [ 169.462598][ T5434] io_issue_sqe+0x695/0x1250 [ 169.467224][ T5434] io_submit_sqes+0x96c/0x1e90 [ 169.472067][ T5434] __do_sys_io_uring_enter+0x103d/0x24e0 [ 169.477763][ T5434] ? io_submit_sqes+0x1e90/0x1e90 [ 169.482827][ T5434] ? ptrace_notify+0xfe/0x140 [ 169.487526][ T5434] ? lock_downgrade+0x6e0/0x6e0 [ 169.492408][ T5434] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.497657][ T5434] ? lockdep_hardirqs_on+0x7d/0x100 [ 169.502900][ T5434] ? _raw_spin_unlock_irq+0x2e/0x50 [ 169.508157][ T5434] ? ptrace_notify+0xfe/0x140 [ 169.512874][ T5434] do_syscall_64+0x39/0xb0 [ 169.517336][ T5434] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.523255][ T5434] RIP: 0033:0x7f607b0de549 [ 169.527691][ T5434] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 169.547321][ T5434] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 169.555758][ T5434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5434] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5434] close(3) = 0 [pid 5434] close(4) = 0 [pid 5434] close(5) = 0 [pid 5434] close(6) = 0 [pid 5434] close(7) = 0 [pid 5434] close(8) = -1 EBADF (Bad file descriptor) [pid 5434] close(9) = -1 EBADF (Bad file descriptor) [pid 5434] close(10) = -1 EBADF (Bad file descriptor) [pid 5434] close(11) = -1 EBADF (Bad file descriptor) [pid 5434] close(12) = -1 EBADF (Bad file descriptor) [pid 5434] close(13) = -1 EBADF (Bad file descriptor) [pid 5434] close(14) = -1 EBADF (Bad file descriptor) [pid 5434] close(15) = -1 EBADF (Bad file descriptor) [pid 5434] close(16) = -1 EBADF (Bad file descriptor) [pid 5434] close(17) = -1 EBADF (Bad file descriptor) [pid 5434] close(18) = -1 EBADF (Bad file descriptor) [pid 5434] close(19) = -1 EBADF (Bad file descriptor) [pid 5434] close(20) = -1 EBADF (Bad file descriptor) [pid 5434] close(21) = -1 EBADF (Bad file descriptor) [pid 5434] close(22) = -1 EBADF (Bad file descriptor) [pid 5434] close(23) = -1 EBADF (Bad file descriptor) [pid 5434] close(24) = -1 EBADF (Bad file descriptor) [pid 5434] close(25) = -1 EBADF (Bad file descriptor) [pid 5434] close(26) = -1 EBADF (Bad file descriptor) [pid 5434] close(27) = -1 EBADF (Bad file descriptor) [pid 5434] close(28) = -1 EBADF (Bad file descriptor) [pid 5434] close(29) = -1 EBADF (Bad file descriptor) [pid 5434] exit_group(0) = ? [pid 5434] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 334 ./strace-static-x86_64: Process 5435 attached [pid 5435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5435] setpgid(0, 0) = 0 [pid 5435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5435] write(3, "1000", 4) = 4 [pid 5435] close(3) = 0 [pid 5435] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5435] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5435] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5435] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5435] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5435] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5435] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5435] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5435] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5435] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5435] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5435] write(7, "5", 1) = 1 [ 169.563835][ T5434] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 169.571846][ T5434] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 169.579850][ T5434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 169.587843][ T5434] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 169.595856][ T5434] [ 169.631135][ T5435] FAULT_INJECTION: forcing a failure. [ 169.631135][ T5435] name failslab, interval 1, probability 0, space 0, times 0 [ 169.644934][ T5435] CPU: 0 PID: 5435 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 169.654852][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 169.664925][ T5435] Call Trace: [ 169.668220][ T5435] [ 169.671166][ T5435] dump_stack_lvl+0xd1/0x138 [ 169.675778][ T5435] should_fail_ex.cold+0x5/0xa [ 169.680545][ T5435] ? io_issue_sqe+0x695/0x1250 [ 169.685356][ T5435] should_failslab+0x9/0x20 [ 169.689889][ T5435] __kmem_cache_alloc_node+0x5b/0x330 [ 169.695364][ T5435] ? ref_tracker_alloc+0x158/0x560 [ 169.700776][ T5435] kmalloc_trace+0x26/0x60 [ 169.705241][ T5435] ref_tracker_alloc+0x158/0x560 [ 169.710204][ T5435] ? __lock_acquire+0xbc3/0x56d0 [ 169.715165][ T5435] ? ref_tracker_free+0x6b0/0x6b0 [ 169.720247][ T5435] dst_init+0xe4/0x520 [ 169.724348][ T5435] dst_alloc+0x16f/0x1f0 [ 169.728601][ T5435] rt_dst_alloc+0x55/0x430 [ 169.733027][ T5435] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 169.739032][ T5435] ip_route_output_key_hash+0x18f/0x340 [ 169.744618][ T5435] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 169.750927][ T5435] dccp_v4_connect+0x7e1/0x1730 [ 169.755806][ T5435] __inet_stream_connect+0x69e/0xed0 [ 169.761109][ T5435] ? inet_listen+0x640/0x640 [ 169.765718][ T5435] ? mark_held_locks+0x9f/0xe0 [ 169.770503][ T5435] ? __local_bh_enable_ip+0xa4/0x130 [ 169.775825][ T5435] inet_stream_connect+0x57/0xa0 [ 169.780800][ T5435] ? __inet_stream_connect+0xed0/0xed0 [ 169.786301][ T5435] __sys_connect_file+0x153/0x1a0 [ 169.791383][ T5435] io_connect+0x3cc/0x720 [ 169.795737][ T5435] ? io_connect_prep+0x250/0x250 [ 169.800698][ T5435] ? receive_fd+0x110/0x110 [ 169.805272][ T5435] ? rcu_read_lock_sched_held+0x3e/0x70 [ 169.810866][ T5435] ? io_connect_prep+0x250/0x250 [ 169.815845][ T5435] io_issue_sqe+0x695/0x1250 [ 169.820477][ T5435] io_submit_sqes+0x96c/0x1e90 [ 169.825300][ T5435] __do_sys_io_uring_enter+0x103d/0x24e0 [ 169.830999][ T5435] ? io_submit_sqes+0x1e90/0x1e90 [ 169.836060][ T5435] ? ptrace_notify+0xfe/0x140 [ 169.840758][ T5435] ? lock_downgrade+0x6e0/0x6e0 [ 169.845659][ T5435] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.851014][ T5435] ? lockdep_hardirqs_on+0x7d/0x100 [ 169.856233][ T5435] ? _raw_spin_unlock_irq+0x2e/0x50 [ 169.861453][ T5435] ? ptrace_notify+0xfe/0x140 [ 169.866140][ T5435] do_syscall_64+0x39/0xb0 [ 169.870583][ T5435] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.876478][ T5435] RIP: 0033:0x7f607b0de549 [ 169.880890][ T5435] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 169.900505][ T5435] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 169.908926][ T5435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 169.916902][ T5435] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5435] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5435] close(3) = 0 [pid 5435] close(4) = 0 [pid 5435] close(5) = 0 [pid 5435] close(6) = 0 [pid 5435] close(7) = 0 [pid 5435] close(8) = -1 EBADF (Bad file descriptor) [pid 5435] close(9) = -1 EBADF (Bad file descriptor) [pid 5435] close(10) = -1 EBADF (Bad file descriptor) [pid 5435] close(11) = -1 EBADF (Bad file descriptor) [pid 5435] close(12) = -1 EBADF (Bad file descriptor) [pid 5435] close(13) = -1 EBADF (Bad file descriptor) [pid 5435] close(14) = -1 EBADF (Bad file descriptor) [pid 5435] close(15) = -1 EBADF (Bad file descriptor) [pid 5435] close(16) = -1 EBADF (Bad file descriptor) [pid 5435] close(17) = -1 EBADF (Bad file descriptor) [pid 5435] close(18) = -1 EBADF (Bad file descriptor) [pid 5435] close(19) = -1 EBADF (Bad file descriptor) [pid 5435] close(20) = -1 EBADF (Bad file descriptor) [pid 5435] close(21) = -1 EBADF (Bad file descriptor) [pid 5435] close(22) = -1 EBADF (Bad file descriptor) [pid 5435] close(23) = -1 EBADF (Bad file descriptor) [pid 5435] close(24) = -1 EBADF (Bad file descriptor) [pid 5435] close(25) = -1 EBADF (Bad file descriptor) [pid 5435] close(26) = -1 EBADF (Bad file descriptor) [pid 5435] close(27) = -1 EBADF (Bad file descriptor) [pid 5435] close(28) = -1 EBADF (Bad file descriptor) [pid 5435] close(29) = -1 EBADF (Bad file descriptor) [pid 5435] exit_group(0) = ? [pid 5435] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 335 ./strace-static-x86_64: Process 5436 attached [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5436] setpgid(0, 0) = 0 [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5436] write(3, "1000", 4) = 4 [pid 5436] close(3) = 0 [pid 5436] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5436] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5436] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5436] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5436] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5436] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5436] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5436] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5436] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5436] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5436] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5436] write(7, "5", 1) = 1 [ 169.924874][ T5435] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 169.932850][ T5435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 169.940834][ T5435] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 169.948840][ T5435] [ 169.985105][ T5436] FAULT_INJECTION: forcing a failure. [ 169.985105][ T5436] name failslab, interval 1, probability 0, space 0, times 0 [ 169.997816][ T5436] CPU: 0 PID: 5436 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 170.007729][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 170.017816][ T5436] Call Trace: [ 170.021110][ T5436] [ 170.024039][ T5436] dump_stack_lvl+0xd1/0x138 [ 170.028646][ T5436] should_fail_ex.cold+0x5/0xa [ 170.033436][ T5436] ? __inet_hash_connect+0x95e/0x1ba0 [ 170.038852][ T5436] should_failslab+0x9/0x20 [ 170.043404][ T5436] kmem_cache_alloc+0x5a/0x320 [ 170.048198][ T5436] __inet_hash_connect+0x95e/0x1ba0 [ 170.053429][ T5436] ? __inet_lookup_listener+0xbf0/0xbf0 [ 170.059034][ T5436] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 170.065403][ T5436] dccp_v4_connect+0xb82/0x1730 [ 170.070297][ T5436] __inet_stream_connect+0x69e/0xed0 [ 170.075631][ T5436] ? inet_listen+0x640/0x640 [ 170.080237][ T5436] ? mark_held_locks+0x9f/0xe0 [ 170.085030][ T5436] ? __local_bh_enable_ip+0xa4/0x130 [ 170.090345][ T5436] inet_stream_connect+0x57/0xa0 [ 170.095333][ T5436] ? __inet_stream_connect+0xed0/0xed0 [ 170.100824][ T5436] __sys_connect_file+0x153/0x1a0 [ 170.105886][ T5436] io_connect+0x3cc/0x720 [ 170.110248][ T5436] ? io_connect_prep+0x250/0x250 [ 170.115223][ T5436] ? receive_fd+0x110/0x110 [ 170.119829][ T5436] ? rcu_read_lock_sched_held+0x3e/0x70 [ 170.125390][ T5436] ? io_connect_prep+0x250/0x250 [ 170.130356][ T5436] io_issue_sqe+0x695/0x1250 [ 170.134990][ T5436] io_submit_sqes+0x96c/0x1e90 [ 170.139784][ T5436] __do_sys_io_uring_enter+0x103d/0x24e0 [ 170.145430][ T5436] ? io_submit_sqes+0x1e90/0x1e90 [ 170.150480][ T5436] ? ptrace_notify+0xfe/0x140 [ 170.155186][ T5436] ? lock_downgrade+0x6e0/0x6e0 [ 170.160049][ T5436] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.165258][ T5436] ? lockdep_hardirqs_on+0x7d/0x100 [ 170.170472][ T5436] ? _raw_spin_unlock_irq+0x2e/0x50 [ 170.175708][ T5436] ? ptrace_notify+0xfe/0x140 [ 170.180405][ T5436] do_syscall_64+0x39/0xb0 [ 170.184856][ T5436] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 170.190752][ T5436] RIP: 0033:0x7f607b0de549 [ 170.195166][ T5436] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 170.214795][ T5436] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 170.223252][ T5436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5436] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5436] close(3) = 0 [pid 5436] close(4) = 0 [pid 5436] close(5) = 0 [pid 5436] close(6) = 0 [pid 5436] close(7) = 0 [pid 5436] close(8) = -1 EBADF (Bad file descriptor) [pid 5436] close(9) = -1 EBADF (Bad file descriptor) [pid 5436] close(10) = -1 EBADF (Bad file descriptor) [pid 5436] close(11) = -1 EBADF (Bad file descriptor) [pid 5436] close(12) = -1 EBADF (Bad file descriptor) [pid 5436] close(13) = -1 EBADF (Bad file descriptor) [pid 5436] close(14) = -1 EBADF (Bad file descriptor) [pid 5436] close(15) = -1 EBADF (Bad file descriptor) [pid 5436] close(16) = -1 EBADF (Bad file descriptor) [pid 5436] close(17) = -1 EBADF (Bad file descriptor) [pid 5436] close(18) = -1 EBADF (Bad file descriptor) [pid 5436] close(19) = -1 EBADF (Bad file descriptor) [pid 5436] close(20) = -1 EBADF (Bad file descriptor) [pid 5436] close(21) = -1 EBADF (Bad file descriptor) [pid 5436] close(22) = -1 EBADF (Bad file descriptor) [pid 5436] close(23) = -1 EBADF (Bad file descriptor) [pid 5436] close(24) = -1 EBADF (Bad file descriptor) [pid 5436] close(25) = -1 EBADF (Bad file descriptor) [pid 5436] close(26) = -1 EBADF (Bad file descriptor) [pid 5436] close(27) = -1 EBADF (Bad file descriptor) [pid 5436] close(28) = -1 EBADF (Bad file descriptor) [pid 5436] close(29) = -1 EBADF (Bad file descriptor) [pid 5436] exit_group(0) = ? [pid 5436] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 336 ./strace-static-x86_64: Process 5437 attached [pid 5437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5437] setpgid(0, 0) = 0 [pid 5437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5437] write(3, "1000", 4) = 4 [pid 5437] close(3) = 0 [pid 5437] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5437] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5437] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5437] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5437] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5437] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5437] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5437] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5437] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5437] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5437] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5437] write(7, "5", 1) = 1 [ 170.231246][ T5436] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 170.239216][ T5436] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 170.247190][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 170.255187][ T5436] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 170.263196][ T5436] [ 170.300900][ T5437] FAULT_INJECTION: forcing a failure. [ 170.300900][ T5437] name failslab, interval 1, probability 0, space 0, times 0 [ 170.313718][ T5437] CPU: 0 PID: 5437 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 170.323649][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 170.333745][ T5437] Call Trace: [ 170.337028][ T5437] [ 170.339963][ T5437] dump_stack_lvl+0xd1/0x138 [ 170.344569][ T5437] should_fail_ex.cold+0x5/0xa [ 170.349355][ T5437] ? __inet_hash_connect+0x95e/0x1ba0 [ 170.354770][ T5437] should_failslab+0x9/0x20 [ 170.359321][ T5437] kmem_cache_alloc+0x5a/0x320 [ 170.364100][ T5437] __inet_hash_connect+0x95e/0x1ba0 [ 170.369307][ T5437] ? __inet_lookup_listener+0xbf0/0xbf0 [ 170.374883][ T5437] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 170.381261][ T5437] dccp_v4_connect+0xb82/0x1730 [ 170.386156][ T5437] __inet_stream_connect+0x69e/0xed0 [ 170.391571][ T5437] ? inet_listen+0x640/0x640 [ 170.396194][ T5437] ? mark_held_locks+0x9f/0xe0 [ 170.400986][ T5437] ? __local_bh_enable_ip+0xa4/0x130 [ 170.406297][ T5437] inet_stream_connect+0x57/0xa0 [ 170.411267][ T5437] ? __inet_stream_connect+0xed0/0xed0 [ 170.416736][ T5437] __sys_connect_file+0x153/0x1a0 [ 170.421782][ T5437] io_connect+0x3cc/0x720 [ 170.426162][ T5437] ? io_connect_prep+0x250/0x250 [ 170.431141][ T5437] ? receive_fd+0x110/0x110 [ 170.435656][ T5437] ? rcu_read_lock_sched_held+0x3e/0x70 [ 170.441208][ T5437] ? io_connect_prep+0x250/0x250 [ 170.446173][ T5437] io_issue_sqe+0x695/0x1250 [ 170.450799][ T5437] io_submit_sqes+0x96c/0x1e90 [ 170.455585][ T5437] __do_sys_io_uring_enter+0x103d/0x24e0 [ 170.461243][ T5437] ? io_submit_sqes+0x1e90/0x1e90 [ 170.466306][ T5437] ? ptrace_notify+0xfe/0x140 [ 170.471018][ T5437] ? lock_downgrade+0x6e0/0x6e0 [ 170.475903][ T5437] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.481120][ T5437] ? lockdep_hardirqs_on+0x7d/0x100 [ 170.486353][ T5437] ? _raw_spin_unlock_irq+0x2e/0x50 [ 170.491564][ T5437] ? ptrace_notify+0xfe/0x140 [ 170.496262][ T5437] do_syscall_64+0x39/0xb0 [ 170.500716][ T5437] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 170.506616][ T5437] RIP: 0033:0x7f607b0de549 [ 170.511035][ T5437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 170.530736][ T5437] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 170.539165][ T5437] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5437] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5437] close(3) = 0 [pid 5437] close(4) = 0 [pid 5437] close(5) = 0 [pid 5437] close(6) = 0 [pid 5437] close(7) = 0 [pid 5437] close(8) = -1 EBADF (Bad file descriptor) [pid 5437] close(9) = -1 EBADF (Bad file descriptor) [pid 5437] close(10) = -1 EBADF (Bad file descriptor) [pid 5437] close(11) = -1 EBADF (Bad file descriptor) [pid 5437] close(12) = -1 EBADF (Bad file descriptor) [pid 5437] close(13) = -1 EBADF (Bad file descriptor) [pid 5437] close(14) = -1 EBADF (Bad file descriptor) [pid 5437] close(15) = -1 EBADF (Bad file descriptor) [pid 5437] close(16) = -1 EBADF (Bad file descriptor) [pid 5437] close(17) = -1 EBADF (Bad file descriptor) [pid 5437] close(18) = -1 EBADF (Bad file descriptor) [pid 5437] close(19) = -1 EBADF (Bad file descriptor) [pid 5437] close(20) = -1 EBADF (Bad file descriptor) [pid 5437] close(21) = -1 EBADF (Bad file descriptor) [pid 5437] close(22) = -1 EBADF (Bad file descriptor) [pid 5437] close(23) = -1 EBADF (Bad file descriptor) [pid 5437] close(24) = -1 EBADF (Bad file descriptor) [pid 5437] close(25) = -1 EBADF (Bad file descriptor) [pid 5437] close(26) = -1 EBADF (Bad file descriptor) [pid 5437] close(27) = -1 EBADF (Bad file descriptor) [pid 5437] close(28) = -1 EBADF (Bad file descriptor) [pid 5437] close(29) = -1 EBADF (Bad file descriptor) [pid 5437] exit_group(0) = ? [pid 5437] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5438 attached , child_tidptr=0x555555eff5d0) = 337 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5438] setpgid(0, 0) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5438] write(3, "1000", 4) = 4 [pid 5438] close(3) = 0 [pid 5438] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5438] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5438] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5438] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5438] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5438] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5438] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [ 170.547151][ T5437] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 170.555124][ T5437] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 170.563107][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 170.571110][ T5437] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 170.579141][ T5437] [pid 5438] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5438] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5438] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5438] write(7, "5", 1) = 1 [ 170.636404][ T5438] FAULT_INJECTION: forcing a failure. [ 170.636404][ T5438] name failslab, interval 1, probability 0, space 0, times 0 [ 170.649136][ T5438] CPU: 0 PID: 5438 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 170.659039][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 170.669117][ T5438] Call Trace: [ 170.672396][ T5438] [ 170.675326][ T5438] dump_stack_lvl+0xd1/0x138 [ 170.679928][ T5438] should_fail_ex.cold+0x5/0xa [ 170.684718][ T5438] ? __inet_hash_connect+0x95e/0x1ba0 [ 170.690104][ T5438] should_failslab+0x9/0x20 [ 170.694659][ T5438] kmem_cache_alloc+0x5a/0x320 [ 170.699429][ T5438] __inet_hash_connect+0x95e/0x1ba0 [ 170.704653][ T5438] ? __inet_lookup_listener+0xbf0/0xbf0 [ 170.710238][ T5438] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 170.716616][ T5438] dccp_v4_connect+0xb82/0x1730 [ 170.721516][ T5438] __inet_stream_connect+0x69e/0xed0 [ 170.726840][ T5438] ? inet_listen+0x640/0x640 [ 170.731464][ T5438] ? mark_held_locks+0x9f/0xe0 [ 170.736252][ T5438] ? __local_bh_enable_ip+0xa4/0x130 [ 170.741566][ T5438] inet_stream_connect+0x57/0xa0 [ 170.746542][ T5438] ? __inet_stream_connect+0xed0/0xed0 [ 170.752038][ T5438] __sys_connect_file+0x153/0x1a0 [ 170.757094][ T5438] io_connect+0x3cc/0x720 [ 170.761466][ T5438] ? io_connect_prep+0x250/0x250 [ 170.766438][ T5438] ? receive_fd+0x110/0x110 [ 170.770983][ T5438] ? rcu_read_lock_sched_held+0x3e/0x70 [ 170.776552][ T5438] ? io_connect_prep+0x250/0x250 [ 170.781531][ T5438] io_issue_sqe+0x695/0x1250 [ 170.786158][ T5438] io_submit_sqes+0x96c/0x1e90 [ 170.790971][ T5438] __do_sys_io_uring_enter+0x103d/0x24e0 [ 170.796647][ T5438] ? io_submit_sqes+0x1e90/0x1e90 [ 170.801706][ T5438] ? ptrace_notify+0xfe/0x140 [ 170.806408][ T5438] ? lock_downgrade+0x6e0/0x6e0 [ 170.811292][ T5438] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.816526][ T5438] ? lockdep_hardirqs_on+0x7d/0x100 [ 170.821748][ T5438] ? _raw_spin_unlock_irq+0x2e/0x50 [ 170.826973][ T5438] ? ptrace_notify+0xfe/0x140 [ 170.831678][ T5438] do_syscall_64+0x39/0xb0 [ 170.836133][ T5438] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 170.842054][ T5438] RIP: 0033:0x7f607b0de549 [ 170.846488][ T5438] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 170.866468][ T5438] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 170.874905][ T5438] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5438] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5438] close(3) = 0 [pid 5438] close(4) = 0 [pid 5438] close(5) = 0 [pid 5438] close(6) = 0 [pid 5438] close(7) = 0 [pid 5438] close(8) = -1 EBADF (Bad file descriptor) [pid 5438] close(9) = -1 EBADF (Bad file descriptor) [pid 5438] close(10) = -1 EBADF (Bad file descriptor) [pid 5438] close(11) = -1 EBADF (Bad file descriptor) [pid 5438] close(12) = -1 EBADF (Bad file descriptor) [pid 5438] close(13) = -1 EBADF (Bad file descriptor) [pid 5438] close(14) = -1 EBADF (Bad file descriptor) [pid 5438] close(15) = -1 EBADF (Bad file descriptor) [pid 5438] close(16) = -1 EBADF (Bad file descriptor) [pid 5438] close(17) = -1 EBADF (Bad file descriptor) [pid 5438] close(18) = -1 EBADF (Bad file descriptor) [pid 5438] close(19) = -1 EBADF (Bad file descriptor) [pid 5438] close(20) = -1 EBADF (Bad file descriptor) [pid 5438] close(21) = -1 EBADF (Bad file descriptor) [pid 5438] close(22) = -1 EBADF (Bad file descriptor) [pid 5438] close(23) = -1 EBADF (Bad file descriptor) [pid 5438] close(24) = -1 EBADF (Bad file descriptor) [pid 5438] close(25) = -1 EBADF (Bad file descriptor) [pid 5438] close(26) = -1 EBADF (Bad file descriptor) [pid 5438] close(27) = -1 EBADF (Bad file descriptor) [pid 5438] close(28) = -1 EBADF (Bad file descriptor) [pid 5438] close(29) = -1 EBADF (Bad file descriptor) [pid 5438] exit_group(0) = ? [pid 5438] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5439 attached , child_tidptr=0x555555eff5d0) = 338 [pid 5439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5439] setpgid(0, 0) = 0 [pid 5439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5439] write(3, "1000", 4) = 4 [pid 5439] close(3) = 0 [pid 5439] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5439] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5439] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5439] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5439] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5439] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5439] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5439] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5439] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5439] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5439] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5439] write(7, "5", 1) = 1 [ 170.882892][ T5438] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 170.890879][ T5438] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 170.898865][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 170.906852][ T5438] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 170.914861][ T5438] [ 170.965541][ T5439] FAULT_INJECTION: forcing a failure. [ 170.965541][ T5439] name failslab, interval 1, probability 0, space 0, times 0 [ 170.979839][ T5439] CPU: 1 PID: 5439 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 170.989790][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 170.999854][ T5439] Call Trace: [ 171.003131][ T5439] [ 171.006067][ T5439] dump_stack_lvl+0xd1/0x138 [ 171.010688][ T5439] should_fail_ex.cold+0x5/0xa [ 171.015476][ T5439] ? io_issue_sqe+0x695/0x1250 [ 171.020247][ T5439] should_failslab+0x9/0x20 [ 171.024784][ T5439] __kmem_cache_alloc_node+0x5b/0x330 [ 171.030182][ T5439] ? ref_tracker_alloc+0x158/0x560 [ 171.035423][ T5439] kmalloc_trace+0x26/0x60 [ 171.039869][ T5439] ref_tracker_alloc+0x158/0x560 [ 171.045118][ T5439] ? __lock_acquire+0xbc3/0x56d0 [ 171.050091][ T5439] ? ref_tracker_free+0x6b0/0x6b0 [ 171.055184][ T5439] dst_init+0xe4/0x520 [ 171.059282][ T5439] dst_alloc+0x16f/0x1f0 [ 171.063555][ T5439] rt_dst_alloc+0x55/0x430 [ 171.068001][ T5439] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 171.074030][ T5439] ip_route_output_key_hash+0x18f/0x340 [ 171.079613][ T5439] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 171.085907][ T5439] dccp_v4_connect+0x7e1/0x1730 [ 171.090813][ T5439] __inet_stream_connect+0x69e/0xed0 [ 171.096146][ T5439] ? inet_listen+0x640/0x640 [ 171.100773][ T5439] ? mark_held_locks+0x9f/0xe0 [ 171.105563][ T5439] ? __local_bh_enable_ip+0xa4/0x130 [ 171.110876][ T5439] inet_stream_connect+0x57/0xa0 [ 171.115852][ T5439] ? __inet_stream_connect+0xed0/0xed0 [ 171.121347][ T5439] __sys_connect_file+0x153/0x1a0 [ 171.126402][ T5439] io_connect+0x3cc/0x720 [ 171.130769][ T5439] ? io_connect_prep+0x250/0x250 [ 171.135740][ T5439] ? receive_fd+0x110/0x110 [ 171.140435][ T5439] ? rcu_read_lock_sched_held+0x3e/0x70 [ 171.146003][ T5439] ? io_connect_prep+0x250/0x250 [ 171.150970][ T5439] io_issue_sqe+0x695/0x1250 [ 171.155597][ T5439] io_submit_sqes+0x96c/0x1e90 [ 171.160419][ T5439] __do_sys_io_uring_enter+0x103d/0x24e0 [ 171.166094][ T5439] ? io_submit_sqes+0x1e90/0x1e90 [ 171.171157][ T5439] ? ptrace_notify+0xfe/0x140 [ 171.175852][ T5439] ? lock_downgrade+0x6e0/0x6e0 [ 171.180730][ T5439] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.185957][ T5439] ? lockdep_hardirqs_on+0x7d/0x100 [ 171.191174][ T5439] ? _raw_spin_unlock_irq+0x2e/0x50 [ 171.196399][ T5439] ? ptrace_notify+0xfe/0x140 [ 171.201108][ T5439] do_syscall_64+0x39/0xb0 [ 171.205568][ T5439] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 171.211486][ T5439] RIP: 0033:0x7f607b0de549 [ 171.215928][ T5439] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 171.235646][ T5439] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 171.244082][ T5439] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 171.252097][ T5439] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5439] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5439] close(3) = 0 [pid 5439] close(4) = 0 [pid 5439] close(5) = 0 [pid 5439] close(6) = 0 [pid 5439] close(7) = 0 [pid 5439] close(8) = -1 EBADF (Bad file descriptor) [pid 5439] close(9) = -1 EBADF (Bad file descriptor) [pid 5439] close(10) = -1 EBADF (Bad file descriptor) [pid 5439] close(11) = -1 EBADF (Bad file descriptor) [pid 5439] close(12) = -1 EBADF (Bad file descriptor) [pid 5439] close(13) = -1 EBADF (Bad file descriptor) [pid 5439] close(14) = -1 EBADF (Bad file descriptor) [pid 5439] close(15) = -1 EBADF (Bad file descriptor) [pid 5439] close(16) = -1 EBADF (Bad file descriptor) [pid 5439] close(17) = -1 EBADF (Bad file descriptor) [pid 5439] close(18) = -1 EBADF (Bad file descriptor) [pid 5439] close(19) = -1 EBADF (Bad file descriptor) [pid 5439] close(20) = -1 EBADF (Bad file descriptor) [pid 5439] close(21) = -1 EBADF (Bad file descriptor) [pid 5439] close(22) = -1 EBADF (Bad file descriptor) [pid 5439] close(23) = -1 EBADF (Bad file descriptor) [pid 5439] close(24) = -1 EBADF (Bad file descriptor) [pid 5439] close(25) = -1 EBADF (Bad file descriptor) [pid 5439] close(26) = -1 EBADF (Bad file descriptor) [pid 5439] close(27) = -1 EBADF (Bad file descriptor) [pid 5439] close(28) = -1 EBADF (Bad file descriptor) [pid 5439] close(29) = -1 EBADF (Bad file descriptor) [pid 5439] exit_group(0) = ? [pid 5439] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 339 ./strace-static-x86_64: Process 5440 attached [pid 5440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5440] setpgid(0, 0) = 0 [pid 5440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5440] write(3, "1000", 4) = 4 [pid 5440] close(3) = 0 [pid 5440] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5440] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5440] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5440] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5440] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5440] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5440] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5440] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5440] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5440] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [pid 5440] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5440] write(7, "5", 1) = 1 [ 171.260092][ T5439] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 171.268080][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 171.276074][ T5439] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 171.284093][ T5439] [ 171.327860][ T5440] FAULT_INJECTION: forcing a failure. [ 171.327860][ T5440] name failslab, interval 1, probability 0, space 0, times 0 [ 171.340592][ T5440] CPU: 0 PID: 5440 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 171.350527][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 171.360615][ T5440] Call Trace: [ 171.363907][ T5440] [ 171.366835][ T5440] dump_stack_lvl+0xd1/0x138 [ 171.371437][ T5440] should_fail_ex.cold+0x5/0xa [ 171.376203][ T5440] ? io_issue_sqe+0x695/0x1250 [ 171.380981][ T5440] should_failslab+0x9/0x20 [ 171.385493][ T5440] __kmem_cache_alloc_node+0x5b/0x330 [ 171.390871][ T5440] ? ref_tracker_alloc+0x158/0x560 [ 171.396013][ T5440] kmalloc_trace+0x26/0x60 [ 171.400478][ T5440] ref_tracker_alloc+0x158/0x560 [ 171.405449][ T5440] ? __lock_acquire+0xbc3/0x56d0 [ 171.410390][ T5440] ? ref_tracker_free+0x6b0/0x6b0 [ 171.415479][ T5440] dst_init+0xe4/0x520 [ 171.419609][ T5440] dst_alloc+0x16f/0x1f0 [ 171.423890][ T5440] rt_dst_alloc+0x55/0x430 [ 171.428326][ T5440] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 171.434338][ T5440] ip_route_output_key_hash+0x18f/0x340 [ 171.439901][ T5440] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 171.446167][ T5440] dccp_v4_connect+0x7e1/0x1730 [ 171.451077][ T5440] __inet_stream_connect+0x69e/0xed0 [ 171.456432][ T5440] ? inet_listen+0x640/0x640 [ 171.461079][ T5440] ? mark_held_locks+0x9f/0xe0 [ 171.465847][ T5440] ? __local_bh_enable_ip+0xa4/0x130 [ 171.471151][ T5440] inet_stream_connect+0x57/0xa0 [ 171.476110][ T5440] ? __inet_stream_connect+0xed0/0xed0 [ 171.481585][ T5440] __sys_connect_file+0x153/0x1a0 [ 171.486625][ T5440] io_connect+0x3cc/0x720 [ 171.490972][ T5440] ? io_connect_prep+0x250/0x250 [ 171.495947][ T5440] ? receive_fd+0x110/0x110 [ 171.500497][ T5440] ? rcu_read_lock_sched_held+0x3e/0x70 [ 171.506082][ T5440] ? io_connect_prep+0x250/0x250 [ 171.511154][ T5440] io_issue_sqe+0x695/0x1250 [ 171.515760][ T5440] io_submit_sqes+0x96c/0x1e90 [ 171.520568][ T5440] __do_sys_io_uring_enter+0x103d/0x24e0 [ 171.526263][ T5440] ? io_submit_sqes+0x1e90/0x1e90 [ 171.531326][ T5440] ? ptrace_notify+0xfe/0x140 [ 171.536054][ T5440] ? lock_downgrade+0x6e0/0x6e0 [ 171.540943][ T5440] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.546165][ T5440] ? lockdep_hardirqs_on+0x7d/0x100 [ 171.551412][ T5440] ? _raw_spin_unlock_irq+0x2e/0x50 [ 171.556650][ T5440] ? ptrace_notify+0xfe/0x140 [ 171.561337][ T5440] do_syscall_64+0x39/0xb0 [ 171.565764][ T5440] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 171.571695][ T5440] RIP: 0033:0x7f607b0de549 [ 171.576210][ T5440] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 171.595851][ T5440] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 171.604272][ T5440] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 171.612251][ T5440] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 171.620235][ T5440] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [pid 5440] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5440] close(3) = 0 [pid 5440] close(4) = 0 [pid 5440] close(5) = 0 [pid 5440] close(6) = 0 [pid 5440] close(7) = 0 [pid 5440] close(8) = -1 EBADF (Bad file descriptor) [pid 5440] close(9) = -1 EBADF (Bad file descriptor) [pid 5440] close(10) = -1 EBADF (Bad file descriptor) [pid 5440] close(11) = -1 EBADF (Bad file descriptor) [pid 5440] close(12) = -1 EBADF (Bad file descriptor) [pid 5440] close(13) = -1 EBADF (Bad file descriptor) [pid 5440] close(14) = -1 EBADF (Bad file descriptor) [pid 5440] close(15) = -1 EBADF (Bad file descriptor) [pid 5440] close(16) = -1 EBADF (Bad file descriptor) [pid 5440] close(17) = -1 EBADF (Bad file descriptor) [pid 5440] close(18) = -1 EBADF (Bad file descriptor) [pid 5440] close(19) = -1 EBADF (Bad file descriptor) [pid 5440] close(20) = -1 EBADF (Bad file descriptor) [pid 5440] close(21) = -1 EBADF (Bad file descriptor) [pid 5440] close(22) = -1 EBADF (Bad file descriptor) [pid 5440] close(23) = -1 EBADF (Bad file descriptor) [pid 5440] close(24) = -1 EBADF (Bad file descriptor) [pid 5440] close(25) = -1 EBADF (Bad file descriptor) [pid 5440] close(26) = -1 EBADF (Bad file descriptor) [pid 5440] close(27) = -1 EBADF (Bad file descriptor) [pid 5440] close(28) = -1 EBADF (Bad file descriptor) [pid 5440] close(29) = -1 EBADF (Bad file descriptor) [pid 5440] exit_group(0) = ? [pid 5440] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 340 ./strace-static-x86_64: Process 5441 attached [pid 5441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5441] setpgid(0, 0) = 0 [pid 5441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5441] write(3, "1000", 4) = 4 [pid 5441] close(3) = 0 [pid 5441] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5441] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5441] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5441] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5441] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5441] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5441] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5441] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5441] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5441] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 171.628389][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 171.636465][ T5440] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 171.644473][ T5440] [pid 5441] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5441] write(7, "5", 1) = 1 [ 171.692163][ T5441] FAULT_INJECTION: forcing a failure. [ 171.692163][ T5441] name failslab, interval 1, probability 0, space 0, times 0 [ 171.705409][ T5441] CPU: 0 PID: 5441 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 171.715364][ T5441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 171.725462][ T5441] Call Trace: [ 171.728764][ T5441] [ 171.731708][ T5441] dump_stack_lvl+0xd1/0x138 [ 171.736318][ T5441] should_fail_ex.cold+0x5/0xa [ 171.741128][ T5441] ? io_issue_sqe+0x695/0x1250 [ 171.745925][ T5441] should_failslab+0x9/0x20 [ 171.750496][ T5441] __kmem_cache_alloc_node+0x5b/0x330 [ 171.755911][ T5441] ? ref_tracker_alloc+0x158/0x560 [ 171.761086][ T5441] kmalloc_trace+0x26/0x60 [ 171.765627][ T5441] ref_tracker_alloc+0x158/0x560 [ 171.770597][ T5441] ? __lock_acquire+0xbc3/0x56d0 [ 171.775563][ T5441] ? ref_tracker_free+0x6b0/0x6b0 [ 171.780645][ T5441] dst_init+0xe4/0x520 [ 171.784751][ T5441] dst_alloc+0x16f/0x1f0 [ 171.789033][ T5441] rt_dst_alloc+0x55/0x430 [ 171.793481][ T5441] ip_route_output_key_hash_rcu+0x899/0x2c20 [ 171.799503][ T5441] ip_route_output_key_hash+0x18f/0x340 [ 171.805080][ T5441] ? ip_route_output_key_hash_rcu+0x2c20/0x2c20 [ 171.811377][ T5441] dccp_v4_connect+0x7e1/0x1730 [ 171.816294][ T5441] __inet_stream_connect+0x69e/0xed0 [ 171.821624][ T5441] ? inet_listen+0x640/0x640 [ 171.826247][ T5441] ? mark_held_locks+0x9f/0xe0 [ 171.831036][ T5441] ? __local_bh_enable_ip+0xa4/0x130 [ 171.836350][ T5441] inet_stream_connect+0x57/0xa0 [ 171.841323][ T5441] ? __inet_stream_connect+0xed0/0xed0 [ 171.846819][ T5441] __sys_connect_file+0x153/0x1a0 [ 171.851872][ T5441] io_connect+0x3cc/0x720 [ 171.856237][ T5441] ? io_connect_prep+0x250/0x250 [ 171.861205][ T5441] ? receive_fd+0x110/0x110 [ 171.865754][ T5441] ? rcu_read_lock_sched_held+0x3e/0x70 [ 171.871321][ T5441] ? io_connect_prep+0x250/0x250 [ 171.876298][ T5441] io_issue_sqe+0x695/0x1250 [ 171.880923][ T5441] io_submit_sqes+0x96c/0x1e90 [ 171.885744][ T5441] __do_sys_io_uring_enter+0x103d/0x24e0 [ 171.891638][ T5441] ? io_submit_sqes+0x1e90/0x1e90 [ 171.896697][ T5441] ? ptrace_notify+0xfe/0x140 [ 171.901399][ T5441] ? lock_downgrade+0x6e0/0x6e0 [ 171.906279][ T5441] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.911505][ T5441] ? lockdep_hardirqs_on+0x7d/0x100 [ 171.916726][ T5441] ? _raw_spin_unlock_irq+0x2e/0x50 [ 171.921951][ T5441] ? ptrace_notify+0xfe/0x140 [ 171.926663][ T5441] do_syscall_64+0x39/0xb0 [ 171.931117][ T5441] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 171.937038][ T5441] RIP: 0033:0x7f607b0de549 [ 171.941474][ T5441] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 171.961111][ T5441] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 171.969551][ T5441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [ 171.977629][ T5441] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [pid 5441] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5441] close(3) = 0 [pid 5441] close(4) = 0 [pid 5441] close(5) = 0 [pid 5441] close(6) = 0 [pid 5441] close(7) = 0 [pid 5441] close(8) = -1 EBADF (Bad file descriptor) [pid 5441] close(9) = -1 EBADF (Bad file descriptor) [pid 5441] close(10) = -1 EBADF (Bad file descriptor) [pid 5441] close(11) = -1 EBADF (Bad file descriptor) [pid 5441] close(12) = -1 EBADF (Bad file descriptor) [pid 5441] close(13) = -1 EBADF (Bad file descriptor) [pid 5441] close(14) = -1 EBADF (Bad file descriptor) [pid 5441] close(15) = -1 EBADF (Bad file descriptor) [pid 5441] close(16) = -1 EBADF (Bad file descriptor) [pid 5441] close(17) = -1 EBADF (Bad file descriptor) [pid 5441] close(18) = -1 EBADF (Bad file descriptor) [pid 5441] close(19) = -1 EBADF (Bad file descriptor) [pid 5441] close(20) = -1 EBADF (Bad file descriptor) [pid 5441] close(21) = -1 EBADF (Bad file descriptor) [pid 5441] close(22) = -1 EBADF (Bad file descriptor) [pid 5441] close(23) = -1 EBADF (Bad file descriptor) [pid 5441] close(24) = -1 EBADF (Bad file descriptor) [pid 5441] close(25) = -1 EBADF (Bad file descriptor) [pid 5441] close(26) = -1 EBADF (Bad file descriptor) [pid 5441] close(27) = -1 EBADF (Bad file descriptor) [pid 5441] close(28) = -1 EBADF (Bad file descriptor) [pid 5441] close(29) = -1 EBADF (Bad file descriptor) [pid 5441] exit_group(0) = ? [pid 5441] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555eff5d0) = 341 ./strace-static-x86_64: Process 5442 attached [pid 5442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5442] setpgid(0, 0) = 0 [pid 5442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5442] write(3, "1000", 4) = 4 [pid 5442] close(3) = 0 [pid 5442] read(200, 0x7ffcab26a8d0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 5442] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3 [pid 5442] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20fff000 [pid 5442] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20ff3000 [pid 5442] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 4 [pid 5442] io_uring_enter(3, 17909, 0, 0, NULL, 4) = 1 [pid 5442] io_uring_setup(386, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=512, cq_entries=1024, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=16704}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 5 [pid 5442] mmap(0x20fff000, 18752, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0) = 0x20fff000 [pid 5442] mmap(0x20ff3000, 32768, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 5, 0x10000000) = 0x20ff3000 [pid 5442] socket(AF_INET, SOCK_DCCP, IPPROTO_IP) = 6 [ 171.985623][ T5441] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 171.993704][ T5441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 172.001693][ T5441] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 172.009710][ T5441] [pid 5442] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 5442] write(7, "5", 1) = 1 [ 172.056780][ T5442] FAULT_INJECTION: forcing a failure. [ 172.056780][ T5442] name failslab, interval 1, probability 0, space 0, times 0 [ 172.069648][ T5442] CPU: 0 PID: 5442 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 172.079722][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 172.089778][ T5442] Call Trace: [ 172.093059][ T5442] [ 172.095992][ T5442] dump_stack_lvl+0xd1/0x138 [ 172.100609][ T5442] should_fail_ex.cold+0x5/0xa [ 172.105400][ T5442] ? __inet_hash_connect+0x1197/0x1ba0 [ 172.110875][ T5442] should_failslab+0x9/0x20 [ 172.115404][ T5442] kmem_cache_alloc+0x5a/0x320 [ 172.120267][ T5442] __inet_hash_connect+0x1197/0x1ba0 [ 172.125596][ T5442] ? __inet_lookup_listener+0xb10/0xbf0 [ 172.131179][ T5442] ? inet_bhash2_addr_any_hashbucket+0x2f0/0x2f0 [ 172.137549][ T5442] dccp_v4_connect+0xb82/0x1730 [ 172.142453][ T5442] __inet_stream_connect+0x69e/0xed0 [ 172.147784][ T5442] ? inet_listen+0x640/0x640 [ 172.152408][ T5442] ? mark_held_locks+0x9f/0xe0 [ 172.157374][ T5442] ? __local_bh_enable_ip+0xa4/0x130 [ 172.162693][ T5442] inet_stream_connect+0x57/0xa0 [ 172.167669][ T5442] ? __inet_stream_connect+0xed0/0xed0 [ 172.173166][ T5442] __sys_connect_file+0x153/0x1a0 [ 172.178242][ T5442] io_connect+0x3cc/0x720 [ 172.182612][ T5442] ? io_connect_prep+0x250/0x250 [ 172.187583][ T5442] ? receive_fd+0x110/0x110 [ 172.192132][ T5442] ? rcu_read_lock_sched_held+0x3e/0x70 [ 172.197707][ T5442] ? io_connect_prep+0x250/0x250 [ 172.202685][ T5442] io_issue_sqe+0x695/0x1250 [ 172.207317][ T5442] io_submit_sqes+0x96c/0x1e90 [ 172.212139][ T5442] __do_sys_io_uring_enter+0x103d/0x24e0 [ 172.217813][ T5442] ? io_submit_sqes+0x1e90/0x1e90 [ 172.222873][ T5442] ? ptrace_notify+0xfe/0x140 [ 172.227575][ T5442] ? lock_downgrade+0x6e0/0x6e0 [ 172.232469][ T5442] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.237701][ T5442] ? lockdep_hardirqs_on+0x7d/0x100 [ 172.242925][ T5442] ? _raw_spin_unlock_irq+0x2e/0x50 [ 172.248157][ T5442] ? ptrace_notify+0xfe/0x140 [ 172.252865][ T5442] do_syscall_64+0x39/0xb0 [ 172.257316][ T5442] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 172.263233][ T5442] RIP: 0033:0x7f607b0de549 [ 172.267666][ T5442] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 172.287296][ T5442] RSP: 002b:00007ffcab26acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 172.295734][ T5442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f607b0de549 [pid 5442] io_uring_enter(5, 17909, 0, 0, NULL, 4) = 1 [pid 5442] close(3) = 0 [pid 5442] close(4) = 0 [pid 5442] close(5) = 0 [ 172.303723][ T5442] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000005 [ 172.311800][ T5442] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 172.319880][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 172.327877][ T5442] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 172.335894][ T5442] [ 172.347825][ T5442] ------------[ cut here ]------------ [ 172.353511][ T5442] WARNING: CPU: 1 PID: 5442 at net/ipv4/inet_connection_sock.c:1173 inet_csk_destroy_sock+0x2e7/0x450 [ 172.364537][ T5442] Modules linked in: [ 172.368461][ T5442] CPU: 1 PID: 5442 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 172.378414][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 172.388656][ T5442] RIP: 0010:inet_csk_destroy_sock+0x2e7/0x450 [ 172.395329][ T5442] Code: 41 5c 41 5d 41 5e e9 08 50 31 f9 e8 03 50 31 f9 48 89 ef e8 5b ca 70 ff 5b 5d 41 5c 41 5d 41 5e e9 ee 4f 31 f9 e8 e9 4f 31 f9 <0f> 0b e9 5c fe ff ff e8 dd 4f 31 f9 4c 89 e7 be 03 00 00 00 e8 60 [ 172.415014][ T5442] RSP: 0018:ffffc900049c7c58 EFLAGS: 00010293 [ 172.421151][ T5442] RAX: 0000000000000000 RBX: 000000000000d042 RCX: 0000000000000000 [ 172.429160][ T5442] RDX: ffff88802073ba80 RSI: ffffffff88505f97 RDI: ffff88802a37b9e0 [ 172.437209][ T5442] RBP: ffff88802a37b340 R08: 0000000000000003 R09: 0000000000000000 [ 172.445255][ T5442] R10: 000000000000d042 R11: 0000000000000000 R12: ffff88802a37b3a0 [ 172.453352][ T5442] R13: ffff88802a37b3d8 R14: ffff88802a37b4f8 R15: 0000000000000000 [ 172.461565][ T5442] FS: 0000555555eff300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 172.470602][ T5442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.477232][ T5442] CR2: 00007ffcab26aca8 CR3: 000000002a047000 CR4: 00000000003506e0 [ 172.485903][ T5442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.493930][ T5442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.501972][ T5442] Call Trace: [ 172.505272][ T5442] [ 172.508239][ T5442] dccp_close+0xa41/0xd60 [ 172.512671][ T5442] ? __sock_release+0x86/0x280 [ 172.517478][ T5442] ? dccp_recvmsg+0x9d0/0x9d0 [ 172.522249][ T5442] ? down_write+0x157/0x220 [ 172.526883][ T5442] ? ip_mc_drop_socket+0x1a/0x290 [ 172.532013][ T5442] ? locks_remove_file+0x2fb/0x5b0 [ 172.537185][ T5442] inet_release+0x132/0x270 [ 172.541823][ T5442] __sock_release+0xcd/0x280 [ 172.546465][ T5442] sock_close+0x1c/0x20 [ 172.550705][ T5442] __fput+0x27c/0xa90 [ 172.554746][ T5442] ? __sock_release+0x280/0x280 [ 172.559643][ T5442] task_work_run+0x16f/0x270 [ 172.564315][ T5442] ? task_work_cancel+0x30/0x30 [ 172.569213][ T5442] ptrace_notify+0x118/0x140 [ 172.573885][ T5442] syscall_exit_to_user_mode_prepare+0x129/0x290 [ 172.580314][ T5442] syscall_exit_to_user_mode+0xd/0x50 [ 172.585729][ T5442] do_syscall_64+0x46/0xb0 [ 172.590160][ T5442] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 172.596186][ T5442] RIP: 0033:0x7f607b09ff13 [ 172.600677][ T5442] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 172.620376][ T5442] RSP: 002b:00007ffcab26acc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 172.628839][ T5442] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f607b09ff13 [ 172.636933][ T5442] RDX: 0000000000000004 RSI: 00000000000045f5 RDI: 0000000000000006 [ 172.644986][ T5442] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 172.653043][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 172.661089][ T5442] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 172.669100][ T5442] [ 172.672179][ T5442] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.679482][ T5442] CPU: 1 PID: 5442 Comm: syz-executor192 Not tainted 6.2.0-rc2-next-20230105-syzkaller #0 [ 172.689391][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 172.699482][ T5442] Call Trace: [ 172.702777][ T5442] [ 172.705711][ T5442] dump_stack_lvl+0xd1/0x138 [ 172.710400][ T5442] panic+0x2cc/0x626 [ 172.714303][ T5442] ? panic_print_sys_info.part.0+0x110/0x110 [ 172.720317][ T5442] ? inet_csk_destroy_sock+0x2e7/0x450 [ 172.725822][ T5442] check_panic_on_warn.cold+0x19/0x35 [ 172.731247][ T5442] __warn+0xf2/0x1a0 [ 172.735175][ T5442] ? inet_csk_destroy_sock+0x2e7/0x450 [ 172.740651][ T5442] report_bug+0x1c0/0x210 [ 172.745022][ T5442] handle_bug+0x3c/0x70 [ 172.749208][ T5442] exc_invalid_op+0x18/0x50 [ 172.753740][ T5442] asm_exc_invalid_op+0x1a/0x20 [ 172.758614][ T5442] RIP: 0010:inet_csk_destroy_sock+0x2e7/0x450 [ 172.764706][ T5442] Code: 41 5c 41 5d 41 5e e9 08 50 31 f9 e8 03 50 31 f9 48 89 ef e8 5b ca 70 ff 5b 5d 41 5c 41 5d 41 5e e9 ee 4f 31 f9 e8 e9 4f 31 f9 <0f> 0b e9 5c fe ff ff e8 dd 4f 31 f9 4c 89 e7 be 03 00 00 00 e8 60 [ 172.784342][ T5442] RSP: 0018:ffffc900049c7c58 EFLAGS: 00010293 [ 172.790435][ T5442] RAX: 0000000000000000 RBX: 000000000000d042 RCX: 0000000000000000 [ 172.798423][ T5442] RDX: ffff88802073ba80 RSI: ffffffff88505f97 RDI: ffff88802a37b9e0 [ 172.806409][ T5442] RBP: ffff88802a37b340 R08: 0000000000000003 R09: 0000000000000000 [ 172.814394][ T5442] R10: 000000000000d042 R11: 0000000000000000 R12: ffff88802a37b3a0 [ 172.822387][ T5442] R13: ffff88802a37b3d8 R14: ffff88802a37b4f8 R15: 0000000000000000 [ 172.830391][ T5442] ? inet_csk_destroy_sock+0x2e7/0x450 [ 172.835887][ T5442] ? inet_csk_destroy_sock+0x2e7/0x450 [ 172.841376][ T5442] dccp_close+0xa41/0xd60 [ 172.845741][ T5442] ? __sock_release+0x86/0x280 [ 172.850552][ T5442] ? dccp_recvmsg+0x9d0/0x9d0 [ 172.855453][ T5442] ? down_write+0x157/0x220 [ 172.859994][ T5442] ? ip_mc_drop_socket+0x1a/0x290 [ 172.865047][ T5442] ? locks_remove_file+0x2fb/0x5b0 [ 172.870197][ T5442] inet_release+0x132/0x270 [ 172.874738][ T5442] __sock_release+0xcd/0x280 [ 172.879365][ T5442] sock_close+0x1c/0x20 [ 172.883554][ T5442] __fput+0x27c/0xa90 [ 172.887561][ T5442] ? __sock_release+0x280/0x280 [ 172.892450][ T5442] task_work_run+0x16f/0x270 [ 172.897075][ T5442] ? task_work_cancel+0x30/0x30 [ 172.902053][ T5442] ptrace_notify+0x118/0x140 [ 172.906667][ T5442] syscall_exit_to_user_mode_prepare+0x129/0x290 [ 172.913023][ T5442] syscall_exit_to_user_mode+0xd/0x50 [ 172.918425][ T5442] do_syscall_64+0x46/0xb0 [ 172.922877][ T5442] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 172.928797][ T5442] RIP: 0033:0x7f607b09ff13 [ 172.933245][ T5442] Code: c7 c2 c0 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 [ 172.952880][ T5442] RSP: 002b:00007ffcab26acc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 172.961320][ T5442] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f607b09ff13 [ 172.969308][ T5442] RDX: 0000000000000004 RSI: 00000000000045f5 RDI: 0000000000000006 [ 172.977300][ T5442] RBP: 00007ffcab26ace0 R08: 0000000000000000 R09: 0000000000000004 [ 172.985291][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 172.993291][ T5442] R13: 00007ffcab26ad00 R14: 00007ffcab26acf0 R15: 00007ffcab26acd4 [ 173.001302][ T5442] [ 173.004488][ T5442] Kernel Offset: disabled [ 173.008914][ T5442] Rebooting in 86400 seconds..